last executing test programs: 2.577652736s ago: executing program 2 (id=7872): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0xe4}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x6e20, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 2.229816145s ago: executing program 2 (id=7881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x400}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newqdisc={0x2ac, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xc, 0xffff}, {0xffe4, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7e9}, @qdisc_kind_options=@q_htb={{0x8}, {0xf4, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x97ea7b86}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x65db}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7fffffff}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x553}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc6, 0x8}}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x8, 0x9, 0x0, 0x8, 0x10001, 0x8}}, {0x14, 0x2, [0x6, 0x6, 0x1, 0x94, 0x855, 0x5, 0x8, 0x2]}}, {{0x1c, 0x1, {0x6, 0x41, 0xb, 0x100, 0x2, 0x9d0f, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x0, 0x7f, 0x9, 0x1, 0x3, 0x5, 0x4}}, {0xc, 0x2, [0x401, 0x44c, 0x8, 0x6]}}]}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x3ff, 0xf431, 0x3, 0x7, 0x800, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x9f69]}}, {{0x1c, 0x1, {0x8, 0x1, 0x6, 0x9f, 0x0, 0x2f, 0x5, 0x4}}, {0xc, 0x2, [0xf6, 0x5, 0x3, 0x7]}}, {{0x1c, 0x1, {0xe3, 0x9, 0x81, 0x0, 0x0, 0x8, 0x8, 0x2}}, {0x8, 0x2, [0x5e94, 0x8008]}}, {{0x1c, 0x1, {0x8, 0x4, 0x8, 0x9, 0x2, 0xfffffffc, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x7, 0x800]}}, {{0x1c, 0x1, {0xfe, 0x7, 0x9, 0x555cc628, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x52c3]}}, {{0x1c, 0x1, {0xc, 0x10, 0x803, 0x5, 0x1, 0x1, 0xf, 0x6}}, {0x10, 0x2, [0x9, 0x800, 0x5, 0xac0, 0x1, 0xd]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ac}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40088c5}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x80d1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x2, 0x8}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048090) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x1d, 0x4, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbd6bb50a24501ffffffff4000000000000000000290780000ad5b0000000011e0907801aa0000000100010000000000fdeeac"], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000183a00fe8000000000000000000000000000bbff0200000000000000000000000000018800907800000000ff0200caa944f93fba87150000000001"], 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r11, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000c0009ae98530000020000002000"/32], 0x0, 0x26}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.933787322s ago: executing program 3 (id=7887): r0 = socket(0x1e, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept$inet6(r0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) accept$inet6(r0, 0x0, 0x0) (async) 1.893088067s ago: executing program 0 (id=7888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40010000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x1, 0x1, 0x526}, 0x58}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r8, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) (async) r9 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1}, 0x4005) (async) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1}, 0x4005) 1.773601825s ago: executing program 3 (id=7889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x8001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={r1, 0x1000, "ddb7a3e59f4b2a0af83fdfc4000b8066fa08ae8aa1dc49ebee982bc15343bbd752d146888ada3449f39fccd4a98f932627d0f40a64454a2dad3f89d972d873cdb265c50e10f0b7ab9cb9ed6769b75576ed80be14f3f9ecd29a7587e50e63eefac05f58b82b3764126e093f317df26e321cc4dfd28e1b47e1df99ae01e684375ef29a3dcbc88778c526819bec7c6d80f1f053b04505ffd7e5c77216bf27414c0f309bd09d0243d0d765c45a60bf6e75d9aa16b4f41bf511ea859a03ff86b5af097f563fdc6f1d976078ebb386bbd5e5910b7d93f491cf287a2e1a6ccc7e74ebd26fafcf0ce260ae119643b7c92be3bded6766c58733856e1ecd92e1301427c3f710857ac9120f41b5b15a6e50b4bff10380f6ecd8f7e8cd8484d8aef8f2c643fc83bbf43a5eebd3a5eacec73fc7cad20d93b93d8e44c970a88ed67d9634d0520695ea821f6b5abdf92d5ddf19db1f1e768747b60243057de55528619e5220febe6fd889e36323a4c7076e5d336c5e1110a60c5b9207aaae65fcbb789cd4126000eaa69865f666ac5a4b02044caa9b35ebf23b771740193349750fa100bb7d897053fd933099d9bce64debf9502e0f55361ee6956d0756763a8ace0cd045b087479166a65294b97e557ef8f82fc7cf09dc4d2558fb81829afe88f7ae46815e882b99cf35e46d7194ac6f323e62b3a8022d928e4d63967b2789ba6611edcc42ba4fd00da405c84db5c8714cb865988466696789b66982cd3f020c9c983a978442826d7eb0ddb92aa87d2304786036370d50b4ed12fbecad9011f5d6d8838b19e6ccfbcee135906145e923f21d9552f63331b478fc270917323d002b29f0819022fc2e2a2d564e6d0f752535ec61aad386f8c61d632bbfad0f93603330b177273564e2ec95e56c3cf4a105c990212b683988d1dfb0fdaa4193599ad4dc76251d69e751b8498808f8c5d00362770bb710f376f01112862985ab575bd4d107b31c091695779fc1a46c69e444c9008ac3b4e3a40b7039346edb9b5eef2df9deb4fe2efb768bf12082fa47c17f23e42ab40250797f4a143be444565b1f86f166a3ffb833c8632b50a666538d4e15c7d15c411c64658402bffbd9383b62754c3e1a478de5c0a76626871a2eb8edc023540f7c164e00017241ace1a4d69790d1f7d4220a7dff83f9f45c9bbe2755ad9f036749074e33c15615bafe7f137c052331bc16ee43b62f410f364bcce3986e7bdeb07393a3f21a02243f1bf2944ed32ddf28eecf0ab4bb58c1179352f9622772f77b4a34c81d1f7bd9afdde48277825fc4f17d6ece7353fe1b58683ac1b779edb8954394f02f07bb8c8e86de1af86401ca2bb6cf634f7af575aace4db3c5b9083d65c52db023f009a66b53d165a0bc66d59d23b4cd4aa3d6309a1a36e661f379a37ae9ea2036eea3313ab643bcd021249fa83d72a377127aad14a02ba44618d62076f936d71a5ed033a61ca1dd5c5ae60c82e388adcb0bd796797a2fb6335ba4130e2423da0b18a3e7a82218b6b09c07a4b398a8af1d35e6dfb3408e1308d6f2849fd74f9d0c4de68f708424798e679b6c462198d75bd7c71e6370c6f15f346abbb5228055cd6d98c3dc764dd98031a81363f2f50122a3f7bb4ee7981698c7336416353e83f7c7b7456fa7a547d03aabfe1161173096ff550b3af4c708759517b2bb24af23476f7b08338aa63aece06a6f48b83fc21a5c5e09fa9dfb034fe5c6ac9db2af9581b2a5b423b961ade7f66a7f649a2a0f9db8d676e260f4d62e30dd913dd6ab86adfaa180722e73d0bb3d6a9fc1e4d13bd88076ac2aff87461f482ddcb09bb363b58999a332c0f7877917208a3d7f10cc4eb91f759f1001e5a75de5a9c16587941e0540457215d81ee32c3958123c209a66fc3925e1efe398d994c7bba7031127f93170ca24099cae9afa3d9684570b1700379d8df6c311728e5538f7ae6386fe5c5e96c2f79bab2966ab728503420840fd339320de0a2f3b99a386b8907941f50394e5a49df3bd2fa76abe088621b33e07f1bb13e02dcffaf5703e124719af4af2ed151009ba07430d99c6d4c9a9676552887eb253006d3ea868bf1ae3dc5b32dd1d819d24ed324ad67dc4ee9a6dbd6451d973bc4775b3c3d559eee5ca9963472f18928654c6e36c588ef5ce0faca51fd9ab16f9e9adef2b4aa9f5ffe355d40143930d0432081a80ab201258927ffe02deaaff43717f74bd40815585506b3033bd58608bc87075a2a10d3282cd7533d137f436db5fa9fc39125dd0b441fd5d5688092e73dc25acb4b9fe346ff81aa7883974df856b4faee3c7701bb390bb2e2576d16b44aa97a16ecd7462bbda3711510a33f5103d2752df840abf81a9271d1459a01b3b42f6c0dfd7a048395038285e2be97498e52b06c6069aee5ddfd5bebf8bee812c9705a75d6190dc8533e0f10b21b90b7881d0ab677877557cf749ff34d2eb4c5a28a0d9ed70517b220dd9de7dd5d4d8d085bc03cb1109e1db24d9f0b42b081fe364ecbd83fe80580047e1cafa478524cd7a1bce59027040b0f3bed0ed8e54b34a848fe7dc0cb5193db72217ef5da29c08a22d0b6a6571cdaf0b42157fb4835f22fdd32d5bb3ab01ba207a7bceec94ce42ebbd47a4d37f9f705979fbe0ccd975a809d379b7767cfd9198133836d7ffb55872636bcbfce6dae50bab7d5c12d217124562d627fbe7fb5933a0877dde96470a54ac7d48cbb31e232161cb2f574a7967261545360bbe62d1bec9c1831192c6fd2a268f9a749f5bef3d625f22909cb499a281daa0c1433072b5eaedbff7297c77f0a97836b39a888ae9bade4d69b87c03132dfa1113eafc59bfff89fc68660c2a6558db7391f6090c9b4ecee112ba7975c342ebab35d01167fcd817f8a6e71bff1034e7b2f33c93a019f62bbce75c962e87825fdbf2c844095a5a2423750d06074af2ce9044cbcffc1a1355f40cdf3fc1f5d578e1e72a5f671cc8a666592840a797b09702b5a191cb5484c2abe77e1a2309cf2a9f32c84eae1cff98d58ce3d35e55f9ffc4616c7ce0e66d147ccae404e7618ce317ec0e3f6d6409ae5b0712168992ba2017a9506d4bc463d445d53e21107bc94f1f55fe35eb99543303248d26d911224f5893dc72a4cf1b204a8c4005a322d7da4898a90e5409e4eb98976f221fe85064a111ddf6c02ee40f6491626d270f911846ab155562c1fa0be9815ec9b92a660c7e1cd26ca680dc13e29c83a14e212538b314d9305944c4adfacb87525ea1ca09f145242ef13dbb97a3e62714b305b8914843d0c2c7800a024d75f3d417ff32ead75347453b53598ff70ec2672fa724df3ee2c0edddd5f8902ac9e4b0c47df9a08aebc80584400d7cd26e790ba594553495830da1d8ad1e7f09300b4c943fd7282c0f7379416cedec262a402d57ee3dd50b797aaa3303fe5c721e67eda7156cf64988b9be4ab0798962df6634135cbf15d4c2aa0a8ec64032c0d9a4810dcdc26d229ef46f8e649535ffdc993530ad8bdac6d4916d0bb80852f84a429878068ea2d62f738e19ff8740fd6bae816882bf7860880d362961b661eefad86dc2d38dd9e3f9c93876c48c2a6334fbc6efce709c183d7fa42a70426025756381cc74b0c0ac5270c96dbca4e73d977f20f4df7b6bca357597e3dc2a7b8fcc639f045c7dee45e3cb5aab815f586c06f2f6e844f944fdc250a0043bdd55f85d1aeccc8783987034ebcc892ca4daa3e4425a740769a4d65afd30025c580523b989781cd97b0727d216adbbcfd9db6765c73ad3179eb31af5547dd39c901061333047784abcce1ad64976c44758f368525e28e27c8d4ede73e821da1256e0e38b200dccc3f3c2ca7654765e1288eb193ff3c78adcf761a0eaeca38b8efc6ac1e2b0f88b29ac4f3b3250715478cc841cdc4f29fa04eaa58fe56fe0f223ade3470f81381322a2d621b0f658fa8d35fb362d1ce8e88b22ac2fe22fb5d2cbf88f4ef05ad4d8121ec830f4af237346908ded657a06a3a34ef9585561c4d251a73d7eacb99e0844441d7da72b36c5c8ec8e0cf23a8aae9574c49a5a392e1ca58d49d9cacfab204e507760d02ef621e14fbff27cfe690df2bf36ac4a6545114dd99fa52a36a0fc3e105be9fa89ef6dbdf4fbec4acd3c7ed56bc34bf794dd2ec5d126515a39de3906027607623a90d02c2c871e239b60ef9c29fab0dac4264cbdd782bd4d0223a5dc1d183aa6796c62e88f284e5c96c6a121f88945d7172c237d91911c248c88066204247113642e0f797a2394021008e6c8ffb7c9b6dc847552d43fa383caf63f66fb332e49a3ba906cad10c3ae449594d3377699ccbb841f3abff6d5daaf2ab6aaf9454a2451bd1a6700f76ce7268b8163ece49dc162bbdc7b9888d72ffef20d32462529cce47bc45a92a5a82c2e2120c7bda4a68ade55977b2adb89e45ffc5e3c6e58bd6493aff2a8d0f07dd491be7a91eb68b4df7559666442743456fdcadebeb26c891c13d201b5341636244a2b8078aadb905f916dcb983883c74fe9d199fcc4b0a71652405f8e1d3d2c43502223324a003957033fccad8224e4391068e773349a2f9ca64d53f0977a67ffa7762b0e80f47337d67bc8baedb2e2d8d5b3a01c291f5b5c85d3fcfc58f8f7e35f5fa0a5161f19c69137caa089dc57c5498852a297198e122ca1cbcd463d9102abac73cdb5daa7166a7ecde74c909be3bb1159889501eced431996a726d836c8a23907ad0c9a3037c7dd4c17d2c2da1cdfb2b42eb22816ed32b634a900b4652659f8f7f7d8d50a98add79e713ddab52a644243c29ede549ce3d8e2cc776009a5cd478880e89e3aec19657bea381ee1d8a969d098591b5d6403e99ff7f130d9af5ca16e2db70bc2ebe0e624a9f2b2c3efc25270c5952783bb955635b727447501d998660ec05e0be0446ee6ecd7f708fbee717073aaabd1684e25211b6d75a0e3a31e5ba7a9e1e594e1b79a2c8f3ca49da0a3b53c6a6aeefc264338bcb5dafdb01553880be07417f03ab398ce23aa5230c19866a21b1d8254566164f627a800f32539257c9d48f35339785ea350038a9326518991e5ef802082cd665d109bec32a95d325111dad9041a6797283942fdc251a99c0cd27eae9465d756c63b67c4ea24c57bb4e67cdef372a70908e8a4382f1d995ff32b061fad533e444c820089f9bff9157b3937ab10200213a2c34c3bb8d083f281c633c38caa34cd7ce2a40507632bcdbd7cf6dcbf20df653880c960d7a169d4b452e0d7a666a440b74f9adff211e31a2d693bb261112dd25f93b029d5fd37d4d5667dc29e903717b6dc54cc9aba68025bdc5e8b46c1b5896490a2cb9eae81dc0d1433fdf867e36ccf43c560efc8211b5f18fac98069f2dc71407c2ae782ae4f4cbc878a6a319942b60c4feda352e5cab1a255758593220ee61b0ce1105b0dac5a17cde49aa08d69f51eb703310a515f09855826579b4b875410f373c1e6497a5c706d365fd71664f02130255c21f14eb32beb443fcc3077dfa2922c0e72766812ce748f0b953e75504679a7e3dc906614cdd21c8a2b202590dc1ee4450b1882aa7d2624ee29b7aa397af915def2d731ff1cf66a8b69f64b9f3ebdc1e5b918597fe593e40f76548866ede6efbad09861ac8a5c79857d05167d9104c4443455a5b80bbed7953af3f949c09c56f61d85b8bd74a16adc040b2250d5be2d76048b015c773ac38e3061ac7a946a5127401cae9419d61ededf8b8d5f8106b5234138e6b1879bb65fd69eaa03b6b67e0480e9bd0faac768cfd9178519ae154b"}, &(0x7f0000001700)=0x1008) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 1.663833844s ago: executing program 0 (id=7890): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) shutdown(r0, 0x1) ppoll(&(0x7f00000000c0)=[{r0, 0xc481}], 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 1.481146928s ago: executing program 3 (id=7891): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000011800e000100636f6e6e6c696d69740000000c00028008000140000000053c0000000c0a01010000000000000000070000000900020073797a31000000000900000073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a00"/224], 0xe0}}, 0x20008844) 1.370093624s ago: executing program 0 (id=7892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028008001a007f00000108001c001900000006001900030000000800030005"], 0x54}}, 0x0) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="9d743574e3c5c37465a7f8a30e633db1b8f7feb5e0efccadb44039e0f991ec30db5b84e8811b76ed9b85", 0x2a}], 0x1, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x120, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b453445ba0fc0d112e09897536410ddaa2216efbb1abd1c15ede6c56fec55103"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ID={0x48, 0x3, "6bb8cc97aa1d06522ad76c028edde773233f6f506617f3a422328d5c98786ad754e311082a71a2bd75a00e03d7a02d9f1cbf47c7499d75494cabaac7ce015491a02dd5ed"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000080) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.363781859s ago: executing program 3 (id=7893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) 1.253309688s ago: executing program 2 (id=7894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000001000000420000004000000006000000", @ANYRES32, @ANYBLOB="97000000be000000000042e194b59aa42b35bafd37a6b37b48c6aff5ab9d97bccf069497ae037412bfaa04b2c982e5a67b7df34e95930000000000000000000000000000e6f825ea0000000000000000000000bfa3ee6a5f79bad6cce7d9c1b6300946221a5f93dafff2a5588fe6c447b58573245c1a40ef6e44ea0cff7384584d2ab2478fbc3aeabae5e166513f606c3b4a72d9ffd035f3814bc36cb19ba99757cd75b1cb363b454f7276a1cbaced037e137e70c24f862c50b7ce1e97b022c32cd316cdfbebd0b24ed5395df37e5c9a045a7fa843519f4915b06fde5469f07e403f43d1115c1dcd7bb1cc7f57f20f78c24ce6c2dd62e9ecdd6e36c30771d5f8e542bb7f7bb6d2b1ebfb19d8afce7313c990671b6016e5ff323818aa43d8c5e10acc1c0633bf021a8549ce17fc1dc5e1627e2c0002c75b0e1efc582c10f4dcb38f552ebc9dcdb6b7b54557037cfed3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r2, 0x1, 0x42, &(0x7f0000000200), 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000) 1.169827026s ago: executing program 1 (id=7897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x9, 0x4]) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@deltaction={0x164, 0x31, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2de5bd62}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d6}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30000}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x77da}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x164}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r14, 0x1, 0x22, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_eeprom={0xc, 0xffffffff, 0x4, 0x39, "504f0ceced2ee5b7beb9f174e937d8a0d439980b413277073bab51769998c6f4fb01a65e46cbb133345ce98df56dfd871b6b79f1eb9047e304"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.150926758s ago: executing program 2 (id=7898): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x6, 0x0, 0xc8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x7, 0xc}, {0xffff, 0xffff}, {0x8, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 1.094099774s ago: executing program 0 (id=7899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x14, 0x0, &(0x7f0000000180)) sendfile(r3, r3, &(0x7f0000000300)=0x4, 0x3890) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000407", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="410033008000e100ffffffffffff08021100000050505050505000000000000000000000640001400001ce0503097e072a01013c040002b3057206030303030303000000"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd706ffd3b472e58fceaa4cee71d00fedbdf2502000000080001000300000008000100000000000800010001000000080001004e32525a84e6ed0e"], 0x44}}, 0x20040000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x40040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="68eeffff0106010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274001400078006000540000000000600054000000000120003006269746d61703a2c6d616300000005000500030000000000"], 0x68}}, 0x0) 1.061557211s ago: executing program 0 (id=7900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="000326bd7000fbdbdf258800000014003300e4000700ffffffffffff305445a68fb90a00060008021100000100000a00060008021100000000000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x4044) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="000326bd7000fbdbdf258800000014003300e4000700ffffffffffff305445a68fb90a00060008021100000100000a00060008021100000000000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x4044) r2 = socket(0x1d, 0x2, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) ioctl$sock_ifreq(r3, 0x8932, &(0x7f0000004f00)={'netdevsim0\x00', @ifru_settings={0x4, 0x2, @sync=&(0x7f0000004f40)={0x8, 0x3, 0x200}}}) setsockopt$PNPIPE_INITSTATE(r2, 0x6a, 0x3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000240)=0xfef, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000240)=0xfef, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) accept4$x25(r2, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x0) (async) r7 = accept4$x25(r2, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x0) recvmmsg(r7, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/69, 0x45}], 0x2, &(0x7f00000004c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/232, 0xe8}, {&(0x7f00000016c0)=""/143, 0x8f}], 0x2, &(0x7f00000017c0)=""/92, 0x5c}, 0x6}, {{&(0x7f0000001840)=@nl, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/210, 0xd2}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000001a00)=""/56, 0x38}, {&(0x7f0000001a40)=""/240, 0xf0}, {&(0x7f0000001b40)=""/30, 0x1e}], 0x5}, 0x7}, {{&(0x7f0000001c00)=@nfc_llcp, 0x80, &(0x7f0000002240)=[{&(0x7f0000001c80)=""/188, 0xbc}, {&(0x7f0000001d40)=""/146, 0x92}, {&(0x7f0000001e00)=""/14, 0xe}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/211, 0xd3}, {&(0x7f0000001fc0)=""/109, 0x6d}, {&(0x7f0000002040)=""/24, 0x18}, {&(0x7f0000002080)=""/35, 0x23}, {&(0x7f00000020c0)=""/100, 0x64}, {&(0x7f0000002140)=""/202, 0xca}], 0xa, &(0x7f0000002300)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1, &(0x7f0000004340)=""/255, 0xff}, 0xe635}, {{&(0x7f0000004440)=@alg, 0x80, &(0x7f00000048c0)=[{&(0x7f00000044c0)=""/209, 0xd1}, {&(0x7f00000045c0)=""/94, 0x5e}, {&(0x7f0000004640)=""/3, 0x3}, {&(0x7f0000004680)=""/212, 0xd4}, {&(0x7f0000004780)=""/124, 0x7c}, {&(0x7f0000004800)=""/127, 0x7f}, {&(0x7f0000004880)=""/33, 0x21}], 0x7, &(0x7f0000004940)=""/147, 0x93}, 0x9}], 0x6, 0x0, &(0x7f0000001500)) (async) recvmmsg(r7, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/69, 0x45}], 0x2, &(0x7f00000004c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/232, 0xe8}, {&(0x7f00000016c0)=""/143, 0x8f}], 0x2, &(0x7f00000017c0)=""/92, 0x5c}, 0x6}, {{&(0x7f0000001840)=@nl, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)=""/210, 0xd2}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000001a00)=""/56, 0x38}, {&(0x7f0000001a40)=""/240, 0xf0}, {&(0x7f0000001b40)=""/30, 0x1e}], 0x5}, 0x7}, {{&(0x7f0000001c00)=@nfc_llcp, 0x80, &(0x7f0000002240)=[{&(0x7f0000001c80)=""/188, 0xbc}, {&(0x7f0000001d40)=""/146, 0x92}, {&(0x7f0000001e00)=""/14, 0xe}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/211, 0xd3}, {&(0x7f0000001fc0)=""/109, 0x6d}, {&(0x7f0000002040)=""/24, 0x18}, {&(0x7f0000002080)=""/35, 0x23}, {&(0x7f00000020c0)=""/100, 0x64}, {&(0x7f0000002140)=""/202, 0xca}], 0xa, &(0x7f0000002300)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1, &(0x7f0000004340)=""/255, 0xff}, 0xe635}, {{&(0x7f0000004440)=@alg, 0x80, &(0x7f00000048c0)=[{&(0x7f00000044c0)=""/209, 0xd1}, {&(0x7f00000045c0)=""/94, 0x5e}, {&(0x7f0000004640)=""/3, 0x3}, {&(0x7f0000004680)=""/212, 0xd4}, {&(0x7f0000004780)=""/124, 0x7c}, {&(0x7f0000004800)=""/127, 0x7f}, {&(0x7f0000004880)=""/33, 0x21}], 0x7, &(0x7f0000004940)=""/147, 0x93}, 0x9}], 0x6, 0x0, &(0x7f0000001500)) getuid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000300)={0x2, 0xffff7fffffffffff, 0x1000000000008000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="cc0000002000010004000000fbdbdf25c4af48b58d690fa6d048afbead82c205f6e82f5e87cce2fcabf5fee5b2a667fbe27edcf075bc55f61addd1b8b7f3c4356a7cf2ebc7d6c5b66ac6f5ab413f5b5f8603e947d5d84e445c8d148d37fd2649b8b01913a68db91a7ffeffe7d61eea91f5fbb4cfd2e412fc9158e886cffaa6ec01d7cf27026fb2e3926d8a60250004534f0165afc53f6bb3e6f6884ae8fc0033adda73c80757350548477e264d73849cc974c810c0947ec773fa61f69b39aa22798c998905236b6570343849"], 0xcc}], 0x1, 0x0, 0x0, 0x1}, 0x400c010) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000004ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004e80)={&(0x7f0000004b80)={0x2fc, r10, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x144, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "7666f00f48d747c9f57872b15c3c45707746ed8e9b6053ff627e2fe3c952114212dc0aa44617002ab59c1ae2b53e2c4086f34d06a44ad2ce948a18391c0dc4df9528c576ac744a8138b2d6638c6f149082327ef2bac02a2d2df77ad9de6ff25ba0b6ddcbf6f858402e7d51758fbd89adacc7739db8480586a57369f05d1279a016bae7262cf8f862ae9ce3228f623229b3fa458d8ca0cd774eda154e9b8f145f920965a4711fd6e3b1"}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "91c0c3e051d65ddc4c667e876330261c288bc3fe724ae159d37feb7b2c04bae9e96cb5dae529d80011ef518449c29db62d0c800d177f357655319eb465cd2e824226ef2e5d12031b0a3a2759985c40b4b428e21b87acb7e91880466cc4a66a823ff1aa9add1929e450f6785d1360f48f625e542fa748e295d3"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "9428ad613f557124fd307ec07549d11adc06946daaf2b009b0813cac814fb6e14b366e24d1f454227bdd4e51b5156f4ddbb170e39ad6927e73c3550d3eb7c04ffad301638c3a1103e3925d30289a33aa6f8845079e174905db42385c26252a19614914fcc0cc5b806575c2e0daf393d4e67f18303b2e82fb9a08bcd353ca15a085b78a928a528cfe0f4a32ea6b670fdab0b3b491fcbfaceab01968f0981dbaf0328a0ea37cf7765c6cc838c06e29464d7bae7d0b9259d82baee719238e50c8a29825c8bb5b9838a1a3bda110bf24533d82d641e98a3e99"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "fce7ec589dc577976d82af5372147414f6ddeed863202cf93141abe070a814fe9381ea87299d60d914524835847ce9cbd8150d7856083f3f4a8c8d63d0b21b69f7f73e1d9cff81b234102effc0351407302d1f246551dfca0b68bd67af10da5d86cc7a68a0df0d4c4a6833ef0e286bd039c95a3fd17baad2e580d315b51c2f9a7c84cdfcf886535322933a2783ef1c6d115e306bbb391b211025"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x40090}, 