last executing test programs: 5.129107s ago: executing program 0 (id=1967): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4c25, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000000)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x2a, {0x0, @rand_addr=0x64010101, @loopback}}}], 0x20}, 0x4008084) (async) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x8001, &(0x7f0000000040)=0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000009a40)={0x0, 0x2, 0xe70, 0xfffffbff}, &(0x7f0000009a80)=0x10) 3.959698026s ago: executing program 0 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x6, 0x0, 0xb, 0x10, 0x10}, @ldst={0x2, 0x0, 0x2, 0x6, 0x0, 0x80, 0x8}, @func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x3c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom$packet(r1, 0x0, 0x0, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r5, 0x0, 0x5, 0x0, &(0x7f0000000040)) socket(0x840000000002, 0x3, 0xff) (async) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bd078064", 0x14}, {0x0}], 0x2}}], 0x1, 0x0) socket(0x22, 0x4, 0xffffffff) (async) r7 = socket(0x22, 0x4, 0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x7c, &(0x7f0000000000)=r10, 0x62) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r11, 0x8b2c, &(0x7f0000000040)) r12 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000068000100fae26789de58915a00000000000000000c000200010000001500000014000c80060001008100007a247692c1f8deea00080002"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000068000100fae26789de58915a00000000000000000c000200010000001500000014000c80060001008100007a247692c1f8deea00080002"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES16=r11, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 3.744171342s ago: executing program 0 (id=1987): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0xf0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4dc, 0x1, 0xfffffffa}}]}]}}}]}, 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 3.439479056s ago: executing program 0 (id=1991): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x1, 'nicvf0\x00', {}, 0xff}) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) (async) sendmsg$kcm(r1, &(0x7f0000001640)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xee}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1, &(0x7f0000001200)=[{0xd0, 0x114, 0x4, "551f9b930fab340af06266e1cdaeb988410733413f649bdb342f6755d98564dc388fc5ef25e8fa529c5ed9cceeeb00f2b75376770dcc55058d3e5b233b966208db01cc2956ee97e07cfc7c081d9472ff8352ad78a49cfa964b9925c9e3e4e438f5d56c299442388a4a71d781e9637a1ce12c22ce675f979838eb323b89e2b0a240af9a24142f2d5bc4d1e1a22f90771ee90b717375183c821403d8b8fdd37af923c7220ab3e06e9b277447db85ec5341daea55f7f794f9a15a06dc7d4e10"}, {0xe0, 0x10d, 0x7fff, "06d52bd4970d892c3d17d2d106bce653e64353a1625152038237805cf02c1dd9394692b998c6c74f411f2c1bf6553e31eb152d0dff1e9e2a83c36193e3bd7231d8507a6f8eb5a5b843f227d5351c9cb765fd2c16d564b73dba68038c407fd7fac4fe26dd5d0975c1c26b7a4a2de3f43d4c36afe23e3f9a5f85c7e6d0ca6d587d2ba763c8eb0f13d677606b3e7cc666940ea4680a7df6ec3e08fd267762345876eae350a438a1e801c28d2359246fd363930b276cee33bbef575c35fd822ba7518b0f9d39cc62f1f9f2a3c7aaf0"}, {0x110, 0x10f, 0x1, "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"}, {0xa0, 0x119, 0x2, "6c97d038634112266772a7d1ef1ced61b371def5a071cf3d42d79804c1e64ffd082bcb133119c8a076054b2b07e01962d8a086ba8f411be3a72ab376c16e2a9845a58216a34984360a928bbeaa638e5dceb1b8ab1534d4f36325a0301e6efdd7312734ea750a3f1e8d40b6879170d59ae3269f7659e323c686e46a742aace432cb34655bf4e46a529c1a28"}, {0xe0, 0x112, 0x8, "e62b0bbfde5d3b4bc1138c2be079af56ddabdca1d2f23efb7f03a31e24b50c9ea99cbfe12b169e27ae5e1a4912301223cc2c6d2bfa73a1915c42bce6238ecba2f129864afcb88883d4a2422a9128bef2a2c6bff733f3186c32a300a1fe1ae3de643567f9060cf94d35f3f95a8c95aad98f9110547fda1f8f880e25f200a575a06ebe0813a57ba4f8677e21ba295cc14545aa7125449925271b0abed16bbfd63b9d07fb5b655da7610563440a2a2b9658c90e7ed5a11d573e6b5ec5ec75ec2fb6ca2ea43063dd0bb075ca6616fa6f"}], 0x440}, 0x4000000) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001680)={r2, 0xcb61, 0x5, "1e670c05f16ce74e72179b4f8eb6159e94e1c7278989e449ecc988cbc6793acf979b3490013d306cce1af4082366172f89231e5203f16277a95a422ac579cfdb40e668df1a58dae8377bac98750a299ed3945c5e03614dc81cabe2e2a98293554cd1097b496f16015725ba1296cb976fb6817fa736fad4cc2774aa0dd4501c36f2499116d33f03e9612b2fd17a4ec07681c8c2007d063325c306baba15857af5202afbc71ba2d33581"}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'gre0\x00', 0x0}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x114, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0xcc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x7c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff00}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xaf2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x23}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc53}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x10, r1}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001a00)=r4, 0x4) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r7, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001b80)=@generic={0x2, 0x0, 0xf}) (async) socket$inet6(0xa, 0xa, 0x9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xbc}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000001) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x7c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x4000810) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001e80)={@local}, &(0x7f0000001ec0)=0x14) (async) openat$cgroup_ro(r6, &(0x7f0000001f00)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002140)={r6, 0x0, 0x66, 0xf5, &(0x7f0000001f40)="7e1bc5d9bc5fb77daa10de3693aa6be0dceed7692055b927fa88dc7abaa82388d75c558c2a4ec43ab9f78f91a546be0037d69cd63b748cce895c80b6ae90f3770adb6e5b089bdb4c717a10ef365cf7ec5a0a2696f209ed2ce3d461f2468616d1eadbcb0f3cdf", &(0x7f0000001fc0)=""/245, 0xa547, 0x0, 0xc, 0x3a, &(0x7f00000020c0)="0a6237cf4957ee548c2dcc15", &(0x7f0000002100)="1a98ae3fccefa00fc1dae65925a80b683bc8d464d0b3d8c616ba3b14cb96a31783727743cf49e65f012ead3aa55accd28f6997f8c047db4dfc01", 0x0, 0x0, 0x81}, 0x50) sendmsg$inet6(r0, &(0x7f0000003480)={&(0x7f00000021c0)={0xa, 0x4e20, 0x8, @mcast1, 0x1000}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000002200)="ccdd75accee1e342c6ddbfd9ff1b0ecd44962ef4d43c83930b859404f42c361be37010a8a67e48cd74a4d368e4", 0x2d}, {&(0x7f0000002240)="25df4d29ccf0021472", 0x9}], 0x2, &(0x7f00000022c0)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x3b, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xe4}, @enc_lim={0x4, 0x1, 0x3b}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hopopts={{0xe8, 0x29, 0x36, {0x0, 0x19, '\x00', [@generic={0x7, 0xc9, "e205a267715a95687e614c5dec5278550a14b01dfd4e3a448d066004e821afd47907f8eec205273d687fd625898e3765b6e0525a387733003e014b5246d4f818d28043c9914bbb538bf8e5646a9a6b314810f4544cec2739d02bc49be36924735fd84f1ace74fbedaf59af004649b44b9346d998e718ba42d9029e793f1d710e29bade54564e5232894d535799c7a642f51060410c2266114cf6e701cdc82ab4ccbffc00ee86a8f1f87ff5894310b137d8a52c3d4fb2ee8e8c5c94ba268163904a6dc786c597d2e20d"}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x87, 0x4, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1}, @jumbo]}}}, @hopopts={{0x1020, 0x29, 0x36, {0x89, 0x200, '\x00', [@generic={0x0, 0x1000, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff7}}], 0x11a0}, 0x80) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xc9503000) (async) accept4$unix(r0, &(0x7f00000034c0), &(0x7f0000003540)=0x6e, 0x80000) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000004580)={{0x0, 0x2, 0x2, 0x401, 0x2, 0x7, 0x9, 0x9, 0x3, 0xb020, 0x2, 0x4, 0x3, 0x5, 0x1}}) 3.173730017s ago: executing program 0 (id=1995): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b1", 0x3, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e24, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000680)={r3, &(0x7f0000000580)='*\x00', 0x4d00, &(0x7f00000005c0)={@align=0x3c6789ad, {0xe, 0x2, 0xffffff7e, 0x3f3}}, 0x2, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex=r4, 0xa, 0x1, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000700), &(0x7f0000000780), &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="030000001400000001000000", @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x80087601, 0x100000000010001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2e, "49720705000000004709b89e6fb2c55c00fccb7999335b022d49e00255020f1f55001d00"/46}}) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) connect$netlink(r6, &(0x7f0000000740)=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) close(r12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="18280000", @ANYRES32=r6, @ANYBLOB="000000000800000018110000", @ANYRES32=r12, @ANYBLOB="00565cdb2bcf9a9fff01e500000400000000000000da000000181500"/44, @ANYRES32=r3, @ANYBLOB="00000000000000008520000005000000a43b4000f0ffffff185500000500"/40], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r8], 0x0, 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r13, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.731063148s ago: executing program 4 (id=2000): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) listen(r1, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a31000000001400078005001500820000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4c0}, {0xffffffffffffffff, 0x8008}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_fd, @call={0x85, 0x0, 0x0, 0x65}, @call={0x85, 0x0, 0x0, 0xb0}, @call={0x85, 0x0, 0x0, 0xca}, @initr0={0x18, 0x0, 0x0, 0x0, 0x532, 0x0, 0x0, 0x0, 0xde9}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x2a, &(0x7f0000000240)=""/42, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0x3, 0x6}, {0x5, 0x4, 0x0, 0x4}, {0x4, 0x3, 0xe, 0xd}], 0x10, 0x3}, 0x94) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000340)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r7, &(0x7f0000000980), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x61, &(0x7f0000000480), &(0x7f00000004c0)=""/97, 0x143c, 0x0, 0x6c, 0x69, &(0x7f0000000580)="14f1e886877d51431910b730028fcb1c3317c95b0d340ad503e8433799bbebdd1ccf16f6a90174d67090fbc165a26bb920722983cb53f96d4d074d8ea7524745ff7b3d4bba8ff2ab27a9373716287395abb8ddbfcf4423c879181068e904a424471e682056a8bf87e0025da1", &(0x7f0000000600)="451968ce0bf65785636da65a4019df7142ff09bae7a7b7d26c067100fc7dafda97246ad2a02201b6c4961046e4c0dfbb72282031def00423feb003a9614af3416719eb5f89c7b04e3941e25de30586d3eaee46e001a416042f51f562c2f63f3a7c8ed2c38ade52fe6e", 0x4, 0x0, 0x1}, 0x50) 2.459733333s ago: executing program 1 (id=2003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x2, 0x5, 0x6, 0x10, 0x9}, &(0x7f0000000280)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e016a"], 0x2c}}, 0x800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r6, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff9}, @NL80211_ATTR_IE={0x5e, 0x2a, [@mic={0x8c, 0x10, {0x68, "0cd1507a1f96", @short="1c930237479c385b"}}, @ssid={0x0, 0x11, @random="bd4eae4101dbd96a1092774b41f1c74c4f"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0x1, @device_a, 0x5, @value=@broadcast, 0xffffffff, 0x800, @device_b, 0x8}}, @mesh_chsw={0x76, 0x6, {0x2, 0x45, 0x4, 0xfffa}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x3}}]}, @NL80211_ATTR_IE={0xaf, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x65}, 0x7, 0xc, @device_b, 0x1000, 0x1, 0x1}}, @ssid={0x0, 0xb, @random="d5ae8f434464cdcc8cb8a8"}, @fast_bss_trans={0x37, 0x85, {0xff, 0x2, "b11e7e085e3a4d5c8a7f0c642c3fcdd8", "283ae12234e56896832ba47020bbef5697d69226c632ca592ed6e9746d12532d", "4a93dc6f1780efac043bcd67c0d9404b3145c8bfc5ba0b5fffdfb9b5c42f4f7a", [{0x1, 0x1a, "62e061991941d5d9c115ebaee22e11276048b71b69c333c42dbc"}, {0x3, 0x15, "9b69b07d4fdc58272a1952dfe4fec38535e209d4ad"}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}]}, 0x140}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r9) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r10, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2.113880585s ago: executing program 1 (id=2007): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) (async) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x7c}}, 0x8085) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc1a, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216000000000000000080c64c39e5f4059bae641ed15112"}}, 0x80}, 0x1, 0x0, 0x0, 0x45002}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x638}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x88}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') getsockopt$inet_mreqn(r6, 0x0, 0x24, 0x0, 0x0) (async) unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x27}, 0x94) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETCOUNT(r7, 0x400261f2, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.829837593s ago: executing program 4 (id=2010): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) (async) r2 = socket$kcm(0x23, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) (rerun: 64) listen(r2, 0x8) (async, rerun: 64) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x50}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r6, 0x0, 0x8, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010"], 0xfc}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f00000000c0)=0x8) 1.817375269s ago: executing program 3 (id=2011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000240)={@private=0xa010100, @broadcast, r3}, 0xc) (rerun: 32) r4 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x60) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r5 = socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) (async) getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000280)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000007c0)={{&(0x7f00000002c0)=[{0x16, 0x5, 0xc9, {0x80000001, 0x2}, 0x8, 0x1, 0x7}, {0xf, 0x3, 0xfffffffffffffffc, {0x5, 0xb}, 0xe, 0xfffffffffffffff3, 0x2}, {0x8, 0x3, 0x44d1c47e, {0x7, 0x3}, 0xbb, 0xe1a, 0x2}], 0x3, 0x40, 0x3, 0x49c}, {&(0x7f0000000380)=[{0x5, 0x2e}, {0x7fff, 0x1}, {0x80000000, 0x1000}, {0x4}, {0x3, 0x1000}, {0x3cf}], 0x6, 0x10, 0x8, 0x7}, {&(0x7f0000000400)=[0x1, 0xd, 0x0, 0x3], 0x4, 0x8, 0xfff, 0x81}, {&(0x7f0000000680)=[{0x6e9, 0x2, 0x2, 0xa00000, 0x3}, {0x0, 0xe487, 0xd, 0x3, 0x3}, {0x306a, 0x3, 0x0, 0x7fffffff}, {0xc00000, 0x5, 0x0, 0x7}, {0x1ff, 0xce, 0x1, 0x92, 0x6}], 0x5, 0x28, 0x0, 0x2}, {&(0x7f0000000780)=[0x8, 0x10001, 0x9, 0x3, 0x3, 0x0, 0xb61f], 0x7, 0x8, 0x3, 0x4b}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000840)={{0x7f, 0x9}, 0x100, './file0\x00'}) (async, rerun: 32) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) (rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 1.683155118s ago: executing program 4 (id=2012): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 1.616887046s ago: executing program 3 (id=2013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992e05400c2", 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$kcm(0x2d, 0x2, 0x0) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000009", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x60, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYBLOB="a7f80fa25f5a927e8ca2bd0a3e12a1e9c464c4423fd3ea76422e9484ea87ffa9827d16ed56309ea9fbf9ade75b7181978f5346bdd90debf024935cc76ca803d8bf57f341f6adbec3563a7efacf", @ANYBLOB="a2e140ae21da56a6029de8bf5512fab3b40e", @ANYRES16=r1, @ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c1", 0x20}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x4000000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x80000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 1.605458625s ago: executing program 4 (id=2014): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x80108906, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[], 0x32600) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000540800000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r5 = socket(0x25, 0x5, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.491812301s ago: executing program 2 (id=2015): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/170}, {&(0x7f00000014c0)=""/186}, {&(0x7f0000001580)=""/162}, {&(0x7f0000001640)=""/200}, {&(0x7f0000001740)=""/208}, {&(0x7f0000001840)=""/206}, {&(0x7f0000001940)=""/211}, {&(0x7f0000001a40)=""/170}]}, 0x7f}, {{&(0x7f0000001b80), 0x0, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2}, {&(0x7f0000001c40)=""/195}, {&(0x7f0000001d40)=""/208}, {&(0x7f0000001e40)=""/100}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000002ec0)=""/201}, {&(0x7f0000002fc0)=""/164}, {&(0x7f0000003080)=""/252}, {&(0x7f0000003180)=""/32}, {&(0x7f0000003300)=""/4096}], 0x0, &(0x7f00000043c0)=""/69}, 0x2}], 0x400000000000262, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x212, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000080)='wg1\x00', 0x5, 0x2, 0x8}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 1.42658321s ago: executing program 1 (id=2016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x1, 0x1, 0x3, 0xe, 0x0, 0x4}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000000240)}, {0x0}], 0x4, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x38}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000080), &(0x7f0000000140)=@tcp6, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x6, [0xc9, 0x3593, 0x9, 0x8, 0x9, 0x3]}, &(0x7f0000000040)=0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="d3afb44c087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.206553628s ago: executing program 3 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0xd, 0x81, 0xd, 0x403}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r8, 0x10, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r8, 0x28c}, 0x8) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) 1.115213303s ago: executing program 4 (id=2018): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x808006}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0xf, 0x2}]}}, "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"}}, 0xfce) 1.102236586s ago: executing program 1 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffff1f, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3f00}, [@IFLA_TXQLEN={0x8, 0xd, 0x10000008}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000007}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r8 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2040, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$l2tp(0x2, 0x2, 0x73) connect$qrtr(r10, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc) sendmmsg(r9, 0x0, 0x0, 0x6080) 1.091812999s ago: executing program 2 (id=2020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x38, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040010) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xa}}}, 0x24}}, 0x4000810) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PBURST={0x8, 0x7, 0x15e0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}, @TCA_TBF_PBURST={0x8, 0x7, 0x888}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (rerun: 64) sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$inet6_sctp(0xa, 0x801, 0x84) 935.001591ms ago: executing program 2 (id=2021): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async, rerun: 32) listen(r1, 0x4) (async, rerun: 32) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) (async, rerun: 32) r4 = accept4$rose(r0, &(0x7f0000000340)=@short={0xb, @dev}, &(0x7f0000000380)=0x1c, 0x800) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) (async) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000580)=""/152, &(0x7f0000000780)=0x98) (async) recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}, 