last executing test programs: 6.289480111s ago: executing program 1 (id=11093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4040880) recvmmsg$unix(r1, &(0x7f00000062c0), 0x0, 0x2001, 0x0) 6.151259012s ago: executing program 1 (id=11094): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) write(r0, &(0x7f00000000c0)="1d8c354508b3bee892258436cf328665e0aaffe0a2", 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) write(r0, &(0x7f00000000c0)="1d8c354508b3bee892258436cf328665e0aaffe0a2", 0x15) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) (async) 6.110877305s ago: executing program 1 (id=11096): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x7c}}, 0x810) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r15) (async) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r16, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4010084) (async, rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x20004000) (async, rerun: 32) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000000000000000030000000000"], 0x1c}}, 0x0) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r18, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.04861642s ago: executing program 1 (id=11097): r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r0, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x59) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000500)="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", 0x1b0) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfce) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44080) 5.869793532s ago: executing program 1 (id=11099): socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40), 0x0, 0x0, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r5, 0x80000000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0xfffff000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) (async) close(0x4) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 5.613129731s ago: executing program 1 (id=11102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) (async) 3.413961599s ago: executing program 0 (id=11121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829a", 0x6}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) socket$key(0xf, 0x3, 0x2) 3.064488369s ago: executing program 2 (id=11126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffc591ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac0714aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000a0000004000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmmsg$inet(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.848677042s ago: executing program 3 (id=11128): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 2.789599928s ago: executing program 2 (id=11129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x4, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x80) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x1}, 0x10) ioctl(r10, 0x8b2a, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0xfffffffffffffe7a, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r12], 0x98}, 0x1, 0x0, 0x0, 0x24000850}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) 2.45979588s ago: executing program 4 (id=11132): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x5, 0x7}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}]}, 0x34}}, 0x24004000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="37531624d04c532fa0c9149160824de48b5a71740b57fcf0b7f02b209c33688a2c1edfee19ec63b938264eb04258e4e0c0ee08e030e665d18c228925f80b074f3ded613e5fc2fd5d470e35c2fcf7f74b95b09e21ce1cca20557a731d7e8bda34a65f14693914d164f80c90d3c64be3dfc653353d", 0x74}, {&(0x7f00000002c0)="6790348c0132982349051cd567b7871738680dffdadab1c6e54bed6aa74e4aa8db61b8c8d422350303d1b59d33fad4b24a2895c315c82d96", 0x38}, {&(0x7f0000000300)="a4e565291f37ce479f615c1db0179e20ffc17b", 0x13}, {&(0x7f0000000380)="4a14ec2bdcefa8089372b14360f99476aedb09b822312c65", 0x18}, {&(0x7f00000003c0)="9243a2b6be4f4c78289f369fa1f8", 0xe}, {&(0x7f0000000400)="136cb06203cd0cf10fc2d5aaad7728994999871416561566c00c33b9238f2fac0966ae3ce3303840a339be809a82ef7a095ad903c5e2e997c7564767ba9d37aac6fa4e1e067242f87492dc8a6949071f631cc78bfaca2dce0f0ada983d271b7033e8881a858f94e112206eeda014bece5be6646a4a10f719b5c71295c998e6cf5c36d8ba8916af95c803f0", 0x8b}, {&(0x7f00000004c0)="42b5430ad55af7e4f6c50127bd3f5d9f4f1fc8b5bbb4e533d7f625bb51143f2162993b3617ff60d558c9580f3721ff12e0a7281241f6a777c3afc0fb9ebec46693f5091b13f53eb96bacb0cbf8641707331c24ea3fe9bfdd74fd8ec7e43107d63c2b7760ea821c0c149025b11d88be27a6e4dfab16b537db13d9fd9584a948b41cefbd99cafa2bb1e2fca9a9a749520da79b12253e7e8265f088add905be7b7473eed983fe2e0954d7963103d4fcc806836972197fb01868b5", 0xb9}], 0x7}}, {{&(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="9f6673d1eca34d2e4de25f1126b8b722da807f11ec534cecbc871729e49a21f4646005fa481189c92657d61c5a7631944d1d523eb3a98700bcbff011e1d8c6f1edade3b04add9a739ca9dc627d800aefd10877fb2dbfdeaee2c61303c21bf5d4ee1d07e7c5dd4330b605566d79d3f3d6543343dd81147b19bbf9773a03384a8afba3da6511faa45c364283a429cbba9d45d314fd81ed6eeaa33b22a7f6bfb84eae54ac2f1f717e8a76203c4b3be4e137c628b4ef3d5b5aa1b891f53e4bfaf0db0793f69dbdec9a8219ddd19942ca123f1959c0456952cf2254", 0xd9}, {&(0x7f0000000740)="926e91cd7756e198312cb8d4e86dfaad09130cfac85d69283bd798c60b28d7cefd909055dcbfdd3a097b04915966bbda0d5e67599c75112048153d97c7d4f676683c1f782f0e39a3a11b0055526bc3fa591cdbc42d22e09f7c388b9224005b9bfe430df8ea94850cdcea534dfb0adef68323d03a84ca374dfa51fdfd906334d62cab4f19faaba1b4", 0x88}], 0x2, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffe00}}], 0x70}}, {{&(0x7f0000000900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000940)="95ef80c97bcbda30156369967cabdfbf85fc36e1220a4bff68f0b13c92ef4ec69688aeb1e9d7262094ef0411438605808f9aba284bdb1d6f3a4694b2be70d6b80a3e", 0x42}, {&(0x7f00000009c0)="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", 0xfb}, {&(0x7f0000000ac0)="218f3423ca4b6a9f9ce120816ed8f56879d2ee950c4a6d9f0580b789d24dc207a784d4fe53782652ad755b9d582f70fd3d8c7556770f9e871b99a8b19d11b6e3364593f80adf6a902a205886a038fef50ec7507ef805856072ecf1a6341e688b19c543ce3922181239b8b1def6e28d69138798e4c166d8a2a334a025cfaca6b0da1a1d1cb8357408eafdf0e5f7144c181ed3208a91acd8373c8d155a42d14c3b14cfe389d981975a7b860f4fd84be331cdd2e9842f02967fbc345ff217ffaa0d686c63b1f7769a61b21d1a002e0ca9ef", 0xd0}, {&(0x7f0000000bc0)="35fd0c6147f8417e20860d37e2ea0d005bc2d4d1814efd1afd1e5c9d3dbbb76da98478b20a8a506d0f89ddb1406c3d588430ac89457c4be504c9a9cda06cb71b77e816766433ed5563175e58bee444ac1eaa70b4031bb05f760ecf83a429b1d0d367432963e49dc42234e0dd22e715b396eb6613afcba29e294037ccde2e1163023250741c4f9af71091df20e8f14de189cee00e7af97029d5feab0272cf61862e331c409b981ece8b11f80e73a4179262", 0xb1}, {&(0x7f0000000c80)="22ca91f7984d5678e533eb527eef511816f86e850d39378b392155b57778f2c5da91790037b060fbeb804d03ad817ad8f7935e798d89144131e1c5d9246467e63d68c729c435e530d5b038e58647f7996fe9404769c9358465fa326d29380717a6421436d8f121f9d66a00547bca6ffea8e25912c98a42", 0x77}], 0x5, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x30}}], 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000020000000000000e0500000001000000002e2e5f2e30"], 0x0, 0x33, 0x0, 0x1, 0x3}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x5, 0x7}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}]}, 0x34}}, 0x24004000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="37531624d04c532fa0c9149160824de48b5a71740b57fcf0b7f02b209c33688a2c1edfee19ec63b938264eb04258e4e0c0ee08e030e665d18c228925f80b074f3ded613e5fc2fd5d470e35c2fcf7f74b95b09e21ce1cca20557a731d7e8bda34a65f14693914d164f80c90d3c64be3dfc653353d", 0x74}, {&(0x7f00000002c0)="6790348c0132982349051cd567b7871738680dffdadab1c6e54bed6aa74e4aa8db61b8c8d422350303d1b59d33fad4b24a2895c315c82d96", 0x38}, {&(0x7f0000000300)="a4e565291f37ce479f615c1db0179e20ffc17b", 0x13}, {&(0x7f0000000380)="4a14ec2bdcefa8089372b14360f99476aedb09b822312c65", 0x18}, {&(0x7f00000003c0)="9243a2b6be4f4c78289f369fa1f8", 0xe}, {&(0x7f0000000400)="136cb06203cd0cf10fc2d5aaad7728994999871416561566c00c33b9238f2fac0966ae3ce3303840a339be809a82ef7a095ad903c5e2e997c7564767ba9d37aac6fa4e1e067242f87492dc8a6949071f631cc78bfaca2dce0f0ada983d271b7033e8881a858f94e112206eeda014bece5be6646a4a10f719b5c71295c998e6cf5c36d8ba8916af95c803f0", 0x8b}, {&(0x7f00000004c0)="42b5430ad55af7e4f6c50127bd3f5d9f4f1fc8b5bbb4e533d7f625bb51143f2162993b3617ff60d558c9580f3721ff12e0a7281241f6a777c3afc0fb9ebec46693f5091b13f53eb96bacb0cbf8641707331c24ea3fe9bfdd74fd8ec7e43107d63c2b7760ea821c0c149025b11d88be27a6e4dfab16b537db13d9fd9584a948b41cefbd99cafa2bb1e2fca9a9a749520da79b12253e7e8265f088add905be7b7473eed983fe2e0954d7963103d4fcc806836972197fb01868b5", 0xb9}], 0x7}}, {{&(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="9f6673d1eca34d2e4de25f1126b8b722da807f11ec534cecbc871729e49a21f4646005fa481189c92657d61c5a7631944d1d523eb3a98700bcbff011e1d8c6f1edade3b04add9a739ca9dc627d800aefd10877fb2dbfdeaee2c61303c21bf5d4ee1d07e7c5dd4330b605566d79d3f3d6543343dd81147b19bbf9773a03384a8afba3da6511faa45c364283a429cbba9d45d314fd81ed6eeaa33b22a7f6bfb84eae54ac2f1f717e8a76203c4b3be4e137c628b4ef3d5b5aa1b891f53e4bfaf0db0793f69dbdec9a8219ddd19942ca123f1959c0456952cf2254", 0xd9}, {&(0x7f0000000740)="926e91cd7756e198312cb8d4e86dfaad09130cfac85d69283bd798c60b28d7cefd909055dcbfdd3a097b04915966bbda0d5e67599c75112048153d97c7d4f676683c1f782f0e39a3a11b0055526bc3fa591cdbc42d22e09f7c388b9224005b9bfe430df8ea94850cdcea534dfb0adef68323d03a84ca374dfa51fdfd906334d62cab4f19faaba1b4", 0x88}], 0x2, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffe00}}], 0x70}}, {{&(0x7f0000000900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000940)="95ef80c97bcbda30156369967cabdfbf85fc36e1220a4bff68f0b13c92ef4ec69688aeb1e9d7262094ef0411438605808f9aba284bdb1d6f3a4694b2be70d6b80a3e", 0x42}, {&(0x7f00000009c0)="3e19384fe709f498fe3ce35776e4094347c1eb64e21e8285e416da32022be53a030bca1b42114a27edc3f72786cc3f83103861d298e2a2ef83871c544077ec0836e257ed611901593d7321561d299e443834caf8a1566038e2f27e393cf64daff7063bdf37e4a6e80bf46542ce302ba2cf7923960023d5878d294ec90778bc0a04d77703090a44fa1bf559d09beb9e8816477a6fac2ad7600b15ae8d2345076254497afee0700a82b212be94752b45b4b817578bf6167cc19663a7d5c4aa9b9718ebf508868f91d2c167f31e3a68d1cfd5add60fad00987d556c87620dd14850ddeed441ad4a381d4877e4121d7b15db7b844ac51b2c9989afce69", 0xfb}, {&(0x7f0000000ac0)="218f3423ca4b6a9f9ce120816ed8f56879d2ee950c4a6d9f0580b789d24dc207a784d4fe53782652ad755b9d582f70fd3d8c7556770f9e871b99a8b19d11b6e3364593f80adf6a902a205886a038fef50ec7507ef805856072ecf1a6341e688b19c543ce3922181239b8b1def6e28d69138798e4c166d8a2a334a025cfaca6b0da1a1d1cb8357408eafdf0e5f7144c181ed3208a91acd8373c8d155a42d14c3b14cfe389d981975a7b860f4fd84be331cdd2e9842f02967fbc345ff217ffaa0d686c63b1f7769a61b21d1a002e0ca9ef", 0xd0}, {&(0x7f0000000bc0)="35fd0c6147f8417e20860d37e2ea0d005bc2d4d1814efd1afd1e5c9d3dbbb76da98478b20a8a506d0f89ddb1406c3d588430ac89457c4be504c9a9cda06cb71b77e816766433ed5563175e58bee444ac1eaa70b4031bb05f760ecf83a429b1d0d367432963e49dc42234e0dd22e715b396eb6613afcba29e294037ccde2e1163023250741c4f9af71091df20e8f14de189cee00e7af97029d5feab0272cf61862e331c409b981ece8b11f80e73a4179262", 0xb1}, {&(0x7f0000000c80)="22ca91f7984d5678e533eb527eef511816f86e850d39378b392155b57778f2c5da91790037b060fbeb804d03ad817ad8f7935e798d89144131e1c5d9246467e63d68c729c435e530d5b038e58647f7996fe9404769c9358465fa326d29380717a6421436d8f121f9d66a00547bca6ffea8e25912c98a42", 0x77}], 0x5, &(0x7f0000000d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x30}}], 0x3, 0x10) (async) 2.383741193s ago: executing program 3 (id=11133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb00, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6011}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x8000, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000300)=')\x00', 0x2580, &(0x7f0000000340)={@_ha_fsid={[0x3]}, {0x66, 0x1a39, 0x6, 0x8001}}, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x8000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcfbc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x23f39439}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}]}, 0xc4}}, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r12, 0x801c582d, &(0x7f0000000600)) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r13, 0xf507, 0x0) socket$inet6(0xa, 0x6, 0x8) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r14, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x38}}, 0x40) getsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast}, &(0x7f0000000a00)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x14, &(0x7f0000000800)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x1, 0x5, 0x2, 0x6, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x68f}], &(0x7f00000008c0)='syzkaller\x00', 0x1, 0x89, &(0x7f0000000900)=""/137, 0x41100, 0x2, '\x00', r15, @fallback=0x2f, r10, 0x8, &(0x7f0000000a40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x3, 0x7}, 0x10, r16, r7, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) shutdown(r10, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000d40)={r8, &(0x7f0000000c40)='-]($@\x00', 0x20040, &(0x7f0000000c80)={@_ha_fsid={[0x10, 0x8]}, {0x101, 0x200, 0x714aab9c, 0x72}}, 0x6, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x7}) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) sendmsg$NL80211_CMD_SET_PMK(r17, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r18, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f9b6788982103ec0a4394cb34ee44881"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b63ddf6310529d52a39cce7379e0275e"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4040001) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r7) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r19, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x70}}, 0x8000) 2.378037401s ago: executing program 0 (id=11134): syz_emit_ethernet(0xca, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000111414aa00000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f00e0000001ffffffffffffffff444c0001ac1e00010000000000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000ac1e000100000000ff1b000001000000ffffeaff00000000441400"/202], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$alg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, 0x0, 0x200008d0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r2}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)={0x94, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x446ef23d}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000000}, 0x200008c0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000003c0)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f00000008c0)="3cf92dd96ef44ac20bf0b573497fda93255f510589b94edf52d738dc16a20e535b9cc2fac1f24ecd9b748d4d1ee22c38a5f1cb6a859f142c366b4f3a5010bec87adef4ed82e62b2ecde4105ef0a65eafb0e2a756ddefab42be7067a160220119a321877f63578791b7e994c3ec5b4aaaecfc82b0b14ff48e2cf242197ae9e2b1d169367ffa5429ea5708af28c36429d28443cf7b765f34c649a8ce95d3c24519fb04afd90b44c89b88400af877ce010ede56415db9eb73", &(0x7f0000000a40)=""/140, &(0x7f0000000b00)="42e923e2621b24098ae41e0b93cb4fef0c33de06cbb3b3cbc65809fd55e031b59f1bb88847daedfe639b99e90a54a70845d22560c6402591f5621a2c71f6ca84077c96de21607f6db3b53504ac8969ce6d3045919c3b575868e7a23afdf7770ba19437fc99a29afe427463b6a889ff1b271437993809d70c9efdf3472c2fa296812667", &(0x7f0000000180)="b726c9b9bfde850420d7cc747edf47c72ccd2a61cfc39e188a15b85343689098dee532939f4584e6314e02cefb29fe412ec35e", 0x5a9205da, r7, 0x4}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) 2.255193053s ago: executing program 4 (id=11135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2c, 0x800, 0x3) connect$packet(r1, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x8024) socket$inet_udp(0x2, 0x2, 0x0) 2.067010304s ago: executing program 4 (id=11136): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa3000bb00102b00fc020000000000000000000000000000fe8000000000000000000000000000aa06000329670000000000000000089078"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad3c500c42048e63f40b9e42f03d65a9978e588a531b4b9d2b042743ae4ea670d5c951d3c0cea7cab3fecbcdcdce54ed2a39ecf749bd5532729a13b68b76ea359fabbc09fd02a11577dd91d007b8847453c67181c937f4d940afbd150502cdda3a39c18e272db5b7e4c655ffe7e04fdbf0b86405a97348cf56fb9971e989f30d1f878aaae6d121df1f7dc568d4e9ebed2853127c091ce5f7442eb579a3f947d6221de2173138dc1ce79ee1fae287bf56fc8e2d3e3f6e0d92df7e7f82bc3b736cd5e4d9bbf88f3"], 0xa0}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x2, 0x2400c0a2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x6c, &(0x7f0000000340)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xfd, 0x0}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x1000009, @private1, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e, 0x10}]}, 0x38}}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="02", 0x1}], 0x1, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x8, 0x0, 0xa73f, 0xd7, 0x7, 0x7f, r9}}], 0x30, 0x4002000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f00000000c0)='&!