last executing test programs: 18.343573886s ago: executing program 2 (id=9038): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc080}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x4, 0x26d7, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000500"/62], 0x78) 16.796649228s ago: executing program 2 (id=9048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 16.07205404s ago: executing program 0 (id=9055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 15.787609122s ago: executing program 2 (id=9057): socket(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 15.407327075s ago: executing program 0 (id=9059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="ab", 0x1, 0x40448c4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000002c0)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) 15.066116084s ago: executing program 2 (id=9061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0x3, 0x20000000, 0x9, 0x401}, 0x4, 0x85, [{0x0, 0x5d, 0x8, 0x0, 0xa3a6, 0x101}]}, [{0xc8, 0x9, 0x4, 0xfffffffc, 0xffffffff, 0xf08c}, {0xfffffffc, 0x1, 0x9, 0xd80, 0x1ff, 0x7}, {0x0, 0xd, 0x3, 0x7, 0x1, 0xb5a3}, {0x2, 0x3, 0xe0, 0x4, 0x3f, 0x9}, {0xd7ba, 0x800, 0x1, 0x9, 0x6, 0x2}, {0x79, 0xb, 0xffffff20, 0x7, 0x5, 0x10000}, {0x7fff, 0x2, 0x3, 0xfffffff8, 0x0, 0xdb63}, {0x8, 0x9, 0x7cbf134f, 0x3, 0x5, 0x101}, {0x10001, 0x4, 0x7, 0x400, 0xd423, 0x5}, {0x1, 0x2, 0x0, 0x6, 0xfffffffc}, {0xeced, 0x3, 0x7fff, 0x18, 0xd4, 0x7}, {0x9, 0x4, 0x1, 0x629aa8ca, 0x1, 0x100}, {0xffff, 0xffffff00, 0x9, 0x6, 0x80000000, 0x6}, {0x8, 0xb, 0x401, 0x5, 0xe, 0xfffffff7}, {0xab5, 0xff, 0x6, 0x4, 0x5, 0x6a}, {0xd14d, 0x2a, 0x8, 0x3ff, 0x6f9}, {0x7, 0xc, 0x9, 0x2, 0x9, 0x8}, {0xffffffff, 0x3ff, 0x8, 0xff, 0xfffffffc, 0xfffffffd}, {0x0, 0x3c000000, 0x401, 0x28, 0x8, 0x8}, {0x4, 0x69d, 0x8, 0x3d092435, 0xfa, 0x7ed1}, {0x4, 0x3, 0x80, 0xc, 0x401, 0x6}, {0x40, 0x0, 0x3, 0x1, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x8, 0x1, 0x8}, {0x5e, 0x9, 0x7fffffff, 0xff, 0x8, 0xaa5}, {0x3, 0x8, 0x2, 0x5, 0x800}, {0x1, 0x5, 0x0, 0xb, 0x9ca, 0x100}, {0x1, 0x6, 0x5, 0x7fff, 0x3, 0x7fff}, {0x6, 0x9, 0x1, 0x8, 0x2d, 0x4}, {0x6, 0x5, 0xc, 0xfff, 0x6, 0x8}, {0x2, 0x6, 0x1, 0x1, 0x10, 0xf2}, {0x400, 0x9, 0x7, 0x100, 0x3, 0x3ff}, {0xfffffffb, 0x6510, 0x4, 0x9, 0x10, 0x6}, {0x5, 0x3, 0xb159, 0x2, 0xa8c, 0x6}, {0x0, 0x0, 0xf, 0x4, 0x3, 0x2}, {0xa, 0x8, 0x4, 0x2, 0x7, 0xc9c}, {0x8, 0xf, 0x696b, 0x1, 0x6, 0x80000001}, {0x7, 0x5, 0x1000, 0xff, 0x10, 0x3}, {0x8, 0x5, 0x4, 0x0, 0x60d, 0xf6}, {0x0, 0x10000, 0x7, 0x6, 0x60500000, 0x8}, {0xffff720e, 0x0, 0x8, 0x8, 0x3, 0x4}, {0x7, 0x8, 0x9, 0x3, 0x7, 0x10000}, {0x3, 0xd, 0x0, 0x6, 0x38, 0x6f7}, {0x10000, 0x400, 0xab, 0x4, 0x8000, 0x3f0}, {0x8, 0x6, 0x7, 0xfffffa16, 0x1ff, 0x7}, {0x6, 0x1, 0x4, 0x401, 0x0, 0x7}, {0x10000, 0x0, 0x5c, 0x3, 0x3, 0x6a9c}, {0xfff, 0x1, 0x2, 0xaf30, 0x0, 0x3}, {0x10001, 0x1, 0x81, 0x8, 0x6, 0xc00}, {0x9, 0x401, 0x0, 0x4, 0x3ff, 0x2}, {0x6, 0x80, 0x7, 0x6, 0x7, 0x70000000}, {0x216d, 0x9, 0x2, 0x100, 0xd, 0x4}, {0x1ff, 0x2, 0xe, 0x3, 0x4, 0x4}, {0x4, 0x6, 0x7, 0x403c, 0xf, 0x3}, {0x9, 0xfc1, 0x6, 0x3, 0x8001, 0x8}, {0x7, 0xfff, 0x7, 0x54f3, 0x3, 0x6}, {0x800, 0x80000000, 0x6, 0x7, 0x3, 0x6}, {0x5, 0x6, 0x1000, 0x8, 0x3, 0x80000001}, {0x2, 0x800, 0xfff, 0x7, 0x3, 0x94d}, {0x7, 0x4, 0xfffffa2a, 0x4, 0x10, 0x5}, {0x4, 0x6, 0x3, 0x10, 0x6, 0x86}, {0xcf, 0x7, 0x1, 0xb, 0x80, 0x3}, {0x2, 0x400, 0x4823, 0x59e8d375, 0x400, 0x6}, {0x15e, 0x7, 0x7, 0x8b, 0x6, 0x5}, {0xfffffff9, 0x6, 0x7, 0x4, 0x2, 0x10001}, {0x7224f33c, 0x101, 0x100, 0x2, 0x3, 0x1}, {0x8, 0x5, 0x6, 0x2, 0x80000000, 0x320b}, {0x9, 0x80000001, 0xc8, 0x3ff, 0x1000, 0x6}, {0x7fff, 0x900000, 0x2, 0xa3a, 0x1, 0x9}, {0x1000, 0x0, 0x4, 0xad, 0x7, 0x9}, {0x6, 0x91, 0x33a, 0x0, 0x6, 0x1}, {0xff, 0x9, 0xffff8000, 0x84f, 0x9, 0x8}, {0x5b8, 0xa, 0x0, 0x7, 0xb, 0xfed4}, {0x0, 0xfffffffe, 0x4, 0x8c28, 0x9, 0x6fb}, {0x2, 0x3, 0xf1, 0xfff, 0x1ff}, {0x2, 0x7, 0xff, 0x9, 0x3, 0xfe00}, {0xef0e, 0xe2, 0x7, 0x7, 0x8f, 0x2}, {0x317b, 0x6, 0x80000000, 0x2, 0x4, 0x89}, {0xdd3f, 0x3dbe, 0x81, 0x7, 0x5, 0xfffffffa}, {0x0, 0xfffff000, 0x7fff, 0x7, 0xfffffff8, 0x4}, {0x9, 0x616, 0xe, 0x80, 0x2, 0x5}, {0x1, 0x3, 0x7, 0x7fffffff, 0x2, 0x10000}, {0x401, 0x96, 0xe6, 0x6, 0x8, 0x4}, {0xa2e00000, 0x0, 0x8, 0x80000000, 0x1, 0x1}, {0xfffffff4, 0xc18f, 0x5, 0x7, 0x3, 0x71d}, {0xc, 0xe10f, 0xb, 0x4, 0x200, 0xfffffffd}, {0x4, 0x0, 0x200, 0xf32, 0x3, 0x3}, {0x5, 0x80, 0x80000001, 0x80, 0x8, 0x7}, {0x2, 0x10, 0x7, 0xb, 0x4}, {0x4, 0xc, 0x3, 0x3, 0x4159f02e, 0x5}, {0x7, 0x5, 0x8000, 0x40, 0x7f0c, 0xaf4}, {0xfe00000, 0x2, 0xff, 0x8000, 0x7, 0x4}, {0x1, 0x8, 0x7, 0x3, 0x3, 0x1000}, {0x3, 0x8, 0x80000001, 0xe, 0x0, 0x7}, {0x4, 0x3, 0x8000, 0x4, 0xa}, {0xd10, 0x56a, 0xfffffffe, 0x2, 0x80000000, 0x6}, {0x3, 0xffffffff, 0x80000001, 0x4, 0xdcd6, 0x4}, {0xfa, 0xe, 0x9, 0x9, 0x6b39, 0x8}, {0x0, 0xe8, 0x8, 0x6, 0x4, 0x9}, {0xbf, 0x8, 0x7, 0xb, 0x5, 0x2}, {0x54, 0x2, 0x7, 0x7, 0x4, 0xfffffffc}, {0x2, 0x7, 0x401, 0xfff, 0xfffffff8, 0x3ff}, {0x8001, 0xe, 0x7fff, 0xa, 0x7, 0x3}, {0xfff, 0x2, 0x7, 0x7fff, 0xfff, 0x1}, {0x4, 0x7, 0x7ff, 0x7, 0x8a, 0x7f}, {0xe, 0x0, 0xc, 0x9, 0x7, 0x7d0}, {0x2, 0x2, 0x9, 0x1, 0x7ff, 0x3}, {0x0, 0xb, 0x7f, 0x0, 0x3, 0xff}, {0x7a2f, 0x7, 0x1, 0x0, 0xffffffff, 0x2}, {0x2, 0x2, 0x2, 0x6, 0x4, 0x48d}, {0x2, 0xff, 0x4, 0x8001, 0xfffffffe}, {0xfffffffa, 0xffffffff, 0x39c, 0xfffffffb, 0xfffffffa, 0x7fffffff}, {0x400, 0x2a1, 0x9, 0xc, 0x4, 0x6}, {0x32, 0x5, 0x10001, 0x7ff, 0x0, 0x8}, {0x8, 0x3, 0xc, 0x7fffffff, 0x9, 0xfffffffe}, {0x1800000, 0x6, 0x401, 0x6, 0x5, 0x26}, {0x769, 0x7ff, 0x7fffffff, 0x18000000, 0xffff, 0x8001}, {0x2, 0xfffff000, 0xe, 0x1, 0xf, 0xb55}, {0x7, 0x6, 0x8, 0x3, 0x1, 0x7303}, {0x9, 0x1000006, 0x80, 0x5, 0x1, 0x3}, {0x80000001, 0x2, 0x2, 0x6, 0x4, 0x3}, {0xffff, 0x9023, 0xff, 0x0, 0x400, 0x2ae}, {0x3, 0x8, 0x3, 0x6, 0x4, 0x400}, {0xd, 0x7, 0x9, 0x7, 0x9, 0x1}, {0x800, 0x2, 0x9, 0x8, 0x7, 0x7}, {0xe4f, 0x7, 0xfffffffe, 0x9, 0x200, 0x3}, {0x2, 0x897f, 0xd, 0x4, 0x101, 0x6f4}, {0x66, 0x3, 0x4, 0x8, 0xae, 0x9}, {0x8, 0xfffffd5a, 0x3, 0x2, 0x0, 0x8c}], [{0x0, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4ee9163edc092ecd, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x893e69629313f360}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0xe540b2e3bbf30571}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 14.947745401s ago: executing program 1 (id=9062): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x5, 0x3, 0x500, 0xc, 0x4000301, r3}) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x40800) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 14.82444858s ago: executing program 0 (id=9063): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.564637048s ago: executing program 1 (id=9065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) pipe(0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) 13.543676517s ago: executing program 1 (id=9066): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 12.16581502s ago: executing program 4 (id=9067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 12.077517546s ago: executing program 4 (id=9068): socket$inet_sctp(0x2, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.868896812s ago: executing program 4 (id=9069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 9.865596663s ago: executing program 1 (id=9070): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 9.794601451s ago: executing program 3 (id=9071): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}}, 0x0, 0x0, 0x1b, 0x0, "13abcd9d2debb68a5bfc1c64b50a30e0cb34dde0c1121e78614906563b981f8c4600b8b8f4ccd35ddda70f54941e7c6343089a41b19dd068a877fa13dd60be9ce9b50c0a568bce047c3ee863b194c264"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 9.760699601s ago: executing program 2 (id=9072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xed4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xea0, 0x2, [@TCA_MATCHALL_ACT={0xe9c, 0x2, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff, [{0x800, 0x9, 0x80000001, 0x9, 0x4, 0x7}, {0xb8, 0x5, 0x6, 0x6, 0x57, 0xe2}, {0x0, 0x3, 0x8, 0x0, 0x3, 0x5}]}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x3, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x6, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x6, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x400}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x4, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65c, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x5, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x9, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xed4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 9.744493039s ago: executing program 0 (id=9073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x2000001}}}}]}, 0x44}}, 0x20000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 9.53539617s ago: executing program 3 (id=9074): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 9.266613343s ago: executing program 0 (id=9075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 9.238693046s ago: executing program 3 (id=9076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r1, 0x2f}, 0x20) 9.111337594s ago: executing program 4 (id=9077): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 8.883513127s ago: executing program 3 (id=9078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 8.782104131s ago: executing program 4 (id=9079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40003, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 8.603409476s ago: executing program 3 (id=9080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 7.7715749s ago: executing program 1 (id=9081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) 5.230134084s ago: executing program 2 (id=9082): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000090000000100000000000000000c000000000000008f700000ac1e0101000000000000000000000000000004d23c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x20040010, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @mcast1, 0x8}, 0x1c) r5 = socket(0x10, 0x3, 0x0) write$rfkill(r4, &(0x7f00000000c0)={0x6, 0x3, 0x3, 0x0, 0x1}, 0x8) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 2.915828705s ago: executing program 3 (id=9083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.89569984s ago: executing program 0 (id=9084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56543, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x9, 0x9, 0x40}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.722147261s ago: executing program 1 (id=9085): syz_emit_ethernet(0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000080) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x61651995}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6(0xa, 0x2, 0x3a) 0s ago: executing program 4 (id=9086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "32f824b5a8040034", "8b3de2aabceef22f419e59f3000000000400000000020000000000000000ff01", '\x00', '\x00\x00\x00-S\x00'}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000180)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.3474'. [ 216.456686][T13090] block nbd0: not configured, cannot reconfigure [ 217.199646][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 217.225112][ T3328] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.262054][ T3328] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.299634][ T3328] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.321686][ T3328] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.683709][T13158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.979389][T13173] netlink: 'syz.4.3518': attribute type 1 has an invalid length. [ 218.001013][T13173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3518'. [ 218.155975][T13184] netlink: 'syz.3.3522': attribute type 21 has an invalid length. [ 218.258981][T13188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.929130][T13224] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 218.954818][T13224] netlink: 'syz.2.3542': attribute type 11 has an invalid length. [ 218.963441][T13228] openvswitch: netlink: IP tunnel dst address not specified [ 219.014234][T13224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3542'. [ 219.316350][T13245] netlink: 'syz.4.3552': attribute type 1 has an invalid length. [ 219.360122][T13245] netlink: 'syz.4.3552': attribute type 11 has an invalid length. [ 219.389536][T13245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3552'. [ 219.519599][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 219.747183][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 219.848924][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 219.962503][T13268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.130729][T13289] netlink: 'syz.2.3574': attribute type 4 has an invalid length. [ 220.777385][T13324] netlink: 'syz.1.3591': attribute type 2 has an invalid length. [ 220.987275][T13337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3598'. [ 221.257436][T13349] set match dimension is over the limit! [ 221.405958][T13359] openvswitch: netlink: Message has 8 unknown bytes. [ 221.417305][T13359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.749814][T13378] IPv6: sit1: Disabled Multicast RS [ 222.114867][T13397] ieee802154 phy0 wpan0: encryption failed: -90 [ 222.453339][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 222.822595][T13440] openvswitch: netlink: Duplicate or invalid key (type 0). [ 222.830482][T13440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.909657][T13443] netlink: 'syz.2.3650': attribute type 1 has an invalid length. [ 222.970614][T13443] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3650'. [ 222.983783][T13443] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3650'. [ 222.999523][T13443] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3650'. [ 223.146618][T13455] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3657'. [ 224.074875][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3678'. [ 224.580761][T13522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3689'. [ 224.867693][T13539] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.213722][T13547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.340267][T13565] vlan0: entered promiscuous mode [ 225.403128][T13570] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 225.743941][T13589] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 226.030954][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3729'. [ 226.062935][T13603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3729'. [ 226.502195][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3742'. [ 226.514448][T13631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3743'. [ 227.309302][T13676] netlink: 'syz.0.3766': attribute type 3 has an invalid length. [ 227.339779][T13676] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 227.526778][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3772'. [ 227.607538][T13691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.697842][T13698] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.3777'. [ 228.061264][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 228.211067][T13732] netlink: 'syz.2.3794': attribute type 23 has an invalid length. [ 228.227688][T13723] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 228.249777][T13723] bond1 (unregistering): Released all slaves [ 228.340407][T13736] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 228.357020][T13736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3795'. [ 229.763591][T13816] netlink: 'syz.2.3835': attribute type 27 has an invalid length. [ 229.839089][T13819] xt_hashlimit: size too large, truncated to 1048576 [ 230.204975][T13831] bond2: invalid ARP target 0.0.0.0 specified for addition [ 230.239640][T13831] bond2: option arp_ip_target: invalid value (0) [ 230.260139][T13831] bond2 (unregistering): Released all slaves [ 230.299165][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3849'. [ 230.430939][T13850] xt_nfacct: accounting object `syz1' does not exist [ 230.664370][T13862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3857'. [ 230.826892][T13872] x_tables: duplicate entry at hook 2 [ 231.172824][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3871'. [ 231.194294][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3871'. [ 231.230121][T13896] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 231.384664][T13902] netlink: 'syz.4.3877': attribute type 12 has an invalid length. [ 231.989206][T13934] netlink: 'syz.2.3892': attribute type 21 has an invalid length. [ 232.032042][T13934] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3892'. [ 232.081781][T13934] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3892'. [ 