0xfffffffe}], 0x1, 0x2, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 861.915099ms ago: executing program 2 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000180)=0x7, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x10, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x12c0e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) socketpair(0x26, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000000c0)=0x2, 0x4) 604.976421ms ago: executing program 2 (id=2023): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000030000000000006000000000000000010500000020000000000000000000000b02000000006100302e4f006161006100"], 0x0, 0x58}, 0x28) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)={0x244, r2, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f3}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffee1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b3391e37873b61aefa4a1aaa7f9a5c39271e7ed52d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7adbc2f239208d00028c2fd6f52d427b0d05d2f67e125b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x99c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa23}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0xffffffffffffffc3, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x5, 0x7}) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448c3}, 0x0) 531.795717ms ago: executing program 3 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x9}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 528.811252ms ago: executing program 1 (id=2025): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000100)=""/4100, &(0x7f00000000c0)=0x1004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cf268fac835303af3cff81a0e8c8492e466cd808f000105b81182e8f8fdda94b8a6b29c76ab20598009c1d40c2cebd9d2fb90f84b2ec1467f549"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000850000000000000000100000186600000800000000000000ef10590c2d00917900000000af96cb2297a4e3af2d7fc468787c2c29b67844d44a6dc0cf7ea28e2a39b9663d12a33b4b7a47cb0eb15d0393ceea07aeb8d9b918fe57222615bfc174378a4f0770edc192d496da0812b4c11bce030d7a5dc6cbfc7e6dbb17167b48339bcee1a04b3d795dbafabb051e0bcb7de7e218da6a5123a5fdb2a4c8212521ed093dd6934db24457cc0a81271e65cbc8f6bc0105249e1c5894cb92a313bdc1e6ddc295f110b11c49317ec100771bf7463f91ecdb1c21c455baa291038b4a88b89ed5cea1"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=""/134, 0x86}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x8, @val=@tracing={r4, 0x5}}, 0x20) 439.609997ms ago: executing program 1 (id=2026): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000006800010043001000fdffff7f0000040000000000040004000c000880050004000900000004000b001c000c80060001000b00000006000100070000000800030000000000240002"], 0x6c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x6, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d3, &(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 329.733562ms ago: executing program 4 (id=2027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020400) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7001fbdbdf25027c00000c0001800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x44004010) connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0xd8, @dev={0xfe, 0x80, '\x00', 0x28}, 0x80, 0x3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@dellinkprop={0x90, 0x6d, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1002, 0x4a}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xe26}, @IFLA_LINK_NETNSID={0x8}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_IFALIASn={0x4}]}, 0x90}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000088a82f008100150008004a00003c0065000000069078ac141418ac1e000189042ed2440c050000000061000020074404000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) unshare(0x24060400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendfile(r6, r5, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000240000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r9, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b2000000000"], 0x44}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x3, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x2c}, 0x2, 0x34005, 0x0, 0x24080040}, 0x240008c4) 234.912637ms ago: executing program 3 (id=2028): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0xc5, 0x6}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0300180000000000000018000000180000000a000021b541273c4150720e56f0e5abbd3ffa358132cecb504ec29ec8d639b79495560000000100000f0600000001000000050000"], 0x0, 0x3a, 0x0, 0x6}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xd0, '\x00', r1, r2, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x7, 0x0, 0x8, 0x20000, 0xffffffffffffffff, 0x5, '\x00', r1, r2, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r2}, 0x8) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x1, 0x1127, 0x4, 0x3d42, 0x1, 0x3, '\x00', r1, r2, 0x1, 0x1, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', r1, r2, 0x3, 0x4, 0x1}, 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r10 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e24, 0x200, @private1, 0x1000}}, 0x6, 0x4}, &(0x7f0000000a80)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000ac0)={0x9, 0x0, 0x1, 0x4, r11}, &(0x7f0000000b00)=0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x0, 0x0, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r15 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r14, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r15, 0x1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x25, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @generic={0xa1, 0x5, 0x5, 0x4, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0xbf, &(0x7f0000000380)=""/191, 0x41100, 0x46, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000780)=[r6, r7, r8, r12, r13, 0xffffffffffffffff, r14], &(0x7f00000007c0)=[{0x1, 0x1, 0x8, 0x3}, {0x2, 0x2, 0xf, 0x6}, {0x0, 0x4, 0xd, 0xa}, {0x5, 0x5, 0xc, 0xb}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x5, 0xd, 0x1}, {0x0, 0x5, 0xa, 0x7}, {0x0, 0x2, 0x4, 0xc}], 0x10, 0xd7c550a}, 0x94) 163.544876ms ago: executing program 2 (id=2029): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x1, 0xfffffffc, 0x2000000, 0x1ff, 0x2, 0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001700), r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c000380050001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x100, 0xf, [0x37, 0xf, 0x5, 0x25, 0x1d, 0x30, 0x13, 0x2c, 0xe, 0x38, 0x11, 0xf, 0x3a, 0x31, 0x1a, 0xc], 0x2, 0x8, 0x4}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000002900)={0x8, 'veth0_to_hsr\x00', {'veth1_to_bridge\x00'}, 0x4}) r7 = socket(0xa, 0x80000, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003a80)=@newqdisc={0x860, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x800, 0x401, 0x6, 0x9, 0x7, 0x0, 0x3, 0x0, 0x3ff, 0x9, 0x5, 0x8, 0x6, 0x6, 0x5, 0x2, 0x8001, 0x2, 0x1ff, 0x5, 0x2, 0x800, 0x8000, 0x0, 0xe2f5, 0x7e1, 0x7, 0x1, 0x200, 0xb1c, 0x4, 0x8, 0x7, 0x8, 0x7, 0x8, 0x1, 0x6, 0x4, 0xa, 0xf, 0x767, 0x0, 0x7fffffff, 0x6, 0xa, 0x1, 0x7, 0x0, 0x6, 0x4a1, 0x200, 0x0, 0x3, 0x5, 0x3447, 0x0, 0x1, 0x100, 0x7, 0x2, 0x6, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3, 0x2, 0xd54, 0x0, 0x9, 0x6, 0x3, 0x1, 0x6, 0x6, 0x3, 0x8, 0x4, 0xdf1, 0x40, 0x6, 0x1, 0x8, 0x9, 0x8, 0x4, 0x10000, 0x4, 0xd, 0x7, 0x88b7686, 0x3, 0x12, 0x2, 0x81, 0x3, 0x1, 0x56, 0x9854, 0x3, 0x400, 0x53, 0x80000000, 0x3, 0x100, 0x7, 0x6, 0x10001, 0xf, 0x2, 0x6, 0x4, 0x2, 0x2, 0x0, 0xffffff83, 0x9, 0x6, 0x5, 0x7, 0x3, 0x1ab, 0xc, 0x596, 0x80000, 0x8000, 0x10, 0x6, 0xfffffffa, 0x8, 0xa3d, 0x5, 0x9, 0x4, 0xc, 0x9, 0x3, 0x2, 0x9, 0x3, 0x8001, 0x8001, 0xffffffff, 0x6, 0x1000, 0x25f3, 0xfffffffc, 0x0, 0x8b3, 0x4, 0xc, 0x3ff, 0x1, 0x200, 0x1, 0x6, 0x9, 0xff, 0x5, 0x6, 0xfffffffe, 0x6, 0x5, 0x1, 0xc, 0x1, 0x1, 0x5, 0x2, 0x3, 0x1, 0x7, 0xf, 0xd3, 0x1, 0x4, 0xf, 0x12000, 0x800, 0x6, 0xff, 0x31, 0x3, 0xd0, 0x7, 0x5, 0x4, 0x3, 0x400, 0x8, 0xd, 0xfffffffe, 0x9, 0x9, 0x7, 0x40, 0x3, 0x9, 0x3, 0x5, 0x10, 0xc797a6c, 0x4, 0x9, 0x8000, 0xfffff001, 0x1, 0x858a, 0x1, 0x8, 0x100, 0xfd, 0x50, 0xfffffffb, 0x3, 0x9, 0x2, 0xd, 0x9, 0x3, 0xf09, 0x8, 0x3, 0xfffffff7, 0x10001, 0xff, 0xa6c, 0x9, 0x8001, 0x7, 0x7, 0x1, 0x9, 0xfffffff1, 0x40, 0x2, 0x40, 0x7, 0x4, 0xd, 0x0, 0x5, 0x1, 0x2, 0x4, 0x10d, 0x5, 0xffff, 0x81, 0x2, 0x9, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x7, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x4, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0x200000f5, 0x81, 0x5, 0x80, 0x5, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x90, 0x5, 0xfffff76b, 0x7000000, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eba, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0xb, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf39, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0x3, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x860}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000028c0)={&(0x7f00000000c0), 0xc, &(0x7f0000002880)={&(0x7f0000001740)=@newchain={0x24, 0x64, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x10, 0x5}, {0xb, 0x7}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000054) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x29, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x0, 0xfffffc}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000002800)=[{{&(0x7f0000000140)=@l2={0x1f, 0xa20, @none, 0x9, 0x1}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)="8547f9ac59d4f8978621cbad7a12fd8191a34c97ff2b0ad0d0c5ed2478daedde0f88cb7da96dbd516d9c88187aba2286553bc79f7a19c3ea75f6a6f2c1d90325fccabc6f72b66c9f349490846f0967bce33c02c6342a5442543eb5d5f1d7af8dd0a2edb741e2c5950ee4b5694156fb3eb5383b88b4c8b67f40a6f99f01eb928e3b87dc0f2bffbb9839876457a0ef4eff06586edcb91954b874683a7bdc96c2913d8cd008e0ea743a5ab73e62", 0xac}, {&(0x7f0000000280)="8a811c06e0684cb052857e57ff18e10a00ed3232ef3ce7d255a15016994379004acdea8b77529a366d75cc9e7114e86a5b5df877da91a188ef8732e8605d51cc8e85ede7f78ab026874d282fd0aba5effccde6fdcc15533ba3022bac96ba95f9423603608c06881a", 0x68}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="ee9274035493717e21423bd1988533e6c9baf8a80b7ac4f811fabc024117eb6d94f8fb33bd6605a3efc06ad7ed86eda4b8fe12c9588000057359b4f694a8cbcc53c5851f13f80be15d8943c5803039e017caa56e26cebb232dc660a0655843617e2e2a943a116517d3c418d0fcc21199c3f2cbf19b98a7ac2eedf5d366b097a4c4444df890650cfaff33a3cd26ffe6ed12061e1f3fdc36f1396f8955fbfb7d0546ecd0772fa1ef24125a40c0da9d3fa2ff0f45900400bdfb375c997fbb71edb58df18af7160e60376910c53d980a744c8da14ce0379d7142d977abd6fb29ebd1fce7155a3684fc66593339c1e6", 0xed}, {&(0x7f0000001400)="9a323a9db6e0f9d490e1aec0805a78bc82daa08fe32bea7dd769d8a3dcb6a57e0abdf8045925fe9ff4c42f0e82e49437be383fc79e5321c23d6c994787f32fefd2b7b1e26cff6f7ea1f1ff5f74779c2abf29f6b4c56527379f6be065c7aed1f9d6904f576eb6f01ace6be3979e82c60e5b0ac0d9fb46d20f78e7c34f78f9efd2030a6a25def508100ba73c7adcebd56249c0a49b10444b586356da60cf05864d8d248ae1388f597528943e732bb455e7102835aeeef434a443ee6e051fb96d5234cd", 0xc2}, {&(0x7f0000001500)="a663643dbe019667d37d27e0fb366824d87b0300a452a3c2cc78d0f7a7cab7f932cb9f71c3b6520f1bba3bb6cba302daafff3e4f81d45d0527883297c5266d0963f53ab14c5051fe500eee9e70d435830c0299df2c8d6f3062325ed1fdf94199fb4bfc68f49db8e41a8d6eceb5d6d27510486502fac6df02910f174eeb72de51bf3966e8f89ca457d048ccb38099edd9e3c565acc0bfad9a491fd6259a2716a0769bc9d5d384f727a99bc08c4b94a4eae035115c0a3d7c1cd1688fc853b3", 0xbe}, {&(0x7f00000015c0)="3ee40934e90466646783cbfe3e288be499f8d0757f2a01c9908e615b89fc1c1049bfb2184d6e099ad2da1212439eda4370b7ff6c5abfa365956cb2b5975c7daa17616ba48fd35d621bec815e62b37c24bd3629568ffd58796d411aabedd200cb84a9f1f677b95459713c1445a05a1c052dcbd31590dd51f508cc41d4eae2de11a138add8d6cf59832dcf1f683c550ef8880894f20c2bef3df20efde301d83540073af579ab48e01d18bf4f5cf50f50fa32b50c2e3135c258671b0f1b960e70", 0xbf}], 0x7, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x10e0}}], 0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010012ad00000800034000f4ff01140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 69.017423ms ago: executing program 3 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r3 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000008c0)="120000000004c300d7ef007b00000000000000a1c44edc2c7ab16132dfc75b3f93d1b9ea3d78fc1a03622eff268047d5221ec57950b5763e4b058de9339b497ccae7478de7b0758b22e87cdce83771327636ebe6bb90fde8a41101d89062423685b6cc359950e94f47bc1b9fd7b906b6d6544486866cbe69668eb175ee82fbe11560746245efce8c37d8f8a42102fb1f3c1790c3c404a045b083c3eb1eec0073934fbe2ba1449918e70c4eacfc8f1ee28e6c646717be3536af4c6974e7fd36f7", 0xf, 0x20000000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) (async) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f00000008c0)="120000000004c300d7ef007b00000000000000a1c44edc2c7ab16132dfc75b3f93d1b9ea3d78fc1a03622eff268047d5221ec57950b5763e4b058de9339b497ccae7478de7b0758b22e87cdce83771327636ebe6bb90fde8a41101d89062423685b6cc359950e94f47bc1b9fd7b906b6d6544486866cbe69668eb175ee82fbe11560746245efce8c37d8f8a42102fb1f3c1790c3c404a045b083c3eb1eec0073934fbe2ba1449918e70c4eacfc8f1ee28e6c646717be3536af4c6974e7fd36f7", 0xf, 0x20000000, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) (async) 0s ago: executing program 0 (id=2031): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000000030000feffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400000000000000000000000000000000000000000000003a0cf5ad43b7da7719a3f89dcdcb5699c9b437792b652a9500ca9f17a126219a5c62eb05ca75e4c49ae86511f8271599d80cf61bb06af3bc691d27dfed57d47a3c56da2887e9eba83b7717def5a0716aeb20f331f06419a261f7af5e12f3805e08ffbefe07e783dc5170f6df98f82988b7402b25f091d9c72a557def14509ad12d727fda03f548c9672eb3a0b88209cb1b90aacdfd5004c9ed743612bd05cce4e9f6c734fda370c59bb69ce053d9953253"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xff000000, 0xff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'wg0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0xff, 0xa, 0x1, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) kernel console output (not intermixed with test programs): im1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.326596][ T5906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.373417][ T5906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.542362][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.581358][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.647420][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.679875][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.751079][ T6019] bond1 (unregistering): Released all slaves [ 367.846461][ T6023] xt_recent: Unsupported userspace flags (000000b1) [ 367.869942][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.900344][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.976852][ T51] Bluetooth: hci1: command tx timeout [ 368.001458][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.030398][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.056342][ T51] Bluetooth: hci0: command tx timeout [ 368.056450][ T5876] Bluetooth: hci3: command tx timeout [ 368.062164][ T51] Bluetooth: hci4: command tx timeout [ 368.067364][ T5877] Bluetooth: hci2: command tx timeout [ 368.420802][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 368.640187][ T6042] bond1: option packets_per_slave: invalid value (18446744072159530487) [ 368.648743][ T6042] bond1: option packets_per_slave: allowed values 0 - 65535 [ 368.677444][ T6042] bond1 (unregistering): Released all slaves [ 368.841674][ T6051] tipc: Started in network mode [ 368.846990][ T6051] tipc: Node identity 769de1a64466, cluster identity 4711 [ 368.854571][ T6051] tipc: Enabled bearer , priority 0 [ 368.906927][ T6047] syzkaller0: entered promiscuous mode [ 368.935472][ T6047] syzkaller0: entered allmulticast mode [ 368.984920][ T6047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 369.076382][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.085650][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.100118][ T6060] bridge0: entered promiscuous mode [ 369.120101][ T6060] bridge0: entered allmulticast mode [ 369.153659][ T6051] netlink: 'syz.3.16': attribute type 1 has an invalid length. [ 369.191410][ T6047] tipc: Resetting bearer [ 369.305129][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 369.330569][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 369.343913][ T6046] tipc: Resetting bearer [ 369.383195][ T6046] tipc: Disabling bearer [ 369.563997][ T6072] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 369.630273][ T6072] veth0_vlan: left promiscuous mode [ 369.641949][ T6072] veth0_vlan: entered promiscuous mode [ 369.673141][ T6072] team0: Device veth0_vlan failed to register rx_handler [ 369.824263][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 369.843846][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 370.053062][ T5978] IPVS: starting estimator thread 0... [ 370.128582][ T6100] x_tables: duplicate underflow at hook 1 [ 370.196307][ T6097] IPVS: using max 32 ests per chain, 76800 per kthread [ 370.540984][ T6119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.34'. [ 370.604733][ T6108] Zero length message leads to an empty skb [ 371.099118][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 371.232920][ T6126] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 371.259305][ T6126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.37'. [ 371.986384][ T6145] vxcan2: entered allmulticast mode [ 372.378115][ T6152] tipc: Started in network mode [ 372.392930][ T6152] tipc: Node identity d, cluster identity 12 [ 372.408451][ T6152] tipc: Node number set to 13 [ 372.431881][ T6156] netlink: 'syz.4.45': attribute type 2 has an invalid length. [ 372.636821][ T6161] netlink: 1 bytes leftover after parsing attributes in process `syz.0.47'. [ 372.871041][ T6173] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 374.415553][ T6223] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 374.492557][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 374.646611][ T6200] syz.3.56 (6200) used greatest stack depth: 17472 bytes left [ 375.136664][ T6243] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 375.151387][ T6243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.797657][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'. [ 375.811040][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 375.831030][ T6264] netlink: 'syz.4.73': attribute type 13 has an invalid length. [ 376.345132][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'. [ 376.466975][ T6293] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 377.174104][ T6311] hsr0: entered promiscuous mode [ 377.619599][ T6306] hsr0: left promiscuous mode [ 378.324683][ T6247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.934189][ T6331] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 379.021059][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.027713][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.521937][ T6348] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 379.570455][ T6348] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 379.722999][ T6364] netlink: zone id is out of range [ 379.738402][ T6364] netlink: del zone limit has 8 unknown bytes [ 380.555817][ T6400] netlink: 27 bytes leftover after parsing attributes in process `syz.2.112'. [ 380.779607][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 381.107443][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'. [ 381.511430][ T6440] veth1: entered allmulticast mode [ 381.519806][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.123'. [ 381.592627][ T6442] batadv_slave_1: entered promiscuous mode [ 381.603165][ T6442] macsec1: entered promiscuous mode [ 381.621387][ T6442] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 381.936443][ T6460] IPVS: length: 132 != 8 [ 382.003931][ T6460] pimreg: entered allmulticast mode [ 382.306522][ T6468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.131'. [ 382.346079][ T6468] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 382.390323][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 382.402542][ T6471] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.455336][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 382.464772][ T6471] openvswitch: netlink: Missing key (keys=40, expected=80) [ 382.475440][ T6471] syzkaller0: entered promiscuous mode [ 382.481363][ T6471] syzkaller0: entered allmulticast mode [ 382.778644][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 382.831180][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 383.032722][ T6496] netlink: 'syz.0.138': attribute type 2 has an invalid length. [ 383.060576][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 383.112119][ T6504] geneve2: entered promiscuous mode [ 383.313019][ T6515] netlink: 'syz.3.142': attribute type 19 has an invalid length. [ 383.332402][ T6515] netlink: 'syz.3.142': attribute type 20 has an invalid length. [ 383.409415][ T6523] ipvlan2: entered allmulticast mode [ 383.444256][ T6523] syz_tun: entered allmulticast mode [ 383.652482][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.661279][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.728519][ T6539] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 383.885182][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.923355][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.145249][ T6539] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 384.187576][ T6535] syzkaller1: entered promiscuous mode [ 384.202248][ T6535] syzkaller1: entered allmulticast mode [ 384.225055][ T3575] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.245641][ T3575] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.265740][ T3575] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.353509][ T3575] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.513347][ T6563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.686689][ T6572] 8021q: VLANs not supported on caif0 [ 384.701232][ T6573] warning: `syz.2.