#@\xc7{/:-%}\xa6\x00', 0x281, &(0x7f0000000100)={@align=0x2, {0x5, 0x2, 0x8, 0x6}}, 0x5d83, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xc}) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) listen(r1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) 2.066419143s ago: executing program 0 (id=11137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.950942423s ago: executing program 3 (id=11138): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.70414148s ago: executing program 2 (id=11139): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffdc9, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x44044050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) 1.558954004s ago: executing program 3 (id=11140): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000340)={{0x0, 0x3, 0x3ff, 0x8, 0x5, 0x3, 0x100000001, 0x4b9, 0x7ce, 0x1, 0x1, 0x1, 0x6, 0x6, 0x8000000000000000}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001340)={r2, 0xd0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.557163632s ago: executing program 4 (id=11141): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.46353945s ago: executing program 0 (id=11142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) 1.418514724s ago: executing program 4 (id=11143): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_MPLS={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x6c7e}, {0x8, 0x5, 0x0, 0x0, 0x6}, {0x8, 0x17, 0x0, 0x0, 0xeee}, {0x8, 0x5, 0x0, 0x0, 0x4}, {0x8, 0x1c, 0x0, 0x0, 0x1000}, {0x8, 0x1f, 0x0, 0x0, 0x80000000}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0xfe}}]}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x0, 0x0, 0xe58}, {0x8, 0x11, 0x0, 0x0, 0x5}, {0x8, 0x13, 0x0, 0x0, 0x6}, {0x8, 0x8, 0x0, 0x0, 0x4}, {0x8, 0x1d, 0x0, 0x0, 0x8}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x60}, {0x8, 0x10, 0x0, 0x0, 0x2}]}}, @AF_MPLS={0x4}]}]}, 0x120}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x120, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_MPLS={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x6c7e}, {0x8, 0x5, 0x0, 0x0, 0x6}, {0x8, 0x17, 0x0, 0x0, 0xeee}, {0x8, 0x5, 0x0, 0x0, 0x4}, {0x8, 0x1c, 0x0, 0x0, 0x1000}, {0x8, 0x1f, 0x0, 0x0, 0x80000000}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0xfe}}]}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x0, 0x0, 0xe58}, {0x8, 0x11, 0x0, 0x0, 0x5}, {0x8, 0x13, 0x0, 0x0, 0x6}, {0x8, 0x8, 0x0, 0x0, 0x4}, {0x8, 0x1d, 0x0, 0x0, 0x8}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x60}, {0x8, 0x10, 0x0, 0x0, 0x2}]}}, @AF_MPLS={0x4}]}]}, 0x120}, 0x1, 0xba01}, 0x0) (async) 1.318788821s ago: executing program 3 (id=11144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x2000005, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x7, 0x2, 0x80000001, 0x400, 0x800, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x5, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x3, 0x9, 0xa, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffffa, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x2, 0x8, 0x7, 0x1, 0xffffffff, 0x1, 0x7, 0x7fffffff, 0x4, 0xe, 0x8000, 0x6, 0x45c, 0x80, 0x3, 0xae, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xb, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x6, 0x4, 0x7, 0x485e, 0xa89, 0x0, 0x3, 0x7, 0x7, 0x101, 0x2d5421e5, 0x67ccdc5e, 0x10000, 0xffffffff, 0xa, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0xffffffff, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x5, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x5, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x0, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.287968179s ago: executing program 2 (id=11145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd4be0ffff00124000632c77fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r3, 0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r4, @ANYBLOB="46000600000000002400128009000100626f6e870000000f00000000000000000200000005000e0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r5, 0x29, 0x38, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) 414.964571ms ago: executing program 0 (id=11146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x881) 339.652086ms ago: executing program 4 (id=11147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x31082ea00f268b33, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8000f28, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x0, 0x36, 0x0, 0x1, 0x10}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 323.07654ms ago: executing program 2 (id=11148): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0xc, r4}) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="00f0ffffffffffff0200000000000000000000d42a186d2840001fc42446d6835ab1976534206cade39bb7dd2812a81c74fc5252fd755d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r11, 0x6, 0x29, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r10, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r9, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r9, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r9, &(0x7f00000008c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)=r8}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r14}, &(0x7f0000000a00), &(0x7f0000000a40)=r13}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r14, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r13}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r12, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000540)=r8}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x7, 0x0, r15, 0x8, '\x00', 0x0, r1, 0x4, 0x2, 0x4}, 0x50) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x7, 0x0, r15, 0x8, '\x00', 0x0, r1, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x577127cb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x0, r1, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r9], &(0x7f0000000940)=[{0x0, 0x5, 0x8, 0x8}, {0x0, 0x5, 0xe, 0x2}, {0x1, 0x9, 0x0, 0xa}, {0x3, 0x1, 0x7, 0x3}, {0x0, 0x2, 0x7, 0x3}, {0x0, 0x5, 0x7, 0x4}, {0x1, 0x3, 0x6, 0xc}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x577127cb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x0, r1, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r9], &(0x7f0000000940)=[{0x0, 0x5, 0x8, 0x8}, {0x0, 0x5, 0xe, 0x2}, {0x1, 0x9, 0x0, 0xa}, {0x3, 0x1, 0x7, 0x3}, {0x0, 0x2, 0x7, 0x3}, {0x0, 0x5, 0x7, 0x4}, {0x1, 0x3, 0x6, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="1444fcfffcffffff182a0000", @ANYRES32=r12, @ANYBLOB="000000000800000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008510000001000000000c1812000063c1d61d3a006b070f185380112aece0aac5a71947bc887a561166ee15c5612f4a0e47b281922b95c7ddd452627373e37796", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004470500ff07000018160000", @ANYRES32=r7, @ANYBLOB="000000000000000085200000030000002562300010000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="1444fcfffcffffff182a0000", @ANYRES32=r12, @ANYBLOB="000000000800000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008510000001000000000c1812000063c1d61d3a006b070f185380112aece0aac5a71947bc887a561166ee15c5612f4a0e47b281922b95c7ddd452627373e37796", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004470500ff07000018160000", @ANYRES32=r7, @ANYBLOB="000000000000000085200000030000002562300010000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 231.861946ms ago: executing program 0 (id=11149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@dellink={0x4c, 0x11, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10141, 0x210}, [@IFLA_EVENT={0x8, 0x2c, 0x1000}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}]}, 0x4c}}, 0x24008044) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000040)="3645c2c93f357b47", 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6bc, 0x10}, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r9, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010100}, 0xc) getsockopt$inet_buf(r11, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 14.809134ms ago: executing program 2 (id=11150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="a38ffd2547104bee0a2ae3b719d5b1c1f3b3f90f6cb382db78e044b43d073177"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r10, r12, 0x25, 0x0, @void}, 0x10) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4014, r11}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r14, &(0x7f0000000300)="7b2cecdb14f3d9d4006f808547f6f77ad7544cfb36d25c4a48b7f675926e1f486ae4be071b721c00ca1be76ea3afc8c4c844a8d28cf2ef4e7609d5", &(0x7f0000000680)=""/192}, 0x20) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x40008000, {0x0, 0x0, 0x0, r18, {0x0, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) 0s ago: executing program 3 (id=11151): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) (async) kernel console output (not intermixed with test programs): 27.533409][ T6781] netlink: 'syz.1.9003': attribute type 33 has an invalid length. [ 827.548333][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9001'. [ 827.618609][ T6781] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 827.692219][ T6781] bond3 (unregistering): Released all slaves [ 827.755912][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9001'. [ 827.773530][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9001'. [ 827.945764][ T6788] wg1 speed is unknown, defaulting to 1000 [ 828.087793][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9005'. [ 828.285466][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.496498][ T6816] netlink: 'syz.2.9011': attribute type 7 has an invalid length. [ 828.505208][ T6816] netlink: 'syz.2.9011': attribute type 4 has an invalid length. [ 828.549997][ T6816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.108524][ T6838] veth0_to_team: entered promiscuous mode [ 829.132483][ T6838] veth0_to_team: entered allmulticast mode [ 829.164736][ T6844] netlink: 'syz.1.9020': attribute type 14 has an invalid length. [ 829.212761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.733412][ T6869] netlink: 'syz.1.9032': attribute type 1 has an invalid length. [ 829.772264][ T6869] bond3: entered promiscuous mode [ 829.778379][ T6869] bond3: entered allmulticast mode [ 829.785211][ T6869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.809945][ T6875] macvlan2: entered promiscuous mode [ 829.823746][ T6875] macvlan2: entered allmulticast mode [ 829.831350][ T6875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 830.807566][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 830.827884][ T6913] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 831.241714][ T6955] openvswitch: netlink: IP tunnel dst address not specified [ 831.314678][ T6958] __nla_validate_parse: 14 callbacks suppressed [ 831.314699][ T6958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9058'. [ 831.411036][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9063'. [ 831.422684][ T6962] vlan3: entered allmulticast mode [ 831.427857][ T6962] bridge_slave_0: entered allmulticast mode [ 831.449290][ T6969] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9059'. [ 831.458949][ T6969] openvswitch: netlink: Flow key attr not present in new flow. [ 831.460236][ T6970] netlink: 'syz.3.9062': attribute type 16 has an invalid length. [ 831.473300][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9059'. [ 831.492970][ T6970] netlink: 'syz.3.9062': attribute type 17 has an invalid length. [ 831.519716][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9060'. [ 831.552338][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9060'. [ 831.611749][ T6970] ip_vti0: left promiscuous mode [ 831.687375][ T6970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.765562][ T6985] xt_limit: Overflow, try lower: 271964/0 [ 831.819829][ T6991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9068'. [ 831.830527][ T6991] netlink: 192 bytes leftover after parsing attributes in process `syz.4.9068'. [ 831.909369][ T6993] netlink: 'syz.3.9069': attribute type 17 has an invalid length. [ 831.967841][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9070'. [ 832.321537][ T7017] syzkaller0: entered promiscuous mode [ 832.328919][ T7017] syzkaller0: entered allmulticast mode [ 832.422882][ T7023] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9079'. [ 832.661090][ T7048] netlink: 'syz.2.9088': attribute type 11 has an invalid length. [ 832.673400][ T7048] netlink: 'syz.2.9088': attribute type 11 has an invalid length. [ 832.682078][ T7048] openvswitch: netlink: IP tunnel dst address not specified [ 833.504380][ T7087] wg1 speed is unknown, defaulting to 1000 [ 833.642265][ T7101] sock: sock_timestamping_bind_phc: sock not bind to device [ 833.666906][ T7100] block nbd10: Unsupported socket: should be TCP or UNIX. [ 833.873499][ T7116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 834.030612][ T7117] IPv6: sit1: Disabled Multicast RS [ 834.054072][ T7117] sit1: entered allmulticast mode [ 834.160706][ T7119] IPv6: sit1: Disabled Multicast RS [ 834.175724][ T7119] sit1: entered allmulticast mode [ 834.295911][ T7137] syzkaller0: entered promiscuous mode [ 834.301552][ T7137] syzkaller0: entered allmulticast mode [ 836.102707][ T7135] wg1 speed is unknown, defaulting to 1000 [ 836.654482][ T7181] bridge0: port 3(ipvlan2) entered blocking state [ 836.661420][ T7181] bridge0: port 3(ipvlan2) entered disabled state [ 836.668431][ T7181] ipvlan2: entered allmulticast mode [ 836.693351][ T7181] veth0_vlan: entered allmulticast mode [ 836.701496][ T7181] ipvlan2: left allmulticast mode [ 836.706742][ T7181] veth0_vlan: left allmulticast mode [ 837.035856][ T7214] syzkaller1: entered promiscuous mode [ 837.041486][ T7214] syzkaller1: entered allmulticast mode [ 839.833926][ T7200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.051665][ T7243] netlink: 'syz.1.9138': attribute type 15 has an invalid length. [ 840.067544][ T7241] netlink: 'syz.3.9140': attribute type 1 has an invalid length. [ 840.100348][ T7243] __nla_validate_parse: 12 callbacks suppressed [ 840.100368][ T7243] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.9138'. [ 840.119089][ T7239] netlink: 'syz.2.9139': attribute type 83 has an invalid length. [ 840.445743][ T7254] bond5: invalid ARP target 0.0.0.0 specified for addition [ 840.495453][ T7254] bond5: option arp_ip_target: invalid value (0) [ 840.517130][ T7254] bond5 (unregistering): Released all slaves [ 840.759187][ T7271] netlink: 'syz.1.9152': attribute type 1 has an invalid length. [ 840.778156][ T7268] syzkaller1: entered promiscuous mode [ 840.795868][ T7268] syzkaller1: entered allmulticast mode [ 840.804325][ T7271] netlink: 'syz.1.9152': attribute type 1 has an invalid length. [ 840.823498][ T7268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 841.236678][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9155'. [ 841.246618][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9155'. [ 841.313076][ T7287] xt_nfacct: accounting object `syz1' does not exist [ 841.801473][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9162'. [ 841.896066][ T7310] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9164'. [ 841.926833][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9164'. [ 841.978182][ T7310] openvswitch: netlink: Flow key attr not present in new flow. [ 842.008221][ T7315] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 842.142931][ T7323] netlink: 'syz.0.9168': attribute type 1 has an invalid length. [ 842.200946][ T7323] bond14: (slave bridge6): making interface the new active one [ 842.209758][ T7323] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 842.603241][ T7349] netlink: 'syz.4.9176': attribute type 64 has an invalid length. [ 842.621169][ T7349] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9176'. [ 842.666366][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9176'. [ 842.689441][ T7352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9177'. [ 842.838307][ T7360] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9180'. [ 842.919613][ T7367] syzkaller0: entered promiscuous mode [ 842.946515][ T7367] syzkaller0: entered allmulticast mode [ 842.969794][ T7370] tipc: Started in network mode [ 842.998975][ T7370] tipc: Node identity 4, cluster identity 4711 [ 843.006359][ T7369] netlink: 'syz.3.9182': attribute type 21 has an invalid length. [ 843.026215][ T7370] tipc: Node number set to 4 [ 843.245334][ T7389] xt_nfacct: accounting object `syz1' does not exist [ 843.383335][ T7397] syzkaller1: entered promiscuous mode [ 843.388878][ T7397] syzkaller1: entered allmulticast mode [ 843.488647][ T7402] netlink: 'syz.0.9192': attribute type 83 has an invalid length. [ 843.748524][ T7415] netlink: 'syz.1.9196': attribute type 4 has an invalid length. [ 844.480501][ T7461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.514156][ T7462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.200422][ T7494] __nla_validate_parse: 8 callbacks suppressed [ 845.200442][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9220'. [ 845.509442][ T7508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9225'. [ 845.557159][ T7508] veth0_macvtap: mtu less than device minimum [ 845.648037][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9228'. [ 845.685839][T13722] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.695224][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9228'. [ 845.704627][T13722] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.719370][ T83] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.732232][ T83] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.376297][ T7571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9242'. [ 846.407464][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9241'. [ 846.437735][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9241'. [ 846.700870][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9247'. [ 846.710974][ T7592] validate_nla: 2 callbacks suppressed [ 846.710995][ T7592] netlink: 'syz.1.9247': attribute type 7 has an invalid length. [ 846.756965][ T7592] netlink: 'syz.1.9247': attribute type 8 has an invalid length. [ 846.772981][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9247'. [ 