last executing test programs: 4.12574715s ago: executing program 2 (id=2322): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x4001c00) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x3c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20020001) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b1400128010000180090001006d657461000000000800034000000130140000001100010001000080000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) sendfile(r0, r7, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x1b) 3.142432173s ago: executing program 2 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000002c0), 0x0}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r4, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x4c, 0x66, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0xe, 0x6}, {0x10, 0xc}}, [{0x8, 0xb, 0x100}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x401}]}, 0x4c}}, 0x0) 2.918811168s ago: executing program 3 (id=2337): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r1 = socket$inet6(0xa, 0x0, 0xffffffff) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000080)="ae990000", 0x4) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x2, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x10, 0x4}, 0x10}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000f00000700"/20, @ANYRES16=r7, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48) (async) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r11, 0x12, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000000180)=0x1000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='io_uring_req_failed\x00', r12, 0x0, 0x80000000}, 0x18) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r16, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000010201030000000000000000020000002c000180060003400004000014000180080001000000000008000200ffffffff0c000280040001"], 0x40}}, 0x8000) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r15, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0), &(0x7f0000000240)='syzkaller\x00', 0x2548, 0x0, 0x0, 0x41000, 0x62, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xa, 0xac, 0x7}, 0x10, 0x2e256, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r10, r10, r10, r10], 0x0, 0x10, 0x156}, 0x94) 2.821398431s ago: executing program 1 (id=2339): syz_emit_ethernet(0x1db, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1) socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfc, 0x0, 0xbffff010}, {0x6, 0x0, 0x1}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfc, 0x0, 0xbffff010}, {0x6, 0x0, 0x1}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtclass={0x24, 0x28, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xc, 0x9}, {0xffe0, 0x6}}}, 0x24}}, 0x4000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000017c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000fedbdf250000000008000400ac14141408000700", @ANYRES32=r7, @ANYBLOB="567946c2d3375726b7f88aade2d676d178cff895da33cba3ef46533f396101e1f40d14a1b9a9fccb4a6eb8551ffda57849fe21fafe967ba3febf8ea3b10fd92f164bb63d6b7d047a248962865fe1ffdba8c072eb8987d9f1363acc826e4fe3adb59fe09651a5620197250af492000eda1db8931d21589434984f15c34509d021f4c23096"], 0x24}}, 0x4000090) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x80) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000080003000601000041", 0x51}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e00)={0x84, r11, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10009, 0x1c}}}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="6db7a1d91097", {0x3, 0x40}, @value=@ver_80211n={0x0, 0xa, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @tdls_chsw_req={0xc, 0x5, {0x6c, 0x40, @void, {0x65, 0x12, {@from_mac=@broadcast, @device_b}}, {0x68, 0x4, {0x1, 0x4}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfed}, @chandef_params, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xfff9, 0x7, 0x1ab]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e00)={0x84, r11, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10009, 0x1c}}}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="6db7a1d91097", {0x3, 0x40}, @value=@ver_80211n={0x0, 0xa, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @tdls_chsw_req={0xc, 0x5, {0x6c, 0x40, @void, {0x65, 0x12, {@from_mac=@broadcast, @device_b}}, {0x68, 0x4, {0x1, 0x4}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfed}, @chandef_params, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xfff9, 0x7, 0x1ab]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r13, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$packet_int(r13, 0x107, 0x8, 0x0, 0x0) (async) setsockopt$packet_int(r13, 0x107, 0x8, 0x0, 0x0) 2.754845762s ago: executing program 2 (id=2340): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, {0x7d}, 0x0, 0x6e6bb3, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0xfffffffffffffdd0) (async) connect$llc(r5, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) (async) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af2000000000000000010000000c000b800849809f2c", @ANYRESDEC=r0], 0x20}}, 0x0) (rerun: 32) 2.751770862s ago: executing program 3 (id=2341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r2, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000c7cd", @ANYRES16=r3, @ANYBLOB="000226bd7000fddbdf2501000000080004000008000008000400df000000080003000700000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0x10, 0x9af0}]}]}, {0x0, [0x2e, 0x5f, 0x2e]}}, &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x1}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x3c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.558745463s ago: executing program 3 (id=2343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="8801000010000905000000000000000008004f00", @ANYRES32, @ANYBLOB="a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871282d28"], 0x188}], 0x1}, 0x40040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r1, 0x15b4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r4}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0x11) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r11) 2.467276226s ago: executing program 4 (id=2345): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) socket$unix(0x1, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r4, &(0x7f0000001100)=""/4109, 0x100d) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044029}, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r1, {0xffe2, 0xfff1}, {0x2, 0xfff3}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) 2.400708066s ago: executing program 0 (id=2346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r0], 0x58}}, 0x4000) 2.206165612s ago: executing program 0 (id=2347): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{}, {0x3, 0x1}}], 0x38) sendfile(r0, r0, &(0x7f0000000040)=0x1, 0x4) socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r1, &(0x7f0000001300)={&(0x7f0000000080)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc, &(0x7f00000012c0)=[{&(0x7f00000000c0)="3b2a6f4f099889c20ee235c150a6a4e5d347c40e8df4963a460ff9882fa15d", 0x1f}, {&(0x7f0000000100)="8eecbba554fcdcda5643e9a507af4fbbe0f899798af8001ed7d91dee2c7d484b07db73ae88a7b67aa7e859821e2053abd27157e3e95c2851ec79961edcc7e9a391196e3bff84be67014f42bdd7e62c8294b06d9866269297567dfed45221dfaa6e79280641e7fdf4c4a9e8e587960c8eb650eadfae53d6c9fceb27fd73a14947209200b1adc76f002edea36819891652c29bc2928c3969919fddf2c03717f11eb6c02f7bed8c5efa6f59581036983d8e95d820c877bfb0569cca5a730f6de0da73f7ecf4c89b7abdf6b4cf51b87f6081eb83b7c6f637da720c729b5bcb461d3ed27da9064f34a20b916a49b3b4d87b6b4e4059df4f1df272024fbb363f25d16e284051ff674e8c0dd58ce1e23149c05fa2871f92a608d73d27590da59d74b8a60c04bbc83e1d579f84a654a00e2d972b1ffa88e9ff078af008edf0b364bd33e134ac1af52c1c84009a4657836d3b3c780f0023afe846cb77e8185c4e6b8127b3739df0fd84ed302bc1120843e5da84bb358ec2dcaf70998795337d887c9809dac4fa938fdf4a3f52fb9f40333fbbfa3ad5345ae6a015e8ccf585d629da1af2d58b97308da17af980098895b289f1d727f6dc09b0a192ab4fcdd71f8f5c98bbb884969e5f7ee12f514d18646204c3e190988cba9cbc93f2e5e8c1b0966109bf29084c8b6202a02019c93ce6e2780698e1636fa4d687e2586c2e96293b353bf3a8745f786301841d27e2f998f052e6e05f4ad7602f05d0244dd1e2cfe9d4340ecc6fcd79fc2d8e8a15ffab1bee5f702ba1eada34be00ae3a33e9b6ef8ebf4a57067a289212ab0eeac0b2599495983704f8efc1a1b12f732c7e88c9e7b5934b81cb65caa578abc52021bad1be63fdbb3d07ac0d167af5840b0804df0134c02d258b96a93c4a8466eb416fefb69ba8cf43dc4b1bdd7dec079c2ccb91be1cfb295e8c534470596a5f7dea1b3742ae0f069d8686f82f96b4331250fe075de7d4699b45a01ee24b989f876ff8b5bca726692771086f754db354ab2b3d7515d7044d0b0222983e67632b9320c48c29c91f775b82c4cadf189c6c32c0f7bcfd1df96a254ea293eb9163e5dcc7c686a760d373c988809527ef22b2dab9f13c6ca85e32c1545637cb28cb7f8d1a01a033886834b6f94f27947034080097879a07e7357daefd1f94e083f3a3b9cc9e3369a3663bb5a647d408e22f9d80ec0f6e8fd4ba6aa52c3841c10900bb80020b6aac19ff54ab2352845d4c808302487bc8765bd8b561490c67d555984c2390ae587f0f61575845851f923c510e57f42f60a21a58dcb17888661009997107367323152b5738a26d8d77f3589f36d665027886ae2f36ba102476f5b384e45ed363074a42c15924d1d463fb92bc32261ca3763e38403043eb6b9cfe5597f2a6a6ca7da95592ff88e0377d7edf7d4bf889a59bb504e4124ce719f557809295ed3b498c6e870fd1911b2aab448d230e35aa9ee61603f88e2b4e1f1ff5a6d1520328d2559f716c40c359e011d388bcbd6575dbb1379491275ebe46db8997105522cad36d7d7fedcd5f116dc36a67664c0fe762c86e9fde5ae32a05bf3709664dc463e5a75fe1ba9bc9f0049971c6d9240952e4da53804d0d201bf1cb818adb0b9801f396b6d6cb04574b234126d603d2800d469ee73e59b95ed36d18313d4a3bce0a4dc4f53b515dd4a13a2a183f7cc5ef90ff5bd9a877d903073832ef9f1dc0579137c1db83696c3e661e3bf0eb388fec63b3643b0b70e7e5bb7b10ad7ff8a774950b5911e708840c8f064919eb5c341f7237889aa47ef08bdc24a7d7e93efb3613c1e849c40b8199d3df498b0cb3a4e6eb43a67343f0aa16323a0df6dc2caa7e2e5f5b8d3d6d200034bd956ca8fb7c7d419de72ca3be7743e5f21f7836b450dd2a02057b570beda9238925f3260343161986d18b77ea131c01a45854cd4d4213d66e09284212a8e364bf2daf5abb4007b5a05250be147cef2027cfc13c46663f0af31862bcb503076f42863bb593dca2209cfb7deb547a0177df03c51a79bc9f1f40b0414e790f5fa6a875fa61dbcb28dd79dd98b0a5f7890ce3fb3318fbfdc8fafaac74d8fc22fd568b957f70222008d259ae1db439cbb54bcdf39089375c1f9bbc32749d62c92c6ada0d4cff8d4f9ca3f6ae746ac3bafc95f61652b25c636a92964cb4f2dc205e18541700771f1461398b479779fbc592bd49d5fd0ff0127849f28de8349c157cea95359fb20f52c722a49e93ce6eb10b6cd0bcea049aa22248be463cbfa247577a6371fef582acd983c5b7095f6a58d4c318e1a586bcf07e5fa5f5589a487b2e46ace9e578dc83ecb2bd850d21d13ef70283b4d380acbf68d90a3fc3bcffd7d5d031fb587df9abdc1bbc2bacf4e414c24e4bcc1d4c0bb5a6768e197b6bb9b38c6e3a4a6b2b6689a401e7af5020a85d3a6465e07f60ae9f2e0e85d8bf534b6fe88da654c20d3d0550acd54e2cc2e61c3dee210d205a7cbb22fc691085e9b89016d98cf4ca935bb86a663aa371cd56c19d99830b4b973b5c59e967ece9c6c7975b36bf0e56cf784bf46aed70f42bcbe027974b44b61e3777a598fa67ca00e5392bb0f83ac0359fdd752bad2e99591c81d0f7fb43b4975a83e8d37cb6859c527a4011b5eaa74638b9155ad159ebbbaf2e237c223a5b3cf0b8c09a6b0f7c14e1042cb40ca4ed592aa2dbc205183948455fae6854a3c511225bb14c0d4bc37a41d173b498ef5dcefd2a0106c037e3823442bdc8efaa320dced7d5de203883b8e18e374c733ff2218f21ce2d471a91657ed5b431c78f18b86e7960120a10f262c98bc1fa92153a3ba1b555ce61d697d4cf3b8f105d679108747c1043c4380ae2c5ed8c7f755dc2b3361edcbef7e7fbd963ba08f6dc520e4350fad8aa167cf2ebddb567450f7e6d2662633ad2c7009d8fbd51a43e32f32752cd4046ee166248f14dc836b32dcab4d93e404aff47171c03cb9b85f8a489c3f892be79325d21cbfb2248ecab05484242e7f627df81f02048564e103628089c03aaa34caba7854bc7db0e46779422b27a5151f14ce1028978d973c1758a0ab4de6ca2ebce50ee4dd65ec249449ef356d464e97d56eaa119312b4c3d447182f4f7702073bf4dfdf686c98bbd2139ee9fb4b9a75a9b962a98ed11b651502d19c5ae110e8074239fb4d9e1ad1c611aac07f53c5a2b1d981731c3a1c08e45af6596e7fb0a8f5f0e259296aca50cc10bb6e58ab45097cc6f712ceef6883cd74b93aacd68dd946ad87353b58def294241487e74ccf5fcbf5a669d9a48181acc258fdf1cc59171c0ab8653e8fea6df4a93f40064571ded1b3c43242f0d8bb758c04d253095603db40fcc00d494e27412ed6e1d1fb1fc25b3d6cfef21bcbfe270b750df7e9e41df8fcb6bb6e8dfb285cf457ed8154f9f0d3a1b9cb017a803a592bb4a40e9f2f6eaecb4ac036eb20524bab04a4053bce1cd99fce9476a572eba4587528bb0584cbcf90c6f3e6bab6c5df32e19c92cb1857a441938b8a6b4ed08df5c942a906d7a42c6ab133e79f13d6a5ef41b73f050edd0868d5ce8fa388f157005e0be2a50eda739685b927294157526350c349312fc114f97f1a7c7d8696dfc6b3dc3b3628a2fb705f22a0d7c2ed4af173eb43aef370adc8569d8d28a4220f0d25901ecee2c0706cf4cc966260a12ace260ca80d21a60d296425a23248db63db224fd75e06761b1534725ea1d990b2cb583005b4f711f359b0ba6648f9cd95164fbb16d1a89a73b30c8bacdd72404f2ee247642e1d813a68f68fa743a83f1b7c36dd0a555958e239c648dfedfdeb7d25d70247f2a3df53103d0b0cf0a37fec8447343d21235142bbac8e46ab244d9bf8dca9473a67f2b3eea2db794babba386fbcb1c74cffe3122ca640094b4fb659c020e0f7be25fc623c8348b18edb3b3f468a8f9df923cbc2075db3246bd82d3b4645bb52213ce4391da828cbdbfd259e7a92904a5b385bc5e4d8d777152958ba6ea0af27d5bbc25c6e19de03bc4cd7e02c9ddecc6496fab2e7b3943b97fa6a43a9dda4e3d471a4aa01e010f6b27b550c1127848c68b617a6ef829d906c8314fc1f398afb1c57734d1237f351b72597157c060516938e4dcf8a8efc03353b8df1a99e2707e62164901a2cd6303e5f2f02a81cd403cd35399bf2de351f81a19cd84abc4d127c342b1cb66c0939a8a9636782082a1bae068f105fd04a544b27f49eb376193f4cf37e9eafba9eaa12994b4910f6d4833b4860ef7a9a11596473f8be804d3e06c13dc384dbe7b7ba8985a8d21e743f80272cc4b7bcfcca33d1d116e633fa8fcb5c160d5b809bd458a7477c85b06ef0b0d6fd0c84f0118ee38291dc587007355b62a2ecad59606342c5f5b75e73b159b5ff89d82d0d92017d2792e2c731d3dcd3db319f6388a63347c499516a91a5b049f2aee53b3fbb174a4809ddc85cd460b5ac29cb111609ff0b270362dbaffb74b113bf52f39c34d8db14a47098895749a40a043c0616281c14a7574a8b2749bce5eab6a1d194e6c33890ef79fd28b4b4d125633262f0288067686d0567fa9a939b28f24f404128caab13495c3ecfb20ddf02c009e8d10a36834e18bd1ade6e9cfad7e767319b2b577c1c52e86a2b586af290cc82d9d60a4154f1a38f64f55d5793601a100d4b14c795b86502dea910bc2223f68fd4f4b809bad741bdab2d7827b0eebd58c9080ee27f7ce4e3655259b63b28c9a0fb27db8ada8f4cda3c0531de725b45c50943a969be927c4f777f54a917dbfbfc14b05653804852c23941b171c607a703a6c14bdaaf1ff1d497a04cf7d186d6e7f2e35886e3377d98485aed1ebbfe07ffafe9fd8114348fcdd18c5f135a7ce61bc11d7a489527fc849d366823ae3b04c713c9ba53a40f01aaf458cc3d81579f50b3c1a5ed75b3e5eb9b14bd312d973d1a11e59db8ecfa7d5924a17595aff2ac3f5188447a81c0aa5ec834c4d8a16d408f8467cd0d7bcedc1a66b90576732c4c77715e615b95cb4b659086ff6c2827da5875a81b19c2f69e8bda21327fd3c79b26c679545e703f2bdc84d6d33c6a38b306dfb54f1c44d2dbe0711146b774a45d5c0873a6b90508c83df46c36dce17389a92b853934ff5e87fb5a8943389fb02eca90f0fb63f3343b5e5debaed4c034a0b3a9118a8a25616f490633d18cddec15028442959481e69c7784f6a10dcede935be814723c098503c6184f9048716edab549105d404709ebde3182d60512d4551329631ee760280ab3b671033bfeefda685fca0d02184d507c3c9a191620203cda906ed8e0357f81be386f8562ed57525e302be498eff06d4909102636a96f559fcb96612f8f264132e81f8e78d2b5a956a5ac73d1b4d3096741b065fb6139ce2e1c6811a9fc7545389e454bd0918b5a3d58ae288282300c068674c4dd98c616db77ef33ff61b99b6a9c46e4b23f2a329bd7d9fbd26a6d9ff6ceefae319f6c0b8ee723db12c567f132595cc7297dadf6638f25c69e26a2ddfcf0b7d0d698b9c02c15a5b8911c58471a077ea7d108c6c485b8511b3561772f0a768e5b826b8b34de0a9335050176d9f1d9debcdc26988f8e73b3af5ccb465f4fdb4a1e1293c723e3f8f28a0bd2c349634d863bede10ec069c37fb6af3fb2fa440577e2c933a5e381399ba4ac221a11f82c8991fa9d07183fbde8e5cc27a317ca09258e4150e54702383dacf8cd6fbe3ed5582380b39f8b16ad45def6477bbade6940333cb3d78cbd10600027e0b67e0dc00dede742f09a71efb245975de260d05d4", 0x1000}, {&(0x7f0000001100)="7de957c22e657158cff8920b80c0a64d034f57863cc69c5c01c1853af611f961f8fb9b6f3a4e777a1368806afc456215ddbe38ced588f70de10cd81b958c8ef5147f67c1b9a4f9984c52eb81e3337b49e23e096a56a0428d04834cbe0daab1209bbcd943af77d60183d67902bbd35d036c8d73d51a14c3a1dd9a4de6e00ab9e4fb041ab13bce8aeab4341b9c92e82bdc2c281c4d4f4567", 0x97}, {&(0x7f00000011c0)="1a75efc6b0c2281b2697b4e09ec10af0bf077e6f4b0a558a877d3cf202692be8196eecd8760c92052f0443024ff413b793019a97e0fb03baa9012857df402b93defb1ab6d365508a2b489cc3d4f2e523f614f7c8c322c9e4fdc872d7218753132ba97d9141e178fdb2ae0b8a27b16ef90a94fe2be63b0ca2cd598077f4715ea488230de42b3d425d4c10ec4ebe8ec014ef0732de9f24bc8e66f6377769c4abaadc9b705cfb76b2bf9ffe50ef27bf623596bc6f5395a7abb854f1a442cc1d990cba53cd300d07aa50f5885e96975e26ba2d112d58cea3c3c57a57e36d9d7ddb8342", 0xe1}], 0x4, 0x0, 0x0, 0x40000}, 0x38) (async) sendmsg$qrtr(r1, &(0x7f0000001300)={&(0x7f0000000080)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc, &(0x7f00000012c0)=[{&(0x7f00000000c0)="3b2a6f4f099889c20ee235c150a6a4e5d347c40e8df4963a460ff9882fa15d", 0x1f}, {&(0x7f0000000100)="8eecbba554fcdcda5643e9a507af4fbbe0f899798af8001ed7d91dee2c7d484b07db73ae88a7b67aa7e859821e2053abd27157e3e95c2851ec79961edcc7e9a391196e3bff84be67014f42bdd7e62c8294b06d9866269297567dfed45221dfaa6e79280641e7fdf4c4a9e8e587960c8eb650eadfae53d6c9fceb27fd73a14947209200b1adc76f002edea36819891652c29bc2928c3969919fddf2c03717f11eb6c02f7bed8c5efa6f59581036983d8e95d820c877bfb0569cca5a730f6de0da73f7ecf4c89b7abdf6b4cf51b87f6081eb83b7c6f637da720c729b5bcb461d3ed27da9064f34a20b916a49b3b4d87b6b4e4059df4f1df272024fbb363f25d16e284051ff674e8c0dd58ce1e23149c05fa2871f92a608d73d27590da59d74b8a60c04bbc83e1d579f84a654a00e2d972b1ffa88e9ff078af008edf0b364bd33e134ac1af52c1c84009a4657836d3b3c780f0023afe846cb77e8185c4e6b8127b3739df0fd84ed302bc1120843e5da84bb358ec2dcaf70998795337d887c9809dac4fa938fdf4a3f52fb9f40333fbbfa3ad5345ae6a015e8ccf585d629da1af2d58b97308da17af980098895b289f1d727f6dc09b0a192ab4fcdd71f8f5c98bbb884969e5f7ee12f514d18646204c3e190988cba9cbc93f2e5e8c1b0966109bf29084c8b6202a02019c93ce6e2780698e1636fa4d687e2586c2e96293b353bf3a8745f786301841d27e2f998f052e6e05f4ad7602f05d0244dd1e2cfe9d4340ecc6fcd79fc2d8e8a15ffab1bee5f702ba1eada34be00ae3a33e9b6ef8ebf4a57067a289212ab0eeac0b2599495983704f8efc1a1b12f732c7e88c9e7b5934b81cb65caa578abc52021bad1be63fdbb3d07ac0d167af5840b0804df0134c02d258b96a93c4a8466eb416fefb69ba8cf43dc4b1bdd7dec079c2ccb91be1cfb295e8c534470596a5f7dea1b3742ae0f069d8686f82f96b4331250fe075de7d4699b45a01ee24b989f876ff8b5bca726692771086f754db354ab2b3d7515d7044d0b0222983e67632b9320c48c29c91f775b82c4cadf189c6c32c0f7bcfd1df96a254ea293eb9163e5dcc7c686a760d373c988809527ef22b2dab9f13c6ca85e32c1545637cb28cb7f8d1a01a033886834b6f94f27947034080097879a07e7357daefd1f94e083f3a3b9cc9e3369a3663bb5a647d408e22f9d80ec0f6e8fd4ba6aa52c3841c10900bb80020b6aac19ff54ab2352845d4c808302487bc8765bd8b561490c67d555984c2390ae587f0f61575845851f923c510e57f42f60a21a58dcb17888661009997107367323152b5738a26d8d77f3589f36d665027886ae2f36ba102476f5b384e45ed363074a42c15924d1d463fb92bc32261ca3763e38403043eb6b9cfe5597f2a6a6ca7da95592ff88e0377d7edf7d4bf889a59bb504e4124ce719f557809295ed3b498c6e870fd1911b2aab448d230e35aa9ee61603f88e2b4e1f1ff5a6d1520328d2559f716c40c359e011d388bcbd6575dbb1379491275ebe46db8997105522cad36d7d7fedcd5f116dc36a67664c0fe762c86e9fde5ae32a05bf3709664dc463e5a75fe1ba9bc9f0049971c6d9240952e4da53804d0d201bf1cb818adb0b9801f396b6d6cb04574b234126d603d2800d469ee73e59b95ed36d18313d4a3bce0a4dc4f53b515dd4a13a2a183f7cc5ef90ff5bd9a877d903073832ef9f1dc0579137c1db83696c3e661e3bf0eb388fec63b3643b0b70e7e5bb7b10ad7ff8a774950b5911e708840c8f064919eb5c341f7237889aa47ef08bdc24a7d7e93efb3613c1e849c40b8199d3df498b0cb3a4e6eb43a67343f0aa16323a0df6dc2caa7e2e5f5b8d3d6d200034bd956ca8fb7c7d419de72ca3be7743e5f21f7836b450dd2a02057b570beda9238925f3260343161986d18b77ea131c01a45854cd4d4213d66e09284212a8e364bf2daf5abb4007b5a05250be147cef2027cfc13c46663f0af31862bcb503076f42863bb593dca2209cfb7deb547a0177df03c51a79bc9f1f40b0414e790f5fa6a875fa61dbcb28dd79dd98b0a5f7890ce3fb3318fbfdc8fafaac74d8fc22fd568b957f70222008d259ae1db439cbb54bcdf39089375c1f9bbc32749d62c92c6ada0d4cff8d4f9ca3f6ae746ac3bafc95f61652b25c636a92964cb4f2dc205e18541700771f1461398b479779fbc592bd49d5fd0ff0127849f28de8349c157cea95359fb20f52c722a49e93ce6eb10b6cd0bcea049aa22248be463cbfa247577a6371fef582acd983c5b7095f6a58d4c318e1a586bcf07e5fa5f5589a487b2e46ace9e578dc83ecb2bd850d21d13ef70283b4d380acbf68d90a3fc3bcffd7d5d031fb587df9abdc1bbc2bacf4e414c24e4bcc1d4c0bb5a6768e197b6bb9b38c6e3a4a6b2b6689a401e7