0x2000c014) 1.048529142s ago: executing program 1 (id=7901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r0, 0x100) listen(r0, 0x401) r2 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'batadv_slave_1\x00', {}, 0x5}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 1.025420461s ago: executing program 2 (id=7903): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="30e0ffff3f0007012bbd7000fedbdf25037c00000400c28014000180100010800c000b00060000100000000004000800"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4812161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20000840) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000d80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e0010100", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000140) r9 = socket(0x10, 0x2, 0x0) bind$bt_sco(r8, &(0x7f0000000040)={0x1f, @none}, 0x8) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0xfffffffffffffe77, &(0x7f0000000540)={0x0, 0x5d}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r9], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001a0001000000000000000000ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000009700000000000000000000aa000000003c000000e0000001000000000000000000000000000000000000ac5a000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020000000000000000"], 0xf0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0fb71da4c50bd72b9015e066e35bf65", @ANYRES16=r11, @ANYBLOB="00022cbd7000fcdbdf250c800000080005205100000008000500ffff0000e4cf9e2cb542089dc7387e8d47d25a134f331da1c2c944a8e04e6b0e43a4dc002fda886649d25ad66778407983d0c3e66e4fa6"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611083000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44000000000101040000000000000000020001000400018004000280080007400000000020000d8014000380060002004e220000060001000000000008000100e0000002"], 0x44}}, 0x0) sendto$packet(r1, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c", 0x2a, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 877.756293ms ago: executing program 1 (id=7904): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4048011}, 0x2400c0d4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', r1, 0x7, 0x7, 0xffffffff, 0x37b, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x6, [{@multicast1, 0x6}, {@private=0xa010100, 0x7}, {@remote, 0x10000}, {@private=0xa010101, 0x101}]}, @timestamp={0x44, 0x14, 0x68, 0x0, 0x8, [0xfffffff4, 0x10001, 0x81, 0x0]}, @generic={0x89, 0x11, "a354a72d084a8f6650d2d12d2d1c00"}, @ssrr={0x89, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xec, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070010000200000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 876.882855ms ago: executing program 0 (id=7905): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000002f40)=""/4023, 0xfb7}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000340)=""/147, 0x93}], 0x7}}], 0x1, 0x40010080, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) socket$unix(0x1, 0x5, 0x0) 850.197986ms ago: executing program 2 (id=7906): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400900}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=@expire={0x1a0, 0x18, 0x2, 0x70bd2d, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x31}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x1ff, 0x4e23, 0x3, 0x2, 0x80, 0x0, 0x3b, r6, r7}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0xff}, @in=@multicast1, {0x2, 0x7, 0xf90, 0x3, 0x8100000, 0x2, 0x1800000, 0x2}, {0x74, 0xd916, 0xf98, 0x9}, {0x7, 0x1, 0x9}, 0x70bd2b, 0x0, 0xa, 0x0, 0xac, 0x90}, 0x81}, [@lastused={0xc, 0xf, 0x4a}, @migrate={0x9c, 0x11, [{@in6=@empty, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@local, 0x33, 0x1, 0x0, 0x3502, 0xa, 0x8}, {@in6=@mcast2, @in6=@private2, @in=@private=0xa010101, @in=@broadcast, 0x2b, 0x3, 0x0, 0x3501, 0x2, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', r3, 0x2f, 0x7, 0x28, 0x5c5, 0x1b, @mcast2, @local, 0x10, 0x80, 0x3, 0x7f}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x8000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r10, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r10, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x0, 0x0, 0x4, 0x2}}, @TCA_ACT_BPF_FD={0x8, 0x5, r15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 617.879515ms ago: executing program 4 (id=7908): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) writev(r0, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) 603.41408ms ago: executing program 4 (id=7909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001800)=[{&(0x7f0000000000)="c5", 0x1}, {&(0x7f00000006c0)="3ebb5b716bf2bd7aba7ee57c476a38c9985cecd88309f5674989bab3a82bce6c282460600466fb9b174dbc120b866cbe0bfd5b6b7e95bcb40eedbefbd05f26cd9a58104ff8fcc538155dda0b6dae1a0269fd138298c81673a734372e97d4b5000457e0bcee29695e988e55ca2bb7663796b1df767d398e3a843b5a7d6b0c3877e5d8e662124338fb3ca3ac229b73a426c81b5564885c5f60b4f4d0dd68f9ed409b56e134565cb617e9fc58884774897f0882ada187234078d84fb2a884cb5ac8173f92996193bae2f4c104e6152c15a7e4046c7508f80177483ba1b7ac6bb7acb4c40c0817154c79965f8d47390d07e8a9bb9b8121c6f283ec438bff7eb3b06483cf71fe712c4a7eb6417f5f322f6d86b83214d86109292b2c5f339509164df9749251b3db87b333967527c8405cc14840a3db4f977906cc684830a92c49342bee8444769de8aa52b5029bd4ac9bb98325f77313d2724948facc7dc43c42bf689efe76de608153440642fcbda7e500b720e5db6919e69ab11fcf41f39614ffec309e4e861f6ae44c44493786a5bff01203a4374c0d7205fb48409c2e6d3528d0dc7f60f8e2189966991965973682f1e1dafcf84241a7774350b24def2590feb5af57518d283c9bd7b783e50b7b1e2755ea44467642c57120cd2ef11b939cd114be574ff29f62677f29d90c28179342abbbbe3bcf7c288f200a4ba2fe45072e8542722c9083f58c173499f0bdf3005c113cd61fea69d62c582a83840df4b5791907756d78b7135ca9623b50c576538a803a60d8ec7998d019406d9bbc45a4dfd2aa78c50b18c044543ea0c2d1a4cb1d293da2556cf6c8428725ad0461a8de00f83e8169de0590ec03c7df48c52f750c58c48bd7f9e755e89ccec1f5a5e9765229dc8046dfcf1581b2ffdce24d7a02d20ae98c09cd1cdb1ef33a034408e6cc8c8a6b13f43048d3aa1b59224b09dd873791ceef01f9c0f88c409bd148fd6ceb83f538bab8e76caa060fd2a57c79a78cc895668ecdcfc6b6771f1212005117b3950c2ed1a759ba7bc0adc47a508c8f38c3993014bbd74efec31b73f9b6742204d3de019df3922b3340781d63d3e973ce873707ef14b3b3c46d6566e64275894ec97350cf70817d24b920192e69993a095d5d1d73ea7570b98ba5e403f3fc312d003f444669ef02c5116779ceb4d4c94c8d898d45fae6d10b443097caa04184552fa1f9afa0c6984046f8c8a40d36901565b92b5259cae82fbb1863fa7551dc7c6e80ea163eb2809b887f11f58a3602aabf92ccb7d0de59d6e2e9fb2f860e97af2dc18f2e02a7b5c72ed3f6d5d8f0a39f4fb281de26c6a2921ca5e7d7e7874b9cefd69044cd627a133d9382988fefe36ca3a4db1324d2cd075c25df1499138da678f933b515ec39ab02bc684a99a51007c599b1651db5cbbf7709ee60a9bec1b7089f19900c9defe7655d34d990ecf713e5addafae03439a377902a6b53f97a7184368f597d3cf04f9b25e84cf2bd94b0a3b3b89646b346ef45864f0b4afd360b1e1bb56c6589d8d838b47ef02b0b8f74d8bbfd7f15e61891e61cb21ccdfadbf8d1cffcb9d57edc5e2378ca88889442e1666c7718990a9dc499707c4db201ec092f6c2f98cb10de44d81d54b3c0eba566fca8e1c302b84a51b5c9ecadb2cfdbe17c690b92c3e89f9d2a208abe012ad9b5d96b64e49bf86ff74e5381fa3780cfa4988d33ebbd2b578e96e384309d16fc58f5b461673db5b863b00b54783d78663595802521f3f4e74eb95c01c261141560b062853d8231c8579f3cbfad527f729d9230aca595658976dad12c396a8645f949d68f1b89cd967c28002e7dd7fdd87b081e6893e14cdf40b34935a7e4fa854206ebc55d2943f3686eae38e99e09712abdd2855fef002f069d0901a097da35faa54e307044b4889cf4acae35654d106352da59f0124119580a0380860540c96330d9bf106d89424ac3895f0cfd11e20c54b63ce89a162e56e5b39fe6e6ed0b49674ddf190d3cca69e9bd2048aff118a5a541ef4ab3057d5cb82e97a1817c1b686b09af067995f4e3cdc2eb2bff85800956d21a04aa3339b5f017f88e31c796345dc3e08db5a55a12a7f9def98279936bd8dfcaa019bd5040e2c201deaf3f2225c86237f5ff4ccaca38b58c88d1f9c443223f9188e438f9f62b9512979df51fc150140fd26c37f8a51bc1a813c0b62334cfda1b5d7d04e1d30faa98bd6cba697c1fe3328d65af533c65925ecfba72a1fe3b3aa1da4962eff525d7f8d18faf1137c36e38a214babfa60f8b6aaa5e59923e99bedf3d0e339cedf929863f225d61f6102dd539254be590e9356fd38080b14d9ac0333c4d5ed8de6fabd651c992c286c00c4d829ce00574dd35beeae31df92a651cba45a3e614031e68ae4c533e65f161a3c10531cc9763796a4b659b5c75ed3767c3858455f3175b984a73c04267e675ceebb40f47f8d2266c64ab901ed1c5a18c5bac9e94e9332ffbac9ee427e08f13baa3cd58640e050acf6fb3ae8a219e8fd4f5fade9fe9f4ebc3738db2aaae9eaf86232c8053304749ac9049186d99b74f83ffccfec3c68e899ff2462abd0e18e931425813356791de6423d635d3f0fffc440525814dfd0d986754c0e3d0d35161c177240c12ba8e32e4844b50014ca4686f13cd079d319a783cc4d430a352db1529d9690aa4b0c4ed27a65d3cfbd8691479c0b685048b98da1edc53ce05c2b8395f1d5c8040c7478ca795745b3abc7f59456b3c83cbe7a27dded556c418179e78968cfefa2b8309afcc9e139a63a1b8cbba93d3464a24a167f9f151a564c0a6c7f677310ec69fb6a1bba44885a24ebb9db2b785ca3e9ede86c5524b989b68381281a669e868fed3f050445b90fdcc86d0020556d2d6c1c634a270f030c9f28ca83eda6e8fd282b7b7d6ee721332b40570c98bce60ba08205f413ac211aea2f77b2f11b57158d56e87679974c0bd28e7f8b3d25c1663764953e043d21657f8b862333a04714c1736c224ef25b9a713f591f2495b5d0508e524447c22406fc29db877417f0500434c5b2150858b53d822b63086566deb78bf6f86e51318a677f84d46062666d940f12a38ee97c66f04fef2db3a67bf6f35ec1e857924236c717fed91e780f74372f72de78934af5656b15d58d39b3196197c32360bc070fb59b2e6a0f3b81f2bdb0ed6d6cd71d157b25a66fa33c48fe7a40e62770c6dda47290ec7ea355366d0b27b1345b0356892c6ce54ccc74a50fd6b1c3c9e9c989af5ee2e299207362269393a3180070b4da5b72af46bc45fc383eade4f014aaeb57a192ad45c7d9a16588d2e8cc3eccae1e2744384d7db", 0x941}, {&(0x7f00000016c0)="681b0ab8b588", 0x6}, {&(0x7f00000017c0)="9046", 0x2}], 0x4, 0xa) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000680)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2b, 0x80801, 0x5) ioctl$sock_TIOCINQ(r4, 0x8905, &(0x7f0000000040)) r5 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000027c0)={{0xffffffffffffffff, 0x0, 0x24000, 0x0, 0x8000, 0x0, 0x0}, 0x1, &(0x7f00000026c0)=[{0x2, 0x6, 0x0, &(0x7f0000000140)="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", 0x4aa, 0x18}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ee, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) 543.464348ms ago: executing program 1 (id=7910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x41, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @val={0x0, 0x1, @random="ce"}, @void, @void, @void, @void, @val={0x5, 0x3, {0x9, 0x7e, 0x7}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0xb3, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}}, 0x20040000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x40040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1f, 0xa, 0x10, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r5, &(0x7f0000000340)=@name, &(0x7f0000000440)=0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x7, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="68eeffff0106010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274001400078006000540000000000600054000000000120003006269746d61703a2c6d616300000005000500030000000000"], 0x68}}, 0x0) 449.85843ms ago: executing program 3 (id=7911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="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", @ANYRES8=r0], 0xa88e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) r3 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x4}, 0x8) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) 430.934397ms ago: executing program 3 (id=7912): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2, 0x100, 0x80000001, 0x8, 0xfffffffd, 0x0, 0x401}}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x6, 0x100}, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r5, 0x8}, &(0x7f0000000080)=0x8) 360.471463ms ago: executing program 1 (id=7913): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="a69b71fa5ac02ac5f856d14a1b91043166c94870aec738", 0x17}, {&(0x7f0000000140)="917152addf2097e67c10db8f25a83ed56c061621c18a1c34bcd596c5fc008b79a330108c61c012411aab36ceac4d0b7b35ce4dd9224b7ef64e367205f823d79e6fe70db501606346ddfc13c186fec9606181fe3d3a01342ef7638277b8d24b74036c8e50bc7d8222f534a1d2b2b8b5beba1c307c89249ad6b327", 0x7a}, {&(0x7f0000000300)="e7d5deb7a11229f04f29ef2d8b8ef829099f90d1994342615989ffe94be2aff049dc45e771df19d554de962c285400ebfa", 0x31}, {&(0x7f0000000340)="2ebb3a9324f2b7ec50c9550a5f33f47f45ee73d1662b857f045c123f8f836ab9a5730f0b196940cd793104ba25b2e4271e9333429301cb40b8c317e98d6138ee5a407ccfbf1504c6cda6080965ae51e37fc1a1a249710784f86d4f69a9e920550f34ac6eb4777e217c612e71cec1c9fbf0f8af7f5b10dcae8719c905eeca7a0e46b44703eec0106de1c71f53a10bc158344f959fae9f5a7cde169457a79453efbe3cd24ef0289f457f46f94df3328acaa09aecd821d13ffabbaf6192fa9c38a4", 0xc0}], 0x4, &(0x7f0000000440)=[{0xa8, 0x111, 0x8, "043ed72a1450cdda09e9db781437102d6deabef4ccf16d1489194e1f51d8262968ee3c7160df32473da8fc4191bae1e90ff65a4b5beb00ec2d146fc3ddea7d90c8f9d4aa7b51a670cca706a4d2b33d6379631b4b5757ecef61ad27841d0fdbbe129a8a247dd27b71ede441446d0e5f75c11a25def064a4c91b06df01a6083fad5a3ddec35a3537ab0d89275cf742e0dd19b6379b"}, {0x10, 0x10b, 0x80}, {0xf8, 0x3a, 0xff, "d81e264d92cfdcfcb4bfddff1b7c6e8e2a640fb0f3ef9cb4b1fc5faa8a320bc7a2f2e54cf7dd0b74c654c70678e8ca2ba54e64922126c4416b1bf3e5d7a4af210e6ba18bc89e91e0c15b77f5568d149180ac621e743f69b4a41b432075c65166256c6e060f3a0c2403379c4bd1571f4e7e0d5be7cbdcd1ccaace51d05a671661e1d7d7f089c96f3baf9ae06776350c7eb84a8c2d5e1262e99b1868820f2349109590a2324e831504270576404680cf380d049a124230042e7447a616df8f38b57d46187b4fe334ce66df2b0470d63024f35d583bbaa88b04f8c6b8835f472e330291021d4e1b6b9a"}, {0x18, 0x3a, 0x3, "a2"}, {0x70, 0x12a, 0x8, "10de8847f93d9b3f78aad0015fec9243d831baee7030f652deca5b3532a514f270e9e149dc3080bb75ae51ffb1d0ab58939ddb5ccc16699d390dfce1387b0ff74eb27635f9eed9cf6a64f821115080396355c38f899041b788d20415"}, {0x48, 0x110, 0x8935, "e3a81986780d7ac7686f5bbaa3e63ca54e3536e3d6b4f03abb9a0e9ef8bf796fa0e65c5a2eca097a53690a2888bbb1a671"}], 0x280}}, {{&(0x7f00000006c0)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)="25ae2a55f5e07f2a22f8e4701d3208fd0025d11fe15c30302daf898ea37081698c5594ad982669ad6d18c2ded547673115f4e7eff8b3e697ce0b0c1d7f22cb1722c6e6eba45e26d1699eada4ef651c76ede3537dfa72c077b9f353e952106faa69acc5ccb80d2c5deb156e6d4b0804f3", 0x70}, {&(0x7f00000007c0)="d4d4bf6de4a95ddb3ae5c14cadc8a5a411672cc8ffd6aef6f3b0887149d4760dc5b4758d6b8c60f2050783c6f137a4c51efd43d3f392e1f93077cdcc3231c043486d40d30441923f936a378e1c3436371a5b5194353cab4a0c6bc40557d3dd35af81a95e246f79db844868d516fffd062991de971e1fc2f4c8fcba93a80b342b669f7e123fbb0272684269ba68cfb7ce38b0cbc1db7aa59f74a09734e27d4ab161f140b1d74a7077f1cb04fde4cfcccfa070b1b797468e90616593f94ad9c7052e8d009c9fb9ecd00d6b02a67994ff8fff587bc209e0dfa19cc0b1704e2c", 0xde}, {&(0x7f00000008c0)="61e5a5a7a0a2acb23e02a74d7b1b589b2411514faf6e709a02cd5f52de3713a4f8bd7e038d1009ccc587c2ad7e5b91a58c571fb512dd5f6d3d0210671962a4926b918fc1d9c760f796c45a0a45fa8590237e08fca166d6446118614f3830e1605d75eda4f4f1cd8c7350ff8720a1f0399b4b0a2e3973385385db2170661167b8d6d0ffe534ed7bf564ff61e0b4a0f39e4dbbb75b05a8f4ea7c961a4c4bf8ebdff9fc43903f301374025f0f573795c56c1d28501654e95cf8036f023ceeedb37642b3fca483932b18811b5f9d51d90455472de5ff0d80544da5bb3fb87fdd6bc85fea21577ea2e9bf2b6f0e4d", 0xec}, {&(0x7f00000009c0)="8dea3fa60d9075cc1c539468aaa3b16c3a4b6da40183e91132c0682296fd567de3cce00fc7a08412cae446ffa7724d3a39f755417efe39fd130a8337eba873e4accb626aeb1b50eede142db9d8a1664b8a5973efeec01ffadf8f0819332e004e48f19262f960866b505db23a48ed98787f02e4f5c1eff4502854d0c3cbfcfefd9a6d8ad3d8b9635f199478435520ff76c5f90830b48c15ae1d15d188e9150a23cfe59ecfd6932be12c7ed6483657c165a714db2643bbf8adfc6d438752f01016e822cdefd57139608b42cf9241177ade32acf12c92a8937cc630918c367326080fc7d7e93850cd9f97dd8672337a8688", 0xf0}], 0x4, &(0x7f0000001540)=[{0x1010, 0x103, 0x10, "07fda7f708401a736be579bf171a81e04a900bfc7e610f02dd0f860dfc386172e91c050d491ea7235db2caf54a9fe1aeb86e237db859381775decee12bce7442edabebaeec870c8f9a62a703ce10b3aea172ac680124d8ec5e5ae1bba64dd73066a3061b7cd0cd61bbbb910057465b1cecaf2d9739029b0c38aa5204ffb66345339c915334a42f608f53f6b323a20210a2f558ec8d61e9c23025a15725c2b0b2a5031c18bd4391eb82ec202539a24bb99d8e607560a99df42277f0d9e08e31dc5289251cd7c7a9913c0f15cf93c083d271745e0f71e4c73ec6d4db4156b3e307b4797eb7206606e1e702a15101f248dadedee0c7bc1d26cbc304963f6727d36d25d641b50157fd6ed28233d0c71d36a16500faea8747712ee86e4488174eaf474c68b85c12d24b6cfbe07f884aeb2515e82ccf02b2cdb2d23cdfcd29929b78e603009c097dc5d98d641b990e9aabace00b4d950d066b2af64ec6d1b55183f4a33b8cb152759299a509b1ee4a654aff446bb211aa1d00b9df937c23b397549dd8ffb8903d5fd986aed61cf152ab72039e7f2bf1d2d132de2d7499d62e9fcc15e7bc6e57c3d7a9b1d7a145525a30c629fb3cfe760c067d628ccb12f43a5867a299028f21c26ec02f09447f292b21cd26a95c546e1addc7bcfaba91dfd89a8fbe806ddffe31e82a4826585b4c1e9776b259ccad81ae6cac7bb4fefcd32a3b17fd6baac37caf9d504907f742dadf75bfe839153ab167f9bc4fab6b40c5ba22b72e4d8a88ceeabff881d2b92a3dd6c92ec98e7af959e5eebb66c8332c720bbfbd112e24af03b93b029a52691966405d0c22016c02a6ee5ef7addf291a966b4c4f31b3deb2449e4e21de95dbc786e9d0d2633e34478830b4859577b48fbeeb82c7bce86070bf5ac9c42417915d726d53790355462236489698f1fc8ca5fe1d2120b5f14a6bd9de59dec2788f1b9ca53e537ab65a68d658e7b0950f318201f8a808f78f9f431af2dcd4df1e485c124c80b3848e4930265bc409cd68b4978429e185135a45eda7a2bf0d274b4db145037a9d9f6175c6cb8b92d1ed784bf9b272e04729585ce9c63ff1fe98fea01f210dcd86d19af90a38dd583b456b7ee71cbb6da69b3ac23b56892fa34e8cba800f587ba58a9fc1e8973fce863747a6946c938aac367d07f8b1794bf49c4dcad57e74fd0798f00c0477c0d761cd5e560058cd67307a47d8aeb8a8455c6680615cea5d8983f197b4d89ccbe5bf4fc603204f9d377f1aafa6eca39b0300f29058341808d6a8dca415307372277c9660f65f870409cc5f0755e22cb40d7025551725b398c9cd01c03edf78e04984d4103e61d1ed2833f7b6420cbb4cea81559ec020cd6643a74c6242b1ed37f396b4729a6b10aaa11e8b8347d96d86344bb8a384a5e9309ce524928537c079d49d3a9ce424dfe4d08f855ccfcd89a33444a98ebd9d54e23809436556d2f6cdbd548b631095597a756f20d42a1bcca79d884489eba8123e88944ff88f30553451ec9d091d9a58aae83a26f77fbf1a806a16ad8fa2f3b2030a3c06032b89a71e25c7a99b4a9effb98bfa7242b489b415112068c5a131dfcd8c506a90818a16b1659507d1c026170d15b7d07b1f82c35cc4679209f141f719cb010e94a900d2925669c925bdca3fd8c6e8d7015419e9ae74c2ce00795d9fe4112bcecc09fcd18aabbb4f4f70ae9100e8fb81df73837ec602281ab0d8c44aa1c08c722bfecb3c70d27ff90a2e7f0b502eff90acd3020cb7fb17ae46d00dd96423a574d2a67d22041e2648444983c30a5051d66efd5f151a589615cab781c91e374b46dfc4a5257153ca54db11be96fceb3099e3a871c5d3a19c72d3c023e2da2ef9fe6a04507691b16bf0f9216fd2f4c39cee95e637d215427837eaba629dd348889b9cbd4a4bad52578ff8895565934b339562edf1c8991cbec64aba6caccd405c956c4ced660d50568ce7adbdec4c74288a2dcbd8144554b321c151d07f93b39f579264b7c291e3fbaf399d5dd581c6027e158d5a791e86f3b794fb3b3e3ddf5ed9e306cbd9c00f42212500d12a07158c73a67ac1a416e7113bb1ab5a0b1a84d99235b80f4e648652ee1ed128618221db3c1918a1663f71c410523e4788e2f90ba4a5dc467434339277a5a55711e23082acc9b5d2312f75437c606afd1b8cd75112154e76405f9e2da7542b896ff2512e0189eb80f110f3a96915fbde25d9a43793dc9596a8b869560f0d3fd0ce84f8b97d454372d6abdc690e759f0a9f6edae72f73cca6b0a7b27d141c0f99476e62cde46b6947ee7ff1fce54d96dd389e9c8e99ec35e3be86eda822d6df13e6213c6030bf871994049595e07790c0fb75e1c4201a5d210d6532f2bd3f5caa7b68cdd997d7517e382ca8908b522c5060dfbecc06a99f34799fe6308e0132faf4ca3852a08d6dbae1ebe17807c356e09fb7577f1cf431907309acefe3fcd7c36721d25554b2b87b6c13cb185be05fc8412d832f6fe519ea34bca93aeace1d7e1f4ecad00cf8bec6f4e9f70293f002453c230eff4eb6c6865dddeac592ec0efbfd038858318598cc3c4287b8de7f19762b307ec35aff5427f0c390ecb49894072e54d934e366dea14ea4d0189cdf1a1934f1296c8c24c36677f5d125ad57f86214f0c0b0562dd3e2c0093ec847cc9ed8b77fb9a9aca9118fb9424a45d7f60c2dda23cf3672425dfbb66022607ce2fac2ee141b3bca3510feaa466f868e01e762b5bf12cf5a065130364fde69dd78a1f97dc3f0697555219c2b8a83388915a792e4ab13532ff39a67ce955eac7a486ddec73427cdbeed7bd4c831416d5fb581432d13dfe2ace7cd45d6c8bdceb135cd57561ac02ae7b86a7a0d4f0e7a52f93d344a07300245fc409209bbb060cee5095cbbfeaca3b312c49887042b192794c12c4c52af81a6c9786a9d45ee26763e46191682dd1b8ee995e730c39476d7afa77bf84d0bbadc72a1bb676188a13ff3df1de9275f7ddac0ad53d5823747bd42372cfc6574d63642f7f595ec384d85175414efec42d2c5a5a313415e37e61d73560dcb09aebb329829039facebb35ad3d532067f5a621207d905b420b6316dbcb3c846e7ce99810ea8e7a987af7efb2d0c87d18fa7414326ac02d8e9ccf286ec12e968e091d5d4de9d0f1c1d8769851ff2e031813aad3f65d759eebb3e80825a5c54000495588d46060fd85dc722e5ef757db80ed800fc0a09daaa08ba7a0d0ddf49bf24f458013937a2a6b6e099cd7e499e1409d436abe431b932efeb3e6200e0fe26f4514d3121cda583687c33dc7e7461e3a3d1cc76d75aeb744a34d2234e02ae3ae9d731cd466401fafcdcef563678e9a97c7d7aa0f65dd678119b736f5c71fe6bb4f76b769987a23ccd84ca37bf87744f0a64c38cfcc854d280b1cb3993135218774573575e71e055c917156536ea823e4acd08bb87c01ac73099a04befdb0486e0b33ec8f1a827a98439531187d5e8ba70535bbd44741fdc7bac5dd6f4902077913ffd6e16096d0b17b114bf24c5ca6821893e7ee56d565266635f60924ccd0400b7adef9d608eb9101cba627d1d4a681c40608d9e45b15548e35624cc522a3ccade32064d3b3f29887297f3af075d0cb08d69ae23d6632d2aee69af74112e4a285c0329464cff4f909b6687d0dfa8334dc10f3bacf595d7c5d5dbe95dc2a275c3867eb4431c31b33118e607f0a558c9fb13bfea38c1725008772ee9946bc3f0d97ec377e088669128716a5879b82dfd1858ab7e3a320ea668e6ac5ff9ecd4c6ff8c0a8d0467669ac1a7270980ad2ad5f593d35dec45a2a3ea3feec40db1e3cf4905aa7b5d42277b4fd2d8932a0cc42ce55d8eff76447eaae1ccf69549b4d14d2e478a9db53a0a0b15c931752b08800dba6405a2122a4acb42fdce88163290d317ddbcd6a8e90d023d1abe3335c4534c5e62cab4c9a215af704289761545633137b5c16f3685ee3805c7df83305323bae30c2159b3501428f67bf98305986f3e9e8562484c33f380b5937488a15542af85d59c6801a03abb8d101ec0e324e0adc8a64f5641bccef39fe7bacb5eda7ab04dc38288bd1ec7396dac25f3e739657cbd5414f921db682831a244ad333280ccc50f2aa7a89abb557c66d46b3978df214e6589cc4ce0b577229bc22bd35bd07798cb02e2e7f0dbb0cf93ca750c2fe813ad27611ac2ee3f9e80da96253df65a5f4dc4a5a0d833ba3817c24134042978782451d3288618814b2fab04b61dbd03dcb2f2d387660a0c8bbde003c5887e20f8532ebc6314f28014e3586305729870daa120984396c2b03e9cde65ae0e394a33009d2bbb5df04c9ae8c354114bfd00d485927306e455626ae5629ed31451cbb5f9e17b3862205c2bda0b3b1d48cf0191c8dc0448b5a2855ae414f306d56f59426632c43ac98f594bd748739bdd2e8dfced2934ed9bf31217d7f50b871d8917458e7fcad0c4fd4850ac059fd5fa4446150a270338d0840992169a51b9be617da828c83971f4a7e94bf1e2eda44ae2ab2de35ea036c2e2b87b4cfd8520ed75d093fd168046ff18a30cc9b59aba1b65f9e4266c1199dc343f4815aec32a9000e734de103b86293ec4e2aa821bbbed312790d1cfd00e5a94bee931dc0afda3f1840369bc7fd8eecca4cd32e4ea8472b353168b278ba9a8b6966a53d11c70b75568badf4b9bf586be3eff10747190bad26630918f9ca1ffdc9b2d66df599dc51d4b2e1b102f2840ee60773317d8c9dc945e8519ff848d62adec9f28a9935150d9a3196e84b2ad31c3a5c274a24729ca29bcb8a531e78ddcdf3fca8d60be88e14160c4b2af986a738a2c18deb6793bdb4143fb52afd97d20d8263ecca588a46d6983e49b6c6f4f6bc305be268a23f30e0110027dc5313a112f63775c0fa3d1c92b8f74d332b4e2f390d5576207c9e3fb68261d56809f3e64c65211b8eea881f480e2b6383b663275445c70eb595bf65d10ccac4308b8e421e49441497fed5533cc5376f55b9c1cee100ce085f407de5974691ccf6c9f66c9ca7d7360fc5af6b35bc6003dec414e97e8551645eaf75a6612b5b57f85ec732841f756c252a975ba324b8a8165b722b98028cad96a96775bc9fafd20ef9796334c7a1d5836dc6147fd8cb1b4d5639980e2c1cff78baf05eac1b4443906c84970e10141a0da505563155cbc55d0ec447e2979278de1720a86e116e65726b57cbfd5f4117b7c8a8d8ca6f73ddccde83b9e7c03004907c3d1736ffb4bc1a0b425f2f01dead21a91f8636744773441fffbca6b7a3abfcfaa800056287c9d072050d505a7ac4c6e8fe76d12aeb49d2150633bac17ff1658c3a3c63a96ecde3c7336b77ed7730a3c121a58dbb8f5757d7aac8c0a30852437233837dff936d496915efea78b59de0a14f554290767324fb29e7f6cd64628fbb7755cac3fed6d4e861e82d6306ac50914875a4e4693c5bb0c15b2ed23a1d8de0e96a7e1c21d5a517312b7786a5aa6e4683968dfcc63baa0c88563d71aac0243ba4f149a1318d93f7e0b50174d14a114fc665a527b9490d4fc4e07aee012b6126a0b28c945ee4cf272eb211a57df07e77f3728d11031f6874ff66b204d282853466622eb2c103d615a4ae88b1b2caadc5913aa168869cf734de5e898b3918c1a435c211f20e9a81bcfdcda0935089b7d588cc2611bdb2b367193da021d8663c5aa6a29b10d0064779e713b61ebe3a49ffc310c491f32584d8cdff9bd3cfdfe2e30211b68dd36bba6b88bdcef828c94c709ec63c653cc69897985ef"}, {0x58, 