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 384.800130][ T6573] syzkaller0: entered promiscuous mode [ 384.842003][ T6573] syzkaller0: entered allmulticast mode [ 385.622706][ T6617] dummy0: entered promiscuous mode [ 385.641312][ T6620] netlink: 'syz.2.168': attribute type 4 has an invalid length. [ 385.649368][ T6617] dummy0: left promiscuous mode [ 385.655288][ T6620] __nla_validate_parse: 7 callbacks suppressed [ 385.655309][ T6620] netlink: 156 bytes leftover after parsing attributes in process `syz.2.168'. [ 385.710912][ T6620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 385.746793][ T6623] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.867610][ T6625] netlink: 'syz.3.169': attribute type 61 has an invalid length. [ 385.881482][ T6628] Bluetooth: MGMT ver 1.23 [ 385.901129][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 386.101739][ T6638] netlink: 96 bytes leftover after parsing attributes in process `syz.3.173'. [ 386.272785][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 386.297429][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 386.356150][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 386.396015][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 386.476411][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 386.888119][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 386.949840][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 386.997791][ T6665] ifb0: entered promiscuous mode [ 387.008202][ T6676] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 387.021959][ T6665] dummy0: entered promiscuous mode [ 387.030847][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 387.037413][ T6665] Cannot create hsr debugfs directory [ 387.321347][ T6681] syzkaller0: entered promiscuous mode [ 387.330027][ T6681] syzkaller0: entered allmulticast mode [ 387.364015][ T6687] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 388.252730][ T6715] unsupported nlmsg_type 40 [ 389.363801][ T6735] veth3: entered allmulticast mode [ 389.706244][ T6745] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 390.517129][ T6800] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.411983][ T6832] macvlan2: entered promiscuous mode [ 391.421758][ T6832] veth1_to_bridge: entered promiscuous mode [ 391.438960][ T6832] team0: Port device macvlan2 added [ 391.469261][ T6830] __nla_validate_parse: 12 callbacks suppressed [ 391.469282][ T6830] netlink: 88 bytes leftover after parsing attributes in process `syz.1.217'. [ 391.584097][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 391.946098][ T6840] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 391.994624][ T6840] netlink: 'syz.3.215': attribute type 2 has an invalid length. [ 392.189863][ T6846] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 392.356288][ T6859] netlink: 372 bytes leftover after parsing attributes in process `syz.1.224'. [ 392.573547][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 392.599114][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.227'. [ 392.635866][ T6867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.227'. [ 392.720542][ T6872] sctp: [Deprecated]: syz.1.229 (pid 6872) Use of int in maxseg socket option. [ 392.720542][ T6872] Use struct sctp_assoc_value instead [ 392.951537][ T6872] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 392.978407][ T6872] pim6reg1: entered promiscuous mode [ 393.003903][ T6872] pim6reg1: entered allmulticast mode [ 393.026484][ T6883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.231'. [ 393.172276][ T6891] tipc: Started in network mode [ 393.186087][ T6891] tipc: Node identity 32c018b20e0f, cluster identity 4711 [ 393.213869][ T6891] tipc: Enabled bearer , priority 0 [ 393.235585][ T6891] syzkaller0: entered promiscuous mode [ 393.251684][ T6891] syzkaller0: entered allmulticast mode [ 393.288080][ T6893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.234'. [ 393.422949][ T6905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.237'. [ 393.434591][ T6902] tipc: Resetting bearer [ 393.471020][ T6907] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 393.478713][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.478813][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.568737][ T6890] tipc: Resetting bearer [ 393.635433][ T6890] tipc: Disabling bearer [ 394.067110][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 394.083280][ T6935] netlink: 'syz.4.245': attribute type 2 has an invalid length. [ 395.291979][ T6983] netlink: 'syz.0.257': attribute type 5 has an invalid length. [ 395.308421][ T6970] xt_CT: No such helper "netbios-ns" [ 395.471450][ T6986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.591462][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.599259][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.729793][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.753131][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.863202][ T6993] vlan2: entered allmulticast mode [ 395.872465][ T6993] bridge0: port 3(vlan2) entered blocking state [ 395.879950][ T6993] bridge0: port 3(vlan2) entered disabled state [ 395.888789][ T6993] vlan2: entered promiscuous mode [ 395.967830][ T5965] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.025025][ T5965] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.064856][ T7006] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 396.140914][ T5965] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.162434][ T7006] .70: renamed from hsr0 (while UP) [ 396.215204][ T7006] .70: entered allmulticast mode [ 396.245514][ T7006] hsr_slave_0: entered allmulticast mode [ 396.253450][ T7006] hsr_slave_1: entered allmulticast mode [ 396.262270][ T7006] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 396.281698][ T5965] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.610893][ T7031] syzkaller0: entered promiscuous mode [ 396.628561][ T7031] syzkaller0: entered allmulticast mode [ 396.737467][ T7037] __nla_validate_parse: 1 callbacks suppressed [ 396.737488][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 396.995534][ T7045] netlink: 'syz.3.279': attribute type 3 has an invalid length. [ 398.092030][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 398.096705][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 398.334067][ T7039] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 398.357064][ T7062] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 398.505675][ T7072] netlink: 'syz.4.285': attribute type 13 has an invalid length. [ 398.555870][ T7076] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 398.708406][ T7072] veth1_to_bridge: left promiscuous mode [ 398.833025][ T797] IPVS: starting estimator thread 0... [ 398.856567][ T7078] IPVS: ip_vs_edit_dest(): server weight less than zero [ 398.877738][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 398.966121][ T7089] IPVS: using max 29 ests per chain, 69600 per kthread [ 399.111613][ T7102] netlink: 14 bytes leftover after parsing attributes in process `syz.3.292'. [ 399.140902][ T7103] netlink: 14 bytes leftover after parsing attributes in process `syz.3.292'. [ 399.577988][ T7123] Bluetooth: MGMT ver 1.23 [ 400.351390][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 400.382667][ T7167] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 400.388170][ T7169] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 400.479847][ T7169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 400.534887][ T7169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 400.640419][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 400.676053][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 400.686997][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 400.739669][ T7176] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 401.527807][ T7206] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 401.548715][ T7206] bond1 (unregistering): Released all slaves [ 401.761409][ T7218] x_tables: duplicate underflow at hook 3 [ 401.841956][ T7221] __nla_validate_parse: 4 callbacks suppressed [ 401.841976][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 401.870936][ T7225] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 402.182918][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'. [ 402.215337][ T7223] syzkaller1: entered allmulticast mode [ 402.271118][ T7241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.356941][ T7241] netlink: 164 bytes leftover after parsing attributes in process `syz.2.324'. [ 402.513129][ T7254] sctp: [Deprecated]: syz.1.325 (pid 7254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.513129][ T7254] Use struct sctp_sack_info instead [ 402.618208][ T7247] bond1: option updelay: invalid value (18446744073709493611) [ 402.646175][ T7247] bond1: option updelay: allowed values 0 - 2147483647 [ 402.704645][ T7247] bond1 (unregistering): Released all slaves [ 403.319086][ T7297] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 403.408458][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'. [ 403.647333][ T7313] netlink: 11 bytes leftover after parsing attributes in process `syz.3.337'. [ 403.689727][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 403.827414][ T7297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.872500][ T7322] openvswitch: netlink: VXLAN extension 1 has unexpected len 160 expected 4 [ 403.892545][ T7301] bond1: (slave geneve2): making interface the new active one [ 403.924083][ T7301] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 404.149483][ T7327] netlink: 'syz.0.340': attribute type 142 has an invalid length. [ 404.193923][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 404.204440][ T7327] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 404.302242][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 404.912428][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 405.020539][ T7367] bond3: entered promiscuous mode [ 405.041490][ T7367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.187744][ T7363] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.206759][ T7363] bond3: (slave vti1): The slave device specified does not support setting the MAC address [ 405.233843][ T7363] bond3: (slave vti1): Error -95 calling set_mac_address [ 405.249863][ T7389] netlink: 'syz.3.354': attribute type 21 has an invalid length. [ 405.281133][ T7389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.354'. [ 405.322621][ T7394] netlink: 'syz.3.354': attribute type 21 has an invalid length. [ 405.553161][ T7407] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 405.668521][ T7403] netlink: 'syz.1.356': attribute type 61 has an invalid length. [ 405.683122][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.778788][ T7410] bond1: (slave veth3): Enslaving as an active interface with a down link [ 405.872970][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 405.894213][ T7403] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 406.181704][ T7431] rdma_rxe: rxe_newlink: failed to add lo [ 406.499495][ T7446] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 406.551365][ T7452] netlink: 'syz.3.368': attribute type 8 has an invalid length. [ 406.649033][ T7446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.742768][ T7452] bond2: (slave geneve2): making interface the new active one [ 406.768495][ T7452] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 406.817124][ T3575] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.844202][ T3575] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.969986][ T35] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 406.980283][ T7471] __nla_validate_parse: 6 callbacks suppressed [ 406.980303][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 406.999223][ T7464] netlink: 'syz.1.374': attribute type 29 has an invalid length. [ 407.010148][ T115] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 407.021720][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.376'. [ 407.067615][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 407.267618][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.379'. [ 407.294743][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 407.378904][ T7481] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.419346][ T7486] Cannot find set identified by id 0 to match [ 407.450430][ T7481] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 407.484772][ T7481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.379'. [ 408.004077][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 408.049930][ T7511] tipc: Enabled bearer , priority 0 [ 408.096474][ T7511] syzkaller0: entered promiscuous mode [ 408.115531][ T7511] syzkaller0: entered allmulticast mode [ 408.200276][ T7511] tipc: Resetting bearer [ 408.278864][ T7509] tipc: Resetting bearer [ 408.309398][ T7509] tipc: Disabling bearer [ 408.473852][ T7537] hsr0: entered promiscuous mode [ 408.518184][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 408.548947][ T7537] hsr_slave_0: left promiscuous mode [ 408.574429][ T7537] hsr_slave_1: left promiscuous mode [ 408.602869][ T7537] hsr0 (unregistering): left promiscuous mode [ 408.745007][ T7545] syzkaller0: entered promiscuous mode [ 408.758440][ T7545] syzkaller0: entered allmulticast mode [ 408.832608][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 408.841658][ T7547] syzkaller0: entered promiscuous mode [ 408.856657][ T7547] syzkaller0: entered allmulticast mode [ 409.185585][ T7551] netlink: 19 bytes leftover after parsing attributes in process `syz.0.402'. [ 409.233966][ T7556] dummy0: entered promiscuous mode [ 409.280028][ T7556] dummy0: left promiscuous mode [ 409.557979][ T7576] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 409.598786][ T7575] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 409.657588][ T7580] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 409.737804][ T7569] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 410.819828][ T7626] IPVS: persistence engine module ip_vs_pe_k4 not found [ 411.512899][ T7671] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 411.822293][ T7685] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 411.892100][ T7687] m1Ie5: entered promiscuous mode [ 411.945098][ T6032] IPVS: starting estimator thread 0... [ 412.015385][ T7683] syzkaller0: entered promiscuous mode [ 412.021311][ T7683] syzkaller0: entered allmulticast mode [ 412.047129][ T7693] IPVS: using max 26 ests per chain, 62400 per kthread [ 413.363760][ T7698] __nla_validate_parse: 70 callbacks suppressed [ 413.363782][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 413.523865][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 413.662718][ T5880] Bluetooth: hci2: command 0x0405 tx timeout [ 413.777069][ T7722] trusted_key: syz.0.447 sent an empty control message without MSG_MORE. [ 414.155095][ T7736] delete_channel: no stack [ 414.484931][ T7754] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 414.484931][ T7754] 3UH5rBn [ 414.584002][ T7757] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 414.643810][ T7757] bond2 (unregistering): Released all slaves [ 414.888627][ T29] audit: type=1107 audit(1775984368.570:2): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.064982][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 415.124164][ T7776] syzkaller0: entered promiscuous mode [ 415.133334][ T7776] syzkaller0: entered allmulticast mode [ 415.159990][ T7767] bond0: entered promiscuous mode [ 415.166962][ T7767] bond_slave_0: entered promiscuous mode [ 415.173364][ T7767] bond_slave_1: entered promiscuous mode [ 415.186126][ T7767] bond0: left promiscuous mode [ 415.191470][ T7767] bond_slave_0: left promiscuous mode [ 415.197977][ T7767] bond_slave_1: left promiscuous mode [ 415.215834][ T7773] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 415.222068][ T7773] pim6reg0: persist disabled [ 415.560051][ T7798] netlink: 'syz.1.467': attribute type 30 has an invalid length. [ 415.683537][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 415.692654][ T7803] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 416.850681][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 416.860272][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 416.880718][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 417.020291][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 417.033412][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 417.222975][ T7835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.476'. [ 417.467060][ T7847] tipc: Can't bind to reserved service type 1 [ 418.050084][ T7867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.366671][ T7889] bond0: entered promiscuous mode [ 418.371903][ T7889] bond_slave_0: entered promiscuous mode [ 418.378064][ T7889] bond_slave_1: entered promiscuous mode [ 418.385563][ T7889] batadv0: entered promiscuous mode [ 419.269327][ T7932] openvswitch: netlink: Flow actions attr not present in new flow. [ 420.356163][ T7979] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 420.392455][ T7979] netlink: 'syz.1.514': attribute