af5020a85d3a6465e07f60ae9f2e0e85d8bf534b6fe88da654c20d3d0550acd54e2cc2e61c3dee210d205a7cbb22fc691085e9b89016d98cf4ca935bb86a663aa371cd56c19d99830b4b973b5c59e967ece9c6c7975b36bf0e56cf784bf46aed70f42bcbe027974b44b61e3777a598fa67ca00e5392bb0f83ac0359fdd752bad2e99591c81d0f7fb43b4975a83e8d37cb6859c527a4011b5eaa74638b9155ad159ebbbaf2e237c223a5b3cf0b8c09a6b0f7c14e1042cb40ca4ed592aa2dbc205183948455fae6854a3c511225bb14c0d4bc37a41d173b498ef5dcefd2a0106c037e3823442bdc8efaa320dced7d5de203883b8e18e374c733ff2218f21ce2d471a91657ed5b431c78f18b86e7960120a10f262c98bc1fa92153a3ba1b555ce61d697d4cf3b8f105d679108747c1043c4380ae2c5ed8c7f755dc2b3361edcbef7e7fbd963ba08f6dc520e4350fad8aa167cf2ebddb567450f7e6d2662633ad2c7009d8fbd51a43e32f32752cd4046ee166248f14dc836b32dcab4d93e404aff47171c03cb9b85f8a489c3f892be79325d21cbfb2248ecab05484242e7f627df81f02048564e103628089c03aaa34caba7854bc7db0e46779422b27a5151f14ce1028978d973c1758a0ab4de6ca2ebce50ee4dd65ec249449ef356d464e97d56eaa119312b4c3d447182f4f7702073bf4dfdf686c98bbd2139ee9fb4b9a75a9b962a98ed11b651502d19c5ae110e8074239fb4d9e1ad1c611aac07f53c5a2b1d981731c3a1c08e45af6596e7fb0a8f5f0e259296aca50cc10bb6e58ab45097cc6f712ceef6883cd74b93aacd68dd946ad87353b58def294241487e74ccf5fcbf5a669d9a48181acc258fdf1cc59171c0ab8653e8fea6df4a93f40064571ded1b3c43242f0d8bb758c04d253095603db40fcc00d494e27412ed6e1d1fb1fc25b3d6cfef21bcbfe270b750df7e9e41df8fcb6bb6e8dfb285cf457ed8154f9f0d3a1b9cb017a803a592bb4a40e9f2f6eaecb4ac036eb20524bab04a4053bce1cd99fce9476a572eba4587528bb0584cbcf90c6f3e6bab6c5df32e19c92cb1857a441938b8a6b4ed08df5c942a906d7a42c6ab133e79f13d6a5ef41b73f050edd0868d5ce8fa388f157005e0be2a50eda739685b927294157526350c349312fc114f97f1a7c7d8696dfc6b3dc3b3628a2fb705f22a0d7c2ed4af173eb43aef370adc8569d8d28a4220f0d25901ecee2c0706cf4cc966260a12ace260ca80d21a60d296425a23248db63db224fd75e06761b1534725ea1d990b2cb583005b4f711f359b0ba6648f9cd95164fbb16d1a89a73b30c8bacdd72404f2ee247642e1d813a68f68fa743a83f1b7c36dd0a555958e239c648dfedfdeb7d25d70247f2a3df53103d0b0cf0a37fec8447343d21235142bbac8e46ab244d9bf8dca9473a67f2b3eea2db794babba386fbcb1c74cffe3122ca640094b4fb659c020e0f7be25fc623c8348b18edb3b3f468a8f9df923cbc2075db3246bd82d3b4645bb52213ce4391da828cbdbfd259e7a92904a5b385bc5e4d8d777152958ba6ea0af27d5bbc25c6e19de03bc4cd7e02c9ddecc6496fab2e7b3943b97fa6a43a9dda4e3d471a4aa01e010f6b27b550c1127848c68b617a6ef829d906c8314fc1f398afb1c57734d1237f351b72597157c060516938e4dcf8a8efc03353b8df1a99e2707e62164901a2cd6303e5f2f02a81cd403cd35399bf2de351f81a19cd84abc4d127c342b1cb66c0939a8a9636782082a1bae068f105fd04a544b27f49eb376193f4cf37e9eafba9eaa12994b4910f6d4833b4860ef7a9a11596473f8be804d3e06c13dc384dbe7b7ba8985a8d21e743f80272cc4b7bcfcca33d1d116e633fa8fcb5c160d5b809bd458a7477c85b06ef0b0d6fd0c84f0118ee38291dc587007355b62a2ecad59606342c5f5b75e73b159b5ff89d82d0d92017d2792e2c731d3dcd3db319f6388a63347c499516a91a5b049f2aee53b3fbb174a4809ddc85cd460b5ac29cb111609ff0b270362dbaffb74b113bf52f39c34d8db14a47098895749a40a043c0616281c14a7574a8b2749bce5eab6a1d194e6c33890ef79fd28b4b4d125633262f0288067686d0567fa9a939b28f24f404128caab13495c3ecfb20ddf02c009e8d10a36834e18bd1ade6e9cfad7e767319b2b577c1c52e86a2b586af290cc82d9d60a4154f1a38f64f55d5793601a100d4b14c795b86502dea910bc2223f68fd4f4b809bad741bdab2d7827b0eebd58c9080ee27f7ce4e3655259b63b28c9a0fb27db8ada8f4cda3c0531de725b45c50943a969be927c4f777f54a917dbfbfc14b05653804852c23941b171c607a703a6c14bdaaf1ff1d497a04cf7d186d6e7f2e35886e3377d98485aed1ebbfe07ffafe9fd8114348fcdd18c5f135a7ce61bc11d7a489527fc849d366823ae3b04c713c9ba53a40f01aaf458cc3d81579f50b3c1a5ed75b3e5eb9b14bd312d973d1a11e59db8ecfa7d5924a17595aff2ac3f5188447a81c0aa5ec834c4d8a16d408f8467cd0d7bcedc1a66b90576732c4c77715e615b95cb4b659086ff6c2827da5875a81b19c2f69e8bda21327fd3c79b26c679545e703f2bdc84d6d33c6a38b306dfb54f1c44d2dbe0711146b774a45d5c0873a6b90508c83df46c36dce17389a92b853934ff5e87fb5a8943389fb02eca90f0fb63f3343b5e5debaed4c034a0b3a9118a8a25616f490633d18cddec15028442959481e69c7784f6a10dcede935be814723c098503c6184f9048716edab549105d404709ebde3182d60512d4551329631ee760280ab3b671033bfeefda685fca0d02184d507c3c9a191620203cda906ed8e0357f81be386f8562ed57525e302be498eff06d4909102636a96f559fcb96612f8f264132e81f8e78d2b5a956a5ac73d1b4d3096741b065fb6139ce2e1c6811a9fc7545389e454bd0918b5a3d58ae288282300c068674c4dd98c616db77ef33ff61b99b6a9c46e4b23f2a329bd7d9fbd26a6d9ff6ceefae319f6c0b8ee723db12c567f132595cc7297dadf6638f25c69e26a2ddfcf0b7d0d698b9c02c15a5b8911c58471a077ea7d108c6c485b8511b3561772f0a768e5b826b8b34de0a9335050176d9f1d9debcdc26988f8e73b3af5ccb465f4fdb4a1e1293c723e3f8f28a0bd2c349634d863bede10ec069c37fb6af3fb2fa440577e2c933a5e381399ba4ac221a11f82c8991fa9d07183fbde8e5cc27a317ca09258e4150e54702383dacf8cd6fbe3ed5582380b39f8b16ad45def6477bbade6940333cb3d78cbd10600027e0b67e0dc00dede742f09a71efb245975de260d05d4", 0x1000}, {&(0x7f0000001100)="7de957c22e657158cff8920b80c0a64d034f57863cc69c5c01c1853af611f961f8fb9b6f3a4e777a1368806afc456215ddbe38ced588f70de10cd81b958c8ef5147f67c1b9a4f9984c52eb81e3337b49e23e096a56a0428d04834cbe0daab1209bbcd943af77d60183d67902bbd35d036c8d73d51a14c3a1dd9a4de6e00ab9e4fb041ab13bce8aeab4341b9c92e82bdc2c281c4d4f4567", 0x97}, {&(0x7f00000011c0)="1a75efc6b0c2281b2697b4e09ec10af0bf077e6f4b0a558a877d3cf202692be8196eecd8760c92052f0443024ff413b793019a97e0fb03baa9012857df402b93defb1ab6d365508a2b489cc3d4f2e523f614f7c8c322c9e4fdc872d7218753132ba97d9141e178fdb2ae0b8a27b16ef90a94fe2be63b0ca2cd598077f4715ea488230de42b3d425d4c10ec4ebe8ec014ef0732de9f24bc8e66f6377769c4abaadc9b705cfb76b2bf9ffe50ef27bf623596bc6f5395a7abb854f1a442cc1d990cba53cd300d07aa50f5885e96975e26ba2d112d58cea3c3c57a57e36d9d7ddb8342", 0xe1}], 0x4, 0x0, 0x0, 0x40000}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001340)={r0, 0x1, 0x2, 0x2}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000013c0), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x2040400}, 0x200048d0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000001500)=0x6, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x80800, 0x0) write$tun(r5, &(0x7f0000001580)={@val={0x0, 0x8035}, @val={0x1, 0x3, 0x6, 0x1ff, 0x1, 0x4}, @x25={0x1, 0x0, 0xf1, "7f6aba8cadfd52fa4b3a029232788646732d21b424b1e6c1139e97e4ae3c2939c92283"}}, 0x34) listen(r4, 0xc) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000015c0)=0x2) (async) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000015c0)=0x2) write$tun(r2, &(0x7f0000001600)={@void, @void, @llc={@llc={0x42, 0xfc, 'Y', "3434cdde44af387eeea71390305e4b3cab9479ab3fee613c64e342cd99594083f24dce8874c19a4fd24318c149885735036fbc3049283108e9254a5ad3feef0339965a11f7b45e5dfbfa4b87f8409f4f261e3eb2c06ea212c3800d88b3ad0fb22702c24b765604556c2c0f1f925bc2f75e9ba8d56689b1fa434196ca3b58bcb57daa04e8f36e681dc7387d25d60a0156e317679c9485ea0af8d6af4a8c15ddb65fe80bb45138735f9893c1fc463dcf14faf0e79ffe270f188c52888d4e127407633963a762f921bb4acdebbd3a163b9dbfe78385d11c2f013822d4bef58870219725554cc92d762697447997"}}}, 0xef) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f0000001700)=@ethtool_cmd={0x26, 0xd, 0x3, 0x6, 0x2, 0x4, 0x8, 0x6, 0x0, 0x80, 0x14000000, 0x5, 0x1ff, 0xf9, 0x7, 0x5, [0xc, 0x9]}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f0000001700)=@ethtool_cmd={0x26, 0xd, 0x3, 0x6, 0x2, 0x4, 0x8, 0x6, 0x0, 0x80, 0x14000000, 0x5, 0x1ff, 0xf9, 0x7, 0x5, [0xc, 0x9]}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001780)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001780)=0x6, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000017c0)="a994bd8dada0e7feb6714ba721854b1ee19f72ad6cd355c0684c1eeca79cafab93", 0x21) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000017c0)="a994bd8dada0e7feb6714ba721854b1ee19f72ad6cd355c0684c1eeca79cafab93", 0x21) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001840)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001880)={"233c6a589578f3965c1c59f2c9476a38", 0x0, r7, {0x3f0}, {0x9}, 0x3ff, [0x9, 0xfff, 0xc, 0x0, 0x4f5fd619, 0x6, 0x939, 0x585, 0xff, 0x7, 0x3a, 0x5, 0x4, 0xa, 0x8, 0x77d687d8]}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001980)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001980)='syz1\x00', 0x1ff) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000019c0), 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000019c0), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001a00)={0x0, 0x1}, &(0x7f0000001a40)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001a80)=r8, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x27}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x27}, 0x8) socket(0x1d, 0x4, 0x80000000) (async) socket(0x1d, 0x4, 0x80000000) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, 0x15, 0x2, 0x70bd29, 0x25dfdbfb, {0xa, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "abe450ea78e2f405940f3a5ff2653d645eae46c87014444d5119e86a5c0300b9307a30"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc840) syz_emit_ethernet(0xb5, &(0x7f0000001c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x2}, {0x40, 0x0, 0x1}, {0x2}], @ipv4=@dccp={{0x14, 0x4, 0x1, 0x1, 0x93, 0x65, 0x0, 0x9, 0x21, 0x0, @remote, @remote, {[@generic={0x86, 0x2}, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xf0, 0x3, 0x7, [{@loopback, 0x2}, {@local, 0x400}, {@empty, 0x4404}, {@multicast1, 0x1000}, {@broadcast, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, "f1f8b5", 0x5, "cb15b7"}, "07fbcb0f2826c2210e2b5f2db5cef1739cf168e5157d1668b6a13dbaf670e833e5b31dd6d0d4dbff0af951527dc3cec89d7748"}}}}}}, 0x0) 2.204818168s ago: executing program 4 (id=2348): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x3e8, 0x140, 0x3e8, 0x2f0, 0x210, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp6={{0x28}, {0x4, "1e2f"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2c, 0x12, 0xce}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [0xff, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'veth0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x10, 0x6, 0x9}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x6, 0x3}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 'pim6reg1\x00', 'dvmrp1\x00', {0xff}, {}, 0x87, 0x81, 0x4, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x5}, {0x1, 0x5, 0x7}, 0x9, 0x1ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'wg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x88, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4000000, @empty, 0xfffffffa}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="01000009"], 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.126446047s ago: executing program 0 (id=2349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x4, 0x9}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="06000900000000002400128009000100626f6e640000000014000280080004"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.101479144s ago: executing program 4 (id=2350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a310000000010000780"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000002000000000000000000000095000000040000009b2f5358b6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000060000000300000000010000", @ANYRES32, @ANYBLOB="0000cb7c7102ff02d559000000002c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="01000003000000090000000000980b00000000006b6869169c07bc5c79ee090490fce401e293a3723b925c0ef1535ff8ac7ae7175f68858e35dcc1df16b14c45ae4ae17f29f7c47287399310c073887548b692fc3cf757f3863c07be37422e676d713953d78e9cd61bf24402cab9a69ffd74def34df8736ea70468727f0cc87a2bb720b13b19f2bfd8ad4034b418523520165df1828aba567b4a602ddfeeac6eb32975c00ee7e1883ec2d323f0d2c0a023a07db361d5b3febc3d70c83c2682ec178ddec0e7ed83302a1aa7c861596bddeb257e8d84bb24de40e27bba7645079e94baceb2fd7934581c339200e74e55", @ANYRES32=r5, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x14, 0x0, 0x7, 0xb, 0xffdffffe}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000008000700200505001f4629e6b633"], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x4, 0x0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 1.794872974s ago: executing program 0 (id=2351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x48, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8af9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xd}]}}]}, 0x74}}, 0x4000010) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @alu={0x7, 0x0, 0x3, 0x0, 0x9, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x0, 0xe7, &(0x7f00000004c0)=""/231, 0x40f00, 0xd, '\x00', r9, 0x1a, r6, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x13860, r5, 0x5, 0x0, &(0x7f0000000280)=[{0x0, 0x4, 0x0, 0xb}, {0x4, 0x5, 0xa}, {0x1, 0x5, 0xb, 0xb}, {0x4, 0x2, 0x4, 0x2}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0x81}, 0x94) 1.681653008s ago: executing program 3 (id=2352): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090038012f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x40408d1}, 0x8844) 1.571954466s ago: executing program 3 (id=2353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000640)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @a_listen={0x8, 0x3, 0x4, 0x80, 0x1, 0xd, 0x9, "", 0xf4, 0xc2, 0x10, 0x40, 0x52, "c7d8609407735857f4f7b2ef31465e92d4f619ef2d1a1e3fbdd91dfed33e41e18c24911e17b01835d8615bac432a4297d88330bbae73c71be5327a7ce7af4da5ec0e5b2eaa7c61a8a07e8a26d83401ad35db"}}, 0x61) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r7, 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="868218df5178d1efca6153edab4680ec6072354de694819ae33756a37a523faa4cf110db391ffe45c8f05298bd321ef486470bcb9cf85d8424f042dd67797362", 0x40}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) getsockopt$MISDN_TIME_STAMP(r10, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) accept4$unix(r1, 0x0, &(0x7f0000000280), 0x80000) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0x2}, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r12) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r12, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x88, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4008806) 1.478459562s ago: executing program 0 (id=2354): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "094d167d6331142f2ba0"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6c0d082fa3caf2d85244641790"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}}, 0x240080d8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @remote}, &(0x7f0000000240)=0xc) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) 1.447191972s ago: executing program 2 (id=2355): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="400002803c00010030e706aa65e01b5e30cf498024000100757365757000001e000000000000000000000000000000000000050003000600000004000400080006000000000000003910f24cf87ef84f28bd8536aa34b891e7a18f7bbad1d464aa75f5c8d0afcb38e821cd84351fc72dffaf23a6c90aab824fcd89d577f929ea973ecf5cce0000000000000000000004000000006cb4049dac3e16ccee3ea9afa46b", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20048041) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="526e481e", 0x4}], 0x1}}], 0x2, 0x8000) 1.061285179s ago: executing program 2 (id=2356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000340)="13001f040d5700f9", 0x8) (async) write(r5, &(0x7f0000000340)="13001f040d5700f9", 0x8) socket(0x10, 0x80002, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x80, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x900}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x80, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x900}}, 0x1c}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x84}]}, 0x24}}, 0x0) 976.733788ms ago: executing program 1 (id=2357): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) socket$can_raw(0x1d, 0x3, 0x1) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000003030c000300fffffffe000002cd08ff000000000000000000000000000016fbf688fd471f1448161dd1dc7c0dfb71aeff443c0be3054db717defcce4de512ecc9e0e665dc620d5efde9cbe5f61a8a3920c73f5f6b32c6703400a536df0e78d3d10cfb750d7efa8cd0d036b29ef11d2d4b5f7efecfd5234e65aa2cbfcb2f2e54266c3fafaea9a81307607df62012b79a5df138404b73646380d16eda49c4ceac778b018c8c750ce37223ff99463ff280d70a025ed839ea1e39747066a0d710b33479116f552679496f539390ec5dbd77f9f95531d5cef622e8531b76552b4c4163acb53ef607b143aef3"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'ip6erspan0\x00', {0x3}, 0x1000}) splice(r0, &(0x7f0000000000)=0x7fff, r0, &(0x7f0000000040), 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) accept(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000003030c000300fffffffe000002cd08ff000000000000000000000000000016fbf688fd471f1448161dd1dc7c0dfb71aeff443c0be3054db717defcce4de512ecc9e0e665dc620d5efde9cbe5f61a8a3920c73f5f6b32c6703400a536df0e78d3d10cfb750d7efa8cd0d036b29ef11d2d4b5f7efecfd5234e65aa2cbfcb2f2e54266c3fafaea9a81307607df62012b79a5df138404b73646380d16eda49c4ceac778b018c8c750ce37223ff99463ff280d70a025ed839ea1e39747066a0d710b33479116f552679496f539390ec5dbd77f9f95531d5cef622e8531b76552b4c4163acb53ef607b143aef3"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x14) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'ip6erspan0\x00', {0x3}, 0x1000}) (async) splice(r0, &(0x7f0000000000)=0x7fff, r0, &(0x7f0000000040), 0x5, 0x0) (async) 826.351219ms ago: executing program 4 (id=2358): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@flushsa={0x1c, 0x1c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x33}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0809}, 0x4c880) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xffdffffc, @private1, 0x8000}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010997a9bf94e00010400000200000000", @ANYRES32=0x0, @ANYBLOB="03800000009400001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB="08001f00c4000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x0, @initdev}}) 721.535543ms ago: executing program 4 (id=2359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xffffffffffffffb0, 0x8, 0x8af9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x74}}, 0x4000010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000003c0)=0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', r4, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0xe8, 0x2b, 0x300, 0x70bd28, 0x25dfdbfd, {0x9}, [@generic="470fb76ad44f3b2aaecf9cc21499a0d57d72b07a39759014425305145011bf39bd609801c3423f2f544a337cf53a2edf65ba349999271c48806c27fa150f493f70fbf3e81fed215812b03afc795f62510f0da53d18dbccf839003f0f738f398814f18494152127e32108dbc9b82385ba8c3566e82429f8d5161945caf14338c60ab29947e1a4d4f55dee53c8612520277db3be6e88d3400d27b0c561b9628bbc4adf443d2248a8ad92969559a4fb01c8a69220a29a4bf393c941489169226325e1e1bd0586ceb77240f54bb4eff8bbd350"]}, 0xe8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000004c0)={r8, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7, 0x0, 0xff, 0x36, 0x200}, 0x9c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000030000000100001308006161612e00"/54], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r11, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x4000001) 669.141747ms ago: executing program 2 (id=2360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, 0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2ca}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x40, 0xb0, &(0x7f0000000300)=""/176, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xe, 0x95}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x8}, {0x4, 0x2, 0xe, 0xb}, {0x0, 0x3, 0xe}, {0x0, 0x3, 0xa, 0x8}, {0x2, 0x3, 0x8, 0x1}, {0x0, 0x3, 0x1, 0x7}, {0x0, 0x3}, {0x2, 0x2, 0x0, 0xb}], 0x10, 0xfffffffb}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2ca}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x40, 0xb0, &(0x7f0000000300)=""/176, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xe, 0x95}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x8}, {0x4, 0x2, 0xe, 0xb}, {0x0, 0x3, 0xe}, {0x0, 0x3, 0xa, 0x8}, {0x2, 0x3, 0x8, 0x1}, {0x0, 0x3, 0x1, 0x7}, {0x0, 0x3}, {0x2, 0x2, 0x0, 0xb}], 0x10, 