last executing test programs: 6.489969373s ago: executing program 3 (id=4361): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r6, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000440)={@local, r8}, 0x14) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf250f0000000e0001006e657464657673696d000000e5e6cfb8ab59faf2ce90a40f0002006e657464657673696d3000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ef1adb02bd286dd606403a60000320000007c94ab435dbffdcd000000000200ff020000000000000000000000000001"], 0x0) 6.434883448s ago: executing program 0 (id=4363): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0xa, 0x80000, 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="f8d1c77d6dcbd92e9497d9ab1af5a50c00823b80a869df40c71b29ba", 0x1c}, {&(0x7f00000021c0)="28564cac5c4fd196b78495035d77cf067cfb87ad16e60bb969ff4930b0682e1f6b943c89e148f96543641d698430d4c66b705c5d6ffa8c041665f822468a31bd359abf8afad40bf978862619e145422848be54", 0x53}], 0x2}}, {{&(0x7f0000003580)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x8000}}}, 0x80, &(0x7f0000003780)=[{0x0}], 0x1}}], 0x2, 0x4000004) 6.288721181s ago: executing program 3 (id=4366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xa, 0x1, 0xe1, 0x5}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x100000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x3}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000340)=[r3, r3, r3, r3, r3], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) 6.093683342s ago: executing program 3 (id=4369): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa}, {0x9, 0x5}, {0x4, 0x4}, {0xa, 0x5}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x61, 0x5f, 0x0, 0x5f, 0x0]}}, &(0x7f0000000940)=""/151, 0x7b, 0x97, 0x0, 0x7e51}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) unshare(0x6a040000) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r5, 0x1, 0x70bd27, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000007c0)={0x2, 0x4e24, @empty}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020008207b8af8ff00000000bfa2000000000000070200632e1895ffb703000008000000b70400000200000085000000a600000095000000000000002c4f2f9f9dc80605a97d1dca2e1ecad5b90193db7bb561f018f61efa575d583d23f3e37a5dfd19e871b376fc8fb92d91bf49537f683361dab9faef232652d66d6e20fea00a5d765208820e6b87f2d9c0cfd36c11f8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 6.053633586s ago: executing program 0 (id=4370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000300000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x4, 0x4) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000380)=0x8007, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x23000, 0x800, 0x2, 0x3}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000940000000010900010073797a300000000800000000fb5477ec227b481fb129cef175000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.843350427s ago: executing program 0 (id=4373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) unshare(0x2c020400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x41) unshare(0x22020400) r5 = socket(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000340), &(0x7f00000001c0)=@tcp=r5}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000) 5.621491668s ago: executing program 0 (id=4375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4000084", @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000400930008003500000000000800350001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x4, [{0x2, 0x1}, {0x16, 0x1}, {0xc}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2a) 3.741386058s ago: executing program 2 (id=4378): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 3.697919566s ago: executing program 1 (id=4379): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x482b, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x3, 0x2, 0xbad, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f00000000c0)=""/44, &(0x7f0000000080)=0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000800) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) socket$nl_route(0x10, 0x3, 0x0) 3.652388978s ago: executing program 1 (id=4380): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) 3.569876075s ago: executing program 2 (id=4381): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x10f8, 0x8}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}, 0x800) sendmsg$nl_xfrm(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) close(0x3) 3.38259396s ago: executing program 4 (id=4383): socket(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x21, 0xa, 0x2, &(0x7f0000002100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000040003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, r10, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x7a, 0x2}, {0xf, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x8, 0x2}, {0xe8, 0x6}, {0x3, 0x4}, {0x8, 0x5}, {0x9}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x1}], "7ecd4163b8fccf09"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000240)=0x322) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r12, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) sendto$inet(r12, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 3.374997449s ago: executing program 1 (id=4384): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "57e8270200", "4b84af79879011f7f4c8d9c2b007f8bb", "9007e8dc", "9ae8aacfe19f99c3"}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000021020000000400000000000065ae879cb5", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 3.093849939s ago: executing program 2 (id=4385): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 3.09292349s ago: executing program 3 (id=4386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa) bind$bt_hci(r1, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x69) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x1, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x1, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000940)=[r5, r5, r5], &(0x7f0000000980)=[{0x5, 0x2, 0x2, 0x6}]}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x29, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x445d4750}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, 0x0, 0xf7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440), &(0x7f00000007c0)=[{0x4, 0x2, 0x8, 0x6}, {0x5, 0x3, 0x5, 0x2}, {0x0, 0x5, 0x9, 0x3}], 0x10, 0x7}, 0x94) 2.922180164s ago: executing program 4 (id=4387): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000000)=@raw=[@ringbuf_query, @tail_call, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x0, 0x5, 0x1, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x26, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x20000802) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001e00200027bd7000fe25070000000000", @ANYRES32=r3, @ANYBLOB="984002000082000008001d00f9ffffff05002100810000000a0001000180c20000030000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44010) r4 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r4, 0x6a, 0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x600002, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) close(r7) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000001c0)={0x40000008}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.72991651s ago: executing program 4 (id=4388): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1, 0xffffffff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x24040004) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.589796768s ago: executing program 1 (id=4389): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) (async, rerun: 64) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x103) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) (rerun: 32) 2.5505836s ago: executing program 1 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmmsg$inet6(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="46349abfde0b083d41ae6bd0fdee4ffdd882837d99ddacc5ceb654eae2463bf3f97be6fb9dc562bbd2aaf796383247b5fa3f277fb6d1b88bb8416c91bc127104e364245cae48987ff5bed3899de5c2eb1a29457e8467b0d049f7c032e7d69947df2a29ed45b08780efa769555187717665a54fc506554b441593aa958edbdd7ff20bea6ea9723c6dd9bfcbaee7546b09b3145bbd68ed929b4ff65aa103db34ffcd2b33f65eb9a6ed05cb1530a74df4da3bb6657c5424239ba1fbd0df732e2cee7617f4f28d8691efedeb3893842b7bfe67db6dcbc25d50a9", 0xd8}, {&(0x7f0000000180)="e3f6de0675201e6bc71cc3f128d90b392accf3320cefb71f5c5a49b70a2884baf435f1e6e37dde0df89bab990cbb85a21fd9731db609d5cb11a4", 0x3a}], 0x2, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dstopts={{0x138, 0x29, 0x37, {0xc, 0x23, '\x00', [@generic={0x6, 0x78, "034c9bc460837d0f53ff7d8a6bfda270a83db2e93bbfab54f753befc95a9515008e6321ccab51a1d232170ceb6915c3c88188133b60cf85cff88ec20e12275f3ce6c64899f31e2edd55cc1bbb2f62ec0226fbb932057eff8f87b1bbb2e1a14ef6fdc4ea8a00973f542cf3028992ee1a971f51f1631c67eb9"}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0xa5a1, [0x0, 0x40, 0xffffffffffff6319, 0x7fff, 0x1]}}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x556, [0x9, 0x10]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @private1}, @pad1]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x1e, 0x1f, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x5, [0x8000000000000001, 0x8, 0x1283, 0x10]}}, @generic={0xf, 0xb5, "2ff3a847c84f4241763a5f973899ac7facd4dcddec10e7f13b5a0b6385ee200fc0cb8f13dfba21f62ef985c24d46e1ce2713da9d5cef6c31c64572dcd9840e8e0871ac36563fd840731ed8995c8ab58e8cbf117e384c1d25e72895c7477ee0b5f214b3582728f65cd0e67bbe3feca6319565e6d159615ee6ab1ea36dc708c1db2c9705bfe83dd54d10399e390669827f1fbc5315ab6232848cadf4424d3d558fa27a9d7207f9fed4c4e975a01d8dd65e88de31605a"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @pad1]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x5, 0x0, [@empty, @local, @loopback, @remote, @empty]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x1e5, 0x2, 0x1, 0x5, 0x0, [@local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf73f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x350}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x1, @private2, 0xfffffffe}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="0345a853a1a98b319149c28130d90298fa06141ddf93f1c17c33ca2d90af48b123361062871f7f39ef9c42b3ea68efaf6b8370f0e040aa2913dcdfd7bdc7d8c712b8dadaa0c6c5e886dd01914323c97d8e22c6c6e158f9686e6829973181843dae39d0438488b1db259621ea851c6d7d29d05b46e4fc1915", 0x78}, {&(0x7f0000000a40)="2e5f7889f4652e0da57a904af3db04a250a984ae3214f22e410386fb92418a416d6c818931a24ab0e5f11beaf4fdebe791aefd5e70ee66ac06ef7819a434a82b7f2760baa96483119858de7b658c26b77e01f352bd7ac0355578c20683369dd0eb1f7977aec2ec", 0x67}], 0x2, &(0x7f0000000b40)=[@dstopts_2292={{0xc0, 0x29, 0x4, {0x8, 0x14, '\x00', [@generic={0x9, 0x86, "fa465aab734ff414bbb7003d5d4df4aae3aed1175d12accd3c8c4071e8247a5491319711448aacf632f9858e328ca24edc6c21d568fcdbcb02c63c2ff485ff14fd736e11ba93fb00c8a20b78af7afa9650aa0236d822989f2d1d9e96ffdbed5637c90df88b2df8b9db1551b2d2ef3a591c05b9986d8747018521e71011fcc0b80990a1ad9803"}, @ra={0x5, 0x2, 0x2}, @pad1, @enc_lim={0x4, 0x1, 0xfc}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffd}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x89, 0x1e, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x820b, [0xffffffff, 0x8]}}, @generic={0x6, 0xce, "038c00ea8bd9b400ee4dde8ea949490dfdbe428796e36cbeae06baa92a5fe87212672a5344f5c38b157bec68d017ad3313bab79db35330b26194fec70573cdb35f19ee774c7416e19d69aadce349f22281ff8a48b7571bc7bdc5cff9cc4499ab8e2cb3f5c0a983d76bd631080c4c5c96a6cc2a45fc2aa39c570fb0ebf3c0065a395ccd5763b0befa28fe552bcbdedfbe890f275341b637a1933256131beee68e051799458340f8e0543e8ad5f079e9b418eaacd9035738b0f77b15a051759235699833480d223f290fdb9d35466f"}, @generic={0x2, 0x3, "cd09c3"}, @pad1]}}}, @hopopts={{0x68, 0x29, 0x36, {0xf98d3bc66b87ca65, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x0, 0xa, 0xf3, 0x8000, [0x0, 0xff, 0x101, 0xcb, 0x6]}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x33, 0x7, '\x00', [@generic={0xfc, 0x3b, "5efc08a1e1be4c7b096c21447c1d8186f94986a8bc77a93d832ebd445d014d99444b9c5592e9ae9622cb12cf07542452648efa429d5207637152dc"}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}], 0x2b8}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e00)="742b162145deee0ccfd8f76bd60d558f166c15d75432b812e1f77e211a3fb0dee8dd5df719a59c4e4a3f8696dffbe65d1cfd256408b8f04502e0577a27ffee3b149915728ff199c836cb23736f434a764f27dfc459865f78f06b533cce645d1e325d0a96ae3aca6f98360e12534a0790387953770cf9f22605650976a505f3a8aa2f6befad2657eff58def250741f5d82856ade64d07e5c88a757a97ddd96d276f9bc7ca869191", 0xa7}, {&(0x7f0000000ec0)="2b451a239a1493fac84198090300d4b39cf3ae6cb64b6f71fc423773feb36030b6d475cdfb0f96cf9705d21d92749b3bf014722f66325461a9e168ec13f68417e364265812b9922dd85352dcd8d0469b51706f111fb2faf1c60e5e00fccd7d5699bd58f4289eeb6aeea137", 0x6b}, {&(0x7f0000000f40)="dce6852b7f91c5f2426a9cc838e8307f1754c53180332d272a5df33f94824f78329332a817df862f157319ec22ce88ea114779030954b3e4fcbd1cecdd6523a2d48228b91a3c6d8f7379ca7c1b69364b6bb171ae762b", 0x56}, {&(0x7f0000000fc0)="e31b04bead8ff53b7716cd9b63725bd2eeb0f40a3f4f0541f44c977cbc9e382cea274b44ebb02de06f77a33ef1edcedb808e5eddc91c8619ff07af01760cb53492dbf0da622ec747f0b3fd9d2f607d1760048b5b9c76cadc2cb90be67c298e7f95122a0ff971d1c770e644f75ebbf99f7763067d126006691231b9709dde49f08e46", 0x82}], 0x4}}, {{&(0x7f00000010c0)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c2}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001100)="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", 0xff}], 0x1}}], 0x4, 0x1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884) 974.646874ms ago: executing program 2 (id=4391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001400010000000000fcdbdf25021f49cb", @ANYRES32=r2, @ANYBLOB="08100200e000000114000300000000000000000000000000000000000800090008000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000004a0000022cbd7000fbdbdf250a0020007b7a6c6d1c7c9662711f0890dca83baa0924f8785987d1d2acaf940a0486d4ffa86396554acccf52bd5a87261dc9afadaa37437b8f7842173f310b690b8510a805fd37cffacc29e8c39144ee50aeab60fa55ad8160ab1b99f414820d63505fb3d0635b01b7b01b1b69a5d03fdd54e4f4110dc01f24b0497483027a693cd4a310ba875a4f9cc502b692c88372c828f3a2403e181d461496289d225259bfd361409337df0c4bdd83e232db2715a3f95f6acff62686634c432446508495f9bcaf09d92b4c2ee79d7756312e11ae7806245cd1271988f115be47a77d1a778675", @ANYRES32=r2, @ANYBLOB="7f0000001400010000000000000000000000ffffac1414aa140001002001000000000000000000000000000014000100fc01000000000000000000000000000114000100fc010000000000000000000000000000080002000100000014000100fc020000000000000000000000000000080002000100000014000100fc01000000000000000000000000000114000100fc0100000000000000000000000000010800020006000000"], 0xc0}}, 0x0) 849.785578ms ago: executing program 3 (id=4392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$FIONCLEX(r0, 0x5450) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee8, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='xdp_cpumap_kthread\x00', r2}, 0xff67) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000009000000000000000000e000b16ce22100019d00b5030000009078006400d2"], 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000280)) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) 752.172011ms ago: executing program 0 (id=4393): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6b3bad3b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xa3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xe000, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x1], &(0x7f0000000540)=[{0x5, 0x1, 0x9, 0x6}, {0x4, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xc, 0xa}, {0x5, 0x1, 0x5, 0x5}, {0x2, 0x4, 0x2, 0xc}, {0x0, 0x5, 0x3, 0x7}], 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x50, 0x2d, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x792b73a133056528, 0xe}, {0xfffd, 0x8}, {0xfff3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x50}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@deltaction={0x23c, 0x31, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d0c}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x23c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r4, 0x29, 0x48, &(0x7f0000000000)=@srh={0x3a, 0x8, 0x4, 0x4, 0xf7, 0x40, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, 0x48) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 729.94371ms ago: executing program 1 (id=4394): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) close(r4) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00000000d90690780a010101ac1414aa0704040300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000060000000000"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="08000800070006000020140081004e0a0fe0006400000b629078ac14143aac1414168811f160f08cb8c36c446bc93f957cc9a48613000000030605aaddce01c8575624c13ad23297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b75a9ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c9eaacb5793498be490de32baba49172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19411e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb97800763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce0e8f238399a1807f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f60d04b28b11c89868bc645b8d1ecb127e0c430d4436d1e5a66498aa6ca5b565e7bb5b1c52a876650700625f9c0bdf2aaa47cce"], 0xfee) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000000400000012000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ppoll(&(0x7f00000000c0)=[{r2, 