0x84, 0x1, "5ee7d28d1765d17e8f35d07cabf63e637729d381fb62df461bc421ff729826fa8a9c7e9f2dfa472f6d20c5334163fb57b878f76d6222c358ef4eaec3c1aed2fc9cd05906914fe1"}, {0x18, 0x10a, 0xfffffffe, "1a8e15f3"}, {0x58, 0x29, 0xfffff6e5, "258ffe05a3646088243e7453c65303152c6c49e4314a9d5eda0123cf30218d1d8242e63ea55f05b48e63af9de0e6a0fadb2ca95a13b759e243d45e5bc27098bcbdc7eada546bdd6f"}, {0x48, 0x6, 0x8001, "c3ea0e88de6dd8477201e1b33168cf139803ed53371120efeacd4cb23dee3f6235ea687070a10894e0d20d737ecf17a70f"}, {0x68, 0x102, 0x472a, "2a415b3f480a438c43f0d489da4f8b96804b5df08e5c220c30e57f3835c9c47cd095e7f97343e68c2a41b49d0a397939525158d73b574d511b7007162b2b382acc53a444fe6a205c312c4f0a556c0aae1d37fa63a418ea"}, {0x88, 0x109, 0x9, "60d2961be9c8089f8b3910ec2410f39b1420c8b1bfa3cdb62592fb13b39fdd8172f730060191ae18c715cca4d7a38b16b2d7c7bace8789d1e91380595d9341e81954c92877c7762064ac4bf27abefb27b4c03d9650f3eb966ce6c36ca8fc9066d6e99770b66d28672c8081685e3338aa6a46b0b07d0a"}, {0x68, 0x88, 0x6, "76223e302d4b28979ac80a6b0c11447b1b872a71645420f35c1782a834295aeb48b3a949882e47977c8c2b60c6bfb3cc0b6b5e676f26461cb451a81ce311075bb70d2f0c945c1eaa712aaf5f7534e42b808d06"}], 0x1278}}, {{&(0x7f00000027c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4, 0x3, 0x2, 0x2}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="508603d4f9681daeca3506de8056bcfda7079543d147fcaf6b6635c1db6a2be1d2c2287e36d7c01420d053f90e2dfeb81db3d0aa420131b3ff55", 0x3a}, {&(0x7f0000003880)="744baa417417d980a581052aaa453ce1b11a57c51e7b5cd26bce404d315bd374fa67865167cf4ce947953ac7da104e8a5802f8f697fce769f50f5e569c7c738dd286cdbc0ea7540917cfdcbd90149178425a480255f194f9352070bbcc2ed1f0d9b5ada94c5f5ab4e61d99cfeefce388c4f9dfcdf740a962ad75858ffcdd9451cceb89a552d118daccc7293a6924bca9633fe6fb0e44bb8ce3194f194bb5704f3b7feb04fa217746b94048554ee47cf020d030a9fa76f5a40c818c52cd8c75e408a18821252c7407a6c9f144e78dab823948b7e1", 0xd4}], 0x3, &(0x7f00000039c0)=[{0x88, 0x119, 0xc9, "368497a58494a3d4f3b65edcf8a64d4b6051dde58070e4fee104019a1b3bc46517d9e05dbf652595d5b9dd630856213cecd83e26cae27668b544c3c872384584d3b5e23287bfd750a1b378b95e6b2e72a209b802973f6f97c0c2a4b43a334f2a08f333a3223b1f6de02010bba88a42102d304ce6d9b2"}, {0xd0, 0x112, 0x6, "b12f752503755f3c4a40cf18f69b111bc72cde762c145643a0cb45df28d825b7e3d07aaaa376929b84bd198b078b3f2fbfd08b3d7fa1694e446fc8c3ec0f3ba5c4529187ac3ac93adf65a9f286cc257def4f456a12a551b7f16c27f8bc58c531d07b9542124d025aa93fc606444cd10c486bb6d79319825805b16b3e5c83e235d9cc766fb1dd745dda594cd6947e38e211660e5b44ef614a2f985a215fc56e9a4bd83033c232ccfa391ce5493a82155a6f616c3b527fd7204c3cec"}, {0xa0, 0x117, 0x3, "e791409ebb23431e2f36ed8c68f9b379846e42b7d7745324894c0034ca87eed958548f6713bbb2e239ec6dddd89e75a554ee1ec39697e52ff33583854509cd8b5ab7580183ae407e9c6809da2c8b4890d1b6ac6ea61344135d2162829678c8bec14f1d1db019cf382ad11b4fdfb7e49fb3d5e8380130a75d8e59fc3e672594544e7d27df5900410547583dfbb6e6"}, {0xe0, 0x112, 0x2, "3c79cfc94faaf950303f21a6ed50b0bcb63893281025f8ef88d2915686d318d230d6765e198490a35a42bcc2296e15a19b6ade431e880352ca2d8ea88fca9b11136a3cdc33dd54148437b79814154a4130f51795c1cdd43f43bf1ec7c691ca52dc0b36809cd674e21b711c07dae76e44b485716d29e28bbdb4bfdfcb162767f4faa66c71230e7d481c5962f815b36cf971d5ad5212b0085fbe56359469aed7eda69f0346bd365edacae9c3d8a0fa9f3b5030225cc36cd3af02c36d9dc54b2179c3213bbfbc5e13076722575f"}, {0xf0, 0x117, 0x6, "c16554028855d90f8283da1fbe21b60949bcd931a09e872d8b4dfe4782a5bc993e2682524902096c71dbe9011b09f5c5d6262d35dd5741fba8c5d60ea773e0edebcc7888e26d1b63a3bac86f8124574f7012daa312609547ea5704320da9872c8bec5a24dd412f30d5a5343d1c040cf3528251673790598c229df0fa663b2823bf0cd2a30661c5932b04e022419d685d8eccd61623e854a23673698d647476ce731844f226e95e3ee498936832119a3817ecbbe52cdcb8d3807f536daa6689fb52361232680c20858345723a2bb8905279b3e85a02010e65b3f888deb2eb3600"}], 0x3c8}}, {{&(0x7f0000003dc0)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)="6a50afb1ada3b870", 0x8}], 0x1, &(0x7f0000003ec0)=[{0xa0, 0x118, 0xfffffffb, "f42a72685cbcc0239c73478eeef532b2adf7282e0ddde44da12eeccc662323cc3658d959ffdba740477fa41eba52dc36f8b96bbbb7c8779cd91b398a5740dad7747083985dc4909106ba05a35afebcfb1b875a7c456a5c587f176f68fd0f9efc6c7fab52b03488e12dccf2a27d1b3ce516616201e8a10a1a2aec4e8de10659a8361cee203988e2167470c988dc99"}, {0x58, 0x1f, 0x5, "6e26c717c4d02036a03c88bae05c042d7dc6e8eb5d95c0b92903b3fece4f69b9ebb0d594d7a561fe9d109d78432780a2e2535885b5fa4a7f56e34405c5653981aa3b27daa44fce"}], 0xf8}}, {{&(0x7f0000003fc0)=@phonet={0x23, 0x1, 0x9a, 0x2}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004040)="b8f4f1d8a2efe24133f6d1aa95163efc8930bf92502ad17361ee2df23cf0e80cd2f318d1b58547406a3dfc887fe7390a07db1c6c786c", 0x36}, {&(0x7f0000004080)="6840f61199940cc1d3dd0f285efd4bcb7b5a1bac156f8478b1f06da552f65bbd8df8330d3e7ff6a6199efb74a51558490f07843c294a6bc62ef86dcdc707b01f3ca48788adc000627e0bde67e14157222ce52202016e0d2a95931a75cde2ecf9abf6f8fd2d918193758c4b2265010c4ab26682e231c52afa246d584dc18d97ad97218b350323fb250762a2b30cac541a355ea8f6dc89a0cffb13ce85beaae2407fa4ec13cde6337ac75362a80e23b95a29adbadbb81ea5b53f18c69c66292c251605507b15b589fcebc0145926640a0d2941b0efa35005a3625b7ad3f526f5739c02f22f185cb037b5e84fe4caddbacd64f03c57efe971ea85", 0xf9}, {&(0x7f0000004180)="7a30aead3600f09b88e334c4481e7e943975f5baa819ed9aca096da4377db73efc978248c7be5faaa140e1edd56db19141c53ee9ac822be6bb36a825b3f6824815d40125b0332b51738223c4c509a0ad1547abceda8f81bd80662cbb1a46837b41fc7be17a6dbffa7772f1a5885a24ab7c88e89053aab3f319b4ebfdd8dfe9a4a27d707547c1057f4eb0707daa58f6397b8e80392bb25e714b6485fc0ea96cbdddf8fae2fc3cb8512df877c10983f5e4f92e746b1d192ec3ccf1da9b6e9a4751dab5c2bf48c3f528027f3569855f4f67d8", 0xd1}, {&(0x7f0000004280)="821b32ce42fda0e792ab7a3d", 0xc}, {&(0x7f00000042c0)="d95c92fb9ba078e4dd48c45a18e4929e389a1ca5d58270e266310068a5c80ee37f339d72e79317c4153a53d15fb9ae20ca9f74310d911c9ce33e682cf6e461725ab1c53bbe4c00c261960f20a6213dcb781a725376e89dc912ac68bedb62b4272c17", 0x62}, {&(0x7f0000004340)="cec7099b3d84ac0890563f3f2239b3128a7d8afee132820d397e40", 0x1b}, {&(0x7f0000004380)="a11b528d2700992a6ee1788cc7f73c961ad569fceba396f50076a1d845758987b7f2720f5b049cd3548fb9fac6807cccfe2fc9b9779e761725be402baebcdeb23a0b314bc70308ed104dfe341b27c71f3fbabf3a230d5423f9c3c6e527206115165b544d854f28babcad52e6ff7426cba527ed2d7a59d6ddad10f4709d7b2e0e5035f13d23a749345f86eab1f498370589d7254148dff1164919c3c6d31ddc873072bcb6eaa9b993a877c882690c2ded792a0538cc032d01ef3888e5d336cff0ef46c21b1987a452c2525bee6e9b9c61b4", 0xd1}, {&(0x7f0000004480)="a425bd11e315cd17b1677b0ca16cd299d47ffafb4c89b91d828b1d54f5ae043fb28e7a8c5527383e03753f13d43cf5be41d21c60c6bb822f38e92cfc6b6b25bf325f7d51696b78fad58fb59b40bb164be9", 0x51}, {&(0x7f0000004500)="86413cdfc2f1f8b46d73291a340efb1e1c6a63ba2076b3a71d71b1ed7e3da816c53b05ecf9884b606fbb725d07e14a8b68514a791695948719b72cb1e0ab6878ce764baf767bca15", 0x48}, {&(0x7f0000004580)="3f4b5d2f115e5e2ac35b47362b4af4d7", 0x10}], 0xa, &(0x7f0000004680)=[{0xa0, 0x110, 0x2, "7f9c9a773a3150b6f13d7fe494f0d5f057b6cf9c025263e7fb42473732f0360b4afc649651594300e4832c8b41b2d022167baa3aa151637d68c8276bf2565202bf31446202ab321f901f2bbec7cb2e97fd5558f42fede91829c7a86b504b8320e224ddb4ff067f63a115989c9db5288f3b88c6c855ece24ceb0fd55808a3e97020665891a2803b4956ab1df4"}], 0xa0}}, {{&(0x7f0000004740)=@caif=@dbg={0x25, 0x0, 0x3}, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)="ef0109112958df5d9528cf23e9f6630cd990b7d03c3b32b67293a826acc0a3f942af67b9a8ee3bec5f6f2b23feb945000859ec7bc2499a5ea10cb96ce1de1170532baf5d83b3175477a168ef704e9124000282077c3f6b44e73183a01759f143d813355a14ae4ffc203cd78b57534d31877a68", 0x73}, {&(0x7f0000004840)="617a421e6104f0729a0c5c1015aa17f0f3aa57755caac2286f5894064d669f4ae9e67913ffad37692c00687d764903a92494782f108d5d38c4e72064a338b06f670a4cdf92a57ad02056ffd1b76f2296a0d320043231ed8e7c892dd3b4939edbc75db89927da6a9702a9caa3a2b941c193cb83eed28474f4a98fd894d9b7e381711847d3fe9cb2998b8f254b6348ca09100ddfd951b4c5a25aabeffba375e4c22d5e58907559dc0778ee2a2d8666d47bedc131fee9cf5feac418395584a3af67300e08bf36e7a62df22e2d05c558a0817bf9dbf27525e5dbb3a026ee6c6a73ce9cd865bf28a92b50", 0xe8}, {&(0x7f0000004940)="b56ff53097747940064ded03d27968f77f30a60c022c8ca53702129143", 0x1d}], 0x3}}, {{&(0x7f00000049c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004a40)="30a1e32accd7c8d19e12d044d2f5719fea22a90f7d76df9547158a725ed8fbc5733694c86b21615349454545392dd2e28c14ade33fd227a9985a02d1cf255f65112cef286d3fbf98f33707ff757824c06dc0381eb0f8352c21a1b97eaa06f5d8b479edb91e637b62e42e00569aabe0e7ffe2da540bfb45841c4b66631dc8706157bebd49b8a0be38", 0x88}, {&(0x7f0000004b00)="03185c31f2a62f10dec85399c133ddbc328af179a42e17b9690e2d9cd1daa47eeaf8a5b8f36802a976ebfb4109b1495216e1049ab7dddd95c07dc488a344687aea00ce294fa2a2300095c3532c310035e312a08e5dea13d585ac31634de60de82dfaaea6ccbc185e39d89547ee8cfcd05b00ccd64356306963ad6ea46c904f7f3a68925fdbdb5c5041ad7fee1d48407bbfb52186959feda4b08cbde2237d79992a89b7c93f9d866beedc19705e74861cd19d8d7a036a077d44942833a2ecb7bc06c241c06bc121419a3f5e3269ef6993b1c19de87c55730d9ebefbe21ba634a066b61432f64131f036bdc7880fdb143e8eb4d370c70764", 0xf7}, {&(0x7f0000004c00)="7a6250d0", 0x4}, {&(0x7f0000004c40)="deede8c66128752c6b4e4192", 0xc}, {&(0x7f0000004c80)="28f0a7d8ba1f7ae3a37ca31af67acd05969c21f3226fd2b973aad0c06754c976035eed4f48cbfddb61", 0x29}, {&(0x7f0000004cc0)="59518447eec87b8f2adc2940de8b87d595821eb92eafa328d43e9e45a5e458f0b285c2758ec01a187d8718993c59281f247fe5f6b88ce572bf05129c01e93fc655f74b32b7012dbe05705cf5c1032ee99d4883c5a42044460002cac8bab47c1bc683086825ea053109b3545d9a", 0x6d}, {&(0x7f0000004d40)="5c6483c7872e5c3131361db712fbdf46fd04ac882e62e0da507f52f2a24fa3187768ba3f6f552ccaf00da44c0d71082fd17c", 0x32}], 0x7, &(0x7f0000004e00)=[{0x40, 0x3a, 0x80000001, "3131a7ff3fb1d9a62cd5f95b581e1bd155215a78bb86b6fcdcb448c5e52b24fbabd2ceac313d52f9f3"}, {0x18, 0x88, 0x7, "9e"}], 0x58}}], 0x7, 0x4008000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x7, 0x9, 0xfffffffc}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020007ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newqdisc={0x2d8, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xa, 0xd}, {0x2, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffff00, 0x1, 0x6, 0x8, 0x4}, 0x2, 0x1, 0x2, 0x7, 0x9, 0x1, 0x18, 0x0, 0x3, 0x4, {0xffffff01, 0x5018, 0x0, 0x5, 0x7, 0xfe}}}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0x8, 0x7b, 0x0, 0x1ff, 0x59b, 0x7}}, {0x12, 0x2, [0x0, 0x5, 0xc15e, 0x2d0, 0xffff, 0x3, 0x5]}}, {{0x1c, 0x1, {0x1, 0x70, 0x6, 0xffef, 0x1, 0x400, 0x400, 0x4}}, {0xc, 0x2, [0x200, 0x10, 0x1, 0x0]}}, {{0x1c, 0x1, {0xf7, 0x3, 0x8, 0x6, 0x2, 0xd, 0xff, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x9]}}, {{0x1c, 0x1, {0x2, 0x3, 0x6, 0xff, 0x0, 0x10, 0xc2a6, 0x5}}, {0xe, 0x2, [0x3, 0x2, 0x114, 0x81, 0xfffd]}}, {{0x1c, 0x1, {0xff, 0x2, 0x81, 0x4, 0x2, 0x4, 0x6, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x0, 0x9]}}, {{0x1c, 0x1, {0x80, 0x9, 0x3ff, 0xe5a, 0x2, 0xfffffffb, 0x2, 0x5}}, {0xe, 0x2, [0x49, 0x401, 0x5, 0x6a, 0x0]}}, {{0x1c, 0x1, {0x80, 0xf, 0x2, 0x7, 0x2, 0xf, 0x3, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0xa, 0x1, 0x5d9d, 0x7, 0xfff, 0x3, 0x23, 0x0]}}, {{0x1c, 0x1, {0x9, 0x20, 0x3, 0x1, 0x2, 0x7, 0x808, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}, {{0x1c, 0x1, {0xa9, 0x0, 0xf963, 0xa, 0x1, 0x1, 0x40, 0x6}}, {0x10, 0x2, [0x8e93, 0x7f, 0x800, 0x8000, 0x3, 0x400]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x2, 0xc0000000, 0x0, 0xffffffff, 0x9, 0x9}}, {0x16, 0x2, [0x9, 0x4, 0x9, 0x4, 0x9, 0x81, 0x401, 0x69, 0x100]}}, {{0x1c, 0x1, {0x1, 0x7, 0x3, 0x7fffffff, 0x2, 0x1, 0x7f, 0x3}}, {0xa, 0x2, [0xd433, 0xfe, 0x7]}}, {{0x1c, 0x1, {0xc1, 0x40, 0x7, 0x5, 0x1, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0xfec, 0x7fc5, 0x4, 0x3, 0x2, 0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x20000000}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x1}}]}, 0x2d8}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="bdb5ddff8148c68c53dc868fdf2252ae717c514f55c499eec83cffa14ae58b6d33c06a3e19ee9be7cf0accc44cdf1b42c9ec2f144df3be772e230d628a7f29e24c891870f81f5051e44f05c5ed04a7fb8615e03d2ade43243aef5ef2c5492dff5e4eaca0c69bf0e6e41ffd5746d732f9c5191564ea0be616d935d897b5967ca4ce1b32ea4c956bdca8b54eb882e9e7591a2f27cb1269791dfb81a10519b3c97e82171f6ad85e6b65d37b0177f4dd5abb9c6840b6d2d07087870513c1ed4428c4cddba6d5fff5badc4e7423962a9cd7d3b308e6b73236fc6aa5c076df185f3d0926b865d880f062fb4f10afc65bbcf7dbc40e1301", @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) 277.783138ms ago: executing program 1 (id=7914): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x42, 0x3, 0x2, 0x5, @local, @mcast1, 0x40, 0x10, 0x4, 0x118}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x20000040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept4(r13, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r14) sendmmsg$unix(r14, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11b8e2e95f", 0x5}, {&(0x7f0000001c40)="b65ede783a15f51188f244407b54032c8de25afb0afe506046e064644f2466c938a010a17fcb02b152f6fafc6a07c80e1748758b76ab0c765cc835d6bc3143018f56accc7455f32a5ded552d125de404258cf9a07cb2bb9df4cfc7a4878fae90f0f2add904f5f9fd5e2f0943af860ab4f794d3e60998d45fb240e3618e98cb897c73aef2860f4a3854cf598c9d", 0x8d}, {&(0x7f0000001d40)="be5173b5faac7a921e735f22e37b4c89c5b395256ef33d740561b860ac4d892da8c4f613ad50893212b37a34", 0x2c}, {0x0}, {&(0x7f0000003040)="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", 0xe0f}], 0x5}}], 0x1, 0x20000800) sendmsg$nl_xfrm(r12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 277.226575ms ago: executing program 4 (id=7915): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) shutdown(r0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) 255.574218ms ago: executing program 4 (id=7916): r0 = socket$rxrpc(0x21, 0x2, 0x5d8cb12dbf055e08) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @loopback}}, 0x24) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x4c, 0xf3, 0x48, [0x4, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x40000002]}}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e22, @empty}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x52}, 0x28) 632.988µs ago: executing program 4 (id=7917): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 0s ago: executing program 4 (id=7918): syz_emit_ethernet(0x42, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @random="372407dc4402", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @private1={0xfc, 0x1, '\x00', 0x1}, @multicast, @mcast1}}}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x22f0}, @val={0x1, 0x1, 0x915, 0x80, 0x4, 0x1}, @x25={0x1, 0x3a, 0xb, "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"}}, 0x1011) (async) r3 = socket$kcm(0x29, 0x6, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x1409, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x400c811) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001380)={0x0, 0x5}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001400)=@assoc_value={r6, 0x2}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001440)={r3, 0x3, 0x3, 0x4}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x515, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001580)={r6, 0x1, 0x0, 0xc}, &(0x7f00000015c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001600)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0xcd8, 0x8c87, 0x7fffffff, 0x8d8815af, 0x3}, &(0x7f00000016c0)=0x98) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000001700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000001d80)={&(0x7f0000001940)=0x4fdd, 0x4, &(0x7f0000001980)=[{}, {}, {}, {}, {}], &(0x7f0000001d40)}) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) (async) r10 = accept4$alg(r7, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r10, 0x40049366, &(0x7f0000001e40)=0x2) (async) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000001e80)=0x7, 0x2) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f00), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r11, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040844}, 0x8080) (async) r12 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r12, 0x8983, &(0x7f0000002000)) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002080), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r13, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x24000040) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002180), 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r13, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80408d0}, 0x4044085) kernel console output (not intermixed with test programs): ter): interface not active [ 483.137642][T27523] netlink: 'syz.4.6229': attribute type 11 has an invalid length. [ 483.160328][T27361] hsr_slave_0: entered promiscuous mode [ 483.191913][T27361] hsr_slave_1: entered promiscuous mode [ 483.218195][T27361] debugfs: 'hsr0' already exists in 'hsr' [ 483.233256][T27361] Cannot create hsr debugfs directory [ 483.428367][T27540] __nla_validate_parse: 8 callbacks suppressed [ 483.428390][T27540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6233'. [ 483.448242][T27540] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6233'. [ 483.477689][T27540] validate_nla: 1 callbacks suppressed [ 483.477705][T27540] netlink: 'syz.4.6233': attribute type 5 has an invalid length. [ 483.492355][T27540] netlink: 'syz.4.6233': attribute type 6 has an invalid length. [ 483.521513][T27540] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6233'. [ 483.592959][T27361] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.634873][T27361] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.723629][T27563] tipc: Enabling of bearer rejected, failed to enable media [ 483.784957][T27361] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.823484][T27361] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.894586][T27361] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.946833][T27361] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.960848][T27576] xt_hashlimit: size too large, truncated to 1048576 [ 484.060539][T27575] bond1 (unregistering): Released all slaves [ 484.085463][T27576] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 484.188230][T27361] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.203750][T27582] x_tables: duplicate underflow at hook 2 [ 484.239723][T27361] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.320883][T27598] netlink: 'syz.1.6246': attribute type 83 has an invalid length. [ 484.443797][T27603] netlink: 'syz.4.6248': attribute type 21 has an invalid length. [ 484.445843][T27601] veth0_macvtap: entered allmulticast mode [ 484.462832][T27604] netlink: 'syz.4.6248': attribute type 21 has an invalid length. [ 484.487090][T27603] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6248'. [ 484.501387][T27604] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6248'. [ 484.505962][T27601] net_ratelimit: 12 callbacks suppressed [ 484.505991][T27601] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 484.534410][T27603] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6248'. [ 484.544859][T27604] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6248'. [ 484.555831][T27609] netlink: 'syz.0.6250': attribute type 1 has an invalid length. [ 484.577108][T27609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6250'. [ 484.640799][T27615] netlink: 'syz.0.6250': attribute type 1 has an invalid length. [ 484.657489][T27615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6250'. [ 484.668333][T27615] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 484.698948][T27361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 484.728235][ T5632] Bluetooth: hci5: command tx timeout [ 484.775674][T27361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.788715][T27361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 484.805265][T27361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.836050][T27361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 