846.847742][ T7599] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9249'. [ 847.172351][ T7621] xt_nfacct: accounting object `syz1' does not exist [ 847.194284][ T7625] netlink: 'syz.2.9256': attribute type 3 has an invalid length. [ 847.292077][ T7626] syzkaller0: entered allmulticast mode [ 848.783573][ T7683] ip6gre1: entered allmulticast mode [ 850.034855][ T7626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.236836][ T7694] openvswitch: netlink: IP tunnel dst address not specified [ 850.401090][ T7707] netlink: 'syz.2.9280': attribute type 10 has an invalid length. [ 850.416794][ T7707] bond0: (slave wlan1): Opening slave failed [ 850.556961][ T7722] team0 (unregistering): Port device team_slave_0 removed [ 850.579508][ T7730] netlink: 'syz.2.9286': attribute type 4 has an invalid length. [ 850.582027][ T7722] team0 (unregistering): Port device team_slave_1 removed [ 850.598336][ T7732] netlink: 'syz.2.9286': attribute type 4 has an invalid length. [ 850.624305][ T7726] netlink: 'syz.4.9284': attribute type 11 has an invalid length. [ 850.647667][ T7726] __nla_validate_parse: 4 callbacks suppressed [ 850.647691][ T7726] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.9284'. [ 850.765075][ T7724] syzkaller0: entered promiscuous mode [ 850.780738][ T7724] syzkaller0: entered allmulticast mode [ 850.911675][ T7745] netlink: 'syz.2.9291': attribute type 58 has an invalid length. [ 850.924360][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9291'. [ 850.976551][ T7744] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 851.028309][ T7750] netlink: 'syz.3.9292': attribute type 3 has an invalid length. [ 851.067518][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9292'. [ 851.276174][ T7770] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9296'. [ 851.715614][ T7801] bond15: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 851.750512][ T7801] bond15: (slave lo): Enslaving as an active interface with an up link [ 851.763428][ T7801] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 851.800247][ T7791] syzkaller0: entered promiscuous mode [ 851.807990][ T7791] syzkaller0: entered allmulticast mode [ 851.824326][ T7803] syzkaller0: entered promiscuous mode [ 851.842356][ T7788] netlink: 696 bytes leftover after parsing attributes in process `syz.3.9300'. [ 851.852282][ T7803] syzkaller0: entered allmulticast mode [ 851.861367][ T7788] netlink: 'syz.3.9300': attribute type 3 has an invalid length. [ 851.906102][ T7817] : renamed from tunl0 [ 851.922023][ T7820] xt_nfacct: accounting object `syz1' does not exist [ 851.941522][ T7817] netlink: 'syz.0.9307': attribute type 6 has an invalid length. [ 852.036550][ T7826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9310'. [ 852.410141][ T7838] syzkaller0: entered promiscuous mode [ 852.432905][ T7838] syzkaller0: entered allmulticast mode [ 852.702449][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9318'. [ 852.763029][ T7862] xt_nfacct: accounting object `syz1' does not exist [ 853.049631][ T7881] Cannot find add_set index 4 as target [ 853.067803][ T7882] syzkaller0: entered promiscuous mode [ 853.075906][ T7882] syzkaller0: entered allmulticast mode [ 853.277976][ T7889] syzkaller0: entered promiscuous mode [ 853.284391][ T7889] syzkaller0: entered allmulticast mode [ 853.298732][ T7889] netlink: 22 bytes leftover after parsing attributes in process `syz.1.9328'. [ 853.422168][ T7896] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 853.438441][ T7896] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9332'. [ 853.535126][ T7899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.570897][ T7902] netlink: 'syz.1.9335': attribute type 2 has an invalid length. [ 853.581041][ T7902] netlink: 'syz.1.9335': attribute type 1 has an invalid length. [ 853.594346][ T7902] netlink: 'syz.1.9335': attribute type 2 has an invalid length. [ 853.604300][ T7902] netlink: 'syz.1.9335': attribute type 1 has an invalid length. [ 853.780298][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9338'. [ 853.805739][ T7918] tipc: Invalid UDP bearer configuration [ 853.805799][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 854.084054][ T7930] geneve2: entered promiscuous mode [ 854.091526][ T3027] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 57970 - 0 [ 854.199552][ T7930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.211623][ T7930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.230676][ T3027] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 57970 - 0 [ 854.275919][ T7939] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 854.295385][ T7939] bond5: (slave lo): Enslaving as an active interface with an up link [ 854.307185][ T7939] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 854.324877][ T3027] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 57970 - 0 [ 854.418363][ T7936] syzkaller0: entered promiscuous mode [ 854.436649][ T7936] syzkaller0: entered allmulticast mode [ 856.460939][ T7974] smc: net device wlan0 applied user defined pnetid SYZ0 [ 856.534333][ T7980] syzkaller0: entered promiscuous mode [ 856.540020][ T7980] syzkaller0: entered allmulticast mode [ 858.245529][ T7930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.259618][ T7930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.273727][ T7930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57970 - 0 [ 858.296669][ T7995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 858.397538][ T7930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.410507][ T7930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.421470][ T7930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57970 - 0 [ 858.446404][ T8001] netlink: 'syz.0.9361': attribute type 3 has an invalid length. [ 858.473074][ T8001] netlink: 'syz.0.9361': attribute type 3 has an invalid length. [ 858.558890][ T7930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.575713][ T7930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.587080][ T7930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57970 - 0 [ 858.635619][ T8008] dvmrp0: entered allmulticast mode [ 858.794337][ T8021] bond6 (unregistering): Released all slaves [ 858.848628][ T8024] netlink: 'syz.3.9369': attribute type 39 has an invalid length. [ 858.926554][ T8029] netlink: 'syz.0.9370': attribute type 2 has an invalid length. [ 859.014541][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.031321][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57970 - 0 [ 859.045310][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 859.074892][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.087120][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57970 - 0 [ 859.110493][ T8037] xt_hashlimit: invalid interval [ 859.116011][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 859.177542][T13720] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.188447][T13720] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57970 - 0 [ 859.235764][T13720] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 859.284050][ T8049] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 859.298701][ T3027] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.309701][ T3027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57970 - 0 [ 859.318770][ T3027] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 859.327502][ T8045] veth0: entered promiscuous mode [ 859.353096][ T8044] veth0: left promiscuous mode [ 859.506600][ T8066] __nla_validate_parse: 2 callbacks suppressed [ 859.506622][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9380'. [ 859.542613][ T8057] tipc: Started in network mode [ 859.559425][ T8057] tipc: Node identity 228d7a504ec2, cluster identity 4711 [ 859.569119][ T8057] tipc: Enabled bearer , priority 0 [ 859.579575][ T8066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.586888][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 859.594201][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 859.704688][ T8057] syzkaller0: entered promiscuous mode [ 859.710355][ T8057] syzkaller0: entered allmulticast mode [ 859.717654][ T8057] tipc: Resetting bearer [ 859.745815][ T8055] tipc: Resetting bearer [ 861.676629][ T8055] tipc: Disabling bearer [ 861.709498][ T1036] tipc: Node number set to 1817147984 [ 861.923909][ T8115] syzkaller0: entered promiscuous mode [ 861.942290][ T8115] syzkaller0: entered allmulticast mode [ 861.998763][ T8129] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 862.016629][ T8129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9395'. [ 862.251842][ T8145] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 862.275664][ T8146] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9399'. [ 862.325058][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9399'. [ 862.411995][ T8154] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9402'. [ 862.488672][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9403'. [ 862.569014][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9407'. [ 862.587724][ T8167] netlink: 'syz.2.9406': attribute type 10 has an invalid length. [ 862.596213][ T8167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9406'. [ 862.820116][ T8172] xt_connbytes: Forcing CT accounting to be enabled [ 863.027967][ T8178] macvtap1: entered promiscuous mode [ 863.037939][ T8178] macvtap1: entered allmulticast mode [ 863.050988][ T8178] veth1_vlan: entered allmulticast mode [ 863.071413][ T8180] netlink: 'syz.1.9412': attribute type 2 has an invalid length. [ 863.203707][ T8187] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9413'. [ 863.233822][ T8187] openvswitch: netlink: Key type 158 is out of range max 32 [ 863.315648][ T8191] macvtap2: entered promiscuous mode [ 863.321301][ T8191] macvtap2: entered allmulticast mode [ 863.352424][ T8187] netlink: 'syz.3.9413': attribute type 83 has an invalid length. [ 863.364499][ T8194] netlink: 'syz.4.9415': attribute type 5 has an invalid length. [ 863.457883][ T8196] IPv6: NLM_F_CREATE should be specified when creating new route [ 863.481829][ T8198] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9417'. [ 863.508245][ T8201] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 863.791976][ T8218] netlink: 'syz.4.9426': attribute type 7 has an invalid length. [ 863.816504][ T8218] gretap0: entered promiscuous mode [ 863.835603][ T8218] gretap0: left promiscuous mode [ 864.078117][ T8227] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 864.095878][ T8227] bond9 (unregistering): Released all slaves [ 864.255543][ T8242] delete_channel: no stack [ 864.306841][ T8246] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 865.384965][ T8291] __nla_validate_parse: 7 callbacks suppressed [ 865.384982][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9448'. [ 865.407354][ T8291] xfrm1: entered promiscuous mode [ 865.412432][ T8291] xfrm1: entered allmulticast mode [ 867.500328][ T8255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.840039][ T8310] sctp: [Deprecated]: syz.0.9455 (pid 8310) Use of int in maxseg socket option. [ 867.840039][ T8310] Use struct sctp_assoc_value instead [ 867.922178][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9458'. [ 867.932201][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9458'. [ 868.258567][ T8342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.404319][ T8348] ipvlan2: entered allmulticast mode [ 868.409725][ T8348] batadv_slave_1: entered allmulticast mode [ 868.419960][ T8348] batman_adv: batadv0: Adding interface: ipvlan2 [ 868.445442][ T8348] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.471848][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.484133][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.495120][ T8348] batman_adv: batadv0: Interface activated: ipvlan2 [ 868.646493][ T8359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9473'. [ 868.656168][ T8359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9473'. [ 868.675602][ T8359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9473'. [ 868.821808][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 868.943519][ T8383] netlink: 'syz.1.9478': attribute type 1 has an invalid length. [ 869.033482][ T8385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 869.084701][ T8376] veth0: entered promiscuous mode [ 869.113028][ T8368] veth0: left promiscuous mode [ 869.161944][ T8383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 869.214012][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9482'. [ 869.257132][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9482'. [ 869.316019][ T8401] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 869.348395][ T8399] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.9483'. [ 869.401534][ T8406] netlink: 'syz.1.9486': attribute type 10 has an invalid length. [ 869.433010][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9486'. [ 869.508499][ T8406] dummy0: entered promiscuous mode [ 869.528428][ T8406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 869.749105][ T8423] netlink: 'syz.4.9489': attribute type 1 has an invalid length. [ 869.975139][ T8436] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 870.098073][ T8441] tipc: Enabled bearer , priority 0 [ 870.177760][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.191647][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.242724][ T8457] block nbd2: NBD_DISCONNECT [ 870.313977][ T8441] tipc: Disabling bearer [ 870.459823][ T8469] __nla_validate_parse: 5 callbacks suppressed [ 870.459847][ T8469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9500'. [ 870.531553][ T8480] netlink: 'syz.0.9504': attribute type 33 has an invalid length. [ 870.589610][ T8480] bond16: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 870.604563][ T8480] bond16 (unregistering): Released all slaves [ 870.618598][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9500'. [ 870.706387][ T8489] syzkaller1: entered promiscuous mode [ 870.712168][ T8489] syzkaller1: entered allmulticast mode [ 870.793019][ T8491] syzkaller0: entered promiscuous mode [ 870.798774][ T8491] syzkaller0: entered allmulticast mode [ 871.070774][ T8508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9511'. [ 871.292023][ T8520] netlink: 'syz.0.9516': attribute type 1 has an invalid length. [ 871.362776][ T8520] bond16: entered promiscuous mode [ 871.368527][ T8520] 8021q: adding VLAN 0 to HW filter on device bond16 [ 871.422336][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9516'. [ 871.432834][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9516'. [ 871.530066][ T8528] bond16: (slave bridge7): making interface the new active one [ 871.538426][ T8528] bridge7: entered promiscuous mode [ 871.546616][ T8528] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 871.558902][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9522'. [ 871.610677][ T8539] hsr_slave_0 (unregistering): left promiscuous mode [ 871.653726][ T8524] syzkaller0: entered promiscuous mode [ 871.659273][ T8524] syzkaller0: entered allmulticast mode [ 871.769374][ T8544] syzkaller0: entered promiscuous mode [ 871.796227][ T8544] syzkaller0: entered allmulticast mode [ 871.930676][ T8560] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9526'. [ 871.966693][ T8563] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9527'. [ 872.153918][ T8567] netem: change failed [ 872.216293][ T8577] netlink: 'syz.4.9531': attribute type 1 has an invalid length. [ 872.273895][ T8577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 872.328506][ T8585] netlink: 'syz.0.9532': attribute type 2 has an invalid length. [ 872.347701][ T8588] netlink: 'syz.0.9532': attribute type 2 has an invalid length. [ 872.391787][ T8592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9535'. [ 872.467774][ T8585] wireguard0: entered promiscuous mode [ 872.473619][ T8585] wireguard0: entered allmulticast mode [ 872.479508][ T8592] syzkaller0: entered allmulticast mode [ 872.571101][ T8592] syzkaller0 (unregistering): left allmulticast mode [ 872.631024][ T8605] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9537'. [ 872.687019][ T8603] geneve5: entered promiscuous mode [ 872.722407][ T8610] ksmbd: Unknown IPC event: 6, ignore. [ 872.968158][ T8628] syzkaller0: entered promiscuous mode [ 872.974625][ T8628] syzkaller0: entered allmulticast mode [ 873.356171][ T8640] sctp: [Deprecated]: syz.3.9545 (pid 8640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.356171][ T8640] Use struct sctp_sack_info instead [ 873.469273][ T8640] netlink: 'syz.3.9545': attribute type 3 has an invalid length. [ 873.492728][ T8640] netlink: 'syz.3.9545': attribute type 1 has an invalid length. [ 873.515205][ T8640] NCSI netlink: No device for ifindex 813332851 [ 874.164699][ T8688] netlink: 'syz.0.9564': attribute type 1 has an invalid length. [ 874.182928][ T8686] syzkaller0: entered promiscuous mode [ 874.188479][ T8686] syzkaller0: entered allmulticast mode [ 874.439197][ T8705] netlink: 'syz.4.9570': attribute type 1 has an invalid length. [ 874.561340][ T8706] bond1: (slave gretap1): making interface the new active one [ 874.570962][ T8706] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 874.664138][ T8725] netlink: 'syz.3.9573': attribute type 11 has an invalid length. [ 874.671431][ T8660] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 874.680491][ T8725] netlink: 'syz.3.9573': attribute type 11 has an invalid length. [ 874.687061][ T8660] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 874.737533][ T8719] wg1 speed