0x1010}, {r9, 0x3100}, {r2}, {r5, 0x10}], 0x4, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) socket(0x8, 0x3, 0x0) 671.077385ms ago: executing program 4 (id=4395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x1, 0xfff1}, {0x9, 0xfff3}, {0x0, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xd6c, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0xb14684ae6286b645) 553.447336ms ago: executing program 2 (id=4396): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x7, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xd, 0x6, 0x0, 0x8, 0xfffffffffffffff0}, @exit, @alu={0x4, 0x0, 0x6, 0xb, 0x2, 0x30, 0x1}, @jmp={0x5, 0x0, 0x9, 0x8, 0x3, 0x20}]}, &(0x7f00000008c0)='GPL\x00', 0x3, 0xe8, &(0x7f0000000900)=""/232, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x6, 0xd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000ac0)=[{0x2, 0x5, 0x4, 0xb}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0xffff}, 0x94) socket$netlink(0x10, 0x3, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r4 = socket(0x2b, 0x80801, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x511000, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0xd, 0x6, 0x0, 0x4, 0x1, 0x10f, [{0x9, 0x1}, {0x8, 0x4, 0x7fff}, {0x1, 0x3, 0x6}, {0x7, 0x3, 0x2400}, {0xd, 0x2, 0x4}, {0x2, 0x4, 0xfffffff2}]}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0xe, 0x22e14ac5}, {0x3, 0x7ff}, {0xf, 0x3}, {0x3, 0x27}, {0xd}, {0x7, 0x8}, {0x3, 0x3}, {0x10, 0x5}, {0x0, 0x1}]}, @volatile={0x6}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000400)=""/231, 0xe8, 0xe7, 0x1, 0x80000000, 0x10000}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{0x2d, 0x0, 0x0, 0x7ffff021}, {0x6, 0xfe}]}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r8, 0xe859, 0x6, "fcfcdb32f2ef"}, 0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000c80)={r8, @in={{0x2, 0x4e23, @empty}}, 0x7ead, 0xd}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) pipe(&(0x7f0000000740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x4, 0x0, 0x8, 0x8, 0xfffffffffffffffc}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000240)='GPL\x00', 0xe75, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r9], &(0x7f0000000600)=[{0x3, 0x5, 0x8, 0x3}, {0x5, 0x2, 0xa, 0x9}, {0x5, 0x3, 0x5, 0x3}, {0x1, 0x2, 0xf}, {0x5, 0x5, 0x9, 0x8}], 0x10, 0x9}, 0x94) 551.99552ms ago: executing program 0 (id=4397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40804) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0xfe96, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000065751f1bf2e952ee4d83881b62fb9966a6672367c4fa0d24d686d8108a4060f63f6d997b650300da123551e05f2d367f4f13136c000000000000003c8dff7500136a41ed3a4ad402", @ANYRES16=r0, @ANYBLOB="2503000000000000000016000000b0534441372bacce4749401e84e3fb437deb59f37bfab2649c12056aed1f04fab972dddfa14c3a64f8100526436a48dcae00a8d148604a8ab00e7a05596fea91aefc024e57445492ce0a6b51fbb883629929ebba78f88d0131ef0dfbdedee1a008cf20931109e61a0f3eaf331764be9d7edfaf2daedf3809fe6f13e5a364d44f60a29fa9f8"], 0x14}}, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000003c0)=@req={0x7fffffff, 0x2, 0x2, 0x1}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000100)={r2}) 464.342574ms ago: executing program 4 (id=4398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r0, 0x0, 0x7ff, &(0x7f0000000080)="e1e5116f621f7380b848a8262f74ddc29a9785ac61ff91b07ca71517bc7d566d000483f9b28e7b24f345b593ad33dc8a6acf4c3571702337d0db4fc5a6ac0077d90268b9ffcb1c8d3004d39ad1a9d9f76395c1a6206865f7b919bb3f5002e26b2ba1fc6533189046d6d287fc51fb0c5fb85d34f02fc99f79d0306e5d51d853b8dfe79671f55817f3a298685d692ca698f67bb78f1aa3531f403abef45e45d26af90739c68ee1", 0xa6) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@local, @in6=@empty}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x20000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010100000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a002400010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socketpair(0x25, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x70bd22, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0xfffffffffffffd50}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x54, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xffffffff, 0x67}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x9, 0x3}, {0x7f, 0x6}, {0x7, 0x2}, {}, {0x3, 0x3}, {0x7f, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x84, 0x6}, {0x8, 0x4}, {0x81, 0x2}, {0x1a, 0x2}, {0x92, 0x3}, {0x3, 0x7}, {0x10, 0x6}, {0x7, 0x7}], "8286914dd3c71b71"}}]}, 0x54}, 0x1, 0x0, 0x0, 0xb9a192fb2d336de2}, 0x40c0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0xa16, 0x2, 0x2, 0x1, 0x7, 0x9}, &(0x7f0000000180)=0x20) 170.567225ms ago: executing program 3 (id=4399): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r5, 0x5c2a7000) sendmsg$nl_route(r5, 0x0, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'vxcan1\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4d, 0x404, 0x8b, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x99, [0x786c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd], [0x101, 0x3, 0x3]}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.638122ms ago: executing program 4 (id=4400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000078d4e080000000000000500016e6ffd01e87d0006000000ae7bd625412361f5422c3bf28aa408ee505db8be94279658a8ed86d45f2fec2ec5c32e68769daf742ef90d6b8c930cf885025933450f20a12ec15ad35506ce7b81aaa3477de271a5badfc90bf9cb7167e4"], 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept(r6, 0x0, &(0x7f0000000300)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x8, 0x5, 0x80, 0x81}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x118) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 0s ago: executing program 2 (id=4401): syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="7e010000000000b7"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "a0bb45c5841ae49b3e7ff23772a41a9b2073242c52c759baa4f0cb2bba63f977017208204db88aef81e990fe7cc806190af5d73f5a30b710a6adc804614f17cb"}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="e4", 0x1}], 0x1, &(0x7f0000004000)=[{0x10, 0x1, 0x4}], 0x10}}], 0x2, 0x4004044) r3 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x0, 0xd, 0x5}) write$tun(r4, &(0x7f0000000880)={@void, @void, @ipv6=@generic={0x8, 0x6, "1d2621", 0x1c5, 0x21, 0xff, @dev={0xfe, 0x80, '\x00', 0x13}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @loopback}]}, @srh={0xff, 0xc, 0x4, 0x6, 0x6, 0x10, 0x6, [@remote, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}, @routing={0x62, 0xc, 0x2, 0xf, 0x0, [@loopback, @local, @local, @local, @empty, @private1]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x3, 0x48, 0x7, [@remote]}], "7a1a67ca6ddfc246aa19280d209f778387eda429a5381198c54470febbd6e9316d19f37d4aabbf093f0cac984ac4b7a6f366b8055eced3efe5b79b2af047bebf3b03fb31f60bd81b0b3a2eb5a6dc6f6f3ce43acba23f6388099104c97fcf813a8039b8e131597c171a9c4df7813dedff99d2389b222bb41a1d4458f00949d15beb802a501b05f78248f019b03042dd1b924c9e3e39d16ceecb61ee68bc97d7f194b1e15b7b9f5b0139e7807c6a54251e49ae9b8e0f51182c8686600445"}}}, 0x1ed) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@rand_addr=0x64010101, @in6=@private1, 0x0, 0x0, 0x4ea4, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x40081}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x4, 0x81, 0xb8}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.2918'. [ 466.480156][T16260] siw: device registration error -23 [ 466.873531][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2919'. [ 467.179259][T16283] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 467.640367][T16226] chnl_net:caif_netlink_parms(): no params data found [ 467.924676][ T5839] Bluetooth: hci5: command tx timeout [ 467.990534][T16226] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.034341][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.074345][T16226] bridge_slave_0: entered allmulticast mode [ 468.082701][T16226] bridge_slave_0: entered promiscuous mode [ 468.106196][ T6110] : left promiscuous mode [ 468.132946][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2926'. [ 468.209167][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.244845][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.252189][T16226] bridge_slave_1: entered allmulticast mode [ 468.276550][T16226] bridge_slave_1: entered promiscuous mode [ 468.294734][ T6110] tipc: Left network mode [ 468.389688][T16226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.391160][T16312] netlink: 'syz.3.2925': attribute type 1 has an invalid length. [ 468.410301][T16308] netlink: 'syz.4.2927': attribute type 32 has an invalid length. [ 468.411337][T16312] netlink: 'syz.3.2925': attribute type 1 has an invalid length. [ 468.451074][T16312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2925'. [ 468.471727][T16226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.610980][T16226] team0: Port device team_slave_0 added [ 468.644179][T16226] team0: Port device team_slave_1 added [ 468.779152][T16326] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2932'. [ 468.847952][T16226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.880028][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.928949][T16226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.951452][T16337] Bluetooth: hci1: too big key_count value 32778 [ 468.995104][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 469.026401][T16226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.047445][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.105589][T16226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.159277][T16337] bond0: (slave bond_slave_1): Releasing backup interface [ 469.169080][T16337] bond_slave_1 (unregistering): left promiscuous mode [ 469.223297][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2937'. [ 469.651972][T16226] hsr_slave_0: entered promiscuous mode [ 469.705590][T16226] hsr_slave_1: entered promiscuous mode [ 469.712410][T16226] debugfs: 'hsr0' already exists in 'hsr' [ 469.735844][T16226] Cannot create hsr debugfs directory [ 470.004820][ T5839] Bluetooth: hci5: command tx timeout [ 470.360542][ T6110] hsr_slave_0: left promiscuous mode [ 470.368416][ T6110] hsr_slave_1: left promiscuous mode [ 470.393390][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'. [ 471.122440][ T9540] smc: removing ib device syz2 [ 471.291421][T16417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2955'. [ 471.439025][T16410] wg1 speed is unknown, defaulting to 1000 [ 471.558551][T16419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2955'. [ 471.636552][T16420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2955'. [ 471.656283][T16420] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2955'. [ 471.995364][T16433] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.2960'. [ 472.084148][ T5839] Bluetooth: hci5: command tx timeout [ 472.183802][T16430] wg1 speed is unknown, defaulting to 1000 [ 472.663412][T16445] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 472.937151][T16226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.951526][T16453] syzkaller0: entered promiscuous mode [ 472.960694][T16453] syzkaller0: entered allmulticast mode [ 472.970584][T16226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.021904][T16226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.092450][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.176811][T16226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.235230][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.245940][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.255068][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.370001][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.380231][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.440336][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.465946][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.484131][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.620308][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 473.909933][T16476] bridge0: port 3(erspan0) entered blocking state [ 473.944907][T16476] bridge0: port 3(erspan0) entered disabled state [ 473.994483][T16476] erspan0: entered allmulticast mode [ 474.043146][T16476] erspan0: entered promiscuous mode [ 474.101583][T16476] bridge0: port 3(erspan0) entered blocking state [ 474.108504][T16476] bridge0: port 3(erspan0) entered forwarding state [ 474.309193][T16226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.340681][T16477] erspan0: left allmulticast mode [ 474.347254][T16477] erspan0: left promiscuous mode [ 474.353833][T16477] bridge0: port 3(erspan0) entered disabled state [ 474.400997][T16226] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.470566][ T6110] IPVS: stop unused estimator thread 0... [ 474.493367][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.500607][ T9540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.511900][T16483] tipc: Enabled bearer , priority 0 [ 474.559683][T16483] syzkaller0: entered promiscuous mode [ 474.568115][T16483] syzkaller0: entered allmulticast mode [ 474.592745][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.600010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.679480][T16482] tipc: Resetting bearer [ 474.728933][T16482] tipc: Disabling bearer [ 474.776441][T16495] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2973'. [ 474.816827][T16495] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2973'. [ 474.982118][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2974'. [ 475.446344][T16226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.458928][T16523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2980'. [ 475.595223][T16226] veth0_vlan: entered promiscuous mode [ 475.641596][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 475.653563][T16226] veth1_vlan: entered promiscuous mode [ 475.685989][T16527] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 475.770578][T16527] bond9: entered promiscuous mode [ 475.779650][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 475.789671][T16527] bond9: entered allmulticast mode [ 475.820781][T16536] bridge7: entered promiscuous mode [ 475.826253][T16536] bridge7: entered allmulticast mode [ 475.836160][T16536] bond9: (slave bridge7): making interface the new active one [ 475.845128][T16536] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 475.906704][T16226] veth0_macvtap: entered promiscuous mode [ 475.936061][T16544] tipc: Enabling of bearer rejected, failed to enable media [ 475.965759][T16226] veth1_macvtap: entered promiscuous mode [ 476.039251][T16226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.039975][T16548] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 476.066771][T16226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.127951][ T6110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.147770][ T6110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.185723][ T6110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.254181][ T6110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.375721][T16560] netlink: 'syz.0.2991': attribute type 1 has an invalid length. [ 476.402548][T16558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2989'. [ 476.426607][T16562] sctp: [Deprecated]: syz.4.2990 (pid 16562) Use of int in max_burst socket option. [ 476.426607][T16562] Use struct sctp_assoc_value instead [ 476.487165][ T9549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.506169][T16566] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2992'. [ 476.518742][ T9549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.535360][T16570] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0 [ 476.602679][ T9549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.612701][ T9549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.635236][T16572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2993'. [ 476.913603][T16584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2997'. [ 476.940704][T16587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2998'. [ 477.003656][T16590] syzkaller1: entered promiscuous mode [ 477.030039][T16590] syzkaller1: entered allmulticast mode [ 477.136135][T16600] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.2999'. [ 477.453868][T16607] tipc: Started in network mode [ 477.474391][T16607] tipc: Node identity , cluster identity 4711 [ 477.480528][T16607] tipc: Failed to obtain node identity [ 477.545097][T16607] tipc: Enabling of bearer rejected, failed to enable media [ 477.609981][T16611] syzkaller0: entered promiscuous mode [ 477.649486][T16611] syzkaller0: entered allmulticast mode [ 477.755077][T16616] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.3005'. [ 477.940170][T16620] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 478.226946][T16602] delete_channel: no stack [ 478.326095][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.343506][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.353133][ T12] smc: removing ib device syz1 [ 478.361342][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.371636][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.384069][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.412599][T16629] erspan1: entered allmulticast mode [ 478.418863][ T5933] syz1: Port: 1 Link DOWN [ 478.616236][T16632] wg1 speed is unknown, defaulting to 1000 [ 479.119222][T16655] wg1 speed is