type 8 has an invalid length. [ 420.426279][ T7979] netlink: 'syz.1.514': attribute type 15 has an invalid length. [ 420.466409][ T7983] __nla_validate_parse: 3 callbacks suppressed [ 420.466429][ T7983] netlink: 76 bytes leftover after parsing attributes in process `syz.0.513'. [ 420.490543][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 420.653331][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 421.260777][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 421.296385][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.334267][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 421.470580][ T8032] bond3: option lacp_active: invalid value (8) [ 421.487982][ T8032] bond3 (unregistering): Released all slaves [ 421.711786][ T8049] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 421.881519][ T8049] bond3: entered promiscuous mode [ 421.887168][ T8049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.917708][ T8066] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.532'. [ 421.957193][ T8066] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.532'. [ 422.020250][ T8064] bond3: (slave bridge1): making interface the new active one [ 422.030168][ T8064] bridge1: entered promiscuous mode [ 422.042831][ T8069] xt_TCPMSS: Only works on TCP SYN packets [ 422.050685][ T8064] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 422.128111][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.535'. [ 422.166136][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.535'. [ 422.204245][ T8073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.535'. [ 422.252094][ T8076] FAULT_INJECTION: forcing a failure. [ 422.252094][ T8076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 422.310487][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.4.537 Not tainted syzkaller #0 PREEMPT(full) [ 422.310516][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.310538][ T8076] Call Trace: [ 422.310547][ T8076] [ 422.310555][ T8076] dump_stack_lvl+0xe8/0x150 [ 422.310599][ T8076] should_fail_ex+0x412/0x560 [ 422.310639][ T8076] _copy_from_user+0x2d/0xb0 [ 422.310667][ T8076] __sys_bpf+0x229/0x950 [ 422.310691][ T8076] ? __pfx___sys_bpf+0x10/0x10 [ 422.310727][ T8076] ? ksys_write+0x242/0x270 [ 422.310755][ T8076] ? __pfx_ksys_write+0x10/0x10 [ 422.310787][ T8076] __x64_sys_bpf+0x7c/0x90 [ 422.310820][ T8076] do_syscall_64+0x14d/0xf80 [ 422.310841][ T8076] ? trace_irq_disable+0x3b/0x150 [ 422.310860][ T8076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.310881][ T8076] ? clear_bhb_loop+0x40/0x90 [ 422.310908][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.310934][ T8076] RIP: 0033:0x7f9d1ed9c819 [ 422.310958][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.310975][ T8076] RSP: 002b:00007f9d1fbef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.311005][ T8076] RAX: ffffffffffffffda RBX: 00007f9d1f015fa0 RCX: 00007f9d1ed9c819 [ 422.311020][ T8076] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 422.311033][ T8076] RBP: 00007f9d1fbef090 R08: 0000000000000000 R09: 0000000000000000 [ 422.311046][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.311058][ T8076] R13: 00007f9d1f016038 R14: 00007f9d1f015fa0 R15: 00007ffc73b25fd8 [ 422.311091][ T8076] [ 422.520397][ T8082] netlink: 'syz.2.538': attribute type 29 has an invalid length. [ 422.694029][ T8093] x_tables: duplicate underflow at hook 1 [ 423.062535][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.209193][ T8109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.241577][ T8116] netlink: 'syz.2.548': attribute type 5 has an invalid length. [ 423.364726][ T8111] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 423.468101][ T8120] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 423.477911][ T8122] FAULT_INJECTION: forcing a failure. [ 423.477911][ T8122] name failslab, interval 1, probability 0, space 0, times 1 [ 423.511392][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.2.551 Not tainted syzkaller #0 PREEMPT(full) [ 423.511421][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.511434][ T8122] Call Trace: [ 423.511442][ T8122] [ 423.511451][ T8122] dump_stack_lvl+0xe8/0x150 [ 423.511489][ T8122] should_fail_ex+0x412/0x560 [ 423.511530][ T8122] should_failslab+0xa8/0x100 [ 423.511561][ T8122] __kmalloc_noprof+0xe8/0x760 [ 423.511587][ T8122] ? bpf_test_init+0x9f/0x150 [ 423.511613][ T8122] ? kstrtouint+0x6e/0xe0 [ 423.511649][ T8122] bpf_test_init+0x9f/0x150 [ 423.511681][ T8122] bpf_prog_test_run_xdp+0x529/0x1160 [ 423.511734][ T8122] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.511770][ T8122] ? __fget_files+0x2a/0x420 [ 423.511796][ T8122] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.511826][ T8122] bpf_prog_test_run+0x2c7/0x340 [ 423.511854][ T8122] __sys_bpf+0x643/0x950 [ 423.511877][ T8122] ? __pfx___sys_bpf+0x10/0x10 [ 423.511916][ T8122] ? ksys_write+0x242/0x270 [ 423.511943][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 423.511977][ T8122] __x64_sys_bpf+0x7c/0x90 [ 423.512009][ T8122] do_syscall_64+0x14d/0xf80 [ 423.512029][ T8122] ? trace_irq_disable+0x3b/0x150 [ 423.512048][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.512070][ T8122] ? clear_bhb_loop+0x40/0x90 [ 423.512096][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.512117][ T8122] RIP: 0033:0x7f011bb9c819 [ 423.512137][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.512154][ T8122] RSP: 002b:00007f011c9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.512274][ T8122] RAX: ffffffffffffffda RBX: 00007f011be15fa0 RCX: 00007f011bb9c819 [ 423.512300][ T8122] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 423.512314][ T8122] RBP: 00007f011c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 423.512327][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.512339][ T8122] R13: 00007f011be16038 R14: 00007f011be15fa0 R15: 00007fffe4007d98 [ 423.512403][ T8122] [ 424.274654][ T8142] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 424.627353][ T8142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.935313][ T8158] syzkaller0: entered promiscuous mode [ 424.953247][ T8158] syzkaller0: entered allmulticast mode [ 425.337743][ T8185] block nbd0: not configured, cannot reconfigure [ 425.599973][ T8199] __nla_validate_parse: 9 callbacks suppressed [ 425.599994][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 425.671221][ T8205] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 425.819266][ T8213] FAULT_INJECTION: forcing a failure. [ 425.819266][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.898974][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT(full) [ 425.899004][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 425.899017][ T8213] Call Trace: [ 425.899026][ T8213] [ 425.899035][ T8213] dump_stack_lvl+0xe8/0x150 [ 425.899072][ T8213] should_fail_ex+0x412/0x560 [ 425.899113][ T8213] _copy_to_user+0x31/0xb0 [ 425.899142][ T8213] bpf_test_finish+0x1db/0x6b0 [ 425.899182][ T8213] ? __pfx_bpf_test_finish+0x10/0x10 [ 425.899218][ T8213] ? _copy_from_user+0x94/0xb0 [ 425.899244][ T8213] ? bpf_test_init+0x113/0x150 [ 425.899274][ T8213] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 425.899322][ T8213] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.899357][ T8213] ? __fget_files+0x2a/0x420 [ 425.899383][ T8213] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.899414][ T8213] bpf_prog_test_run+0x2c7/0x340 [ 425.899441][ T8213] __sys_bpf+0x643/0x950 [ 425.899465][ T8213] ? __pfx___sys_bpf+0x10/0x10 [ 425.899509][ T8213] ? ksys_write+0x242/0x270 [ 425.899537][ T8213] ? __pfx_ksys_write+0x10/0x10 [ 425.899569][ T8213] __x64_sys_bpf+0x7c/0x90 [ 425.899602][ T8213] do_syscall_64+0x14d/0xf80 [ 425.899623][ T8213] ? trace_irq_disable+0x3b/0x150 [ 425.899642][ T8213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.899664][ T8213] ? clear_bhb_loop+0x40/0x90 [ 425.899691][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.899712][ T8213] RIP: 0033:0x7f011bb9c819 [ 425.899732][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.899749][ T8213] RSP: 002b:00007f011c9af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.899771][ T8213] RAX: ffffffffffffffda RBX: 00007f011be15fa0 RCX: 00007f011bb9c819 [ 425.899786][ T8213] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 425.899799][ T8213] RBP: 00007f011c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 425.899812][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.899823][ T8213] R13: 00007f011be16038 R14: 00007f011be15fa0 R15: 00007fffe4007d98 [ 425.899856][ T8213] [ 425.965338][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 426.173389][ T8224] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 426.299855][ T8224] bond4: entered promiscuous mode [ 426.305382][ T8224] bond4: entered allmulticast mode [ 426.311951][ T8224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.349621][ T8226] macvlan2: entered promiscuous mode [ 426.358494][ T8226] macvlan2: entered allmulticast mode [ 426.368676][ T8226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.617310][ T8240] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 426.638609][ T8240] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 426.708168][ T8242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.715889][ T8242] IPv6: NLM_F_CREATE should be set when creating new route [ 426.723251][ T8242] IPv6: NLM_F_CREATE should be set when creating new route [ 426.751246][ T8243] syzkaller0: entered promiscuous mode [ 426.757093][ T8243] syzkaller0: entered allmulticast mode [ 426.768910][ T8243] 0: reclassify loop, rule prio 0, protocol 700 [ 427.033549][ T8255] FAULT_INJECTION: forcing a failure. [ 427.033549][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.048034][ T8256] netlink: 240 bytes leftover after parsing attributes in process `syz.2.589'. [ 427.058757][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) [ 427.058784][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.058797][ T8255] Call Trace: [ 427.058805][ T8255] [ 427.058813][ T8255] dump_stack_lvl+0xe8/0x150 [ 427.058849][ T8255] should_fail_ex+0x412/0x560 [ 427.058890][ T8255] _copy_to_user+0x31/0xb0 [ 427.058920][ T8255] bpf_test_finish+0x22c/0x6b0 [ 427.058962][ T8255] ? __pfx_bpf_test_finish+0x10/0x10 [ 427.059003][ T8255] ? _copy_from_user+0x94/0xb0 [ 427.059032][ T8255] ? bpf_test_init+0x113/0x150 [ 427.059063][ T8255] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 427.059119][ T8255] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.059166][ T8255] ? __fget_files+0x2a/0x420 [ 427.059193][ T8255] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.059224][ T8255] bpf_prog_test_run+0x2c7/0x340 [ 427.059252][ T8255] __sys_bpf+0x643/0x950 [ 427.059274][ T8255] ? __pfx___sys_bpf+0x10/0x10 [ 427.059312][ T8255] ? ksys_write+0x242/0x270 [ 427.059339][ T8255] ? __pfx_ksys_write+0x10/0x10 [ 427.059372][ T8255] __x64_sys_bpf+0x7c/0x90 [ 427.059405][ T8255] do_syscall_64+0x14d/0xf80 [ 427.059425][ T8255] ? trace_irq_disable+0x3b/0x150 [ 427.059444][ T8255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.059465][ T8255] ? clear_bhb_loop+0x40/0x90 [ 427.059491][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.059513][ T8255] RIP: 0033:0x7f9d1ed9c819 [ 427.059533][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.059550][ T8255] RSP: 002b:00007f9d1fbef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.059573][ T8255] RAX: ffffffffffffffda RBX: 00007f9d1f015fa0 RCX: 00007f9d1ed9c819 [ 427.059589][ T8255] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 427.059602][ T8255] RBP: 00007f9d1fbef090 R08: 0000000000000000 R09: 0000000000000000 [ 427.059615][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.059628][ T8255] R13: 00007f9d1f016038 R14: 00007f9d1f015fa0 R15: 00007ffc73b25fd8 [ 427.059662][ T8255] [ 427.341942][ T8259] netlink: 62967 bytes leftover after parsing attributes in process `syz.4.591'. [ 427.371718][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 427.445151][ T8259] netlink: 'syz.4.591': attribute type 3 has an invalid length. [ 427.560204][ T8270] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 427.568123][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.594'. [ 427.787676][ T8280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 427.974367][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.006062][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.034545][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.058092][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.351711][ T8313] netlink: 'syz.3.607': attribute type 6 has an invalid length. [ 428.495433][ T8313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.515559][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.894579][ T8328] tipc: Enabling of bearer rejected, failed to enable media [ 429.105671][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 429.137804][ T8337] netlink: 'syz.0.616': attribute type 12 has an invalid length. [ 429.214459][ T5971] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.223565][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 429.246171][ T5971] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.255583][ T5971] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.255823][ T8337] netlink: 'syz.0.616': attribute type 12 has an invalid length. [ 429.284718][ T5971] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.972353][ T8370] openvswitch: netlink: Message has 584 unknown bytes. [ 430.004532][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.022336][ T8370] tipc: Enabling of bearer rejected, failed to enable media [ 430.114729][ T51] Bluetooth: hci2: link tx timeout [ 430.121647][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.291288][ T8379] netlink: 'syz.1.628': attribute type 39 has an invalid length. [ 430.692598][ T8394] netlink: 64 bytes leftover after parsing attributes in process `syz.2.632'. [ 430.822056][ T8400] syzkaller1: entered promiscuous mode [ 430.828070][ T8400] syzkaller1: entered allmulticast mode [ 430.833290][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 430.886378][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 430.928215][ T8405] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 431.019867][ T8410] siw: device registration error -23 [ 431.071026][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.637'. [ 431.157204][ T8414] syzkaller1: entered promiscuous mode [ 431.163340][ T8418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.182771][ T8414] syzkaller1: entered allmulticast mode [ 431.203929][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.249594][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.280452][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.291077][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.301121][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 431.476398][ T8421] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 431.547772][ T8421] bond6 (unregistering): Released all slaves [ 431.920539][ T8450] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 431.984683][ T8450] bond3: entered promiscuous mode [ 431.991153][ T8450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.141527][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 433.335112][ T8495] m1Ie5n: entered promiscuous mode [ 434.775247][ T8570] nbd: device at index 64 is going down [ 434.792808][ T8566] xt_hashlimit: size too large, truncated to 1048576 [ 434.949200][ T6680] udevd[6680]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.412376][ T8589] xt_hashlimit: size too large, truncated to 1048576 [ 435.485560][ T8591] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 435.849766][ T8606] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 435.960807][ T8613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 436.123288][ T8609] __nla_validate_parse: 94 callbacks suppressed [ 436.123311][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 436.243481][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 436.286974][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'. [ 436.543489][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 437.282231][ T8675] gre1: entered promiscuous mode [ 437.384119][ T8682] batadv_slave_0: entered promiscuous mode [ 437.754929][ T8690] batadv_slave_0: left promiscuous mode [ 437.912416][ T8711] sctp: [Deprecated]: syz.0.715 (pid 8711) Use of int in maxseg socket option. [ 437.912416][ T8711] Use struct sctp_assoc_value instead [ 437.954776][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 438.093614][ T8718] netlink: 'syz.2.718': attribute type 58 has an invalid length. [ 438.102161][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 438.288270][ T8719] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 438.389602][ T8714] macvlan2: entered promiscuous mode [ 438.395134][ T8714] macvlan2: entered allmulticast mode [ 438.407340][ T8714] bond6: entered promiscuous mode [ 438.413371][ T8714] bridge2: entered promiscuous mode [ 438.420799][ T8714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.429589][ T8714] bond6: left promiscuous mode [ 438.434823][ T8714] bridge2: left promiscuous mode [ 438.621189][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'. [ 438.772034][ T8751] gre1: entered promiscuous mode [ 438.927569][ T8753] netlink: 15 bytes leftover after parsing attributes in process `syz.2.727'. [ 438.978672][ T8760] syzkaller0: entered promiscuous mode [ 439.000042][ T8760] syzkaller0: entered allmulticast mode [ 439.030848][ T8759] netlink: 'syz.4.729': attribute type 4 has an invalid length. [ 439.114599][ T8759] bond2: entered promiscuous mode [ 439.119999][ T8759] bond2: entered allmulticast mode [ 439.125806][ T8759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.185758][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 439.486356][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.602388][ T8798] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 439.705024][ T8790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.922338][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 440.008615][ T8809] syzkaller0: entered promiscuous mode [ 440.016825][ T8809] syzkaller0: entered allmulticast mode [ 440.072635][ T8818] bond4: option lp_interval: invalid value (0) [ 440.080693][ T8818] bond4: option lp_interval: allowed values 1 - 2147483647 [ 440.165232][ T8818] bond4 (unregistering): Released all slaves [ 440.225086][ T8790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.361472][ T8825] xt_bpf: check failed: parse error [ 440.460383][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.522480][ T8861] __nla_validate_parse: 1 callbacks suppressed [ 441.522501][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 441.538543][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 441.547927][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 441.557360][ T8861] netlink: 108 bytes leftover after parsing attributes in process `syz.4.754'. [ 441.568474][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 441.580643][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 442.162107][ T8867] netlink: 144 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.177132][ T8867] netlink: 144 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.263451][ T8869] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 442.274376][ T8869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.424011][ T8790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.475738][ T8869] pim6reg: entered allmulticast mode [ 442.534269][ T8870] pim6reg: left allmulticast mode [ 442.598105][ T8790] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.760916][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.855861][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.891601][ T5965] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.935798][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.762'. [ 442.955201][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 442.969904][ T8887] sit0: entered promiscuous mode [ 442.978712][ T8887] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 442.989007][ T5965] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.392540][ T8908] netlink: 'syz.2.768': attribute type 13 has an invalid length. [ 443.400700][ T8908] netlink: 'syz.2.768': attribute type 17 has an invalid length. [ 443.510913][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.519130][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.665344][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.680846][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.004389][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.014325][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.031874][ T8908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.060511][ T5965] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.073295][ T5965] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.119421][ T5965] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.163024][ T5965] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.514734][ T8959] netlink: 'syz.0.777': attribute type 3 has an invalid length. [ 444.533523][ T8965] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 444.691601][ T8969] bond5: (slave geneve2): making interface the new active one [ 444.705886][ T8969] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 444.783841][ T5971] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.807563][ T5971] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.843846][ T5971] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.853754][ T5971] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.894473][ T8980] @: renamed from veth0_vlan [ 444.914133][ T8977] syzkaller0: entered promiscuous mode [ 444.941498][ T8977] syzkaller0: entered allmulticast mode [ 444.977288][ T8978] netlink: 'syz.0.782': attribute type 5 has an invalid length. [ 445.109201][ T8992] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 445.430715][ T9011] Unsupported ieee802154 address type: 0 [ 446.507543][ T9032] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 446.838447][ T9044] __nla_validate_parse: 7 callbacks suppressed [ 446.838469][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.800'. [ 447.047193][ T9052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 447.320653][ T9061] tipc: New replicast peer: 127.0.0.1 [ 447.326727][ T9061] tipc: Enabled bearer , priority 10 [ 447.934825][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 448.106936][ T9099] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 448.146663][ T9103] gretap0: entered promiscuous mode [ 448.152911][ T9103] macsec1: entered allmulticast mode [ 448.160390][ T9103] gretap0: entered allmulticast mode [ 448.178347][ T9103] gretap0: left allmulticast mode [ 448.183524][ T9103] gretap0: left promiscuous mode [ 448.601429][ T5848] tipc: Node number set to 855368102 [ 448.797725][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 448.838730][ T9128] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.963622][ T9137] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 449.043966][ T9137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.071100][ T9137] vlan0: entered allmulticast mode [ 449.086516][ T9137] bond4: entered allmulticast mode [ 449.162332][ T9137] bond4: (slave geneve3): making interface the new active one [ 449.196101][ T9137] geneve3: entered allmulticast mode [ 449.225507][ T9137] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 449.244482][ T5971] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 449.270979][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 449.300123][ T5971] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 449.335196][ T5971] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 449.667876][ T9155] netlink: 10488 bytes leftover after parsing attributes in process `syz.0.832'. [ 449.765769][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'. [ 450.276338][ T9176] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.839'. [ 450.292158][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 450.332218][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 450.562655][ T9190] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 450.697521][ T9187] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 450.706325][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 451.301741][ T9234] netlink: 'syz.2.854': attribute type 7 has an invalid length. [ 451.331893][ T9234] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.854'. [ 451.819031][ T9252] syz_tun: entered allmulticast mode [ 451.834629][ T9228] IPv6: sit2: Disabled Multicast RS [ 451.880230][ T9228] sit2: entered allmulticast mode [ 451.976611][ T9245] syz_tun: left allmulticast mode [ 452.025364][ T9262] xt_hashlimit: size too large, truncated to 1048576 [ 452.177035][ T9267] __nla_validate_parse: 5 callbacks suppressed [ 452.177058][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 452.242150][ T9271] sctp: [Deprecated]: syz.3.866 (pid 9271) Use of int in max_burst socket option. [ 452.242150][ T9271] Use struct sctp_assoc_value instead [ 452.755409][ T9294] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 452.785417][ T9294] netlink: 88 bytes leftover after parsing attributes in process `syz.2.872'. [ 452.815379][ T9294] netlink: 1 bytes leftover after parsing attributes in process `syz.2.872'. [ 452.835713][ T9294] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 452.854206][ T9299] pimreg0: tun_chr_ioctl cmd 1074025681 [ 452.863655][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 452.878871][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 452.893911][ T9294] netlink: 634 bytes leftover after parsing attributes in process `syz.2.872'. [ 452.904742][ T9299] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 452.936164][ T9299] netlink: 280 bytes leftover after parsing attributes in process `syz.1.874'. [ 453.061038][ T9306] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 453.070743][ T9306] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 453.288672][ T9321] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 453.293369][ T9327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.880'. [ 453.572553][ T9343] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 453.591798][ T9343] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 453.653178][ T9347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.884'. [ 453.985382][ T9369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.227101][ T9386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.897'. [ 454.540418][ T9426] netlink: 'syz.2.900': attribute type 2 has an invalid length. [ 454.712239][ T9431] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 454.717566][ T9427] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 454.776103][ T9437] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 454.799794][ T9430] syzkaller0: entered promiscuous mode [ 454.805505][ T9430] syzkaller0: entered allmulticast mode [ 455.166375][ T9450] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.178729][ T5848] IPVS: starting estimator thread 0... [ 455.276080][ T9456] IPVS: using max 28 ests per chain, 67200 per kthread [ 455.378626][ T9468] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 455.407304][ T9469] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 455.463418][ T9472] netlink: 'syz.0.911': attribute type 30 has an invalid length. [ 455.485166][ T9467] batadv1: entered promiscuous mode [ 455.490711][ T9467] batadv1: entered allmulticast mode [ 455.550747][ T9469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.660107][ T9472] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 455.711878][ T9472] bond5 (unregistering): Released all slaves [ 455.919848][ T9486] pim6reg: entered allmulticast mode [ 455.928769][ T9488] pim6reg: left allmulticast mode [ 455.985098][ T9496] openvswitch: netlink: Invalid VLAN frame [ 456.060996][ T9501] openvswitch: netlink: Message has 16 unknown bytes. [ 456.294562][ T9513] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.402222][ T9514] gretap1: entered promiscuous mode [ 456.428187][ T9514] batman_adv: batadv0: Adding interface: gretap1 [ 456.456356][ T9514] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 456.504752][ T9514] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 457.338164][ T9560] __nla_validate_parse: 13 callbacks suppressed [ 457.338184][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 457.373091][ T9564] vlan0: entered promiscuous mode [ 457.398558][ T9564] vlan0: entered allmulticast mode [ 457.422836][ T9564] veth0_vlan: entered allmulticast mode [ 457.479646][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.937'. [ 457.696353][ T9564] nbd: socks must be embedded in a SOCK_ITEM attr [ 458.149299][ T9589] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 458.195997][ T9589] netlink: 'syz.0.942': attribute type 2 has an invalid length. [ 458.719427][ T9604] netlink: 'syz.0.946': attribute type 4 has an invalid length. [ 458.792711][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.948'. [ 458.992350][ T9615] netlink: 380 bytes leftover after parsing attributes in process `syz.0.950'. [ 459.172031][ T9619] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 459.276256][ T9619] 8021q: adding VLAN 0 to HW filter on device bond8 [ 459.431838][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 459.441207][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 459.477245][ T9630] bond8: (slave veth7): Enslaving as an active interface with a down link [ 459.785469][ T9645] netlink: 'syz.1.956': attribute type 13 has an invalid length. [ 460.003280][ T9649] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 460.101642][ T9662] netlink: 'syz.2.959': attribute type 11 has an invalid length. [ 460.143912][ T9655] bond5: Unable to set up delay as MII monitoring is disabled [ 460.172517][ T9655] bond5 (unregistering): Released all slaves [ 460.445643][ T9672] netlink: 'syz.3.960': attribute type 2 has an invalid length. [ 460.471113][ T9672] !: entered promiscuous mode [ 460.493488][ T9672] netlink: 'syz.3.960': attribute type 2 has an invalid length. [ 460.502568][ T9672] !: left promiscuous mode [ 460.733784][ T9681] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 460.760903][ T9681] bond5 (unregistering): Released all slaves [ 461.526765][ T9724] netlink: 200 bytes leftover after parsing attributes in process `syz.3.969'. [ 461.594367][ T9724] syzkaller0: entered promiscuous mode [ 461.612500][ T9724] syzkaller0: entered allmulticast mode [ 461.678944][ T9727] netlink: 84 bytes leftover after parsing attributes in process `syz.0.970'. [ 461.720901][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'. [ 462.631330][ T9773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.981'. [ 462.665887][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 462.685760][ T9773] dvmrp6: entered allmulticast mode [ 462.711456][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 462.990867][ T9790] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.985'. [ 463.020006][ T9792] 8021q: VLANs not supported on ip6_vti0 [ 463.071383][ T9799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.376080][ T9790] infiniband syz1: set down [ 463.380908][ T9790] infiniband syz1: added bond0 [ 463.430544][ T9790] RDS/IB: syz1: added [ 463.435423][ T9790] smc: adding ib device syz1 with port count 1 [ 463.442002][ T9790] smc: ib device syz1 port 1 has no pnetid [ 463.736863][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.054534][ T9829] netlink: 'syz.3.996': attribute type 64 has an invalid length. [ 464.158957][ T9837] bond_slave_0: entered promiscuous mode [ 464.164902][ T9837] bond_slave_1: entered promiscuous mode [ 464.195501][ T9837] vlan2: entered promiscuous mode [ 464.205762][ T9837] bond0: entered promiscuous mode [ 464.262392][ T9834] vlan2: entered promiscuous mode [ 464.331462][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 464.374719][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 464.404760][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 464.727714][ T9848] Bluetooth: MGMT ver 1.23 [ 464.837973][ T9851] netlink: 'syz.3.1001': attribute type 6 has an invalid length. [ 464.846196][ T9851] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1001'. [ 465.099946][ T9863] netlink: 'syz.1.1004': attribute type 2 has an invalid length. [ 465.108257][ T9863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1004'. [ 465.618596][ T9871] sctp: [Deprecated]: syz.0.1006 (pid 9871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.618596][ T9871] Use struct sctp_sack_info instead [ 466.067832][ T9885] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1011'. [ 466.077586][ T9885] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 466.598526][ T9901] : renamed from virt_wifi0 [ 466.869891][ T9909] vlan2: entered promiscuous mode [ 466.887381][ T9909] team0: entered promiscuous mode [ 466.906161][ T9909] team_slave_0: entered promiscuous mode [ 466.912325][ T9909] team_slave_1: entered promiscuous mode [ 467.174337][ T9917] xt_TCPMSS: Only works on TCP SYN packets [ 467.190912][ T9917] netlink: Conntrack attr has 3 unknown bytes [ 467.423176][ T9922] bond5 (unregistering): Released all slaves [ 467.564704][ T9947] netlink: 'syz.3.1026': attribute type 83 has an invalid length. [ 467.582560][ T9923] syzkaller1: entered promiscuous mode [ 467.593953][ T9923] syzkaller1: entered allmulticast mode [ 467.928264][ T9962] __nla_validate_parse: 7 callbacks suppressed [ 467.928288][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 468.000539][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'. [ 468.220067][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 468.381638][ T9982] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1036'. [ 468.459157][ T9982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.479958][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 468.522952][ T9982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.540590][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 468.805035][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 469.014282][T10015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 469.102732][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 469.127362][T10015] bond3: Unable to set down delay as MII monitoring is disabled [ 469.144406][T10015] bond3 (unregistering): Released all slaves [ 469.234154][T10024] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 469.308805][T10024] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 469.329400][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 469.427816][T10024] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 469.452998][T10033] netlink: 'syz.1.1053': attribute type 35 has an invalid length. [ 469.516580][T10035] netlink: 'syz.4.1052': attribute type 2 has an invalid length. [ 469.547623][T10024] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 469.597722][T10037] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 469.674943][T10047] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 469.713152][T10047] netlink: 'syz.4.1055': attribute type 3 has an invalid length. [ 469.748809][ T115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.797180][ T9383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.835221][ T9383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.898487][ T115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.349753][T10081] sit2: entered promiscuous mode [ 470.441056][ T9383] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.476120][ T9383] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.514502][ T9383] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.574358][ T9383] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.828825][T10097] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 471.965550][T10121] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 471.982205][T10121] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 473.148224][T10157] __nla_validate_parse: 11 callbacks suppressed [ 473.148247][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 473.173808][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 473.802967][T10111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.072280][T10170] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 474.181924][T10170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.231391][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 474.270956][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 474.387102][T10181] team1: entered promiscuous mode [ 474.392324][T10181] team1: entered allmulticast mode [ 474.398232][T10181] 8021q: adding VLAN 0 to HW filter on device team1 [ 474.430391][T10190] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 474.439918][T10178] team2: entered promiscuous mode [ 474.445501][T10178] team2: entered allmulticast mode [ 474.454008][T10178] 8021q: adding VLAN 0 to HW filter on device team2 [ 474.648470][T10190] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.848341][T10200] bond6 (unregistering): Released all slaves [ 475.023034][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 475.341986][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 475.363915][T10231] bridge_slave_0: left allmulticast mode [ 475.389126][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1100'. [ 475.398807][T10231] bridge_slave_0: left promiscuous mode [ 475.404785][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.431694][T10234] xt_hashlimit: size too large, truncated to 1048576 [ 475.492463][T10231] bridge_slave_1: left allmulticast mode [ 475.509659][T10244] netlink: 'syz.0.1102': attribute type 31 has an invalid length. [ 475.532909][T10231] bridge_slave_1: left promiscuous mode [ 475.543194][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.564112][T10231] bond0: (slave bond_slave_0): Releasing backup interface [ 475.598878][T10231] bond0: (slave bond_slave_1): Releasing backup interface [ 475.625616][T10231] team0: Port device team_slave_0 removed [ 475.638329][T10231] team0: Port device team_slave_1 removed [ 475.659520][T10231] bond2: (slave geneve2): Releasing active interface [ 475.736577][ T9381] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.762666][ T9381] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.801314][ T5978] syz0: Port: 1 Link DOWN [ 475.807278][ T9381] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.836704][ T9381] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.143436][T10268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 476.510413][T10283] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 476.601746][T10283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.648233][T10291] netlink: 'syz.2.1116': attribute type 2 has an invalid length. [ 476.700377][T10289] bond5: (slave veth3): Enslaving as an active interface with a down link [ 476.818106][T10301] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 476.825239][T10301] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 