is unknown, defaulting to 1000 [ 875.384455][ T8756] team0 (unregistering): Port device team_slave_0 removed [ 875.450914][ T8756] team0 (unregistering): Port device team_slave_1 removed [ 876.084079][ T8804] __nla_validate_parse: 8 callbacks suppressed [ 876.084100][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9590'. [ 876.386584][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9594'. [ 876.416389][ T8821] Cannot find add_set index 2 as target [ 876.532363][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9597'. [ 877.021849][ T8855] dvmrp0: entered allmulticast mode [ 877.081122][ T8858] syzkaller1: entered promiscuous mode [ 877.093990][ T8858] syzkaller1: entered allmulticast mode [ 877.111372][ T8852] syzkaller0: entered promiscuous mode [ 877.129754][ T8852] syzkaller0: entered allmulticast mode [ 877.645109][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.987955][ T8906] netlink: 'syz.1.9619': attribute type 2 has an invalid length. [ 878.012138][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9620'. [ 878.088475][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9621'. [ 878.277093][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9625'. [ 878.294733][ T8926] syzkaller0: entered promiscuous mode [ 878.319847][ T8926] syzkaller0: entered allmulticast mode [ 878.356209][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9626'. [ 878.423778][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9626'. [ 878.497320][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9628'. [ 878.547121][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9628'. [ 878.575743][ T8935] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 878.589204][ T8942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.617756][ T8942] : entered promiscuous mode [ 878.921510][ T8960] xt_TCPMSS: Only works on TCP SYN packets [ 879.324090][ T8989] netlink: 'syz.3.9645': attribute type 1 has an invalid length. [ 879.354331][ T8986] netlink: 'syz.4.9643': attribute type 11 has an invalid length. [ 879.424417][ T8989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.460960][ T8997] bond1: (slave geneve3): making interface the new active one [ 879.471843][ T8997] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 880.264737][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 880.275838][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 880.292727][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 880.301888][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 880.311683][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 880.374339][ T9043] wg1 speed is unknown, defaulting to 1000 [ 880.420221][ T9046] tipc: Invalid UDP bearer configuration [ 880.420279][ T9046] tipc: Enabling of bearer rejected, failed to enable media [ 880.777330][ T9066] Cannot find add_set index 65532 as target [ 880.858165][ T9069] geneve3: entered promiscuous mode [ 880.864470][ T9069] geneve3: entered allmulticast mode [ 881.034593][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 881.165103][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.172631][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.180224][ T9043] bridge_slave_0: entered allmulticast mode [ 881.188495][ T9043] bridge_slave_0: entered promiscuous mode [ 881.222890][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.230376][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.238352][ T9043] bridge_slave_1: entered allmulticast mode [ 881.249937][ T9043] bridge_slave_1: entered promiscuous mode [ 881.311038][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.327508][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.354266][ T9091] netlink: 'syz.3.9675': attribute type 2 has an invalid length. [ 881.406956][ T9043] team0: Port device team_slave_0 added [ 881.419075][ T9096] netlink: 'syz.1.9676': attribute type 1 has an invalid length. [ 881.428589][ T9043] team0: Port device team_slave_1 added [ 881.550000][ T9096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 881.567035][ T9097] vlan1: entered promiscuous mode [ 881.572139][ T9097] bond7: entered promiscuous mode [ 881.579272][ T9097] vlan1: entered allmulticast mode [ 881.586154][ T9097] bond7: entered allmulticast mode [ 881.593697][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.602573][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.634664][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.679062][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.691424][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.720914][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.750190][ T9097] syzkaller0: entered promiscuous mode [ 881.766798][ T9097] syzkaller0: entered allmulticast mode [ 881.872427][ T9043] hsr_slave_0: entered promiscuous mode [ 881.879401][ T9043] hsr_slave_1: entered promiscuous mode [ 881.886036][ T9043] debugfs: 'hsr0' already exists in 'hsr' [ 881.891793][ T9043] Cannot create hsr debugfs directory [ 881.976827][ T9114] __nla_validate_parse: 10 callbacks suppressed [ 881.976849][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9680'. [ 881.995954][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9680'. [ 882.032343][ T9116] netlink: 'syz.3.9681': attribute type 1 has an invalid length. [ 882.070608][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 882.114070][ T9116] bond2: (slave veth3): Enslaving as an active interface with a down link [ 882.126706][ T9116] netlink: 'syz.3.9681': attribute type 1 has an invalid length. [ 882.145766][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9681'. [ 882.187158][ T9116] vlan2: entered allmulticast mode [ 882.192548][ T9116] veth0_to_bond: entered allmulticast mode [ 882.205225][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9681'. [ 882.307182][ T9129] netlink: 'syz.0.9684': attribute type 12 has an invalid length. [ 882.412873][ T5837] Bluetooth: hci1: command tx timeout [ 882.481448][ T9043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.559489][ T9142] xt_hashlimit: overflow, rate too high: 0 [ 882.675405][ T9043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.800080][ T9043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.105854][ T9164] openvswitch: netlink: IP tunnel dst address not specified [ 883.123207][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9692'. [ 883.144919][ T9165] netlink: 'syz.4.9692': attribute type 30 has an invalid length. [ 883.146407][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9692'. [ 883.165933][ T9167] netlink: 'syz.4.9692': attribute type 30 has an invalid length. [ 883.353682][ T9043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 883.422100][ T9043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 883.520277][ T9043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 883.542360][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9695'. [ 883.562415][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9695'. [ 883.584555][ T9043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 883.607009][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9696'. [ 883.640524][ T9189] netlink: zone id is out of range [ 883.654951][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9696'. [ 883.663326][ T9189] netlink: zone id is out of range [ 883.672577][ T9189] netlink: zone id is out of range [ 883.683252][ T9189] netlink: zone id is out of range [ 883.697263][ T9189] netlink: zone id is out of range [ 883.724224][ T9189] netlink: zone id is out of range [ 883.742802][ T9189] netlink: zone id is out of range [ 883.748049][ T9189] netlink: zone id is out of range [ 883.764764][ T9200] x_tables: ip6_tables: mac match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 883.785967][ T9189] netlink: zone id is out of range [ 883.889668][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.928362][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.945123][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.952355][T13720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.987821][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.995077][T13720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.494830][ T5837] Bluetooth: hci1: command tx timeout [ 884.664297][ T9251] x_tables: duplicate underflow at hook 2 [ 884.692339][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.888399][ T9264] veth5: entered allmulticast mode [ 884.902170][ T9043] veth0_vlan: entered promiscuous mode [ 885.010237][ T9043] veth1_vlan: entered promiscuous mode [ 885.117216][ T9043] veth0_macvtap: entered promiscuous mode [ 885.196838][ T9279] bond3: ARP target 1.0.0.0 is already present [ 885.203587][ T9279] bond3: option arp_ip_target: invalid value (1) [ 885.236474][ T9279] bond3 (unregistering): Released all slaves [ 885.301994][T13720] nci: nci_rx_work: unknown MT 0x7 [ 885.351584][ T9043] veth1_macvtap: entered promiscuous mode [ 885.434054][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.471018][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.508996][ T3027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.528502][ T3027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.558633][ T3027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.570288][ T3027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.010069][ T9286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.198031][T13720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.224891][T13720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.311739][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.322446][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.574928][ T5837] Bluetooth: hci1: command tx timeout [ 886.721444][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 886.731918][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 886.741290][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 886.773495][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 886.796220][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 887.065677][ T9330] wg1 speed is unknown, defaulting to 1000 [ 887.250140][ T9346] __nla_validate_parse: 12 callbacks suppressed [ 887.250164][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9738'. [ 887.318960][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9738'. [ 887.564382][ T9361] tipc: Invalid UDP bearer configuration [ 887.564440][ T9361] tipc: Enabling of bearer rejected, failed to enable media [ 887.714354][ T9361] Bluetooth: MGMT ver 1.23 [ 887.720831][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 887.981730][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.989219][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.997190][ T9330] bridge_slave_0: entered allmulticast mode [ 888.010693][ T9330] bridge_slave_0: entered promiscuous mode [ 888.021958][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.029660][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.037428][ T9330] bridge_slave_1: entered allmulticast mode [ 888.045906][ T9330] bridge_slave_1: entered promiscuous mode [ 888.101183][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.114651][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.167444][ T9330] team0: Port device team_slave_0 added [ 888.177965][ T9330] team0: Port device team_slave_1 added [ 888.289482][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.300561][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.331430][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.347274][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.355240][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.381376][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.427872][ T9398] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 888.458266][ T9396] macvtap1: entered promiscuous mode [ 888.464218][ T9396] macvtap1: entered allmulticast mode [ 888.479668][ T9396] veth1_vlan: entered allmulticast mode [ 888.523284][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9748'. [ 888.548292][ T9330] hsr_slave_0: entered promiscuous mode [ 888.564046][ T9330] hsr_slave_1: entered promiscuous mode [ 888.583069][ T9400] netlink: 54 bytes leftover after parsing attributes in process `syz.3.9748'. [ 888.584665][ T9330] debugfs: 'hsr0' already exists in 'hsr' [ 888.618473][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9748'. [ 888.634286][ T9330] Cannot create hsr debugfs directory [ 888.653915][ T5837] Bluetooth: hci1: command tx timeout [ 888.747442][ T9413] veth0_to_team: left promiscuous mode [ 888.759411][ T9413] veth0_to_team: left allmulticast mode [ 888.893410][ T5837] Bluetooth: hci0: command tx timeout [ 889.085708][ T9427] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.9756'. [ 889.130665][ T9330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.155072][ T9330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.175205][ T9330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 889.208188][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9758'. [ 889.219524][ T9430] net_ratelimit: 52 callbacks suppressed [ 889.219545][ T9430] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 889.279912][ T9432] netlink: zone id is out of range [ 889.287023][ T9432] netlink: zone id is out of range [ 889.295212][ T9432] netlink: zone id is out of range [ 889.300558][ T9432] netlink: zone id is out of range [ 889.308266][ T9432] netlink: zone id is out of range [ 889.315069][ T9432] netlink: zone id is out of range [ 889.320421][ T9432] netlink: zone id is out of range [ 889.326202][ T9432] netlink: zone id is out of range [ 889.331663][ T9432] netlink: zone id is out of range [ 889.365187][ T9330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.390301][ T9330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.401419][ T9330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 889.530653][ T9330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.545883][ T9330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.558545][ T9330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 889.815744][ T9330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.830982][ T9330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.844725][ T9330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 889.867089][ T9459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9764'. [ 889.892824][ T9459] netlink: 21 bytes leftover after parsing attributes in process `syz.2.9764'. [ 889.917079][ T9459] netlink: 21 bytes leftover after parsing attributes in process `syz.2.9764'. [ 890.238741][ T9330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 890.290125][ T9330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 890.327905][ T9330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 890.377918][ T9330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 890.510442][ T9496] netlink: 'syz.2.9775': attribute type 1 has an invalid length. [ 890.797841][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.864922][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.922331][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.929570][T13718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.973556][ T5837] Bluetooth: hci0: command tx timeout [ 890.989264][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.996519][T13720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.475053][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.512136][ T9543] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 891.565630][ T9543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.646034][ T9546] bond2: (slave veth3): Enslaving as an active interface with a down link [ 891.705708][ T9543] bond2: (slave veth0_to_bond): making interface the new active one [ 891.718355][ T9543] veth0_to_bond: entered promiscuous mode [ 891.727124][ T9543] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 892.023208][ T9525] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 892.035260][ T9525] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 892.048164][ T9330] veth0_vlan: entered promiscuous mode [ 892.079507][ T9330] veth1_vlan: entered promiscuous mode [ 892.149396][ T9330] veth0_macvtap: entered promiscuous mode [ 892.219361][ T9330] veth1_macvtap: entered promiscuous mode [ 892.261143][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.280999][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.304181][ T9566] __nla_validate_parse: 38 callbacks suppressed [ 892.304206][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9796'. [ 892.326530][T13722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.337229][T13722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.359386][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9796'. [ 892.401152][T13722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.443256][T13722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.745426][ T9587] netlink: 'syz.4.9802': attribute type 1 has an invalid length. [ 892.860736][ T9587] bond3: entered promiscuous mode [ 892.883725][ T9587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 892.906153][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9804'. [ 892.938994][ T9594] macvtap1: entered allmulticast mode [ 892.945593][ T9595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.953611][ T9595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.963833][ T9595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.971396][ T9595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.980589][ T1158] tipc: Subscription rejected, illegal request [ 893.027705][ T9587] bond3: (slave bridge4): making interface the