unknown, defaulting to 1000 [ 479.141181][T16658] wg1 speed is unknown, defaulting to 1000 [ 479.152881][T16667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 480.049099][T16683] Bluetooth: MGMT ver 1.23 [ 480.368821][ T4437] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.379732][ T4437] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 43543 - 0 [ 480.389924][ T4437] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 480.437431][T16632] chnl_net:caif_netlink_parms(): no params data found [ 480.468255][ T4437] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.481491][ T4437] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 43543 - 0 [ 480.485762][ T5148] Bluetooth: hci0: command tx timeout [ 480.493210][ T4437] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 480.617741][ T4437] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.640159][ T4437] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 43543 - 0 [ 480.655929][ T4437] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 480.861707][ T4437] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.893570][ T4437] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 43543 - 0 [ 480.916743][ T4437] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 480.983171][T16632] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.997412][T16632] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.011639][T16632] bridge_slave_0: entered allmulticast mode [ 481.034891][T16632] bridge_slave_0: entered promiscuous mode [ 481.052649][T16632] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.064202][T16632] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.071859][T16632] bridge_slave_1: entered allmulticast mode [ 481.097353][T16632] bridge_slave_1: entered promiscuous mode [ 481.205565][T16632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.216357][T16729] __nla_validate_parse: 4 callbacks suppressed [ 481.216377][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 481.218772][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3028'. [ 481.222720][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 481.252725][T16729] netlink: 'syz.3.3030': attribute type 18 has an invalid length. [ 481.271393][T16632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.415290][T16632] team0: Port device team_slave_0 added [ 481.435583][T16632] team0: Port device team_slave_1 added [ 481.537382][T16632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.548310][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.575768][T16632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.588716][ T4437] bridge_slave_1: left allmulticast mode [ 481.597116][ T4437] bridge_slave_1: left promiscuous mode [ 481.604551][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.617556][ T4437] bridge_slave_0: left allmulticast mode [ 481.623241][ T4437] bridge_slave_0: left promiscuous mode [ 481.630095][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.656192][ T4437] bond_slave_0: left promiscuous mode [ 481.661845][ T4437] bond_slave_1: left promiscuous mode [ 481.749060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bb38800: rx timeout, send abort [ 481.772208][ T4437] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 481.781140][ T4437] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 86:b2:93:8e:fa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 482.066375][ T4437] bond6 (unregistering): (slave geneve3): Releasing active interface [ 482.250254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bb3a400: rx timeout, send abort [ 482.259119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bb38800: abort rx timeout. Force session deactivation [ 482.565763][ T5148] Bluetooth: hci0: command tx timeout [ 482.567915][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3039'. [ 482.581829][ T4437] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 482.643668][ T4437] bond4 (unregistering): (slave macvlan2): Removing an active aggregator [ 482.653559][ T4437] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 482.670139][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.686439][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.697513][ T4437] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 482.706767][ T4437] bond0 (unregistering): Released all slaves [ 482.720859][ T4437] bond1 (unregistering): Released all slaves [ 482.735660][ T4437] bond2 (unregistering): Released all slaves [ 482.752831][ T4437] bond3 (unregistering): Released all slaves [ 482.758607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806bb3a400: abort rx timeout. Force session deactivation [ 482.878726][ T4437] bond4 (unregistering): Released all slaves [ 482.893494][ T4437] bond5 (unregistering): Released all slaves [ 482.910157][ T4437] bond6 (unregistering): Released all slaves [ 483.029746][ T4437] bond7 (unregistering): (slave veth3): Releasing active interface [ 483.040059][ T4437] bond7 (unregistering): Released all slaves [ 483.153567][ T4437] bond8 (unregistering): (slave veth5): Releasing active interface [ 483.164469][ T4437] bond8 (unregistering): Released all slaves [ 483.178376][ T4437] bond9 (unregistering): Released all slaves [ 483.192192][T16632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.199460][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.227381][T16632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.238718][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.253563][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.262713][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.276165][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.285688][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.311017][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.403398][T16743] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.411179][T16743] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.498377][T16743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.512390][T16743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.647386][T16769] syz_tun: refused to change device tx_queue_len [ 483.681560][T16771] bridge_slave_1: left allmulticast mode [ 483.691342][T16771] bridge_slave_1: left promiscuous mode [ 483.699856][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.712520][T16771] bridge_slave_0: left allmulticast mode [ 483.719923][T16771] bridge_slave_0: left promiscuous mode [ 483.726350][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.855699][ T6110] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.865518][ T4437] tipc: Left network mode [ 483.870009][ T6110] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.949706][ T6110] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.970524][ T6110] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.002666][T16783] netlink: 'syz.3.3043': attribute type 1 has an invalid length. [ 484.097973][T16783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.109450][T16632] hsr_slave_0: entered promiscuous mode [ 484.116562][T16632] hsr_slave_1: entered promiscuous mode [ 484.123434][T16632] debugfs: 'hsr0' already exists in 'hsr' [ 484.130530][T16632] Cannot create hsr debugfs directory [ 484.218290][T16789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.233035][T16789] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 484.248530][T16789] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 484.368426][T16783] veth5: entered promiscuous mode [ 484.395810][T16783] bond1: (slave veth5): Enslaving as an active interface with a down link [ 484.452528][T16790] wg1 speed is unknown, defaulting to 1000 [ 484.659004][ T5148] Bluetooth: hci0: command tx timeout [ 484.836091][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.839875][T16806] netlink: 'syz.3.3046': attribute type 30 has an invalid length. [ 484.843824][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.860893][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.868668][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.887650][ T4437] veth1_macvtap: left promiscuous mode [ 484.893618][ T4437] veth1_vlan: left promiscuous mode [ 484.899486][ T4437] veth0_vlan: left promiscuous mode [ 485.401590][ T4437] ` (unregistering): Port device team_slave_1 removed [ 485.446346][ T4437] ` (unregistering): Port device team_slave_0 removed [ 485.817472][ T4437] ` (unregistering): Port device 0! removed [ 486.193472][T16829] IPVS: stopping backup sync thread 16570 ... [ 486.286269][T16829] __nla_validate_parse: 146 callbacks suppressed [ 486.286292][T16829] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3052'. [ 486.313003][T16829] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3052'. [ 486.335549][T16829] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 486.343469][T16829] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3052'. [ 486.542780][ T4437] IPVS: stop unused estimator thread 0... [ 486.725003][ T5148] Bluetooth: hci0: command tx timeout [ 487.030161][T16632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.699113][T16632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.711395][T16632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.735812][T16632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 488.013102][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 488.193909][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 488.206159][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 488.217547][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 488.227598][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 488.271574][T16900] block nbd3: Unsupported socket: should be TCP or UNIX. [ 488.311496][T16898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3064'. [ 488.408821][T16632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.564467][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 489.073547][T16909] netlink: 'syz.3.3074': attribute type 1 has an invalid length. [ 489.429139][T16917] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 490.233239][T16906] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 490.253142][T16632] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.297810][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.305052][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.315699][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.322891][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.713270][T16932] tipc: Enabled bearer , priority 0 [ 490.728580][T16923] netlink: 'syz.1.3077': attribute type 10 has an invalid length. [ 490.761472][T16923] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 490.783559][T16932] syzkaller0: entered promiscuous mode [ 490.789690][T16932] syzkaller0: entered allmulticast mode [ 490.803722][T16932] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 490.933205][T16932] tipc: Resetting bearer [ 490.985521][T16632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.024222][T16931] tipc: Resetting bearer [ 491.055211][T16931] tipc: Disabling bearer [ 491.077420][T16943] xt_hashlimit: max too large, truncated to 1048576 [ 491.090544][T16946] netlink: 'syz.3.3084': attribute type 29 has an invalid length. [ 491.115432][T16946] netlink: 'syz.3.3084': attribute type 29 has an invalid length. [ 491.125799][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 491.169611][T16632] veth0_vlan: entered promiscuous mode [ 491.213249][T16632] veth1_vlan: entered promiscuous mode [ 491.298140][T16632] veth0_macvtap: entered promiscuous mode [ 491.331847][T16632] veth1_macvtap: entered promiscuous mode [ 491.427397][T16632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.510603][T16632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.588318][ T6114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.616074][ T6114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.641636][T16966] tipc: Enabling of bearer rejected, failed to enable media [ 491.661399][ T6114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.685185][ T6114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.699174][T16964] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 491.828076][T16971] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 491.872477][T16964] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 491.929221][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.970971][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.032509][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.044896][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.210168][T16984] tipc: Started in network mode [ 492.226005][T16984] tipc: Node identity 7270833f7fc2, cluster identity 4711 [ 492.242639][T16984] tipc: Enabled bearer , priority 0 [ 492.277386][T16984] syzkaller0: entered promiscuous mode [ 492.282918][T16984] syzkaller0: entered allmulticast mode [ 492.356731][T16983] tipc: Resetting bearer [ 492.363880][T16986] syz.3.3095 (16986) used greatest stack depth: 17784 bytes left [ 492.407988][T16983] tipc: Disabling bearer [ 492.601132][T16996] __nla_validate_parse: 6 callbacks suppressed [ 492.601156][T16996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3099'. [ 493.673368][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.686667][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.697930][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.710091][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.718634][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.805942][T17017] wg1 speed is unknown, defaulting to 1000 [ 493.889182][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.899181][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.909241][T17022] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 493.965302][T17030] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 493.973471][T17030] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3105'. [ 494.142968][T17034] veth0: entered promiscuous mode [ 494.233044][T17040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3107'. [ 494.257384][T17041] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3108'. [ 494.301488][T17034] netlink: 'syz.0.3106': attribute type 16 has an invalid length. [ 494.314398][T17033] wg1 speed is unknown, defaulting to 1000 [ 494.326428][T17034] netlink: 'syz.0.3106': attribute type 17 has an invalid length. [ 494.432632][T17034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.483546][T17049] x_tables: ip_tables: ah match: only valid for protocol 51 [ 494.513040][T17017] chnl_net:caif_netlink_parms(): no params data found [ 494.732974][T17059] ipvlan1: entered promiscuous mode [ 494.750871][T17059] ipvlan1: entered allmulticast mode [ 494.766863][T17059] veth0_vlan: entered allmulticast mode [ 494.930952][T17071] tipc: Started in network mode [ 494.940981][T17071] tipc: Node identity ff, cluster identity 4711 [ 494.955470][T17071] tipc: Enabling of bearer rejected, failed to enable media [ 494.972700][T17075] tipc: Enabled bearer , priority 0 [ 495.006617][T17034] veth0: left promiscuous mode [ 495.167283][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'. [ 495.187424][T17083] vlan2: entered promiscuous mode [ 495.193095][T17083] vlan2: entered allmulticast mode [ 495.199371][T17083] hsr_slave_1: entered allmulticast mode [ 495.209631][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.217770][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.227342][T17017] bridge_slave_0: entered allmulticast mode [ 495.237588][T17017] bridge_slave_0: entered promiscuous mode [ 495.263413][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.271718][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.279261][T17017] bridge_slave_1: entered allmulticast mode [ 495.317904][T17017] bridge_slave_1: entered promiscuous mode [ 495.326348][T17078] tipc: Enabled bearer , priority 0 [ 495.335171][T17080] syzkaller0: entered promiscuous mode [ 495.340684][T17080] syzkaller0: entered allmulticast mode [ 495.350242][T17072] tipc: Disabling bearer [ 495.673833][T17080] tipc: Resetting bearer [ 495.727112][T17080] tipc: Disabling bearer [ 495.825574][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.845810][ T5148] Bluetooth: hci1: command tx timeout [ 495.849531][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.000565][T17110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3122'. [ 496.043195][T17110] FAULT_INJECTION: forcing a failure. [ 496.043195][T17110] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 496.060729][T17110] CPU: 0 UID: 0 PID: 17110 Comm: syz.4.3122 Not tainted syzkaller #0 PREEMPT(full) [ 496.060761][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.060773][T17110] Call Trace: [ 496.060782][T17110] [ 496.060791][T17110] dump_stack_lvl+0x189/0x250 [ 496.060821][T17110] ? __pfx____ratelimit+0x10/0x10 [ 496.060845][T17110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.060867][T17110] ? __pfx__printk+0x10/0x10 [ 496.060889][T17110] ? __might_fault+0xb0/0x130 [ 496.060930][T17110] should_fail_ex+0x414/0x560 [ 496.060962][T17110] _copy_from_user+0x2d/0xb0 [ 496.060984][T17110] ___sys_sendmsg+0x158/0x2a0 [ 496.061013][T17110] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.061080][T17110] ? __fget_files+0x2a/0x420 [ 496.061097][T17110] ? __fget_files+0x3a0/0x420 [ 496.061128][T17110] __x64_sys_sendmsg+0x19b/0x260 [ 496.061156][T17110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.061193][T17110] ? __pfx_ksys_write+0x10/0x10 [ 496.061225][T17110] ? do_syscall_64+0xbe/0xfa0 [ 496.061255][T17110] do_syscall_64+0xfa/0xfa0 [ 496.061277][T17110] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.061301][T17110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.061321][T17110] ? clear_bhb_loop+0x60/0xb0 [ 496.061347][T17110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.061366][T17110] RIP: 0033:0x7f4ab8b8eec9 [ 496.061386][T17110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.061403][T17110] RSP: 002b:00007f4ab9adc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.061426][T17110] RAX: ffffffffffffffda RBX: 00007f4ab8de5fa0 RCX: 00007f4ab8b8eec9 [ 496.061441][T17110] RDX: 0000000004000024 RSI: 0000200000000040 RDI: 0000000000000005 [ 496.061453][T17110] RBP: 00007f4ab9adc090 R08: 0000000000000000 R09: 0000000000000000 [ 496.061466][T17110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.061478][T17110] R13: 00007f4ab8de6038 R14: 00007f4ab8de5fa0 R15: 00007fff21a80f08 [ 496.061514][T17110] [ 496.361231][T17017] team0: Port device team_slave_0 added [ 496.436209][T17017] team0: Port device team_slave_1 added [ 496.500063][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'. [ 496.927228][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.935743][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.969867][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.994257][T17133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3128'. [ 497.003762][T17133] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 497.039024][T17126] macvlan0: entered promiscuous mode [ 497.046248][T17126] macvlan0: entered allmulticast mode [ 497.053261][T17126] bond5: (slave macvlan0): Opening slave failed [ 497.083697][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.091879][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.118475][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.166263][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 497.283057][T17017] hsr_slave_0: entered promiscuous mode [ 497.310730][T17017] hsr_slave_1: entered promiscuous mode [ 497.325103][T17017] debugfs: 'hsr0' already exists in 'hsr' [ 497.343695][T17017] Cannot create hsr debugfs directory [ 497.387069][T17150] ip6gre1: entered allmulticast mode [ 497.422051][T17144] wg1 speed is unknown, defaulting to 1000 [ 497.490940][T17150] ªªªªªª: renamed from wg2 (while UP) [ 497.597085][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'. [ 497.690351][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3134'. [ 497.719309][T17161] FAULT_INJECTION: forcing a failure. [ 497.719309][T17161] name failslab, interval 1, probability 0, space 0, times 1 [ 497.739970][T17161] CPU: 1 UID: 0 PID: 17161 Comm: syz.3.3134 Not tainted syzkaller #0 PREEMPT(full) [ 497.740000][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.740012][T17161] Call Trace: [ 497.740020][T17161] [ 497.740029][T17161] dump_stack_lvl+0x189/0x250 [ 497.740055][T17161] ? __pfx____ratelimit+0x10/0x10 [ 497.740079][T17161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.740101][T17161] ? __pfx__printk+0x10/0x10 [ 497.740128][T17161] ? __pfx___might_resched+0x10/0x10 [ 497.740149][T17161] ? fs_reclaim_acquire+0x7d/0x100 [ 497.740186][T17161] should_fail_ex+0x414/0x560 [ 497.740215][T17161] should_failslab+0xa8/0x100 [ 497.740235][T17161] kmem_cache_alloc_node_noprof+0x77/0x710 [ 497.740263][T17161] ? __alloc_skb+0x112/0x2d0 [ 497.740283][T17161] ? netlink_autobind+0xdb/0x300 [ 497.740310][T17161] __alloc_skb+0x112/0x2d0 [ 497.740335][T17161] netlink_sendmsg+0x5c6/0xb30 [ 497.740368][T17161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.740395][T17161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.740426][T17161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.740445][T17161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.740477][T17161] __sock_sendmsg+0x21c/0x270 [ 497.740510][T17161] ____sys_sendmsg+0x505/0x830 [ 497.740541][T17161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.740576][T17161] ? import_iovec+0x74/0xa0 [ 497.740600][T17161] ___sys_sendmsg+0x21f/0x2a0 [ 497.740626][T17161] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.740693][T17161] ? __fget_files+0x2a/0x420 [ 497.740710][T17161] ? __fget_files+0x3a0/0x420 [ 497.740739][T17161] __x64_sys_sendmsg+0x19b/0x260 [ 497.740767][T17161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.740802][T17161] ? __pfx_ksys_write+0x10/0x10 [ 497.740835][T17161] ? do_syscall_64+0xbe/0xfa0 [ 497.740864][T17161] do_syscall_64+0xfa/0xfa0 [ 497.740885][T17161] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.740908][T17161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.740928][T17161] ? clear_bhb_loop+0x60/0xb0 [ 497.740953][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.740971][T17161] RIP: 0033:0x7f6fa6d8eec9 [ 497.740990][T17161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.741007][T17161] RSP: 002b:00007f6fa7d09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.741029][T17161] RAX: ffffffffffffffda RBX: 00007f6fa6fe5fa0 RCX: 00007f6fa6d8eec9 [ 497.741043][T17161] RDX: 0000000004000024 RSI: 0000200000000040 RDI: 0000000000000005 [ 497.741056][T17161] RBP: 00007f6fa7d09090 R08: 0000000000000000 R09: 0000000000000000 [ 497.741069][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.741081][T17161] R13: 00007f6fa6fe6038 R14: 00007f6fa6fe5fa0 R15: 00007fff7f82d358 [ 497.741114][T17161] [ 497.784438][T17162] netlink: 'syz.0.3132': attribute type 21 has an invalid length. [ 497.881501][T17166] netlink: 'syz.3.3135': attribute type 6 has an invalid length. [ 497.926132][ T5148] Bluetooth: hci1: command tx timeout [ 498.050764][T17162] netlink: 'syz.0.3132': attribute type 1 has an invalid length. [ 498.060976][T17162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3132'. [ 498.071764][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3132'. [ 498.330553][T17179] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3139'. [ 498.496090][T17186] netlink: 'syz.0.3141': attribute type 10 has an invalid length. [ 498.539779][T17186] bridge0: port 3(macsec0) entered blocking state [ 498.550963][T17186] bridge0: port 3(macsec0) entered disabled state [ 498.561312][T17186] macsec0: entered allmulticast mode [ 498.569193][T17186] veth1_macvtap: entered allmulticast mode [ 498.578353][T17186] macsec0: entered promiscuous mode [ 498.586076][T17186] bridge0: port 3(macsec0) entered blocking state [ 498.592811][T17186] bridge0: port 3(macsec0) entered forwarding state [ 498.712834][T17192] netlink: 'syz.1.3143': attribute type 1 has an invalid length. [ 498.715721][T17017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 498.752720][T17192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.760229][T17189] tipc: Enabled bearer , priority 0 [ 498.767770][T17017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 498.784631][T17192] vlan2: entered promiscuous mode [ 498.789724][T17192] bond1: entered promiscuous mode [ 498.795152][T17192] vlan2: entered allmulticast mode [ 498.800267][T17192] bond1: entered allmulticast mode [ 498.806918][T17189] syzkaller0: entered promiscuous mode [ 498.812749][T17189] syzkaller0: entered allmulticast mode [ 498.821152][T17017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 498.846949][T17192] bond1: (slave gretap2): making interface the new active one [ 498.854658][T17192] gretap2: entered promiscuous mode [ 498.860089][T17192] gretap2: entered allmulticast mode [ 498.867160][T17192] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 498.888251][T17017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 498.909375][T17189] tipc: Resetting bearer [ 498.928572][T17188] tipc: Resetting bearer [ 498.953600][T17188] tipc: Disabling bearer [ 498.962369][T17205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3145'. [ 498.972060][T17205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3145'. [ 499.001127][T17205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3145'. [ 499.010307][T17205] netlink: 560 bytes leftover after parsing attributes in process `syz.1.3145'. [ 499.216048][T17017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.263209][T17017] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.290280][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.297704][ T9549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.332175][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.339455][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.502805][T17218] wg1 speed is unknown, defaulting to 1000 [ 499.596164][T17228] wg1 speed is unknown, defaulting to 1000 [ 499.680114][T17233] tipc: Enabled bearer , priority 0 [ 499.722157][T17230] syzkaller0: entered promiscuous mode [ 499.728593][T17230] syzkaller0: entered allmulticast mode [ 499.914713][T17237] tipc: Resetting bearer [ 499.940174][T17237] tipc: Disabling bearer [ 500.006826][ T5839] Bluetooth: hci1: command tx timeout [ 500.014619][T17244] tipc: Started in network mode [ 500.020488][T17244] tipc: Node identity da9eca73f41b, cluster identity 4711 [ 500.029324][T17244] tipc: Enabled bearer , priority 0 [ 500.055521][T17246] syzkaller0: entered promiscuous mode [ 500.061949][T17246] syzkaller0: entered allmulticast mode [ 500.107156][T17244] tipc: Resetting bearer [ 500.145661][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.313800][T17017] veth0_vlan: entered promiscuous mode [ 500.370294][T17017] veth1_vlan: entered promiscuous mode [ 500.493039][T17267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3161'. [ 500.541831][T17017] veth0_macvtap: entered promiscuous mode [ 500.581954][T17017] veth1_macvtap: entered promiscuous mode [ 500.643686][T17017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.677360][T17017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.696972][T17238] tipc: Resetting bearer [ 500.721613][T17238] tipc: Disabling bearer [ 500.759877][T17279] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 500.781145][ T6110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.819790][ T6110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.840110][ T6110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.859665][ T6110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.984985][T17285] Cannot find add_set index 0 as target [ 501.257902][T17302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3168'. [ 501.400458][T17305] wg1 speed is unknown, defaulting to 1000 [ 501.603147][T17316] netlink: 'syz.0.3171': attribute type 21 has an invalid length. [ 501.640072][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.653435][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.682303][T17318] tbf_change: 51 callbacks suppressed [ 501.682324][T17318] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 501.713572][T17320] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 501.777595][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.798759][T17315] syzkaller0: entered promiscuous mode [ 501.805356][T17315] syzkaller0: entered allmulticast mode [ 501.836973][T17320] gretap1: entered allmulticast mode [ 501.849465][T17320] bond2: (slave gretap1): making interface the new active one [ 501.860303][T17320] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 501.940906][ T4437] bridge_slave_1: left allmulticast mode [ 501.950481][ T4437] bridge_slave_1: left promiscuous mode [ 501.957479][ T9549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.985016][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.997656][ T9549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.098555][ T4437] bridge_slave_0: left allmulticast mode [ 502.109916][ T5839] Bluetooth: hci1: command tx timeout [ 502.120055][ T4437] bridge_slave_0: left promiscuous mode [ 502.145530][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.295450][ T4437] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 502.307697][ T4437] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 32:fd:f9:31:8c:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 503.146853][ T4437] bond4 (unregistering): (slave bridge6): Removing an active aggregator [ 503.155885][ T4437] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 503.164886][ T4437] bridge6 (unregistering): left promiscuous mode [ 503.171272][ T4437] bridge6 (unregistering): left allmulticast mode [ 503.403533][ T4437] bond0 (unregistering): left promiscuous mode [ 503.410170][ T4437] bond_slave_0: left promiscuous mode [ 503.415839][ T4437] dummy0: left promiscuous mode [ 503.421061][ T4437] batadv_slave_0: left promiscuous mode [ 503.428838][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.440072][ T4437] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 503.450815][ T4437] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 503.460960][ T4437] bond0 (unregistering): Released all slaves [ 503.581190][ T4437] bond1 (unregistering): (slave veth3): Releasing active interface [ 503.590572][ T4437] bond1 (unregistering): Released all slaves [ 503.605050][ T4437] bond2 (unregistering): Released all slaves [ 503.727877][ T4437] bond3 (unregistering): Released all slaves [ 503.845469][ T4437] bond4 (unregistering): Released all slaves [ 504.078551][ T4437] tipc: Left network mode [ 504.132827][T17375] __nla_validate_parse: 3 callbacks suppressed [ 504.132850][T17375] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3098'. [ 504.273091][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 504.507820][T17389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3186'. [ 504.568442][T17399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3189'. [ 504.971707][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'. [ 505.019189][T17417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3192'. [ 505.466049][T17441] x_tables: duplicate underflow at hook 1 [ 505.640224][T17448] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 505.780826][T17448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 505.836633][T17450] 8021q: adding VLAN 0 to HW filter on device bond6 [ 505.845125][T17450] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 505.859411][T17450] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 506.001091][T17465] netlink: 'syz.3.3200': attribute type 1 has an invalid length. [ 506.001706][T17456] veth11: entered promiscuous mode [ 506.037891][T17456] bond6: (slave veth11): Enslaving as an active interface with a down link [ 506.099296][ T4437] veth1_to_bridge: left promiscuous mode [ 506.160053][ T4437] hsr_slave_0: left promiscuous mode [ 506.172453][ T4437] hsr_slave_1: left promiscuous mode [ 506.313403][T17477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.330953][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'. [ 506.343830][ T4437] pim6reg99999999 (unregistering): left allmulticast mode [ 506.456797][T17484] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3206'. [ 506.591032][T17489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3208'. [ 506.601079][T17489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3208'. [ 506.836989][T17499] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 507.620453][T17505] bridge_slave_0: left allmulticast mode [ 507.626461][T17505] bridge_slave_0: left promiscuous mode [ 507.632349][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.680131][T17505] bridge_slave_1: left allmulticast mode [ 507.738680][T17505] bridge_slave_1: left promiscuous mode [ 507.776044][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.880168][T17505] bond0: (slave bond_slave_0): Releasing backup interface [ 507.903376][T17505] bond0: (slave bond_slave_1): Releasing backup interface [ 507.978948][T17505] team0: Port device team_slave_0 removed [ 508.070404][T17505] team0: Port device team_slave_1 removed [ 508.087813][T17505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.096018][T17505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.117794][T17505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.145111][T17505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.157152][T17505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.175828][T17510] IPVS: Unknown mcast interface: veth1_to_hsr [ 508.458377][ T4437] IPVS: stop unused estimator thread 0... [ 509.655048][T17569] netlink: 'syz.1.3225': attribute type 13 has an invalid length. [ 509.663401][T17569] netlink: 'syz.1.3225': attribute type 17 has an invalid length. [ 509.841366][T17581] __nla_validate_parse: 4 callbacks suppressed [ 509.841387][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 509.861208][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 509.901579][T17578] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3229'. [ 509.954701][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 510.445668][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 510.465391][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.474968][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.489104][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.516176][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.560094][T17569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.568415][T17595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3231'. [ 510.790465][T17582] wg1 speed is unknown, defaulting to 1000 [ 510.947125][T17602] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3234'. [ 511.002744][T17604] ip6gre2: entered allmulticast mode [ 511.103175][T17589] wg1 speed is unknown, defaulting to 1000 [ 