0xfffffffb}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x9, &(0x7f0000000800)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xab}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x11, &(0x7f0000000880)=""/17, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x1, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x3, 0x3, 0xd, 0x6}, {0x4, 0x2, 0x8, 0x9}]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a80)={r4, r5, 0x0, r6}, 0x10) socket$inet(0x2, 0x4, 0xffff) sendto$inet(r1, &(0x7f0000000180)="d135cc8c1f2a2c509722707e374eb23665abbf52a57e33bf26ce185231c921e537232ab0c4265ebfaa164d1a8347c637fb2bae62b6901bb7e554c1e6742b5d45d51c5287a184f21643e32285bf35245a0ac40e2675f937c8387177c17f713ebf0229d45364d05f1c2ee591b8f39d22c5c16592392294f08eef31466995fb16ec62193142770bdccc89ec483bfd64adf30b4f9a9d8d22a789c4b5f6c03b50eea25bfb0a5428d8710feab23c099669c9d8aa653a7fa8", 0xb5, 0x4008005, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="990e0000403dac891c89efd37aa1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 582.002364ms ago: executing program 1 (id=2361): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x94553000) r1 = socket(0x2, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x1}, {0x4, 0x2, 0x2}, {0x1, 0x0, 0x3a}, {0x2, 0x5b69, 0x8000}, {0x5, 0x40, 0x6}, {0x1, 0x0, 0xf328}, {0x5, 0x0, 0x2}], "dc"}]}}, 0x0, 0x7e, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r1, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x2, 0x400, r3, 0xfffff001, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x8, 0xa}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xd6b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 568.01004ms ago: executing program 3 (id=2362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "676ca40355e835563587fe3f047ae36ddb"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44050}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x807, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0040000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf253b0000000c009900f10900005e00000004006c0004008e0081043300109c04000802110000010802110000014bb19f0d8fbd0bf1f0ff8981000160000800ddf878de14dc839bbd1b7c3623a111ad658a4d5b9905663955f1b3d50d390e88321c465eb06eb84c9149a7fd1bbc22cc9b34724bc21d2c55870e129f279f3f07974834c7124ee95417eb98b1040540b1aedd7ed02c149a2a9eb4c11185821a21cc06c3648bba53fb220a53324e43c831a68c8586031ec26f3ced93b05b2f3c0e1f38de2144ca7fdcbc98a9588513ec47425802b90a15a7802e67397617c07a8e9b30c2c30da36ed1fd03779c8f0e4e21c836a28f806951eb14d4726546569601ffb898eb9627755a2d94d11ad8416e9a3630f9c3fcd811bcb95ca2a3318d53a9476ea85fe7191b9b8d15d6038ed471928c24e11c9906518d7f8ddd0a1000566f031cd3fe5d2dddf384f69e3e06697edba88d2601674ba26e7aac388e23bbe61304aa9fd3f892af7d1c7870442affd3ab7f07fa37aa70b6a10d338fe5630eb8b31033b9b49caa18fab3d85bb0a52d0676b0dca3cf2213af7bd7058dc3ca1aaa3ec20e7bd0f1129801f95138142de889aad08af1055b59eeeef33c03cecd45ea41a70398e80848cff78ab8b223dcc1aaf847b829e85e2d51e32813ff4461d88a7484dc0d48e8ea71fa468bb47129629647ce6ead66dfb49e82e3fd81558ef75bee53949605be24676124c055a4de9a64ecb2e953ad953da29af107a316e1a4d88d64aff0f406160fe9b90d67c0505e7eb6c085ad2ea59f63ed18ce8bddbd0ded40cec2634b263b2dcca883561b5b5fc3e11676461786ffa58d2b6ea58e80d3fa640f87e0a8f88ceaba2c4b451ee1b17abaa6261465ced3bd3a7747f976f9dc4a219e9c50615a3bdc687334170f30df2f19e536700af291475979a3b4ea064b7e55c5b8266ae02f2cb2fba79f712fa4f7995b14e20946034bd6078b479d6004cf0881f9a951eda296ec0ff8269b687a5d8d6a20c43e9057e197b258f22a7309dfbf5a06133d7519e9952c1940f50fb60841b0f1a872879f320ccc0ddd07685aab5a290061ddd5b4314049873484e07457b35875fa11fb1280ef92b3fdd3420ef7b3d28a51d54bf3771b8f5e24fcdb476fc59775357d495fd1cde24feb8e407ace281c00a2a3da89a8dcda9670cfb07dc138134f5ffbae9213fe19581a14f8ae783deba1451ad0bf666ddc40c4b0cdbe61e8999d62542e8eebb99fef664f5adaa1bf41aff2e3a9c1c84bb88b021dbe67bba5eedde0e7bd466283356e7f34fb03184263cbd9f2163df8b8aa1e68e1f40c7cc71f720c4eaad9eb8acb5a5743a9a2392f0c74b8c320c4474bb547710b83d603b9a31a078eb0c97cf55c34ddbf91461ebc6f578a0bbaf262fd2030eababb62292926edf1f1ef22f0e35a9f4e7917bc80e2ba0b88998444e13ab61b9f39e59c5f855950f1b22eb8000d8f71762be40d3fbba144f19cb3c5a3cb535ef61bfb38e01200db35fe5ff3bc7c67e89481b854b7ad82e630c3d41342f744e6325daf273408d19e2587d80bfd6bd1f25e234513c6f638b7c1206ee8b7dcb4bd07c7e10226d22843e00cd8637c4e801852157cae56eeafac4b0d3bf5ac09fd6d1c0fdf88d065e112e0fc774c3df35199f00000000400870004006c00050018010800000004008e00"], 0x4c0}}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0x5}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x4040810}], 0x1, 0x40800) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000000080)={r13, 0x6, 0x2}, 0xffa6) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000900)=r15) 516.783805ms ago: executing program 0 (id=2363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010022bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="131401001c00128009000100626f6e64000000000c000280050011000100000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x280}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x4, 0x0, 0x0, 0x7, 0x2}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x20000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(0x0, r9) sendmsg$NFC_CMD_GET_DEVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="dd2b1388e92f1842a383"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r11) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ba8e05d8c010094dc561a9147c9dab469739307f7f36341a8ba5b77921635a85534f741b4d61aee494953596eb9a41ea629ad4ac934bf659f8201fce3986fc7d20cee7a385ce14b102fcf8120c1dec3c66b094fb2823aa001c356cdf0499ddcb14476b40490665de56b172ec6ce7fe1f1bf83f0c447dd34cae31395c32b17acd2c597b7ea326a855fe5b53ff8f779", @ANYRES16=r12, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r12, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x16}, {0xfe}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x100}}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 458.370554ms ago: executing program 4 (id=2364): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8884}, 0x2000000) 390.796832ms ago: executing program 1 (id=2365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) epoll_create(0xa07) 305.665315ms ago: executing program 1 (id=2366): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="b82c4969ab0b9fe061f456e5c0b914397c6f1812640a7e7af62ae421261f699cc75cfa321ca6e3c0582fd7b5e5fc0e037e387bbd67306c53b323aa6288b8aef7e0529ebde8748c2036f6cf16ab62500511f4408f8418ab04390f9cc12e664348599e3412fdb0170460a5429234a436303ec51859626f3d80813b606cd25df68e9b99eb1a5d3698413d1076ddad3e963e4bfa6a5eabb0af725786b91a46f3d81d7cf1662754", @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYRESOCT=r0], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@srh={0x3a, 0x0, 0x4, 0x0, 0x4, 0x8, 0xffff}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00130000000000000000000004000000000000f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$tcp_congestion(r5, &(0x7f0000000240)='westwood\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a000034010280300117802a0102"], 0x158}}, 0xc040) 0s ago: executing program 1 (id=2367): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101102}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x481, 0x57, 0x5, 0x81}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x40010) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) sendto$packet(r4, &(0x7f00000002c0)="7c09a8e93af94d0e7dfc2746aca5494cafb6eed0af8c36db5e7113ec489d91225829d5592e5ba2d35bb9998b4b089d52b47f2b1698f14e394bc2bda9aec2f1819e995df46684d9c07ff94dd7aed41ad525ef9b6dfc08c1b4a31103c6dd0fbfa288579498530ece1c5a6e519db6f068110caf308daf4a9f30286857b270ae2041e054bc975147a8fa4d5b4fe92cbc79e21097623929848baffcfce8f275a52d50acc0b26cc6949a8ced814dba212820cab3496ab8f46499", 0xb7, 0x44, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): ][ T7800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.591573][ T7809] sctp: [Deprecated]: syz.2.474 (pid 7809) Use of int in maxseg socket option. [ 252.591573][ T7809] Use struct sctp_assoc_value instead [ 252.651056][ T7800] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 252.960097][ T7824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.983030][ T7834] erspan0: entered allmulticast mode [ 253.239769][ T7838] __nla_validate_parse: 15 callbacks suppressed [ 253.239786][ T7838] netlink: 128 bytes leftover after parsing attributes in process `syz.1.482'. [ 253.336653][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 253.463637][ T7853] syzkaller1: entered promiscuous mode [ 253.475628][ T7853] syzkaller1: entered allmulticast mode [ 253.659505][ T7863] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 253.682179][ T7863] geneve3: left promiscuous mode [ 253.694117][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.489'. [ 253.843744][ T7879] syzkaller0: entered promiscuous mode [ 253.853168][ T7879] syzkaller0: entered allmulticast mode [ 253.900443][ T7885] wireguard0: entered promiscuous mode [ 253.959528][ T7885] wireguard0: entered allmulticast mode [ 253.981406][ T7885] team0: Device wireguard0 is of different type [ 254.052724][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 254.053327][ T7894] bridge_slave_0: left allmulticast mode [ 254.068696][ T7894] bridge_slave_0: left promiscuous mode [ 254.074406][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.087013][ T7894] bridge_slave_1: left allmulticast mode [ 254.092682][ T7894] bridge_slave_1: left promiscuous mode [ 254.099080][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.109748][ T7894] bond0: (slave bond_slave_0): Releasing backup interface [ 254.117122][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 254.134636][ T7894] bond0: (slave bond_slave_1): Releasing backup interface [ 254.151366][ T7894] team0: Failed to send options change via netlink (err -105) [ 254.166615][ T7894] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 254.182202][ T7894] team0: Port device team_slave_0 removed [ 254.198158][ T7894] team0: Failed to send options change via netlink (err -105) [ 254.206380][ T7894] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 254.216282][ T7894] team0: Port device team_slave_1 removed [ 254.222695][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.230308][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.240815][ T7894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.330368][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 254.344848][ T7898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.497'. [ 254.504067][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 254.858356][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'. [ 254.868256][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'. [ 254.919524][ T7928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.040970][ T7928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.316725][ T7928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.429860][ T7928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.560827][ T4468] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.612240][ T4468] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.653919][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.682385][ T4468] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.734865][ T7093] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.815724][ T7967] lo: mtu less than device minimum [ 255.858721][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.161607][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.172284][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.190514][ T7982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.221487][ T7989] tipc: Enabled bearer , priority 0 [ 256.235469][ T7989] syzkaller0: entered promiscuous mode [ 256.241294][ T7989] syzkaller0: entered allmulticast mode [ 256.262702][ T7989] tipc: Resetting bearer [ 256.280632][ T7987] tipc: Resetting bearer [ 256.310956][ T7987] tipc: Disabling bearer [ 257.553347][ T8055] tipc: Enabling of bearer rejected, failed to enable media [ 257.611358][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.664232][ T8057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.905273][ T8079] validate_nla: 63 callbacks suppressed [ 257.905291][ T8079] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 257.979805][ T8080] tipc: Enabled bearer , priority 0 [ 257.990253][ T8081] syzkaller0: entered promiscuous mode [ 257.996712][ T8081] syzkaller0: entered allmulticast mode [ 258.130300][ T8094] bridge0: entered promiscuous mode [ 258.144492][ T8094] macsec1: entered promiscuous mode [ 258.158965][ T8094] bridge0: port 1(macsec1) entered blocking state [ 258.181892][ T8094] bridge0: port 1(macsec1) entered disabled state [ 258.199419][ T8094] macsec1: entered allmulticast mode [ 258.212912][ T8094] bridge0: entered allmulticast mode [ 258.242354][ T8094] macsec1: left allmulticast mode [ 258.281443][ T8094] bridge0: left allmulticast mode [ 258.300488][ T8094] bridge0: left promiscuous mode [ 258.414558][ T8081] tipc: Resetting bearer [ 258.458849][ T8081] tipc: Disabling bearer [ 258.647203][ T8128] __nla_validate_parse: 11 callbacks suppressed [ 258.661297][ T8128] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.563'. [ 258.756119][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 258.828478][ T8137] netlink: 'syz.0.566': attribute type 13 has an invalid length. [ 259.126469][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 259.654077][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.688597][ T8137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.168091][ T8157] veth0_to_bridge: entered promiscuous mode [ 260.197659][ T8157] macsec1: entered allmulticast mode [ 260.203077][ T8157] veth0_to_bridge: entered allmulticast mode [ 260.226519][ T3658] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.268230][ T3658] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.292714][ T3658] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.326693][ T3658] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.345186][ T3658] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.369374][ T3658] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.395223][ T3658] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.416782][ T3658] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.682625][ T8204] xt_l2tp: unknown flags: 51 [ 261.050855][ T8235] netlink: 104 bytes leftover after parsing attributes in process `syz.3.591'. [ 261.074566][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.589'. [ 261.113175][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 261.200956][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.595'. [ 261.471101][ T8260] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 261.671881][ T8271] netlink: 148 bytes leftover after parsing attributes in process `syz.3.602'. [ 261.686981][ T8273] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 261.694821][ T8271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.602'. [ 261.729662][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.602'. [ 262.441109][ T8267] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.990386][ T8350] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 263.168471][ T8354] vxcan2: entered allmulticast mode [ 263.181432][ T8361] netlink: 'syz.0.624': attribute type 2 has an invalid length. [ 263.903506][ T8389] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 263.912097][ T8389] __nla_validate_parse: 5 callbacks suppressed [ 263.912114][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 264.051025][ T8393] syzkaller0: entered promiscuous mode [ 264.057125][ T8393] syzkaller0: entered allmulticast mode [ 264.113264][ T8393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.156121][ T8393] tipc: Enabled bearer , priority 0 [ 264.229516][ T8391] tipc: Resetting bearer [ 264.380627][ T8391] tipc: Disabling bearer [ 264.512839][ T8410] syzkaller0: entered promiscuous mode [ 264.525353][ T8410] syzkaller0: entered allmulticast mode [ 264.584003][ T8412] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 264.662317][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 264.681646][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 264.732744][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.748594][ T8412] batadv_slave_0: entered promiscuous mode [ 264.774068][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 264.775290][ T8419] @0: renamed from bond_slave_1 [ 264.799611][ T8412] netlink: 428 bytes leftover after parsing attributes in process `syz.4.640'. [ 264.811153][ T8412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 264.837624][ T8397] infiniband !yz!: set down [ 264.844158][ T8397] infiniband !yz!: added team_slave_0 [ 264.904884][ T8397] RDS/IB: !yz!: added [ 264.909829][ T8397] smc: adding ib device !yz! with port count 1 [ 264.918073][ T8397] smc: ib device !yz! port 1 has no pnetid [ 265.103404][ T8432] netlink: 'syz.4.644': attribute type 142 has an invalid length. [ 265.134753][ T8432] netlink: 'syz.4.644': attribute type 8 has an invalid length. [ 266.727558][ T8488] tipc: Enabled bearer , priority 0 [ 266.755651][ T8489] syzkaller0: entered promiscuous mode [ 266.761263][ T8489] syzkaller0: entered allmulticast mode [ 266.815349][ T8487] tipc: Resetting bearer [ 266.842732][ T8487] tipc: Disabling bearer [ 267.140375][ T8507] netlink: 1232 bytes leftover after parsing attributes in process `syz.2.661'. [ 267.327418][ T8511] netlink: 'syz.2.662': attribute type 3 has an invalid length. [ 267.489004][ T8516] netlink: 200 bytes leftover after parsing attributes in process `syz.2.662'. [ 267.539878][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 267.606892][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 268.655783][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 268.998976][ T8571] bond4: option packets_per_slave: invalid value (1048582) [ 269.026344][ T8571] bond4: option packets_per_slave: allowed values 0 - 65535 [ 269.064170][ T8571] bond4 (unregistering): Released all slaves [ 269.084239][ T8579] sctp: [Deprecated]: syz.1.681 (pid 8579) Use of int in maxseg socket option. [ 269.084239][ T8579] Use struct sctp_assoc_value instead [ 269.145325][ T8582] __nla_validate_parse: 2 callbacks suppressed [ 269.145345][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 269.437745][ T8596] netlink: 'syz.0.685': attribute type 23 has an invalid length. [ 269.679234][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 269.872571][ T8612] bond4: Removing last arp target with arp_interval on [ 270.337652][ T8626] netlink: 6 bytes leftover after parsing attributes in process `syz.4.692'. [ 270.391181][ T8626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.444676][ T8625] syzkaller1: entered promiscuous mode [ 270.456709][ T8625] syzkaller1: entered allmulticast mode [ 270.532994][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'. [ 270.712771][ T5914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.858468][ T5914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.867882][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'. [ 271.020683][ T8652] tipc: Enabling of bearer rejected, failed to enable media [ 271.248239][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.351770][ T8668] 8021q: VLANs not supported on sit0 [ 271.454614][ T8678] x_tables: duplicate underflow at hook 2 [ 271.696408][ T8689] syzkaller1: entered promiscuous mode [ 271.722353][ T8689] syzkaller1: entered allmulticast mode [ 271.726085][ T8694] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 271.781081][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 271.880528][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 271.900852][ T8704] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 271.918089][ T8704] batman_adv: batadv0: Adding interface: gretap1 [ 271.924640][ T8704] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.984090][ T8704] batman_adv: batadv0: Interface activated: gretap1 [ 272.100429][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 272.234628][ T8725] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 272.268314][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.279995][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.327504][ T8732] syzkaller0: entered promiscuous mode [ 272.333095][ T8732] syzkaller0: entered allmulticast mode [ 272.394162][ T8740] netlink: 'syz.2.724': attribute type 13 has an invalid length. [ 272.598645][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.771914][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.359576][ T8740] veth1_vlan: left allmulticast mode [ 273.448858][ T8750] geneve3: entered promiscuous mode [ 273.455489][ T8754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.611889][ T6868] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.645014][ T6868] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.675448][ T6868] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.708245][ T6868] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.766611][ T8782] netlink: 'syz.1.734': attribute type 62 has an invalid length. [ 274.007292][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 274.491248][ T8810] bond0: (slave rose0): Error: Device can not be enslaved while up [ 274.693962][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 274.994543][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 275.185415][ T8843] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 275.236955][ T8843] bond1: entered promiscuous mode [ 275.242592][ T8843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.378043][ T8841] syzkaller0: entered promiscuous mode [ 275.383638][ T8841] syzkaller0: entered allmulticast mode [ 275.413342][ T8848] bond1: (slave veth3): making interface the new active one [ 275.420832][ T8848] veth3: entered promiscuous mode [ 275.430998][ T8848] bond1: (slave veth3): Enslaving as an active interface with an up link [ 276.128222][ T8869] netlink: 'syz.4.757': attribute type 6 has an invalid length. [ 276.136220][ T8869] netlink: 64 bytes leftover after parsing attributes in process `syz.4.757'. [ 276.155137][ T8869] block nbd0: not configured, cannot reconfigure [ 276.249739][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'. [ 276.258926][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.285448][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 276.711034][ T8896] tipc: Enabled bearer , priority 0 [ 276.720637][ T8896] syzkaller0: entered promiscuous mode [ 276.726431][ T8896] syzkaller0: entered allmulticast mode [ 276.751064][ T8896] tipc: Resetting bearer [ 276.771532][ T8894] tipc: Resetting bearer [ 276.803836][ T8894] tipc: Disabling bearer [ 277.006484][ T8903] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 277.166073][ T8909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.770'. [ 277.195390][ T8909] block nbd0: not configured, cannot reconfigure [ 277.292483][ T8916] xfrm0: entered promiscuous mode [ 277.312325][ T8919] netlink: 'syz.0.770': attribute type 8 has an invalid length. [ 277.315117][ T8916] xfrm0: entered allmulticast mode [ 277.430703][ T8921] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 277.709338][ T8925] batadv0: entered promiscuous mode [ 277.729408][ T8925] macvtap1: entered promiscuous mode [ 277.742935][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 277.750191][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 277.777489][ T8925] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 278.063425][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 278.085023][ T8931] macvtap1: entered promiscuous mode [ 278.090498][ T8931] batadv0: entered promiscuous mode [ 278.097601][ T8931] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 278.395882][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 278.409288][ T8952] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.446845][ T8954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.463675][ T8954] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 278.474784][ T8954] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 278.599822][ T8960] syzkaller0: entered promiscuous mode [ 278.605609][ T8960] syzkaller0: entered allmulticast mode [ 278.622555][ T8952] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.708081][ T8952] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.777805][ T8952] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.947415][ T1143] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.987388][ T4574] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.024731][ T4574] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.070377][ T7093] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.689373][ T9008] netlink: 76 bytes leftover after parsing attributes in process `syz.2.799'. [ 280.760930][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 280.792531][ T9008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 280.831800][ T9008] batman_adv: batadv0: Adding interface: gretap1 [ 280.860812][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 280.870937][ T9008] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.953516][ T9008] batman_adv: batadv0: Interface activated: gretap1 [ 281.258251][ T9048] netlink: 'syz.3.808': attribute type 7 has an invalid length. [ 281.301111][ T9048] macvlan3: entered promiscuous mode [ 281.506627][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.813'. [ 281.556319][ T9071] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 282.048624][ T49] syzkaller0: tun_net_xmit 76 [ 282.054565][ T49] syzkaller0: tun_net_xmit 48 [ 282.076384][ T8165] syzkaller0: tun_net_xmit 76 [ 282.513179][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 282.554680][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 282.622068][ T9109] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 282.765847][ T9119] netlink: 'syz.3.825': attribute type 7 has an invalid length. [ 283.867788][ T9119] netlink: 'syz.3.825': attribute type 7 has an invalid length. [ 283.926050][ T4574] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.946172][ T4574] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.961958][ T4574] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.973052][ T4574] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.031594][ T9131] netlink: 'syz.2.827': attribute type 8 has an invalid length. [ 284.099508][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.827'. [ 284.127973][ T9138] sctp: [Deprecated]: syz.1.831 (pid 9138) Use of int in max_burst socket option deprecated. [ 284.127973][ T9138] Use struct sctp_assoc_value instead [ 284.189722][ T9138] sctp: [Deprecated]: syz.1.831 (pid 9138) Use of int in maxseg socket option. [ 284.189722][ T9138] Use struct sctp_assoc_value instead [ 284.228639][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 284.274804][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.830'. [ 284.498214][ T9148] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 284.524263][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.550405][ T9148] bond0: (slave team0): Enslaving as an active interface with an up link [ 284.574540][ T9158] syzkaller1: entered promiscuous mode [ 284.585087][ T9158] syzkaller1: entered allmulticast mode [ 284.681608][ T9166] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 284.869017][ T9179] syzkaller0: entered promiscuous mode [ 284.874581][ T9179] syzkaller0: entered allmulticast mode [ 285.702282][ T9206] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 285.733261][ T9206] bond5 (unregistering): Released all slaves [ 286.369584][ T9230] batadv_slave_0: entered promiscuous mode [ 286.462148][ T9230] Cannot find del_set index 4 as target [ 286.507598][ T9240] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 286.543525][ T9240] __nla_validate_parse: 6 callbacks suppressed [ 286.543542][ T9240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.852'. [ 286.569595][ T9240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.852'. [ 286.588673][ T9240] unsupported nla_type 540 [ 286.999750][ T9254] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.856'. [ 287.071322][ T9256] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 287.287805][ T9270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.859'. [ 287.681774][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 287.717282][ T9292] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:512 [ 288.878456][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 289.365671][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.882'. [ 289.471504][ T9369] geneve4: entered promiscuous mode [ 289.484619][ T9369] geneve4: entered allmulticast mode [ 289.508056][ T9376] tipc: Enabling of bearer rejected, failed to enable media [ 289.525278][ T3658] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.544087][ T9381] tipc: Cannot configure node identity twice [ 289.565458][ T3658] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.597287][ T9383] tipc: New replicast peer: 255.255.255.255 [ 289.604286][ T9383] tipc: Enabled bearer , priority 10 [ 289.625057][ T3658] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.633483][ T3658] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.645793][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 289.654612][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 289.675957][ T9383] netlink: 'syz.0.884': attribute type 14 has an invalid length. [ 289.685394][ T9383] netlink: 'syz.0.884': attribute type 11 has an invalid length. [ 289.726050][ T9388] netlink: 'syz.1.885': attribute type 3 has an invalid length. [ 289.733732][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 289.754251][ T9383] bridge4: entered promiscuous mode [ 289.759645][ T9383] bridge4: entered allmulticast mode [ 290.317560][ T9431] netlink: 'syz.4.895': attribute type 21 has an invalid length. [ 290.423956][ T9431] netlink: 'syz.4.895': attribute type 6 has an invalid length. [ 290.649186][ T9452] netlink: 'syz.4.897': attribute type 21 has an invalid length. [ 290.812451][ T5892] tipc: Node number set to 4118099349 [ 290.837310][ T9470] syz.0.900 (9470) used obsolete PPPIOCDETACH ioctl [ 291.077686][ T9475] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 291.519923][ T9496] veth1_to_team: entered allmulticast mode [ 291.905795][ T9494] __nla_validate_parse: 4 callbacks suppressed [ 291.905814][ T9494] netlink: 116 bytes leftover after parsing attributes in process `syz.2.909'. [ 291.951167][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 291.965280][ T9508] tipc: Cannot configure node identity twice [ 292.018318][ T9494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.909'. [ 292.811927][ T9530] syzkaller0: entered promiscuous mode [ 292.821840][ T9530] syzkaller0: entered allmulticast mode [ 292.855020][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 293.452923][ T9544] @: renamed from veth0_vlan [ 294.238905][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 294.320248][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 294.531338][ T9567] bond0: (slave rose0): Error: Device can not be enslaved while up [ 294.758399][ T9582] Cannot find add_set index 2 as target [ 295.760126][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.946'. [ 295.882708][ T9631] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 295.908201][ T9626] netlink: 'syz.0.944': attribute type 3 has an invalid length. [ 296.347765][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 296.362794][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 296.516581][ T9663] ip6gre0: entered promiscuous mode [ 296.522090][ T9663] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 296.760724][ T9675] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 296.783989][ T9675] netlink: 'syz.3.959': attribute type 2 has an invalid length. [ 296.881363][ T9675] bond2: option lacp_active: invalid value (8) [ 296.903845][ T9675] bond2 (unregistering): Released all slaves [ 297.010872][ T9685] tipc: Enabled bearer , priority 0 [ 297.043946][ T9687] syzkaller0: entered promiscuous mode [ 297.062384][ T9687] syzkaller0: entered allmulticast mode [ 297.078043][ T9675] tipc: Resetting bearer [ 297.088252][ T9674] tipc: Resetting bearer [ 297.123113][ T9674] tipc: Disabling bearer [ 297.329413][ T9697] openvswitch: netlink: Duplicate or invalid key (type 0). [ 297.337129][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.359480][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 297.691408][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 297.701063][ T5927] IPVS: starting estimator thread 0... [ 297.773482][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 297.805204][ T9720] IPVS: using max 36 ests per chain, 86400 per kthread [ 298.143113][ T9735] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 298.195226][ T9735] xt_connbytes: Forcing CT accounting to be enabled [ 298.210601][ T9714] netlink: 'syz.3.968': attribute type 6 has an invalid length. [ 298.332613][ T9740] netlink: 104 bytes leftover after parsing attributes in process `syz.0.972'. [ 298.358344][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 298.946581][ T9760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.979'. [ 298.999838][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 299.278034][ T9766] netlink: 68 bytes leftover after parsing attributes in process `syz.3.982'. [ 299.294488][ T9768] syzkaller0: entered promiscuous mode [ 299.306598][ T9768] syzkaller0: entered allmulticast mode [ 299.319773][ T9768] openvswitch: netlink: IP tunnel dst address not specified [ 299.358215][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 299.640648][ T9783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 299.924403][ T9793] bond0: (slave syz_tun): Releasing backup interface [ 299.951441][ T9793] bond0: (slave team0): Releasing backup interface [ 299.961520][ T9793] bridge_slave_0: left allmulticast mode [ 299.967457][ T9793] bridge_slave_0: left promiscuous mode [ 299.973445][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.983303][ T9793] bridge_slave_1: left allmulticast mode [ 299.989255][ T9793] bridge_slave_1: left promiscuous mode [ 299.995269][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.007663][ T9793] bond0: (slave bond_slave_0): Releasing backup interface [ 300.019453][ T9793] bond0: (slave bond_slave_1): Releasing backup interface [ 300.030976][ T9793] team0: Port device team_slave_0 removed [ 300.039030][ T9793] team0: Port device team_slave_1 removed [ 300.045546][ T9793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.053381][ T9793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.061955][ T9793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 300.214035][ T9804] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 300.359983][ T9815] netlink: 'syz.3.997': attribute type 27 has an invalid length. [ 300.377048][ T9815] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 300.793571][ T9854] tipc: Enabled bearer , priority 0 [ 300.988785][ T9853] tipc: Disabling bearer [ 301.238657][ T9875] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 301.304067][ T9889] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 301.521266][ T9913] netlink: 'syz.4.1026': attribute type 5 has an invalid length. [ 301.601775][ T5836] block nbd0: Receive control failed (result -32) [ 301.640928][ T9919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.691650][ T9924] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 301.771256][ T9929] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 301.783278][ T9929] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 301.838569][ T9924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.907486][ T9924] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 302.044530][ T9947] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 302.084287][ T9947] bond4: entered promiscuous mode [ 302.092663][ T9947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.119548][ T9947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.131492][ T9947] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 302.142572][ T9947] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 302.164233][ T9947] bond4: (slave wireguard0): making interface the new active one [ 302.172399][ T9947] wireguard0: entered promiscuous mode [ 302.184302][ T9947] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 302.203761][ T9947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.211115][ T9947] IPv6: NLM_F_CREATE should be set when creating new route [ 302.218417][ T9947] IPv6: NLM_F_CREATE should be set when creating new route [ 302.238553][ T9947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.300933][ T3613] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 302.384737][ T9966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.463365][ T9976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.532762][ T9984] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 302.540946][ T9983] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 302.882406][T10009] __nla_validate_parse: 16 callbacks suppressed [ 302.882420][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 303.169206][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1052'. [ 303.169833][T10022] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1053'. [ 303.222614][T10022] bond5: entered promiscuous mode [ 303.228927][T10022] bond5: entered allmulticast mode [ 303.234623][T10022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.263970][T10024] xt_hashlimit: max too large, truncated to 1048576 [ 303.419284][T10038] tc_dump_action: action bad kind [ 303.464953][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 303.983542][T10071] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 303.997986][T10071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1065'. [ 304.118175][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1067'. [ 304.248832][T10078] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 304.645620][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'. [ 304.666302][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'. [ 304.870904][T10112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1078'. [ 305.211031][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 305.249685][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1086'. [ 307.159715][T10152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.415553][T10168] bond2: entered promiscuous mode [ 307.421216][T10168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.626523][T10185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.647081][T10185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.676523][T10185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 307.782633][T10198] netlink: 'syz.4.1104': attribute type 16 has an invalid length. [ 307.792272][T10185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.803483][T10198] netlink: 'syz.4.1104': attribute type 17 has an invalid length. [ 307.805060][T10185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.822148][T10185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.324247][T10198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.670926][T10198] veth0_to_bridge: left allmulticast mode [ 308.687922][T10198] batman_adv: batadv0: Interface deactivated: gretap1 [ 308.723201][T10196] netpci0: tun_chr_ioctl cmd 1074025678 [ 308.729060][T10196] netpci0: group set to 0 [ 