new active one [ 893.035408][ T9587] bridge4: entered promiscuous mode [ 893.042386][ T9587] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 893.054469][ T5832] Bluetooth: hci0: command tx timeout [ 893.070886][T13720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.085684][T13720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.208820][T13718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.241068][T13718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.455390][ T9628] tc_dump_action: action bad kind [ 894.225480][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9822'. [ 894.300460][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9823'. [ 894.668483][ T9710] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9835'. [ 894.827020][ T9717] gtp0: entered promiscuous mode [ 894.832048][ T9717] gtp0: entered allmulticast mode [ 894.851838][ T9719] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9837'. [ 894.970500][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9842'. [ 894.991058][ T9726] netlink: 'syz.0.9843': attribute type 83 has an invalid length. [ 895.010434][ T9728] netlink: 'syz.4.9844': attribute type 1 has an invalid length. [ 895.025964][ T9728] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9844'. [ 895.036953][ T9728] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9844'. [ 895.133092][ T5832] Bluetooth: hci0: command 0x0419 tx timeout [ 895.196080][ T9736] netlink: 'syz.0.9847': attribute type 21 has an invalid length. [ 895.264679][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.298841][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.310505][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 895.320792][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.367763][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.391157][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.438096][ T9742] 8021q: VLANs not supported on vxcan1 [ 895.468871][ T9742] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 895.485252][ T9742] syzkaller1: Refused to change device type [ 895.819268][ T9761] Unsupported ieee802154 address type: 0 [ 895.912088][ T9764] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 896.159835][ T9784] netlink: 'syz.1.9864': attribute type 1 has an invalid length. [ 897.213046][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 899.207475][ T9791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.313653][ T9816] netlink: 'syz.2.9874': attribute type 1 has an invalid length. [ 899.333103][ T9816] netlink: 'syz.2.9874': attribute type 1 has an invalid length. [ 899.483026][ T9829] __nla_validate_parse: 12 callbacks suppressed [ 899.483048][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9879'. [ 899.526980][ T9836] IPv6: sit2: Disabled Multicast RS [ 899.564099][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9879'. [ 899.595833][ T9829] pimreg3: entered allmulticast mode [ 899.734185][ T9845] syzkaller0: entered promiscuous mode [ 899.739738][ T9845] syzkaller0: entered allmulticast mode [ 899.776732][ T9853] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.9882'. [ 899.793346][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9882'. [ 899.831630][ T9858] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9887'. [ 900.229627][ T9885] net_ratelimit: 45 callbacks suppressed [ 900.229649][ T9885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.250354][ T9887] netlink: 'syz.3.9896': attribute type 1 has an invalid length. [ 900.270893][ T9887] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9896'. [ 900.425425][ T9894] syzkaller0: entered promiscuous mode [ 900.431425][ T9894] syzkaller0: entered allmulticast mode [ 900.444494][ T9901] netlink: 'syz.0.9899': attribute type 1 has an invalid length. [ 900.449702][ T9895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9898'. [ 900.562750][ T9906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9903'. [ 900.579315][ T9906] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9903'. [ 900.588541][ T9906] netlink: 'syz.3.9903': attribute type 6 has an invalid length. [ 900.598010][ T9906] netlink: 'syz.3.9903': attribute type 5 has an invalid length. [ 900.606102][ T9906] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9903'. [ 900.697186][ T9845] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 900.735697][ T9912] macvtap2: entered promiscuous mode [ 900.741294][ T9912] macvtap2: entered allmulticast mode [ 901.069767][ T9928] sctp: [Deprecated]: syz.1.9912 (pid 9928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 901.069767][ T9928] Use struct sctp_sack_info instead [ 901.253480][ T9940] netlink: 'syz.2.9917': attribute type 1 has an invalid length. [ 901.329696][ T9940] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 901.343718][ T9940] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 901.354157][ T9940] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 901.465989][ T9948] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 901.490609][ T9948] bond1: (slave vcan1): making interface the new active one [ 901.499533][ T9948] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 901.588926][ T9958] netlink: 'syz.1.9921': attribute type 2 has an invalid length. [ 901.703068][ T9953] wg1 speed is unknown, defaulting to 1000 [ 901.773440][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 901.820570][ T9969] syzkaller1: entered promiscuous mode [ 901.845963][ T9969] syzkaller1: entered allmulticast mode [ 902.119323][ T9978] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 902.141435][ T9978] syzkaller1: linktype set to 823 [ 902.195690][ T9984] netlink: 'syz.4.9930': attribute type 1 has an invalid length. [ 902.773359][T13722] veth0_to_bond: left promiscuous mode [ 902.794197][T10020] netlink: 'syz.2.9940': attribute type 2 has an invalid length. [ 902.802236][T10020] netlink: 'syz.2.9940': attribute type 2 has an invalid length. [ 902.818472][T10021] IPv6: NLM_F_CREATE should be specified when creating new route [ 902.880188][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.107114][T10051] IPv6: sit2: Disabled Multicast RS [ 903.116642][T10046] syzkaller0: entered promiscuous mode [ 903.126892][T10046] syzkaller0: entered allmulticast mode [ 903.730766][T10067] netlink: 'syz.0.9954': attribute type 2 has an invalid length. [ 903.761789][T10071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.112293][T10098] xt_ecn: cannot match TCP bits for non-tcp packets [ 904.200538][T10110] nbd: illegal input index -1 [ 904.207113][T10110] xt_hashlimit: size too large, truncated to 1048576 [ 904.346398][T10118] –: renamed from vxcan1 (while UP) [ 905.209262][T10172] __nla_validate_parse: 10 callbacks suppressed [ 905.209285][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9977'. [ 905.235641][T10172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9977'. [ 905.268164][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9977'. [ 905.527218][T10184] netlink: 'syz.3.9980': attribute type 64 has an invalid length. [ 905.542408][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9981'. [ 905.949634][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9989'. [ 905.955675][T10216] netlink: 'syz.4.9990': attribute type 10 has an invalid length. [ 905.967989][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9990'. [ 906.066297][T10219] ipt_REJECT: TCP_RESET invalid for non-tcp [ 906.204858][T10232] Cannot find add_set index 0 as target [ 906.282886][T10232] openvswitch: netlink: Flow key attribute not present in set flow. [ 906.298622][T10232] Cannot find add_set index 0 as target [ 906.315692][T10235] openvswitch: netlink: Flow key attribute not present in set flow. [ 906.434153][T10242] x_tables: duplicate underflow at hook 1 [ 906.500864][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10000'. [ 906.594013][T10253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10002'. [ 907.116959][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10009'. [ 907.284451][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10011'. [ 907.331488][T10285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.366743][T10285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.668434][T10303] netlink: 'syz.0.10020': attribute type 1 has an invalid length. [ 907.731019][T10303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 907.784312][T10310] bond1: (slave veth0_to_bond): making interface the new active one [ 907.822279][T10310] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 908.018367][T10326] netlink: 'syz.2.10025': attribute type 2 has an invalid length. [ 908.027927][T10303] bond1: entered promiscuous mode [ 908.044674][T10303] veth0_to_bond: entered promiscuous mode [ 908.070804][T10303] bond1: entered allmulticast mode [ 908.084234][T10303] veth0_to_bond: entered allmulticast mode [ 908.093360][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 908.326823][T10341] netlink: 'syz.0.10026': attribute type 1 has an invalid length. [ 908.389707][T10341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.557888][T10334] bond1: (slave veth0_to_bond): Releasing active interface [ 908.594980][T10334] veth0_to_bond: left promiscuous mode [ 908.600724][T10334] veth0_to_bond: left allmulticast mode [ 908.668455][T10334] bond2: (slave veth0_to_bond): making interface the new active one [ 908.681413][T10360] xt_TCPMSS: Only works on TCP SYN packets [ 908.681413][T10359] xt_TCPMSS: Only works on TCP SYN packets [ 908.686686][T10334] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 908.753519][T10341] bond2: entered promiscuous mode [ 908.759894][T10341] veth0_to_bond: entered promiscuous mode [ 908.767030][T10341] bond2: entered allmulticast mode [ 908.773168][T10341] veth0_to_bond: entered allmulticast mode [ 908.945205][T10375] netlink: 'syz.0.10039': attribute type 11 has an invalid length. [ 908.988669][T10371] syzkaller0: entered promiscuous mode [ 908.994409][T10371] syzkaller0: entered allmulticast mode [ 909.357785][T10393] x_tables: duplicate underflow at hook 2 [ 909.432050][T13722] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.450378][T13722] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.473086][T13722] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.481893][T13722] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.515735][T10396] netlink: 'syz.2.10046': attribute type 3 has an invalid length. [ 909.789501][T10415] macsec1: entered promiscuous mode [ 909.926569][T10428] syzkaller0: entered promiscuous mode [ 909.954397][T10428] syzkaller0: entered allmulticast mode [ 910.026592][T10433] tipc: Failed to remove unknown binding: 66,0,0/1817147984:2341088073/2341088075 [ 910.040158][T10433] tipc: Failed to remove unknown binding: 66,0,0/1817147984:2341088073/2341088075 [ 910.096653][T10435] tipc: Started in network mode [ 910.117877][T10435] tipc: Node identity ae5308caaf03, cluster identity 4711 [ 910.143144][T10435] tipc: Enabled bearer , priority 0 [ 910.197208][T10437] netlink: 'syz.2.10059': attribute type 1 has an invalid length. [ 910.327188][T10449] __nla_validate_parse: 20 callbacks suppressed [ 910.327213][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10059'. [ 910.732171][T10440] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 910.745858][T10440] bond5 (unregistering): Released all slaves [ 910.771184][T10427] tipc: Resetting bearer [ 910.935407][T10458] netlink: 'syz.2.10064': attribute type 1 has an invalid length. [ 910.951369][T10427] tipc: Disabling bearer [ 911.146692][T10468] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 911.157730][T10473] netlink: 'syz.3.10069': attribute type 11 has an invalid length. [ 911.166973][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10069'. [ 911.180151][T10476] netlink: 'syz.3.10069': attribute type 11 has an invalid length. [ 911.190372][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10069'. [ 911.223880][T10481] x_tables: duplicate entry at hook 2 [ 911.240741][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10070'. [ 911.507749][T10498] xt_bpf: check failed: parse error [ 911.610526][T10502] netlink: 'syz.0.10076': attribute type 9 has an invalid length. [ 911.797170][T10517] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10080'. [ 912.095324][T10536] sctp: [Deprecated]: syz.1.10086 (pid 10536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 912.095324][T10536] Use struct sctp_sack_info instead [ 912.115783][T10536] sctp: [Deprecated]: syz.1.10086 (pid 10536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 912.115783][T10536] Use struct sctp_sack_info instead [ 912.541700][T10549] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10091'. [ 912.674077][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10093'. [ 914.206839][T10480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.219890][T10554] netlink: 'syz.1.10093': attribute type 23 has an invalid length. [ 914.406773][T10565] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.10095'. [ 914.604691][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10100'. [ 914.632599][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10100'. [ 914.950335][T10601] netlink: 'syz.4.10108': attribute type 5 has an invalid length. [ 915.034046][T10607] openvswitch: netlink: IP tunnel dst address not specified [ 915.289799][T10626] openvswitch: netlink: Flow actions attr not present in new flow. [ 915.333994][T10609] __nla_validate_parse: 1 callbacks suppressed [ 915.334022][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10111'. [ 915.360712][T10628] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10118'. [ 915.417850][T10631] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 915.442948][T10632] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 915.506580][T10631] netlink: 'syz.4.10119': attribute type 1 has an invalid length. [ 915.524661][T10632] netlink: 'syz.4.10119': attribute type 1 has an invalid length. [ 915.595469][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10121'. [ 915.607161][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10121'. [ 915.655193][T10632] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 915.657827][T10631] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 916.089689][T10672] netlink: 248 bytes leftover after parsing attributes in process `syz.3.10130'. [ 916.168043][T10667] block nbd0: reconnected socket [ 916.173429][ T5832] block nbd0: Receive control failed (result -107) [ 916.632840][T10700] netlink: 'syz.4.10134': attribute type 10 has an invalid length. [ 916.675835][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.695292][T10700] bridge_slave_1: left allmulticast mode [ 916.701795][T10700] bridge_slave_1: left promiscuous mode [ 916.708264][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.725186][T10700] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 916.774774][T10712] syzkaller0: entered promiscuous mode [ 916.780326][T10712] syzkaller0: entered allmulticast mode [ 916.964093][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10140'. [ 917.145093][T10727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 917.159681][T10727] netem: change failed [ 917.208359][T10727] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10144'. [ 917.454584][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10150'. [ 917.527985][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10150'. [ 917.661841][T10761] netlink: 'syz.3.10155': attribute type 1 has an invalid length. [ 917.902667][T10777] x_tables: unsorted entry at hook 1 [ 918.045229][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10163'. [ 918.096645][T10790] netlink: 'syz.3.10164': attribute type 1 has an invalid length. [ 918.123828][T10790] netlink: 'syz.3.10164': attribute type 1 has an invalid length. [ 918.440922][T10808] netlink: 'syz.1.10170': attribute type 1 has an invalid length. [ 918.639144][T10820] bond0: entered promiscuous mode [ 918.648969][T10820] bond_slave_0: entered promiscuous mode [ 918.655584][T10820] bond_slave_1: entered promiscuous mode [ 918.667040][T10820] bond0: left promiscuous mode [ 918.672345][T10820] bond_slave_0: left promiscuous mode [ 918.680069][T10820] bond_slave_1: left promiscuous mode [ 919.101123][T10850] sctp: [Deprecated]: syz.1.10183 (pid 10850) Use of int in maxseg socket option. [ 919.101123][T10850] Use struct sctp_assoc_value instead [ 919.138427][T10854] netlink: 'syz.2.10185': attribute type 14 has an invalid length. [ 919.245837][T10862] syzkaller0: entered promiscuous mode [ 919.251480][T10862] syzkaller0: entered allmulticast mode [ 919.318910][T10866] tipc: Started in network mode [ 919.326036][T10866] tipc: Node identity 3e7a0abc718a, cluster identity 6 [ 919.336599][T10866] tipc: Enabled bearer , priority 0 [ 919.362078][T10866] syzkaller0: entered promiscuous mode [ 919.376518][T10874] netlink: 'syz.3.10190': attribute type 11 has an invalid length. [ 919.403892][T10866] syzkaller0: entered allmulticast mode [ 919.411903][T10874] netlink: 'syz.3.10190': attribute type 11 has an invalid length. [ 919.578190][T10866] tipc: Resetting bearer [ 919.603518][T10875] netlink: 'syz.3.10190': attribute type 11 has an invalid length. [ 919.607028][T10886] syzkaller0: entered promiscuous mode [ 919.624750][T10875] netlink: 'syz.3.10190': attribute type 11 has an invalid length. [ 919.636224][T10886] syzkaller0: entered allmulticast mode [ 919.661798][T10864] tipc: Resetting bearer [ 919.696320][T10864] tipc: Disabling bearer [ 919.876020][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.111564][T10914] netlink: 