232.109021][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3895'. [ 232.279784][T13949] bond0: entered allmulticast mode [ 232.297752][T13949] bond_slave_0: entered allmulticast mode [ 232.323605][T13949] bond_slave_1: entered allmulticast mode [ 232.516728][T13963] netlink: 'syz.3.3906': attribute type 4 has an invalid length. [ 232.543558][T13963] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3906'. [ 232.958707][T13988] xt_TCPMSS: Only works on TCP SYN packets [ 233.342038][T14004] Cannot find set identified by id 3 to match [ 233.497661][T14014] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.532393][T14014] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3931'. [ 233.652032][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3934'. [ 234.028008][T14043] netlink: 'syz.4.3945': attribute type 24 has an invalid length. [ 234.469851][T14069] netlink: 'syz.4.3958': attribute type 21 has an invalid length. [ 234.513449][T14064] bond2: entered promiscuous mode [ 234.519647][T14064] bond2: entered allmulticast mode [ 234.525869][T14064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.533482][T14069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3958'. [ 235.059116][T14100] netlink: 'syz.3.3973': attribute type 11 has an invalid length. [ 235.121514][T14107] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 235.787310][T14132] xt_CT: No such helper "snmp_trap" [ 236.199619][T14165] __nla_validate_parse: 1 callbacks suppressed [ 236.199640][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4005'. [ 236.250263][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4005'. [ 236.307314][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4005'. [ 236.800948][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 236.821166][T14197] netlink: 'syz.1.4019': attribute type 1 has an invalid length. [ 236.830809][T14196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 236.849761][T14197] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4019'. [ 237.004194][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4025'. [ 237.418779][T14231] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4036'. [ 237.457718][T14231] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.483394][T14233] openvswitch: netlink: IP tunnel dst address not specified [ 237.689338][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'. [ 237.939656][T14253] ip6tnl1: entered allmulticast mode [ 238.085253][T14265] xt_hashlimit: invalid interval [ 238.221823][T14273] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4057'. [ 238.301207][T14278] netlink: zone id is out of range [ 238.310800][T14278] netlink: del zone limit has 4 unknown bytes [ 238.501860][T14288] netlink: 'syz.0.4065': attribute type 3 has an invalid length. [ 238.544971][T14288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4065'. [ 238.803842][T14306] sctp: [Deprecated]: syz.3.4074 (pid 14306) Use of int in max_burst socket option. [ 238.803842][T14306] Use struct sctp_assoc_value instead [ 238.821162][T14307] xt_recent: Unsupported userspace flags (000000b1) [ 239.405211][T14342] netlink: 'syz.2.4091': attribute type 21 has an invalid length. [ 239.429673][T14342] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.704572][T14357] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 240.190890][T14388] sctp: [Deprecated]: syz.2.4111 (pid 14388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.190890][T14388] Use struct sctp_sack_info instead [ 240.211632][T14389] xt_l2tp: invalid flags combination: 8 [ 240.355055][T14397] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 240.538905][T14407] sit0: entered promiscuous mode [ 240.562886][T14407] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 241.122777][T14439] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 241.182596][T14441] netlink: 'syz.0.4136': attribute type 2 has an invalid length. [ 241.203901][T14441] netlink: 'syz.0.4136': attribute type 8 has an invalid length. [ 241.230623][T14441] __nla_validate_parse: 3 callbacks suppressed [ 241.230639][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4136'. [ 241.642205][T14463] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 241.834780][T14473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.906391][T14479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4154'. [ 242.407611][T14507] netlink: 'syz.2.4168': attribute type 1 has an invalid length. [ 242.475873][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 242.957169][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.428412][T14565] netlink: 'syz.4.4198': attribute type 2 has an invalid length. [ 243.547320][T14569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.383907][T14607] netlink: 'syz.3.4219': attribute type 8 has an invalid length. [ 244.783132][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4230'. [ 244.957363][T14640] C: entered promiscuous mode [ 244.963413][T14640] tunl0: entered promiscuous mode [ 244.992953][T14640] gre0: entered promiscuous mode [ 245.049140][T14644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4237'. [ 245.067322][T14640] gretap0: entered promiscuous mode [ 245.111296][T14648] netlink: 'syz.2.4239': attribute type 13 has an invalid length. [ 245.172665][T14640] erspan0: entered promiscuous mode [ 245.200789][T14640] ip_vti0: entered promiscuous mode [ 245.228675][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4241'. [ 245.253589][T14648] gretap0: refused to change device tx_queue_len [ 245.282907][T14648] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.178143][T14700] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 247.467664][T14777] Cannot find add_set index 65532 as target [ 247.480246][T14775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.875732][T14798] bridge0: port 3(gretap0) entered disabled state [ 247.948764][T14803] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 247.990717][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.022028][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.689889][T14841] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4329'. [ 249.338556][T14875] lo speed is unknown, defaulting to 1000 [ 249.364019][T14875] lo speed is unknown, defaulting to 1000 [ 249.398982][T14875] lo speed is unknown, defaulting to 1000 [ 249.439939][T14875] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 249.474009][T14875] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 249.524218][T14875] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 249.537901][T14887] syz.4.4350: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.573679][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.4.4350 Not tainted syzkaller #0 PREEMPT(full) [ 249.573706][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.573724][T14887] Call Trace: [ 249.573735][T14887] [ 249.573744][T14887] dump_stack_lvl+0xe8/0x150 [ 249.573770][T14887] warn_alloc+0x249/0x340 [ 249.573799][T14887] ? stack_trace_save+0xa9/0x100 [ 249.573830][T14887] ? __pfx_warn_alloc+0x10/0x10 [ 249.573865][T14887] ? kasan_save_track+0x4f/0x80 [ 249.573890][T14887] ? kasan_save_track+0x3e/0x80 [ 249.573913][T14887] ? __kasan_kmalloc+0x93/0xb0 [ 249.573938][T14887] ? __kmalloc_cache_noprof+0x31c/0x660 [ 249.573961][T14887] ? xskq_create+0x56/0x170 [ 249.573984][T14887] ? xsk_setsockopt+0x54c/0x990 [ 249.574000][T14887] ? do_sock_setsockopt+0x17c/0x1b0 [ 249.574023][T14887] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 249.574046][T14887] ? do_syscall_64+0x15f/0xf80 [ 249.574075][T14887] __vmalloc_node_range_noprof+0x132/0x1750 [ 249.574127][T14887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.574157][T14887] ? __kasan_kmalloc+0x93/0xb0 [ 249.574185][T14887] vmalloc_user_noprof+0xad/0xe0 [ 249.574210][T14887] ? xskq_create+0xbf/0x170 [ 249.574231][T14887] xskq_create+0xbf/0x170 [ 249.574255][T14887] xsk_init_queue+0x8a/0xe0 [ 249.574276][T14887] xsk_setsockopt+0x54c/0x990 [ 249.574296][T14887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.574315][T14887] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.574346][T14887] ? aa_sock_opt_perm+0xff/0x1a0 [ 249.574375][T14887] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 249.574403][T14887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.574423][T14887] do_sock_setsockopt+0x17c/0x1b0 [ 249.574449][T14887] __x64_sys_setsockopt+0x13d/0x1b0 [ 249.574475][T14887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.574503][T14887] do_syscall_64+0x15f/0xf80 [ 249.574528][T14887] ? trace_irq_disable+0x3b/0x140 [ 249.574558][T14887] ? clear_bhb_loop+0x40/0x90 [ 249.574584][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.574602][T14887] RIP: 0033:0x7feaf779cdd9 [ 249.574632][T14887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.574649][T14887] RSP: 002b:00007feaf85e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.574669][T14887] RAX: ffffffffffffffda RBX: 00007feaf7a15fa0 RCX: 00007feaf779cdd9 [ 249.574684][T14887] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 249.574697][T14887] RBP: 00007feaf7832d69 R08: 0000000000000004 R09: 0000000000000000 [ 249.574709][T14887] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.574722][T14887] R13: 00007feaf7a16038 R14: 00007feaf7a15fa0 R15: 00007fff4de611d8 [ 249.574754][T14887] [ 249.575961][T14875] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.612984][T14887] Mem-Info: [ 249.897938][T14875] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 249.906940][T14887] active_anon:6036 inactive_anon:6 isolated_anon:0 [ 249.906940][T14887] active_file:3087 inactive_file:40233 isolated_file:0 [ 249.906940][T14887] unevictable:768 dirty:231 writeback:30 [ 249.906940][T14887] slab_reclaimable:10534 slab_unreclaimable:103169 [ 249.906940][T14887] mapped:29247 shmem:1291 pagetables:1308 [ 249.906940][T14887] sec_pagetables:0 bounce:0 [ 249.906940][T14887] kernel_misc_reclaimable:0 [ 249.906940][T14887] free:1324649 free_pcp:10298 free_cma:0 [ 249.911788][T14894] xfrm2: entered allmulticast mode [ 249.964679][T14887] Node 0 active_anon:24044kB inactive_anon:24kB active_file:12348kB inactive_file:160724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116988kB dirty:624kB writeback:520kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12252kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.009661][T14887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.062955][T14887] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.097891][T14875] lo speed is unknown, defaulting to 1000 [ 250.110206][T14887] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 250.119760][T14887] Node 0 DMA32 free:1342892kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24144kB inactive_anon:24kB active_file:12348kB inactive_file:160724kB unevictable:1536kB writepending:44kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:41408kB local_pcp:19976kB free_cma:0kB [ 250.174360][T14887] lowmem_reserve[]: 0 0 0 0 0 [ 250.176327][T14875] lo speed is unknown, defaulting to 1000 [ 250.184549][T14887] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 250.225058][T14875] lo speed is unknown, defaulting to 1000 [ 250.257029][T14887] lowmem_reserve[]: 0 0 0 0 0 [ 250.282095][T14875] lo speed is unknown, defaulting to 1000 [ 250.304611][T14887] Node 1 Normal free:3940560kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.315649][T14875] lo speed is unknown, defaulting to 1000 [ 250.338365][T14903] netlink: 'syz.0.4359': attribute type 4 has an invalid length. [ 250.366640][T14903] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4359'. [ 250.389691][T14887] lowmem_reserve[]: 0 0 0 0 0 [ 250.409759][T14887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.475260][T14887] Node 0 DMA32: 3758*4kB (UM) 2335*8kB (UME) 969*16kB (UM) 74*32kB (UME) 252*64kB (UM) 433*128kB (UME) 293*256kB (UM) 178*512kB (UME) 117*1024kB (UME) 40*2048kB (UM) 208*4096kB (UM) = 1342976kB [ 250.536267][T14887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.563840][T14913] xt_cluster: node mask cannot exceed total number of nodes [ 250.584197][T14887] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3940560kB [ 250.601701][T14887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.629688][T14887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.640654][T14887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.687884][T14915] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 250.699002][T14887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.725189][T14887] 44607 total pagecache pages [ 250.731116][T14887] 0 pages in swap cache [ 250.735625][T14887] Free swap = 124996kB [ 250.739817][T14887] Total swap = 124996kB [ 250.743976][T14887] 2097051 pages RAM [ 250.754817][T14887] 0 pages HighMem/MovableOnly [ 250.764584][T14887] 427104 pages reserved [ 250.781524][T14887] 0 pages cma reserved [ 251.670258][T14970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.490659][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 252.507956][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4416'. [ 252.522026][T15020] netlink: 'syz.3.4417': attribute type 7 has an invalid length. [ 252.566587][T15020] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4417'. [ 252.590755][T15017] geneve3: entered promiscuous mode [ 252.602438][T15017] geneve3: entered allmulticast mode [ 252.755120][T15031] ip6t_srh: unknown srh invflags 4000 [ 252.926012][T15041] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4428'. [ 253.054987][T15049] netlink: zone id is out of range [ 253.066167][T15048] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4431'. [ 253.084569][T15049] netlink: zone id is out of range [ 253.100366][T15049] netlink: zone id is out of range [ 253.111601][T15049] netlink: zone id is out of range [ 253.119647][T15049] netlink: zone id is out of range [ 253.125371][T15049] netlink: zone id is out of range [ 253.135062][T15049] netlink: zone id is out of range [ 253.146309][T15049] netlink: set zone limit has 4 unknown bytes [ 254.205994][T15112] netlink: 'syz.0.4463': attribute type 39 has an invalid length. [ 254.530044][T15126] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 254.797285][T15137] bond2: option lp_interval: invalid value (0) [ 254.833004][T15137] bond2: option lp_interval: allowed values 1 - 2147483647 [ 254.869422][T15137] bond2 (unregistering): Released all slaves [ 254.996434][T15155] netlink: 'syz.1.4485': attribute type 61 has an invalid length. [ 255.635027][T15188] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 255.681167][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688977][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763711][T15195] netlink: 'syz.4.4503': attribute type 11 has an invalid length. [ 255.771850][T15195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4503'. [ 255.825713][T15184] bond3: option all_slaves_active: invalid value (222) [ 255.870925][T15184] bond3 (unregistering): Released all slaves [ 256.083644][T15207] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4509'. [ 256.118050][T15207] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 256.756410][T15249] netlink: 'syz.0.4525': attribute type 64 has an invalid length. [ 257.038730][T15266] netlink: 'syz.2.4532': attribute type 21 has an invalid length. [ 257.081382][T15266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4532'. [ 257.956018][T15308] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4548'. [ 258.639393][T15345] xt_hashlimit: size too large, truncated to 1048576 [ 258.922090][T15364] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4570'. [ 258.960604][T15364] netlink: 'syz.2.4570': attribute type 1 has an invalid length. [ 258.982766][T15364] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4570'. [ 259.522011][T15389] atomic_op ffff8880297a7198 conn xmit_atomic 0000000000000000 [ 259.916699][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 259.945440][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 260.024655][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4592'. [ 260.189953][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4596'. [ 260.935847][T15467] tipc: Enabling of bearer rejected, media not registered [ 261.066604][T15471] __nla_validate_parse: 1 callbacks suppressed [ 261.066623][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 261.126644][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 261.163409][T15471] netlink: 'syz.3.4619': attribute type 14 has an invalid length. [ 261.195027][T15471] netlink: 'syz.3.4619': attribute type 13 has an invalid length. [ 261.681707][T15498] Bluetooth: MGMT ver 1.23 [ 261.958812][T15503] Zero