308.774170][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.796802][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.840445][T10185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.851459][T10185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.863286][T10185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.908951][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.935127][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.968133][T10220] __nla_validate_parse: 2 callbacks suppressed [ 308.968152][T10220] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1112'. [ 308.970416][T10185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.996584][T10185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.008311][T10185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.038578][T10216] 8021q: VLANs not supported on ip6_vti0 [ 309.048562][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 309.176209][T10226] bond0: Error: Cannot enslave bond to itself. [ 309.222416][ T6868] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.232809][ T6868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.256227][ T6868] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.305808][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.316425][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.334712][ T49] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.396299][ T4468] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.405538][ T4468] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.414144][ T4468] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.452860][ T4468] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.470239][ T4468] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.484451][ T4468] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.898803][T10255] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1120'. [ 310.272095][T10282] netlink: 'syz.3.1124': attribute type 2 has an invalid length. [ 310.283964][T10282] netlink: 'syz.3.1124': attribute type 8 has an invalid length. [ 310.344805][T10282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1124'. [ 310.391877][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'. [ 311.286832][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 311.377377][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 311.413363][T10314] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 311.477316][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 311.508482][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 311.799402][T10344] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 311.830976][T10344] netlink: 'syz.4.1137': attribute type 4 has an invalid length. [ 311.926022][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1139'. [ 311.934570][T10348] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 312.876433][T10393] tap0: tun_chr_ioctl cmd 1074025677 [ 312.881948][T10393] tap0: linktype set to 776 [ 313.159161][T10409] netlink: 'syz.4.1154': attribute type 6 has an invalid length. [ 313.703547][T10445] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 313.826570][T10445] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.850738][T10445] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 313.918480][T10455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.929620][T10451] tipc: Enabled bearer , priority 0 [ 314.002355][T10458] syzkaller0: entered promiscuous mode [ 314.008041][T10458] syzkaller0: entered allmulticast mode [ 314.029582][T10458] syzkaller0: mtu less than device minimum [ 314.044698][T10468] __nla_validate_parse: 6 callbacks suppressed [ 314.044716][T10468] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1169'. [ 314.063529][T10468] x_tables: duplicate entry at hook 2 [ 314.074044][T10469] netlink: 'syz.3.1168': attribute type 12 has an invalid length. [ 314.323826][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 314.430318][T10478] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 314.446053][T10478] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 314.607221][T10476] macvlan2: entered promiscuous mode [ 314.622683][T10476] macvlan2: entered allmulticast mode [ 314.638221][T10476] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 314.969647][T10451] tipc: Resetting bearer [ 315.046152][T10451] tipc: Disabling bearer [ 315.160765][T10487] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1173'. [ 315.172401][T10487] openvswitch: netlink: Flow actions attr not present in new flow. [ 315.526684][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 315.564206][T10505] vlan2: entered promiscuous mode [ 315.595114][T10505] gretap0: entered promiscuous mode [ 315.897273][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 315.967063][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 315.993684][T10511] syzkaller1: entered promiscuous mode [ 315.999401][T10511] syzkaller1: entered allmulticast mode [ 316.308416][T10531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 316.342832][T10536] tipc: Enabled bearer , priority 0 [ 316.366152][T10536] syzkaller0: entered promiscuous mode [ 316.372356][T10536] syzkaller0: entered allmulticast mode [ 316.390199][T10536] tipc: Resetting bearer [ 316.399814][T10535] tipc: Resetting bearer [ 316.425963][T10535] tipc: Disabling bearer [ 316.434451][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 316.605328][T10549] syzkaller0: entered promiscuous mode [ 316.618007][ T30] audit: type=1804 audit(1764939441.771:3): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1192" name="/newroot/209/memory.events" dev="tmpfs" ino=1088 res=1 errno=0 [ 316.629108][T10549] syzkaller0: entered allmulticast mode [ 316.704143][ T30] audit: type=1800 audit(1764939441.771:4): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="memory.events" dev="tmpfs" ino=1088 res=0 errno=0 [ 317.028202][T10571] sctp: [Deprecated]: syz.2.1199 (pid 10571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.028202][T10571] Use struct sctp_sack_info instead [ 317.360844][T10584] netlink: 'syz.2.1203': attribute type 2 has an invalid length. [ 317.406607][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 317.426877][T10584] !: entered promiscuous mode [ 317.437532][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'. [ 317.460585][T10589] No such timeout policy "syz0" [ 317.503644][T10584] netlink: 'syz.2.1203': attribute type 2 has an invalid length. [ 317.526491][T10584] !: left promiscuous mode [ 317.827039][T10604] syzkaller1: entered promiscuous mode [ 317.845178][T10604] syzkaller1: entered allmulticast mode [ 319.099399][T10654] __nla_validate_parse: 2 callbacks suppressed [ 319.099418][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 319.236630][T10664] netlink: 'syz.1.1226': attribute type 6 has an invalid length. [ 319.397650][T10670] IPVS: set_ctl: invalid protocol: 101 224.0.0.2:20004 [ 319.979644][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 320.184442][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 320.194704][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 320.416125][T10721] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.509862][T10674] bond6: option miimon: invalid value (18446744073709551607) [ 320.519284][T10674] bond6: option miimon: allowed values 0 - 2147483647 [ 320.528152][T10674] bond6 (unregistering): Released all slaves [ 320.570010][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1229'. [ 320.724356][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1246'. [ 320.755318][T10732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.762612][T10732] IPv6: NLM_F_CREATE should be set when creating new route [ 320.805256][T10738] batadv1: entered promiscuous mode [ 321.321243][T10768] netlink: 'syz.3.1257': attribute type 2 has an invalid length. [ 321.361728][T10772] netlink: 'syz.0.1258': attribute type 4 has an invalid length. [ 321.377677][T10768] : entered promiscuous mode [ 321.419288][T10768] tipc: New replicast peer: 0.0.0.0 [ 321.427011][T10768] tipc: Enabled bearer , priority 10 [ 321.445469][T10768] tipc: New replicast peer: 172.30.1.4 [ 321.559280][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'. [ 321.574837][T10783] tipc: Enabled bearer , priority 0 [ 321.585350][T10783] syzkaller0: entered promiscuous mode [ 321.590894][T10783] syzkaller0: entered allmulticast mode [ 321.611563][T10783] tipc: Resetting bearer [ 321.627629][T10783] syzkaller0: tun_net_xmit 90 [ 321.635811][T10781] tipc: Resetting bearer [ 321.707007][T10781] tipc: Disabling bearer [ 322.036853][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 322.068799][T10800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1265'. [ 322.139683][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 322.173460][T10803] syz.2.1267 uses old SIOCAX25GETINFO [ 322.535313][ T5892] tipc: Node number set to 4148844663 [ 322.552644][T10816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.509571][T10852] netlink: 'syz.0.1278': attribute type 21 has an invalid length. [ 323.895914][T10858] "syz.0.1280" (10858) uses obsolete ecb(arc4) skcipher [ 324.255640][T10880] nbd2: detected capacity change from 0 to 127 [ 324.262680][T10890] __nla_validate_parse: 3 callbacks suppressed [ 324.262697][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 324.286130][T10889] netlink: 'syz.3.1287': attribute type 3 has an invalid length. [ 324.332700][T10889] netlink: 'syz.3.1287': attribute type 3 has an invalid length. [ 324.349474][ T52] block nbd2: Receive control failed (result -32) [ 324.457292][T10890] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 324.485151][T10890] bond6 (unregistering): Released all slaves [ 324.607204][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 324.626937][T10906] netlink: 'syz.0.1292': attribute type 23 has an invalid length. [ 324.647925][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 324.890034][T10912] netlink: 'syz.2.1293': attribute type 13 has an invalid length. [ 324.994408][T10910] bond6: option arp_validate: invalid value (18446744073491447809) [ 325.019786][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'. [ 325.032313][T10910] bond6 (unregistering): Released all slaves [ 325.206512][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1296'. [ 325.223507][T10912] batman_adv: batadv0: Interface deactivated: gretap1 [ 325.430026][T10928] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.470255][T10928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.481511][T10928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.518812][T10948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 325.550870][T10949] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1298'. [ 325.582886][T10928] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.596914][T10949] block nbd0: reconnected socket [ 325.611786][T10928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.624266][T10928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.690992][T10928] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.705608][T10928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.719783][T10928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.755920][T10959] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 325.772488][T10959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.794830][T10928] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.808266][T10928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.819357][T10928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.899401][T10959] bond6: entered promiscuous mode [ 325.904735][T10959] bond6: entered allmulticast mode [ 325.912109][T10959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.966267][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.974487][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.988250][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.061386][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.081176][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.097908][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.116411][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.134356][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.144345][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.152909][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.162635][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.182649][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.275673][ T52] block nbd0: Receive control failed (result -32) [ 326.302236][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 326.488838][T10990] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 326.500987][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 326.566181][T11002] netlink: 'syz.1.1315': attribute type 6 has an invalid length. [ 326.712144][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 326.948360][T11023] netlink: 'syz.4.1323': attribute type 7 has an invalid length. [ 327.138346][T11030] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 328.097743][T11063] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 328.103378][T11063] dvmrp1: linktype set to 774 [ 329.709626][T11109] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20000 [ 329.871751][T11116] netlink: 'syz.4.1345': attribute type 2 has an invalid length. [ 329.934661][T11116] @;: entered promiscuous mode [ 330.028977][T11124] __nla_validate_parse: 1 callbacks suppressed [ 330.028994][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 330.079089][T11122] syzkaller1: entered promiscuous mode [ 330.084616][T11122] syzkaller1: entered allmulticast mode [ 330.114800][T11129] netlink: 'syz.3.1347': attribute type 10 has an invalid length. [ 330.141981][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.170969][T11129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.250674][T11137] tipc: Enabling of bearer rejected, failed to enable media [ 331.332496][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1365'. [ 331.372214][T11204] syzkaller0: entered promiscuous mode [ 331.384950][T11204] syzkaller0: entered allmulticast mode [ 331.851458][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 331.911644][T11223] netlink: 'syz.2.1371': attribute type 3 has an invalid length. [ 331.924420][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1371'. [ 331.964106][T11227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1366'. [ 332.697413][T11254] netlink: 'syz.0.1378': attribute type 30 has an invalid length. [ 333.017650][T11263] No such timeout policy "syz1" [ 333.175986][T11268] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 333.309110][T11268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.352375][T11271] bond8: (slave ip6erspan0): making interface the new active one [ 333.362041][T11271] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 333.513324][T11282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1387'. [ 333.521881][T11284] netlink: 'syz.0.1385': attribute type 13 has an invalid length. [ 333.527917][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 333.688645][T11297] dvmrp0: entered allmulticast mode [ 333.694212][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 333.738812][T11284] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.749708][T11284] syzkaller0: entered promiscuous mode [ 333.755945][T11284] syzkaller0: entered allmulticast mode [ 333.788811][T11303] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 333.809226][T11303] xt_hashlimit: size too large, truncated to 1048576 [ 333.993762][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1395'. [ 334.123723][T11329] netlink: 'syz.4.1397': attribute type 13 has an invalid length. [ 334.167482][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 334.959198][T11367] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.087102][T11372] netlink: 'syz.3.1411': attribute type 2 has an invalid length. [ 335.221823][T11377] __nla_validate_parse: 5 callbacks suppressed [ 335.221841][T11377] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1413'. [ 335.304230][T11383] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1413'. [ 335.485204][T11367] bond0: (slave netdevsim0): Releasing backup interface [ 335.766565][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 335.850063][ T5892] IPVS: starting estimator thread 0... [ 335.954988][T11405] IPVS: using max 38 ests per chain, 91200 per kthread [ 337.181353][T11443] sock: sock_timestamping_bind_phc: sock not bind to device [ 337.226448][T11444] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1424'. [ 337.398798][T11454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1429'. [ 337.767177][T11464] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.371131][T11492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1437'. [ 338.672977][T11498] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1438'. [ 338.890126][T11510] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 339.055522][T11510] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.111537][T11512] bond9: (slave ip6gretap2): making interface the new active one [ 339.129768][T11512] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 339.149197][T11517] syzkaller1: entered promiscuous mode [ 339.154850][T11517] syzkaller1: entered allmulticast mode [ 339.461234][T11526] netlink: 'syz.2.1445': attribute type 4 has an invalid length. [ 339.472475][T11526] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1445'. [ 339.567658][T11532] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1446'. [ 339.599799][T11534] tipc: Enabled bearer , priority 0 [ 339.711348][T11534] tipc: Resetting bearer [ 339.758332][T11533] tipc: Resetting bearer [ 339.766849][T11545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.826547][T11545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.976394][T11559] sctp: [Deprecated]: syz.1.1455 (pid 11559) Use of int in max_burst socket option deprecated. [ 339.976394][T11559] Use struct sctp_assoc_value instead [ 339.994389][T11561] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 340.344514][T11579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 340.425882][ T3729] tipc: Resetting bearer [ 340.441126][T11586] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.485000][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.515027][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1463'. [ 340.705449][ T8148] tipc: Node number set to 3079260553 [ 340.725705][T11597] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1468'. [ 340.976371][T11606] tipc: Enabled bearer , priority 0 [ 341.038996][T11606] tipc: Disabling bearer [ 341.217510][T11618] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 341.283555][T11618] 8021q: adding VLAN 0 to HW filter on device bond10 [ 341.550331][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 341.582345][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 341.631645][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 341.762245][T11649] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 341.786849][T11633] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1475'. [ 341.822315][T11645] geneve2: entered promiscuous mode [ 341.829432][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.882104][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.915797][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.924030][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.269122][T11684] nbd3: detected capacity change from 0 to 127 [ 342.282504][T11686] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1493'. [ 342.332307][T11686] block nbd0: reconnected socket [ 342.351311][T11684] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 342.387692][T11686] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.428760][ T52] block nbd3: Receive control failed (result -32) [ 342.439016][ T5836] block nbd0: Receive control failed (result -32) [ 342.468491][T11694] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 