'syz.4.10199': attribute type 9 has an invalid length. [ 920.143758][T10914] netlink: 'syz.4.10199': attribute type 11 has an invalid length. [ 920.159479][T10914] netlink: 'syz.4.10199': attribute type 12 has an invalid length. [ 920.295913][T10933] netlink: 'syz.0.10203': attribute type 1 has an invalid length. [ 920.322694][T10933] netlink: 'syz.0.10203': attribute type 1 has an invalid length. [ 920.346018][T10933] netlink: 'syz.0.10203': attribute type 1 has an invalid length. [ 920.368674][T10933] netlink: 'syz.0.10203': attribute type 2 has an invalid length. [ 920.392684][T10933] __nla_validate_parse: 8 callbacks suppressed [ 920.392703][T10933] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10203'. [ 920.458069][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10205'. [ 921.451787][T10998] netlink: 'syz.1.10217': attribute type 21 has an invalid length. [ 921.514586][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10217'. [ 921.575808][T11003] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10217'. [ 921.630111][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10218'. [ 921.706398][T11002] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 921.766391][T11011] netlink: 'syz.3.10220': attribute type 64 has an invalid length. [ 921.904295][T11018] netlink: 'syz.4.10222': attribute type 4 has an invalid length. [ 922.348495][T11046] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 922.373161][T11050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.401797][T11050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.831900][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10235'. [ 922.844710][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10235'. [ 922.947657][T11082] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10234'. [ 922.961274][T11085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10237'. [ 923.035292][T11071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 923.063016][T11091] syzkaller0: entered promiscuous mode [ 923.068548][T11091] syzkaller0: entered allmulticast mode [ 923.430598][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10245'. [ 923.453219][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 923.860239][T11129] gre1: entered promiscuous mode [ 923.887883][T11129] gre1: entered allmulticast mode [ 923.905909][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 923.935107][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 923.955784][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 923.991021][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.009700][T11143] vlan2: entered promiscuous mode [ 924.024476][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.037178][T11143] bridge0: entered promiscuous mode [ 924.049848][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.082440][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.123032][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.130537][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.206926][T11137] openvswitch: netlink: Multiple metadata blocks provided [ 924.300831][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.361733][T11149] bridge_slave_0 (unregistering): left allmulticast mode [ 924.391060][T11149] bridge_slave_0 (unregistering): left promiscuous mode [ 924.417860][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.515479][T11168] bond3: entered promiscuous mode [ 924.521113][T11168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 924.734346][T11171] ipvlan2: entered allmulticast mode [ 924.749829][T11171] bond3: entered allmulticast mode [ 925.255264][T11189] validate_nla: 2 callbacks suppressed [ 925.255284][T11189] netlink: 'syz.4.10263': attribute type 12 has an invalid length. [ 925.338364][T11206] atomic_op ffff888046835998 conn xmit_atomic 0000000000000000 [ 925.471466][T11217] __nla_validate_parse: 6 callbacks suppressed [ 925.471488][T11217] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10272'. [ 925.762348][T11230] xt_hashlimit: invalid rate [ 925.907953][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10281'. [ 926.208733][T11241] netlink: 'syz.4.10281': attribute type 2 has an invalid length. [ 926.290536][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10283'. [ 926.506242][T11273] sch_fq: defrate 0 ignored. [ 926.531591][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10286'. [ 926.542350][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10286'. [ 926.565263][T11275] tipc: Enabled bearer , priority 0 [ 926.780338][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10291'. [ 926.975272][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10295'. [ 926.986185][T11302] netlink: 'syz.4.10295': attribute type 5 has an invalid length. [ 927.000134][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10295'. [ 927.056131][T11302] geneve3: entered promiscuous mode [ 927.081379][T11302] geneve3: entered allmulticast mode [ 927.109995][T13718] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 927.138706][T13718] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 927.173846][T13718] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 927.203485][T13718] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 927.257774][T11316] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10298'. [ 927.285082][T11316] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10298'. [ 928.822791][T11404] bridge0: port 3(macvlan0) entered blocking state [ 928.829508][T11404] bridge0: port 3(macvlan0) entered disabled state [ 928.850750][T11404] macvlan0: entered allmulticast mode [ 928.859171][T11404] macvlan0: entered promiscuous mode [ 929.278062][T11430] net_ratelimit: 24 callbacks suppressed [ 929.278086][T11430] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 929.352107][T11432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 929.366912][T11432] team0: Port device batadv1 added [ 929.445494][T11438] xfrm1: entered promiscuous mode [ 929.450928][T11438] xfrm1: entered allmulticast mode [ 929.460438][T11440] netlink: 'syz.1.10329': attribute type 29 has an invalid length. [ 929.476971][T11440] smc: net device team0 applied user defined pnetid SYZ2 [ 929.486891][T11440] netlink: zone id is out of range [ 929.492064][T11440] netlink: del zone limit has 4 unknown bytes [ 929.501553][T11440] netlink: 'syz.1.10329': attribute type 29 has an invalid length. [ 929.561393][T11445] netlink: 'syz.4.10333': attribute type 3 has an invalid length. [ 929.776067][T11458] sctp: [Deprecated]: syz.4.10336 (pid 11458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 929.776067][T11458] Use struct sctp_sack_info instead [ 929.802304][T11458] sctp: [Deprecated]: syz.4.10336 (pid 11458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 929.802304][T11458] Use struct sctp_sack_info instead [ 929.875607][T11416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 929.881933][T11416] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 929.897866][T11416] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 929.904861][T11416] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 929.930921][T11416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 929.946976][T11416] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 929.978186][T11416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 929.985195][T11416] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 930.006213][T11416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 930.017161][T11416] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 930.544384][T11494] __nla_validate_parse: 10 callbacks suppressed [ 930.544407][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10345'. [ 930.593783][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10345'. [ 930.755278][T11504] pim6reg527: entered allmulticast mode [ 930.763854][T11505] netlink: 'syz.4.10349': attribute type 14 has an invalid length. [ 930.777468][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10349'. [ 930.900797][T11505] netlink: 'syz.4.10349': attribute type 14 has an invalid length. [ 930.950967][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10349'. [ 930.982800][T11517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10353'. [ 931.063166][T11530] ipt_ECN: cannot use operation on non-tcp rule [ 931.124450][T11533] team_slave_0: entered allmulticast mode [ 931.202354][T11536] team_slave_0: entered promiscuous mode [ 931.495149][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10360'. [ 931.645356][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.860293][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10366'. [ 931.889418][T11572] syzkaller0: entered promiscuous mode [ 931.913931][T11572] syzkaller0: entered allmulticast mode [ 931.926103][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10367'. [ 931.950302][T11579] netlink: 'syz.1.10369': attribute type 21 has an invalid length. [ 931.962214][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10368'. [ 931.974983][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10368'. [ 932.022750][T11579] netlink: 'syz.1.10369': attribute type 4 has an invalid length. [ 932.042245][T11588] netlink: 'syz.1.10369': attribute type 21 has an invalid length. [ 932.050366][T11579] netlink: 'syz.1.10369': attribute type 5 has an invalid length. [ 932.099762][T11588] netlink: 'syz.1.10369': attribute type 4 has an invalid length. [ 932.124205][T11588] netlink: 'syz.1.10369': attribute type 5 has an invalid length. [ 932.615311][T11624] bond0: entered allmulticast mode [ 932.620696][T11624] bond_slave_0: entered allmulticast mode [ 932.645501][T11624] bond_slave_1: entered allmulticast mode [ 932.651293][T11624] bridge_slave_1: entered allmulticast mode [ 932.799003][T11634] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 932.838011][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.845817][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.624803][T11674] gretap0: entered promiscuous mode [ 933.633245][T11674] vlan2: entered promiscuous mode [ 933.683223][T11680] netlink: 'syz.4.10389': attribute type 21 has an invalid length. [ 935.107347][T11751] syzkaller1: entered promiscuous mode [ 935.113227][T11751] syzkaller1: entered allmulticast mode [ 935.490183][T11777] netlink: 'syz.0.10414': attribute type 11 has an invalid length. [ 935.539898][T11777] tipc: Enabling of bearer rejected, failed to enable media [ 936.981097][T11861] __nla_validate_parse: 15 callbacks suppressed [ 936.981136][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10439'. [ 937.196170][T11877] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10442'. [ 937.210221][T11874] xt_l2tp: invalid flags combination: 0 [ 937.224975][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10442'. [ 937.236332][T11877] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10442'. [ 937.249362][T11877] netlink: 'syz.1.10442': attribute type 3 has an invalid length. [ 937.258765][T11877] netlink: 'syz.1.10442': attribute type 2 has an invalid length. [ 937.268656][T11877] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10442'. [ 937.576820][T11905] netlink: 436 bytes leftover after parsing attributes in process `syz.4.10450'. [ 937.637624][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10452'. [ 937.694494][T11912] netlink: 'syz.2.10455': attribute type 12 has an invalid length. [ 937.708654][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10456'. [ 937.742049][T11912] bond3: option primary_reselect: invalid value (255) [ 937.751190][T11912] bond3 (unregistering): Released all slaves [ 937.779144][T11913] veth0_macvtap: left promiscuous mode [ 937.941288][T11924] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10459'. [ 938.060749][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10462'. [ 938.226784][T11943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.238491][T11943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.332078][T11954] sctp: [Deprecated]: syz.3.10466 (pid 11954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.332078][T11954] Use struct sctp_sack_info instead [ 938.356687][T11943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.367493][T11943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.470493][T11943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.489778][T11943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.548889][T11965] erspan0: entered promiscuous mode [ 938.555171][T11965] erspan0: entered allmulticast mode [ 938.600090][T11943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.617055][T11943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.684844][T11970] netlink: 'syz.1.10472': attribute type 24 has an invalid length. [ 938.845961][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.864525][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.930729][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.940579][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.950295][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.958942][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.988528][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.012068][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.567683][T12025] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 939.613827][T12025] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 939.889152][T12043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.999009][T12048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.479246][T12076] pim6reg: entered allmulticast mode [ 940.758674][T13715] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.768276][T13715] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.812072][T13715] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.841809][T13715] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.224061][T12136] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 941.236099][T12136] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 941.244457][T12136] gretap2: entered promiscuous mode [ 941.249700][T12136] gretap2: entered allmulticast mode [ 941.456639][T12152] RDS: rds_bind could not find a transport for ::ffff:172.20.20.51, load rds_tcp or rds_rdma? [ 941.713910][T12165] syzkaller0: entered promiscuous mode [ 941.724208][T12165] syzkaller0: entered allmulticast mode [ 941.994397][T12173] syzkaller1: entered promiscuous mode [ 941.999950][T12173] syzkaller1: entered allmulticast mode [ 942.033099][T12169] __nla_validate_parse: 8 callbacks suppressed [ 942.033121][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10527'. [ 942.052100][T12169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.643869][T12206] x_tables: duplicate underflow at hook 2 [ 942.672736][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10538'. [ 942.786785][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10538'. [ 942.908466][T12222] erspan0: entered allmulticast mode [ 943.218434][T12241] netlink: 'syz.2.10548': attribute type 12 has an invalid length. [ 943.408745][T12256] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 943.439528][T12256] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 943.482160][T12261] veth0: entered promiscuous mode [ 943.544053][T12261] veth0: left promiscuous mode [ 943.775495][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10559'. [ 943.913600][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10563'. [ 943.925718][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10565'. [ 944.002296][T12309] netlink: 'syz.2.10566': attribute type 3 has an invalid length. [ 944.043289][T12310] netlink: 'syz.2.10566': attribute type 3 has an invalid length. [ 944.132145][T12316] netlink: 'syz.1.10568': attribute type 11 has an invalid length. [ 944.446604][T12341] macsec2: entered promiscuous mode [ 944.481357][T12340] syzkaller0: entered promiscuous mode [ 944.500327][T12340] 0: reclassify loop, rule prio 0, protocol 800 [ 944.948050][T12364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10583'. [ 945.169288][T12374] syzkaller1: entered promiscuous mode [ 945.183585][T12374] syzkaller1: entered allmulticast mode [ 945.539707][T12398] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10592'. [ 945.933404][T12419] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10598'. [ 946.099318][ T796] IPVS: starting estimator thread 0... [ 946.228981][T12430] IPVS: using max 29 ests per chain, 69600 per kthread [ 946.313182][T12434] syzkaller0: entered promiscuous mode [ 946.318791][T12434] syzkaller0: entered allmulticast mode [ 946.427984][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10604'. [ 946.799571][T12464] netlink: 'syz.2.10611': attribute type 3 has an invalid length. [ 947.062260][T12476] team0: Port device team_slave_0 removed [ 947.083926][T12477] __nla_validate_parse: 3 callbacks suppressed [ 947.083946][T12477] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10615'. [ 947.100236][T12480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10616'. [ 947.117660][T12480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10616'. [ 947.334679][T12488] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.10617'. [ 947.423990][T12494] syzkaller0: entered promiscuous mode [ 947.436024][T12494] syzkaller0: entered allmulticast mode [ 947.733669][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10624'. [ 948.007979][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10626'. [ 948.042817][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10626'. [ 948.051864][T12516] netlink: 'syz.3.10626': attribute type 14 has an invalid length. [ 