length message leads to an empty skb [ 263.448483][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4662'. [ 263.852106][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4672'. [ 264.543720][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4689'. [ 264.649078][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4691'. [ 264.837463][T15636] netlink: 'syz.1.4695': attribute type 10 has an invalid length. [ 265.026523][T15644] vlan2: entered allmulticast mode [ 265.043553][T15644] bond0: entered allmulticast mode [ 265.049699][T15644] bond_slave_0: entered allmulticast mode [ 265.062352][T15644] bond_slave_1: entered allmulticast mode [ 265.379673][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 265.616612][T15673] : entered promiscuous mode [ 265.895185][T15688] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4721'. [ 265.928909][T15688] netlink: 'syz.1.4721': attribute type 2 has an invalid length. [ 266.890155][T15735] batadv0: entered promiscuous mode [ 266.915696][T15735] macsec1: entered promiscuous mode [ 266.937494][T15735] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 266.958044][T15735] batadv0: left promiscuous mode [ 267.483168][T15769] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 267.782911][T15777] wireguard0: entered promiscuous mode [ 267.791512][T15777] wireguard0: entered allmulticast mode [ 267.865508][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 267.893113][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 268.278569][T15810] tipc: Started in network mode [ 268.292379][T15810] tipc: Node identity ae66f755e10c, cluster identity 4711 [ 268.324559][T15810] tipc: Enabled bearer , priority 11 [ 268.724806][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4791'. [ 268.752495][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4791'. [ 269.150027][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4800'. [ 269.447168][ T5988] tipc: Node number set to 1332410197 [ 269.624156][T15884] Driver unsupported XDP return value 0 on prog (id 331) dev N/A, expect packet loss! [ 269.749808][T15889] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4815'. [ 269.892494][T15896] net_ratelimit: 1 callbacks suppressed [ 269.892514][T15896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.100211][T15902] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.593625][T15933] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 271.266918][T15968] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4850'. [ 271.809185][T15993] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4860'. [ 271.975180][T15999] netlink: 'syz.1.4863': attribute type 29 has an invalid length. [ 271.978187][T16000] tipc: Enabling of bearer rejected, failed to enable media [ 272.261890][T16011] macsec1: entered promiscuous mode [ 272.280371][T16011] bridge0: entered promiscuous mode [ 272.303132][T16011] macsec1: entered allmulticast mode [ 272.328163][T16011] bridge0: entered allmulticast mode [ 272.601218][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4876'. [ 272.719117][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.294898][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4893'. [ 273.888891][T16105] tipc: Failed to obtain node identity [ 273.908934][T16105] tipc: Enabling of bearer rejected, failed to enable media [ 274.070894][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 274.104606][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 274.730967][T16152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.251897][T16236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4970'. [ 276.833598][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'. [ 278.296742][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5025'. [ 278.322358][T16353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'. [ 278.349887][T16353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5025'. [ 279.777055][T16433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.784394][T16433] IPv6: NLM_F_CREATE should be set when creating new route [ 279.791674][T16433] IPv6: NLM_F_CREATE should be set when creating new route [ 279.798955][T16433] IPv6: NLM_F_CREATE should be set when creating new route [ 279.840337][T16433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.095422][T16446] netlink: 'syz.2.5070': attribute type 1 has an invalid length. [ 280.856809][T16487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5090'. [ 281.099104][T16501] netlink: 'syz.2.5097': attribute type 1 has an invalid length. [ 281.124863][T16501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.132179][T16501] IPv6: NLM_F_CREATE should be set when creating new route [ 281.205842][T16504] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 281.215181][ T5920] IPVS: starting estimator thread 0... [ 281.324217][T16505] IPVS: using max 32 ests per chain, 76800 per kthread [ 281.455082][T16517] netlink: 'syz.0.5104': attribute type 1 has an invalid length. [ 281.493568][T16517] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5104'. [ 281.524224][T16517] netlink: 'syz.0.5104': attribute type 1 has an invalid length. [ 281.533640][T16517] netlink: 'syz.0.5104': attribute type 8 has an invalid length. [ 281.556777][T16517] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5104'. [ 282.217245][T16552] wireguard: wg0: Could not create IPv4 socket [ 282.430069][T16564] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5128'. [ 282.758322][T16580] netlink: 'syz.0.5136': attribute type 1 has an invalid length. [ 282.805151][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'. [ 282.834923][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5136'. [ 282.860711][T16580] netlink: 'syz.0.5136': attribute type 2 has an invalid length. [ 282.870749][T16580] netlink: 'syz.0.5136': attribute type 2 has an invalid length. [ 282.881392][T16580] netlink: 'syz.0.5136': attribute type 2 has an invalid length. [ 283.350193][T16612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5151'. [ 283.454856][T16618] xt_hashlimit: size too large, truncated to 1048576 [ 284.060753][T16644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5166'. [ 284.574625][T16668] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5178'. [ 284.594617][T16668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5178'. [ 285.321112][T16704] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5197'. [ 286.205169][T16758] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 286.209015][T16759] xt_policy: too many policy elements [ 286.231448][T16758] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5220'. [ 286.639990][T16778] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5230'. [ 286.654628][T16781] netlink: 'syz.4.5233': attribute type 2 has an invalid length. [ 287.408640][T16821] netlink: 'syz.0.5253': attribute type 1 has an invalid length. [ 287.539317][T16827] netlink: 'syz.2.5255': attribute type 62 has an invalid length. [ 287.545818][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5256'. [ 287.746190][T16836] netlink: 'syz.2.5260': attribute type 3 has an invalid length. [ 288.092774][T16849] "syz.2.5267" (16849) uses obsolete ecb(arc4) skcipher [ 288.103279][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 289.198566][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5294'. [ 289.862272][ T5920] IPVS: starting estimator thread 0... [ 289.964739][T16947] IPVS: using max 28 ests per chain, 67200 per kthread [ 290.092805][T16882] lo speed is unknown, defaulting to 1000 [ 290.148680][T16957] netlink: 'syz.2.5316': attribute type 2 has an invalid length. [ 290.519463][T16975] netlink: 'syz.3.5324': attribute type 4 has an invalid length. [ 290.547140][T16975] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5324'. [ 291.080191][T17002] xt_limit: Overflow, try lower: 271964/0 [ 291.515717][T17018] netlink: 'syz.0.5345': attribute type 3 has an invalid length. [ 291.546508][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5346'. [ 291.608752][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.641041][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.650366][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.867337][ T5988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.084390][ T5988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.221041][T17052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5362'. [ 292.508101][T17066] vlan0: entered promiscuous mode [ 292.527700][T17066] bridge0: entered promiscuous mode [ 293.210398][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5389'. [ 293.451401][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5396'. [ 293.474705][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5396'. [ 293.565943][T17125] xt_hashlimit: size too large, truncated to 1048576 [ 293.867404][T17142] netlink: 'syz.2.5405': attribute type 1 has an invalid length. [ 294.073489][T17152] netlink: 'syz.4.5411': attribute type 1 has an invalid length. [ 294.107047][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5411'. [ 294.131236][T17152] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5411'. [ 294.187109][T17152] netlink: 'syz.4.5411': attribute type 1 has an invalid length. [ 294.200443][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5413'. [ 295.354423][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.682996][T17243] netlink: 'syz.0.5452': attribute type 1 has an invalid length. [ 295.708323][T17243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.858876][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5456'. [ 296.649826][T17291] netlink: 'syz.0.5475': attribute type 2 has an invalid length. [ 296.817297][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5479'. [ 296.847507][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5479'. [ 297.123854][T17313] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5486'. [ 297.310399][T17326] netlink: 'syz.4.5493': attribute type 2 has an invalid length. [ 297.697038][T17348] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 298.278729][T17379] netlink: 'syz.0.5518': attribute type 29 has an invalid length. [ 298.314994][T17379] netlink: 'syz.0.5518': attribute type 29 has an invalid length. [ 299.087139][T17420] sit2: entered promiscuous mode [ 299.105664][T17420] sit2: entered allmulticast mode [ 299.981406][T17465] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5560'. [ 299.991812][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'. [ 300.178256][T17474] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5564'. [ 300.204527][T17474] netlink: 'syz.4.5564': attribute type 9 has an invalid length. [ 300.471788][T17488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5570'. [ 300.538819][T17492] Bluetooth: MGMT ver 1.23 [ 301.268981][T17535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.802406][T17560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.098312][T17573] netlink: 'syz.2.5611': attribute type 4 has an invalid length. [ 302.123536][T17573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5611'. [ 302.738147][T17611] netlink: 'syz.2.5629': attribute type 1 has an invalid length. [ 302.774511][T17611] netlink: 'syz.2.5629': attribute type 1 has an invalid length. [ 303.034316][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.103930][T17673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5658'. [ 304.650116][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5671'. [ 304.798649][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5675'. [ 305.622490][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5696'. [ 305.652617][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5696'. [ 305.707216][ T141] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 305.735227][ T141] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.759395][ T141] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.798329][ T141] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.332115][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5734'. [ 308.385707][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5762'. [ 308.448693][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 308.463572][T17894] netlink: 'syz.0.5766': attribute type 32 has an invalid length. [ 308.488572][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'. [ 308.659065][T17894] bond3: option coupled_control: invalid value (192) [ 308.678910][T17894] bond3 (unregistering): Released all slaves [ 308.846389][T17910] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 309.350141][T17937] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5786'. [ 309.369718][T17937] nbd: illegal input index -8454144 [ 310.367776][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5809'. [ 310.741413][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5819'. [ 310.817583][T18004] macsec1: entered promiscuous mode [ 310.841333][T18004] bridge0: entered promiscuous mode [ 310.866218][T18004] macsec1: entered allmulticast mode [ 310.867313][T18013] netlink: 'syz.4.5822': attribute type 3 has an invalid length. [ 310.881613][T18004] bridge0: entered allmulticast mode [ 310.894800][T18004] bridge0: port 3(macsec1) entered blocking state [ 310.923509][T18004] bridge0: port 3(macsec1) entered disabled state [ 310.979673][T18004] bridge0: left allmulticast mode [ 311.056421][ T9] bridge0: left promiscuous mode [ 311.179757][T18024] tipc: Started in network mode [ 311.202293][T18024] tipc: Node identity e0000001, cluster identity 4711 [ 311.236650][T18024] tipc: Enabling of bearer rejected, failed to enable media [ 312.233592][T18075] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5853'. [ 312.800461][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5868'. [ 312.815607][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5868'. [ 313.273860][T18133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5880'. [ 313.857660][T18164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.375293][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5910'. [ 314.489693][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5912'. [ 314.509523][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5912'. [ 314.745380][T18206] macsec1: entered promiscuous mode [ 315.665622][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5938'. [ 316.109328][T18273] nbd: must specify a device to reconfigure [ 316.440511][T18287] netlink: 'syz.4.5955': attribute type 58 has an invalid length. [ 316.465525][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5955'. [ 316.715513][T18295] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5959'. [ 317.030856][T18311] bridge0: port 3(ipvlan2) entered blocking state [ 317.055275][T18311] bridge0: port 3(ipvlan2) entered disabled state [ 317.063327][T18311] ipvlan2: entered allmulticast mode [ 317.070313][T18311] bridge0: entered allmulticast mode [ 317.083830][T18311] ipvlan2: left allmulticast mode [ 317.095602][T18311] bridge0: left allmulticast mode [ 317.124526][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131128][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.139379][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 318.404333][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.033696][T18402] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6011'. [ 319.143423][T18405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6012'. [ 319.493291][T18425] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6022'. [ 319.509651][T18425] netlink: 'syz.1.6022': attribute type 2 has an invalid length. [ 319.862912][T18444] tipc: Enabling of bearer rejected, failed to enable media [ 319.893490][T18446] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6033'. [ 320.438540][T18472] xt_HMARK: spi-set and port-set can't be combined [ 321.341522][T18519] veth1_macvtap: left promiscuous mode [ 321.371965][T18519] macsec0: entered promiscuous mode [ 321.416620][T18519] macsec0: entered allmulticast mode [ 321.429193][T18522] veth1_macvtap: entered promiscuous mode [ 321.452265][T18522] veth1_macvtap: entered allmulticast mode [ 321.480887][T18522] macsec0: left promiscuous mode [ 321.486790][T18522] macsec0: left allmulticast mode [ 321.501353][T18522] veth1_macvtap: left allmulticast mode [ 321.520885][T18530] Bluetooth: MGMT ver 1.23 [ 321.909818][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 321.943424][T18551] smc: net device team0 applied user defined pnetid SYZ2 [ 322.107596][T18559] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 322.158325][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6087'. [ 322.450024][T18575] tipc: Enabling of bearer rejected, media not registered [ 322.753182][T18588] netlink: 