476.910292][T10283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.930143][T10306] bond0: option arp_validate: invalid value (55553) [ 476.930875][ T9381] bond0: (slave bond_slave_0): interface is now down [ 476.945715][ T9381] bond0: (slave bond_slave_1): interface is now down [ 476.960721][T10306] team0: entered allmulticast mode [ 476.966167][T10306] team_slave_0: entered allmulticast mode [ 476.972123][T10306] team_slave_1: entered allmulticast mode [ 476.980120][ T9383] bond0: (slave bond_slave_0): interface is now down [ 476.980145][ T9383] bond0: (slave bond_slave_1): interface is now down [ 476.989931][T10306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 477.015080][T10309] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 477.031532][ T9383] bond0: (slave bond_slave_0): interface is now down [ 477.039008][ T9383] bond0: (slave bond_slave_1): interface is now down [ 477.068942][ T9383] bond0: (slave bond_slave_0): interface is now down [ 477.076256][ T9383] bond0: (slave bond_slave_1): interface is now down [ 477.102600][ T115] bond0: (slave bond_slave_0): interface is now down [ 477.128591][ T115] bond0: (slave bond_slave_1): interface is now down [ 477.176689][ T115] bond0: (slave bond_slave_0): interface is now down [ 477.183720][ T115] bond0: (slave bond_slave_1): interface is now down [ 477.236192][ T9385] bond0: (slave bond_slave_0): interface is now down [ 477.243134][ T9385] bond0: (slave bond_slave_1): interface is now down [ 477.269992][ T9385] bond0: now running without any active interface! [ 477.318496][T10315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.548044][T10328] netlink: 'syz.4.1124': attribute type 33 has an invalid length. [ 477.587812][T10328] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1124'. [ 477.694353][T10328] `: renamed from team0 [ 477.810061][T10341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1127'. [ 477.832934][T10341] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 478.135813][T10357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.216147][T10359] __nla_validate_parse: 1 callbacks suppressed [ 478.216169][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 478.492811][T10367] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 136 [ 478.522933][T10367] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 136 [ 478.563583][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 478.720821][T10373] netlink: 'syz.3.1137': attribute type 62 has an invalid length. [ 478.748877][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 478.768539][T10375] netem: invalid attributes len -1 [ 478.773731][T10375] netem: change failed [ 478.829899][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 478.839310][T10378] netlink: 'syz.1.1139': attribute type 21 has an invalid length. [ 478.970981][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 479.203443][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'. [ 479.558115][T10410] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 479.699168][T10421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 480.119234][T10443] netlink: 'syz.1.1153': attribute type 29 has an invalid length. [ 480.369815][T10454] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 480.796528][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 480.867134][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1160'. [ 480.882342][T10468] macvlan2: entered promiscuous mode [ 480.917251][T10468] macvlan2: entered allmulticast mode [ 480.949252][T10468] veth1_to_batadv: entered allmulticast mode [ 480.987545][T10476] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.132964][T10481] openvswitch: netlink: IPv6 tunnel dst address is zero [ 481.194395][T10470] syzkaller0: entered promiscuous mode [ 481.200773][T10470] syzkaller0: entered allmulticast mode [ 481.223665][T10483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 483.151251][T10513] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 483.496175][ T5888] Bluetooth: hci1: command 0x0406 tx timeout [ 483.503168][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 483.504221][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 483.509627][ T5888] Bluetooth: hci0: command 0x0406 tx timeout [ 483.523645][T10527] __nla_validate_parse: 4 callbacks suppressed [ 483.523665][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 483.595110][T10530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1177'. [ 483.726711][T10538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.734103][T10538] IPv6: NLM_F_CREATE should be set when creating new route [ 483.741819][T10538] IPv6: NLM_F_CREATE should be set when creating new route [ 483.754717][T10538] x_tables: duplicate underflow at hook 2 [ 483.876449][T10543] sctp: [Deprecated]: syz.4.1180 (pid 10543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.876449][T10543] Use struct sctp_sack_info instead [ 484.140806][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 484.177296][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 484.340401][T10551] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 484.370203][T10561] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1185'. [ 484.397577][T10551] vxlan1: entered promiscuous mode [ 484.563037][T10567] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1186'. [ 484.671345][T10575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1189'. [ 484.709677][T10575] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 484.746438][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'. [ 484.800534][T10582] netlink: 'syz.0.1190': attribute type 21 has an invalid length. [ 484.840645][T10582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1190'. [ 484.910919][T10586] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1191'. [ 484.951572][ T9402] smc: removing ib device syz1 [ 484.977771][T10588] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 484.990874][T10586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.017848][T10586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.036310][T10586] bond0 (unregistering): Released all slaves [ 485.043997][T10592] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 485.105843][T10596] netlink: 'syz.0.1194': attribute type 8 has an invalid length. [ 485.122290][T10588] : entered promiscuous mode [ 485.161760][T10592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.208891][T10596] bond6: (slave geneve5): making interface the new active one [ 485.246704][T10596] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 485.316507][ T115] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 485.325496][ T115] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 485.348267][ T115] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 485.366669][ T115] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 485.907160][T10618] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 485.937483][T10618] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 486.106266][T10627] xfrm0: entered allmulticast mode [ 486.413155][T10633] vti0: entered promiscuous mode [ 486.819317][T10646] pim6reg: entered allmulticast mode [ 486.838251][T10651] pim6reg: left allmulticast mode [ 487.121486][T10658] bond6: entered promiscuous mode [ 487.127290][T10658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.442425][T10673] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 487.461060][T10673] syz_tun: entered promiscuous mode [ 487.673904][T10677] tipc: Started in network mode [ 487.685484][T10677] tipc: Node identity ac14140f, cluster identity 4711 [ 487.695407][T10677] tipc: New replicast peer: 255.255.255.255 [ 487.752344][T10677] tipc: Enabled bearer , priority 10 [ 488.613746][T10713] bond0: option updelay: invalid value (18446744073709493611) [ 488.623465][T10713] bond0: option updelay: allowed values 0 - 2147483647 [ 488.633049][T10713] bond0 (unregistering): Released all slaves [ 488.655390][T10715] team0: Mode changed to "broadcast" [ 488.709050][T10720] geneve3: entered promiscuous mode [ 488.720610][ T9402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 488.768520][ T9402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 488.806654][ T9402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 488.874189][T10730] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 488.883174][T10730] __nla_validate_parse: 4 callbacks suppressed [ 488.883192][T10730] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1228'. [ 488.935980][ T9402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 488.987154][ T8931] tipc: Node number set to 2886997007 [ 489.030848][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 489.199542][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 489.341687][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 489.702338][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 490.103786][T10773] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 490.128791][T10773] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 490.224659][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 490.384148][T10798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1240'. [ 490.575028][ T5880] Bluetooth: hci2: link tx timeout [ 490.586137][ T5880] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 490.599755][T10804] SET target dimension over the limit! [ 490.728650][T10811] gretap1: entered promiscuous mode [ 490.734811][T10811] batman_adv: batadv0: Adding interface: gretap1 [ 490.775602][T10815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.782998][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 490.787105][T10811] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.790633][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 490.862366][T10811] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 490.891075][T10819] netlink: 'syz.2.1245': attribute type 6 has an invalid length. [ 490.899075][T10819] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.056842][T10825] xt_TCPMSS: Only works on TCP SYN packets [ 491.181969][T10825] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 491.443590][T10840] syzkaller0: entered promiscuous mode [ 491.449430][T10840] syzkaller0: entered allmulticast mode [ 492.042727][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 492.331044][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 492.391173][T10871] xt_hashlimit: overflow, rate too high: 0 [ 492.636031][ T5876] Bluetooth: hci2: command 0x0405 tx timeout [ 493.341686][T10900] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 493.383261][T10900] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1265'. [ 494.037533][T10920] netlink: 'syz.4.1270': attribute type 10 has an invalid length. [ 494.284863][T10913] syzkaller1: entered promiscuous mode [ 494.325072][T10913] syzkaller1: entered allmulticast mode [ 494.379057][T10926] __nla_validate_parse: 1 callbacks suppressed [ 494.379076][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 494.468764][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1271'. [ 494.722520][T10926] veth5: entered allmulticast mode [ 494.743637][T10938] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 494.752441][T10926] bond0: (slave veth5): Enslaving as an active interface with an up link [ 494.866549][T10929] bond0 (unregistering): (slave veth5): Releasing backup interface [ 494.880748][T10929] bond0 (unregistering): Released all slaves [ 495.023703][T10938] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.262183][T10947] netlink: 'syz.3.1275': attribute type 7 has an invalid length. [ 495.276216][T10947] netlink: 'syz.3.1275': attribute type 8 has an invalid length. [ 495.284034][T10947] netlink: 'syz.3.1275': attribute type 8 has an invalid length. [ 495.311802][T10947] netlink: 'syz.3.1275': attribute type 4 has an invalid length. [ 495.356301][T10947] netlink: 'syz.3.1275': attribute type 7 has an invalid length. [ 495.372807][T10947] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.1275'. [ 495.708197][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 495.794397][T10968] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 495.828873][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 496.276815][T10985] sctp: [Deprecated]: syz.1.1286 (pid 10985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.276815][T10985] Use struct sctp_sack_info instead [ 496.513590][T10992] netlink: 'syz.1.1289': attribute type 10 has an invalid length. [ 496.548760][T10992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1289'. [ 497.004030][T11011] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 497.127442][T11013] veth0: entered allmulticast mode [ 497.207257][T11022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1294'. [ 497.216921][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 497.295205][T11019] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1294'. [ 497.878272][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1297'. [ 498.051614][T11044] nbd: socks must be embedded in a SOCK_ITEM attr [ 498.120598][T11054] nbd: nbd64 already in use [ 498.131988][ T6680] block nbd64: NBD_DISCONNECT [ 498.517378][ T6680] udevd[6680]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 498.621636][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 499.562192][T11088] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 499.604352][T11088] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 499.758358][T11088] __nla_validate_parse: 2 callbacks suppressed [ 499.758379][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 499.999825][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 500.009092][T11116] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1319'. [ 500.441343][T11128] netlink: 'syz.0.1324': attribute type 2 has an invalid length. [ 500.449955][T11128] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 500.506600][T11128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1324'. [ 501.004438][T11155] 8021q: VLANs not supported on sit0 [ 501.125063][T11159] tipc: New replicast peer: 255.255.255.255 [ 501.134504][T11159] tipc: Enabled bearer , priority 10 [ 501.175486][T11155] netlink: 'syz.3.1328': attribute type 13 has an invalid length. [ 501.308354][T11162] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1331'. [ 501.358426][T11162] bridge_slave_1: default FDB implementation only supports local addresses [ 501.840840][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1335'. [ 501.904919][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.027312][T11193] lo: Caught tx_queue_len zero misconfig [ 502.355454][T11210] netlink: 'syz.1.1342': attribute type 4 has an invalid length. [ 503.066790][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 503.316119][ T9381] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.359401][ T9381] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.397822][ T9381] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.418154][ T9381] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.746478][T11275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1360'. [ 504.048186][T11291] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1362'. [ 505.892474][T11315] tipc: Enabled bearer , priority 0 [ 505.924298][T11315] syzkaller0: entered promiscuous mode [ 505.949289][T11315] syzkaller0: entered allmulticast mode [ 506.049439][T11315] tipc: Resetting bearer [ 506.086141][T11314] tipc: Resetting bearer [ 506.165569][T11314] tipc: Disabling bearer [ 506.252643][T11317] xt_CT: No such helper "syz1" [ 506.363070][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 506.411444][T11343] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1376'. [ 506.939200][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 506.991979][T11358] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1380'. [ 507.018762][ T6680] udevd[6680]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 507.047526][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 507.066563][T11359] openvswitch: netlink: Missing key (keys=40, expected=80) [ 507.118175][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1382'. [ 507.150345][T11365] sctp: [Deprecated]: syz.1.1383 (pid 11365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.150345][T11365] Use struct sctp_sack_info instead [ 507.624245][T11383] sctp: [Deprecated]: syz.2.1390 (pid 11383) Use of int in max_burst socket option. [ 507.624245][T11383] Use struct sctp_assoc_value instead [ 507.931091][T11393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1394'. [ 507.961079][T11393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1394'. [ 507.998589][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 508.335870][T11410] syzkaller1: entered promiscuous mode [ 508.341710][T11410] syzkaller1: entered allmulticast mode [ 508.397570][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1400'. [ 508.407255][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1400'. [ 508.432438][T11415] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 508.570983][T11415] bond8: entered promiscuous mode [ 508.606415][T11415] bond8: entered allmulticast mode [ 508.617137][T11415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 508.632127][T11421] macvlan0: entered promiscuous mode [ 508.677837][T11421] macvlan0: entered allmulticast mode [ 508.687757][T11421] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 508.873571][T11431] syzkaller0: entered promiscuous mode [ 508.914116][T11431] syzkaller0: entered allmulticast mode [ 509.433523][T11443] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.518335][T11445] syzkaller0: entered promiscuous mode [ 509.524013][T11445] syzkaller0: entered allmulticast mode [ 509.536471][T11445] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 509.773645][T11457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.785841][T11465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.795258][T11456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.044718][T11478] syzkaller0: entered promiscuous mode [ 510.061394][T11478] syzkaller0: entered allmulticast mode [ 510.116332][T11478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.124897][T11478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.841253][T11502] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 511.220832][T11513] nbd: must specify an index to disconnect [ 511.272845][T11517] lo: entered allmulticast mode [ 511.466465][T11522] __nla_validate_parse: 7 callbacks suppressed [ 511.466485][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 512.047760][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 512.171503][T11553] tipc: Enabled bearer , priority 0 [ 512.194062][T11553] syzkaller0: entered promiscuous mode [ 512.210473][T11553] syzkaller0: entered allmulticast mode [ 512.276637][T11553] tipc: Resetting bearer [ 512.294763][T11553] tipc: Resetting bearer [ 512.339123][T11553] tipc: Disabling bearer [ 512.364753][T11557] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1440'. [ 512.558812][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 512.581350][T11572] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 512.622377][T11572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.673886][T11570] bond9: entered promiscuous mode [ 512.686507][T11570] 8021q: adding VLAN 0 to HW filter on device bond9 [ 512.755563][T11571] 8021q: adding VLAN 0 to HW filter on device bond10 [ 512.764478][T11571] bond10: entered promiscuous mode [ 512.770883][T11571] bond9: (slave bond10): Enslaving as an active interface with an up link [ 512.887711][T11581] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1448'. [ 