511.646210][T17617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.695060][T17615] syzkaller0: entered promiscuous mode [ 511.696314][T17620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3239'. [ 511.706309][T17615] syzkaller0: entered allmulticast mode [ 511.848363][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 511.893474][T17625] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3240'. [ 512.580420][ T5839] Bluetooth: hci3: command tx timeout [ 513.196936][T17634] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 513.923420][T17589] chnl_net:caif_netlink_parms(): no params data found [ 514.185632][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 514.258309][T17637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.416492][T17589] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.425095][T17589] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.432656][T17589] bridge_slave_0: entered allmulticast mode [ 514.441649][T17589] bridge_slave_0: entered promiscuous mode [ 514.451698][T17589] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.459507][T17589] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.470478][T17589] bridge_slave_1: entered allmulticast mode [ 514.484979][T17589] bridge_slave_1: entered promiscuous mode [ 514.645725][ T5839] Bluetooth: hci3: command tx timeout [ 514.719152][T17589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.807883][T17589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.004391][T17700] __nla_validate_parse: 2 callbacks suppressed [ 515.004416][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 515.068965][T17589] team0: Port device team_slave_0 added [ 515.082266][T17589] team0: Port device team_slave_1 added [ 515.234594][T17589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.241617][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.312558][T17714] netlink: 'syz.0.3264': attribute type 10 has an invalid length. [ 515.313411][T17589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.341060][T17589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.348863][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.378417][T17589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.403423][T17714] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.413261][T17714] bond0: (slave team0): Enslaving as an active interface with an up link [ 515.578800][T17589] hsr_slave_0: entered promiscuous mode [ 515.591161][T17589] hsr_slave_1: entered promiscuous mode [ 515.608387][T17589] debugfs: 'hsr0' already exists in 'hsr' [ 515.621302][T17589] Cannot create hsr debugfs directory [ 515.629707][T17729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.733329][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3270'. [ 515.839310][T17736] sctp: [Deprecated]: syz.0.3270 (pid 17736) Use of int in max_burst socket option deprecated. [ 515.839310][T17736] Use struct sctp_assoc_value instead [ 515.993608][T17740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.041137][T17740] wg1 speed is unknown, defaulting to 1000 [ 516.094904][T17741] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 516.436542][T17589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 516.462303][T17589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.489787][T17589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.536486][T17589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 516.724380][ T5839] Bluetooth: hci3: command tx timeout [ 516.788622][T17589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.833879][T17589] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.916202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.923402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.957066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.964378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.964844][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.117598][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.233106][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.282792][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.326699][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.387193][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.446203][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.517473][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 517.604759][T17788] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 517.785994][T17787] wg1 speed is unknown, defaulting to 1000 [ 517.794984][T17793] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.042653][T17589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.804859][ T5839] Bluetooth: hci3: command tx timeout [ 518.877066][T17826] 8021q: VLANs not supported on caif0 [ 520.625540][T17835] bridge_slave_1: left allmulticast mode [ 520.631242][T17835] bridge_slave_1: left promiscuous mode [ 520.637416][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.648191][T17835] bridge_slave_0: left allmulticast mode [ 520.655849][T17835] bridge_slave_0: left promiscuous mode [ 520.661769][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.973172][T17851] netlink: 'syz.3.3295': attribute type 1 has an invalid length. [ 520.998246][T17589] veth0_vlan: entered promiscuous mode [ 521.026147][T17851] __nla_validate_parse: 9 callbacks suppressed [ 521.026170][T17851] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3295'. [ 521.035855][T17589] veth1_vlan: entered promiscuous mode [ 521.108014][T17857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3299'. [ 521.244824][T17857] bond0: (slave dummy0): Releasing backup interface [ 521.415024][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3302'. [ 521.554889][T17589] veth0_macvtap: entered promiscuous mode [ 521.572015][T17875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 521.582093][T17875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3304'. [ 521.591963][T17875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 521.614258][T17875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 521.617063][T17589] veth1_macvtap: entered promiscuous mode [ 521.686739][T17875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 521.712452][ T5933] IPVS: starting estimator thread 0... [ 521.801151][T17879] wg1 speed is unknown, defaulting to 1000 [ 521.823892][T17589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.834103][T17888] IPVS: using max 23 ests per chain, 55200 per kthread [ 521.867025][T17589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.904869][T17891] netlink: 'syz.3.3307': attribute type 30 has an invalid length. [ 521.921704][ T6125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.985242][ T6125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.005480][ T6125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.023296][ T6125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.322527][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.345032][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.399884][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'. [ 522.420266][ T6114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.440636][T17907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3311'. [ 522.440939][T17908] vlan2: entered promiscuous mode [ 522.456889][ T6114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.464488][T17908] bond0: entered promiscuous mode [ 522.469673][T17908] bond_slave_0: entered promiscuous mode [ 522.476475][T17908] bond_slave_1: entered promiscuous mode [ 522.477405][T17907] netlink: 'syz.3.3311': attribute type 1 has an invalid length. [ 522.484681][T17908] team0: entered promiscuous mode [ 522.496146][T17908] team_slave_0: entered promiscuous mode [ 522.502356][T17908] team_slave_1: entered promiscuous mode [ 523.193665][T17926] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.100492][T17960] wg1 speed is unknown, defaulting to 1000 [ 524.863885][T17994] syzkaller0: entered promiscuous mode [ 524.883246][T17994] syzkaller0: entered allmulticast mode [ 525.888515][T18018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.827464][T18006] @ÿ: renamed from veth0_vlan (while UP) [ 526.838178][T18009] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 526.849557][T18009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 526.868742][T18021] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 526.904322][T18022] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 527.306447][T18054] syzkaller0: entered promiscuous mode [ 527.314755][T18054] syzkaller0: entered allmulticast mode [ 528.378493][T18072] vlan2: entered promiscuous mode [ 528.383887][T18072] vlan2: entered allmulticast mode [ 528.426787][T18072] hsr_slave_1: entered allmulticast mode [ 528.446152][T18081] __nla_validate_parse: 7 callbacks suppressed [ 528.446176][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 528.490812][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 529.486925][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 529.645861][T18103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3365'. [ 529.697081][T18103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3365'. [ 529.781009][T18100] wg1 speed is unknown, defaulting to 1000 [ 529.791078][T18103] netlink: 'syz.3.3365': attribute type 32 has an invalid length. [ 529.800084][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 529.859799][T18103] bond3: Setting coupled_control to off (0) [ 530.842394][T18118] wg1 speed is unknown, defaulting to 1000 [ 530.977545][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 531.028640][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.768295][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3373'. [ 531.807625][T18121] Can't find ip_set type hash:n [ 532.728506][T18059] Set syz1 is full, maxelem 65536 reached [ 533.046065][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3381'. [ 533.077527][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3381'. [ 533.152369][T18175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.588776][T18195] wg1 speed is unknown, defaulting to 1000 [ 533.871373][T18212] syzkaller1: entered promiscuous mode [ 533.878882][T18212] syzkaller1: entered allmulticast mode [ 534.042927][T18221] netlink: 'syz.0.3392': attribute type 4 has an invalid length. [ 534.105030][T18218] netlink: 'syz.0.3392': attribute type 4 has an invalid length. [ 534.167828][T18223] netlink: 'syz.0.3392': attribute type 4 has an invalid length. [ 534.307906][T18220] wg1 speed is unknown, defaulting to 1000 [ 534.437597][T18235] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3395'. [ 534.439298][T18230] wg1 speed is unknown, defaulting to 1000 [ 534.650617][T18240] netlink: 'syz.4.3398': attribute type 42 has an invalid length. [ 534.661693][T18243] netlink: 'syz.0.3397': attribute type 1 has an invalid length. [ 534.692890][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 534.717893][T18244] macsec1: entered promiscuous mode [ 534.754583][T18244] macsec1: entered allmulticast mode [ 535.479141][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3404'. [ 535.924238][T18258] wg1 speed is unknown, defaulting to 1000 [ 536.095812][T18281] wg1 speed is unknown, defaulting to 1000 [ 536.163463][T18290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3408'. [ 536.293363][T18295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3409'. [ 536.492260][T18301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3411'. [ 536.856278][T18317] x_tables: duplicate underflow at hook 1 [ 537.735744][T18340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3423'. [ 537.889428][T18334] wg1 speed is unknown, defaulting to 1000 [ 538.129789][ T5888] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 538.164140][T18364] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3428'. [ 538.173643][ T5888] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 538.212289][ T5888] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 538.322140][T18364] dummy0: entered promiscuous mode [ 538.331528][T18364] batadv_slave_0: entered promiscuous mode [ 538.341405][T18364] batadv_slave_0: left promiscuous mode [ 538.361499][T18364] dummy0: left promiscuous mode [ 538.961047][T18386] netlink: 'syz.0.3433': attribute type 21 has an invalid length. [ 538.980882][T18386] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3433'. [ 539.032537][T18391] Bluetooth: MGMT ver 1.23 [ 539.060383][T18388] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 539.118957][T18394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3435'. [ 539.121841][T18386] netlink: 'syz.0.3433': attribute type 4 has an invalid length. [ 539.168409][T18395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.206667][T18323] Bluetooth: hci3: command 0x0405 tx timeout [ 539.355211][T18392] netlink: 'syz.2.3432': attribute type 10 has an invalid length. [ 539.363280][T18392] mac80211_hwsim hwsim57 wlan1: left allmulticast mode [ 539.401740][T18392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.457279][T18411] netlink: 'syz.1.3441': attribute type 25 has an invalid length. [ 539.463436][T18392] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 539.590769][T18416] wg1 speed is unknown, defaulting to 1000 [ 539.729380][T18423] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 539.803380][T18435] syzkaller0: entered promiscuous mode [ 539.875965][T18435] syzkaller0: entered allmulticast mode [ 539.979784][T18444] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 539.988703][T18444] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 540.108527][T18418] wg1 speed is unknown, defaulting to 1000 [ 540.136766][T18448] wg1 speed is unknown, defaulting to 1000 [ 541.275084][T18488] bond5: option mode: invalid value (254) [ 541.317174][T18488] bond5 (unregistering): Released all slaves [ 541.720432][T18513] __nla_validate_parse: 2 callbacks suppressed [ 541.720454][T18513] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3461'. [ 541.782662][T18514] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 542.336145][T18539] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3465'. [ 542.447057][T18546] netlink: 'syz.1.3469': attribute type 13 has an invalid length. [ 542.458058][T18536] wg1 speed is unknown, defaulting to 1000 [ 542.465080][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 542.563821][T18529] wg1 speed is unknown, defaulting to 1000 [ 542.885122][T18560] tipc: Started in network mode [ 542.890358][T18560] tipc: Node identity ae6010ee37b, cluster identity 4711 [ 542.897871][T18560] tipc: Enabled bearer , priority 0 [ 542.908090][T18556] syzkaller0: entered promiscuous mode [ 542.913622][T18556] syzkaller0: entered allmulticast mode [ 543.063745][T18560] tipc: Resetting bearer [ 543.142905][T18569] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3473'. [ 543.196266][T18564] wg1 speed is unknown, defaulting to 1000 [ 543.342183][T18577] syzkaller1: entered promiscuous mode [ 543.349338][T18577] syzkaller1: entered allmulticast mode [ 543.554952][T18555] tipc: Resetting bearer [ 543.627551][T18555] tipc: Disabling bearer [ 543.936316][T18564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3472'. [ 544.388041][T18600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3481'. [ 544.470404][T18598] bond0: (slave team0): Releasing backup interface [ 544.489423][T18598] team0: left promiscuous mode [ 544.518085][T18598] team_slave_0: left promiscuous mode [ 544.523758][T18598] team_slave_1: left promiscuous mode [ 544.536423][T18608] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 544.553357][T18598] bridge_slave_0: left allmulticast mode [ 544.560921][T18598] bridge_slave_0: left promiscuous mode [ 544.568874][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.591713][T18598] bridge_slave_1: left allmulticast mode [ 544.608778][T18598] bridge_slave_1: left promiscuous mode [ 544.621945][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.653202][T18598] bond0: (slave bond_slave_0): Releasing backup interface [ 544.662055][ T5903] IPVS: starting estimator thread 0... [ 544.689842][T18598] bond_slave_0: left promiscuous mode [ 544.721561][T18598] bond0: (slave bond_slave_1): Releasing backup interface [ 544.742669][T18598] bond_slave_1: left promiscuous mode [ 544.771613][T18598] team0: Port device team_slave_0 removed [ 544.775171][T18614] IPVS: using max 29 ests per chain, 69600 per kthread [ 544.791169][T18598] team0: Port device team_slave_1 removed [ 544.805092][T18598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.813680][T18598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.825452][T18598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.833033][T18598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.843415][T18598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.877227][T18599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.145687][T18625] netlink: 'syz.2.3487': attribute type 13 has an invalid length. [ 545.176456][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3487'. [ 545.271246][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'. [ 545.319868][T18625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.401056][T18632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.509009][T18645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3493'. [ 545.602648][T18647] geneve2: entered promiscuous mode [ 545.734846][ T6110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.785159][ T6110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.810041][ T6125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.818587][ T6125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.165371][T18664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'. [ 546.540384][T18679] wg1 speed is unknown, defaulting to 1000 [ 546.703397][T18688] sctp: [Deprecated]: syz.0.3508 (pid 18688) Use of int in max_burst socket option. [ 546.703397][T18688] Use struct sctp_assoc_value instead [ 546.876609][T18692] netlink: 'syz.0.3510': attribute type 13 has an invalid length. [ 546.990132][T18696] netlink: 'syz.1.3511': attribute type 3 has an invalid length. [ 546.999037][T18696] netlink: 'syz.1.3511': attribute type 1 has an invalid length. [ 547.007620][T18696] __nla_validate_parse: 2 callbacks suppressed [ 547.007638][T18696] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3511'. [ 547.209217][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 547.268646][T18692] bridge0: port 3(macsec0) entered disabled state [ 548.085428][T18692] veth1_macvtap: left allmulticast mode [ 548.318520][T18709] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 548.326448][T18709] team0: Device ipvlan2 is already an upper device of the team interface [ 548.392805][ T6110] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.509058][T18720] wg1 speed is unknown, defaulting to 1000 [ 548.536489][ T6110] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.574160][ T6110] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.613782][ T6110] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.698285][T18739] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3518'. [ 548.719103][T18738] wg1 speed is unknown, defaulting to 1000 [ 549.086779][T18752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 549.603862][T18771] ipvlan2: entered promiscuous mode [ 549.623481][T18771] bridge0: port 3(ipvlan2) entered blocking state [ 549.636325][T18771] bridge0: port 3(ipvlan2) entered disabled state [ 549.643216][T18771] ipvlan2: entered allmulticast mode [ 549.652524][T18771] bridge0: entered allmulticast mode [ 549.662418][T18771] ipvlan2: left allmulticast mode [ 549.670220][T18771] bridge0: left allmulticast mode [ 549.803540][T18778] netlink: 'syz.1.3530': attribute type 13 has an invalid length. [ 550.002206][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 550.088657][T18791] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 550.131524][T18791] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3536'. [ 550.181152][T18795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3537'. [ 550.215032][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 550.230099][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 550.919184][T18823] netlink: 'syz.1.3540': attribute type 11 has an invalid length. [ 551.018333][T18825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3541'. [ 551.238790][T18829] wg1 speed is unknown, defaulting to 1000 [ 552.063425][T18634] Set syz1 is full, maxelem 65536 reached [ 552.139876][T18856] wg1 speed is unknown, defaulting to 1000 [ 552.267479][T18864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 552.317457][T18868] netlink: 'syz.3.3551': attribute type 9 has an invalid length. [ 552.343808][T18868] netlink: 'syz.3.3551': attribute type 7 has an invalid length. [ 552.352690][T18868] netlink: 'syz.3.3551': attribute type 8 has an invalid length. [ 552.428250][T18872] nbd: must specify a size in bytes for the device [ 552.625991][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 552.834104][T18900] sit0: entered promiscuous mode [ 552.863359][T18900] netlink: 'syz.4.3560': attribute type 1 has an invalid length. [ 552.904025][T18900] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3560'. [ 553.058800][T18910] IPVS: length: 209 != 24 [ 553.260168][T18917] wg1 speed is unknown, defaulting to 1000 [ 553.450473][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 553.641313][T18938] netlink: 'syz.2.3571': attribute type 31 has an invalid length. [ 553.652350][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3571'. [ 554.249306][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.275906][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.704467][T18932] veth5: left promiscuous mode [ 554.715238][T18932] ip6gre1: left allmulticast mode [ 554.726153][T18932] gretap1: left allmulticast mode [ 554.734337][T18932] ip6gre2: left allmulticast mode [ 554.751981][T18938] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 554.754153][T18941] macvlan1: entered promiscuous mode [ 554.795534][T18941] macvlan1: entered allmulticast mode [ 554.818340][T18943] veth1_vlan: entered allmulticast mode [ 554.840206][ T6125] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.874080][ T6125] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.930912][T18942] wg1 speed is unknown, defaulting to 1000 [ 554.957903][ T6125] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.990964][ T6125] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.076458][T18971] netlink: 'syz.3.3574': attribute type 1 has an invalid length. [ 555.098303][T18971] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 555.161487][T18977] netlink: 'syz.1.3577': attribute type 16 has an invalid length. [ 555.174054][T18977] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3577'. [ 555.285462][T18982] netlink: 'syz.2.3578': attribute type 13 has an invalid length. [ 555.293693][T18982] netlink: 'syz.2.3578': attribute type 17 has an invalid length. [ 555.438886][T18982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.608429][T18989] syzkaller1: entered promiscuous mode [ 555.615739][T18989] syzkaller1: entered allmulticast mode [ 555.630572][T18994] wg1 speed is unknown, defaulting to 1000 [ 556.089333][T19010] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 556.152350][T19008] vlan2: entered allmulticast mode [ 556.161562][T19008] bridge_slave_0: entered allmulticast mode [ 556.493506][T19022] ip6gre1: entered allmulticast mode [ 556.549150][T19027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3587'. [ 556.568873][T19027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3587'. [ 556.636529][T19027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3587'. [ 556.680283][T19036] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3591'. [ 556.757416][T19036] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3591'. [ 556.853838][T19043] veth1_vlan: left allmulticast mode [ 557.287922][T19053] bond1: entered promiscuous mode [ 557.293141][T19053] bond1: entered allmulticast mode [ 557.328673][T19053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.743692][T19102] __nla_validate_parse: 156 callbacks suppressed [ 557.743713][T19102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3611'. [ 557.810134][T19086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.891494][T19112] netlink: 'syz.2.3610': attribute type 13 has an invalid length. [ 557.893215][T19096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.909906][T19096] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 557.913593][T19112] netlink: 'syz.2.3610': attribute type 17 has an invalid length. [ 557.923687][T19096] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 557.983314][T19103] ip6erspan1: entered allmulticast mode [ 558.038614][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 558.047817][T19113] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 558.236377][T19112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.272626][T19124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.402285][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3613'. [ 558.416188][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3613'. [ 560.250982][T19134] tipc: Enabling of bearer rejected, failed to enable media [ 560.272606][T19106] wg1 speed is unknown, defaulting to 1000 [ 560.592744][T19140] wg1 speed is unknown, defaulting to 1000 [ 560.593625][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'. [ 560.695884][T19164] pim6reg: entered allmulticast mode [ 560.742987][T19164] pim6reg: left allmulticast mode [ 561.107864][T19187] wg1 speed is unknown, defaulting to 1000 [ 561.252991][T19178] mpoa:mpoad_close: () going down [ 561.677967][T19215] nbd: nbd1 already in use [ 561.693007][T19215] block nbd1: NBD_DISCONNECT [ 561.720772][T19215] block nbd1: Send disconnect failed -32 [ 561.741035][T19215] block nbd1: shutting down sockets [ 561.762894][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3634'. [ 561.814470][T19223] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3635'. [ 561.829589][T19222] bond5: entered promiscuous mode [ 561.835705][T19222] bond5: entered allmulticast mode [ 561.841441][T19222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.986124][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3634'. [ 562.085012][T19230] netlink: 'syz.1.3636': attribute type 21 has an invalid length. [ 562.486299][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 562.568066][ T9549] bond2 (unregistering): (slave geneve2): Releasing active interface [ 562.849141][ T9549] bond1 (unregistering): Released all slaves [ 562.970038][ T9549] bond2 (unregistering): Released all slaves [ 563.084491][ T9549] bond3 (unregistering): Released all slaves [ 563.210599][ T9549] bond4 (unregistering): (slave veth9): Releasing active interface [ 563.222032][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.233133][ T9549] bond4 (unregistering): Released all slaves [ 563.258452][ T9549] bond0 (unregistering): Released all slaves [ 563.272444][ T9549] bond5 (unregistering): Released all slaves [ 563.392784][ T9549] bond6 (unregistering): (slave veth11): Releasing active interface [ 563.402649][ T9549] bond6 (unregistering): Released all slaves [ 563.495421][T19241] IPv6: sit1: Disabled Multicast RS [ 563.625870][ T9549] tipc: Left network mode [ 564.195849][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 564.229952][T19287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 564.486462][T19296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3653'. [ 564.515394][T19278] wg1 speed is unknown, defaulting to 1000 [ 564.755018][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 564.802462][T19308] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 565.011147][T19303] wg1 speed is unknown, defaulting to 1000 [ 565.189687][T19331] netlink: 'syz.1.3659': attribute type 4 has an invalid length. [ 565.679073][T19351] tap0: tun_chr_ioctl cmd 35108 [ 565.836234][ T9549] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 566.137036][T19379] netlink: 'syz.3.3669': attribute type 1 has an invalid length. [ 566.653384][T19361] delete_channel: no stack [ 566.846987][T19347] wg1 speed is unknown, defaulting to 1000 [ 566.918822][T19369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.112511][ T9549] hsr_slave_0: left promiscuous mode [ 567.120454][ T9549] hsr_slave_1: left promiscuous mode [ 567.951269][ T9549] lo (unregistering): left allmulticast mode [ 567.971773][T19401] geneve3: entered promiscuous mode [ 568.057531][T19403] netlink: 'syz.4.3679': attribute type 1 has an invalid length. [ 568.119072][ T30] audit: type=1800 audit(1760340828.120:6): pid=19406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3680" name="memory.events" dev="tmpfs" ino=521 res=0 errno=0 [ 568.146980][ T30] audit: type=1804 audit(1760340828.140:7): pid=19406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3680" name="/newroot/98/memory.events" dev="tmpfs" ino=521 res=1 errno=0 [ 568.185770][T19403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.313127][T19407] veth3: entered promiscuous mode [ 568.376602][T19407] bond2: (slave veth3): Enslaving as an active interface with a down link [ 568.899762][T19436] bond0: (slave bond_slave_0): Releasing backup interface [ 568.957746][T19436] bond0: (slave bond_slave_1): Releasing backup interface [ 568.989822][T19436] team0: Port device team_slave_0 removed [ 569.023177][T19436] team0: Port device team_slave_1 removed [ 569.044968][T19436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.054094][T19436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.063757][T19436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.226480][T19449] netlink: 'syz.4.3688': attribute type 6 has an invalid length. [ 569.230648][ T9549] IPVS: stop unused estimator thread 0... [ 569.244925][T19449] bridge1: entered promiscuous mode [ 569.250310][T19449] bridge1: entered allmulticast mode [ 569.520982][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3694'. [ 569.794420][T19485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3698'. [ 569.834992][T19485] bond0: entered promiscuous mode [ 569.840178][T19485] bond_slave_0: entered promiscuous mode [ 569.858877][T19485] bond_slave_1: entered promiscuous mode [ 569.883502][T19485] bond0: left promiscuous mode [ 569.888705][T19485] bond_slave_0: left promiscuous mode [ 569.895827][T19485] bond_slave_1: left promiscuous mode [ 569.950148][T19490] bridge_slave_0: left allmulticast mode [ 569.957805][T19493] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 569.983965][T19490] bridge_slave_0: left promiscuous mode [ 570.000642][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.017568][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 570.041413][T19490] bridge_slave_1: left allmulticast mode [ 570.049164][T19490] bridge_slave_1: left promiscuous mode [ 570.055359][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.080119][T19490] bond0: (slave bond_slave_0): Releasing backup interface [ 570.127767][T19490] bond0: (slave bond_slave_1): Releasing backup interface [ 570.180583][T19490] team0: Port device team_slave_0 removed [ 570.208271][T19490] team0: Port device team_slave_1 removed [ 570.221794][T19490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.232800][T19490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.241695][T19490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.250863][T19490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.262306][T19490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.343108][T19502] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 570.391101][T19506] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3702'. [ 570.713637][T19516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3707'. [ 570.757270][T19521] syzkaller0: entered promiscuous mode [ 570.762822][T19521] syzkaller0: entered allmulticast mode [ 570.956779][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3710'. [ 571.169663][T19538] IPVS: length: 24 != 6168 [ 571.417996][T19548] dvmrp8: entered allmulticast mode [ 571.616726][T19545] netlink: 'syz.2.3717': attribute type 16 has an invalid length. [ 571.635652][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3722'. [ 571.652128][T19545] netlink: 'syz.2.3717': attribute type 17 has an invalid length. [ 571.657925][T19546] dvmrp8: left allmulticast mode [ 571.751112][T19545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.782529][T19568] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3723'. [ 572.357202][ T49] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 572.375754][T19589] netlink: 'syz.2.3725': attribute type 15 has an invalid length. [ 572.402367][ T49] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 572.436602][ T49] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 572.481030][ T49] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 572.508215][T19597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.830998][T19605] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3729'. [ 572.831040][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'. [ 573.585799][T19640] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 573.603732][T19640] bond6 (unregistering): Released all slaves [ 574.121400][T19662] tipc: Enabled bearer , priority 0 [ 574.335618][T19671] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 574.364080][T19671] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 574.399639][T19671] netlink: 'syz.3.3745': attribute type 6 has an invalid length. [ 574.531873][T19682] __nla_validate_parse: 4 callbacks suppressed [ 574.531894][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 574.589184][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 574.625721][T19682] ip6tnl1: entered promiscuous mode [ 574.654809][T19682] ip6tnl1: entered allmulticast mode [ 574.673378][T19686] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 574.789580][T19686] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.816609][T19684] vlan3: entered allmulticast mode [ 574.821879][T19684] veth1: entered allmulticast mode [ 574.828771][T19684] bond6: (slave vlan3): Opening slave failed [ 574.850450][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'. [ 574.857320][T19697] netlink: 'syz.0.3751': attribute type 4 has an invalid length. [ 574.860279][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 574.867580][T19697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3751'. [ 574.878188][T19696] netlink: 'syz.2.3752': attribute type 14 has an invalid length. [ 574.894641][T19696] netlink: 'syz.2.3752': attribute type 11 has an invalid length. [ 575.087254][T19704] netlink: 'syz.3.3755': attribute type 1 has an invalid length. [ 575.105691][T19704] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3755'. [ 575.235371][T15288] tipc: Node number set to 4278190080 [ 575.975569][T19731] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 