'syz.4.6101': attribute type 32 has an invalid length. [ 322.791146][T18588] netlink: 776 bytes leftover after parsing attributes in process `syz.4.6101'. [ 323.049796][T18598] netlink: 'syz.4.6105': attribute type 1 has an invalid length. [ 323.681593][T18627] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6120'. [ 323.769985][T18635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6121'. [ 324.069568][T18650] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6128'. [ 324.445777][T18668] netlink: 'syz.2.6138': attribute type 12 has an invalid length. [ 324.485599][T18668] netlink: 'syz.2.6138': attribute type 29 has an invalid length. [ 324.507327][T18668] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6138'. [ 324.540768][T18668] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6138'. [ 324.840410][T18688] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6148'. [ 325.010791][ T5988] IPVS: starting estimator thread 0... [ 325.114476][T18697] IPVS: using max 30 ests per chain, 72000 per kthread [ 325.381709][T18718] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6163'. [ 325.472964][T18721] vlan1: entered promiscuous mode [ 325.501808][T18721] geneve1: entered promiscuous mode [ 325.530356][T18721] vlan1: entered allmulticast mode [ 325.562051][T18721] geneve1: entered allmulticast mode [ 325.768615][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6171'. [ 327.773857][T18838] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6219'. [ 328.273678][T18858] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6230'. [ 328.519985][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6235'. [ 329.480999][T18921] netlink: 'syz.1.6260': attribute type 2 has an invalid length. [ 329.562532][T18927] openvswitch: netlink: Missing valid actions attribute. [ 329.579146][T18927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.842599][T18942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.513636][T18975] netlink: 'syz.4.6287': attribute type 13 has an invalid length. [ 330.527216][T18978] netlink: 'syz.0.6288': attribute type 58 has an invalid length. [ 330.536341][T18965] syz.3.6282 (18965) used greatest stack depth: 17632 bytes left [ 330.545452][T18975] veth1_macvtap: left promiscuous mode [ 330.563907][T18975] macsec0: entered allmulticast mode [ 330.573864][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6288'. [ 330.927536][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6297'. [ 330.950518][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6297'. [ 331.359291][T19020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6309'. [ 331.439128][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6310'. [ 331.623006][T19034] netlink: 'syz.2.6317': attribute type 142 has an invalid length. [ 332.096699][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6329'. [ 333.330263][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6360'. [ 333.397691][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6360'. [ 333.436097][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6360'. [ 333.905292][T19161] veth0: entered promiscuous mode [ 333.920435][T19161] veth0: left promiscuous mode [ 333.999011][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6379'. [ 334.530179][T19193] team0: Port device gtp0 added [ 334.949654][T19185] nbd1: detected capacity change from 0 to 63 [ 334.998373][ T5842] block nbd1: Receive control failed (result -32) [ 334.998373][ T5837] block nbd1: Receive control failed (result -32) [ 335.047163][ T5615] block nbd1: Dead connection, failed to find a fallback [ 335.097086][ T5615] block nbd1: shutting down sockets [ 335.129142][ T5615] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.187583][ T5615] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.218191][ T5615] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.250492][ T5615] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.271904][ T5615] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.292994][ T5615] Buffer I/O error on dev nbd1, logical block 2, async page read [ 335.326508][ T5615] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.366137][ T5615] Buffer I/O error on dev nbd1, logical block 3, async page read [ 335.388921][ T5615] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.398729][ T5615] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.407516][ T5615] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.425172][ T5615] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.439338][ T5615] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.455990][ T5615] Buffer I/O error on dev nbd1, logical block 2, async page read [ 335.488447][ T5615] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.517588][ T5615] Buffer I/O error on dev nbd1, logical block 3, async page read [ 335.531006][ T5615] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.578480][ T5615] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.605748][ T5615] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.627996][T19234] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6410'. [ 335.642482][ T5615] Buffer I/O error on dev nbd1, logical block 1, async page read [ 335.690448][ T5615] ldm_validate_partition_table(): Disk read failed. [ 335.722130][ T5615] Dev nbd1: unable to read RDB block 0 [ 335.757959][ T5615] nbd1: unable to read partition table [ 335.767168][T19237] netlink: 71 bytes leftover after parsing attributes in process `syz.1.6411'. [ 335.791943][ T5615] ldm_validate_partition_table(): Disk read failed. [ 335.806203][ T5615] Dev nbd1: unable to read RDB block 0 [ 335.813845][ T5615] nbd1: unable to read partition table [ 336.370763][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 336.391746][T19266] netlink: 'syz.1.6425': attribute type 83 has an invalid length. [ 336.597481][T19268] tap0: tun_chr_ioctl cmd 2148553947 [ 337.167113][T19297] bond0: entered promiscuous mode [ 337.198179][T19297] batadv0: entered promiscuous mode [ 337.213240][T19297] debugfs: 'hsr0' already exists in 'hsr' [ 337.220696][T19297] Cannot create hsr debugfs directory [ 337.240336][T19297] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 337.263970][T19297] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 337.296155][T19297] bond0: left promiscuous mode [ 337.304827][T19297] batadv0: left promiscuous mode [ 337.899447][T19336] netlink: 'syz.1.6457': attribute type 4 has an invalid length. [ 337.925108][T19336] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6457'. [ 337.952564][T19336] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6457'. [ 338.101035][T19348] netlink: 'syz.4.6465': attribute type 4 has an invalid length. [ 338.319545][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 338.483738][T19363] bond1 (unregistering): Released all slaves [ 338.716881][T19376] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 338.871176][T19386] tipc: New replicast peer: 255.255.255.255 [ 338.925439][T19386] tipc: Enabled bearer , priority 10 [ 339.122795][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6487'. [ 339.217412][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6490'. [ 339.494720][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'. [ 339.562426][T19421] netlink: 'syz.0.6497': attribute type 30 has an invalid length. [ 339.596754][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6497'. [ 340.055040][T19443] TCP: TCP_TX_DELAY enabled [ 340.420802][T19454] netlink: 'syz.0.6512': attribute type 83 has an invalid length. [ 340.542407][T19457] sctp: [Deprecated]: syz.2.6514 (pid 19457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.542407][T19457] Use struct sctp_sack_info instead [ 341.083446][T19490] netlink: 'syz.0.6530': attribute type 21 has an invalid length. [ 341.128682][T19490] __nla_validate_parse: 1 callbacks suppressed [ 341.128698][T19490] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6530'. [ 341.135164][T19494] netlink: 'syz.0.6530': attribute type 21 has an invalid length. [ 341.163485][T19490] netlink: 'syz.0.6530': attribute type 4 has an invalid length. [ 341.179385][T19490] netlink: 'syz.0.6530': attribute type 5 has an invalid length. [ 341.187031][T19494] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6530'. [ 341.223304][T19490] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6530'. [ 341.253293][T19494] netlink: 'syz.0.6530': attribute type 4 has an invalid length. [ 341.292407][T19494] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6530'. [ 341.486039][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6537'. [ 341.699573][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 341.773548][T19518] bond0: entered promiscuous mode [ 341.790629][T19518] bond_slave_0: entered promiscuous mode [ 341.810090][T19518] bond_slave_1: entered promiscuous mode [ 341.832442][T19518] bond0: left promiscuous mode [ 341.843638][T19518] bond_slave_0: left promiscuous mode [ 341.860958][T19518] bond_slave_1: left promiscuous mode [ 342.401705][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6559'. [ 342.776533][T19573] validate_nla: 1 callbacks suppressed [ 342.776552][T19573] netlink: 'syz.4.6568': attribute type 1 has an invalid length. [ 342.824219][T19573] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6568'. [ 342.858755][T19573] netlink: 'syz.4.6568': attribute type 1 has an invalid length. [ 342.882669][T19573] netlink: 'syz.4.6568': attribute type 8 has an invalid length. [ 342.908146][T19573] netlink: 582 bytes leftover after parsing attributes in process `syz.4.6568'. [ 343.267773][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6579'. [ 346.131796][T19752] netlink: 'syz.2.6652': attribute type 3 has an invalid length. [ 346.164305][T19752] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 346.194319][T19752] __nla_validate_parse: 5 callbacks suppressed [ 346.194340][T19752] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6652'. [ 346.217704][T19752] NCSI netlink: No device for ifindex 813332851 [ 347.212692][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6679'. [ 347.257398][T19809] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6679'. [ 347.276847][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6680'. [ 347.433909][T19819] block nbd2: Unsupported socket: should be TCP or UNIX. [ 347.868673][T19845] netlink: 'syz.3.6694': attribute type 3 has an invalid length. [ 348.024233][T19832] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 348.042112][T19854] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6698'. [ 348.078671][T19854] netlink: 'syz.1.6698': attribute type 1 has an invalid length. [ 348.547392][T19875] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6707'. [ 348.556752][T19877] Bluetooth: hci1: too big key_count value 32778 [ 348.931489][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6717'. [ 349.114468][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.215540][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6732'. [ 350.722133][T19960] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6748'. [ 350.941181][T19971] sctp: [Deprecated]: syz.2.6753 (pid 19971) Use of int in maxseg socket option. [ 350.941181][T19971] Use struct sctp_assoc_value instead [ 351.136610][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6759'. [ 351.373874][T19997] netlink: 'syz.1.6764': attribute type 83 has an invalid length. [ 351.549008][T20004] blkio.reset_stats is deprecated [ 351.629615][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6769'. [ 351.661040][T20011] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6770'. [ 352.020110][T20032] netlink: 'syz.2.6781': attribute type 33 has an invalid length. [ 352.152342][T20032] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 352.203435][T20032] bond3 (unregistering): Released all slaves [ 352.386219][T20047] tipc: Started in network mode [ 352.393481][T20047] tipc: Node identity ac14140f, cluster identity 4711 [ 352.402359][T20047] tipc: New replicast peer: 172.20.20.187 [ 352.411050][T20047] tipc: Enabled bearer , priority 10 [ 352.626181][T20060] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6795'. [ 353.555553][ T6037] tipc: Node number set to 2886997007 [ 353.740329][T20119] netlink: 'syz.4.6822': attribute type 8 has an invalid length. [ 353.766551][T20119] sch_fq: defrate 0 ignored. [ 353.939465][T20127] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6826'. [ 354.473667][T20158] netlink: 'syz.3.6840': attribute type 10 has an invalid length. [ 354.561367][T20158] team0: Port device dummy0 added [ 354.772446][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6847'. [ 355.963616][T20217] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 356.202724][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6877'. [ 356.502727][T20246] netlink: 'syz.2.6885': attribute type 1 has an invalid length. [ 356.529311][T20246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6885'. [ 356.554842][T20246] netlink: 'syz.2.6885': attribute type 1 has an invalid length. [ 356.570458][T20246] netlink: 'syz.2.6885': attribute type 8 has an invalid length. [ 356.584325][T20246] netlink: 582 bytes leftover after parsing attributes in process `syz.2.6885'. [ 356.628194][T20246] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6885'. [ 356.798926][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 356.881452][T20264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6892'. [ 357.436464][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 357.499503][T20288] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 357.528925][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6905'. [ 357.570210][T20290] netlink: 'syz.3.6905': attribute type 1 has an invalid length. [ 357.590924][T20290] netlink: 'syz.3.6905': attribute type 2 has an invalid length. [ 358.232989][T20320] netlink: 'syz.2.6918': attribute type 21 has an invalid length. [ 358.253043][T20320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6918'. [ 358.467695][ T29] audit: type=1804 audit(1777716831.074:2): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6926" name="/newroot/1396/cgroup.controllers" dev="tmpfs" ino=7013 res=1 errno=0 [ 358.548467][ T29] audit: type=1800 audit(1777716831.104:3): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6926" name="cgroup.controllers" dev="tmpfs" ino=7013 res=0 errno=0 [ 358.620824][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6928'. [ 358.746124][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'. [ 358.859228][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6934'. [ 360.659791][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6975'. [ 361.456409][T20481] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6995'. [ 362.472957][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7016'. [ 362.513983][T20525] block nbd2: Unsupported socket: should be TCP or UNIX. [ 363.391936][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 363.413034][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 363.436593][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 364.478645][T20601] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 364.550713][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7051'. [ 364.560395][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7051'. [ 364.588637][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 364.616970][T20606] xfrm1: entered promiscuous mode [ 364.622224][T20606] xfrm1: entered allmulticast mode [ 364.630293][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 365.149221][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7064'. [ 366.951119][T20727] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7107'. [ 367.620686][T20763] __nla_validate_parse: 1 callbacks suppressed [ 367.620708][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7124'. [ 367.671540][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7124'. [ 368.132832][T20790] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7136'. [ 368.698891][T20813] veth0: entered promiscuous mode [ 368.709160][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7148'. [ 368.728908][T20813] veth0: left promiscuous mode [ 368.776822][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7149'. [ 369.361957][T20848] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7163'. [ 369.534821][T20861] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7169'. [ 369.885578][T20878] veth1_macvtap: left promiscuous mode [ 370.405436][T20904] netem: change failed [ 