513.086620][ T8931] IPVS: starting estimator thread 0... [ 513.186016][T11600] IPVS: using max 27 ests per chain, 64800 per kthread [ 513.228443][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 513.719132][T11623] IPVS: Unknown mcast interface: vcan0 [ 513.983168][T11643] x_tables: duplicate underflow at hook 2 [ 514.149367][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 514.263715][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 514.348405][T11661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.643424][T11672] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 514.689990][T11672] bond9 (unregistering): Released all slaves [ 514.799467][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 514.841998][T11689] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1469'. [ 515.846586][T11731] syzkaller0: entered promiscuous mode [ 515.860124][T11731] syzkaller0: entered allmulticast mode [ 516.041220][T11734] syzkaller0: entered promiscuous mode [ 516.050601][T11734] syzkaller0: entered allmulticast mode [ 516.428171][T11746] syzkaller0: entered promiscuous mode [ 516.435629][T11746] syzkaller0: entered allmulticast mode [ 516.539847][T11755] debugfs: '1^!Y [ 516.539847][T11755] 3UH5rBn\' already exists in 'ieee80211' [ 516.891863][T11778] __nla_validate_parse: 4 callbacks suppressed [ 516.891884][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 516.943880][T11782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1486'. [ 517.197441][T11794] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 517.328191][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 517.377663][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 519.199373][T11794] team_slave_0: left allmulticast mode [ 519.206731][T11794] team0 (unregistering): Port device team_slave_0 removed [ 519.215800][T11794] team_slave_1: left allmulticast mode [ 519.258414][T11794] team0 (unregistering): Port device team_slave_1 removed [ 519.288550][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 519.452392][T11822] xt_hashlimit: size too large, truncated to 1048576 [ 519.533903][T11826] : renamed from vxcan1 [ 519.880003][T11841] netlink: 'syz.3.1495': attribute type 9 has an invalid length. [ 520.030577][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1496'. [ 520.587612][T11879] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 520.618316][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'. [ 520.710273][T11887] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 520.779956][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 520.867577][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 520.902472][T11892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1509'. [ 520.912577][T11895] openvswitch: netlink: Missing key (keys=40, expected=80) [ 521.218531][T11910] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 521.375700][T11910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.541908][T11911] bond7: (slave geneve3): making interface the new active one [ 521.569384][T11928] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 521.590401][T11911] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 521.597727][T11928] NCSI netlink: No device for ifindex 0 [ 521.645037][ T9388] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.671564][ T9388] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.700099][ T9388] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.718524][T11937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.777133][ T9388] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.928101][T11948] __nla_validate_parse: 4 callbacks suppressed [ 521.928127][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1519'. [ 522.401650][T11974] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004 [ 523.068347][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 523.078235][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 523.294711][T12019] syzkaller0: entered promiscuous mode [ 523.311753][T12019] syzkaller0: entered allmulticast mode [ 523.336898][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 523.368002][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1536'. [ 523.490574][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 523.504434][T12032] Bluetooth: MGMT ver 1.23 [ 523.649190][T12030] block nbd0: server does not support multiple connections per device. [ 523.663354][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 523.675565][T12030] block nbd0: shutting down sockets [ 523.711063][T12035] block nbd0: NBD_DISCONNECT [ 524.131737][T12059] ip6tnl1: entered promiscuous mode [ 524.885053][T12090] netlink: 'syz.4.1558': attribute type 3 has an invalid length. [ 524.971526][T12087] syzkaller0: entered promiscuous mode [ 524.992673][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 525.006410][T12087] syzkaller0: entered allmulticast mode [ 525.068659][T12094] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 525.076966][T12094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1559'. [ 525.576116][ T5876] Bluetooth: hci2: command 0x0405 tx timeout [ 525.577273][ T5880] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 525.598708][T12097] veth0_virt_wifi: entered allmulticast mode [ 525.830016][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 525.892575][T12103] vxcan3: entered promiscuous mode [ 526.551357][T12130] 8021q: adding VLAN 0 to HW filter on device ` [ 526.606699][T12130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.258734][T12164] __nla_validate_parse: 1 callbacks suppressed [ 527.258757][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 527.318760][T12169] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 527.349459][T12169] netlink: 'syz.2.1586': attribute type 11 has an invalid length. [ 527.362597][T12169] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1586'. [ 527.503746][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 527.566299][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 527.607283][T12180] netlink: 'syz.2.1588': attribute type 15 has an invalid length. [ 527.779939][T12195] netlink: 'syz.4.1589': attribute type 83 has an invalid length. [ 527.794334][T12196] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1591'. [ 528.004560][T12199] bond9: entered promiscuous mode [ 528.042952][T12199] 8021q: adding VLAN 0 to HW filter on device bond9 [ 528.279636][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 528.290246][T12212] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 528.332611][T12214] chnl_net:caif_netlink_parms(): no params data found [ 528.374740][T12212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 528.790371][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 529.169022][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 529.342408][T12259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.353832][T12259] 8021q: VLANs not supported on ip6_vti0 [ 529.648190][T12270] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1610'. [ 529.844095][T12274] netlink: 'syz.2.1613': attribute type 29 has an invalid length. [ 530.095025][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.303392][T12294] : entered promiscuous mode [ 530.320277][T12297] openvswitch: : Dropping previously announced user features [ 530.564995][T12319] netlink: 'syz.4.1622': attribute type 24 has an invalid length. [ 531.113688][T12344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.695469][T12375] bond0: entered promiscuous mode [ 531.710461][T12375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.731897][T12375] bond0 (unregistering): Released all slaves [ 531.748074][T12380] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 531.820115][T12383] netpci0: tun_chr_ioctl cmd 1074025678 [ 531.825863][T12383] netpci0: group set to 0 [ 531.972059][T12393] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 531.983754][T12387] syzkaller0: entered promiscuous mode [ 531.990273][T12387] syzkaller0: entered allmulticast mode [ 532.002247][T12393] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 532.044690][T12391] tipc: Enabled bearer , priority 0 [ 532.108956][T12386] tipc: Resetting bearer [ 532.159823][T12386] tipc: Disabling bearer [ 532.175511][T12399] batadv_slave_1: entered promiscuous mode [ 532.604891][T12420] __nla_validate_parse: 15 callbacks suppressed [ 532.604911][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 532.625234][T12421] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1651'. [ 532.932151][T12398] batadv_slave_1: left promiscuous mode [ 533.011545][T12440] IPVS: set_ctl: invalid protocol: 38467 0.0.0.0:20000 [ 533.376415][T12456] syzkaller1: entered promiscuous mode [ 533.381186][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 533.382734][T12456] syzkaller1: entered allmulticast mode [ 533.458601][T12464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1662'. [ 533.669126][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 534.258928][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 535.154318][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.482280][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1681'. [ 535.865580][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 536.171345][T12590] ip6tnl1: entered promiscuous mode [ 536.190105][T12590] ip6tnl1: entered allmulticast mode [ 536.334824][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 536.412783][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 536.446720][T12603] veth1: entered promiscuous mode [ 536.451929][T12603] veth1: entered allmulticast mode [ 536.747525][T12613] syzkaller0: entered promiscuous mode [ 536.753477][T12613] syzkaller0: entered allmulticast mode [ 536.919176][T12630] netlink: 'syz.3.1699': attribute type 11 has an invalid length. [ 537.268098][T12643] xt_hashlimit: size too large, truncated to 1048576 [ 537.297721][T12645] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 537.452922][T12654] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 537.578759][T12659] netlink: 'syz.0.1707': attribute type 3 has an invalid length. [ 537.630862][T12654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 537.978447][T12676] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 538.362119][T12691] __nla_validate_parse: 7 callbacks suppressed [ 538.362140][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 538.572952][T12699] openvswitch: netlink: IP tunnel dst address not specified [ 538.870450][T12718] netlink: 'syz.3.1718': attribute type 3 has an invalid length. [ 538.886199][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 538.913330][T12724] openvswitch: netlink: IP tunnel dst address not specified [ 538.947028][T12723] openvswitch: netlink: IP tunnel dst address not specified [ 539.164577][T12734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.277619][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 539.414157][T12734] team0: Port device team_slave_0 removed [ 539.437920][T12749] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 539.733761][T12752] syzkaller0: entered promiscuous mode [ 539.739843][T12752] syzkaller0: entered allmulticast mode [ 539.949286][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 539.959555][T12774] netlink: 261 bytes leftover after parsing attributes in process `syz.4.1733'. [ 541.978589][ T5876] Bluetooth: hci2: command 0x0405 tx timeout [ 542.317872][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 542.335276][T12837] netlink: 'syz.4.1744': attribute type 2 has an invalid length. [ 542.354827][T12841] xt_hashlimit: size too large, truncated to 1048576 [ 542.707834][T12854] syzkaller1: entered promiscuous mode [ 542.713545][T12854] syzkaller1: entered allmulticast mode [ 542.738369][T12854] xt_cgroup: invalid path, errno=-2 [ 542.948528][ T5880] block nbd0: Receive control failed (result -32) [ 543.068172][T12868] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.195045][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1752'. [ 543.454819][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 543.901764][T12914] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.169992][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 544.181228][T12930] SET target dimension over the limit! [ 544.481159][T12944] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1771'. [ 544.768948][T12956] netlink: 'syz.1.1775': attribute type 10 has an invalid length. [ 544.780055][T12956] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1775'. [ 545.146392][T12969] xt_hashlimit: overflow, try lower: 0/0 [ 546.463075][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 547.262333][T13036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1800'. [ 547.306540][T13036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1800'. [ 547.833059][T13066] sctp: [Deprecated]: syz.4.1806 (pid 13066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.833059][T13066] Use struct sctp_sack_info instead [ 548.409248][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 548.598414][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1817'. [ 548.919177][T13088] netlink: zone id is out of range [ 548.924377][T13088] netlink: zone id is out of range [ 548.939822][T13088] netlink: zone id is out of range [ 548.945001][T13088] netlink: zone id is out of range [ 548.979775][T13088] netlink: zone id is out of range [ 549.096169][T13088] netlink: zone id is out of range [ 549.111752][T13088] netlink: zone id is out of range [ 549.134688][T13088] netlink: zone id is out of range [ 549.167866][T13088] netlink: zone id is out of range [ 549.173116][T13088] netlink: zone id is out of range [ 549.259277][T13115] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 549.338337][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 549.374763][T13088] netlink: 'syz.1.1814': attribute type 4 has an invalid length. [ 549.394807][T13088] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 549.413371][T13088] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1814'. [ 549.608500][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1822'. [ 549.819878][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 550.129823][T13138] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1827'. [ 550.383993][T13148] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 550.547515][T13148] bond8: entered promiscuous mode [ 550.566425][T13148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 550.583126][T13152] vlan0: entered allmulticast mode [ 550.658775][T13152] bond8: entered allmulticast mode [ 550.908042][T13158] bond8: (slave bridge4): making interface the new active one [ 550.936063][T13158] bridge4: entered promiscuous mode [ 550.945582][T13158] bridge4: entered allmulticast mode [ 550.969622][T13158] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 551.002102][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 551.073883][T13157] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1832'. [ 551.102065][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1832'. [ 551.145740][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1832'. [ 551.449589][T13192] xt_hashlimit: size too large, truncated to 1048576 [ 551.568942][T13195] tap0: tun_chr_ioctl cmd 2147767520 [ 552.947956][T13260] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 553.032388][T13260] bond9: entered promiscuous mode [ 553.038650][T13260] 8021q: adding VLAN 0 to HW filter on device bond9 [ 553.085037][T13270] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 553.154369][T13270] 8021q: adding VLAN 0 to HW filter on device bond11 [ 553.178739][T13260] IPv6: Can't replace route, no match found [ 553.185100][T13260] IPv6: Can't replace route, no match found [ 553.238706][T13272] bond11: (slave gretap2): making interface the new active one [ 553.299950][T13272] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 553.665781][ T29] audit: type=1107 audit(1775984507.340:3): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='goV/OX6CR!_`ȔaX.|C˜CV*Z@`>1Vv' [ 553.753377][T13260] bond9: (slave veth9): making interface the new active one [ 553.778584][T13260] veth9: entered promiscuous mode [ 553.792028][T13260] bond9: (slave veth9): Enslaving as an active interface with an up link [ 553.829872][T13283] bridge4: entered promiscuous mode [ 553.835284][T13283] bridge4: entered allmulticast mode [ 553.853301][T13287] gre1: entered promiscuous mode [ 554.081735][T13322] __nla_validate_parse: 6 callbacks suppressed [ 554.081757][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 554.129179][ T5880] block nbd1: Receive control failed (result -1) [ 554.498984][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 554.937985][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 555.023046][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 555.044586][T13352] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 555.562206][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 555.571919][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 555.643231][T13383] syzkaller1: entered promiscuous mode [ 555.681007][T13383] syzkaller1: entered allmulticast mode [ 555.855108][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 555.928789][T13398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 555.968460][T13400] batadv_slave_0: entered promiscuous mode [ 556.032711][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 556.104270][T13400] batadv_slave_0: left promiscuous mode [ 556.134305][T13405] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 556.181598][T13405] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1890'. [ 556.534434][T13433] netlink: 'syz.3.1895': attribute type 39 has an invalid length. [ 558.587312][T13459] nbd: must specify a size in bytes for the device [ 558.846144][T13477] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 559.011584][T13482] syzkaller1: entered promiscuous mode [ 559.017217][T13482] syzkaller1: entered allmulticast mode [ 559.424247][T13509] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 559.433140][T13509] __nla_validate_parse: 5 callbacks suppressed [ 559.433159][T13509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1910'. [ 559.489413][T13519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1916'. [ 559.511617][T13511] syzkaller0: entered promiscuous mode [ 559.527170][T13511] syzkaller0: entered allmulticast mode [ 559.642847][T13523] net_ratelimit: 9 callbacks suppressed [ 559.642867][T13523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.152573][T13538] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1921'. [ 560.230329][T13538] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 560.235650][T13540] netlink: 'syz.3.1922': attribute type 39 has an invalid length. [ 560.402110][T13546] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 560.421733][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 560.565504][T13553] SET target dimension over the limit! [ 561.088223][T13579] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24 [ 561.222350][T13588] netlink: 'syz.1.1935': attribute type 2 has an invalid length. [ 561.570958][T13598] netlink: 4716 bytes leftover after parsing attributes in process `syz.3.1938'. [ 561.606265][T13598] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 561.654834][T13606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1940'. [ 562.180431][T13629] bridge0: port 1(bond0) entered blocking state [ 562.207356][T13629] bridge0: port 1(bond0) entered disabled state [ 562.232573][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 