948.123126][T12516] netlink: 'syz.3.10626': attribute type 13 has an invalid length. [ 948.176751][T12529] siw: device registration error -23 [ 948.514571][T12548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10635'. [ 948.539639][T12548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10635'. [ 948.572238][T12546] syzkaller0: entered promiscuous mode [ 948.592291][T12546] syzkaller0: entered allmulticast mode [ 948.617963][T12552] bridge_slave_1: left allmulticast mode [ 948.625680][T12552] bridge_slave_1: left promiscuous mode [ 948.631504][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.700665][T12552] bond0: (slave bond_slave_0): Releasing backup interface [ 948.728082][T12552] bond0: (slave bond_slave_1): Releasing backup interface [ 948.806269][T12552] team0: Port device team_slave_0 removed [ 948.868995][T12552] team0: Port device team_slave_1 removed [ 948.907352][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.918978][T12552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.951197][T12552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 948.988244][T12556] team0: Mode changed to "loadbalance" [ 949.210026][T12574] team0: port 1(macvlan2) entered blocking state [ 949.216676][T12574] team0: port 1(macvlan2) entered disabled state [ 949.223813][T12574] macvlan2: entered allmulticast mode [ 949.229366][T12574] team0: entered allmulticast mode [ 949.236772][T12574] macvlan2: left allmulticast mode [ 949.241903][T12574] team0: left allmulticast mode [ 949.274612][T12577] batman_adv: batadv0: Adding interface: dummy0 [ 949.280913][T12577] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.307355][T12577] batman_adv: batadv0: Interface activated: dummy0 [ 949.326943][T12578] batadv0: mtu less than device minimum [ 949.342938][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.354812][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.366630][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.378446][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.390166][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.401928][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.413754][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.425496][T12578] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.576387][T12585] netlink: 216 bytes leftover after parsing attributes in process `syz.3.10644'. [ 949.590381][T12588] netlink: 'syz.0.10643': attribute type 2 has an invalid length. [ 949.619057][T12585] netlink: 'syz.3.10644': attribute type 2 has an invalid length. [ 949.830464][T12600] netlink: 'syz.1.10648': attribute type 1 has an invalid length. [ 949.859145][T12600] netlink: 'syz.1.10648': attribute type 1 has an invalid length. [ 950.220744][T12625] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 950.601430][T12651] siw: device registration error -23 [ 950.615816][T12655] siw: device registration error -23 [ 950.705031][T12659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 951.165358][T12684] netlink: 'syz.3.10671': attribute type 1 has an invalid length. [ 951.184817][T12684] netlink: 'syz.3.10671': attribute type 2 has an invalid length. [ 951.220364][T12684] netlink: 'syz.3.10671': attribute type 1 has an invalid length. [ 951.411275][T12689] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 951.515626][T12689] bond7 (unregistering): Released all slaves [ 951.814193][T12710] IPVS: set_ctl: invalid protocol: 47 172.20.20.67:20000 [ 952.051720][T12719] netlink: 'syz.4.10682': attribute type 1 has an invalid length. [ 952.102428][T12719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 952.127399][T12719] vlan2: entered promiscuous mode [ 952.142856][T12719] bond6: entered promiscuous mode [ 952.155485][T12719] vlan2: entered allmulticast mode [ 952.189712][T12719] bond6: entered allmulticast mode [ 952.369101][T12722] dummy0: left promiscuous mode [ 952.461154][T12722] veth0_to_team: left promiscuous mode [ 952.478449][T12722] veth0_to_team: left allmulticast mode [ 952.530337][T12730] bond6: (slave bridge6): making interface the new active one [ 952.554963][T12730] bridge6: entered promiscuous mode [ 952.570810][T12730] bridge6: entered allmulticast mode [ 952.593790][T12730] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 952.625045][T12740] 8021q: VLANs not supported on vcan0 [ 953.099407][T12762] erspan0: left allmulticast mode [ 953.448520][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.522208][T12762] bond0: left allmulticast mode [ 953.536925][T12762] bond_slave_0: left allmulticast mode [ 953.544138][T12762] bond_slave_1: left allmulticast mode [ 953.549724][T12762] bridge_slave_1: left allmulticast mode [ 953.838655][T12772] __nla_validate_parse: 8 callbacks suppressed [ 953.838677][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10696'. [ 953.966068][T12790] netlink: 184396 bytes leftover after parsing attributes in process `syz.4.10699'. [ 954.113541][T12797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.345099][T12813] syzkaller0: entered promiscuous mode [ 954.351943][T12813] syzkaller0: entered allmulticast mode [ 954.533065][T12823] netlink: 112 bytes leftover after parsing attributes in process `syz.4.10709'. [ 954.571142][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10711'. [ 954.648832][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10712'. [ 956.164405][T12843] syzkaller0: entered promiscuous mode [ 956.180281][T12843] syzkaller0: entered allmulticast mode [ 956.260380][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10716'. [ 956.395379][T12850] syzkaller0: entered promiscuous mode [ 956.401935][T12850] syzkaller0: entered allmulticast mode [ 956.679463][T12881] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10726'. [ 958.200469][T12897] netlink: 'syz.4.10729': attribute type 3 has an invalid length. [ 958.353170][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10730'. [ 958.501458][T12915] netlink: 'syz.4.10733': attribute type 11 has an invalid length. [ 958.525946][T12916] netlink: 'syz.1.10734': attribute type 1 has an invalid length. [ 958.537091][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10735'. [ 958.610237][T12917] bond8: (slave bridge2): making interface the new active one [ 958.634099][T12917] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 959.239988][T12945] netlink: 'syz.4.10743': attribute type 7 has an invalid length. [ 959.445377][T12959] net_ratelimit: 15 callbacks suppressed [ 959.445396][T12959] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 959.446610][ T5810] IPVS: starting estimator thread 0... [ 959.468250][T12961] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 959.564817][T12966] IPVS: using max 29 ests per chain, 69600 per kthread [ 959.721925][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10753'. [ 960.017410][T12989] Bluetooth: MGMT ver 1.23 [ 960.223175][T13010] xt_TCPMSS: Only works on TCP SYN packets [ 960.282814][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10761'. [ 960.361622][T13021] netlink: 2344 bytes leftover after parsing attributes in process `syz.3.10763'. [ 960.641285][T13031] syzkaller0: entered promiscuous mode [ 960.649415][T13031] syzkaller0: entered allmulticast mode [ 960.726895][T13031] Cannot find add_set index 0 as target [ 960.877743][T13037] syz.1.10769 (13037) used obsolete PPPIOCDETACH ioctl [ 960.916852][T13046] netlink: zone id is out of range [ 960.924396][T13046] netlink: zone id is out of range [ 960.940810][T13046] netlink: zone id is out of range [ 960.959301][T13046] netlink: zone id is out of range [ 960.981226][T13046] netlink: zone id is out of range [ 961.000985][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10772'. [ 961.016612][T13046] netlink: zone id is out of range [ 961.035136][T13046] netlink: zone id is out of range [ 961.044225][T13046] netlink: zone id is out of range [ 961.323353][T13064] x_tables: unsorted entry at hook 3 [ 961.339389][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10775'. [ 961.418978][T13070] veth13: entered allmulticast mode [ 961.514778][T13077] netlink: 'syz.1.10779': attribute type 1 has an invalid length. [ 961.546736][T13077] 8021q: adding VLAN 0 to HW filter on device bond9 [ 961.564398][T13078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10778'. [ 961.629496][T13083] netlink: 'syz.1.10782': attribute type 10 has an invalid length. [ 961.637700][T13083] netlink: 396 bytes leftover after parsing attributes in process `syz.1.10782'. [ 961.705983][T13090] netlink: 'syz.1.10782': attribute type 10 has an invalid length. [ 961.804847][T13090] team0: Device vxcan1 is of different type [ 961.869875][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10782'. [ 961.909807][T13083] mac80211_hwsim hwsim0 wlan0 (unregistering): left allmulticast mode [ 962.165206][T13083] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 962.208629][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10782'. [ 962.525053][T13137] syzkaller0: entered promiscuous mode [ 962.530692][T13137] syzkaller0: entered allmulticast mode [ 962.564047][T13144] netlink: 'syz.3.10792': attribute type 1 has an invalid length. [ 962.694921][T13152] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 963.031712][T13144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 963.354786][T13186] netlink: 'syz.0.10803': attribute type 1 has an invalid length. [ 963.386437][T13186] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10803'. [ 963.630857][T13202] bond6: entered allmulticast mode [ 963.678294][T13202] bridge6: entered promiscuous mode [ 963.688232][T13202] bridge6: entered allmulticast mode [ 963.734913][T13202] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 964.043096][T13222] netlink: 'syz.4.10810': attribute type 1 has an invalid length. [ 964.165213][T13222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 964.322805][T13225] bond7: (slave geneve4): making interface the new active one [ 964.361628][T13225] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 964.564620][T13242] erspan2: entered allmulticast mode [ 964.941485][T13268] __nla_validate_parse: 4 callbacks suppressed [ 964.941506][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10822'. [ 964.983970][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10822'. [ 965.097873][T13272] netlink: 'syz.4.10821': attribute type 29 has an invalid length. [ 965.131758][T13271] netlink: 'syz.4.10821': attribute type 29 has an invalid length. [ 965.470152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805be3f800: rx timeout, send abort [ 965.818457][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10829'. [ 965.978583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805be3f800: abort rx timeout. Force session deactivation [ 966.019360][T13334] netlink: 'syz.1.10834': attribute type 11 has an invalid length. [ 966.030511][T13332] lo: MTU too low for tipc bearer [ 966.072532][T13332] tipc: Enabling of bearer rejected, failed to enable media [ 966.497434][T13362] xt_TCPMSS: Only works on TCP SYN packets [ 966.664496][T13374] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 967.458051][T13435] macsec2: entered promiscuous mode [ 967.534587][T13450] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10860'. [ 967.580365][T13442] netlink: 'syz.0.10859': attribute type 1 has an invalid length. [ 967.735595][T13460] netlink: 'syz.1.10863': attribute type 21 has an invalid length. [ 968.083123][T13460] netlink: 'syz.1.10863': attribute type 1 has an invalid length. [ 968.543568][T13472] syzkaller1: entered promiscuous mode [ 968.549118][T13472] syzkaller1: entered allmulticast mode [ 968.571994][T13493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10867'. [ 968.617388][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10868'. [ 969.367176][T13537] Cannot find map_set index 65533 as target [ 969.409651][T13539] #ÿ: renamed from bond_slave_0 [ 969.504610][T13548] netlink: 'syz.0.10882': attribute type 16 has an invalid length. [ 969.522653][T13548] netlink: 75 bytes leftover after parsing attributes in process `syz.0.10882'. [ 969.642991][T13558] net_ratelimit: 48 callbacks suppressed [ 969.643016][T13558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.878380][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10889'. [ 969.919090][T13570] vxcan4: entered promiscuous mode [ 970.837600][T13621] syzkaller0: entered promiscuous mode [ 970.900915][T13621] syzkaller0: entered allmulticast mode [ 971.098216][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10901'. [ 971.108521][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10903'. [ 971.200251][T13637] bond0: entered promiscuous mode [ 971.209771][T13637] bond_slave_0: entered promiscuous mode [ 971.216780][T13637] bond_slave_1: entered promiscuous mode [ 971.333998][T13650] netlink: 'syz.4.10906': attribute type 21 has an invalid length. [ 971.347170][T13650] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10906'. [ 971.365623][T13637] bond0: left promiscuous mode [ 971.370673][T13637] bond_slave_0: left promiscuous mode [ 971.377179][T13637] bond_slave_1: left promiscuous mode [ 971.516552][T13655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10911'. [ 971.525930][T13655] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10911'. [ 971.546011][T13655] netlink: 'syz.2.10911': attribute type 5 has an invalid length. [ 971.555659][T13655] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10911'. [ 971.595641][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10912'. [ 971.617950][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10912'. [ 971.627900][T13659] netlink: 'syz.1.10910': attribute type 6 has an invalid length. [ 972.572999][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 972.656476][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10927'. [ 972.728423][T13711] syzkaller0: entered promiscuous mode [ 972.745065][T13711] syzkaller0: entered allmulticast mode [ 972.846798][ T5810] IPVS: starting estimator thread 0... [ 972.902777][T13743] IPVS: ip_vs_add_dest(): server weight less than zero [ 972.933942][T13736] IPVS: using max 30 ests per chain, 72000 per kthread [ 974.685475][T13733] !: renamed from dummy0 [ 974.929173][T13785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10944'. [ 974.966970][T13787] nbd: socks must be embedded in a SOCK_ITEM attr [ 975.098543][T13795] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 975.102838][ T5837] block nbd2: Receive control failed (result -32) [ 975.822384][T13844] bond7 (unregistering): Released all slaves [ 976.262116][T13822] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 976.319960][T13822] bond1 (unregistering): Released all slaves [ 976.508807][T13822] lec:lec_atm_close: lec0: Shut down! [ 976.702414][T13890] sctp: [Deprecated]: syz.3.10968 (pid 13890) Use of int in max_burst socket option deprecated. [ 976.702414][T13890] Use struct sctp_assoc_value instead [ 976.901751][ T9068] IPVS: starting estimator thread 0... [ 976.920927][T13898] __nla_validate_parse: 4 callbacks suppressed [ 976.920949][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10970'. [ 977.002136][T13898] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 977.013365][T13904] IPVS: using max 24 ests per chain, 57600 per kthread [ 977.034995][T13909] netlink: 264 bytes leftover after parsing attributes in process `syz.4.10974'. [ 977.235146][T13915] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10976'. [ 977.295007][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10976'. [ 977.404446][T13923] wg1 speed is unknown, defaulting to 1000 [ 977.421965][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.481832][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.523194][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.537041][ T9068] lec:lec_start_xmit: lec0:No lecd attached [ 977.553587][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.612047][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10984'. [ 977.631120][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.655892][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10984'. [ 977.676275][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.690392][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.701100][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.716816][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.791900][T13951] netlink: 'syz.3.10986': attribute type 23 has an invalid length. [ 977.899156][T13961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10988'. [ 978.272811][T13984] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.10991'. [ 978.425601][T13998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10994'. [ 978.435774][T13978] syzkaller0: entered promiscuous mode [ 978.460966][T13978] syzkaller0: entered allmulticast mode [ 978.757567][T14013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11000'. [ 978.890296][T14019] FAULT_INJECTION: forcing a failure. [ 978.890296][T14019] name failslab, interval 1, probability 0, space 0, times 0 [ 978.915077][T14019] CPU: 0 UID: 0 PID: 14019 Comm: syz.3.11001 Not tainted syzkaller #0 PREEMPT(full) [ 978.915107][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.915121][T14019] Call Trace: [ 978.915131][T14019] [ 978.915141][T14019] dump_stack_lvl+0xe8/0x150 [ 978.915193][T14019] should_fail_ex+0x412/0x560 [ 978.915227][T14019] should_failslab+0xa8/0x100 [ 978.915257][T14019] __kmalloc_noprof+0xe8/0x760 [ 978.915280][T14019] ? tomoyo_encode+0x28b/0x550 [ 978.915404][T14019] tomoyo_encode+0x28b/0x550 [ 978.915437][T14019] tomoyo_realpath_from_path+0x58d/0x5d0 [ 978.915477][T14019] ? tomoyo_path_number_perm+0x219/0x630 [ 978.915501][T14019] tomoyo_path_number_perm+0x246/0x630 [ 978.915527][T14019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 978.915554][T14019] ? __lock_acquire+0x6b5/0x2cf0 [ 978.915593][T14019] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 978.915637][T14019] ? __fget_files+0x2a/0x420 [ 978.915669][T14019] ? __fget_files+0x2a/0x420 [ 978.915697][T14019] ? __fget_files+0x3a0/0x420 [ 978.915725][T14019] ? __fget_files+0x2a/0x420 [ 978.915758][T14019] security_file_ioctl+0xc3/0x2a0 [ 978.915805][T14019] __se_sys_ioctl+0x47/0x170 [ 978.915838][T14019] do_syscall_64+0x14d/0xf80 [ 978.915856][T14019] ? trace_irq_disable+0x3b/0x150 [ 978.915912][T14019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.915935][T14019] ? clear_bhb_loop+0x40/0x90 [ 978.915962][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.915986][T14019] RIP: 0033:0x7fcbdd59c799 [ 978.916007][T14019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.916026][T14019] RSP: 002b:00007fcbde3ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.916050][T14019] RAX: ffffffffffffffda RBX: 00007fcbdd815fa0 RCX: 00007fcbdd59c799 [ 978.916067][T14019] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 978.916081][T14019] RBP: 00007fcbde3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 978.916095][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.916108][T14019] R13: 00007fcbdd816038 R14: 00007fcbdd815fa0 R15: 00007ffe1a2c78d8 [ 978.916144][T14019] [ 978.916234][T14019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 979.430176][T14039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.490644][T14046] netlink: 'syz.1.11006': attribute type 2 has an invalid length. [ 979.530349][T14046] netlink: 'syz.1.11006': attribute type 1 has an invalid length. [ 980.158043][T14089] FAULT_INJECTION: forcing a failure. [ 980.158043][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.222651][T14089] CPU: 0 UID: 0 PID: 14089 Comm: syz.4.11020 Not tainted syzkaller #0 PREEMPT(full) [ 980.222682][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.222696][T14089] Call Trace: [ 980.222705][T14089] [ 980.222715][T14089] dump_stack_lvl+0xe8/0x150 [ 980.222752][T14089] should_fail_ex+0x412/0x560 [ 980.222787][T14089] _copy_from_user+0x2d/0xb0 [ 980.222822][T14089] dev_ethtool+0xcf/0x1ae0 [ 980.222928][T14089] ? kasan_quarantine_put+0xbb/0x1f0 [ 980.222957][T14089] ? __pfx_dev_ethtool+0x10/0x10 [ 980.222990][T14089] ? dev_load+0x21/0x1f0 [ 980.223076][T14089] ? dev_load+0x21/0x1f0 [ 980.223107][T14089] dev_ioctl+0x392/0x1150 [ 980.223142][T14089] sock_do_ioctl+0x23e/0x320 [ 980.223172][T14089] ? __pfx_sock_do_ioctl+0x10/0x10 [ 980.223197][T14089] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 980.223239][T14089] sock_ioctl+0x5c6/0x7f0 [ 980.223267][T14089] ? __pfx_sock_ioctl+0x10/0x10 [ 980.223293][T14089] ? __fget_files+0x2a/0x420 [ 980.223324][T14089] ? __fget_files+0x3a0/0x420 [ 980.223355][T14089] ? __fget_files+0x2a/0x420 [ 980.223390][T14089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 980.223418][T14089] ? __pfx_sock_ioctl+0x10/0x10 [ 980.223444][T14089] __se_sys_ioctl+0xfc/0x170 [ 980.223481][T14089] do_syscall_64+0x14d/0xf80 [ 980.223502][T14089] ? trace_irq_disable+0x3b/0x150 [ 980.223533][T14089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.223557][T14089] ? clear_bhb_loop+0x40/0x90 [ 980.223584][T14089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.223606][T14089] RIP: 0033:0x7f1e7099c799 [ 980.223628][T14089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.223648][T14089] RSP: 002b:00007f1e71879028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.223671][T14089] RAX: ffffffffffffffda RBX: 00007f1e70c15fa0 RCX: 00007f1e7099c799 [ 980.223687][T14089] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 980.223701][T14089] RBP: 00007f1e71879090 R08: 0000000000000000 R09: 0000000000000000 [ 980.223715][T14089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.223728][T14089] R13: 00007f1e70c16038 R14: 00007f1e70c15fa0 R15: 00007ffcd4825198 [ 980.223764][T14089] [ 981.080421][T14140] bridge_slave_0: left allmulticast mode [ 981.086993][T14140] bridge_slave_0: left promiscuous mode [ 981.096335][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.209042][T14146] vlan2: entered promiscuous mode [ 981.215547][T14146] geneve1: entered promiscuous mode [ 981.220943][T14146] vlan2: entered allmulticast mode [ 981.264212][T14146] geneve1: entered allmulticast mode [ 981.317185][T14151] netlink: 'syz.2.11040': attribute type 1 has an invalid length. [ 981.445768][T14151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 981.587523][T14167] bond3: (slave gretap3): making interface the new active one [ 981.631759][T14167] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 981.857540][T14189] netlink: 'syz.4.11046': attribute type 39 has an invalid length. [ 981.945231][T14194] tcpmss_tg6_check: 23 callbacks suppressed [ 981.945327][T14194] xt_TCPMSS: Only works on TCP SYN packets [ 981.970479][T14195] xt_TCPMSS: Only works on TCP SYN packets [ 982.045764][T14194] __nla_validate_parse: 10 callbacks suppressed [ 982.045786][T14194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11051'. [ 982.105649][T14176] netlink: 'syz.4.11046': attribute type 5 has an invalid length. [ 982.473864][T14216] netlink: 'syz.4.11054': attribute type 1 has an invalid length. [ 982.519540][T14222] net_ratelimit: 58 callbacks suppressed [ 982.519565][T14222] openvswitch: netlink: Flow actions attr not present in new flow. [ 982.540851][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11054'. [ 982.555812][T14224] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 982.589638][T14224] bridge0: entered allmulticast mode [ 982.800366][T14240] xt_hashlimit: size too large, truncated to 1048576 [ 982.919966][T14242] xt_hashlimit: size too large, truncated to 1048576 [ 983.107633][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11065'. [ 983.239885][T14262] netlink: 'syz.3.11067': attribute type 1 has an invalid length. [ 983.249000][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11067'. [ 983.403992][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11069'. [ 983.413903][T14271] netlink: 33 bytes leftover after parsing attributes in process `syz.4.11069'. [ 983.452857][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5910 ms [ 983.461711][ C0] lec:lec_tx_timeout: lec0 [ 983.468530][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 983.537119][T14283] Bluetooth: MGMT ver 1.23 [ 985.166724][T14281] bond7: entered allmulticast mode [ 985.182845][T14286] veth0: entered promiscuous mode [ 985.196472][T14289] veth0: left promiscuous mode [ 985.504608][T14321] netlink: 'syz.4.11080': attribute type 1 has an invalid length. [ 986.078566][T14349] netlink: 'syz.2.11085': attribute type 1 has an invalid length. [ 986.111962][T14333] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 986.122642][T14333] bond8: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 986.139093][T14333] bond8: (slave vcan1): making interface the new active one [ 986.147469][T14333] bond8: (slave vcan1): Enslaving as an active interface with an up link [ 986.159919][T14352] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11086'. [ 986.170128][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11082'. [ 986.316632][T14357] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 986.324385][T14358] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 986.399957][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11090'. [ 987.194007][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11098'. [ 987.226737][T14397] syzkaller0: entered promiscuous mode [ 987.232269][T14397] syzkaller0: entered allmulticast mode [ 987.287207][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11099'. [ 987.317180][T14397] bridge8: entered promiscuous mode [ 987.338055][T14397] bridge8: entered allmulticast mode [ 987.623959][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.714477][T14418] tipc: Enabled bearer , priority 0 [ 987.783813][T14426] »»»»»»: renamed from syzkaller0 (while UP) [ 987.907073][T14426] tipc: Disabling bearer [ 987.952184][T14435] : entered promiscuous mode [ 988.457463][T14453] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11112'. [ 988.597755][T14455] netlink: 'syz.2.11113': attribute type 1 has an invalid length. [ 988.698494][T14455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 988.823053][T14458] vlan3: entered promiscuous mode [ 988.828156][T14458] bond4: entered promiscuous mode [ 988.846283][T14458] vlan3: entered allmulticast mode [ 988.851605][T14458] bond4: entered allmulticast mode [ 988.882035][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 988.895484][T14462] pim6reg1: entered promiscuous mode [ 988.900936][T14462] pim6reg1: entered allmulticast mode [ 988.909574][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 988.919291][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 988.933814][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.941594][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.992777][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 989.003284][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 989.029032][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 989.062668][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 989.080884][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 989.222523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 989.230626][ C0] lec:lec_tx_timeout: lec0 [ 989.235513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 989.266506][T14466] wg1 speed is unknown, defaulting to 1000 [ 989.713819][T14490] delete_channel: no stack [ 989.788470][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.051163][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.134935][T14519] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 990.282379][T14524] openvswitch: netlink: Tunnel attr 311 out of range max 16 [ 990.296931][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.416283][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.475013][T14532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.516087][T14535] tipc: Enabled bearer , priority 0 [ 990.534764][T14535] syzkaller0: entered promiscuous mode [ 990.540712][T14535] syzkaller0: entered allmulticast mode [ 990.644995][T14546] netlink: 'syz.4.11132': attribute type 1 has an invalid length. [ 990.732335][T14546] bond9: entered promiscuous mode [ 990.738435][T14546] bond9: entered allmulticast mode [ 990.746224][T14546] 8021q: adding VLAN 0 to HW filter on device bond9 [ 990.756780][T14540] tipc: Resetting bearer [ 990.777673][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.820788][T14466] chnl_net:caif_netlink_parms(): no params data found [ 991.134093][ T5832] Bluetooth: hci4: command tx timeout [ 991.143994][T14534] tipc: Resetting bearer [ 991.165297][T14534] tipc: Disabling bearer [ 991.176074][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.197116][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.300579][ T1158] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.364847][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.377474][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.393133][T14466] bridge_slave_0: entered allmulticast mode [ 991.425267][T14466] bridge_slave_0: entered promiscuous mode [ 991.549981][T14586] netlink: 'syz.3.11140': attribute type 12 has an invalid length. [ 991.594207][T14586] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.11140'. [ 991.827006][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11145'. [ 992.039584][ T36] dvmrp0 (unregistering): left allmulticast mode [ 992.072022][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 992.188550][ T36] bond8 (unregistering): (slave bridge2): Releasing active interface [ 992.318858][ T36] bond1 (unregistering): Released all slaves [ 992.334801][ T36] bond0 (unregistering): Released all slaves [ 992.350907][ T36] bond2 (unregistering): (slave veth7): Releasing active interface [ 992.362139][ T36] bond2 (unregistering): Released all slaves [ 992.382187][ T36] bond3 (unregistering): Released all slaves [ 992.399721][ T36] bond4 (unregistering): Released all slaves [ 992.420164][ T36] bond5 (unregistering): (slave lo): Releasing backup interface [ 992.428791][ T36] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 992.443104][ T36] bond5 (unregistering): Released all slaves [ 992.461027][ T36] bond6 (unregistering): Released all slaves [ 992.480431][ T36] bond7 (unregistering): Released all slaves [ 992.498588][ T36] bond8 (unregistering): Released all slaves [ 992.517781][ T36] bond9 (unregistering): Released all slaves [ 992.532300][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.540039][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.547623][T14466] bridge_slave_1: entered allmulticast mode [ 992.558747][T14466] bridge_slave_1: entered promiscuous mode [ 992.587354][T14602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.635788][T14611] tipc: Enabled bearer , priority 0 [ 992.667539][T14608] syzkaller0: entered promiscuous mode [ 992.679289][T14608] syzkaller0: entered allmulticast mode [ 992.760235][ T36] : left promiscuous mode [ 992.851387][T14619] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11148'. [ 992.875170][T14608] tipc: Resetting bearer [ 992.951420][T14608] tipc: Disabling bearer [ 992.989922][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.000019][ T36] tipc: Disabling bearer [ 993.028357][ T36] tipc: Left network mode [ 993.060087][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.085339][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.124028][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11151'. [ 993.134104][ T1036] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 993.146124][ T1036] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 993.154657][ T1036] CPU: 1 UID: 0 PID: 1036 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 993.164176][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.174263][ T1036] Workqueue: events l2cap_info_timeout [ 993.179883][ T1036] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 993.185823][ T1036] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 993.205483][ T1036] RSP: 0018:ffffc9000dd37828 EFLAGS: 00010202 [ 993.211583][ T1036] RAX: dffffc0000000000 RBX: ffffffff8973f178 RCX: 0000000080000001 [ 993.219572][ T1036] RDX: 0000000000000000 RSI: ffffffff8973f178 RDI: 000000000000004c [ 993.227563][ T1036] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 993.235563][ T1036] R10: dffffc0000000000 R11: ffffffff8aadd850 R12: 0000000000000000 [ 993.244006][ T1036] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 993.251997][ T1036] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 993.260936][ T1036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.267548][ T1036] CR2: 00007fcc99445d30 CR3: 00000000ab3ea000 CR4: 00000000003526f0 [ 993.275547][ T1036] Call Trace: [ 993.278846][ T1036] [ 993.281788][ T1036] __kasan_check_byte+0x12/0x40 [ 993.286671][ T1036] lock_acquire+0x79/0x2e0 [ 993.291115][ T1036] lock_sock_nested+0x48/0x100 [ 993.295913][ T1036] ? l2cap_sock_ready_cb+0x46/0x160 [ 993.301208][ T1036] l2cap_sock_ready_cb+0x46/0x160 [ 993.306260][ T1036] l2cap_conn_start+0x779/0xff0 [ 993.311135][ T1036] ? __pfx_l2cap_conn_start+0x10/0x10 [ 993.316521][ T1036] ? l2cap_info_timeout+0x60/0xa0 [ 993.321560][ T1036] ? do_raw_spin_lock+0x12b/0x2f0 [ 993.326598][ T1036] ? __pfx___mutex_lock+0x10/0x10 [ 993.331646][ T1036] l2cap_info_timeout+0x68/0xa0 [ 993.336519][ T1036] ? process_scheduled_works+0xa25/0x1830 [ 993.342259][ T1036] process_scheduled_works+0xb02/0x1830 [ 993.347844][ T1036] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.353849][ T1036] ? assign_work+0x3d5/0x5e0 [ 993.358466][ T1036] worker_thread+0xa50/0xfc0 [ 993.363089][ T1036] kthread+0x388/0x470 [ 993.367170][ T1036] ? __pfx_worker_thread+0x10/0x10 [ 993.372303][ T1036] ? __pfx_kthread+0x10/0x10 [ 993.376904][ T1036] ret_from_fork+0x51e/0xb90 [ 993.381513][ T1036] ? __pfx_ret_from_fork+0x10/0x10 [ 993.386900][ T1036] ? __switch_to+0xc7d/0x1450 [ 993.391648][ T1036] ? __pfx_kthread+0x10/0x10 [ 993.396253][ T1036] ret_from_fork_asm+0x1a/0x30 [ 993.401048][ T1036] [ 993.404084][ T1036] Modules linked in: [ 993.409960][ T1036] ---[ end trace 0000000000000000 ]--- [ 993.416277][ T5832] Bluetooth: hci4: command tx timeout [ 993.421859][ T1036] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 993.429054][ T1036] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 993.470031][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11151'. [ 993.479114][ T1036] RSP: 0018:ffffc9000dd37828 EFLAGS: 00010202 [ 993.479146][ T1036] RAX: dffffc0000000000 RBX: ffffffff8973f178 RCX: 0000000080000001 [ 993.479164][ T1036] RDX: 0000000000000000 RSI: ffffffff8973f178 RDI: 000000000000004c [ 993.479180][ T1036] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 993.479195][ T1036] R10: dffffc0000000000 R11: ffffffff8aadd850 R12: 0000000000000000 [ 993.479211][ T1036] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 993.479226][ T1036] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 993.479245][ T1036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.479261][ T1036] CR2: 00007f129652b6b0 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 993.479366][ T1036] Kernel panic - not syncing: Fatal exception [ 993.479964][ T1036] Kernel Offset: disabled