484.861598][T27361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.882346][T27361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 484.899363][T27361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.107179][T27361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.184533][T27361] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.228026][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.235184][T16729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.251878][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.259044][T16729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.270781][T27656] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6261'. [ 485.295912][T27656] netlink: 'syz.0.6261': attribute type 1 has an invalid length. [ 485.331321][T27658] tipc: Enabled bearer , priority 0 [ 485.340760][T27658] syzkaller0: entered promiscuous mode [ 485.352061][T27658] syzkaller0: entered allmulticast mode [ 485.391172][T27658] tipc: Resetting bearer [ 485.408024][T27658] tipc: Disabling bearer [ 485.793810][T27679] syzkaller0: entered promiscuous mode [ 485.800740][T27679] syzkaller0: entered allmulticast mode [ 485.815539][T27679] tipc: Enabled bearer , priority 0 [ 485.830520][T27677] tipc: Resetting bearer [ 485.860532][T27677] tipc: Disabling bearer [ 485.954903][T27361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.005077][T27692] x_tables: duplicate underflow at hook 3 [ 486.077850][T27361] veth0_vlan: entered promiscuous mode [ 486.123538][T27361] veth1_vlan: entered promiscuous mode [ 486.149271][ T5740] IPVS: starting estimator thread 0... [ 486.233913][T27696] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.240977][T27696] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.256950][T27701] IPVS: using max 43 ests per chain, 103200 per kthread [ 486.278100][T27361] veth0_macvtap: entered promiscuous mode [ 486.308633][T27696] hsr_slave_0: left promiscuous mode [ 486.341763][T27696] hsr_slave_1: left promiscuous mode [ 486.403392][T27361] veth1_macvtap: entered promiscuous mode [ 486.519941][T27361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.591947][T27361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.622280][T27722] netlink: 'syz.3.6279': attribute type 1 has an invalid length. [ 486.651352][T27725] bridge0: port 3(syz_tun) entered blocking state [ 486.676228][T27725] bridge0: port 3(syz_tun) entered disabled state [ 486.697885][T27725] syz_tun: entered allmulticast mode [ 486.716963][T27725] syz_tun: entered promiscuous mode [ 486.740186][T27725] bridge0: port 3(syz_tun) entered blocking state [ 486.747101][T27725] bridge0: port 3(syz_tun) entered forwarding state [ 486.770130][ T360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.791767][ T360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.807124][ T5632] Bluetooth: hci5: command tx timeout [ 486.865654][T27735] bond18: (slave bridge8): making interface the new active one [ 486.876154][T27735] bond18: (slave bridge8): Enslaving as an active interface with an up link [ 486.876727][T27743] netlink: 'syz.4.6284': attribute type 21 has an invalid length. [ 486.895846][ T360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.905443][ T360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.044268][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.064728][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.097153][T16725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.121409][T16725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.144403][T27758] ipt_REJECT: ECHOREPLY no longer supported. [ 487.186629][T27752] nbd2: detected capacity change from 0 to 127 [ 487.203644][ T5632] block nbd2: Receive control failed (result -104) [ 487.313515][T27761] gretap1: entered promiscuous mode [ 487.345440][T27761] gretap1: entered allmulticast mode [ 487.355652][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.364747][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.373425][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.381321][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.390158][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.561371][T27773] bond13: entered promiscuous mode [ 487.592546][T27773] 8021q: adding VLAN 0 to HW filter on device bond13 [ 487.933197][T27801] netlink: 'syz.2.6297': attribute type 11 has an invalid length. [ 488.190713][T27818] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 488.340463][T27825] tap0: tun_chr_ioctl cmd 2148553947 [ 488.354596][T27825] tap0: tun_chr_ioctl cmd 1074025677 [ 488.364328][T27825] tap0: linktype set to 6 [ 488.371995][T27835] tipc: Failed to remove unknown binding: 66,1,1/4:4029986985/4029986987 [ 488.383315][T27835] tipc: Failed to remove unknown binding: 66,1,1/4:4029986985/4029986987 [ 488.421794][T27767] xfrm0 speed is unknown, defaulting to 1000 [ 488.429112][T27767] lo speed is unknown, defaulting to 1000 [ 488.635348][T27844] validate_nla: 34 callbacks suppressed [ 488.635377][T27844] netlink: 'syz.0.6310': attribute type 1 has an invalid length. [ 488.712987][T27858] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 488.886532][ T5632] Bluetooth: hci5: command tx timeout [ 488.985058][T27867] __nla_validate_parse: 42 callbacks suppressed [ 488.985091][T27867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6317'. [ 489.115890][T27880] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.6322'. [ 489.163136][T27767] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.185474][T27767] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.193644][T27767] bridge_slave_0: entered allmulticast mode [ 489.202490][T27767] bridge_slave_0: entered promiscuous mode [ 489.214352][T27767] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.236456][T27767] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.254550][T27881] sctp: [Deprecated]: syz.1.6320 (pid 27881) Use of int in max_burst socket option deprecated. [ 489.254550][T27881] Use struct sctp_assoc_value instead [ 489.270775][T27767] bridge_slave_1: entered allmulticast mode [ 489.277818][T27767] bridge_slave_1: entered promiscuous mode [ 489.448206][ T5632] Bluetooth: hci1: command tx timeout [ 489.452019][T27767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.478480][T27767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.494359][T27906] netlink: 'syz.1.6326': attribute type 26 has an invalid length. [ 489.510286][T27767] team0: Port device team_slave_0 added [ 489.517696][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6327'. [ 489.528243][T27767] team0: Port device team_slave_1 added [ 489.584634][T27903] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 489.588782][T27767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.650878][T27767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.701078][T27919] x_tables: unsorted underflow at hook 3 [ 489.710263][T27767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.712878][T27767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.738940][T27767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.823285][T27767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.865479][T27906] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.921650][T27767] hsr_slave_0: entered promiscuous mode [ 489.928541][T27767] hsr_slave_1: entered promiscuous mode [ 489.934853][T27767] debugfs: 'hsr0' already exists in 'hsr' [ 489.942016][T27767] Cannot create hsr debugfs directory [ 489.961569][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6333'. [ 490.002107][T27935] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6334'. [ 490.049338][T27933] bond2: option xmit_hash_policy: invalid value (64) [ 490.063458][T27933] bond2 (unregistering): Released all slaves [ 490.134370][T27946] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6336'. [ 490.262376][T27767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.278582][T27767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.289828][T27767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 490.302317][T27767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.319200][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6337'. [ 490.337253][T27949] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6337'. [ 490.399695][T27767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.436831][T27767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.462213][T27957] netlink: 'syz.1.6340': attribute type 1 has an invalid length. [ 490.470095][T27767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 490.470147][T27767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.491825][T27956] openvswitch: netlink: Missing valid actions attribute. [ 490.491878][T27956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.522847][T27957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.549496][T27957] team0: Port device team_slave_0 removed [ 490.569279][T27957] bond1: (slave team_slave_0): Enslaving as a backup interface with an up link [ 490.585522][T27957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6340'. [ 490.612768][T27767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.623911][T27767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.634434][T27767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 490.646256][T27767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.710331][T27767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.721546][T27767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.734553][T27767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 490.745032][T27767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.803077][T27977] netlink: 'syz.0.6345': attribute type 1 has an invalid length. [ 490.814092][T27977] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6345'. [ 490.963363][T27767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.999946][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.009005][T27988] netlink: 'syz.0.6348': attribute type 11 has an invalid length. [ 491.009038][T27988] netlink: 'syz.0.6348': attribute type 11 has an invalid length. [ 491.033772][T27767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.046018][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.069201][T27767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.078917][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.087051][T27767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.097700][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.369451][T27767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.441235][T27767] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.480641][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.488254][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.528018][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 491.586216][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.593839][T16725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.617883][T28020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 491.874603][T28041] macvtap0: entered allmulticast mode [ 491.914042][T28041] veth0_macvtap: entered allmulticast mode [ 492.112699][T28055] IPVS: set_ctl: invalid protocol: 29 172.20.20.36:20004 [ 492.819790][T27767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.951565][T27767] veth0_vlan: entered promiscuous mode [ 492.992909][T27767] veth1_vlan: entered promiscuous mode [ 493.083030][T27767] veth0_macvtap: entered promiscuous mode [ 493.121356][T27767] veth1_macvtap: entered promiscuous mode [ 493.185940][T27767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.232058][T27767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.274447][T16728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.305346][T16728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.345059][T16728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.350351][T28130] vcan0: tx address claim with different name [ 493.404392][T16728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.607367][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 493.853546][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.881896][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.979718][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.025778][T28138] __nla_validate_parse: 11 callbacks suppressed [ 494.025798][T28138] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.6382'. [ 494.029454][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.052128][T28138] openvswitch: netlink: IPv4 tunnel dst address is zero [ 494.474976][T28181] bond2: option fail_over_mac: invalid value (16) [ 494.530620][T28181] bond2 (unregistering): Released all slaves [ 494.603110][T28191] sctp: [Deprecated]: syz.3.6396 (pid 28191) Use of int in max_burst socket option deprecated. [ 494.603110][T28191] Use struct sctp_assoc_value instead [ 494.706590][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.715608][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.727746][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.739588][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.749362][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.783321][T28199] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6398'. [ 494.794964][T28199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6398'. [ 494.805374][T28199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6398'. [ 494.937589][T28207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6401'. [ 494.964241][T28207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6401'. [ 495.004246][T28208] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 495.039823][T28209] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6400'. [ 495.274611][T28222] netlink: 'syz.1.6406': attribute type 11 has an invalid length. [ 495.299884][T28222] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.6406'. [ 495.369973][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6408'. [ 495.457109][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6409'. [ 495.578869][T28240] Bluetooth: MGMT ver 1.23 [ 495.686984][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 495.766607][T28255] netlink: 'syz.2.6417': attribute type 1 has an invalid length. [ 495.937980][T28192] xfrm0 speed is unknown, defaulting to 1000 [ 495.955060][T28192] lo speed is unknown, defaulting to 1000 [ 496.720283][T28192] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.739125][T28192] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.757914][T28192] bridge_slave_0: entered allmulticast mode [ 496.774459][T28192] bridge_slave_0: entered promiscuous mode [ 496.786806][T28192] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.794072][T28192] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.801666][T28192] bridge_slave_1: entered allmulticast mode [ 496.809312][ T5632] Bluetooth: hci0: command tx timeout [ 496.816222][T28192] bridge_slave_1: entered promiscuous mode [ 496.844589][T28192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.857764][T28192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.893778][T28192] team0: Port device team_slave_0 added [ 496.909286][T28192] team0: Port device team_slave_1 added [ 496.943273][T28192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.962374][T28312] openvswitch: netlink: Flow key attr not present in new flow. [ 496.967145][T28192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.019298][T28192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.033759][T28192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.041132][T28192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.114912][T28192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.142976][T28295] xfrm0 speed is unknown, defaulting to 1000 [ 497.170585][T28320] netlink: 'syz.2.6433': attribute type 2 has an invalid length. [ 497.182879][T28192] hsr_slave_0: entered promiscuous mode [ 497.215931][T28192] hsr_slave_1: entered promiscuous mode [ 497.228621][T28192] debugfs: 'hsr0' already exists in 'hsr' [ 497.234474][T28192] Cannot create hsr debugfs directory [ 497.242235][T28295] lo speed is unknown, defaulting to 1000 [ 497.475271][T28192] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.485067][T28192] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.540912][T28192] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.573378][T28192] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.648874][T28192] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.659216][T28192] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.683813][T28345] syzkaller0: entered promiscuous mode [ 497.690988][T28345] syzkaller0: entered allmulticast mode [ 497.709879][T28192] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.719961][T28192] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.766434][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 498.887101][ T5632] Bluetooth: hci0: command tx timeout [ 500.112529][T28320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.130372][T28192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.207513][T28192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.227510][T28192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.251695][T28192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.279260][T28192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.318256][T28192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.359185][T28192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.385963][T28192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.651258][T28396] __nla_validate_parse: 4 callbacks suppressed [ 500.651279][T28396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6451'. [ 500.669230][T28396] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6451'. [ 500.966547][ T5632] Bluetooth: hci0: command tx timeout [ 503.046495][ T5632] Bluetooth: hci0: command tx timeout [ 503.174522][T28349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.351649][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 503.391898][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 503.450658][T28412] netlink: 'syz.1.6452': attribute type 25 has an invalid length. [ 503.480517][T28416] netlink: 'syz.0.6456': attribute type 61 has an invalid length. [ 503.492862][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 503.590410][T28192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.618450][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 503.654495][T28412] netlink: 'syz.1.6452': attribute type 25 has an invalid length. [ 503.702544][T28192] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.705547][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 503.758411][T16728] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.765954][T16728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.821191][T28436] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6461'. [ 503.860059][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.867696][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.890927][T28439] netlink: 'syz.0.6462': attribute type 1 has an invalid length. [ 504.014719][T28439] bond2: entered promiscuous mode [ 504.020722][T28439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.058719][T28451] erspan0: left promiscuous mode [ 504.081238][T28451] erspan0: left allmulticast mode [ 504.194419][T28451] vlan2: left allmulticast mode [ 504.212547][T28451] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 504.255102][T28454] bond2: (slave bridge3): making interface the new active one [ 504.263568][T28454] bridge3: entered promiscuous mode [ 504.271492][T28454] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 504.315160][T28464] syzkaller1: entered promiscuous mode [ 504.331972][T28464] syzkaller1: entered allmulticast mode [ 504.522211][T28481] netlink: 'syz.0.6476': attribute type 4 has an invalid length. [ 504.536979][T28481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6476'. [ 504.562459][T28483] netlink: 'syz.3.6474': attribute type 3 has an invalid length. [ 504.570103][T28479] syzkaller1: entered promiscuous mode [ 504.582995][T28479] syzkaller1: entered allmulticast mode [ 504.588577][T28483] netlink: 'syz.3.6474': attribute type 1 has an invalid length. [ 504.588611][T28483] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6474'. [ 504.612897][T28481] netlink: 'syz.0.6476': attribute type 32 has an invalid length. [ 504.728769][T28481] bond3: option coupled_control: invalid value (192) [ 504.738942][T28481] bond3 (unregistering): Released all slaves [ 505.429881][T28192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.745858][T28559] syzkaller1: entered promiscuous mode [ 505.761627][T28559] syzkaller1: entered allmulticast mode [ 506.070175][T28192] veth0_vlan: entered promiscuous mode [ 506.130629][T28577] __nla_validate_parse: 4 callbacks suppressed [ 506.130657][T28577] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6495'. [ 506.161536][T28192] veth1_vlan: entered promiscuous mode [ 506.260541][T28192] veth0_macvtap: entered promiscuous mode [ 506.288644][T28192] veth1_macvtap: entered promiscuous mode [ 506.318708][T28192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.388693][T28192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.414241][T28583] syzkaller1: entered promiscuous mode [ 506.431199][T28583] syzkaller1: entered allmulticast mode [ 506.435177][T28585] netlink: 'syz.3.6496': attribute type 10 has an invalid length. [ 506.462615][T28588] netlink: 'syz.1.6497': attribute type 24 has an invalid length. [ 506.493650][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.552549][T28592] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6500'. [ 506.553965][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.605707][T16728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.629816][T16728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.729222][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 