370.485093][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.496270][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.511439][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.531027][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.544038][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.553264][T20912] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7191'. [ 370.569717][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.578623][T20912] openvswitch: netlink: Message has 5 unknown bytes. [ 370.587145][T20906] netlink: 'syz.1.7192': attribute type 29 has an invalid length. [ 370.777764][T20920] netlink: 'syz.1.7197': attribute type 1 has an invalid length. [ 370.804703][T20920] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7197'. [ 370.841380][T20920] netlink: 'syz.1.7197': attribute type 1 has an invalid length. [ 370.864031][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7197'. [ 371.115314][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5c3400: rx timeout, send abort [ 371.625788][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5c3400: abort rx timeout. Force session deactivation [ 371.739799][T20967] xt_hashlimit: size too large, truncated to 1048576 [ 371.892483][T20974] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.001771][T20974] bridge_slave_0 (unregistering): left allmulticast mode [ 372.032499][T20974] bridge_slave_0 (unregistering): left promiscuous mode [ 372.073085][T20974] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.289709][T21047] __nla_validate_parse: 1 callbacks suppressed [ 373.289730][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7253'. [ 373.814755][ T5842] block nbd2: Receive control failed (result -32) [ 373.936697][T21067] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7264'. [ 374.015739][T21071] netlink: 'syz.4.7266': attribute type 1 has an invalid length. [ 374.046972][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7266'. [ 374.567342][T21091] tipc: Started in network mode [ 374.586452][T21091] tipc: Node identity ac14140f, cluster identity 4711 [ 374.612115][T21091] tipc: New replicast peer: 172.20.20.187 [ 374.640440][T21091] tipc: Enabled bearer , priority 10 [ 374.908370][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7282'. [ 375.755052][ T5988] tipc: Node number set to 2886997007 [ 376.859760][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7331'. [ 376.918800][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7331'. [ 377.026014][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7335'. [ 377.119539][T21222] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7339'. [ 377.167895][T21223] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7337'. [ 378.135121][T21275] veth0_to_bridge: entered promiscuous mode [ 378.156240][T21274] veth0_to_bridge: left promiscuous mode [ 378.195774][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7361'. [ 378.248562][T21279] erspan0: entered promiscuous mode [ 378.555794][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568059][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.882479][T21313] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7372'. [ 378.903454][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7373'. [ 378.925656][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7373'. [ 378.979735][T21315] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7373'. [ 379.015849][T21315] veth1_to_bridge: entered allmulticast mode [ 379.040573][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7373'. [ 379.063831][T21315] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7373'. [ 379.080909][ T5287] veth0_macvtap: left promiscuous mode [ 379.589582][T21347] netlink: 54 bytes leftover after parsing attributes in process `syz.3.7386'. [ 379.636818][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7386'. [ 379.828117][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7391'. [ 380.095760][T21376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7397'. [ 381.419746][T21442] validate_nla: 3 callbacks suppressed [ 381.419768][T21442] netlink: 'syz.3.7421': attribute type 8 has an invalid length. [ 383.131827][T21522] netlink: 'syz.1.7461': attribute type 2 has an invalid length. [ 383.288349][T21532] sctp: [Deprecated]: syz.2.7466 (pid 21532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.288349][T21532] Use struct sctp_sack_info instead [ 384.763338][T21602] __nla_validate_parse: 10 callbacks suppressed [ 384.763357][T21602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7494'. [ 384.789521][T21602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7494'. [ 384.829061][T21602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7494'. [ 385.374291][T21633] netlink: 'syz.1.7509': attribute type 1 has an invalid length. [ 385.415013][T21633] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7509'. [ 385.439254][T21633] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7509'. [ 385.448574][T21633] netlink: 'syz.1.7509': attribute type 1 has an invalid length. [ 385.472428][T21633] netlink: 634 bytes leftover after parsing attributes in process `syz.1.7509'. [ 385.538762][T21637] netlink: 'syz.2.7510': attribute type 11 has an invalid length. [ 386.187054][T21670] macvtap1: entered promiscuous mode [ 386.203724][T21670] macvtap1: entered allmulticast mode [ 386.229284][T21670] veth1_vlan: entered allmulticast mode [ 386.247260][T21680] netlink: 'syz.3.7527': attribute type 1 has an invalid length. [ 386.273279][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7527'. [ 386.326940][T21676] macvtap2: entered promiscuous mode [ 386.342842][T21676] macvtap2: entered allmulticast mode [ 386.525049][T21689] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7532'. [ 387.217836][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7543'. [ 387.667625][T21736] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.7553'. [ 388.874501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.968292][ T29] audit: type=1800 audit(1777716861.574:4): pid=21807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7585" name="memory.events" dev="tmpfs" ino=7383 res=0 errno=0 [ 389.307752][T21827] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 389.552394][T21839] bond0: ARP target 8.4.0.0 is already present [ 389.576945][T21839] bond0: option arp_ip_target: invalid value (1032) [ 389.591049][T21837] syzkaller1: entered promiscuous mode [ 389.609149][T21837] syzkaller1: entered allmulticast mode [ 389.876493][T21855] __nla_validate_parse: 2 callbacks suppressed [ 389.876526][T21855] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7606'. [ 389.914217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.196400][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7612'. [ 390.247333][T21868] veth0_macvtap: left promiscuous mode [ 390.381943][T21883] netlink: 'syz.2.7619': attribute type 9 has an invalid length. [ 390.409916][T21883] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7619'. [ 390.590726][T21891] netlink: 'syz.0.7623': attribute type 17 has an invalid length. [ 390.612410][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7623'. [ 390.648345][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7623'. [ 390.954513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.180926][T21922] netem: change failed [ 391.556262][T21940] syzkaller1: entered promiscuous mode [ 391.567448][T21940] syzkaller1: entered allmulticast mode [ 391.994194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.169627][T21970] geneve2: entered promiscuous mode [ 392.187560][ T3328] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 54243 - 0 [ 392.202958][ T3328] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 54243 - 0 [ 392.226184][ T3328] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 54243 - 0 [ 392.262858][ T3328] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 54243 - 0 [ 392.732567][T21998] syzkaller1: entered promiscuous mode [ 392.746953][T21998] syzkaller1: entered allmulticast mode [ 393.034224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.056479][T22011] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.548766][T22037] batadv_slave_1: entered promiscuous mode [ 393.558223][T22034] batadv_slave_1: left promiscuous mode [ 393.931226][T22058] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.7687'. [ 394.074429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.496251][ T24] lo speed is unknown, defaulting to 1000 [ 394.648678][T22092] syzkaller1: entered promiscuous mode [ 394.678943][T22092] syzkaller1: entered allmulticast mode [ 394.859891][T22102] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7701'. [ 395.114195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.195892][T22120] sctp: [Deprecated]: syz.4.7707 (pid 22120) Use of int in max_burst socket option deprecated. [ 395.195892][T22120] Use struct sctp_assoc_value instead [ 395.406564][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7711'. [ 395.479641][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7715'. [ 395.514333][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7715'. [ 395.701620][T22144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7719'. [ 395.935758][T22155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7724'. [ 395.975054][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7724'. [ 396.102798][T22161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 396.135462][T22169] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7731'. [ 396.156147][T22161] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 396.171706][T22161] gretap2: entered promiscuous mode [ 396.188202][T22161] gretap2: entered allmulticast mode [ 396.591075][T22187] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.7739'. [ 396.750659][T22196] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7743'. [ 397.951482][T22261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7773'. [ 398.195190][T22263] nbd: device at index 64 is going down [ 398.480893][ T5752] udevd[5752]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 398.572396][ T5615] udevd[5615]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 398.673664][T22296] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.794476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.980700][T22314] syzkaller1: entered promiscuous mode [ 399.002892][T22314] syzkaller1: entered allmulticast mode [ 399.663970][T22352] bridge_slave_0: default FDB implementation only supports local addresses [ 399.834245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.874473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.351734][T22434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 401.839642][T22458] __nla_validate_parse: 4 callbacks suppressed [ 401.839662][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 401.915536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.473336][T22488] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7874'. [ 402.490090][T22488] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7874'. [ 402.841445][T22513] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7886'. [ 402.954178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.349341][T22539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7897'. [ 403.995612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.034182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.331218][T22619] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 405.506992][T22627] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 406.011073][T22651] syzkaller1: entered promiscuous mode [ 406.043386][T22651] syzkaller1: entered allmulticast mode [ 406.074233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.171354][T22664] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7950'. [ 406.209714][T22662] netem: change failed [ 406.354895][T22671] veth1_macvtap: entered allmulticast mode [ 406.375133][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7955'. [ 406.547890][T22671] veth1_macvtap (unregistering): left allmulticast mode [ 407.200834][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7975'. [ 407.248763][T22713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.293443][T22713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.842745][T22747] netlink: 'syz.1.7988': attribute type 29 has an invalid length. [ 407.880483][T22747] netlink: 'syz.1.7988': attribute type 29 has an invalid length. [ 407.901452][T22747] netlink: 264 bytes leftover after parsing attributes in process `syz.1.7988'. [ 407.971702][T22753] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7992'. [ 408.013225][T22755] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7991'. [ 408.218458][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7995'. [ 408.560969][T22780] syzkaller1: entered promiscuous mode [ 408.573620][T22780] syzkaller1: entered allmulticast mode [ 409.066115][T22798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8011'. [ 409.101562][T22798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8011'. [ 409.129383][T22798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8011'. [ 409.145208][T22798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8011'. [ 409.243383][T22806] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.8015'. [ 409.274363][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.284693][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.314294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.155920][T22862] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 411.170046][T22862] syzkaller1: Refused to change device type [ 411.201249][T22865] IPVS: Scheduler module ip_vs_sip not found [ 411.364335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.543762][T22874] netlink: 'syz.2.8047': attribute type 21 has an invalid length. [ 411.635845][T22874] netlink: 'syz.2.8047': attribute type 21 has an invalid length. [ 411.842506][T22882] A link change request failed with some changes committed already. Interface .`¹ may have been left with an inconsistent configuration, please check. [ 412.163468][T22894] netlink: 'syz.0.8048': attribute type 1 has an invalid length. [ 412.397180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.982835][T22924] netlink: 'syz.0.8067': attribute type 9 has an invalid length. [ 413.025721][T22924] __nla_validate_parse: 3 callbacks suppressed [ 413.025754][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8067'. [ 413.062039][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.071444][T22924] netlink: 'syz.0.8067': attribute type 9 has an invalid length. [ 413.080168][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.101364][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8067'. [ 413.110434][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.123252][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.434295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.541440][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8075'. [ 413.551350][T22942] netlink: 'syz.4.8075': attribute type 7 has an invalid length. [ 413.566712][T22942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8075'. [ 413.619303][T22942] erspan0: entered promiscuous mode [ 413.666262][T22942] erspan0: left promiscuous mode [ 413.731405][T22946] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8077'. [ 413.748534][T22946] netlink: Conntrack attr has 4 unknown bytes [ 413.784945][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8078'. [ 414.046773][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8082'. [ 414.087819][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8082'. [ 414.119993][T22957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 414.150959][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8082'. [ 414.327867][ T29] audit: type=1800 audit(1777716886.934:5): pid=22964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8086" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=8277 res=0 errno=0 [ 414.379032][T22965] netlink: 'syz.4.8085': attribute type 7 has an invalid length. [ 414.423624][T22965] netlink: 'syz.4.8085': attribute type 8 has an invalid length. [ 414.484368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.559969][T22971] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 415.063544][T22992] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.514761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.587178][T23010] syzkaller1: entered promiscuous mode [ 415.609373][T23010] syzkaller1: entered allmulticast mode [ 416.080594][T23027] xt_hashlimit: size too large, truncated to 1048576 [ 416.556349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.149828][T23059] netlink: 'syz.3.8123': attribute type 7 has an invalid length. [ 417.269804][T23059] netlink: 'syz.3.8123': attribute type 7 has an invalid length. [ 417.277904][ T1023] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.303508][ T1023] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.336828][ T1023] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.367066][ T1023] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.604270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.681984][T23074] netlink: 'syz.0.8130': attribute type 1 has an invalid length. [ 417.780193][T23074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.340193][T23106] __nla_validate_parse: 12 callbacks suppressed [ 418.340213][T23106] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8143'. [ 418.396347][T23106] netlink: Unknown conntrack attr (type=2304, max=9) [ 418.548263][T23110] syzkaller1: entered promiscuous mode [ 418.560129][T23110] syzkaller1: entered allmulticast mode [ 418.634693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.470746][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8159'. [ 419.674254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.868315][T23149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.905982][T23152] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.8164'. [ 419.966416][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8166'. [ 420.002714][T23154] netem: invalid attributes len -5 [ 420.012649][T23154] netem: change failed [ 420.119858][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8169'. [ 420.724328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.829365][T23178] vlan2: entered allmulticast mode [ 420.835390][T23178] bond0: entered allmulticast mode [ 420.851715][T23180] syzkaller1: entered promiscuous mode [ 420.857799][T23178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8175'. [ 420.867166][T23180] syzkaller1: entered allmulticast mode [ 420.885910][T23178] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.903355][T23178] .