342.477698][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 342.486716][T11694] team0: Caught tx_queue_len zero misconfig [ 342.984598][T11720] dummy0: entered promiscuous mode [ 342.993332][T11720] vlan0: entered promiscuous mode [ 343.102527][T11730] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 343.440666][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.947945][T11801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.009592][T11799] netlink: 'syz.4.1524': attribute type 3 has an invalid length. [ 345.196015][T11818] tipc: Resetting bearer [ 345.202377][T11799] syz_tun: entered allmulticast mode [ 345.216249][T11813] tipc: Enabling of bearer rejected, already enabled [ 345.228983][T11797] syz_tun: left allmulticast mode [ 345.249177][T11810] tipc: Resetting bearer [ 345.778826][ T30] audit: type=1800 audit(1764939470.931:5): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1536" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1662 res=0 errno=0 [ 345.837105][T11841] gretap2: entered promiscuous mode [ 345.856442][T11841] batman_adv: batadv0: Adding interface: gretap2 [ 345.865234][T11841] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 345.887098][T11823] __nla_validate_parse: 10 callbacks suppressed [ 345.887115][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 345.903032][T11841] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 345.927051][T11843] syzkaller1: entered promiscuous mode [ 345.985610][T11843] syzkaller1: entered allmulticast mode [ 346.276038][T11853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1537'. [ 346.302851][ T36] tipc: Resetting bearer [ 346.364416][T11853] team0: Mode changed to "loadbalance" [ 346.618367][T11870] netlink: 'syz.0.1543': attribute type 21 has an invalid length. [ 346.638164][T11870] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1543'. [ 346.667187][T11870] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 346.678502][T11870] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1543'. [ 346.976250][T11878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1546'. [ 346.995476][T11878] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1546'. [ 347.080883][T11878] netlink: 'syz.3.1546': attribute type 4 has an invalid length. [ 347.181896][T11886] pim6reg1: entered promiscuous mode [ 347.197332][T11875] netlink: 'syz.3.1546': attribute type 4 has an invalid length. [ 347.215664][T11886] pim6reg1: entered allmulticast mode [ 347.585713][T11879] delete_channel: no stack [ 347.858736][T11900] syz.3.1552: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.944536][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 347.954517][T11900] CPU: 1 UID: 0 PID: 11900 Comm: syz.3.1552 Not tainted syzkaller #0 PREEMPT(full) [ 347.954543][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.954561][T11900] Call Trace: [ 347.954570][T11900] [ 347.954578][T11900] dump_stack_lvl+0x189/0x250 [ 347.954607][T11900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.954626][T11900] ? __pfx__printk+0x10/0x10 [ 347.954647][T11900] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 347.954671][T11900] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 347.954694][T11900] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 347.954716][T11900] warn_alloc+0x214/0x310 [ 347.954734][T11900] ? stack_depot_save_flags+0x40/0x850 [ 347.954752][T11900] ? __pfx_warn_alloc+0x10/0x10 [ 347.954770][T11900] ? kasan_save_track+0x3e/0x80 [ 347.954785][T11900] ? __kasan_kmalloc+0x93/0xb0 [ 347.954803][T11900] ? xsk_setsockopt+0x4dc/0x8d0 [ 347.954815][T11900] ? do_sock_setsockopt+0x17c/0x1b0 [ 347.954832][T11900] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 347.954848][T11900] ? do_syscall_64+0xfa/0xf80 [ 347.954870][T11900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.954897][T11900] __vmalloc_node_range_noprof+0x125/0x12d0 [ 347.954950][T11900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.954972][T11900] ? __kasan_kmalloc+0x93/0xb0 [ 347.954993][T11900] vmalloc_user_noprof+0xad/0xf0 [ 347.955010][T11900] ? xskq_create+0xbf/0x170 [ 347.955025][T11900] xskq_create+0xbf/0x170 [ 347.955041][T11900] xsk_init_queue+0xb0/0x110 [ 347.955057][T11900] xsk_setsockopt+0x4dc/0x8d0 [ 347.955073][T11900] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.955088][T11900] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.955109][T11900] ? aa_sock_opt_perm+0xff/0x1a0 [ 347.955124][T11900] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 347.955141][T11900] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.955155][T11900] do_sock_setsockopt+0x17c/0x1b0 [ 347.955177][T11900] __x64_sys_setsockopt+0x13f/0x1b0 [ 347.955199][T11900] do_syscall_64+0xfa/0xf80 [ 347.955216][T11900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.955228][T11900] ? clear_bhb_loop+0x60/0xb0 [ 347.955244][T11900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.955324][T11900] RIP: 0033:0x7fd5d3f8f749 [ 347.955345][T11900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.955357][T11900] RSP: 002b:00007fd5d4d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.955373][T11900] RAX: ffffffffffffffda RBX: 00007fd5d41e5fa0 RCX: 00007fd5d3f8f749 [ 347.955383][T11900] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 347.955391][T11900] RBP: 00007fd5d4013f91 R08: 0000000000000004 R09: 0000000000000000 [ 347.955399][T11900] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.955408][T11900] R13: 00007fd5d41e6038 R14: 00007fd5d41e5fa0 R15: 00007ffcc4ae53d8 [ 347.955432][T11900] [ 348.015381][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.205790][T11900] Mem-Info: [ 348.367378][T11900] active_anon:6436 inactive_anon:0 isolated_anon:0 [ 348.367378][T11900] active_file:3208 inactive_file:39977 isolated_file:0 [ 348.367378][T11900] unevictable:768 dirty:221 writeback:0 [ 348.367378][T11900] slab_reclaimable:12229 slab_unreclaimable:122072 [ 348.367378][T11900] mapped:31613 shmem:3864 pagetables:946 [ 348.367378][T11900] sec_pagetables:0 bounce:0 [ 348.367378][T11900] kernel_misc_reclaimable:0 [ 348.367378][T11900] free:1291789 free_pcp:19275 free_cma:0 [ 348.416089][T11900] Node 0 active_anon:27244kB inactive_anon:0kB active_file:12832kB inactive_file:159708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127852kB dirty:884kB writeback:0kB shmem:15320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13240kB pagetables:3640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 348.448635][T11900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 348.483895][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 348.502724][T11917] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 348.507702][T11900] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.552899][T11900] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 348.561055][T11900] Node 0 DMA32 free:1261404kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27244kB inactive_anon:0kB active_file:12832kB inactive_file:159708kB unevictable:3136kB writepending:884kB zspages:0kB present:3129332kB managed:2564516kB mlocked:1600kB bounce:0kB free_pcp:58252kB local_pcp:26204kB free_cma:0kB [ 348.617106][T11900] lowmem_reserve[]: 0 0 0 0 0 [ 348.620717][T11919] bond7: (slave geneve2): making interface the new active one [ 348.625424][T11900] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.630641][T11919] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 348.691713][ T1093] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 348.702094][T11900] lowmem_reserve[]: 0 0 0 0 0 [ 348.710293][ T1093] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 348.723865][T11900] Node 1 Normal free:3886392kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19464kB local_pcp:8680kB free_cma:0kB [ 348.772495][ T1093] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 348.782422][ T1093] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 348.816808][T11900] lowmem_reserve[]: 0 0 0 0 0 [ 348.829487][T11900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 348.862700][T11900] Node 0 DMA32: 11*4kB (UME) 15*8kB (UM) 0*16kB 819*32kB (U) 363*64kB (UM) 161*128kB (UM) 102*256kB (UM) 59*512kB (UM) 70*1024kB (UME) 3*2048kB (ME) 258*4096kB (UM) = 1261124kB [ 348.896909][T11900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 348.936701][T11900] Node 1 Normal: 202*4kB (UE) 48*8kB (UME) 49*16kB (UME) 86*32kB (UME) 21*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886392kB [ 349.000862][T11900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.013739][T11900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.026402][T11900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.036698][T11900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.039926][T11934] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:0 [ 349.047621][T11900] 47388 total pagecache pages [ 349.058093][T11900] 0 pages in swap cache [ 349.062263][T11900] Free swap = 124996kB [ 349.067315][T11900] Total swap = 124996kB [ 349.076262][T11900] 2097051 pages RAM [ 349.080374][T11900] 0 pages HighMem/MovableOnly [ 349.100215][T11935] tipc: Resetting bearer [ 349.115086][T11900] 424280 pages reserved [ 349.133987][T11940] x_tables: duplicate underflow at hook 3 [ 349.138061][T11900] 0 pages cma reserved [ 349.201093][T11924] tipc: Resetting bearer [ 349.220162][T11945] netlink: 'syz.4.1562': attribute type 10 has an invalid length. [ 349.229185][T11945] batman_adv: batadv0: Adding interface: macvtap0 [ 349.235725][T11945] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 349.318809][T11945] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 349.320716][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 349.541428][ T1330] tipc: Resetting bearer [ 349.750411][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 350.094496][T11982] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 350.254618][T11987] pim6reg1: entered promiscuous mode [ 350.266790][T11987] pim6reg1: entered allmulticast mode [ 350.518149][T11990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 350.535771][T11990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 350.546275][T11990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 350.648931][T11990] delete_channel: no stack [ 350.900473][T12013] __nla_validate_parse: 2 callbacks suppressed [ 350.900491][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 350.926786][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 350.938859][T12016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1583'. [ 351.333962][T12031] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1587'. [ 351.347179][T12031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.456155][ T6222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.459881][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 351.495146][ T6216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.649415][ T6216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.810612][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 351.811298][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 351.832350][T12056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1592'. [ 351.862895][T12051] ip6t_srh: unknown srh match flags 4000 [ 351.990927][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 352.313861][T12062] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 352.338036][T12066] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 352.366566][T12066] bond8 (unregistering): Released all slaves [ 352.955271][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 352.999499][T12099] netlink: 'syz.1.1603': attribute type 4 has an invalid length. [ 353.385011][T12118] batadv_slave_0: entered promiscuous mode [ 353.399727][T12117] batadv_slave_0: left promiscuous mode [ 353.556624][T12128] netlink: 'syz.0.1612': attribute type 2 has an invalid length. [ 354.139599][T12161] tipc: Enabled bearer , priority 0 [ 354.253963][T12161] tipc: Disabling bearer [ 355.592865][T12223] tipc: Resetting bearer [ 355.620520][T12223] tipc: Enabling of bearer rejected, already enabled [ 355.658052][T12222] tipc: Resetting bearer [ 356.255876][T12263] __nla_validate_parse: 109 callbacks suppressed [ 356.255895][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1647'. [ 356.362109][T12267] macsec1: entered promiscuous mode [ 356.367476][T12267] bridge0: entered promiscuous mode [ 356.373622][T12267] bridge0: port 3(macsec1) entered blocking state [ 356.382236][T12267] bridge0: port 3(macsec1) entered disabled state [ 356.392351][T12267] macsec1: entered allmulticast mode [ 356.397875][T12267] bridge0: entered allmulticast mode [ 356.407269][T12267] macsec1: left allmulticast mode [ 356.419099][T12267] bridge0: left allmulticast mode [ 356.433425][T12267] bridge0: left promiscuous mode [ 356.502156][T12270] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 356.513875][T12270] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 356.522631][T12270] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1648'. [ 356.687971][ T4468] tipc: Resetting bearer [ 356.798105][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1652'. [ 356.824579][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 356.890475][T12287] netlink: 'syz.0.1653': attribute type 21 has an invalid length. [ 357.079080][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1656'. [ 357.106252][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1654'. [ 357.297752][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 357.326247][T12314] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1662'. [ 357.370236][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 357.378818][T12317] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 357.465841][T12317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.560397][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 357.592089][T12323] erspan0: entered allmulticast mode [ 358.614770][T12354] syzkaller0: entered promiscuous mode [ 358.622276][T12354] syzkaller0: entered allmulticast mode [ 358.992145][T12380] netlink: 'syz.3.1681': attribute type 5 has an invalid length. [ 360.635759][ T6216] IPVS: starting estimator thread 0... [ 360.651978][T12396] netlink: 'syz.3.1684': attribute type 2 has an invalid length. [ 360.667654][T12396] 9: entered promiscuous mode [ 360.775466][T12398] IPVS: using max 36 ests per chain, 86400 per kthread [ 361.211855][T12443] netem: invalid attributes len -18 [ 361.226776][T12444] unsupported nlmsg_type 40 [ 361.389162][T12449] tipc: Enabled bearer , priority 0 [ 361.399407][T12449] syzkaller0: entered promiscuous mode [ 361.418847][T12449] syzkaller0: entered allmulticast mode [ 361.465527][T12449] tipc: Resetting bearer [ 361.506381][T12447] tipc: Resetting bearer [ 361.560184][T12447] tipc: Disabling bearer [ 362.085971][T12477] __nla_validate_parse: 8 callbacks suppressed [ 362.085989][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.135317][T12479] syzkaller1: entered promiscuous mode [ 362.147127][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1705'. [ 362.165112][T12479] syzkaller1: entered allmulticast mode [ 363.083917][T12515] tipc: Enabling of bearer rejected, failed to enable media [ 363.106889][T12506] netlink: 'syz.2.1711': attribute type 13 has an invalid length. [ 363.167793][T12511] bond8: option arp_validate: invalid value (18446744073491447809) [ 363.196984][T12511] bond8 (unregistering): Released all slaves [ 363.417720][T12506] tipc: Resetting bearer [ 363.496521][ T1143] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.517693][ T1143] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.534129][ T1143] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.553119][ T1143] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 363.853665][T12539] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 363.896105][T12539] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 364.193831][T12552] syzkaller1: entered promiscuous mode [ 364.243050][T12552] syzkaller1: entered allmulticast mode [ 364.388158][T12560] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 364.521867][T12560] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.576926][T12566] syzkaller0: entered promiscuous mode [ 364.582694][T12566] syzkaller0: entered allmulticast mode [ 364.645505][T12564] lo: Caught tx_queue_len zero misconfig [ 365.287072][ T6222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.606565][T12596] syzkaller0: entered promiscuous mode [ 365.630235][T12596] syzkaller0: entered allmulticast mode [ 365.775565][ T6222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.842518][T12605] netlink: 'syz.1.1736': attribute type 6 has an invalid length. [ 365.909547][T12606] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1736'. [ 365.944727][T12606] syzkaller0: entered promiscuous mode [ 365.963300][T12606] syzkaller0: entered allmulticast mode [ 365.982594][T12605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'. [ 366.228023][T12613] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 366.680215][T12629] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1742'. [ 366.726139][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 366.770564][T12634] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1744'. [ 366.784632][T12633] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1744'. [ 366.799108][T12633] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 366.886567][T12633] bond5: (slave geneve4): making interface the new active one [ 366.924520][T12633] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 366.945669][ T76] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.958086][ T76] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.991984][ T76] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.029928][ T76] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.161380][T12641] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 367.195710][T12641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1746'. [ 367.808736][T12663] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 367.977912][T12677] syzkaller0: entered promiscuous mode [ 367.993762][T12677] syzkaller0: entered allmulticast mode [ 368.150678][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 368.159745][T12660] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1751'. [ 368.180091][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 368.471901][T12695] geneve5: entered promiscuous mode [ 368.601751][T12701] erspan0: left allmulticast mode [ 368.701247][T12701] ip6gre0: left promiscuous mode [ 368.748062][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.778405][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.788519][T12701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.813938][T12713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.857916][T12713] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 369.389369][T12730] xt_l2tp: v2 tid > 0xffff: 37482740 [ 369.399726][T12728] bridge5: entered promiscuous mode [ 369.406159][T12728] bridge5: entered allmulticast mode [ 369.484823][T12730] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1773'. [ 369.911944][T12755] netlink: 'syz.0.1781': attribute type 4 has an invalid length. [ 370.163220][T12763] IPv6: Can't replace route, no match found [ 370.260950][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1784'. [ 371.139306][T12797] tipc: Enabled bearer , priority 0 [ 371.214323][T12804] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1795'. [ 371.333881][T12797] syzkaller0: entered promiscuous mode [ 371.349700][T12797] syzkaller0: entered allmulticast mode [ 371.379474][T12810] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1796'. [ 371.388701][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 371.402657][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1796'. [ 