last executing test programs: 10m0.801620377s ago: executing program 2 (id=3175): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/132, 0x84}], 0x2}, 0x20) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "21937adbcdae99e1d79e8f9dd37f94ae6c567c2826f02ed6a499a66b02aab061c6cbc89eb3c5a62c0618f6ac508c51a16618225fb028de0374c39d2dc983dfe7909cff3b5b0cc70c3675c3dbdd907e8c69f6b8fc05b08d681cdf3929e3e11e35524129387a9c3563f77db993b734da4efd1d6eb859"}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc0408c0}, 0x0) 10m0.664292612s ago: executing program 2 (id=3176): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x22, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r2, 0xffffffffffffffff, 0x28, 0x10, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01000700000000000000170000002926db08703f0c7196cfd4f039e28502eb014d6f622f1c6c81c1fd53d92f71b65293243e4a"], 0x14}}, 0x824) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00'}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0x6, &(0x7f0000000000)={0x3, "445aa1"}, 0x4) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$unix(0x1, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r14 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r14, &(0x7f0000000840)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x40000d4) 9m58.462898775s ago: executing program 2 (id=3183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffed1, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1edfaa1963650027, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) 9m58.224461212s ago: executing program 2 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f00000006c0)='ns/time_for_children\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)=0x0) r6 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @str='+()\x00'}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) r13 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c0000004f0008000100"/24, @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0) r15 = getgid() r16 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r22 = syz_open_procfs$namespace(r19, &(0x7f0000001780)='ns/ipc\x00') r23 = getpid() sendmmsg$unix(r18, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r19, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r19, 0x0, r21}}}, @cred={{0x1c, 0x1, 0x2, {r23, r20}}}, @rights={{0x18, 0x1, 0x1, [r22, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r2, r11]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r21}}}], 0xe8, 0x20004000}}, {{0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4040800}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="952a95f84277495787219438fb504f10280c3888773067664762c31bf6201f38e2de91ddee96f0dca816f46af18be8a4e5a3df020606a67e", 0x38}, {&(0x7f0000000680)="46f17b88a41ae281e75fba3b97b9d978098a939fff1bc41df62cd858ce580f9836d6b226249de00cab8feacb4a14feaf8eb26b75a5c676639c5b63640a38670c978a1e19a1d8276c2e32faa4ea510664c1a5e2217de1ffce3a1bc428", 0x5c}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="28000000000000000100000001000000f876466bc2aa7bbd6391e848d8d93f5f11451d5451093a32d79f6f9750209414d6998ef4c3a29dde8cae84b1d9dcaed97ca18f605c1a39ccb05afdaf3321c2da329d9e51b2945640d158782651a7e9d544272beecf1ad0b883f15b2a108908a194cf5e57feab8f49a4a6213488344ba7f4045ea10753", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2], 0x28, 0x20000040}}], 0x3, 0x40) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r5, @ANYRES64=r9, @ANYRESOCT=r2, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20040045}, 0x840) 9m57.157499346s ago: executing program 2 (id=3199): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) close(0x4) 9m56.902889267s ago: executing program 2 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 9m41.824287834s ago: executing program 32 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 6m5.541673484s ago: executing program 4 (id=5480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802926f595111bc6efbeeb3f70000070000000000000000800000850000a9f0c204000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="09f53dcd03d8440c1c00128009000100626f6e64000000000c00028008001e0000000000089d79b6f3d261fa3d838dac8d2363cfe4a8f46cb474f0aed3d3defac7d90600c3cbe191cc4c04974b17000000000000e5e38eb821c89126ff18ee79b51511f1d87b39b0fed3220c263a25205626a7a95c553972882121672bd41041083da1eef91583c6bca5dc5ac0a95840defe4a48304eb46ca35303177703"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x24000000) sendto$inet(r7, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="0348b692bcc32f84b460f28f52d36f20025f47607d8176dcc6a56ef6d0dfef23ab33b36a0209ed", 0x27}], 0x1}, 0x44) 6m4.582881549s ago: executing program 4 (id=5495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) close(0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x9, 0x8, 0xfff, 0x2, 0xffffffff, 0x40000b93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x1, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0x6, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0x8}, {0x1, 0x71, 0x1, 0xcf55, 0x6, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x4, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x7, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0xfff, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae78a, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x5}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x200, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x100, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x20000000, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x82, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x4, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0x9, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffdfc}, {0x7, 