562.242744][T13629] bond0: entered allmulticast mode [ 562.266568][T13629] bond0: entered promiscuous mode [ 562.326159][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 562.406063][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1948'. [ 562.446101][T13642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 562.712174][T13659] openvswitch: netlink: Flow actions attr not present in new flow. [ 562.914988][T13667] IPv6: addrconf: prefix option has invalid lifetime [ 563.009588][T13669] syzkaller0: entered promiscuous mode [ 563.015181][T13669] syzkaller0: entered allmulticast mode [ 563.161985][T13678] batadv_slave_1: entered promiscuous mode [ 563.191851][T13678] xt_TCPMSS: Only works on TCP SYN packets [ 563.308709][T13677] batadv_slave_1: left promiscuous mode [ 563.616792][T13688] nbd2: detected capacity change from 0 to 63 [ 563.634034][ T5880] block nbd2: Receive control failed (result -32) [ 563.644426][ T5876] block nbd2: Receive control failed (result -32) [ 563.662057][ T6680] block nbd2: Dead connection, failed to find a fallback [ 563.724209][ T6680] block nbd2: shutting down sockets [ 563.736746][ T6680] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.749670][ T6680] Buffer I/O error on dev nbd2, logical block 0, async page read [ 563.758561][ T6680] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.770333][ T6680] Buffer I/O error on dev nbd2, logical block 1, async page read [ 563.779100][ T6680] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.791019][ T6680] Buffer I/O error on dev nbd2, logical block 2, async page read [ 563.799368][ T6680] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.809394][ T6680] Buffer I/O error on dev nbd2, logical block 3, async page read [ 563.817298][T13706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.817800][T13718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.818898][T13710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.883574][ T6680] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.903917][ T6680] Buffer I/O error on dev nbd2, logical block 0, async page read [ 563.941794][ T6680] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 563.990820][ T6680] Buffer I/O error on dev nbd2, logical block 1, async page read [ 564.077132][ T6680] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.092649][ T6680] Buffer I/O error on dev nbd2, logical block 2, async page read [ 564.129393][ T6680] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.152069][ T6680] Buffer I/O error on dev nbd2, logical block 3, async page read [ 564.170384][ T6680] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.221645][ T6680] Buffer I/O error on dev nbd2, logical block 0, async page read [ 564.240173][ T6680] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.269618][ T6680] Buffer I/O error on dev nbd2, logical block 1, async page read [ 564.288782][ T6680] ldm_validate_partition_table(): Disk read failed. [ 564.318306][ T6680] Dev nbd2: unable to read RDB block 0 [ 564.351707][ T6680] nbd2: unable to read partition table [ 564.373626][ T6680] ldm_validate_partition_table(): Disk read failed. [ 564.392646][ T6680] Dev nbd2: unable to read RDB block 0 [ 564.411159][ T6680] nbd2: unable to read partition table [ 564.433304][T13741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.487001][T13747] __nla_validate_parse: 4 callbacks suppressed [ 564.487022][T13747] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1975'. [ 564.697746][T13753] syzkaller1: entered promiscuous mode [ 564.716164][T13753] syzkaller1: entered allmulticast mode [ 565.114023][T13768] veth0_virt_wifi: entered allmulticast mode [ 565.203959][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 565.221724][T13776] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1986'. [ 565.329228][ T29] audit: type=1107 audit(1775984519.010:4): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 565.345748][T13784] netlink: 'syz.3.1989': attribute type 2 has an invalid length. [ 565.379593][T13784] hmac(sha224: entered promiscuous mode [ 565.688992][T13809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.036690][T13826] syzkaller1: entered promiscuous mode [ 566.056085][T13826] syzkaller1: entered allmulticast mode [ 566.421905][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 566.445261][T13844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.485309][T13842] 8021q: adding VLAN 0 to HW filter on device bond10 [ 566.502451][T13846] bond10: (slave batadv1): Opening slave failed [ 566.554307][T13847] team0: No ports can be present during mode change [ 566.764159][T13851] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 566.811272][T13851] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 567.688510][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 567.848471][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 567.959445][T13920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 568.334490][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2023'. [ 568.606454][T13944] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 568.645988][T13944] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 568.837312][T13944] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 568.897018][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2027'. [ 568.938700][T13952] [ 568.941114][T13952] ====================================================== [ 568.948264][T13952] WARNING: possible circular locking dependency detected [ 568.955331][T13952] syzkaller #0 Not tainted [ 568.959791][T13952] ------------------------------------------------------ [ 568.967039][T13952] syz.4.2027/13952 is trying to acquire lock: [ 568.973143][T13952] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 568.982375][T13952] [ 568.982375][T13952] but task is already holding lock: [ 568.989876][T13952] ffff88806da12800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 568.999447][T13952] [ 568.999447][T13952] which lock already depends on the new lock. [ 568.999447][T13952] [ 569.009900][T13952] [ 569.009900][T13952] the existing dependency chain (in reverse order) is: [ 569.018959][T13952] [ 569.018959][T13952] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 569.026582][T13952] __might_fault+0xcb/0x130 [ 569.031671][T13952] _copy_from_user+0x28/0xb0 [ 569.036845][T13952] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 569.043406][T13952] ip_generic_getfrag+0x149/0x2d0 [ 569.049008][T13952] __ip6_append_data+0x39e4/0x3f70 [ 569.054730][T13952] ip6_append_data+0x10f/0x280 [ 569.060050][T13952] rawv6_sendmsg+0x12d3/0x18e0 [ 569.065373][T13952] ____sys_sendmsg+0x80a/0x9f0 [ 569.070793][T13952] ___sys_sendmsg+0x2a5/0x360 [ 569.076031][T13952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 569.081532][T13952] do_syscall_64+0x14d/0xf80 [ 569.086679][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.093123][T13952] [ 569.093123][T13952] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 569.100895][T13952] lock_sock_nested+0x41/0x100 [ 569.106334][T13952] inet_shutdown+0x6a/0x390 [ 569.111415][T13952] nbd_mark_nsock_dead+0x2e9/0x560 [ 569.117114][T13952] recv_work+0x1c7f/0x1d90 [ 569.122090][T13952] process_scheduled_works+0xb6e/0x18c0 [ 569.128198][T13952] worker_thread+0xa53/0xfc0 [ 569.133352][T13952] kthread+0x388/0x470 [ 569.137974][T13952] ret_from_fork+0x51e/0xb90 [ 569.143122][T13952] ret_from_fork_asm+0x1a/0x30 [ 569.148782][T13952] [ 569.148782][T13952] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 569.156701][T13952] __mutex_lock+0x19f/0x1300 [ 569.161944][T13952] nbd_queue_rq+0x37b/0x1100 [ 569.167106][T13952] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 569.173308][T13952] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 569.180203][T13952] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 569.186763][T13952] blk_mq_run_hw_queue+0x348/0x4f0 [ 569.192438][T13952] blk_mq_dispatch_list+0xd16/0xe10 [ 569.198490][T13952] blk_mq_flush_plug_list+0x48d/0x570 [ 569.204433][T13952] __blk_flush_plug+0x3ed/0x4d0 [ 569.209868][T13952] __submit_bio+0x28d/0x580 [ 569.215026][T13952] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 569.221215][T13952] block_read_full_folio+0x599/0x830 [ 569.227151][T13952] filemap_read_folio+0x137/0x3b0 [ 569.232747][T13952] do_read_cache_folio+0x358/0x590 [ 569.238414][T13952] read_part_sector+0xb6/0x2b0 [ 569.243828][T13952] adfspart_check_ICS+0xa5/0xa40 [ 569.249334][T13952] bdev_disk_changed+0x7ba/0x1550 [ 569.254906][T13952] blkdev_get_whole+0x380/0x510 [ 569.260313][T13952] bdev_open+0x31e/0xd30 [ 569.265105][T13952] blkdev_open+0x470/0x610 [ 569.270136][T13952] do_dentry_open+0x785/0x14e0 [ 569.275466][T13952] vfs_open+0x3b/0x340 [ 569.280140][T13952] path_openat+0x2e08/0x3860 [ 569.285299][T13952] do_file_open+0x23e/0x4a0 [ 569.290544][T13952] do_sys_openat2+0x113/0x200 [ 569.295800][T13952] __x64_sys_openat+0x138/0x170 [ 569.301236][T13952] do_syscall_64+0x14d/0xf80 [ 569.306567][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.313021][T13952] [ 569.313021][T13952] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 569.320270][T13952] __mutex_lock+0x19f/0x1300 [ 569.325416][T13952] nbd_queue_rq+0xc6/0x1100 [ 569.330528][T13952] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 569.336724][T13952] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 569.343626][T13952] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 569.350247][T13952] blk_mq_run_hw_queue+0x348/0x4f0 [ 569.355911][T13952] blk_mq_dispatch_list+0xd16/0xe10 [ 569.361677][T13952] blk_mq_flush_plug_list+0x48d/0x570 [ 569.367613][T13952] __blk_flush_plug+0x3ed/0x4d0 [ 569.373115][T13952] __submit_bio+0x28d/0x580 [ 569.378209][T13952] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 569.384448][T13952] block_read_full_folio+0x599/0x830 [ 569.390289][T13952] filemap_read_folio+0x137/0x3b0 [ 569.395875][T13952] do_read_cache_folio+0x358/0x590 [ 569.401637][T13952] read_part_sector+0xb6/0x2b0 [ 569.406988][T13952] adfspart_check_ICS+0xa5/0xa40 [ 569.412483][T13952] bdev_disk_changed+0x7ba/0x1550 [ 569.418057][T13952] blkdev_get_whole+0x380/0x510 [ 569.423457][T13952] bdev_open+0x31e/0xd30 [ 569.428289][T13952] blkdev_open+0x470/0x610 [ 569.433258][T13952] do_dentry_open+0x785/0x14e0 [ 569.438584][T13952] vfs_open+0x3b/0x340 [ 569.443203][T13952] path_openat+0x2e08/0x3860 [ 569.448347][T13952] do_file_open+0x23e/0x4a0 [ 569.453395][T13952] do_sys_openat2+0x113/0x200 [ 569.458629][T13952] __x64_sys_openat+0x138/0x170 [ 569.464032][T13952] do_syscall_64+0x14d/0xf80 [ 569.469168][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.475605][T13952] [ 569.475605][T13952] -> #3 (set->srcu){.+.+}-{0:0}: [ 569.482854][T13952] __synchronize_srcu+0xca/0x300 [ 569.488355][T13952] elevator_switch+0x1e8/0x7a0 [ 569.493668][T13952] elevator_change+0x2cc/0x450 [ 569.498990][T13952] elevator_set_default+0x36c/0x430 [ 569.504741][T13952] blk_register_queue+0x366/0x430 [ 569.510324][T13952] __add_disk+0x677/0xd50 [ 569.515212][T13952] add_disk_fwnode+0xfb/0x480 [ 569.520452][T13952] nbd_dev_add+0x72c/0xb50 [ 569.525427][T13952] nbd_init+0x168/0x1f0 [ 569.530153][T13952] do_one_initcall+0x250/0x8d0 [ 569.535485][T13952] do_initcall_level+0x104/0x190 [ 569.540989][T13952] do_initcalls+0x59/0xa0 [ 569.545876][T13952] kernel_init_freeable+0x2a6/0x3e0 [ 569.551636][T13952] kernel_init+0x1d/0x1d0 [ 569.556526][T13952] ret_from_fork+0x51e/0xb90 [ 569.561689][T13952] ret_from_fork_asm+0x1a/0x30 [ 569.567020][T13952] [ 569.567020][T13952] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 569.574877][T13952] __mutex_lock+0x19f/0x1300 [ 569.580623][T13952] elevator_change+0x1b3/0x450 [ 569.585944][T13952] elevator_set_none+0xb5/0x140 [ 569.591356][T13952] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 569.597725][T13952] nbd_start_device+0x17f/0xb10 [ 569.603128][T13952] nbd_genl_connect+0x165b/0x1cf0 [ 569.608746][T13952] genl_family_rcv_msg_doit+0x22a/0x330 [ 569.614940][T13952] genl_rcv_msg+0x61c/0x7a0 [ 569.620017][T13952] netlink_rcv_skb+0x232/0x4b0 [ 569.625351][T13952] genl_rcv+0x28/0x40 [ 569.630051][T13952] netlink_unicast+0x80f/0x9b0 [ 569.635375][T13952] netlink_sendmsg+0x813/0xb40 [ 569.640723][T13952] ____sys_sendmsg+0x972/0x9f0 [ 569.646046][T13952] ___sys_sendmsg+0x2a5/0x360 [ 569.651280][T13952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 569.656864][T13952] do_syscall_64+0x14d/0xf80 [ 569.662003][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.668446][T13952] [ 569.668446][T13952] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 569.677091][T13952] blk_alloc_queue+0x546/0x680 [ 569.682458][T13952] __blk_mq_alloc_disk+0x197/0x390 [ 569.688126][T13952] nbd_dev_add+0x499/0xb50 [ 569.693097][T13952] nbd_init+0x168/0x1f0 [ 569.697803][T13952] do_one_initcall+0x250/0x8d0 [ 569.703124][T13952] do_initcall_level+0x104/0x190 [ 569.708625][T13952] do_initcalls+0x59/0xa0 [ 569.713507][T13952] kernel_init_freeable+0x2a6/0x3e0 [ 569.719416][T13952] kernel_init+0x1d/0x1d0 [ 569.724483][T13952] ret_from_fork+0x51e/0xb90 [ 569.729628][T13952] ret_from_fork_asm+0x1a/0x30 [ 569.734953][T13952] [ 569.734953][T13952] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 569.742198][T13952] __lock_acquire+0x15a5/0x2cf0 [ 569.747695][T13952] lock_acquire+0xf0/0x2e0 [ 569.752694][T13952] fs_reclaim_acquire+0x71/0x100 [ 569.758186][T13952] prepare_alloc_pages+0x152/0x650 [ 569.763936][T13952] __alloc_frozen_pages_noprof+0x12f/0x380 [ 569.770340][T13952] alloc_pages_mpol+0x232/0x4a0 [ 569.775750][T13952] alloc_pages_noprof+0xa8/0x1a0 [ 569.781243][T13952] pte_alloc_one+0x22/0x370 [ 569.786308][T13952] __pte_alloc+0x25/0x1a0 [ 569.791192][T13952] do_pte_missing+0x2c47/0x3490 [ 569.796861][T13952] handle_mm_fault+0x1bec/0x3310 [ 569.802557][T13952] do_user_addr_fault+0x75b/0x1340 [ 569.808229][T13952] exc_page_fault+0x6a/0xc0 [ 569.813889][T13952] asm_exc_page_fault+0x26/0x30 [ 569.819292][T13952] fault_in_readable+0x8e/0x130 [ 569.824705][T13952] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 569.831011][T13952] generic_perform_write+0x7af/0x8f0 [ 569.836950][T13952] shmem_file_write_iter+0xf8/0x120 [ 569.842796][T13952] vfs_write+0x61d/0xb90 [ 569.847589][T13952] ksys_write+0x150/0x270 [ 569.852466][T13952] do_syscall_64+0x14d/0xf80 [ 569.857697][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.864760][T13952] [ 569.864760][T13952] other info that might help us debug this: [ 569.864760][T13952] [ 569.875120][T13952] Chain exists of: [ 569.875120][T13952] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 569.875120][T13952] [ 569.887951][T13952] Possible unsafe locking scenario: [ 569.887951][T13952] [ 569.895527][T13952] CPU0 CPU1 [ 569.901007][T13952] ---- ---- [ 569.906396][T13952] rlock(&mm->mmap_lock); [ 569.910844][T13952] lock(sk_lock-AF_INET6); [ 569.917900][T13952] lock(&mm->mmap_lock); [ 569.924784][T13952] lock(fs_reclaim); [ 569.928800][T13952] [ 569.928800][T13952] *** DEADLOCK *** [ 569.928800][T13952] [ 569.936966][T13952] 3 locks held by syz.4.2027/13952: [ 569.942189][T13952] #0: ffff888033ae0420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 569.951120][T13952] #1: ffff88805307b010 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 569.962306][T13952] #2: ffff88806da12800 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 569.972267][T13952] [ 569.972267][T13952] stack backtrace: [ 569.978185][T13952] CPU: 1 UID: 0 PID: 13952 Comm: syz.4.2027 Not tainted syzkaller #0 PREEMPT(full) [ 569.978208][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.978220][T13952] Call Trace: [ 569.978227][T13952] [ 569.978235][T13952] dump_stack_lvl+0xe8/0x150 [ 569.978264][T13952] print_circular_bug+0x2e1/0x300 [ 569.978295][T13952] check_noncircular+0x12e/0x150 [ 569.978326][T13952] __lock_acquire+0x15a5/0x2cf0 [ 569.978354][T13952] ? stack_trace_save+0xa9/0x100 [ 569.978372][T13952] ? __pfx_stack_trace_save+0x10/0x10 [ 569.978400][T13952] lock_acquire+0xf0/0x2e0 [ 569.978423][T13952] ? prepare_alloc_pages+0x152/0x650 [ 569.978450][T13952] fs_reclaim_acquire+0x71/0x100 [ 569.978471][T13952] ? prepare_alloc_pages+0x152/0x650 [ 569.978494][T13952] prepare_alloc_pages+0x152/0x650 [ 569.978520][T13952] __alloc_frozen_pages_noprof+0x12f/0x380 [ 569.978546][T13952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.978572][T13952] ? __pfx_policy_nodemask+0x10/0x10 [ 569.978594][T13952] ? __lock_acquire+0x6b5/0x2cf0 [ 569.978621][T13952] alloc_pages_mpol+0x232/0x4a0 [ 569.978647][T13952] alloc_pages_noprof+0xa8/0x1a0 [ 569.978672][T13952] pte_alloc_one+0x22/0x370 [ 569.978701][T13952] __pte_alloc+0x25/0x1a0 [ 569.978728][T13952] ? __pfx_cmp_ex_search+0x10/0x10 [ 569.978747][T13952] ? rep_movs_alternative+0x4a/0x90 [ 569.978770][T13952] do_pte_missing+0x2c47/0x3490 [ 569.978793][T13952] ? mtree_range_walk+0x6a7/0x840 [ 569.978818][T13952] handle_mm_fault+0x1bec/0x3310 [ 569.978841][T13952] ? handle_mm_fault+0xee/0x3310 [ 569.978860][T13952] ? __pfx_handle_mm_fault+0x10/0x10 [ 569.978885][T13952] ? lock_mm_and_find_vma+0xa7/0x340 [ 569.978906][T13952] do_user_addr_fault+0x75b/0x1340 [ 569.978937][T13952] exc_page_fault+0x6a/0xc0 [ 569.978954][T13952] asm_exc_page_fault+0x26/0x30 [ 569.978971][T13952] RIP: 0010:fault_in_readable+0x8e/0x130 [ 569.979001][T13952] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 d0 13 b3 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 569.979017][T13952] RSP: 0018:ffffc9000569faa8 EFLAGS: 00050202 [ 569.979033][T13952] RAX: ffffffff82129e01 RBX: 0000000000000200 RCX: ffff88807b3d5b80 [ 569.979047][T13952] RDX: 0000000000000002 RSI: 0000200000200000 RDI: 0000200000200200 [ 569.979059][T13952] RBP: dffffc0000000001 R08: ffff88807b3d5b80 R09: 0000000000000002 [ 569.979072][T13952] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 569.979084][T13952] R13: 0000200000200000 R14: 0000200000200000 R15: 0000200000200200 [ 569.979101][T13952] ? fault_in_readable+0x1/0x130 [ 569.979131][T13952] ? fault_in_readable+0x80/0x130 [ 569.979158][T13952] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 569.979180][T13952] generic_perform_write+0x7af/0x8f0 [ 569.979211][T13952] ? __pfx_generic_perform_write+0x10/0x10 [ 569.979234][T13952] ? down_write+0x16d/0x200 [ 569.979258][T13952] ? file_update_time_flags+0x3b3/0x4a0 [ 569.979281][T13952] shmem_file_write_iter+0xf8/0x120 [ 569.979302][T13952] vfs_write+0x61d/0xb90 [ 569.979331][T13952] ? __pfx_vfs_write+0x10/0x10 [ 569.979351][T13952] ? __pfx_do_futex+0x10/0x10 [ 569.979373][T13952] ? kmem_cache_free+0x187/0x630 [ 569.979394][T13952] ? do_sys_openat2+0x14c/0x200 [ 569.979427][T13952] ksys_write+0x150/0x270 [ 569.979447][T13952] ? __pfx_ksys_write+0x10/0x10 [ 569.979472][T13952] do_syscall_64+0x14d/0xf80 [ 569.979490][T13952] ? trace_irq_disable+0x3b/0x150 [ 569.979505][T13952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.979523][T13952] ? clear_bhb_loop+0x40/0x90 [ 569.979543][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.979561][T13952] RIP: 0033:0x7f9d1ed9c819 [ 569.979577][T13952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.979592][T13952] RSP: 002b:00007f9d1fbce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.979609][T13952] RAX: ffffffffffffffda RBX: 00007f9d1f016090 RCX: 00007f9d1ed9c819 [ 569.979622][T13952] RDX: 0000000000806000 RSI: 0000200000000200 RDI: 000000000000000b [ 569.979634][T13952] RBP: 00007f9d1ee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 569.979645][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.979656][T13952] R13: 00007f9d1f016128 R14: 00007f9d1f016090 R15: 00007ffc73b25fd8 [ 569.979677][T13952]