506.742057][T16725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.763025][T16725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.822025][T28607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.855504][T16729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.879939][T16729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.198996][T28637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6516'. [ 507.260473][T28643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6518'. [ 507.272627][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6518'. [ 507.512282][T28660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6523'. [ 507.781364][T28671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6524'. [ 508.361871][T28705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6532'. [ 508.571038][T28713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6534'. [ 508.780939][T28728] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 508.812805][T28728] 0ªX¹¦Dö»: entered allmulticast mode [ 508.846459][T28734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.860893][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 508.901987][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 508.931145][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 508.943964][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 508.951890][T28734] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 508.988666][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.056241][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.086164][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.111798][T28745] tipc: Enabled bearer , priority 0 [ 509.119542][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.144033][T28745] syzkaller0: entered promiscuous mode [ 509.161193][T28745] syzkaller0: entered allmulticast mode [ 509.174994][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.190520][T28745] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 509.209356][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.243828][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.273875][T28745] tipc: Resetting bearer [ 509.299243][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.312127][T28744] tipc: Resetting bearer [ 509.329724][T28744] tipc: Disabling bearer [ 509.356016][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.374730][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.396255][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.456038][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.475569][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.495439][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.535556][T28728] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 509.590364][T28728] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 509.784986][T28782] validate_nla: 1 callbacks suppressed [ 509.785004][T28782] netlink: 'syz.2.6557': attribute type 1 has an invalid length. [ 510.100328][T28812] netlink: 'syz.2.6563': attribute type 1 has an invalid length. [ 510.133246][T28814] netlink: 'syz.0.6567': attribute type 5 has an invalid length. [ 510.195017][T28814] geneve2: entered promiscuous mode [ 510.214587][T28814] geneve2: entered allmulticast mode [ 510.239487][ T77] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 510.261124][T28829] netlink: 'syz.3.6568': attribute type 4 has an invalid length. [ 510.269750][ T77] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 510.301938][ T77] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 510.311223][ T77] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 511.260025][T28895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.630747][T28924] netlink: 'syz.1.6590': attribute type 39 has an invalid length. [ 511.636966][T28918] __nla_validate_parse: 37 callbacks suppressed [ 511.636985][T28918] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6589'. [ 511.659003][T28917] netlink: 'syz.2.6592': attribute type 64 has an invalid length. [ 511.730161][T28926] openvswitch: netlink: Missing key (keys=40, expected=80) [ 511.847115][T28934] netlink: 'syz.0.6593': attribute type 1 has an invalid length. [ 511.855655][T28934] netlink: 'syz.0.6593': attribute type 3 has an invalid length. [ 511.868706][T28934] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6593'. [ 511.878960][T28934] NCSI netlink: No device for ifindex 813332851 [ 511.889344][T28934] netlink: 'syz.0.6593': attribute type 1 has an invalid length. [ 511.900198][T28934] netlink: 'syz.0.6593': attribute type 3 has an invalid length. [ 511.917889][T28934] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6593'. [ 511.937484][T28934] NCSI netlink: No device for ifindex 813332851 [ 512.361886][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6601'. [ 512.512907][T28983] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6605'. [ 512.549194][T28984] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6605'. [ 512.581584][T28986] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6604'. [ 512.646991][T28986] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 512.754049][T28996] : entered promiscuous mode [ 513.279262][T29048] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6620'. [ 513.313567][T29048] netlink: 47 bytes leftover after parsing attributes in process `syz.0.6620'. [ 513.327589][T29053] sock: sock_timestamping_bind_phc: sock not bind to device [ 513.335838][T29048] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6620'. [ 513.475643][T29058] syzkaller0: entered promiscuous mode [ 513.490310][T29058] syzkaller0: entered allmulticast mode [ 514.650103][T29135] syzkaller0: entered promiscuous mode [ 514.663209][T29135] syzkaller0: entered allmulticast mode [ 514.701712][T29143] syzkaller0: entered promiscuous mode [ 514.710491][T29143] syzkaller0: entered allmulticast mode [ 514.921154][T29158] Cannot find add_set index 0 as target [ 515.351244][T29184] erspan0: entered promiscuous mode [ 515.525213][T29196] validate_nla: 12 callbacks suppressed [ 515.525232][T29196] netlink: 'syz.1.6665': attribute type 12 has an invalid length. [ 515.628983][T29209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.667961][T29218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.814715][T29218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.871220][T29218] bond1: (slave bond2): Enslaving as an active interface with an up link [ 516.045110][T29218] bond1 (unregistering): (slave bond2): Releasing backup interface [ 516.091520][T29218] bond1 (unregistering): Released all slaves [ 516.714054][T29313] nbd: couldn't find device at index 101 [ 516.845994][T29315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.163463][T29351] __nla_validate_parse: 21 callbacks suppressed [ 517.163482][T29351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6709'. [ 517.209766][ T11] block nbd2: Possible stuck request ffff8880277ee000: control (read@0,1024B). Runtime 30 seconds [ 517.223686][ T11] block nbd2: Possible stuck request ffff8880277ee1c0: control (read@1024,1024B). Runtime 30 seconds [ 517.235775][ T11] block nbd2: Possible stuck request ffff8880277ee380: control (read@2048,1024B). Runtime 30 seconds [ 517.249273][ T11] block nbd2: Possible stuck request ffff8880277ee540: control (read@3072,1024B). Runtime 30 seconds [ 517.252551][T29357] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 517.273517][T29352] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.764954][T29391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6723'. [ 518.190171][T29418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6729'. [ 518.215644][T29421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.272087][T29421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6733'. [ 518.283595][T29423] netlink: 'syz.2.6732': attribute type 21 has an invalid length. [ 518.292730][T29423] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.352122][T29429] veth0: default FDB implementation only supports local addresses [ 518.365875][T29431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.368297][T29429] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6735'. [ 518.550815][T13610] pim6reg: left allmulticast mode [ 518.570782][T13610] dvmrp0: left allmulticast mode [ 518.596054][T13610] pimreg3: left allmulticast mode [ 518.828834][T29451] x_tables: duplicate underflow at hook 2 [ 518.832039][T29452] x_tables: duplicate underflow at hook 2 [ 518.908764][T13610] team0: Port device gtp1 removed [ 518.935632][T13610] bond6 (unregistering): (slave geneve2): Releasing active interface [ 519.020765][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 519.033923][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 519.061087][T13610] bond0 (unregistering): Released all slaves [ 519.072511][T13610] bond1 (unregistering): Released all slaves [ 519.085423][T13610] bond2 (unregistering): Released all slaves [ 519.103372][T13610] bond3 (unregistering): Released all slaves [ 519.115646][T13610] bond4 (unregistering): Released all slaves [ 519.138986][T13610] bond5 (unregistering): Released all slaves [ 519.152953][T13610] bond6 (unregistering): Released all slaves [ 519.166817][T13610] bond7 (unregistering): Released all slaves [ 519.179811][T13610] bond8 (unregistering): Released all slaves [ 519.192621][T13610] bond9 (unregistering): Released all slaves [ 519.208137][T13610] bond10 (unregistering): Released all slaves [ 519.231323][T29461] : entered promiscuous mode [ 519.440235][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6751'. [ 519.792047][T29510] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 519.811278][T29503] syzkaller0: entered promiscuous mode [ 519.821397][T29503] syzkaller0: entered allmulticast mode [ 520.210868][T29533] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6764'. [ 520.492490][T29555] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 520.839413][T29548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6770'. [ 520.919225][T29571] syzkaller1: entered promiscuous mode [ 520.975235][T29571] syzkaller1: entered allmulticast mode [ 521.025942][T29581] veth1_to_bond: entered allmulticast mode [ 521.072757][T29581] veth1_to_bond: left allmulticast mode [ 521.170461][T29590] netlink: 'syz.3.6780': attribute type 7 has an invalid length. [ 521.429650][T29605] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 521.454552][T13610] hsr_slave_0: left promiscuous mode [ 521.481297][T13610] veth1_vlan: left promiscuous mode [ 521.487130][T13610] veth0_vlan: left promiscuous mode [ 521.487874][T29605] netlink: 'syz.0.6785': attribute type 3 has an invalid length. [ 521.507607][T29605] NCSI netlink: No device for ifindex 813332851 [ 521.592175][T29618] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 521.782349][T29622] openvswitch: netlink: Message has 6 unknown bytes. [ 522.017423][T29639] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 522.196070][T29649] netlink: 'syz.2.6795': attribute type 7 has an invalid length. [ 522.218604][T29649] __nla_validate_parse: 7 callbacks suppressed [ 522.218621][T29649] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6795'. [ 522.424248][T29661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6800'. [ 522.459347][T29661] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.466660][T29661] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.476187][T29666] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6800'. [ 522.494052][T29666] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.501254][T29666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.508683][T29666] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.515816][T29666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.533178][T29661] netlink: 'syz.3.6800': attribute type 1 has an invalid length. [ 522.544159][T29666] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6800'. [ 522.563781][T29666] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.571059][T29666] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.610021][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807977dc00: rx timeout, send abort [ 522.952789][T29680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6806'. [ 523.096305][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807977d800: rx timeout, send abort [ 523.118264][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807977dc00: abort rx timeout. Force session deactivation [ 523.171657][T29695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6811'. [ 523.188152][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6811'. [ 523.271651][T29699] openvswitch: netlink: Key type 31 is not supported [ 523.300114][T29703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6815'. [ 523.315382][T29703] geneve2: entered promiscuous mode [ 523.453507][T29712] syzkaller0: entered promiscuous mode [ 523.459919][T29712] syzkaller0: entered allmulticast mode [ 523.472490][T29710] netlink: 'syz.0.6817': attribute type 1 has an invalid length. [ 523.498186][T29710] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6817'. [ 523.575968][T29718] syzkaller0: entered promiscuous mode [ 523.583130][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046b72c00: rx timeout, send abort [ 523.583382][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888046b72c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 523.604948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807977d800: abort rx timeout. Force session deactivation [ 523.670692][T29718] syzkaller0: entered allmulticast mode [ 523.720196][T29727] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 523.733017][T29727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6822'. [ 523.808877][T29725] bond3: option xmit_hash_policy: invalid value (64) [ 523.838843][T29725] bond3 (unregistering): Released all slaves [ 524.844823][T29809] netlink: 'syz.1.6845': attribute type 1 has an invalid length. [ 524.956076][T29823] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 525.095814][T29840] netlink: 'syz.0.6852': attribute type 30 has an invalid length. [ 525.229798][T16730] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.255237][T16730] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.314809][T16730] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.343122][T16730] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.641725][T29883] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 525.754084][T29890] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.070791][T29912] IPv6: Can't replace route, no match found [ 526.078686][T29910] bridge: RTM_NEWNEIGH with invalid ether address [ 526.096060][T29912] IPv6: Can't replace route, no match found [ 526.238448][T29915] xt_NFQUEUE: number of total queues is 0 [ 526.288581][T29919] nbd: couldn't find device at index 0 [ 526.311570][ T7292] block nbd3: NBD_DISCONNECT [ 526.318260][ T5632] block nbd3: Receive control failed (result -32) [ 526.335045][ T7292] block nbd3: Send disconnect failed -32 [ 526.343953][ T7292] block nbd3: shutting down sockets [ 527.051399][T29953] team0 (unregistering): Port device team_slave_0 removed [ 527.064837][T29953] team0 (unregistering): Port device team_slave_1 removed [ 527.106714][T29952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.314336][T29986] tunl0: entered promiscuous mode [ 527.330358][T29986] netlink: 'syz.0.6896': attribute type 4 has an invalid length. [ 527.346123][T29986] __nla_validate_parse: 15 callbacks suppressed [ 527.346141][T29986] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6896'. [ 527.363454][T29987] netlink: 'syz.2.6893': attribute type 3 has an invalid length. [ 527.383349][T29986] bridge5: entered allmulticast mode [ 527.592358][T29994] netlink: 'syz.0.6897': attribute type 39 has an invalid length. [ 527.601661][T29994] hsr_slave_0: left promiscuous mode [ 527.610515][T29994] hsr_slave_1: left promiscuous mode [ 527.700383][T30002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6900'. [ 527.811286][T13610] bridge_slave_1: left allmulticast mode [ 527.817508][T13610] bridge_slave_1: left promiscuous mode [ 527.823509][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.849063][T13610] pimreg3: left allmulticast mode [ 527.961167][T13610] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 528.021922][T13610] erspan0 (unregistering): left promiscuous mode [ 528.025748][T29971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.046495][T13610] gretap0 (unregistering): left promiscuous mode [ 528.150459][T30009] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6905'. [ 528.160168][T30010] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6905'. [ 528.229797][ T29] IPVS: starting estimator thread 0... [ 528.328837][T30020] IPVS: using max 62 ests per chain, 148800 per kthread [ 528.422622][T13610] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 528.439081][T13610] bridge8 (unregistering): left promiscuous mode [ 528.453857][T13610] bond1 (unregistering): Released all slaves [ 528.468467][T13610] bond2 (unregistering): Released all slaves [ 528.480186][T13610] bond3 (unregistering): Released all slaves [ 528.495471][T13610] bond4 (unregistering): Released all slaves [ 528.521143][T13610] bond0 (unregistering): Released all slaves [ 528.542448][T13610] bond5 (unregistering): Released all slaves [ 528.555542][T13610] bond6 (unregistering): Released all slaves [ 528.572726][T13610] bond7 (unregistering): Released all slaves [ 528.708781][T13610] : left promiscuous mode [ 528.714007][T30049] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6914'. [ 528.761576][T30049] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6914'. [ 528.823358][T13610] tipc: Disabling bearer [ 528.835900][T13610] tipc: Left network mode [ 529.081429][T30070] syzkaller1: entered promiscuous mode [ 529.091600][T30070] syzkaller1: entered allmulticast mode [ 529.265197][T30085] vlan2: entered promiscuous mode [ 529.282296][T30085] hsr0: entered promiscuous mode [ 529.305831][T30085] vlan2: entered allmulticast mode [ 529.327370][T30085] hsr0: entered allmulticast mode [ 529.342937][T30085] hsr_slave_0: entered allmulticast mode [ 529.351657][T30085] hsr_slave_1: entered allmulticast mode [ 529.682921][T30100] bridge0: port 3(syz_tun) entered disabled state [ 529.701721][T30100] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.732493][T30100] batman_adv: batadv0: Interface deactivated: dummy0 [ 529.841676][T30100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.863606][T30100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.962275][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 530.015202][T13610] hsr_slave_0: left promiscuous mode [ 530.021578][T13610] hsr_slave_1: left promiscuous mode [ 530.028338][T13610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.037745][T13610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.045909][T13610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.055068][T13610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.065770][T13610] veth0_macvtap: left promiscuous mode [ 530.073912][T13610] veth1_vlan: left promiscuous mode [ 530.283471][T30125] ipvlan2: entered allmulticast mode [ 530.296676][T30125] batadv_slave_1: entered allmulticast mode [ 530.309035][T16728] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.318309][T16728] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.372694][T16728] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.423721][T16728] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.466005][T16728] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.476752][T16728] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.540160][T16728] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.569310][T16728] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.663703][T30147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6940'. [ 530.695364][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 530.709794][T30147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6940'. [ 530.801356][T30152] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 530.819474][T30152] syzkaller1: group set to 0 [ 530.852116][T13610] IPVS: stop unused estimator thread 0... [ 531.249953][T30176] vcan0: tx address claim with dlc 0 [ 531.393092][T30188] bond3: (slave erspan0): Device is not bonding slave [ 531.400576][T30188] bond3: option active_slave: invalid value (erspan0) [ 531.414729][T30188] bond3 (unregistering): Released all slaves [ 531.764134][T30215] syzkaller0: entered promiscuous mode [ 531.794380][T30215] syzkaller0: entered allmulticast mode [ 531.815516][T30223] netlink: 'syz.1.6964': attribute type 12 has an invalid length. [ 532.064666][T30238] syzkaller0: entered promiscuous mode [ 532.079906][T30238] syzkaller0: entered allmulticast mode [ 532.214010][T30245] syzkaller0: entered allmulticast mode [ 532.399376][T30258] xt_l2tp: invalid flags combination: 8 [ 532.401546][T30257] __nla_validate_parse: 10 callbacks suppressed [ 532.401562][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 532.622011][T30272] Cannot find map_set index 135 as target [ 532.855910][T30289] tunl0: left promiscuous mode [ 532.985546][T30289] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.993629][T30289] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.261262][T30289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.275625][T30289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.382347][T30289] veth0_macvtap: left allmulticast mode [ 533.388900][T30289] macvtap0: left allmulticast mode [ 533.441586][T30289] gretap1: left promiscuous mode [ 533.448756][T30289] gretap1: left allmulticast mode [ 533.458494][T30289] bond2: left promiscuous mode [ 533.463771][T30289] bridge3: left promiscuous mode [ 533.475357][T30289] geneve2: left promiscuous mode [ 533.483028][T30289] geneve2: left allmulticast mode [ 533.500491][T30289] bridge5: left allmulticast mode [ 