0x6, 0x3906, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x40, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf620, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x6, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xe, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0x7fffffff, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x20000004}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x7}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x400008, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7d, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x5d7c}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x9, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m4.338605958s ago: executing program 4 (id=5499): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4]) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r8, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0xfffffffffffffec7, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x992c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r10, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, 0x8) 6m4.145862142s ago: executing program 4 (id=5504): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000005f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m4.021500286s ago: executing program 4 (id=5508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x1fc, 0x0, 0x4bb8, 0x69405e1c, 0x8}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 6m3.910921537s ago: executing program 4 (id=5509): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5m48.841797114s ago: executing program 33 (id=5509): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 7.040416869s ago: executing program 0 (id=8824): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@generic={0x0, 0x4, 'Z\x00'}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@private}, {@broadcast}]}]}}}}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5b5e26bd7000ffdbdf25010000000000000001000000702c1efd335e71f9df31ad1e005bbdf12582aef9cbe01e9dabf4c76b532aea88fd84ec57beb93f727174d742ac06e42c2d83dbd5a87a0c0a48c5b7986a124d65047f09f331627bf1069010808580450474df372b471bd0b2b0c236bd78402cb6b3554bc75e0cb7640e6c4ae462363af49540a1b67a409ec2a04d7be2a367538e36cd39c40ec3b4a94a5dacce0d42b82e9e0c34f6f21333cb2480e3f0bc6ae4ba2a2517b4e0b83369a5ec17eeb5d7b05a99e811f3789a"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f004040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="83108ebd7000fcdb9f251600000018000180140002006e657464657673696d300000000000000500040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) 6.825400892s ago: executing program 0 (id=8827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 4.076448457s ago: executing program 0 (id=8833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x8, 0x10, 0x7f, 0x2, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}]}}}}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @initdev, @multicast1}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x6, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 3.836436368s ago: executing program 0 (id=8838): socket(0x1, 0x4, 0x1) (async) socket(0x1, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x61e3, &(0x7f0000000000)=0x2) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x61e3, &(0x7f0000000000)=0x2) unshare(0x40080) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x22, 0xa, 0x2) close(0x4) (async) close(0x4) 2.962193091s ago: executing program 1 (id=8852): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r4, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3fc}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8b}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004800}, 0x4008004) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 2.670388803s ago: executing program 1 (id=8855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r2}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0xff2f) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000001700000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @b={0x2, 0x3, 0x6, 0x1, 0x5, 0x9, 0x5, {}, 0xa1, 0x6, 0x5, 0x6, 0x5, "86ba71b441"}}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = accept$packet(r3, 0x0, &(0x7f0000000000)) getpeername$packet(r13, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) 2.059451224s ago: executing program 6 (id=8860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x4004002) 1.896497566s ago: executing program 1 (id=8861): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x2c}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x6, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x6}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)="ec28e6574aa987bb5ce8b8e85f9b4b619d1b1d300d3259c4c2bf9de96c67ca0b7385782646af8ce4a9e87e6b577dd147a6f4d520", &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 1.826208841s ago: executing program 3 (id=8862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) 1.618525244s ago: executing program 3 (id=8863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tun(r2, &(0x7f0000000200)={@void, @val={0x2, 