`¹ (unregistering): Released all slaves [ 421.001019][ T6037] syz1: Port: 1 Link DOWN [ 421.756257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.849563][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8191'. [ 422.196905][T23231] netlink: 'syz.1.8196': attribute type 10 has an invalid length. [ 422.265192][T23231] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.307724][T23231] .`: (slave team0): Enslaving as an active interface with an up link [ 422.416440][T23244] trusted_key: syz.1.8201 sent an empty control message without MSG_MORE. [ 422.539317][T23238] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.584832][T23238] bond2: (slave lo): Enslaving as an active interface with an up link [ 422.610746][T23238] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 422.682969][ T5988] lo speed is unknown, defaulting to 1000 [ 422.689588][ T9] lo speed is unknown, defaulting to 1000 [ 422.698731][ T5809] lo speed is unknown, defaulting to 1000 [ 422.794293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.848428][T23257] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 422.865356][T23261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8206'. [ 423.016648][T23263] netlink: 'syz.1.8207': attribute type 12 has an invalid length. [ 423.048553][T23263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8207'. [ 423.068624][T23263] netlink: 'syz.1.8207': attribute type 12 has an invalid length. [ 423.080125][T23263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8207'. [ 423.493481][T23283] bridge_slave_0: left allmulticast mode [ 423.526840][T23283] bridge_slave_0: left promiscuous mode [ 423.557550][T23283] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.639297][T23283] bridge_slave_1: left allmulticast mode [ 423.659065][T23283] bridge_slave_1: left promiscuous mode [ 423.683899][T23283] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.795617][T23283] bond0: (slave bond_slave_0): Releasing backup interface [ 423.829137][T23283] bond_slave_0: left allmulticast mode [ 423.835753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.893223][T23283] bond0: (slave bond_slave_1): Releasing backup interface [ 423.949011][T23283] bond_slave_1: left allmulticast mode [ 424.057598][T23283] team0: Port device team_slave_0 removed [ 424.163851][T23283] team0: Port device team_slave_1 removed [ 424.191291][T23283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.272921][T23283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.372025][T23314] netlink: 'syz.4.8224': attribute type 1 has an invalid length. [ 424.426128][T23283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.519060][T23283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.572850][T23317] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.8227'. [ 424.585536][T23319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8228'. [ 424.598287][T23283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.855666][T23314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.874655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.936675][T23315] bond1: (slave geneve3): making interface the new active one [ 424.980725][T23315] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 425.008203][T23325] netlink: 'syz.3.8230': attribute type 22 has an invalid length. [ 425.048293][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8230'. [ 425.085358][T23333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8234'. [ 425.096246][T23325] netlink: 'syz.3.8230': attribute type 22 has an invalid length. [ 425.118279][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8230'. [ 425.343275][T23341] tls_set_device_offload_rx: netdev not found [ 425.914280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.426334][T23386] netlink: 'syz.2.8251': attribute type 15 has an invalid length. [ 426.955166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.180366][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8264'. [ 428.092155][T23456] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8274'. [ 428.134887][T23456] netlink: Conntrack attr has 3 unknown bytes [ 428.411980][T23464] netlink: 'syz.4.8277': attribute type 11 has an invalid length. [ 428.543311][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8279'. [ 428.617175][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8279'. [ 428.865904][T23481] netlink: 'syz.2.8283': attribute type 25 has an invalid length. [ 428.920421][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8283'. [ 428.966027][T23481] netlink: 'syz.2.8283': attribute type 25 has an invalid length. [ 429.815100][T23520] bridge_slave_0: invalid flags given to default FDB implementation [ 429.832207][T23519] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 429.868707][T23519] bond4: (slave lo): Enslaving as an active interface with an up link [ 429.946616][T23519] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 430.946723][T23558] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.948889][T23562] __nla_validate_parse: 1 callbacks suppressed [ 430.948906][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8314'. [ 430.968639][T23558] bond3: (slave lo): Enslaving as an active interface with an up link [ 430.985520][T23558] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 431.404592][T23580] syzkaller1: entered promiscuous mode [ 431.546405][T23586] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.721250][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8331'. [ 432.744551][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8331'. [ 432.959403][T23615] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 432.990690][T23615] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 433.190111][T23647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8338'. [ 433.252256][T23647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8338'. [ 433.717153][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8344'. [ 433.760851][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8344'. [ 433.791435][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8344'. [ 433.986566][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8344'. [ 434.005215][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8344'. [ 435.897196][T23721] netlink: 'syz.4.8367': attribute type 14 has an invalid length. [ 435.978809][T23721] netlink: 'syz.4.8367': attribute type 14 has an invalid length. [ 435.989670][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.996071][T23721] __nla_validate_parse: 3 callbacks suppressed [ 435.996091][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8367'. [ 436.031609][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.056821][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.103895][T23727] veth0: entered promiscuous mode [ 436.123085][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.233703][T23727] veth0: left promiscuous mode [ 436.540445][T23740] netlink: 'syz.0.8375': attribute type 1 has an invalid length. [ 436.629027][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8379'. [ 436.660256][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8379'. [ 436.681128][T23740] bond4: entered promiscuous mode [ 436.695347][T23740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.990808][T23752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.001202][T23752] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 437.011887][T23752] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 437.027698][T23752] bond4: (slave vti0): making interface the new active one [ 437.036413][T23752] vti0: entered promiscuous mode [ 437.053835][T23752] bond4: (slave vti0): Enslaving as an active interface with an up link [ 437.331193][T23765] syzkaller1: entered promiscuous mode [ 437.345770][T23765] syzkaller1: entered allmulticast mode [ 437.910298][T23789] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8392'. [ 439.108911][T23839] netlink: 'syz.2.8408': attribute type 1 has an invalid length. [ 439.152259][T23839] netlink: 'syz.2.8408': attribute type 4 has an invalid length. [ 439.191628][T23839] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.8408'. [ 439.296929][T23848] GUP no longer grows the stack in syz.0.8412 (23848): 200000003000-20000000a000 (200000001000) [ 439.343862][T23848] CPU: 1 UID: 0 PID: 23848 Comm: syz.0.8412 Not tainted syzkaller #0 PREEMPT(full) [ 439.343892][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 439.343913][T23848] Call Trace: [ 439.343924][T23848] [ 439.343934][T23848] dump_stack_lvl+0xe8/0x150 [ 439.343963][T23848] __get_user_pages+0x2378/0x2720 [ 439.343994][T23848] ? __gup_longterm_locked+0xc4e/0x1630 [ 439.344039][T23848] ? __gup_longterm_locked+0xc4e/0x1630 [ 439.344062][T23848] ? down_read_killable+0x1bb/0x340 [ 439.344098][T23848] __gup_longterm_locked+0xdcf/0x1630 [ 439.344133][T23848] ? lock_acquire+0x106/0x350 [ 439.344173][T23848] gup_fast_fallback+0x1d84/0x20d0 [ 439.344234][T23848] ? __pfx_gup_fast_fallback+0x10/0x10 [ 439.344261][T23848] ? is_valid_gup_args+0x11f/0x200 [ 439.344286][T23848] ? get_user_pages_fast+0x4d/0xb0 [ 439.344312][T23848] __iov_iter_get_pages_alloc+0x370/0xa10 [ 439.344350][T23848] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 439.344383][T23848] iov_iter_get_pages2+0x5e/0xa0 [ 439.344415][T23848] __se_sys_vmsplice+0x7c7/0x1620 [ 439.344471][T23848] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 439.344502][T23848] ? __pfx_futex_wake+0x10/0x10 [ 439.344538][T23848] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.344621][T23848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.344644][T23848] do_syscall_64+0x15f/0xf80 [ 439.344669][T23848] ? trace_irq_disable+0x3b/0x140 [ 439.344699][T23848] ? clear_bhb_loop+0x40/0x90 [ 439.344724][T23848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.344745][T23848] RIP: 0033:0x7ff7f799cdd9 [ 439.344764][T23848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.344783][T23848] RSP: 002b:00007ff7f8780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 439.344806][T23848] RAX: ffffffffffffffda RBX: 00007ff7f7c15fa0 RCX: 00007ff7f799cdd9 [ 439.344821][T23848] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 439.344835][T23848] RBP: 00007ff7f7a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 439.344848][T23848] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 439.344860][T23848] R13: 00007ff7f7c16038 R14: 00007ff7f7c15fa0 R15: 00007ffc8fadd168 [ 439.344897][T23848] [ 440.002108][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.015996][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 441.155242][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 441.182612][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 441.883271][T23902] syzkaller1: entered promiscuous mode [ 441.889658][T23902] syzkaller1: entered allmulticast mode [ 442.394987][T23923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8437'. [ 443.068752][T23946] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.350906][T23956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8449'. [ 443.660000][T23964] netlink: 'syz.1.8450': attribute type 2 has an invalid length. [ 444.406851][T23987] tipc: Failed to remove unknown binding: 66,1,1/1332410197:3280090460/3280090462 [ 444.422023][T23987] tipc: Failed to remove unknown binding: 66,1,1/1332410197:3280090460/3280090462 [ 444.500811][T23986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8460'. [ 444.814750][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 444.845366][T23998] netlink: 'syz.4.8464': attribute type 29 has an invalid length. [ 444.859784][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 444.876720][T24005] netlink: 'syz.3.8468': attribute type 21 has an invalid length. [ 444.888145][T24005] netlink: 'syz.3.8468': attribute type 22 has an invalid length. [ 444.898024][T24005] netlink: 'syz.3.8468': attribute type 23 has an invalid length. [ 444.907220][T24005] netlink: 'syz.3.8468': attribute type 25 has an invalid length. [ 444.917535][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 444.950614][T24005] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8468'. [ 444.974551][T24006] netlink: 'syz.4.8464': attribute type 29 has an invalid length. [ 445.020354][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 445.217472][T24002] syzkaller0: entered promiscuous mode [ 445.246941][T24002] syzkaller0: entered allmulticast mode [ 448.562781][T24046] syzkaller0: entered promiscuous mode [ 448.594837][T24046] syzkaller0: entered allmulticast mode [ 452.068825][T24110] netlink: 'syz.1.8504': attribute type 1 has an invalid length. [ 453.989751][T24194] __nla_validate_parse: 3 callbacks suppressed [ 453.989800][T24194] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8528'. [ 455.166489][T24234] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.8545'. [ 455.476302][T24244] netlink: 'syz.1.8550': attribute type 1 has an invalid length. [ 457.319268][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8575'. [ 459.163879][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8597'. [ 459.761377][T24382] netlink: 'syz.0.8604': attribute type 1 has an invalid length. [ 459.783340][T24382] netlink: 'syz.0.8604': attribute type 4 has an invalid length. [ 459.791937][T24382] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8604'. [ 459.828155][T24383] sctp: [Deprecated]: syz.2.8603 (pid 24383) Use of int in maxseg socket option. [ 459.828155][T24383] Use struct sctp_assoc_value instead [ 463.553867][T24417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8616'. [ 464.604754][T24422] netlink: 'syz.0.8617': attribute type 1 has an invalid length. [ 464.872872][T24422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.913879][T24425] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 464.948738][T24421] bond5: entered promiscuous mode [ 464.955986][T24421] bond5: entered allmulticast mode [ 465.317179][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8625'. [ 465.776914][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8631'. [ 465.789021][T24463] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 465.882109][T24436] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.8621:24436 [ 465.933621][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8632'. [ 465.947451][T24466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8632'. [ 466.356301][T24472] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 466.439544][T24472] xt_hashlimit: size too large, truncated to 1048576 [ 467.106035][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8642'. [ 467.447892][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8643'. [ 467.682152][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 467.709751][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 