575.983782][T19731] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 576.106120][T19735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 576.130900][T19735] gretap3: entered promiscuous mode [ 576.164984][T19727] veth1_vlan: entered allmulticast mode [ 576.175421][T19727] veth1_vlan: left promiscuous mode [ 576.191030][T19727] team0: Device veth1_vlan failed to register rx_handler [ 576.464610][T19754] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3771'. [ 576.485508][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'. [ 577.291225][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 577.878040][T19844] gre3: entered promiscuous mode [ 577.883678][T19844] gre3: entered allmulticast mode [ 579.673040][T19907] syzkaller0: left promiscuous mode [ 579.679306][T19907] syzkaller0: left allmulticast mode [ 580.154431][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3799'. [ 580.178461][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3799'. [ 580.216688][T19917] validate_nla: 5 callbacks suppressed [ 580.216710][T19917] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 580.321015][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3800'. [ 580.360265][T19917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.497162][T19322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.508060][T19322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.645018][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 580.749082][T19928] netlink: 'syz.4.3802': attribute type 1 has an invalid length. [ 580.769494][T19928] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3802'. [ 580.902010][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3807'. [ 580.912566][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3807'. [ 581.418351][T19971] netlink: 'syz.1.3817': attribute type 3 has an invalid length. [ 581.662956][T19987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3823'. [ 581.765520][T19996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3825'. [ 582.092758][T20008] nbd: couldn't find a device at index 0 [ 582.157350][T20009] netlink: 'syz.1.3828': attribute type 8 has an invalid length. [ 582.174989][T20009] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3828'. [ 582.195907][T20009] 0ªX¹¦À: renamed from caif0 [ 582.279094][T20013] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3830'. [ 582.292464][T20009] 0ªX¹¦À: entered allmulticast mode [ 582.307155][T20009] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 583.368874][T20051] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.800630][T20077] sit0: entered promiscuous mode [ 583.845604][T20077] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 583.853853][T20078] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 583.950438][T20083] bond7: Unable to set up delay as MII monitoring is disabled [ 583.960820][T20083] bond7 (unregistering): Released all slaves [ 583.981882][T19322] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.990364][T19322] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.011647][T19322] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.035328][T19322] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.148198][T20094] bridge0: entered allmulticast mode [ 584.200931][T20094] macsec0: left allmulticast mode [ 584.206292][T20094] macsec0: left promiscuous mode [ 584.211518][T20094] bridge0: port 3(macsec0) entered disabled state [ 584.544545][T20109] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 584.855862][T20133] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 584.868833][T20133] dvmrp1: linktype set to 773 [ 585.001711][T20145] xt_SECMARK: invalid mode: 0 [ 585.373676][T20163] __nla_validate_parse: 10 callbacks suppressed [ 585.373702][T20163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3871'. [ 585.512775][T20174] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3875'. [ 585.522524][T20174] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3875'. [ 585.976376][T20185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'. [ 586.004613][T20185] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 587.306041][T20216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3886'. [ 587.623842][T20247] tipc: Can't bind to reserved service type 1 [ 587.942986][T20259] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 588.318298][T20274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3899'. [ 588.374917][T20279] netlink: 'syz.4.3901': attribute type 6 has an invalid length. [ 588.391891][T20281] netlink: 'syz.4.3901': attribute type 6 has an invalid length. [ 588.430957][T20279] netlink: 'syz.4.3901': attribute type 6 has an invalid length. [ 588.470023][T20279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3901'. [ 588.626459][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3903'. [ 588.627259][T20289] netlink: 'syz.2.3904': attribute type 4 has an invalid length. [ 588.673949][T20287] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 588.706257][T20289] netlink: 'syz.2.3904': attribute type 4 has an invalid length. [ 588.758540][T20298] netlink: 'syz.4.3905': attribute type 29 has an invalid length. [ 589.048736][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 589.555688][T20333] syzkaller0: Caught tx_queue_len zero misconfig [ 589.827094][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3921'. [ 589.912805][T20346] 8021q: adding VLAN 0 to HW filter on device bond7 [ 589.934518][T20348] bond7: (slave macsec1): Error -34 calling dev_set_mtu [ 589.983021][T20346] netlink: 'syz.1.3921': attribute type 12 has an invalid length. [ 590.016546][T20362] batadv0: entered promiscuous mode [ 590.024269][T20362] team0: entered promiscuous mode [ 590.031462][T20362] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 590.064165][T20362] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 590.305851][T20384] netlink: 'syz.3.3931': attribute type 10 has an invalid length. [ 590.319927][T20381] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 590.436270][T20381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 590.476153][T20388] syzkaller1: entered promiscuous mode [ 590.481829][T20388] syzkaller1: entered allmulticast mode [ 590.688917][T20402] syzkaller0: entered promiscuous mode [ 590.700555][T20402] syzkaller0: entered allmulticast mode [ 590.891107][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 591.008669][T20424] __nla_validate_parse: 3 callbacks suppressed [ 591.008692][T20424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3936'. [ 591.045270][T20424] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3936'. [ 591.112641][T20430] validate_nla: 1 callbacks suppressed [ 591.112662][T20430] netlink: 'syz.4.3936': attribute type 4 has an invalid length. [ 591.153473][T20424] netlink: 'syz.4.3936': attribute type 6 has an invalid length. [ 591.205992][T20424] netlink: 'syz.4.3936': attribute type 5 has an invalid length. [ 591.216132][T20424] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3936'. [ 591.233839][T20432] netlink: 'syz.4.3936': attribute type 4 has an invalid length. [ 591.442735][T20439] ieee802154 phy1 wpan1: encryption failed: -90 [ 591.798626][T20460] €Â: renamed from hsr0 [ 591.856462][T20462] netlink: 'syz.1.3952': attribute type 4 has an invalid length. [ 591.871014][T20462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3952'. [ 592.086156][T20462] .`: renamed from bond0 (while UP) [ 592.429088][T20491] tipc: Enabled bearer , priority 0 [ 592.476561][T20498] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.530440][T20491] tipc: Disabling bearer [ 592.741895][T20506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3961'. [ 592.756138][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 593.077174][T20505] netlink: 'syz.2.3962': attribute type 8 has an invalid length. [ 593.097541][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 593.188870][T20505] geneve4: entered promiscuous mode [ 593.204292][T20505] geneve4: entered allmulticast mode [ 593.627342][T20523] xt_TCPMSS: Only works on TCP SYN packets [ 593.652802][T20531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3970'. [ 593.837773][T20542] macsec1: entered allmulticast mode [ 593.846283][T20541] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3974'. [ 593.864584][T20542] hsr0: entered allmulticast mode [ 593.879166][T20542] hsr_slave_0: entered allmulticast mode [ 593.906677][T20552] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 594.192281][T20573] netlink: 'syz.0.3983': attribute type 2 has an invalid length. [ 594.255098][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3984'. [ 594.782859][T20231] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.807680][T20231] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.829656][T20231] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 594.852095][T20231] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.869518][T20231] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.885970][T20231] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 594.901464][T20593] tipc: Enabling of bearer rejected, already enabled [ 594.919871][T20231] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.938785][T20231] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.947368][T20231] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 594.970660][T20231] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.992940][T20231] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.004419][T20231] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 595.462949][T20626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.557614][T20631] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 595.578938][T20632] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 595.727171][T20632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.007439][T20661] netlink: 'syz.0.4004': attribute type 15 has an invalid length. [ 596.084305][T20666] __nla_validate_parse: 6 callbacks suppressed [ 596.084329][T20666] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4006'. [ 596.136145][T20666] hsr_slave_0: left promiscuous mode [ 596.224142][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4007'. [ 596.236490][T20675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4007'. [ 596.483424][T20666] hsr0 (unregistering): left allmulticast mode [ 596.582069][T20679] ¾x9ÿ: renamed from bridge_slave_0 [ 597.353502][T20727] netlink: 'syz.0.4018': attribute type 21 has an invalid length. [ 597.361759][T20727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4018'. [ 598.456537][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 598.489960][T20764] ip6gretap0: entered promiscuous mode [ 598.504948][T20764] ip6gretap0: left promiscuous mode [ 598.558446][T20761] IPVS: Error connecting to the multicast addr [ 598.906638][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 599.064608][T20794] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4034'. [ 599.084806][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 599.536392][T20827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4045'. [ 599.855610][T20846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4048'. [ 599.923254][T20844] : renamed from bond_slave_0 [ 602.652437][T20897] __nla_validate_parse: 5 callbacks suppressed [ 602.652458][T20897] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4063'. [ 602.808618][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4066'. [ 603.048535][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 603.062924][T20921] 8021q: VLANs not supported on caif0 [ 603.076434][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 603.168376][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 603.184678][T20929] netlink: 'syz.4.4069': attribute type 83 has an invalid length. [ 603.596639][T20945] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 604.314213][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 604.348499][T20963] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 604.545983][T20968] mac80211_hwsim hwsim53 syzkaller0: Caught tx_queue_len zero misconfig [ 604.672657][T20976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.688553][T20976] bond0: (slave rose0): Enslaving as an active interface with an up link [ 605.284974][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 605.303245][T21003] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 605.318390][T21003] bond0 (unregistering): Released all slaves [ 605.713365][T21020] veth0: entered promiscuous mode [ 605.719365][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'. [ 605.758590][T21020] veth0 (unregistering): left promiscuous mode [ 605.774178][T21025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4096'. [ 605.875449][T21026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4097'. [ 606.008584][T21031] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 606.401063][T18323] Bluetooth: hci3: link tx timeout [ 606.407673][T18323] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.424240][ T5839] Bluetooth: hci3: link tx timeout [ 606.429409][ T5839] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.514796][T21061] netlink: 'syz.2.4109': attribute type 10 has an invalid length. [ 606.556452][T21061] geneve0: entered promiscuous mode [ 606.566107][T21061] team0: Port device geneve0 added [ 606.876002][T21083] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 606.962604][T21082] bond8: (slave bridge2): making interface the new active one [ 606.971523][T21082] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 607.322695][T21107] !: renamed from dummy0 [ 607.387748][T21107] bridge0: entered promiscuous mode [ 607.393695][T21107] bridge0: entered allmulticast mode [ 607.667659][T21123] __nla_validate_parse: 8 callbacks suppressed [ 607.667682][T21123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4124'. [ 608.484422][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 608.750679][T21144] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 608.762845][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4133'. [ 608.838731][T21144] geneve3: left promiscuous mode [ 608.852723][T21144] geneve4: left promiscuous mode [ 608.858362][T21144] geneve4: left allmulticast mode [ 608.892791][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4131'. [ 608.947159][T20231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.956460][T20231] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.071484][T20231] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.092794][T20231] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.142962][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 609.360688][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 609.378651][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 609.421187][T21195] batman_adv: batadv0: Adding interface: ipvlan2 [ 609.442151][T21195] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.481032][T21203] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 609.495555][T21204] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4144'. [ 609.533149][T21195] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 609.626346][T21212] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4148'. [ 609.644109][T21212] netlink: 'syz.0.4148': attribute type 1 has an invalid length. [ 609.915580][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 610.051721][T21229] netlink: 'syz.0.4152': attribute type 4 has an invalid length. [ 610.069079][T21229] netlink: 'syz.0.4152': attribute type 4 has an invalid length. [ 610.432900][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4158'. [ 610.457159][T21249] netlink: 'syz.0.4158': attribute type 23 has an invalid length. [ 610.499411][T21253] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 610.616488][T21255] tipc: Resetting bearer [ 610.627669][T21255] syzkaller0: left promiscuous mode [ 610.633158][T21255] syzkaller0: left allmulticast mode [ 610.894516][T21274] netlink: 'syz.1.4166': attribute type 4 has an invalid length. [ 611.031742][T20225] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.050763][T20225] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.235836][T20225] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.264145][T20225] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.512768][T21300] netlink: 'syz.1.4174': attribute type 4 has an invalid length. [ 611.543753][T21300] netlink: 'syz.1.4174': attribute type 4 has an invalid length. [ 612.070412][T21327] macvtap1: entered promiscuous mode [ 612.094402][T21327] team0: entered promiscuous mode [ 612.100831][T21327] team_slave_0: entered promiscuous mode [ 612.110116][T21327] team_slave_1: entered promiscuous mode [ 612.120419][T21327] macvtap1: entered allmulticast mode [ 612.150615][T21327] team0: entered allmulticast mode [ 612.186778][T21327] team_slave_0: entered allmulticast mode [ 612.192684][T21327] team_slave_1: entered allmulticast mode [ 612.658559][T21350] netlink: 'syz.1.4190': attribute type 1 has an invalid length. [ 612.667252][T21350] netlink: 'syz.1.4190': attribute type 1 has an invalid length. [ 612.678799][T21348] tipc: Failed to remove unknown binding: 66,1,1/4278190080:21945637/21945639 [ 612.707165][T21348] tipc: Failed to remove unknown binding: 66,1,1/4278190080:21945637/21945639 [ 612.724030][T21348] tipc: Failed to remove unknown binding: 66,1,1/4278190080:21945637/21945639 [ 