533.514193][T16730] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.532077][T16730] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.550991][T16730] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.581816][T16730] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.592681][T16730] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.603596][T16730] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.641717][T16730] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.677248][T16730] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.715632][T16730] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.739750][T16730] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.751449][T16730] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.763688][T16730] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.821904][T30312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6993'. [ 533.845222][T30314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6994'. [ 533.865566][T30314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6994'. [ 534.035998][T30325] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6999'. [ 534.170305][T30322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.287946][T30352] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7004'. [ 534.399026][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7008'. [ 534.554933][T30378] netlink: 'syz.0.7012': attribute type 1 has an invalid length. [ 534.655586][T30378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.664224][T30374] syzkaller1: entered promiscuous mode [ 534.671294][T30374] syzkaller1: entered allmulticast mode [ 534.936010][T30408] pim6reg: entered allmulticast mode [ 535.038470][T30419] netlink: 'syz.3.7024': attribute type 11 has an invalid length. [ 535.108089][T30426] netlink: 'syz.2.7026': attribute type 3 has an invalid length. [ 535.129591][T30425] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20003 [ 535.159929][T30428] sctp: [Deprecated]: syz.1.7027 (pid 30428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.159929][T30428] Use struct sctp_sack_info instead [ 535.184884][T30426] netlink: 'syz.2.7026': attribute type 1 has an invalid length. [ 535.203799][T30428] x_tables: duplicate underflow at hook 3 [ 535.224447][T30426] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7026'. [ 535.396223][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7032'. [ 535.416501][T30445] netlink: 'syz.2.7032': attribute type 1 has an invalid length. [ 535.424481][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7032'. [ 535.433859][T30445] netlink: 'syz.2.7032': attribute type 1 has an invalid length. [ 535.445017][T30449] netlink: 'syz.1.7035': attribute type 1 has an invalid length. [ 535.543747][T30454] netlink: 'syz.0.7036': attribute type 11 has an invalid length. [ 535.900725][T30477] netlink: 'syz.3.7041': attribute type 1 has an invalid length. [ 535.938708][T30477] bond2: entered promiscuous mode [ 535.944736][T30477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.099222][T30493] netlink: 'syz.4.7046': attribute type 5 has an invalid length. [ 536.111676][T30493] netlink: 'syz.4.7046': attribute type 6 has an invalid length. [ 536.144264][T30477] bond3: entered allmulticast mode [ 536.206044][T30477] bond4: entered allmulticast mode [ 536.283685][T30480] bond2: (slave bridge1): making interface the new active one [ 536.331141][T30480] bridge1: entered promiscuous mode [ 536.351863][T30480] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 536.822400][T30550] xfrm1: entered promiscuous mode [ 536.863889][T30550] xfrm1: entered allmulticast mode [ 537.364898][T30598] sock: sock_set_timeout: `syz.2.7074' (pid 30598) tries to set negative timeout [ 537.467560][T30601] sock: sock_set_timeout: `syz.2.7074' (pid 30601) tries to set negative timeout [ 537.881517][T30632] __nla_validate_parse: 14 callbacks suppressed [ 537.881547][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7081'. [ 538.036134][T30632] team0: Port device team_slave_0 removed [ 538.052368][T30637] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 538.075940][T30637] vlan4: entered promiscuous mode [ 538.081995][T30637] geneve1: entered promiscuous mode [ 538.090026][T30637] vlan4: entered allmulticast mode [ 538.094213][T30643] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7086'. [ 538.095762][T30637] geneve1: entered allmulticast mode [ 538.138862][T30637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.222042][T30648] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7089'. [ 538.235358][T30648] netlink: 606 bytes leftover after parsing attributes in process `syz.3.7089'. [ 538.251015][T30650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'. [ 538.261563][T30648] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7089'. [ 538.273249][T30650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7088'. [ 538.299668][T30653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7088'. [ 538.311416][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7088'. [ 538.722244][T30691] syzkaller1: entered promiscuous mode [ 538.731684][T30691] syzkaller1: entered allmulticast mode [ 538.765793][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7102'. [ 539.014566][T30712] macsec0: entered promiscuous mode [ 539.040200][T30712] veth1_macvtap: left promiscuous mode [ 539.067626][T30712] macsec0 (unregistering): left promiscuous mode [ 539.368540][T30714] xfrm0 speed is unknown, defaulting to 1000 [ 539.382779][T30714] lo speed is unknown, defaulting to 1000 [ 539.475964][T30738] bond3: entered promiscuous mode [ 539.485135][T30738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.528358][T30738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.535638][T30738] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 539.549229][T30738] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 539.562212][T30738] bond3: (slave ip6gre1): making interface the new active one [ 539.570984][T30738] ip6gre1: entered promiscuous mode [ 539.579260][T30738] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 539.665141][T30752] validate_nla: 12 callbacks suppressed [ 539.665159][T30752] netlink: 'syz.1.7122': attribute type 9 has an invalid length. [ 539.979233][T30766] netlink: 'syz.4.7124': attribute type 24 has an invalid length. [ 540.128111][T30777] netlink: 'syz.1.7129': attribute type 1 has an invalid length. [ 540.150937][T30777] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 540.881497][T30826] tipc: Resetting bearer [ 541.025758][T30826] batman_adv: batadv0: Interface deactivated: wlan0 [ 541.082402][T30844] bridge2: entered promiscuous mode [ 541.543819][ T30] audit: type=1804 audit(1781755478.175:23): pid=30876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7155" name="/newroot/314/cgroup.controllers" dev="tmpfs" ino=1611 res=1 errno=0 [ 541.637307][ T30] audit: type=1800 audit(1781755478.175:24): pid=30876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7155" name="cgroup.controllers" dev="tmpfs" ino=1611 res=0 errno=0 [ 541.674875][T30883] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 541.863286][T30893] netlink: 'syz.4.7160': attribute type 1 has an invalid length. [ 541.942397][T30897] netlink: 'syz.2.7162': attribute type 1 has an invalid length. [ 541.975857][T30897] netlink: 'syz.2.7162': attribute type 1 has an invalid length. [ 542.001366][T30897] netlink: 'syz.2.7162': attribute type 2 has an invalid length. [ 542.113509][T30912] sctp: [Deprecated]: syz.1.7164 (pid 30912) Use of int in maxseg socket option. [ 542.113509][T30912] Use struct sctp_assoc_value instead [ 542.154485][T30913] sctp: [Deprecated]: syz.1.7164 (pid 30913) Use of int in maxseg socket option. [ 542.154485][T30913] Use struct sctp_assoc_value instead [ 542.465733][T30936] sctp: [Deprecated]: syz.1.7168 (pid 30936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.465733][T30936] Use struct sctp_sack_info instead [ 542.822337][T30959] netlink: 'syz.0.7173': attribute type 23 has an invalid length. [ 543.333218][T31003] netlink: 'syz.3.7183': attribute type 1 has an invalid length. [ 543.457230][T31003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.553106][T31010] bond5: (slave gretap1): making interface the new active one [ 543.575752][T31010] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 543.610699][T31022] __nla_validate_parse: 20 callbacks suppressed [ 543.610730][T31022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7186'. [ 543.672787][T31022] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.702701][T31018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7186'. [ 544.130005][T31065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7196'. [ 544.186254][T31072] netlink: 'syz.1.7198': attribute type 11 has an invalid length. [ 544.300694][T31082] netlink: 'syz.4.7200': attribute type 32 has an invalid length. [ 544.357965][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7200'. [ 544.405303][T31072] bridge0: port 3(syz_tun) entered blocking state [ 544.412261][T31072] bridge0: port 3(syz_tun) entered forwarding state [ 544.421987][T31089] openvswitch: netlink: EtherType 0 is less than min 600 [ 544.440726][T31072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.450501][T31072] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.459936][T31072] batman_adv: batadv0: Interface activated: dummy0 [ 544.467702][T31072] batadv0: mtu less than device minimum [ 544.474942][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.487076][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.499064][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.510826][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.522685][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.534438][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.546304][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.558179][T31072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 544.590519][T31072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.623025][T31072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.652983][T31072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.688845][T31072] veth1_vlan: left promiscuous mode [ 544.695162][T31072] veth0_vlan: left promiscuous mode [ 544.702403][T31072] veth0_vlan: entered promiscuous mode [ 544.717256][T31072] veth1_vlan: entered promiscuous mode [ 544.730313][T31072] veth1_macvtap: left promiscuous mode [ 544.738573][T31072] veth0_macvtap: left promiscuous mode [ 544.745119][T31072] veth0_macvtap: entered promiscuous mode [ 544.752968][T31072] veth1_macvtap: entered promiscuous mode [ 544.764183][T31072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.774590][T31072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.783764][T31072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.792701][T31072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.808946][T31072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.818261][T31072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.835782][T31085] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 544.848472][T31085] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 544.862898][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.870193][T16727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.881002][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.888169][T16727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.945684][T31082] bond1: option coupled_control: invalid value (192) [ 544.954779][T31082] bond1 (unregistering): Released all slaves [ 544.978688][T31091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.995079][T31091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.033053][T31097] erspan0: entered promiscuous mode [ 545.045412][T31097] erspan0: entered allmulticast mode [ 545.061330][T31093] ip6_vti0: entered promiscuous mode [ 545.066016][T31114] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 545.086184][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7201'. [ 545.131198][ T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.141726][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.153782][ T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.174743][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.295009][ T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.317294][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.372131][T31125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7209'. [ 545.424128][ T77] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.442928][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.569288][T31149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7215'. [ 545.608227][T31149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7215'. [ 545.670806][T31149] x_tables: unsorted entry at hook 1 [ 545.823098][T31158] netlink: 576 bytes leftover after parsing attributes in process `syz.2.7215'. [ 546.126114][T31192] netlink: 'syz.4.7224': attribute type 10 has an invalid length. [ 546.190391][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7226'. [ 546.691257][T31231] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 546.804916][T31236] netlink: 'syz.4.7237': attribute type 1 has an invalid length. [ 546.861571][T31242] bridge0: port 3(veth1_to_bridge) entered blocking state [ 546.877635][T31242] bridge0: port 3(veth1_to_bridge) entered disabled state [ 546.892477][T31242] veth1_to_bridge: entered allmulticast mode [ 546.909673][T31242] veth1_to_bridge: entered promiscuous mode [ 547.004112][T31239] veth5: entered allmulticast mode [ 547.287949][ T11] block nbd2: Possible stuck request ffff8880277ee000: control (read@0,1024B). Runtime 60 seconds [ 547.301637][ T11] block nbd2: Possible stuck request ffff8880277ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 547.313563][ T11] block nbd2: Possible stuck request ffff8880277ee380: control (read@2048,1024B). Runtime 60 seconds [ 547.325557][ T11] block nbd2: Possible stuck request ffff8880277ee540: control (read@3072,1024B). Runtime 60 seconds [ 547.594453][T31283] tipc: Enabled bearer , priority 0 [ 547.617692][T31283] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 547.636885][T31283] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 547.662634][T31290] netlink: 'syz.0.7251': attribute type 4 has an invalid length. [ 547.833038][T31302] netlink: 'syz.3.7257': attribute type 1 has an invalid length. [ 547.869462][T31302] netlink: 'syz.3.7257': attribute type 2 has an invalid length. [ 548.013244][T31319] veth0: entered promiscuous mode [ 548.033793][T31319] veth0: left promiscuous mode [ 548.392762][T31348] netlink: 'syz.1.7271': attribute type 1 has an invalid length. [ 548.512605][T31356] lo: entered promiscuous mode [ 548.520497][T31356] netlink: 'syz.2.7274': attribute type 2 has an invalid length. [ 548.529650][T31354] netlink: 'syz.3.7272': attribute type 10 has an invalid length. [ 548.555958][T31354] team0: Port device dummy0 added [ 548.675890][T31364] __nla_validate_parse: 15 callbacks suppressed [ 548.675910][T31364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7276'. [ 548.707970][T30293] tipc: Node number set to 2886997039 [ 548.715027][T31370] netlink: 'syz.3.7278': attribute type 3 has an invalid length. [ 548.806022][T31376] syzkaller0: entered promiscuous mode [ 548.874819][T31376] syzkaller0: entered allmulticast mode [ 548.944891][T31383] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 549.296190][T30301] IPVS: starting estimator thread 0... [ 549.350760][T31411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7292'. [ 549.386186][T31412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7292'. [ 549.403771][T31409] IPVS: using max 53 ests per chain, 127200 per kthread [ 549.412476][T31415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7294'. [ 549.525410][T31426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7297'. [ 549.781913][ T77] net_ratelimit: 74 callbacks suppressed [ 549.781942][ T77] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.804138][ T77] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.983874][T31457] netlink: 'syz.1.7307': attribute type 1 has an invalid length. [ 550.052717][T31457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.065156][T31466] bond1: (slave team_slave_0): Removing an active aggregator [ 550.095652][T31466] bond1: (slave team_slave_0): Releasing backup interface [ 550.149966][T31466] bond4: (slave team_slave_0): Enslaving as a backup interface with an up link [ 550.240042][T31474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.337558][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.354229][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.392246][T31479] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7314'. [ 550.759042][T31494] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 550.791552][T31494] bond7 (unregistering): Released all slaves [ 550.958149][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.975941][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 551.064490][T31510] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7322'. [ 551.167962][T31510] syzkaller0: entered promiscuous mode [ 551.182491][T31510] syzkaller0: entered allmulticast mode [ 551.195658][T31519] validate_nla: 1 callbacks suppressed [ 551.195676][T31519] netlink: 'syz.1.7325': attribute type 1 has an invalid length. [ 551.225380][T31519] netlink: 'syz.1.7325': attribute type 1 has an invalid length. [ 551.298889][T31519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.431855][T31527] bond5: (slave bridge2): making interface the new active one [ 551.483827][T31527] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 551.518280][ T372] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 551.534359][ T372] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 551.649262][T31552] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7331'. [ 551.807551][T31569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 551.842780][T31569] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 551.868290][T31569] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7338'. [ 551.924993][T31569] nbd: couldn't find a device at index 0 [ 551.954964][T31581] netlink: 'syz.1.7341': attribute type 1 has an invalid length. [ 551.974869][T31580] syzkaller1: entered promiscuous mode [ 551.983398][T31580] syzkaller1: entered allmulticast mode [ 552.013288][T31584] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 552.059165][T31581] bond6: entered promiscuous mode [ 552.065096][T31581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.085085][T31587] bond6: entered allmulticast mode [ 552.149446][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 552.165293][T31581] bond6: (slave bridge3): making interface the new active one [ 552.174666][T31587] netlink: 'syz.1.7341': attribute type 1 has an invalid length. [ 552.184280][T31581] bridge3: entered promiscuous mode [ 552.190834][T31581] bridge3: entered allmulticast mode [ 552.199607][T31581] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 552.614296][T31620] tipc: Enabling of bearer rejected, already enabled [ 553.030666][T31653] dvmrp0: entered allmulticast mode [ 553.236851][T31674] netlink: 'syz.0.7372': attribute type 28 has an invalid length. [ 553.245399][T31674] netlink: 'syz.0.7372': attribute type 3 has an invalid length. [ 553.312432][T31678] netlink: 'syz.0.7374': attribute type 23 has an invalid length. [ 553.478155][T31689] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 553.556893][T31692] syz.4.7379: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 553.573351][T31692] CPU: 1 UID: 0 PID: 31692 Comm: syz.4.7379 Not tainted syzkaller #0 PREEMPT(full) [ 553.573378][T31692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.573388][T31692] Call Trace: [ 553.573395][T31692] [ 553.573402][T31692] dump_stack_lvl+0xe8/0x150 [ 553.573428][T31692] warn_alloc+0x249/0x340 [ 553.573547][T31692] ? __pfx_stack_trace_save+0x10/0x10 [ 553.573610][T31692] ? __pfx_warn_alloc+0x10/0x10 [ 553.573633][T31692] ? __kasan_kmalloc+0x93/0xb0 [ 553.573654][T31692] ? __kmalloc_cache_noprof+0x318/0x660 [ 553.573673][T31692] ? xskq_create+0x56/0x170 [ 553.573755][T31692] ? xsk_init_queue+0x8a/0xe0 [ 553.573770][T31692] ? xsk_setsockopt+0x52a/0x960 [ 553.573784][T31692] ? do_sock_setsockopt+0x17c/0x1b0 [ 553.573925][T31692] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 553.573948][T31692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.573969][T31692] __vmalloc_node_range_noprof+0x12c/0x1730 [ 553.574012][T31692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 553.574035][T31692] ? __kasan_kmalloc+0x93/0xb0 [ 553.574057][T31692] vmalloc_user_noprof+0xad/0xe0 [ 553.574076][T31692] ? xskq_create+0xbf/0x170 [ 553.574095][T31692] xskq_create+0xbf/0x170 [ 553.574113][T31692] xsk_init_queue+0x8a/0xe0 [ 553.574133][T31692] xsk_setsockopt+0x52a/0x960 [ 553.574151][T31692] ? __pfx_xsk_setsockopt+0x10/0x10 [ 553.574168][T31692] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.574249][T31692] ? lock_release+0x4b/0x3c0 [ 553.574283][T31692] ? aa_sock_opt_perm+0xff/0x1a0 [ 553.574309][T31692] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 553.574344][T31692] ? __pfx_xsk_setsockopt+0x10/0x10 [ 553.574361][T31692] do_sock_setsockopt+0x17c/0x1b0 [ 553.574475][T31692] __x64_sys_setsockopt+0x13d/0x1b0 [ 553.574504][T31692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.574521][T31692] do_syscall_64+0x174/0x580 [ 553.574543][T31692] ? trace_irq_disable+0x3b/0x140 [ 553.574564][T31692] ? clear_bhb_loop+0x40/0x90 [ 553.574581][T31692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.574595][T31692] RIP: 0033:0x7f120c79ce59 [ 553.574611][T31692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.574625][T31692] RSP: 002b:00007f120d592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.574644][T31692] RAX: ffffffffffffffda RBX: 00007f120ca15fa0 RCX: 00007f120c79ce59 [ 553.574658][T31692] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 553.574668][T31692] RBP: 00007f120c832d6f R08: 0000000000000004 R09: 0000000000000000 [ 553.574679][T31692] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.574690][T31692] R13: 00007f120ca16038 R14: 00007f120ca15fa0 R15: 00007ffca7a9f948 [ 553.574709][T31692] [ 553.574829][T31692] Mem-Info: [ 