467.746066][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 467.799214][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8641'. [ 468.308306][T24516] netlink: 'syz.0.8649': attribute type 1 has an invalid length. [ 468.666309][T24516] bond6: entered promiscuous mode [ 468.673131][T24516] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.739419][T24525] bond6: (slave bridge3): making interface the new active one [ 468.752701][T24525] bridge3: entered promiscuous mode [ 468.762447][T24525] bridge3: left promiscuous mode [ 471.262646][T24594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.270012][T24594] IPv6: NLM_F_CREATE should be set when creating new route [ 471.316863][T24595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.362519][T24597] __nla_validate_parse: 34 callbacks suppressed [ 471.362539][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8675'. [ 472.007599][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8680'. [ 472.068971][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8679'. [ 472.491313][T24620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8684'. [ 472.618916][T24622] syzkaller1: entered promiscuous mode [ 472.628558][T24622] syzkaller1: entered allmulticast mode [ 472.636668][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8686'. [ 472.925561][T24637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8688'. [ 473.195480][T24648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8690'. [ 474.154495][T24667] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8700'. [ 474.373551][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8706'. [ 474.495102][T24698] syzkaller1: entered promiscuous mode [ 474.513006][T24698] syzkaller1: entered allmulticast mode [ 475.447592][T24724] tipc: Enabled bearer , priority 0 [ 475.790980][T24724] syzkaller0: entered promiscuous mode [ 475.822273][T24724] syzkaller0: entered allmulticast mode [ 475.848556][T24724] tipc: Resetting bearer [ 475.872655][T24710] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 476.009627][T24723] tipc: Resetting bearer [ 476.939904][T24769] netlink: 'syz.3.8732': attribute type 1 has an invalid length. [ 478.849857][T24723] tipc: Disabling bearer [ 478.876140][T24769] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 479.063813][T24781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8734'. [ 479.084431][T24781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8734'. [ 479.303505][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8737'. [ 479.322824][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8737'. [ 479.495745][T24786] bond5: entered promiscuous mode [ 479.570654][T24789] macvlan3: entered promiscuous mode [ 479.582572][T24789] macvlan3: entered allmulticast mode [ 479.601682][T24789] bond5: (slave macvlan3): Opening slave failed [ 479.840701][T24796] syzkaller0: entered promiscuous mode [ 479.857461][T24796] syzkaller0: entered allmulticast mode [ 480.103826][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8746'. [ 480.452561][T24807] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.8743'. [ 481.210407][T24821] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 483.441581][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8757'. [ 483.452832][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8757'. [ 484.213174][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8759'. [ 484.326642][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8761'. [ 484.386184][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8761'. [ 484.490777][T24874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8765'. [ 484.781562][T24882] tipc: Started in network mode [ 484.799873][T24882] tipc: Node identity caadeb40fa93, cluster identity 4711 [ 484.843607][T24882] tipc: Enabled bearer , priority 0 [ 485.084202][T24885] syzkaller0: entered promiscuous mode [ 485.100481][T24885] syzkaller0: entered allmulticast mode [ 485.131490][T24885] tipc: Resetting bearer [ 485.910131][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8776'. [ 486.127259][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8779'. [ 486.137362][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8779'. [ 486.207648][ T3328] tipc: Resetting bearer [ 486.219874][T24881] tipc: Resetting bearer [ 488.861949][T24881] tipc: Disabling bearer [ 488.908154][ T24] tipc: Node number set to 809429824 [ 491.240791][T24992] netlink: 'syz.0.8804': attribute type 1 has an invalid length. [ 491.853410][T24962] bridge0: left allmulticast mode [ 492.047367][T24992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 492.187430][T24993] bond7: (slave bridge3): making interface the new active one [ 492.219328][T24993] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 492.262904][ T141] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.287110][ T141] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.307130][ T141] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.345280][ T141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.446336][T25013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8810'. [ 492.511489][ T141] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.542227][ T141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.553004][ T141] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.583713][ T141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.020083][T25032] tipc: Failed to remove unknown binding: 66,0,0/809429824:3528957108/3528957109 [ 493.059472][T25032] tipc: Failed to remove unknown binding: 66,0,0/809429824:3528957108/3528957109 [ 494.167472][T25053] syzkaller1: entered promiscuous mode [ 494.180479][T25053] syzkaller1: entered allmulticast mode [ 494.234766][ T141] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 494.458286][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8826'. [ 495.012793][T25084] tipc: Enabled bearer , priority 0 [ 495.225778][T25084] syzkaller0: entered promiscuous mode [ 495.254975][T25084] syzkaller0: entered allmulticast mode [ 495.267475][T25084] tipc: Resetting bearer [ 495.368991][T25093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8835'. [ 495.433754][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8836'. [ 495.515330][ T141] tipc: Resetting bearer [ 495.521633][T25041] lo speed is unknown, defaulting to 1000 [ 495.528198][T25083] tipc: Resetting bearer [ 498.042642][T25083] tipc: Disabling bearer [ 498.358517][T25109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8838'. [ 498.425840][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8842'. [ 498.499080][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8842'. [ 498.526296][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8843'. [ 498.568959][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8842'. [ 499.312684][T25137] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.348038][T25134] syzkaller0: entered promiscuous mode [ 499.354486][T25134] syzkaller0: entered allmulticast mode [ 499.525775][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8845'. [ 499.535223][T25121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8845'. [ 499.770335][T25143] syzkaller0: entered promiscuous mode [ 499.785054][T25143] syzkaller0: entered allmulticast mode [ 500.463401][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8860'. [ 500.668737][T25167] netlink: 'syz.2.8861': attribute type 1 has an invalid length. [ 500.723272][T25168] tipc: Enabled bearer , priority 0 [ 501.010091][T25171] syzkaller0: entered promiscuous mode [ 501.024435][T25171] syzkaller0: entered allmulticast mode [ 501.042531][T25171] tipc: Resetting bearer [ 501.176945][T25166] tipc: Resetting bearer [ 501.442935][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.453345][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.930998][T25207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8871'. [ 503.688246][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8878'. [ 505.577197][T25166] tipc: Disabling bearer [ 505.600554][ T807] tipc: Node number set to 3758096385 [ 505.657548][T25232] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 505.958013][T25241] vlan2: entered promiscuous mode [ 505.984205][T25241] hsr0: entered promiscuous mode [ 506.022055][T25241] vlan2: entered allmulticast mode [ 506.029605][T25248] netlink: 'syz.4.8883': attribute type 1 has an invalid length. [ 506.059020][T25241] hsr0: entered allmulticast mode [ 506.074905][T25241] hsr_slave_0: entered allmulticast mode [ 506.080634][T25241] hsr_slave_1: entered allmulticast mode [ 506.166524][T25248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.328526][T25256] bond2: (slave ip6gretap1): making interface the new active one [ 506.342262][T25256] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 506.366940][T25263] syzkaller0: entered promiscuous mode [ 506.392432][T25263] syzkaller0: entered allmulticast mode [ 507.569448][T25286] tipc: Enabled bearer , priority 0 [ 508.057501][T25290] syzkaller0: entered promiscuous mode [ 508.079636][T25290] syzkaller0: entered allmulticast mode [ 508.106340][T25290] tipc: Resetting bearer [ 508.141780][T25320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.183049][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8897'. [ 508.370125][ T35] tipc: Resetting bearer [ 508.377385][T25283] tipc: Resetting bearer [ 511.258178][T25283] tipc: Disabling bearer [ 511.525761][T25341] syzkaller0: entered promiscuous mode [ 511.532427][T25341] syzkaller0: entered allmulticast mode [ 511.548421][T25351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8903'. [ 514.827730][T25379] syzkaller0: entered promiscuous mode [ 514.833921][T25379] syzkaller0: entered allmulticast mode [ 515.110112][T25392] netlink: 'syz.2.8912': attribute type 39 has an invalid length. [ 516.056025][T25420] syzkaller0: entered promiscuous mode [ 516.083914][T25420] syzkaller0: entered allmulticast mode [ 516.745879][T25437] syzkaller0: entered promiscuous mode [ 516.761828][T25437] syzkaller0: entered allmulticast mode [ 516.809813][T25437] tipc: Enabled bearer , priority 0 [ 516.831011][T25449] netlink: 'syz.1.8928': attribute type 1 has an invalid length. [ 516.910689][T25436] tipc: Resetting bearer [ 516.986297][T25436] tipc: Disabling bearer [ 517.022587][T25452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8929'. [ 517.183316][T25452] vlan2: entered allmulticast mode [ 517.208204][T25452] bridge7: entered allmulticast mode [ 517.291819][T25455] bridge7: port 1(bond6) entered blocking state [ 517.299127][T25455] bridge7: port 1(bond6) entered disabled state [ 517.306687][T25455] bond6: entered allmulticast mode [ 517.319019][T25455] bond6: entered promiscuous mode [ 517.388693][T25460] syzkaller0: entered promiscuous mode [ 517.398683][T25460] syzkaller0: entered allmulticast mode [ 517.624621][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8933'. [ 517.857047][T25487] openvswitch: netlink: Invalid VLAN frame [ 517.875015][T25481] bond5: entered promiscuous mode [ 517.899401][T25481] bond5: entered allmulticast mode [ 518.043700][T25485] syzkaller0: entered promiscuous mode [ 518.061690][T25485] syzkaller0: entered allmulticast mode [ 518.095276][T25483] syzkaller0: entered promiscuous mode [ 518.117131][T25483] syzkaller0: entered allmulticast mode [ 518.289803][T25498] netlink: 'syz.1.8940': attribute type 13 has an invalid length. [ 519.001547][T25501] netlink: 'syz.3.8941': attribute type 1 has an invalid length. [ 520.652086][T25501] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 520.680393][T25503] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 520.780423][T25504] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 520.809731][T25504] bond3 (unregistering): Released all slaves [ 520.985801][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8944'. [ 521.084239][T25523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.207801][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8945'. [ 521.290024][T25508] syzkaller0: entered promiscuous mode [ 521.307705][T25508] syzkaller0: entered allmulticast mode [ 521.385877][T25523] macvlan4: entered promiscuous mode [ 521.401526][T25523] macvlan4: entered allmulticast mode [ 521.422815][T25529] bond6: (slave vti0): refused to change device type [ 525.309637][T25606] syzkaller0: entered promiscuous mode [ 525.326598][T25606] syzkaller0: entered allmulticast mode [ 525.388830][T25610] syzkaller0: entered promiscuous mode [ 525.398731][T25610] syzkaller0: entered allmulticast mode [ 526.520766][T25641] tipc: Enabling of bearer rejected, failed to enable media [ 526.645164][T25664] netlink: 'syz.1.8966': attribute type 1 has an invalid length. [ 526.898600][T25675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8968'. [ 527.027813][T25669] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 527.044428][T25669] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 527.128005][T25671] bond7: (slave bridge8): Enslaving as an active interface with a down link [ 527.193898][T25688] x_tables: duplicate underflow at hook 1 [ 527.267970][T25664] macvlan5: entered promiscuous mode [ 527.276852][T25664] macvlan5: entered allmulticast mode [ 527.283727][T25664] bond7: entered promiscuous mode [ 527.295627][T25664] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 527.312940][T25664] bond7: left promiscuous mode [ 527.945208][ T29] audit: type=1804 audit(1777717000.534:6): pid=25713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8977" name="/newroot/1823/cgroup.controllers" dev="tmpfs" ino=9177 res=1 errno=0 [ 528.069913][ T29] audit: type=1800 audit(1777717000.534:7): pid=25713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8977" name="cgroup.controllers" dev="tmpfs" ino=9177 res=0 errno=0 [ 528.868807][T25735] bond8: entered allmulticast mode [ 529.019997][T25737] veth7: entered allmulticast mode [ 529.066667][T25737] bond8: (slave veth7): Enslaving as an active interface with an up link [ 529.176981][T25740] bond8 (unregistering): (slave veth7): Releasing backup interface [ 529.213086][T25740] bond8 (unregistering): Released all slaves [ 533.191207][T25820] syzkaller0: entered promiscuous mode [ 533.251564][T25820] 0: reclassify loop, rule prio 0, protocol 800 [ 533.426283][T25834] syzkaller0: entered promiscuous mode [ 533.442113][T25834] syzkaller0: entered allmulticast mode [ 533.460882][T25828] syzkaller0: entered promiscuous mode [ 533.470420][T25828] syzkaller0: entered allmulticast mode [ 533.867504][T25850] syzkaller0: entered promiscuous mode [ 533.886863][T25850] syzkaller0: entered allmulticast mode [ 533.985318][T25857] syzkaller0: entered promiscuous mode [ 534.003247][T25857] syzkaller0: entered allmulticast mode [ 534.080972][T25856] syzkaller0: entered promiscuous mode [ 534.102535][T25856] syzkaller0: entered allmulticast mode [ 534.439467][T25873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9009'. [ 534.499834][T25871] syzkaller0: entered promiscuous mode [ 534.523474][T25871] syzkaller0: entered allmulticast mode [ 534.629892][ T5842] block nbd3: Receive control failed (result -1) [ 534.866669][T25884] syzkaller0: entered promiscuous mode [ 534.899355][T25884] syzkaller0: entered allmulticast mode [ 535.379402][T25907] xt_connbytes: Forcing CT accounting to be enabled [ 535.872383][T25925] netlink: 'syz.2.9023': attribute type 1 has an invalid length. [ 535.937206][T25920] syzkaller0: entered promiscuous mode [ 535.946844][T25920] syzkaller0: entered allmulticast mode [ 535.953023][T25925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9023'. [ 535.973541][T25921] tipc: Enabled bearer , priority 0 [ 535.983611][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9023'. [ 536.008433][T25925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9023'. [ 536.021149][T25921] syzkaller0: entered promiscuous mode [ 536.027971][T25921] syzkaller0: entered allmulticast mode [ 536.049061][T25925] geneve2: entered promiscuous mode [ 536.054718][T25925] geneve2: entered allmulticast mode [ 536.130930][T25921] tipc: Resetting bearer [ 536.166088][T25919] tipc: Resetting bearer [ 536.258992][T25919] tipc: Disabling bearer [ 536.385918][T25939] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 536.422743][T25939] syzkaller0: entered promiscuous mode [ 536.441292][T25939] syzkaller0: entered allmulticast mode [ 536.525531][T25939] tipc: Enabled bearer , priority 0 [ 536.591177][T25938] tipc: Resetting bearer [ 536.799664][T25938] tipc: Disabling bearer [ 537.012324][T25958] syzkaller0: entered promiscuous mode [ 537.028157][T25958] syzkaller0: entered allmulticast mode [ 537.218964][T25965] syzkaller0: entered promiscuous mode [ 537.237517][T25965] syzkaller0: entered