612.929292][T21332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.937562][T21364] __nla_validate_parse: 8 callbacks suppressed [ 612.937580][T21364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4193'. [ 612.989764][T21370] x_tables: duplicate underflow at hook 1 [ 612.997875][T21370] tipc: Enabling of bearer rejected, already enabled [ 613.009524][T21370] syzkaller0: entered promiscuous mode [ 613.048769][T21370] syzkaller0: entered allmulticast mode [ 613.055347][T21371] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.4196'. [ 613.151862][T21370] tipc: Resetting bearer [ 613.538755][T21397] syzkaller1: entered promiscuous mode [ 613.544935][T21397] syzkaller1: entered allmulticast mode [ 613.562727][T21395] nbd: socks must be embedded in a SOCK_ITEM attr [ 613.814514][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4206'. [ 613.826643][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4206'. [ 613.837123][T21409] xt_policy: output policy not valid in PREROUTING and INPUT [ 614.208939][T21430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4212'. [ 614.255391][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 614.829618][T21455] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4218'. [ 614.854386][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 615.001139][T21465] validate_nla: 3 callbacks suppressed [ 615.001162][T21465] netlink: 'syz.3.4221': attribute type 4 has an invalid length. [ 615.017657][T21458] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 615.039977][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.050659][T21458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4218'. [ 615.059935][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.060899][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.087909][T21459] wg1 speed is unknown, defaulting to 1000 [ 615.143151][T21473] netlink: 'syz.1.4220': attribute type 4 has an invalid length. [ 615.168125][T21463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 615.210944][T21473] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4220'. [ 615.291486][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.307935][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.336574][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.354254][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.420567][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.434644][T21463] wg1 speed is unknown, defaulting to 1000 [ 615.454712][T21463] wg1 speed is unknown, defaulting to 1000 [ 616.360792][T21528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.527792][T21547] vxcan1: entered allmulticast mode [ 616.561341][T21539] netlink: 'syz.4.4234': attribute type 10 has an invalid length. [ 616.646132][T21539] wlan1: mtu greater than device maximum [ 616.673993][T21539] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 616.702691][T21550] netlink: 'syz.1.4239': attribute type 1 has an invalid length. [ 616.898677][T21566] wg1 speed is unknown, defaulting to 1000 [ 617.160117][T21572] pimreg: entered allmulticast mode [ 617.867594][T21588] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 617.909844][T21588] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 618.098100][T21600] wg1 speed is unknown, defaulting to 1000 [ 618.517071][T21627] __nla_validate_parse: 8 callbacks suppressed [ 618.517092][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4260'. [ 619.121581][T21667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4270'. [ 619.711623][T21697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4275'. [ 619.820861][T21705] syzkaller1: entered promiscuous mode [ 619.834366][T21705] syzkaller1: entered allmulticast mode [ 619.977564][T21716] netlink: 'syz.0.4279': attribute type 1 has an invalid length. [ 620.127977][T21724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4283'. [ 620.500502][T21736] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4287'. [ 620.534746][T21705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.242540][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.703572][T21788] delete_channel: no stack [ 621.806150][T21792] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 621.931759][T21798] netlink: 'syz.0.4303': attribute type 10 has an invalid length. [ 621.943570][T21798] team0: Failed to send options change via netlink (err -105) [ 621.969665][T21798] team0: Port device netdevsim0 added [ 622.008712][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4306'. [ 622.291400][T21809] bond4: Unable to set up delay as MII monitoring is disabled [ 622.316674][T21809] bond4 (unregistering): Released all slaves [ 622.413770][T21813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4309'. [ 622.890040][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4316'. [ 623.114722][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4321'. [ 623.125364][T21853] batman_adv: batadv0: Removing interface: ipvlan2 [ 623.370565][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4324'. [ 623.410650][T21865] syz_tun: entered allmulticast mode [ 623.517134][T21862] syz_tun: left allmulticast mode [ 623.930797][T21886] wg1 speed is unknown, defaulting to 1000 [ 624.080082][ T30] audit: type=1800 audit(1760340884.050:8): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4327" name="memory.events" dev="tmpfs" ino=1119 res=0 errno=0 [ 624.251894][T21901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4337'. [ 624.553103][T21912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4342'. [ 624.576606][T21912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4342'. [ 624.651559][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.736783][T21921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4343'. [ 624.786381][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 625.208326][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 625.915553][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 625.953430][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 625.991171][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.002311][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 626.024102][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.041521][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 626.063981][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.104064][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.273066][T21989] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 626.414607][T21997] syzkaller1: entered promiscuous mode [ 626.420255][T21997] syzkaller1: entered allmulticast mode [ 626.551131][T22008] ieee802154 phy1 wpan1: encryption failed: -90 [ 626.757520][T22011] syzkaller0: entered promiscuous mode [ 626.763206][T22011] syzkaller0: entered allmulticast mode [ 627.031922][T22020] wg1 speed is unknown, defaulting to 1000 [ 627.051928][T22032] macsec3: entered promiscuous mode [ 627.065943][T22032] ip6gretap0: entered promiscuous mode [ 627.072149][T22032] macsec3: entered allmulticast mode [ 627.079335][T22032] ip6gretap0: entered allmulticast mode [ 627.271060][T22041] netlink: 'syz.0.4375': attribute type 13 has an invalid length. [ 627.283060][T22041] netlink: 'syz.0.4375': attribute type 17 has an invalid length. [ 627.443760][T22046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.001289][T22041] erspan0: entered promiscuous mode [ 629.075407][T22041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.101780][T22041] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.120498][T22041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.201664][T22044] wg1 speed is unknown, defaulting to 1000 [ 629.344899][T22057] netlink: 'syz.4.4382': attribute type 5 has an invalid length. [ 629.543465][T22065] netlink: 'syz.4.4383': attribute type 3 has an invalid length. [ 629.742795][T22073] __nla_validate_parse: 8 callbacks suppressed [ 629.742816][T22073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4384'. [ 629.759345][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 629.789959][T22074] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4385'. [ 629.802108][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4386'. [ 629.811393][T22074] openvswitch: netlink: Message has 512 unknown bytes. [ 629.929976][T22081] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4386'. [ 629.946222][T22074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.975256][T22074] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.992320][T22074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.052641][ T6114] tipc: Resetting bearer [ 630.162531][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4388'. [ 630.249295][ T6114] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 630.315575][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4390'. [ 630.318132][ T6114] batman_adv: batadv0: Removing interface: ip6gretap2 [ 630.483105][ T6114] dvmrp0 (unregistering): left allmulticast mode [ 630.519768][ T6114] team0: Port device geneve0 removed [ 630.717167][ T6114] tipc: Disabling bearer [ 631.059058][ T6114] bond0 (unregistering): Released all slaves [ 631.178377][ T6114] bond1 (unregistering): Released all slaves [ 631.192577][ T6114] bond2 (unregistering): Released all slaves [ 631.206951][ T6114] bond3 (unregistering): Released all slaves [ 631.329229][ T6114] bond4 (unregistering): Released all slaves [ 631.445564][ T6114] bond5 (unregistering): (slave veth8): Releasing active interface [ 631.455337][ T6114] bond5 (unregistering): Released all slaves [ 631.468720][ T6114] bond6 (unregistering): Released all slaves [ 631.481788][ T6114] bond7 (unregistering): Released all slaves [ 631.605748][ T6114] bond8 (unregistering): Released all slaves [ 631.718040][ T6114] bond9 (unregistering): Released all slaves [ 631.730688][T22078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4386'. [ 631.769404][T22082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.817071][T22089] chnl_net:caif_netlink_parms(): no params data found [ 632.004905][T22097] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 632.076945][T22100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4391'. [ 632.116366][T22106] syz_tun: entered allmulticast mode [ 632.156186][T22106] dvmrp8: entered allmulticast mode [ 632.229437][T22102] wg1 speed is unknown, defaulting to 1000 [ 632.296018][T22112] syzkaller1: entered promiscuous mode [ 632.301637][T22112] syzkaller1: entered allmulticast mode [ 632.310977][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4396'. [ 632.418747][T22101] syz_tun: left allmulticast mode [ 632.424778][T22101] dvmrp8: left allmulticast mode [ 632.569705][T22119] wg1 speed is unknown, defaulting to 1000 [ 632.798115][T22130] openvswitch: netlink: Message has 512 unknown bytes. [ 632.863302][T22135] xt_TCPMSS: Only works on TCP SYN packets [ 632.974728][T22137] syzkaller1: entered promiscuous mode [ 632.990070][T22137] syzkaller1: entered allmulticast mode [ 633.007900][T22134] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 633.377550][ T6114] : left promiscuous mode [ 633.512408][ T6114] tipc: Left network mode [ 633.634950][T22171] xt_TCPMSS: Only works on TCP SYN packets [ 633.695685][T22172] wg1 speed is unknown, defaulting to 1000 [ 634.031377][ T6114] veth1_vlan: left allmulticast mode [ 634.221609][ T6114] team0 (unregistering): Port device macvlan1 removed [ 634.983712][ T6114] IPVS: stop unused estimator thread 0... [ 634.996885][ T6114] ------------[ cut here ]------------ [ 635.002368][ T6114] WARNING: CPU: 0 PID: 6114 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 635.012017][ T6114] Modules linked in: [ 635.016347][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 635.026192][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 635.036808][ T6114] Workqueue: netns cleanup_net [ 635.041638][ T6114] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 635.047540][ T6114] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 635.067344][ T6114] RSP: 0018:ffffc9000ace7878 EFLAGS: 00010293 [ 635.073546][ T6114] RAX: ffffffff89f0c8ec RBX: ffff8880777ac900 RCX: ffff88802aebbc80 [ 635.081631][ T6114] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff88802aebbc80 [ 635.089713][ T6114] RBP: ffffc9000ace7990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 635.097782][ T6114] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 635.105858][ T6114] R13: 1ffff9200159cf3c R14: ffff8880777addc0 R15: dffffc0000000000 [ 635.113926][ T6114] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 635.123088][ T6114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 635.130038][ T6114] CR2: 00007f3ef90e0e39 CR3: 000000000df38000 CR4: 00000000003526f0 [ 635.138107][ T6114] Call Trace: [ 635.141449][ T6114] [ 635.144561][ T6114] xfrm_net_exit+0x2d/0x70 [ 635.149020][ T6114] ops_undo_list+0x49a/0x990 [ 635.153649][ T6114] ? __pfx_ops_undo_list+0x10/0x10 [ 635.158852][ T6114] ? do_raw_spin_unlock+0x122/0x240 [ 635.164146][ T6114] cleanup_net+0x4d8/0x820 [ 635.168591][ T6114] ? __pfx_cleanup_net+0x10/0x10 [ 635.173640][ T6114] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.178927][ T6114] ? process_scheduled_works+0x9ef/0x17b0 [ 635.184887][ T6114] ? process_scheduled_works+0x9ef/0x17b0 [ 635.190649][ T6114] process_scheduled_works+0xae1/0x17b0 [ 635.196353][ T6114] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.202389][ T6114] worker_thread+0x8a0/0xda0 [ 635.207244][ T6114] kthread+0x711/0x8a0 [ 635.211372][ T6114] ? __pfx_worker_thread+0x10/0x10 [ 635.216739][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.221381][ T6114] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.226831][ T6114] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.232151][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.236826][ T6114] ret_from_fork+0x4bc/0x870 [ 635.241454][ T6114] ? __pfx_ret_from_fork+0x10/0x10 [ 635.248300][ T6114] ? __switch_to_asm+0x39/0x70 [ 635.253144][ T6114] ? __switch_to_asm+0x33/0x70 [ 635.257995][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.262634][ T6114] ret_from_fork_asm+0x1a/0x30 [ 635.267509][ T6114] [ 635.270735][ T6114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 635.278292][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 635.287843][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 635.297932][ T6114] Workqueue: netns cleanup_net [ 635.302708][ T6114] Call Trace: [ 635.305987][ T6114] [ 635.308922][ T6114] dump_stack_lvl+0x99/0x250 [ 635.313608][ T6114] ? __asan_memcpy+0x40/0x70 [ 635.318222][ T6114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.323423][ T6114] ? __pfx__printk+0x10/0x10 [ 635.328119][ T6114] vpanic+0x237/0x6d0 [ 635.332111][ T6114] ? __pfx_vpanic+0x10/0x10 [ 635.336633][ T6114] panic+0xb9/0xc0 [ 635.340370][ T6114] ? __pfx_panic+0x10/0x10 [ 635.344828][ T6114] __warn+0x31b/0x4b0 [ 635.348819][ T6114] ? xfrm_state_fini+0x26d/0x2f0 [ 635.353765][ T6114] ? xfrm_state_fini+0x26d/0x2f0 [ 635.358709][ T6114] report_bug+0x2be/0x4f0 [ 635.363044][ T6114] ? xfrm_state_fini+0x26d/0x2f0 [ 635.367986][ T6114] ? xfrm_state_fini+0x26d/0x2f0 [ 635.372933][ T6114] ? xfrm_state_fini+0x26f/0x2f0 [ 635.377876][ T6114] handle_bug+0x84/0x160 [ 635.382128][ T6114] exc_invalid_op+0x1a/0x50 [ 635.386725][ T6114] asm_exc_invalid_op+0x1a/0x20 [ 635.391580][ T6114] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 635.397142][ T6114] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 635.416843][ T6114] RSP: 0018:ffffc9000ace7878 EFLAGS: 00010293 [ 635.422928][ T6114] RAX: ffffffff89f0c8ec RBX: ffff8880777ac900 RCX: ffff88802aebbc80 [ 635.431089][ T6114] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff88802aebbc80 [ 635.439149][ T6114] RBP: ffffc9000ace7990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 635.447123][ T6114] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 635.455095][ T6114] R13: 1ffff9200159cf3c R14: ffff8880777addc0 R15: dffffc0000000000 [ 635.463075][ T6114] ? xfrm_state_fini+0x26c/0x2f0 [ 635.468027][ T6114] ? xfrm_state_fini+0x26c/0x2f0 [ 635.472973][ T6114] xfrm_net_exit+0x2d/0x70 [ 635.477397][ T6114] ops_undo_list+0x49a/0x990 [ 635.482091][ T6114] ? __pfx_ops_undo_list+0x10/0x10 [ 635.487207][ T6114] ? do_raw_spin_unlock+0x122/0x240 [ 635.492591][ T6114] cleanup_net+0x4d8/0x820 [ 635.497011][ T6114] ? __pfx_cleanup_net+0x10/0x10 [ 635.501954][ T6114] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.507158][ T6114] ? process_scheduled_works+0x9ef/0x17b0 [ 635.512884][ T6114] ? process_scheduled_works+0x9ef/0x17b0 [ 635.518617][ T6114] process_scheduled_works+0xae1/0x17b0 [ 635.524217][ T6114] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.530243][ T6114] worker_thread+0x8a0/0xda0 [ 635.535224][ T6114] kthread+0x711/0x8a0 [ 635.539341][ T6114] ? __pfx_worker_thread+0x10/0x10 [ 635.544462][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.549065][ T6114] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.554296][ T6114] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.559680][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.564277][ T6114] ret_from_fork+0x4bc/0x870 [ 635.569048][ T6114] ? __pfx_ret_from_fork+0x10/0x10 [ 635.574170][ T6114] ? __switch_to_asm+0x39/0x70 [ 635.578941][ T6114] ? __switch_to_asm+0x33/0x70 [ 635.583794][ T6114] ? __pfx_kthread+0x10/0x10 [ 635.588400][ T6114] ret_from_fork_asm+0x1a/0x30 [ 635.593183][ T6114] [ 635.596513][ T6114] Kernel Offset: disabled [ 635.600847][ T6114] Rebooting in 86400 seconds..