553.888448][T31692] active_anon:6379 inactive_anon:0 isolated_anon:0 [ 553.888448][T31692] active_file:3150 inactive_file:40147 isolated_file:0 [ 553.888448][T31692] unevictable:768 dirty:88 writeback:0 [ 553.888448][T31692] slab_reclaimable:13622 slab_unreclaimable:152803 [ 553.888448][T31692] mapped:31627 shmem:1296 pagetables:3617 [ 553.888448][T31692] sec_pagetables:0 bounce:0 [ 553.888448][T31692] kernel_misc_reclaimable:0 [ 553.888448][T31692] free:1254062 free_pcp:9943 free_cma:0 [ 553.946727][T31692] Node 0 active_anon:25416kB inactive_anon:0kB active_file:12600kB inactive_file:160388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126508kB dirty:352kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19324kB pagetables:14448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 553.985197][T31692] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 554.024783][T31692] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.061603][T31692] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 554.070554][T31692] Node 0 DMA32 free:1059300kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25616kB inactive_anon:0kB active_file:12600kB inactive_file:160388kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:38000kB local_pcp:20052kB free_cma:0kB [ 554.109189][T31692] lowmem_reserve[]: 0 0 0 0 0 [ 554.125282][T31709] __nla_validate_parse: 11 callbacks suppressed [ 554.125300][T31709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7384'. [ 554.152054][T31692] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 554.199423][T31692] lowmem_reserve[]: 0 0 0 0 0 [ 554.212337][T31692] Node 1 Normal free:3941588kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1756kB local_pcp:1756kB free_cma:0kB [ 554.229441][T31710] bond1: entered promiscuous mode [ 554.252152][T31692] lowmem_reserve[]: 0 0 0 0 0 [ 554.259099][T31692] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 554.271532][T31710] bond1: entered allmulticast mode [ 554.277557][T31692] Node 0 DMA32: 12099*4kB (UME) 7323*8kB (UME) 3900*16kB (UME) 157*32kB (ME) 53*64kB (ME) 776*128kB (UM) 692*256kB (UME) 412*512kB (UME) 234*1024kB (UM) 55*2048kB (UM) 10*4096kB (UM) = 1058436kB [ 554.298365][T31692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 554.310497][T31692] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3941588kB [ 554.332642][T31692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.353738][T31692] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.373029][T31715] bond7: entered promiscuous mode [ 554.379594][T31715] bond7: entered allmulticast mode [ 554.387232][T31715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.394282][T31692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.410689][T31692] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.411278][T31723] bridge0: port 4(gretap0) entered blocking state [ 554.420212][T31692] 44589 total pagecache pages [ 554.420243][T31692] 0 pages in swap cache [ 554.420250][T31692] Free swap = 124996kB [ 554.420257][T31692] Total swap = 124996kB [ 554.420266][T31692] 2097051 pages RAM [ 554.420273][T31692] 0 pages HighMem/MovableOnly [ 554.420280][T31692] 427122 pages reserved [ 554.420286][T31692] 0 pages cma reserved [ 554.460974][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7388'. [ 554.465975][T31723] bridge0: port 4(gretap0) entered disabled state [ 554.480235][T31723] gretap0: entered allmulticast mode [ 554.491776][T31723] gretap0: entered promiscuous mode [ 554.502359][T31723] bridge0: port 4(gretap0) entered blocking state [ 554.508936][T31723] bridge0: port 4(gretap0) entered forwarding state [ 554.599297][T31732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7391'. [ 554.663357][T31735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7390'. [ 554.750647][T31745] bond0: entered promiscuous mode [ 554.769493][T31745] bond_slave_0: entered promiscuous mode [ 554.785903][T31745] bond_slave_1: entered promiscuous mode [ 554.795192][T31745] batadv0: entered promiscuous mode [ 554.805126][T31745] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 554.820801][T31745] bond0: left promiscuous mode [ 554.825984][T31745] bond_slave_0: left promiscuous mode [ 554.834136][T31745] bond_slave_1: left promiscuous mode [ 554.843444][T31745] batadv0: left promiscuous mode [ 555.102253][T31764] bond4 (unregistering): Released all slaves [ 555.144237][T31771] tipc: New replicast peer: 0.0.0.0 [ 555.150953][T31771] tipc: Enabled bearer , priority 10 [ 555.257332][T13610] net_ratelimit: 12 callbacks suppressed [ 555.257358][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 555.273017][T31784] netlink: 'syz.2.7408': attribute type 6 has an invalid length. [ 555.278808][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 555.356120][T31792] netlink: 'syz.4.7409': attribute type 1 has an invalid length. [ 555.462362][T31792] bond1: entered promiscuous mode [ 555.482875][T31792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.524562][T31801] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7412'. [ 555.813770][T31822] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 555.897594][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 555.913746][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 555.963328][T31828] netlink: 'syz.4.7419': attribute type 1 has an invalid length. [ 555.992725][T31828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.048295][T31818] xfrm0 speed is unknown, defaulting to 1000 [ 556.055245][T31818] lo speed is unknown, defaulting to 1000 [ 556.373197][T31848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7422'. [ 556.422628][T31848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.429944][T31848] IPv6: NLM_F_CREATE should be set when creating new route [ 556.478668][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 556.494367][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 557.027427][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 557.042802][T16726] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 557.566549][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 557.581593][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 558.955691][T31828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.085865][T31867] netlink: 'syz.3.7429': attribute type 11 has an invalid length. [ 559.090603][T31869] netlink: 'syz.1.7428': attribute type 1 has an invalid length. [ 559.120357][T31875] netlink: 'syz.2.7431': attribute type 1 has an invalid length. [ 559.172545][T31869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.220277][T31875] bond2: entered promiscuous mode [ 559.226131][T31875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.295816][T31890] netlink: 'syz.1.7435': attribute type 267 has an invalid length. [ 559.318547][T31879] bond2: (slave bridge4): making interface the new active one [ 559.332755][T31879] bridge4: entered promiscuous mode [ 559.343185][T31879] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 559.354335][T31895] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7432'. [ 559.446038][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7437'. [ 559.508108][T31900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7437'. [ 559.529915][T31893] syzkaller0: entered promiscuous mode [ 559.542840][T31893] syzkaller0: entered allmulticast mode [ 559.560613][T31902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7436'. [ 559.637876][T16730] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.654690][T31914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7440'. [ 559.681427][T16730] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.781281][T31917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7441'. [ 559.792878][T16730] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.804114][T16730] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.852141][T31921] netlink: 'syz.2.7442': attribute type 27 has an invalid length. [ 559.871094][T31924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7443'. [ 559.882004][T31921] netlink: 'syz.2.7442': attribute type 4 has an invalid length. [ 559.891221][T31921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7442'. [ 559.930488][T31926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7446'. [ 560.145575][T31941] bridge3: entered promiscuous mode [ 560.176191][T31941] bridge3: entered allmulticast mode [ 560.191342][T31946] sctp: [Deprecated]: syz.0.7452 (pid 31946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.191342][T31946] Use struct sctp_sack_info instead [ 560.270608][T31942] netlink: 'syz.1.7451': attribute type 61 has an invalid length. [ 560.277231][T31941] syzkaller1: entered promiscuous mode [ 560.313865][T31941] syzkaller1: entered allmulticast mode [ 560.354157][T31955] net_ratelimit: 10 callbacks suppressed [ 560.354175][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.441297][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.459190][T31963] netlink: 'syz.3.7454': attribute type 11 has an invalid length. [ 560.472147][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.481122][T31965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7456'. [ 560.510884][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.533780][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.569139][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.599989][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.620372][T31967] bond4 (unregistering): Released all slaves [ 560.638956][T31955] openvswitch: netlink: Missing key (keys=40, expected=80) [ 560.668359][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 560.683389][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 560.932645][T31983] netlink: 'syz.2.7461': attribute type 12 has an invalid length. [ 561.251788][T32002] netlink: 'syz.3.7469': attribute type 1 has an invalid length. [ 561.294123][T32010] netlink: 'syz.0.7473': attribute type 15 has an invalid length. [ 561.391031][ T77] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 561.422549][ T77] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 561.463641][ T77] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 561.489898][ T77] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 561.635779][T32038] team0: entered promiscuous mode [ 561.653431][T32038] team_slave_0: entered promiscuous mode [ 561.663231][T32038] team_slave_1: entered promiscuous mode [ 562.268031][T32068] : entered promiscuous mode [ 562.678216][T32092] bond0: entered allmulticast mode [ 562.694028][T32092] bond_slave_0: entered allmulticast mode [ 562.718001][T32092] bond_slave_1: entered allmulticast mode [ 564.534236][T32212] __nla_validate_parse: 14 callbacks suppressed [ 564.534275][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7529'. [ 564.580792][T32219] geneve2: entered promiscuous mode [ 564.590245][ T77] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54366 - 0 [ 564.612003][ T77] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54366 - 0 [ 564.638633][ T77] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54366 - 0 [ 564.652055][T32212] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7529'. [ 564.671011][ T77] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 54366 - 0 [ 564.919120][T32236] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 564.960484][T32236] syzkaller0: entered promiscuous mode [ 564.976200][T32236] syzkaller0: entered allmulticast mode [ 565.338572][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7539'. [ 565.344138][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7539'. [ 565.392431][ T5632] Bluetooth: hci1: link tx timeout [ 565.399917][T13610] net_ratelimit: 42 callbacks suppressed [ 565.399933][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 565.409515][T32258] netlink: 'syz.3.7540': attribute type 1 has an invalid length. [ 565.422491][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 565.428967][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 565.434162][T32256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7539'. [ 565.508536][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7539'. [ 565.540727][T32258] 8021q: adding VLAN 0 to HW filter on device bond8 [ 565.588628][T32268] bond8: (slave veth7): Enslaving as an active interface with a down link [ 565.693999][T32274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 565.713961][T32274] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 565.770322][ T51] Bluetooth: hci1: link tx timeout [ 565.776064][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 565.793327][ T51] Bluetooth: hci1: link tx timeout [ 565.799919][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 565.889910][T32289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7546'. [ 566.030874][T32300] sctp: [Deprecated]: syz.4.7548 (pid 32300) Use of int in max_burst socket option. [ 566.030874][T32300] Use struct sctp_assoc_value instead [ 566.048660][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 566.064236][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 566.297917][T32317] tipc: Started in network mode [ 566.309864][T32317] tipc: Node identity 6e06b86d7414, cluster identity 4711 [ 566.319611][ T51] Bluetooth: hci1: link tx timeout [ 566.325104][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.340434][T32317] tipc: Enabled bearer , priority 0 [ 566.390260][ T51] Bluetooth: hci1: link tx timeout [ 566.395768][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.431048][T32315] tipc: Disabling bearer [ 566.461274][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7554'. [ 566.473662][T32327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7554'. [ 566.483487][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7554'. [ 566.637480][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 566.653796][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 566.960767][T32358] netlink: 'syz.2.7560': attribute type 6 has an invalid length. [ 566.982072][T32358] netlink: 'syz.2.7560': attribute type 5 has an invalid length. [ 567.003186][T32357] netlink: 'syz.3.7561': attribute type 1 has an invalid length. [ 567.232887][ T51] Bluetooth: hci1: link tx timeout [ 567.239620][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 567.259680][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 567.275320][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.447030][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 567.453519][ T51] Bluetooth: hci1: link tx timeout [ 567.715499][T32402] can: request_module (can-proto-0) failed. [ 567.858484][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 567.873639][T16724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.899377][T32411] netlink: 'syz.0.7575': attribute type 39 has an invalid length. [ 567.969023][T32414] lo: left promiscuous mode [ 568.243138][T32414] ip6_vti0: left promiscuous mode [ 568.948822][T32414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.035668][T32414] bond1: left promiscuous mode [ 569.042155][T32414] bond1: left allmulticast mode [ 569.051919][T32414] bond2: left promiscuous mode [ 569.058970][T32414] bridge4: left promiscuous mode [ 569.083664][ T372] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.093611][ T372] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.106679][ T372] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.117098][ T372] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.128924][ T372] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.143351][ T372] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.175574][T16730] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.209899][T16730] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.330723][T32447] macvlan0: entered promiscuous mode [ 569.599564][T32477] netlink: 'syz.4.7599': attribute type 1 has an invalid length. [ 569.628405][T32477] __nla_validate_parse: 20 callbacks suppressed [ 569.628421][T32477] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7599'. [ 569.661333][T32476] netlink: 'syz.1.7598': attribute type 1 has an invalid length. [ 569.730995][T32484] netlink: 'syz.0.7601': attribute type 28 has an invalid length. [ 569.743469][T32484] netlink: 'syz.0.7601': attribute type 3 has an invalid length. [ 569.756060][T32484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7601'. [ 569.944301][T32499] netlink: 'syz.4.7607': attribute type 1 has an invalid length. [ 570.008734][T32500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.109644][T32514] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7610'. [ 570.166087][T32516] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7609'. [ 570.334937][T32532] xt_hashlimit: max too large, truncated to 1048576 [ 570.467373][ T372] net_ratelimit: 9 callbacks suppressed [ 570.467400][ T372] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 570.488856][ T372] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 570.813017][T32563] validate_nla: 1 callbacks suppressed [ 570.813032][T32563] netlink: 'syz.3.7622': attribute type 21 has an invalid length. [ 570.841767][T32563] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7622'. [ 570.851907][T32563] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7622'. [ 570.977999][T32570] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 570.996950][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 571.012938][T13610] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.273317][T32587] netlink: 'syz.1.7630': attribute type 1 has an invalid length. [ 571.333417][T32587] bond8: entered promiscuous mode [ 571.356020][T32587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 571.422634][T32592] bond8: (slave bridge5): making interface the new active one [ 571.462477][T32592] bridge5: entered promiscuous mode [ 571.485784][T32592] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 571.511917][ T360] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 571.551878][ T360] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 571.568437][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 571.583615][T16730] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.601790][ T360] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 571.666144][ T360] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 571.762499][T32609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7636'. [ 571.764222][T32619] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 571.803567][T32609] netlink: 'syz.3.7636': attribute type 2 has an invalid length. [ 571.850761][T32609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7636'. [ 571.853295][T32622] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:20003 [ 571.870388][T32624] x_tables: duplicate underflow at hook 1 [ 572.125278][T32631] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7643'. [ 572.188216][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 572.204886][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 572.261277][T32637] netlink: 'syz.1.7646': attribute type 3 has an invalid length. [ 572.272232][T32638] netlink: 'syz.1.7646': attribute type 3 has an invalid length. [ 572.294835][T32637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7646'. [ 572.364292][T32642] netlink: 'syz.4.7647': attribute type 1 has an invalid length. [ 572.663839][T32665] team0: No ports can be present during mode change [ 572.779923][ T372] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 572.933934][T32678] team0: Port device dummy0 removed [ 572.980003][T32678] bridge_slave_0: left allmulticast mode [ 572.992652][T32678] bridge_slave_0: left promiscuous mode [ 573.001869][T32678] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.014670][T32678] bridge_slave_1: left promiscuous mode [ 573.030145][T32678] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.061951][T32678] bond0: (slave bond_slave_0): Releasing backup interface [ 573.094016][T32678] bond0: (slave bond_slave_1): Releasing backup interface [ 573.137194][T32698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.156137][T32678] team0: Port device team_slave_0 removed [ 573.173922][T32678] team0: Port device team_slave_1 removed [ 573.182541][T32678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.191698][T32678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.217062][T32678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.230105][T32678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.991622][T32758] netlink: 'syz.2.7678': attribute type 1 has an invalid length. [ 574.014388][T32758] netlink: 'syz.2.7678': attribute type 1 has an invalid length. [ 574.035487][T32758] netlink: 'syz.2.7678': attribute type 8 has an invalid length. [ 574.071442][T32764] xt_bpf: check failed: parse error [ 574.081213][T32764] xt_bpf: check failed: parse error [ 574.165925][ T301] veth0_to_bridge: entered promiscuous mode [ 574.200560][ T300] veth0_to_bridge: left promiscuous mode [ 574.374730][ T315] bond0: option mode: unable to set because the bond device has slaves [ 574.501813][ T326] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:0 [ 574.572095][ T333] : entered promiscuous mode [ 574.653002][ T338] __nla_validate_parse: 7 callbacks suppressed [ 574.653018][ T338] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7693'. [ 574.825189][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7696'. [ 574.850462][ T360] bridge_slave_1: left promiscuous mode [ 574.872690][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.960978][ T360] bridge_slave_0: left allmulticast mode [ 574.978672][ T360] bridge_slave_0: left promiscuous mode [ 574.986444][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.356478][ T360] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 575.414965][ T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.426054][ T360] bond_slave_0: left allmulticast mode [ 575.441553][ T360] bond0 (unregistering): (slave team0): Releasing backup interface [ 575.454578][ T360] team0: left allmulticast mode [ 575.463246][ T360] team_slave_0: left allmulticast mode [ 575.469469][ T360] team_slave_1: left allmulticast mode [ 575.475562][ T360] dummy0: left allmulticast mode [ 575.482970][ T360] bond0 (unregistering): Released all slaves [ 575.504066][ T360] bond1 (unregistering): Released all slaves [ 575.521675][ T360] bond2 (unregistering): Released all slaves [ 575.574718][ T360] bond3 (unregistering): Released all slaves [ 575.597287][ T360] bond4 (unregistering): Released all slaves [ 575.617654][ T360] bond5 (unregistering): Released all slaves [ 575.638155][ T360] bond6 (unregistering): Released all slaves [ 575.661161][ T360] bond7 (unregistering): Released all slaves [ 575.679318][ T360] bond8 (unregistering): Released all slaves [ 575.712573][ T360] bond9 (unregistering): Released all slaves [ 575.742929][ T360] bond10 (unregistering): Released all slaves [ 575.763283][ T390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7707'. [ 575.834548][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7709'. [ 575.871500][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7709'. [ 575.918612][T16728] net_ratelimit: 13 callbacks suppressed [ 575.918630][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 575.939825][T16728] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.050684][ T360] : left promiscuous mode [ 576.101583][ T408] netlink: 'syz.4.7712': attribute type 2 has an invalid length. [ 576.151311][ T408] netlink: 'syz.4.7712': attribute type 6 has an invalid length. [ 576.164303][ T407] netlink: 'syz.4.7712': attribute type 2 has an invalid length. [ 576.199345][ T407] netlink: 'syz.4.7712': attribute type 6 has an invalid length. [ 576.220783][ T360] tipc: Disabling bearer [ 576.249736][ T360] tipc: Left network mode [ 576.263534][ T408] syzkaller0: entered promiscuous mode [ 576.277277][ T408] syzkaller0: entered allmulticast mode [ 576.318703][ T360] IPVS: stopping master sync thread 10913 ... [ 576.380596][ T427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7717'. [ 576.392264][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7707'. [ 576.401570][ T427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7717'. [ 576.418173][ T390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.429763][ T390] batadv0: mtu less than device minimum [ 576.436523][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.447644][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.458614][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.469539][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.480502][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.491467][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.502505][ T390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 576.630767][ T390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.689297][ T441] veth0: entered promiscuous mode [ 576.744890][ T439] veth0: left promiscuous mode [ 577.030470][ T30] audit: type=1804 audit(1781755513.665:25): pid=457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7722" name="/newroot/436/cgroup.controllers" dev="tmpfs" ino=2237 res=1 errno=0 [ 577.144105][ T30] audit: type=1800 audit(1781755513.665:26): pid=457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7722" name="cgroup.controllers" dev="tmpfs" ino=2237 res=0 errno=0 [ 577.225651][ T360] hsr_slave_0: left promiscuous mode [ 577.240430][ T360] hsr_slave_1: left promiscuous mode [ 577.369420][ T11] block nbd2: Possible stuck request ffff8880277ee000: control (read@0,1024B). Runtime 90 seconds [ 577.382503][ T11] block nbd2: Possible stuck request ffff8880277ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 577.394384][ T11] block nbd2: Possible stuck request ffff8880277ee380: control (read@2048,1024B). Runtime 90 seconds [ 577.408007][ T11] block nbd2: Possible stuck request ffff8880277ee540: control (read@3072,1024B). Runtime 90 seconds [ 577.584195][ T360] team0 (unregistering): Port device team_slave_1 removed [ 577.641467][ T360] team0 (unregistering): Port device team_slave_0 removed [ 577.718825][T16726] smc: removing ib device syz0 [ 577.733442][ T487] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7728'. [ 577.780540][ T360] team0 (unregistering): Port device dummy0 removed [ 577.812944][ T465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.832339][ T465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.840673][ T465] batman_adv: batadv0: Interface deactivated: dummy0 [ 577.850669][ T465] batman_adv: batadv0: Removing interface: dummy0 [ 577.911416][T16726] smbdirect: ib_dev[syz0] removed [ 577.984903][ T499] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7730'. [ 578.051359][ T499] 8021q: VLANs not supported on ip6_vti0 [ 578.320437][ T517] netlink: 'syz.0.7735': attribute type 2 has an invalid length. [ 578.376131][ T517] netlink: 'syz.0.7735': attribute type 8 has an invalid length. [ 579.840503][ T615] syzkaller0: entered promiscuous mode [ 579.894241][ T615] syzkaller0: entered allmulticast mode [ 580.028016][ T624] nbd: nbd2 already in use [ 580.032918][ T624] block nbd2: NBD_DISCONNECT [ 580.039848][ T624] block nbd2: Send disconnect failed -32 [ 580.045741][ T624] block nbd2: shutting down sockets [ 580.062788][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.071951][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 580.082317][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.091500][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 580.099286][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.108422][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 580.116325][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.125403][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 580.133397][ T7293] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.147608][ T7293] Buffer I/O error on dev nbd2, logical block 0, async page read [ 580.155563][ T7293] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.165976][ T7293] Buffer I/O error on dev nbd2, logical block 1, async page read [ 580.177763][ T7293] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.187938][ T7293] Buffer I/O error on dev nbd2, logical block 2, async page read [ 580.195774][ T7293] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.227783][ T7293] Buffer I/O error on dev nbd2, logical block 3, async page read [ 580.266657][ T7293] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.293928][ T7293] Buffer I/O error on dev nbd2, logical block 0, async page read [ 580.334267][ T7293] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.387440][ T7293] Buffer I/O error on dev nbd2, logical block 1, async page read [ 580.441048][ T7293] ldm_validate_partition_table(): Disk read failed. [ 580.491872][ T7293] Dev nbd2: unable to read RDB block 0 [ 580.524858][ T7293] nbd2: unable to read partition table [ 580.625337][ T7293] ldm_validate_partition_table(): Disk read failed. [ 580.673327][ T7293] Dev nbd2: unable to read RDB block 0 [ 580.724853][ T7293] nbd2: unable to read partition table [ 580.764090][ T651] netlink: 'syz.0.7764': attribute type 1 has an invalid length. [ 580.789250][ T653] netlink: 'syz.0.7764': attribute type 1 has an invalid length. [ 580.813514][ T648] tipc: Enabling of bearer rejected, failed to enable media [ 580.863958][ T654] netlink: 'syz.1.7765': attribute type 13 has an invalid length. [ 581.095463][ T657] bond4: (slave geneve3): making interface the new active one [ 581.129452][ T657] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 581.219477][ T665] : entered promiscuous mode [ 581.219500][ T657] syz.0.7764 (657) used greatest stack depth: 18224 bytes left [ 581.248549][ T372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 581.271110][ T673] net_ratelimit: 39 callbacks suppressed [ 581.271140][ T673] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 581.309844][ T372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 581.353828][ T670] netlink: 'syz.2.7770': attribute type 4 has an invalid length. [ 581.401974][ T372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 581.414701][ T372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 581.416580][ T679] netlink: 'syz.0.7772': attribute type 1 has an invalid length. [ 581.464768][ T684] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 581.513794][ T686] __nla_validate_parse: 7 callbacks suppressed [ 581.513813][ T686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7775'. [ 581.645556][ T680] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 581.692927][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7776'. [ 581.728153][ T693] vlan2: entered promiscuous mode [ 581.733660][ T693] geneve1: entered promiscuous mode [ 581.740393][ T693] vlan2: entered allmulticast mode [ 581.745880][ T693] geneve1: entered allmulticast mode [ 581.798134][ T360] IPVS: stop unused estimator thread 0... [ 581.866096][ T703] netlink: 'syz.2.7778': attribute type 11 has an invalid length. [ 581.931842][ T710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7781'. [ 582.008331][ T623] Bluetooth: hci3: command 0x0401 tx timeout [ 582.014974][ T623] Bluetooth: hci4: command 0x0405 tx timeout [ 582.103939][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7783'. [ 582.232323][ T734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7784'. [ 582.831056][ T773] netlink: 'syz.4.7799': attribute type 1 has an invalid length. [ 582.863032][ T773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7799'. [ 583.055142][ T780] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7801'. [ 583.163507][ T784] netlink: 'syz.1.7803': attribute type 13 has an invalid length. [ 583.172531][ T784] veth1_macvtap: left promiscuous mode [ 583.179129][ T784] macsec0: entered allmulticast mode [ 583.396208][ T796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7808'. [ 583.625336][ T822] netlink: 'syz.1.7813': attribute type 2 has an invalid length. [ 583.749535][ T826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7814'. [ 583.831425][ T830] vlan2: entered allmulticast mode [ 583.843608][ T830] bond0: entered allmulticast mode [ 583.855412][ T830] bond_slave_0: entered allmulticast mode [ 583.875477][ T830] bond_slave_1: entered allmulticast mode [ 583.931012][ T841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7820'. [ 584.025390][ T844] netlink: 'syz.1.7821': attribute type 7 has an invalid length. [ 584.058639][ T844] netlink: 'syz.1.7821': attribute type 8 has an invalid length. [ 584.081844][ T850] netlink: 'syz.2.7823': attribute type 12 has an invalid length. [ 584.101122][ T850] netlink: 'syz.2.7823': attribute type 12 has an invalid length. [ 584.223700][ T861] vlan4: entered promiscuous mode [ 584.242192][ T861] bridge0: entered promiscuous mode [ 584.309483][ T863] macvlan3: entered allmulticast mode [ 584.324633][ T863] dummy0: entered allmulticast mode [ 584.605963][ T886] sctp: [Deprecated]: syz.2.7833 (pid 886) Use of int in max_burst socket option. [ 584.605963][ T886] Use struct sctp_assoc_value instead [ 584.653678][ T886] tipc: Started in network mode [ 584.665795][ T886] tipc: Node identity 080211, cluster identity 4711 [ 584.685065][ T886] tipc: Enabled bearer , priority 0 [ 584.714019][ T900] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 584.725224][ T900] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 584.795159][ T901] x_tables: duplicate underflow at hook 2 [ 584.864253][ T909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.340246][ T881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.806588][ T5750] tipc: Node number set to 134353152 [ 588.227384][ T945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.413669][ T1005] netlink: 'syz.3.7861': attribute type 1 has an invalid length. [ 588.435583][ T1007] __nla_validate_parse: 7 callbacks suppressed [ 588.435607][ T1007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7862'. [ 588.471050][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7862'. [ 588.501849][ T1011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7863'. [ 588.523295][ T1005] 8021q: adding VLAN 0 to HW filter on device bond9 [ 588.535712][ T1018] bond9: (slave dummy0): making interface the new active one [ 588.545376][ T1018] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 588.558459][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7864'. [ 588.573022][ T1005] netlink: 'syz.3.7861': attribute type 10 has an invalid length. [ 588.583381][ T1012] bond9: (slave veth9): Enslaving as an active interface with a down link [ 588.586533][ T1005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7861'. [ 588.596107][ T1021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7865'. [ 588.613428][ T1008] vlan5: entered allmulticast mode [ 588.620065][ T1008] bond0: entered allmulticast mode [ 588.625507][ T1008] bond_slave_0: entered allmulticast mode [ 588.648309][ T1005] dummy0: entered promiscuous mode [ 588.690647][ T1005] bond9: (slave dummy0): Releasing active interface [ 588.718179][ T1005] bond9: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 589.089242][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7876'. [ 589.122216][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7876'. [ 589.351929][ T1105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.359320][ T1105] IPv6: NLM_F_CREATE should be set when creating new route [ 589.366610][ T1105] IPv6: NLM_F_CREATE should be set when creating new route [ 589.382652][ T1099] tipc: Enabling of bearer rejected, already enabled [ 589.390425][ T1105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.414994][ T1101] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 589.442272][ T1101] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 589.467210][ T1111] netlink: 'syz.3.7885': attribute type 83 has an invalid length. [ 589.499237][ T1118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7886'. [ 589.515573][ T1099] can: request_module (can-proto-0) failed. [ 589.554803][ T1121] netlink: 'syz.3.7887': attribute type 1 has an invalid length. [ 589.585344][ T1121] 8021q: adding VLAN 0 to HW filter on device bond10 [ 589.612145][ T1124] syzkaller0: entered promiscuous mode [ 589.618491][ T1124] syzkaller0: entered allmulticast mode [ 589.673290][ T1132] netlink: 'syz.3.7889': attribute type 11 has an invalid length. [ 589.808441][ T1132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.829384][ T1132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.840514][ T1132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 589.851384][ T1132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.861760][ T1132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.861975][ T1136] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7889'. [ 589.904451][ T1133] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 589.912725][ T1133] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 589.933148][ T1137] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 589.967099][ T372] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 589.981146][ T372] bond8: (slave veth7): making interface the new active one [ 589.992818][ T372] bond8: active interface up! [ 590.005250][ T1139] tunl0: entered promiscuous mode [ 590.014945][ T1139] netlink: 'syz.3.7891': attribute type 4 has an invalid length. [ 590.037687][T13610] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 590.049080][T13610] bond9: (slave veth9): making interface the new active one [ 590.058526][T13610] bond9: active interface up! [ 590.122683][ T1141] bond6: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 590.135116][ T1141] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 590.150656][ T1141] bond6 (unregistering): Released all slaves [ 590.704789][ T1188] netlink: 'syz.1.7904': attribute type 1 has an invalid length. [ 590.739824][ T1188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.833984][ T1188] vlan6: entered allmulticast mode [ 590.841847][ T1188] veth0_to_bond: entered allmulticast mode [ 590.854444][ T1188] bond9: (slave vlan6): making interface the new active one [ 590.865407][ T1188] bond9: (slave vlan6): Enslaving as an active interface with an up link [ 590.884929][ T1196] netlink: 'syz.4.7909': attribute type 2 has an invalid length. [ 591.050977][ T1202] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 591.062298][ T1202] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 591.305077][ T1212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.314846][ T1212] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 591.333347][ T1212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 591.343485][ T1212] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 591.360162][ T1212] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 591.370435][ T1212] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 591.388868][ T1212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 591.398089][ T1212] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 591.431750][ T1212] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 591.443841][ T1212] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 591.452364][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: syz.1.7914 Not tainted syzkaller #0 PREEMPT(full) [ 591.461663][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.471763][ T1212] RIP: 0010:klist_remove+0x156/0x340 [ 591.477152][ T1212] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 4d 12 93 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2e 12 93 f6 49 8b 44 24 58 48 89 44 24 08 [ 591.496759][ T1212] RSP: 0018:ffffc90004f47820 EFLAGS: 00010202 [ 591.502838][ T1212] RAX: 000000000000000b RBX: ffff888056479f00 RCX: 0000000000000000 [ 591.510799][ T1212] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 591.518766][ T1212] RBP: ffffc90004f47920 R08: ffffffff90178ea3 R09: 1ffffffff202f1d4 [ 591.526732][ T1212] R10: dffffc0000000000 R11: fffffbfff202f1d5 R12: 0000000000000000 [ 591.534699][ T1212] R13: 1ffff1100f025e8c R14: ffff88807812f460 R15: dffffc0000000000 [ 591.542762][ T1212] FS: 00007f4540fee6c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 591.551703][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.558288][ T1212] CR2: 0000001b2e363fff CR3: 000000007b20a000 CR4: 00000000003526f0 [ 591.566263][ T1212] Call Trace: [ 591.569542][ T1212] [ 591.572473][ T1212] ? __pfx_klist_remove+0x10/0x10 [ 591.577506][ T1212] ? kobject_move+0x5e2/0x720 [ 591.582179][ T1212] ? __pfx_kobject_move+0x10/0x10 [ 591.587199][ T1212] ? do_raw_spin_unlock+0xf5/0x210 [ 591.592317][ T1212] ? get_device_parent+0x366/0x3a0 [ 591.597551][ T1212] device_move+0x18e/0x720 [ 591.602362][ T1212] hci_conn_del_sysfs+0xb8/0x1a0 [ 591.607402][ T1212] hci_conn_del+0xc3d/0x1200 [ 591.612071][ T1212] hci_conn_hash_flush+0x189/0x260 [ 591.617185][ T1212] hci_dev_close_sync+0x7fc/0x10a0 [ 591.622380][ T1212] ? __pfx___mutex_lock+0x10/0x10 [ 591.627476][ T1212] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 591.633021][ T1212] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.638061][ T1212] ? rcu_is_watching+0x15/0xb0 [ 591.643238][ T1212] hci_dev_do_close+0x30/0xc0 [ 591.648001][ T1212] hci_rfkill_set_block+0x1f4/0x290 [ 591.653204][ T1212] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 591.658930][ T1212] rfkill_set_block+0x19f/0x4d0 [ 591.664224][ T1212] rfkill_fop_write+0x43b/0x560 [ 591.669132][ T1212] ? apparmor_file_permission+0x1f4/0x300 [ 591.674947][ T1212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 591.680330][ T1212] ? security_file_permission+0x20/0x260 [ 591.686039][ T1212] ? rw_verify_area+0x203/0x4c0 [ 591.691086][ T1212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 591.696504][ T1212] vfs_write+0x296/0xba0 [ 591.701943][ T1212] ? __pfx_vfs_write+0x10/0x10 [ 591.706736][ T1212] ? lock_release+0x4b/0x3c0 [ 591.711626][ T1212] ? __fget_files+0x2a/0x420 [ 591.716402][ T1212] ? __fget_files+0x3a2/0x420 [ 591.721205][ T1212] ? __fget_files+0x2a/0x420 [ 591.725825][ T1212] ksys_write+0x150/0x270 [ 591.730242][ T1212] ? __pfx_ksys_write+0x10/0x10 [ 591.735366][ T1212] ? rcu_is_watching+0x15/0xb0 [ 591.740235][ T1212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.746320][ T1212] do_syscall_64+0x174/0x580 [ 591.750968][ T1212] ? clear_bhb_loop+0x40/0x90 [ 591.756693][ T1212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.762595][ T1212] RIP: 0033:0x7f4542d9ce59 [ 591.767785][ T1212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.787392][ T1212] RSP: 002b:00007f4540fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.795904][ T1212] RAX: ffffffffffffffda RBX: 00007f4543015fa0 RCX: 00007f4542d9ce59 [ 591.803883][ T1212] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 591.812384][ T1212] RBP: 00007f4542e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 591.820376][ T1212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.828357][ T1212] R13: 00007f4543016038 R14: 00007f4543015fa0 R15: 00007ffe71a91f08 [ 591.836351][ T1212] [ 591.839400][ T1212] Modules linked in: [ 591.848046][ T1212] ---[ end trace 0000000000000000 ]--- [ 591.913794][ T1212] RIP: 0010:klist_remove+0x156/0x340 [ 591.935809][ T1212] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 4d 12 93 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2e 12 93 f6 49 8b 44 24 58 48 89 44 24 08 [ 591.961070][ T1212] RSP: 0018:ffffc90004f47820 EFLAGS: 00010202 [ 591.981419][ T1212] RAX: 000000000000000b RBX: ffff888056479f00 RCX: 0000000000000000 [ 591.992070][ T1212] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 592.013104][ T1212] RBP: ffffc90004f47920 R08: ffffffff90178ea3 R09: 1ffffffff202f1d4 [ 592.025299][ T1212] R10: dffffc0000000000 R11: fffffbfff202f1d5 R12: 0000000000000000 [ 592.035284][ T1212] R13: 1ffff1100f025e8c R14: ffff88807812f460 R15: dffffc0000000000 [ 592.049669][ T1212] FS: 00007f4540fee6c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 592.060084][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.070636][ T1212] CR2: 00007faf1f3ec4b8 CR3: 000000007b20a000 CR4: 00000000003526f0 [ 592.082788][ T1212] Kernel panic - not syncing: Fatal exception [ 592.089670][ T1212] Kernel Offset: disabled [ 592.094096][ T1212] Rebooting in 86400 seconds..