0x1, 0x1, 0x1000, 0x81, 0x7}, @arp=@generic={0x306, 0x8035, 0x6, 0x7, 0x2, @local, "4c5549ba712864", @remote, "2b4948b6f521383710"}}, 0x2e) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2002, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x64040090}, 0x50) 1.543311323s ago: executing program 5 (id=8864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x4, 0x9}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.309373713s ago: executing program 6 (id=8865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) syz_genetlink_get_family_id$tipc(0x0, r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) 1.307148116s ago: executing program 3 (id=8866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x480000, &(0x7f00000001c0)={@_ha_fsid={[0x800, 0x8]}, {0x5, 0x80, 0xff, 0xfffffffffffffffa}}, 0x4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x1}, 0x1, &(0x7f0000000480)=[{0x2, 0x0, &(0x7f00000002c0)='syz0\x00', &(0x7f0000000340)="0905bbd51ab1da804a821ff3c0fd3ae1671727a139d582f9e86cce11", 0x1c}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r5, 0x2, 0x70bd2b, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x48080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000080}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 1.3060371s ago: executing program 5 (id=8867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x20004840, 0x0, 0x0) 1.152177971s ago: executing program 0 (id=8868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.139627529s ago: executing program 1 (id=8869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'virt_wifi0\x00', @multicast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 1.069303871s ago: executing program 5 (id=8870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r0, 0xffffe000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230800", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 1.068029734s ago: executing program 6 (id=8871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004}, 0x4880) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000100ac14144100000000010000001400020002000000e000000200000000000000000d0001007564703a73796a3200000000"], 0x54}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) (async, rerun: 64) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@dev, @loopback}, &(0x7f0000004180)=0xc) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000c0200000b00000006"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, 0x0, 0x0, 0x825f108c29c318}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r12}, 0x14) (async) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) 972.307515ms ago: executing program 0 (id=8872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x10000008, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x6, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x8a50bfc, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8000, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x4, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0xfffffffe, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x3, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0x2000000e, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) 898.782635ms ago: executing program 5 (id=8873): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000380)={0x9, 'syz0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x50}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 713.745481ms ago: executing program 6 (id=8874): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd700801dcdf250100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r2], 0x60}, 0x1, 0x400000000000000}, 0x40810) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 616.091227ms ago: executing program 3 (id=8875): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r7, &(0x7f0000006480)=[{{&(0x7f0000000180)=@can, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48010) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000600)={0x1d, r9, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close(0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2801038a229498fc}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r10, 0x423, 0x703d2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 533.229187ms ago: executing program 5 (id=8876): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="060000004d9070", 0x7) (async, rerun: 32) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r6, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) socket$unix(0x1, 0x2, 0x0) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={r1, 0x74}, 0x8) (async, rerun: 32) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) (rerun: 32) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r10, 0x8000000000000003}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x23, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000340)='GPL\x00', 0x80000001, 0x21, &(0x7f0000000080)=""/33, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x7, 0x64, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r0, r11}) 437.474672ms ago: executing program 6 (id=8877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 437.114297ms ago: executing program 3 (id=8878): r0 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) (async) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 343.664891ms ago: executing program 