allmulticast mode [ 537.276766][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.339415][T25966] syzkaller0: entered promiscuous mode [ 537.351834][T25966] syzkaller0: entered allmulticast mode [ 537.525059][T25946] netlink: 'syz.0.9029': attribute type 16 has an invalid length. [ 537.558226][T25946] netlink: 'syz.0.9029': attribute type 17 has an invalid length. [ 537.604916][T25946] eql: remember to turn off Van-Jacobson compression on your slave devices [ 537.658323][T25946] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 537.983090][T25988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9039'. [ 538.296529][T25999] syzkaller0: entered promiscuous mode [ 538.321826][T25999] syzkaller0: entered allmulticast mode [ 539.469075][T26039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9050'. [ 539.488241][T26035] syzkaller0: entered promiscuous mode [ 539.532819][T26035] syzkaller0: entered allmulticast mode [ 539.639732][T26043] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 539.754779][T26046] macvlan2: entered promiscuous mode [ 539.788758][T26046] macvlan2: entered allmulticast mode [ 539.816918][T26046] bond3: entered promiscuous mode [ 539.829474][T26046] bridge6: entered promiscuous mode [ 539.850350][T26046] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 539.876169][T26046] bond3: left promiscuous mode [ 539.888417][T26046] bridge6: left promiscuous mode [ 540.049519][T26058] syzkaller0: entered promiscuous mode [ 540.061355][T26058] syzkaller0: entered allmulticast mode [ 540.085449][T26058] 0: reclassify loop, rule prio 0, protocol 800 [ 540.264287][T26066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9056'. [ 540.766767][ T5094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.339672][T26084] syzkaller0: entered promiscuous mode [ 541.376493][ T5094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.736727][T26093] syzkaller0: entered promiscuous mode [ 543.742248][T26093] syzkaller0: entered allmulticast mode [ 543.752385][T26101] syzkaller0: entered promiscuous mode [ 543.758475][T26101] syzkaller0: entered allmulticast mode [ 546.376251][T26128] syzkaller0: entered promiscuous mode [ 546.406785][T26128] syzkaller0: entered allmulticast mode [ 546.440961][T26134] 0: reclassify loop, rule prio 0, protocol 800 [ 547.023181][ T29] audit: type=1804 audit(1777717019.624:8): pid=26162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9077" name="/newroot/1761/cgroup.controllers" dev="tmpfs" ino=8864 res=1 errno=0 [ 547.145894][ T29] audit: type=1800 audit(1777717019.624:9): pid=26162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9077" name="cgroup.controllers" dev="tmpfs" ino=8864 res=0 errno=0 [ 547.497612][T26180] netlink: 'syz.3.9080': attribute type 13 has an invalid length. [ 550.696709][T26163] syzkaller0: entered promiscuous mode [ 550.702229][T26163] syzkaller0: entered allmulticast mode [ 550.826395][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.060621][T26238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.067939][T26238] IPv6: NLM_F_CREATE should be set when creating new route [ 551.096060][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9082'. [ 551.354413][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 553.026327][T26172] syzkaller0: entered promiscuous mode [ 553.031858][T26172] syzkaller0: entered allmulticast mode [ 555.865432][T26246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9083'. [ 555.877035][T26250] tipc: Enabled bearer , priority 0 [ 555.942706][T26257] syzkaller0: entered promiscuous mode [ 555.960499][T26257] syzkaller0: entered allmulticast mode [ 556.116476][T26243] syzkaller0: entered promiscuous mode [ 556.122738][T26243] syzkaller0: entered allmulticast mode [ 556.122792][T26286] [ 556.130650][T26286] ====================================================== [ 556.137666][T26286] WARNING: possible circular locking dependency detected [ 556.144692][T26286] syzkaller #0 Not tainted [ 556.149097][T26286] ------------------------------------------------------ [ 556.156101][T26286] syz.4.9086/26286 is trying to acquire lock: [ 556.162154][T26286] ffffffff8f0ac988 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 556.171824][T26286] [ 556.171824][T26286] but task is already holding lock: [ 556.179183][T26286] ffff8880492fd360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 556.188503][T26286] [ 556.188503][T26286] which lock already depends on the new lock. [ 556.188503][T26286] [ 556.198895][T26286] [ 556.198895][T26286] the existing dependency chain (in reverse order) is: [ 556.207893][T26286] [ 556.207893][T26286] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 556.215625][T26286] lock_sock_nested+0x41/0x100 [ 556.220911][T26286] inet_shutdown+0x6a/0x390 [ 556.225942][T26286] nbd_mark_nsock_dead+0x2e9/0x560 [ 556.231566][T26286] recv_work+0x1c2e/0x1d40 [ 556.236496][T26286] process_scheduled_works+0xb5d/0x1860 [ 556.242557][T26286] worker_thread+0xa53/0xfc0 [ 556.247661][T26286] kthread+0x388/0x470 [ 556.252246][T26286] ret_from_fork+0x514/0xb70 [ 556.257353][T26286] ret_from_fork_asm+0x1a/0x30 [ 556.262634][T26286] [ 556.262634][T26286] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 556.270276][T26286] __mutex_lock+0x1a3/0x1550 [ 556.275393][T26286] nbd_queue_rq+0x37b/0x1100 [ 556.280498][T26286] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.286561][T26286] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.293413][T26286] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.299915][T26286] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.305544][T26286] blk_mq_dispatch_list+0xd16/0xe10 [ 556.311259][T26286] blk_mq_flush_plug_list+0x48d/0x570 [ 556.317156][T26286] __blk_flush_plug+0x3ed/0x4d0 [ 556.322529][T26286] __submit_bio+0x28d/0x580 [ 556.327553][T26286] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 556.333706][T26286] block_read_full_folio+0x599/0x830 [ 556.339505][T26286] filemap_read_folio+0x137/0x3b0 [ 556.345052][T26286] do_read_cache_folio+0x358/0x590 [ 556.350683][T26286] read_part_sector+0xb6/0x2b0 [ 556.355966][T26286] adfspart_check_ICS+0xb1/0x960 [ 556.361422][T26286] bdev_disk_changed+0x817/0x1770 [ 556.366967][T26286] blkdev_get_whole+0x380/0x510 [ 556.372341][T26286] bdev_open+0x31e/0xd30 [ 556.377102][T26286] blkdev_open+0x470/0x610 [ 556.382032][T26286] do_dentry_open+0x785/0x14e0 [ 556.387307][T26286] vfs_open+0x3b/0x340 [ 556.391889][T26286] path_openat+0x2e08/0x3860 [ 556.396998][T26286] do_file_open+0x23e/0x4a0 [ 556.402018][T26286] do_sys_openat2+0x113/0x200 [ 556.407208][T26286] __x64_sys_openat+0x138/0x170 [ 556.412575][T26286] do_syscall_64+0x15f/0xf80 [ 556.417690][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.424101][T26286] [ 556.424101][T26286] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 556.431314][T26286] __mutex_lock+0x1a3/0x1550 [ 556.436425][T26286] nbd_queue_rq+0xc6/0x1100 [ 556.441439][T26286] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.447505][T26286] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.454358][T26286] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.460860][T26286] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.466487][T26286] blk_mq_dispatch_list+0xd16/0xe10 [ 556.472212][T26286] blk_mq_flush_plug_list+0x48d/0x570 [ 556.478106][T26286] __blk_flush_plug+0x3ed/0x4d0 [ 556.483478][T26286] __submit_bio+0x28d/0x580 [ 556.488502][T26286] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 556.494653][T26286] block_read_full_folio+0x599/0x830 [ 556.500456][T26286] filemap_read_folio+0x137/0x3b0 [ 556.505999][T26286] do_read_cache_folio+0x358/0x590 [ 556.511632][T26286] read_part_sector+0xb6/0x2b0 [ 556.516915][T26286] adfspart_check_ICS+0xb1/0x960 [ 556.522384][T26286] bdev_disk_changed+0x817/0x1770 [ 556.527930][T26286] blkdev_get_whole+0x380/0x510 [ 556.533303][T26286] bdev_open+0x31e/0xd30 [ 556.538068][T26286] blkdev_open+0x470/0x610 [ 556.542994][T26286] do_dentry_open+0x785/0x14e0 [ 556.548272][T26286] vfs_open+0x3b/0x340 [ 556.552857][T26286] path_openat+0x2e08/0x3860 [ 556.557969][T26286] do_file_open+0x23e/0x4a0 [ 556.562987][T26286] do_sys_openat2+0x113/0x200 [ 556.568182][T26286] __x64_sys_openat+0x138/0x170 [ 556.573548][T26286] do_syscall_64+0x15f/0xf80 [ 556.578659][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.585067][T26286] [ 556.585067][T26286] -> #5 (set->srcu){.+.+}-{0:0}: [ 556.592187][T26286] __synchronize_srcu+0xca/0x300 [ 556.597637][T26286] elevator_switch+0x1e8/0x7a0 [ 556.602919][T26286] elevator_change+0x2cc/0x450 [ 556.608199][T26286] elevator_set_default+0x36c/0x430 [ 556.613915][T26286] blk_register_queue+0x3e9/0x4e0 [ 556.619465][T26286] __add_disk+0x677/0xd50 [ 556.624306][T26286] add_disk_fwnode+0xfb/0x480 [ 556.629499][T26286] nbd_dev_add+0x72c/0xb50 [ 556.634426][T26286] nbd_init+0x168/0x1f0 [ 556.639092][T26286] do_one_initcall+0x250/0x870 [ 556.644369][T26286] do_initcall_level+0x104/0x190 [ 556.649822][T26286] do_initcalls+0x59/0xa0 [ 556.654669][T26286] kernel_init_freeable+0x2a6/0x3e0 [ 556.660388][T26286] kernel_init+0x1d/0x1d0 [ 556.665242][T26286] ret_from_fork+0x514/0xb70 [ 556.670353][T26286] ret_from_fork_asm+0x1a/0x30 [ 556.675638][T26286] [ 556.675638][T26286] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 556.683455][T26286] __mutex_lock+0x1a3/0x1550 [ 556.688561][T26286] elevator_change+0x1b3/0x450 [ 556.693846][T26286] elevator_set_none+0xb5/0x140 [ 556.699213][T26286] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 556.705533][T26286] nbd_start_device+0x17f/0xb10 [ 556.710899][T26286] nbd_genl_connect+0x165b/0x1cf0 [ 556.716432][T26286] genl_family_rcv_msg_doit+0x22a/0x330 [ 556.722500][T26286] genl_rcv_msg+0x61c/0x7a0 [ 556.727523][T26286] netlink_rcv_skb+0x232/0x4b0 [ 556.732808][T26286] genl_rcv+0x28/0x40 [ 556.737308][T26286] netlink_unicast+0x75c/0x8e0 [ 556.742585][T26286] netlink_sendmsg+0x813/0xb40 [ 556.747865][T26286] ____sys_sendmsg+0x972/0x9f0 [ 556.753143][T26286] ___sys_sendmsg+0x2a5/0x360 [ 556.758336][T26286] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.763790][T26286] do_syscall_64+0x15f/0xf80 [ 556.768898][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.775309][T26286] [ 556.775309][T26286] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 556.783915][T26286] blk_alloc_queue+0x546/0x680 [ 556.789199][T26286] __blk_mq_alloc_disk+0x197/0x390 [ 556.794832][T26286] nbd_dev_add+0x499/0xb50 [ 556.799761][T26286] nbd_init+0x168/0x1f0 [ 556.804428][T26286] do_one_initcall+0x250/0x870 [ 556.809704][T26286] do_initcall_level+0x104/0x190 [ 556.815165][T26286] do_initcalls+0x59/0xa0 [ 556.820018][T26286] kernel_init_freeable+0x2a6/0x3e0 [ 556.825734][T26286] kernel_init+0x1d/0x1d0 [ 556.830584][T26286] ret_from_fork+0x514/0xb70 [ 556.835692][T26286] ret_from_fork_asm+0x1a/0x30 [ 556.840995][T26286] [ 556.840995][T26286] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 556.848200][T26286] fs_reclaim_acquire+0x71/0x100 [ 556.853654][T26286] __kmalloc_cache_noprof+0x40/0x660 [ 556.859459][T26286] cryptomgr_notify+0x85/0x930 [ 556.864746][T26286] notifier_call_chain+0x1ad/0x3d0 [ 556.870376][T26286] blocking_notifier_call_chain+0x6a/0x90 [ 556.876614][T26286] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 556.882413][T26286] crypto_alloc_tfm_node+0x13e/0x3f0 [ 556.888213][T26286] crypto_alloc_sync_skcipher+0x39/0xd0 [ 556.894276][T26286] rxkad_init+0x20/0xe0 [ 556.898955][T26286] rxrpc_init_security+0x72/0x120 [ 556.904493][T26286] af_rxrpc_init+0x13d/0x2e0 [ 556.909594][T26286] do_one_initcall+0x250/0x870 [ 556.914878][T26286] do_initcall_level+0x104/0x190 [ 556.920344][T26286] do_initcalls+0x59/0xa0 [ 556.925193][T26286] kernel_init_freeable+0x2a6/0x3e0 [ 556.930913][T26286] kernel_init+0x1d/0x1d0 [ 556.935769][T26286] ret_from_fork+0x514/0xb70 [ 556.940875][T26286] ret_from_fork_asm+0x1a/0x30 [ 556.946156][T26286] [ 556.946156][T26286] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 556.954229][T26286] down_read+0x47/0x2e0 [ 556.958906][T26286] blocking_notifier_call_chain+0x54/0x90 [ 556.965148][T26286] __crypto_register_alg+0x32b/0x3c0 [ 556.970956][T26286] crypto_register_alg+0x447/0x810 [ 556.976588][T26286] do_one_initcall+0x250/0x870 [ 556.981868][T26286] do_initcall_level+0x104/0x190 [ 556.987327][T26286] do_initcalls+0x59/0xa0 [ 556.992181][T26286] kernel_init_freeable+0x2a6/0x3e0 [ 556.997900][T26286] kernel_init+0x1d/0x1d0 [ 557.002751][T26286] ret_from_fork+0x514/0xb70 [ 557.007857][T26286] ret_from_fork_asm+0x1a/0x30 [ 557.013139][T26286] [ 557.013139][T26286] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 557.020698][T26286] __lock_acquire+0x15a5/0x2cf0 [ 557.026062][T26286] lock_acquire+0x106/0x350 [ 557.031080][T26286] down_write+0x96/0x200 [ 557.035841][T26286] crypto_alg_mod_lookup+0x211/0x5f0 [ 557.041640][T26286] crypto_alloc_tfm_node+0x13e/0x3f0 [ 557.047436][T26286] tls_set_sw_offload+0xa33/0x1780 [ 557.053071][T26286] tls_setsockopt+0xf3e/0x15c0 [ 557.058354][T26286] do_sock_setsockopt+0x17c/0x1b0 [ 557.063892][T26286] __x64_sys_setsockopt+0x13d/0x1b0 [ 557.069607][T26286] do_syscall_64+0x15f/0xf80 [ 557.074715][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.081131][T26286] [ 557.081131][T26286] other info that might help us debug this: [ 557.081131][T26286] [ 557.091363][T26286] Chain exists of: [ 557.091363][T26286] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 557.091363][T26286] [ 557.104417][T26286] Possible unsafe locking scenario: [ 557.104417][T26286] [ 557.111862][T26286] CPU0 CPU1 [ 557.117217][T26286] ---- ---- [ 557.122571][T26286] lock(sk_lock-AF_INET6); [ 557.127064][T26286] lock(&nsock->tx_lock); [ 557.133993][T26286] lock(sk_lock-AF_INET6); [ 557.141006][T26286] lock(crypto_alg_sem); [ 557.145332][T26286] [ 557.145332][T26286] *** DEADLOCK *** [ 557.145332][T26286] [ 557.153460][T26286] 1 lock held by syz.4.9086/26286: [ 557.158555][T26286] #0: ffff8880492fd360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 557.168310][T26286] [ 557.168310][T26286] stack backtrace: [ 557.174203][T26286] CPU: 1 UID: 0 PID: 26286 Comm: syz.4.9086 Not tainted syzkaller #0 PREEMPT(full) [ 557.174229][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.174241][T26286] Call Trace: [ 557.174251][T26286] [ 557.174259][T26286] dump_stack_lvl+0xe8/0x150 [ 557.174284][T26286] print_circular_bug+0x2e1/0x300 [ 557.174311][T26286] check_noncircular+0x12e/0x150 [ 557.174334][T26286] __lock_acquire+0x15a5/0x2cf0 [ 557.174363][T26286] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 557.174382][T26286] lock_acquire+0x106/0x350 [ 557.174398][T26286] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 557.174423][T26286] down_write+0x96/0x200 [ 557.174447][T26286] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 557.174471][T26286] ? __pfx_down_write+0x10/0x10 [ 557.174496][T26286] ? crypto_larval_alloc+0x1bf/0x290 [ 557.174515][T26286] crypto_alg_mod_lookup+0x211/0x5f0 [ 557.174535][T26286] crypto_alloc_tfm_node+0x13e/0x3f0 [ 557.174558][T26286] tls_set_sw_offload+0xa33/0x1780 [ 557.174593][T26286] tls_setsockopt+0xf3e/0x15c0 [ 557.174618][T26286] ? __pfx_tls_setsockopt+0x10/0x10 [ 557.174643][T26286] ? __fget_files+0x2a/0x420 [ 557.174661][T26286] ? aa_sock_opt_perm+0xff/0x1a0 [ 557.174684][T26286] ? sock_common_setsockopt+0x36/0xc0 [ 557.174701][T26286] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.174719][T26286] do_sock_setsockopt+0x17c/0x1b0 [ 557.174743][T26286] __x64_sys_setsockopt+0x13d/0x1b0 [ 557.174764][T26286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.174782][T26286] do_syscall_64+0x15f/0xf80 [ 557.174803][T26286] ? trace_irq_disable+0x3b/0x140 [ 557.174827][T26286] ? clear_bhb_loop+0x40/0x90 [ 557.174847][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.174864][T26286] RIP: 0033:0x7feaf779cdd9 [ 557.174881][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.174896][T26286] RSP: 002b:00007feaf85e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.174916][T26286] RAX: ffffffffffffffda RBX: 00007feaf7a15fa0 RCX: 00007feaf779cdd9 [ 557.174929][T26286] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 557.174940][T26286] RBP: 00007feaf7832d69 R08: 0000000000000038 R09: 0000000000000000 [ 557.174950][T26286] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 557.174962][T26286] R13: 00007feaf7a16038 R14: 00007feaf7a15fa0 R15: 00007fff4de611d8 [ 557.174982][T26286] [ 557.598878][T26257] tipc: Resetting bearer [ 557.609472][T26257] tipc: Disabling bearer [ 562.877065][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.885179][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 563.674394][ T5094] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 60 sec