371.449947][T12812] tipc: Resetting bearer [ 371.516219][T12797] tunl0: Caught tx_queue_len zero misconfig [ 371.577280][T12795] tipc: Resetting bearer [ 371.637344][T12795] tipc: Disabling bearer [ 371.963080][T12835] rdma_op ffff8880335821f0 conn xmit_rdma 0000000000000000 [ 372.337324][T12855] veth6: entered allmulticast mode [ 372.414494][T12858] netlink: 'syz.4.1803': attribute type 10 has an invalid length. [ 373.066228][T12892] __nla_validate_parse: 1 callbacks suppressed [ 373.066245][T12892] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1812'. [ 373.081993][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 375.129683][T12916] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1819'. [ 375.231609][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 375.524820][T12936] dvmrp0: entered allmulticast mode [ 375.599534][T12941] netlink: 'syz.2.1827': attribute type 15 has an invalid length. [ 375.782532][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1829'. [ 375.880861][T12962] tipc: Enabled bearer , priority 0 [ 375.977122][T12963] syzkaller0: entered promiscuous mode [ 375.982609][T12963] syzkaller0: entered allmulticast mode [ 376.002082][T12963] tipc: Resetting bearer [ 376.037881][T12968] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1835'. [ 376.147066][T12958] tipc: Resetting bearer [ 377.639639][T12958] tipc: Disabling bearer [ 377.648701][T12973] tipc: Enabled bearer , priority 0 [ 377.656471][T12976] syzkaller0: entered promiscuous mode [ 377.662130][T12976] syzkaller0: entered allmulticast mode [ 377.676243][T12980] tipc: Resetting bearer [ 377.705853][T12964] tipc: Resetting bearer [ 377.754237][T12964] tipc: Disabling bearer [ 377.961862][T13007] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1842'. [ 377.978357][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'. [ 378.000845][T13003] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1841'. [ 378.030231][T13008] sctp: [Deprecated]: syz.3.1843 (pid 13008) Use of int in maxseg socket option. [ 378.030231][T13008] Use struct sctp_assoc_value instead [ 378.060699][T13008] macsec1: entered promiscuous mode [ 378.066957][T13008] macsec1: entered allmulticast mode [ 378.662180][T13030] : entered promiscuous mode [ 378.832947][T13038] netlink: 'syz.0.1854': attribute type 23 has an invalid length. [ 378.860890][T13038] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1854'. [ 379.012368][T13048] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 379.149053][T13048] bond11: (slave geneve3): making interface the new active one [ 379.158693][T13048] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 379.168082][ T1143] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 379.181506][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 379.184939][ T1143] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 379.198967][ T1143] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 379.236867][ T1143] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 379.590993][T13091] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1868'. [ 379.617981][T13091] 0X: renamed from caif0 [ 379.650001][T13091] 0X: entered allmulticast mode [ 379.656631][T13091] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 379.708369][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 379.756308][T13097] batadv0: mtu less than device minimum [ 379.766083][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 380.075415][T13118] tipc: Enabling of bearer rejected, failed to enable media [ 380.100587][T13118] netlink: 'syz.0.1873': attribute type 7 has an invalid length. [ 380.247286][T13120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1874'. [ 380.306786][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 380.378815][T13127] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 380.435460][T13127] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1875'. [ 380.548984][T13129] netlink: 'syz.2.1877': attribute type 5 has an invalid length. [ 380.662509][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 380.857202][T13147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1882'. [ 380.999459][T13153] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 381.238733][T13166] tipc: Enabling of bearer rejected, failed to enable media [ 381.253236][T13166] vcan0: entered allmulticast mode [ 381.567878][T13191] tipc: Enabling of bearer rejected, already enabled [ 381.852887][T13201] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 381.996476][T13205] bond12 (unregistering): Released all slaves [ 382.281018][T13224] tipc: Enabled bearer , priority 0 [ 382.289077][T13224] syzkaller0: entered promiscuous mode [ 382.296993][T13224] syzkaller0: entered allmulticast mode [ 382.317612][T13223] tipc: Resetting bearer [ 382.347962][T13223] tipc: Disabling bearer [ 382.542192][T13194] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.636030][T13248] syzkaller1: entered promiscuous mode [ 382.645972][T13248] syzkaller1: entered allmulticast mode [ 382.910316][T13257] macvlan2: left allmulticast mode [ 382.919964][T13257] bond6: left promiscuous mode [ 382.924771][T13257] bond6: left allmulticast mode [ 382.935801][T13257] syzkaller0: left promiscuous mode [ 382.949151][T13257] syzkaller0: left allmulticast mode [ 382.969026][T13257] gretap2: left promiscuous mode [ 383.851390][T13277] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.023403][T13299] __nla_validate_parse: 11 callbacks suppressed [ 384.023423][T13299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1928'. [ 384.268230][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 385.112070][T13318] netlink: 'syz.3.1932': attribute type 2 has an invalid length. [ 385.176697][T13321] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 385.231970][T13321] netlink: 'syz.0.1933': attribute type 2 has an invalid length. [ 385.549896][T13323] delete_channel: no stack [ 385.567846][T13335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1938'. [ 385.588859][T13337] netlink: 'syz.0.1939': attribute type 4 has an invalid length. [ 385.653590][T13340] netlink: 'syz.0.1939': attribute type 4 has an invalid length. [ 385.688228][T13335] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1938'. [ 385.706962][T13335] netlink: 'syz.4.1938': attribute type 9 has an invalid length. [ 385.735305][T13335] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1938'. [ 385.769436][T13335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'. [ 385.832749][T13344] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 385.874829][T13344] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.1941'. [ 386.132483][T13362] Unsupported ieee802154 address type: 0 [ 386.142861][T13361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.223365][T13361] bond4: option mode: unable to set because the bond device has slaves [ 386.269311][T13364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.312769][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1947'. [ 386.372772][T13369] xt_CT: No such helper "snmp_trap" [ 386.477744][T13374] netlink: 'syz.3.1948': attribute type 33 has an invalid length. [ 386.497954][T13374] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1948'. [ 386.518583][T13382] nbd: couldn't find device at index 536870912 [ 388.466387][T13410] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 388.909343][T13429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'. [ 389.085794][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 389.277760][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 389.296704][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 389.306706][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 389.315773][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 389.425617][T13451] syzkaller0: entered promiscuous mode [ 389.431209][T13451] syzkaller0: entered allmulticast mode [ 389.677452][T13457] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 389.772113][T13456] delete_channel: no stack [ 389.948928][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 390.320742][T13483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.645525][T13484] netlink: 'syz.4.1974': attribute type 12 has an invalid length. [ 390.680704][T13480] ip_vti0: entered promiscuous mode [ 390.724057][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 393.248551][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'. [ 393.387204][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1985'. [ 393.406503][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 393.479861][T13544] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.740292][T13561] netlink: 'syz.1.1991': attribute type 8 has an invalid length. [ 393.744454][ T6216] IPVS: starting estimator thread 0... [ 393.770226][T13561] geneve0: entered promiscuous mode [ 393.791227][T13561] geneve0: entered allmulticast mode [ 393.846209][T13562] IPVS: using max 29 ests per chain, 69600 per kthread [ 393.949272][T13570] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 394.749935][T13606] __nla_validate_parse: 2 callbacks suppressed [ 394.749954][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 395.586773][T13646] IPVS: length: 202 != 24 [ 395.791348][T13655] tipc: Enabled bearer , priority 0 [ 395.806967][T13655] syzkaller0: entered promiscuous mode [ 395.812470][T13655] syzkaller0: entered allmulticast mode [ 395.831978][T13653] tipc: Resetting bearer [ 395.866865][T13653] tipc: Disabling bearer [ 395.931945][T13657] lo speed is unknown, defaulting to 1000 [ 395.965639][T13657] lo speed is unknown, defaulting to 1000 [ 395.971460][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2017'. [ 395.978097][T13661] tipc: Enabling of bearer rejected, failed to enable media [ 396.016521][T13657] lo speed is unknown, defaulting to 1000 [ 396.267984][T13657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 396.360789][T13657] lo speed is unknown, defaulting to 1000 [ 396.383519][T13657] lo speed is unknown, defaulting to 1000 [ 396.400794][T13657] lo speed is unknown, defaulting to 1000 [ 396.424134][T13657] lo speed is unknown, defaulting to 1000 [ 396.447058][T13657] lo speed is unknown, defaulting to 1000 [ 396.473585][T13657] lo speed is unknown, defaulting to 1000 [ 396.511667][T13686] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2023'. [ 396.549504][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 396.560065][T13688] openvswitch: netlink: Message has 8 unknown bytes. [ 396.570243][T13691] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2023'. [ 396.647150][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 396.656860][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 396.666131][T13693] netlink: 'syz.1.2024': attribute type 13 has an invalid length. [ 396.674223][T13693] netlink: 'syz.1.2024': attribute type 11 has an invalid length. [ 396.740505][T13695] syzkaller1: entered promiscuous mode [ 396.749307][T13695] syzkaller1: entered allmulticast mode [ 397.080773][T13713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2030'. [ 397.092210][T13713] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 397.400797][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 397.411574][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2037'. [ 397.517225][ T3658] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 397.908349][T13763] bond12 (unregistering): Released all slaves [ 398.055824][T13767] pimreg: entered allmulticast mode [ 398.161570][T13765] pimreg: left allmulticast mode [ 398.316551][T13791] tc_dump_action: action bad kind [ 398.394117][T13797] tipc: Enabled bearer , priority 0 [ 398.404128][T13797] syzkaller0: entered promiscuous mode [ 398.412094][T13797] syzkaller0: entered allmulticast mode [ 398.497630][T13804] tipc: Resetting bearer [ 398.574390][T13809] netlink: 'syz.2.2051': attribute type 6 has an invalid length. [ 398.604411][T13809] netlink: 'syz.2.2051': attribute type 4 has an invalid length. [ 398.627135][T13796] tipc: Resetting bearer [ 398.666025][T13796] tipc: Disabling bearer [ 398.984094][T13834] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 399.494814][T13826] lo speed is unknown, defaulting to 1000 [ 399.555279][T13858] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 399.793425][T13861] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 399.919210][T13865] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 399.956449][ T3613] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.000556][T13875] __nla_validate_parse: 6 callbacks suppressed [ 400.007950][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'. [ 400.075104][ T3613] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.214225][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 400.246946][T13881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.457344][T13827] lo speed is unknown, defaulting to 1000 [ 400.499081][T13867] lo speed is unknown, defaulting to 1000 [ 400.587218][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 400.880104][T13900] bond6: entered promiscuous mode [ 400.893916][T13900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 400.928659][T13878] lo speed is unknown, defaulting to 1000 [ 401.023657][T13914] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2078'. [ 401.084200][T13914] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2078'. [ 401.854490][T13911] lo speed is unknown, defaulting to 1000 [ 402.355770][T13956] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 402.423786][T13956] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.552032][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 402.561749][T13940] lo speed is unknown, defaulting to 1000 [ 402.571801][T13961] bond8: entered allmulticast mode [ 402.617915][T13959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2088'. [ 402.737428][T13963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2090'. [ 402.752659][T13961] bond8: (slave dummy0): making interface the new active one [ 402.775416][T13961] dummy0: entered allmulticast mode [ 402.788069][T13961] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 402.956855][T13967] xt_hashlimit: max too large, truncated to 1048576 [ 403.135883][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 403.222635][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'. [ 403.248697][T13976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2094'. [ 403.430921][T13983] netlink: 'syz.1.2096': attribute type 9 has an invalid length. [ 403.439551][T13983] netlink: 'syz.1.2096': attribute type 10 has an invalid length. [ 403.633982][T13985] syzkaller0: entered promiscuous mode [ 403.640463][T13985] syzkaller0: entered allmulticast mode [ 403.668568][T13985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.838612][T13999] batman_adv: batadv0: Removing interface: gretap1 [ 403.866345][T13999] batman_adv: batadv0: Removing interface: gretap2 [ 404.231268][T14015] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 404.250692][T14015] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 404.361895][T14021] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 404.380346][T14021] netlink: 'syz.2.2109': attribute type 3 has an invalid length. [ 404.389095][T14001] lo speed is unknown, defaulting to 1000 [ 404.830581][T14047] syzkaller0: entered promiscuous mode [ 404.842726][T14047] syzkaller0: entered allmulticast mode [ 405.241400][T14063] netlink: 'syz.0.2120': attribute type 2 has an invalid length. [ 405.271298][T14063] __nla_validate_parse: 9 callbacks suppressed [ 405.271317][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 406.071684][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 406.104623][T14082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2125'. [ 406.131386][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2125'. [ 406.142279][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 406.151369][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 406.160926][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 406.163939][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2125'. [ 406.183931][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 406.204717][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 473.944566][T14091] __nla_validate_parse: 4 callbacks suppressed [ 473.944584][T14091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2128'. [ 473.969851][T14091] --map-set only usable from mangle table [ 474.003414][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 474.131105][T14102] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 474.187334][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'. [ 474.515760][T14106] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 474.658599][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 474.881253][T14139] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 474.930884][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2140'. [ 475.076860][T14147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2144'. [ 475.086010][T14145] veth1_to_team: entered allmulticast mode [ 475.090878][T14149] netlink: 'syz.4.2145': attribute type 5 has an invalid length. [ 475.253085][T14156] tipc: Enabled bearer , priority 0 [ 475.262844][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 475.272739][T14156] syzkaller0: entered promiscuous mode [ 475.278978][T14160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2149'. [ 475.280664][T14156] syzkaller0: entered allmulticast mode [ 475.318817][T14157] hsr_slave_0: left promiscuous mode [ 475.325583][T14157] hsr_slave_1: left promiscuous mode [ 475.442060][T14167] tipc: Resetting bearer [ 475.468089][T14156] siw: device registration error -23 [ 475.478511][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 475.490137][T14154] tipc: Resetting bearer [ 475.514209][T14154] tipc: Disabling bearer [ 475.607171][T14169] hsr_slave_1 (unregistering): left promiscuous mode [ 475.692829][T14178] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 475.726901][T14192] pimreg: entered allmulticast mode [ 475.964136][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 476.591355][T14195] batadv0: left promiscuous mode [ 476.714236][T14221] syzkaller0: entered promiscuous mode [ 476.732354][T14221] syzkaller0: entered allmulticast mode [ 476.742058][T14193] lo speed is unknown, defaulting to 1000 [ 476.752688][ T3930] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.763812][ T3930] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 476.790308][ T3930] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.799996][ T3930] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 476.850951][ T3930] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.869042][ T3930] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 476.917239][ T3930] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.934135][ T3930] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 476.942137][T14231] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 476.945231][T14235] netlink: 'syz.2.2166': attribute type 14 has an invalid length. [ 477.027263][T14237] x_tables: duplicate underflow at hook 2 [ 477.062018][T14238] delete_channel: no stack [ 477.076321][T14238] delete_channel: no stack [ 477.207783][T14246] Cannot find set identified by id 3 to match [ 477.248330][T14246] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 477.694304][T14267] siw: device registration error -23 [ 477.825806][T14270] syzkaller1: entered promiscuous mode [ 477.831326][T14270] syzkaller1: entered allmulticast mode [ 477.861400][T14274] No such timeout policy "syz0" [ 477.868523][T14274] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 478.087374][T14291] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 478.130492][T14290] Bluetooth: MGMT ver 1.23 [ 478.463563][T14319] tipc: Enabling of bearer rejected, already enabled [ 478.572257][T14325] syzkaller0: entered promiscuous mode [ 478.585443][T14325] syzkaller0: entered allmulticast mode [ 478.591572][T14325] tipc: Resetting bearer [ 479.280886][T14317] tipc: Resetting bearer [ 479.300237][T14366] netlink: 'syz.0.2202': attribute type 15 has an invalid length. [ 479.321899][T14334] lo speed is unknown, defaulting to 1000 [ 479.813396][ T13] tipc: Resetting bearer [ 479.966496][T14375] lo speed is unknown, defaulting to 1000 [ 480.003566][T14401] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 480.022390][T14401] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 480.204225][T14372] lo speed is unknown, defaulting to 1000 [ 481.038308][T14439] __nla_validate_parse: 199 callbacks suppressed [ 481.038329][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 481.070623][T14439] tipc: Enabled bearer , priority 0 [ 481.095589][T14447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2225'. [ 481.140712][T14439] syzkaller0: entered promiscuous mode [ 481.147063][T14439] syzkaller0: entered allmulticast mode [ 481.153425][T14439] tipc: Resetting bearer [ 481.187075][T14437] tipc: Resetting bearer [ 481.279005][T14450] siw: device registration error -23 [ 482.678733][T14437] tipc: Disabling bearer [ 482.755514][T14464] netlink: 'syz.3.2229': attribute type 13 has an invalid length. [ 482.795871][T14464] netlink: 'syz.3.2229': attribute type 13 has an invalid length. [ 482.827802][T14465] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 483.045284][T14482] syzkaller0: entered promiscuous mode [ 483.050805][T14482] syzkaller0: entered allmulticast mode [ 483.133684][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 483.270920][T14495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2240'. [ 483.357113][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 483.406685][T14502] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 483.746586][T14496] lo speed is unknown, defaulting to 1000 [ 483.788145][T14521] netlink: 'syz.2.2244': attribute type 10 has an invalid length. [ 483.837813][T14521] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 483.869248][T14521] netlink: 'syz.2.2244': attribute type 9 has an invalid length. [ 484.165493][T14551] wg1 speed is unknown, defaulting to 1000 [ 484.212710][T14554] xt_TCPMSS: Only works on TCP SYN packets [ 484.273034][T14553] syzkaller0: entered promiscuous mode [ 484.279506][T14553] syzkaller0: entered allmulticast mode [ 484.286600][T14551] wg1 speed is unknown, defaulting to 1000 [ 484.302581][T14551] wg1 speed is unknown, defaulting to 1000 [ 484.679417][T14565] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2255'. [ 485.949285][T14542] lo speed is unknown, defaulting to 1000 [ 485.981378][T14551] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 486.148036][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.158074][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.216121][T14569] netlink: 'syz.1.2256': attribute type 2 has an invalid length. [ 486.224528][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.266815][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 486.281450][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.438541][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.483747][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.521842][T14551] wg1 speed is unknown, defaulting to 1000 [ 486.665555][T14563] lo speed is unknown, defaulting to 1000 [ 487.041413][T14590] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 487.398535][T14612] netlink: 'syz.0.2267': attribute type 4 has an invalid length. [ 487.646041][T14622] xt_hashlimit: size too large, truncated to 1048576 [ 487.698254][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 487.730518][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 487.849908][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2273'. [ 487.891997][T14633] pimreg: entered allmulticast mode [ 487.974389][T14633] pimreg: left allmulticast mode [ 488.040348][T14641] IPv6: sit1: Disabled Multicast RS [ 488.161848][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2275'. [ 488.269769][T14649] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2277'. [ 488.293834][T14649] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2277'. [ 488.527711][T14647] lo speed is unknown, defaulting to 1000 [ 488.536098][T14647] wg1 speed is unknown, defaulting to 1000 [ 488.579189][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 488.972421][T14673] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 489.624073][T14698] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2291'. [ 489.861413][T14676] lo speed is unknown, defaulting to 1000 [ 489.870204][T14676] wg1 speed is unknown, defaulting to 1000 [ 490.069691][T14716] gre3: entered allmulticast mode [ 490.228993][T14727] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.244986][T14727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 490.294536][T14727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 490.330341][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 490.434738][T14732] geneve6: entered promiscuous mode [ 490.460838][T14732] geneve6: entered allmulticast mode [ 490.500096][T14738] netlink: 'syz.3.2299': attribute type 6 has an invalid length. [ 490.520273][T14746] nbd: must specify at least one socket [ 490.531121][T14738] netlink: 'syz.3.2299': attribute type 7 has an invalid length. [ 490.558348][T14738] netlink: 'syz.3.2299': attribute type 8 has an invalid length. [ 490.574768][T14738] netlink: 'syz.3.2299': attribute type 8 has an invalid length. [ 490.593509][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44620 - 0 [ 490.602894][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44620 - 0 [ 490.613644][T14743] team_slave_1: Caught tx_queue_len zero misconfig [ 490.640310][T14746] bpq0: entered promiscuous mode [ 490.655556][T14727] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.675660][T14727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 490.686571][T14727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 490.738870][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44620 - 0 [ 490.747827][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44620 - 0 [ 490.810375][T14727] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.821934][T14727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 490.852028][T14727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 490.957572][T14727] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.983911][T14727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 491.005515][T14727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 491.150761][ T76] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.164683][ T76] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 491.185691][ T76] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 491.217485][ T76] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.235375][ T76] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 491.250017][ T76] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 491.267115][T14753] lo speed is unknown, defaulting to 1000 [ 491.267642][ T151] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.300626][ T151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 491.310704][ T151] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 491.325299][T14753] wg1 speed is unknown, defaulting to 1000 [ 491.360229][ T151] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.386846][ T151] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 491.407035][ T151] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 491.543747][T14776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.127977][T14801] bond7: Unable to set down delay as MII monitoring is disabled [ 492.138500][T14801] bond7 (unregistering): Released all slaves [ 492.217316][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.228932][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.238638][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.247768][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.280569][T14819] __nla_validate_parse: 4 callbacks suppressed [ 492.280586][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 492.348830][ T5836] block nbd4: Receive control failed (result -1) [ 492.418410][T14824] tipc: Enabled bearer , priority 0 [ 492.530436][T14832] tipc: Resetting bearer [ 492.606194][T14823] tipc: Disabling bearer [ 492.650270][T14833] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 492.663557][T14833] netlink: 'syz.4.2325': attribute type 2 has an invalid length. [ 492.795954][T14847] netlink: 'syz.3.2327': attribute type 13 has an invalid length. [ 492.803760][T14837] bond6: option arp_validate: invalid value (18446744073491447809) [ 492.819203][T14837] bond6 (unregistering): Released all slaves [ 493.171222][T14857] : entered promiscuous mode [ 493.197173][T14864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 493.205376][ T6862] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.214301][ T6862] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 44620 - 0 [ 493.228987][ T6862] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.268320][ T6862] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.300124][ T6862] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 44620 - 0 [ 493.334665][ T6862] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.368034][T14868] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 493.384665][ T6862] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.417192][ T6862] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 44620 - 0 [ 493.431355][ T6862] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.447188][ T3930] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.457624][ T3930] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 44620 - 0 [ 493.475550][ T3930] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.518268][T14868] gretap3: entered allmulticast mode [ 493.553777][T14882] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.573594][T14882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 493.586759][T14882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.653103][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 493.673486][T14882] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.685996][T14882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 493.696619][T14882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.774300][T14892] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2343'. [ 493.810073][T14882] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.835035][T14882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 493.877875][T14882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.984641][T14882] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.016305][T14882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 494.029341][T14882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 494.126336][T14908] x_tables: duplicate underflow at hook 1 [ 494.146568][T14908] netlink: 'syz.4.2348': attribute type 10 has an invalid length. [ 494.238169][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2349'. [ 494.294731][T14910] 8021q: adding VLAN 0 to HW filter on device bond12 [ 494.295552][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'. [ 494.315925][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 494.352824][T14914] bond12: Unable to set up delay as MII monitoring is disabled [ 494.775875][ T3930] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.793509][ T3930] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.926793][ T3930] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.002346][ T3930] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.020287][ T3930] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 495.038371][ T3930] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.076449][ T1330] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.095589][ T1330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 495.103930][ T1330] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.154348][ T3729] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.163411][ T3729] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 495.188805][ T3729] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.281982][T14945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.289309][T14945] IPv6: NLM_F_CREATE should be set when creating new route [ 495.296911][T14945] IPv6: NLM_F_CREATE should be set when creating new route [ 495.304174][T14945] IPv6: NLM_F_CREATE should be set when creating new route [ 495.317727][T14944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.369824][T14945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.385480][T14944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.436496][T14940] lo speed is unknown, defaulting to 1000 [ 495.453624][T14940] wg1 speed is unknown, defaulting to 1000 [ 495.512671][T14952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2358'. [ 495.629594][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2359'. [ 495.660211][T14958] sctp: [Deprecated]: syz.2.2360 (pid 14958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.660211][T14958] Use struct sctp_sack_info instead [ 495.683376][T14959] sctp: [Deprecated]: syz.2.2360 (pid 14959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.683376][T14959] Use struct sctp_sack_info instead [ 495.903846][T14970] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 495.927188][T14973] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 495.937688][T14973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2365'. [ 495.941255][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 496.089186][T14970] bond7: entered promiscuous mode [ 496.096561][T14970] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.102682][T14980] openvswitch: netlink: Missing valid actions attribute. [ 496.114976][T14980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.148789][T14975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.156602][T14975] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 496.166979][T14975] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 496.192277][T14975] bond7: (slave gre1): making interface the new active one [ 496.200186][T14975] gre1: entered promiscuous mode [ 496.207734][T14975] bond7: (slave gre1): Enslaving as an active interface with an up link [ 496.227482][ T3729] skbuff: skb_under_panic: text:ffffffff89db9007 len:-1826254528 put:-1826254604 head:ffff888079b74000 data:ffff887fe691afcc tail:0x10c end:0x6c0 dev:bond7 [ 496.269443][ T3729] ------------[ cut here ]------------ [ 496.275591][ T3729] kernel BUG at net/core/skbuff.c:213! [ 496.304236][ T3729] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 496.310689][ T3729] CPU: 1 UID: 0 PID: 3729 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 496.320232][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.330288][ T3729] Workqueue: bond7 bond_resend_igmp_join_requests_delayed [ 496.337403][ T3729] RIP: 0010:skb_panic+0x157/0x160 [ 496.342594][ T3729] Code: c7 20 2f 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 1e 95 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.362370][ T3729] RSP: 0018:ffffc9000c7972b8 EFLAGS: 00010286 [ 496.368521][ T3729] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: eb60ed9b8dc39600 [ 496.376524][ T3729] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 496.384485][ T3729] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 496.392448][ T3729] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: ffff88802eb63510 [ 496.400563][ T3729] R13: ffff888079b74000 R14: ffff887fe691afcc R15: 000000000000010c [ 496.408805][ T3729] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 496.417838][ T3729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.424422][ T3729] CR2: 00007fff330e0e28 CR3: 0000000050e56000 CR4: 00000000003526f0 [ 496.432402][ T3729] Call Trace: [ 496.435681][ T3729] [ 496.438604][ T3729] ? ipgre_header+0x67/0x290 [ 496.443183][ T3729] ? ipgre_header+0x67/0x290 [ 496.447849][ T3729] skb_push+0xc3/0xe0 [ 496.451840][ T3729] ipgre_header+0x67/0x290 [ 496.456244][ T3729] ? __pfx_ipgre_header+0x10/0x10 [ 496.461343][ T3729] neigh_connected_output+0x286/0x460 [ 496.466780][ T3729] ip6_finish_output2+0xfb3/0x1480 [ 496.471885][ T3729] ? __pfx_ip6_finish_output2+0x10/0x10 [ 496.477503][ T3729] ? ip6_mtu+0x7d/0x490 [ 496.481828][ T3729] ? ip6_mtu+0x38c/0x490 [ 496.486071][ T3729] ? ip6_finish_output+0x2ef/0x4e0 [ 496.491289][ T3729] ? ip6_output+0x126/0x550 [ 496.495808][ T3729] ip6_output+0x340/0x550 [ 496.500242][ T3729] NF_HOOK+0x9e/0x380 [ 496.504220][ T3729] ? NF_HOOK+0x101/0x380 [ 496.508473][ T3729] ? __pfx_NF_HOOK+0x10/0x10 [ 496.513064][ T3729] ? __pfx_dst_output+0x10/0x10 [ 496.517922][ T3729] ? icmp6_dst_alloc+0x3a5/0x420 [ 496.522854][ T3729] ? icmp6_dst_alloc+0x3a5/0x420 [ 496.527804][ T3729] mld_sendpack+0x8d4/0xe60 [ 496.532329][ T3729] ? __asan_memcpy+0x40/0x70 [ 496.536931][ T3729] ? mld_sendpack+0x1e7/0xe60 [ 496.541686][ T3729] ? __pfx_mld_sendpack+0x10/0x10 [ 496.546885][ T3729] ? tls_dev_event+0x717/0xec0 [ 496.551642][ T3729] ? mld_send_report+0xe0/0x380 [ 496.556611][ T3729] ipv6_mc_netdev_event+0x1b7/0x5a0 [ 496.561895][ T3729] notifier_call_chain+0x19d/0x3a0 [ 496.567005][ T3729] call_netdevice_notifiers+0x88/0xc0 [ 496.572368][ T3729] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 496.578425][ T3729] ? process_scheduled_works+0x9ef/0x1770 [ 496.584240][ T3729] bond_resend_igmp_join_requests_delayed+0x61/0x170 [ 496.590998][ T3729] ? process_scheduled_works+0x9ef/0x1770 [ 496.596802][ T3729] process_scheduled_works+0xad1/0x1770 [ 496.602367][ T3729] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.608443][ T3729] worker_thread+0x8a0/0xda0 [ 496.613526][ T3729] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.619863][ T3729] ? __kthread_parkme+0x7b/0x200 [ 496.624898][ T3729] kthread+0x711/0x8a0 [ 496.628977][ T3729] ? __pfx_worker_thread+0x10/0x10 [ 496.634086][ T3729] ? __pfx_kthread+0x10/0x10 [ 496.638716][ T3729] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.643944][ T3729] ? lockdep_hardirqs_on+0x98/0x140 [ 496.649134][ T3729] ? __pfx_kthread+0x10/0x10 [ 496.653827][ T3729] ret_from_fork+0x599/0xb30 [ 496.658517][ T3729] ? __pfx_ret_from_fork+0x10/0x10 [ 496.663724][ T3729] ? __switch_to_asm+0x39/0x70 [ 496.668485][ T3729] ? __switch_to_asm+0x33/0x70 [ 496.673240][ T3729] ? __pfx_kthread+0x10/0x10 [ 496.677956][ T3729] ret_from_fork_asm+0x1a/0x30 [ 496.682899][ T3729] [ 496.685925][ T3729] Modules linked in: [ 496.691169][ T3729] ---[ end trace 0000000000000000 ]--- [ 496.707028][ T3729] RIP: 0010:skb_panic+0x157/0x160 [ 496.712488][ T3729] Code: c7 20 2f 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 1e 95 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.732835][ T3729] RSP: 0018:ffffc9000c7972b8 EFLAGS: 00010286 [ 496.739501][ T3729] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: eb60ed9b8dc39600 [ 496.747811][ T3729] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 496.756065][ T3729] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 496.764273][ T3729] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: ffff88802eb63510 [ 496.773036][ T3729] R13: ffff888079b74000 R14: ffff887fe691afcc R15: 000000000000010c [ 496.781270][ T3729] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 496.790661][ T3729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.797525][ T3729] CR2: 000055555ad58808 CR3: 0000000023ed4000 CR4: 00000000003526f0 [ 496.805992][ T3729] Kernel panic - not syncing: Fatal exception [ 496.812647][ T3729] Kernel Offset: disabled [ 496.816963][ T3729] Rebooting in 86400 seconds..