1 (id=8879): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000004cc0)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) socket$inet(0x2, 0x800, 0xfffffff8) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 268.129648ms ago: executing program 3 (id=8880): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async, rerun: 64) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x8, 0x2, 0x81, 0x101}, {0x1, 0x6, 0x7, 0x9}]}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000040000000000067907800000000ffffffff210090781200022829000024000000094bc7cb9eac1414aae0000000860800000000000244006ba1ac14141d00000000ac1414aa000000046401010200000003e000000200000081ac141426000080007f0000010000022e7f00000100010001e00000020000000a"], 0x0) (async) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) socket$kcm(0x11, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x1, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240088c5}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 81.462661ms ago: executing program 6 (id=8881): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000080)="9b5dc60226f98370f35b42b1f28d61b107d0b6d098de6442d97e968307e8c3b6e66cfba1ec1300db4005993a2aa7382b1d7b0f5554f109c6a95581a7b388742a25ef53e1c3c3c158cce375e34de46d0ef9388f6bfa4596eb35ee1b3398c05ca5ffb2ba4a4bad2684096f3878b8c339e84e3f64680f650a684107a763692e29ed5238f6daf56e9ba0cd0473f95005335139a2fa17a152a8f88fd426c54d228585fd049443be62bf1ae70062e7523687d2e03357f4529668e7e5a8b53aebcce1ccd2d990f2db789d1d5897e5cbcb222d5362f372d6fe067880e867ac50d199", 0xde, 0x40081d4, &(0x7f0000000180)={0xa, 0x4e24, 0xfc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0x2024, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x1194, 0x1, [@m_ipt={0x1190, 0x6, 0x0, 0x0, {{0x8}, {0x10b4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x800, 'filter\x00', 0x7, 0x9d, "89191747a1102592b65fdc6f79241fb5cfab991b79bd590053193a2b7fc3ec8b42e346cc9607b6a17b9fbb91b1117d62e48488829f9c8ff8312f716176ab03a168f1ac484391acc3d7e354c0f07d9453829e44869e498535acefae9c5cad8cf8e134fba9718c5aefc239ca6e5c88f1c970854f3f0030b758899dc15bd8f3d0e47f3bf3f5d055defb79cb444910e01309124dbbed90ba7648ef619de479c877d2fc8939e14978f08afef1dc0380ce7ff2c5ac68129e91c558c41b194e3fb6ab0a2695ff0a4b4da4aa45a3e9dd4d2037f36cf19a10566c414c70fd6013c5be2a2454622cd386f65114826751f78bd2f0f69fdacbb582018e12f26b74153614fa7e532a43014f563cb7a39ce2dfd958dbc5e0cbf295de24170e566c45486a1b1033b5abec9eb4b4e800387e36b53ad418dd94098c9c4e3ebb3f16a5c4aae592d441243d506bf882ea74664029a9f1e1a5483854269a64772a6d207ce2067a3ac9417906a8b4be1601496f943eed01c4bdf20349760350d4f68819b08c0364367e6064115253b2fa80bd8cdbd76356ef94238c78cbc71b95a30081ffc849dd549f76c82d35bc50780daccfc141d13b6e1b0e3be36fe1978464bc6bcac3b69473a9f790e304fff76a5de886187d0cc116b4b282a67d67b79b1f3d11242182c7b553d8e68c4ec1e9c67d85f6625ef8b3235257d62a6728b3c886ed3bdd86052335fb00fd115919ecf4d4d48b9848e21fa75dd798f26d932d0058ddeed443d1b0595ab0b3d3b43f03f553a380282536706c9435b136f1ce82a19e8088fe56477303e1e25b9792176b482e4817ce15d67e69628e91ca49f5b522c3d54f7563b0edd85d2f624f9bc7aa8a09e0ccfcec5b2a9aef99ed1322227117165462a9bfbdb1ed50ffd54a160d0b07767127d4423d15e29962e4ec94f1f042f3b1edfd3d4d0f5991fd1439c10f59c8597ae3d5bfb8c771a722150cb3d305d6aeb99c7d5e9d7fc867fd42378ce06ef17427f63638203f863d1a7ddf22052fafc3e7854874560092fb34ee769c4dbc95969809566e3263dabe6525a279df7c5f0e6ce69446d7c12bf64ee10f0cb1a0a35385df18e107d3a228c1ac6624f7aab24d98f0a4e68899cab1846c98fcb8e0d2aa9e80d7b191f2e74cc6a14ee30aab4441c3a0e13beaf49b90e898dd0978c4d3b521e7daf6e11a63fa80bd274c1519fa5b20b48ce34bea78e7b5b9d5cc994cf1da667231543d08c89e3dfb55e479ebc2995f4d114457763bcda544dab1d6d75a184ed3995ffa92c9cbe40861e6654bc6468d17eb7f27d0e923bea034588c73dab65af216a72e2eb4a2c9513ad32586833579f7c6dc3af290b32129bdc171e9061f1e4edb6b5f623dbb6a46b83adcb5647a8dd7823a9d57bde7a12ccf33d500af6c4fc25dacca4694b588acba3eb7e35f961897d1a04b86035087925b5eca57890cde2e28658245dd39313150f1a336045fbf4fa2ce767b7d9ab9a4b1651b62089ad4b16eb1a89f4d7d342aea00b354ff10bcc3a25a784745bf3352ef0fccd129c93825fed9ef0e46f366120005bc414bc1f1fe6edf19171564f7921640380aeecee6b8fd6e02f2485080a72768f999a4cfc83bb602049763785110af94e76f3f651a887248b5c30a707fdb36a9347875daa14d29e1d2fe73ac267b9b7952ad7a0e5e5b2dc2fd903278b588ea2a0eaf37b005cf56c794078ce30519ed027eb090630175e42206d4e22aa0344be03289005b82c70e981c4db23c90b45dc545e42bd6a26119c04f80f020cb8ec0c02418f4615a4cffaabb24d891c9c16dc997803cda7aed578968bd2e256594452e63a00642a85c8dc6e54bacda7b69bd315f95aa2b55f688c30dfdb8971798c7b795ca25ef201c25c4b13a9a816caac738bd49eb97191331d4be5306abe5d5ccce8c2be095b0cd6cd69b1a0494d5761fb1a66095d0a009df75b2bc3fd6115eb60debea5887bf8b9f8608cda3cdbc19a4df48cb444250a0ec47f5ece42a1aa0f4ba402bb10206fbc35d3d5053f3095ce5af6d082d96c27b430bfb35f8f4694dc8b0934c089ac3ea3e78ad7678e7318b548376ff899e23372494d05ca6c9de5afd67ee404aefb013ba3b9941a2876e7be622b78ca24e2e1c27092be6199745f29bc2110b2ab9ee8ee0409039a3afc0ffe64d34ffcf4e5470f32ed96fc6a2e30495934f1bb5b6d240c9917cf9704f4e2355b7186ac0249183c7ec282206172134a49ae6c40f3703d830251acbe459c3e6cc9cb8453774b17dc9ef0b46ef232e26e87e1b1ddf032feab47d5bc2a48e3d403396261537bfc4d833ef1c785436c52567c2e8aabf542043d756f02f56f87bc2c4d270f3852c382d3c4725564ad8f8a71a573447dc0106f2fb658f3bac177d09b0c18c69f5e92804d5b36b8343ba050961a2f0b9ca1f95305b5c22109aef867f8e00bb811bef53c159416af6c6f98f58f34e1d1acf51d9d939282b33d5f8da8eeee4d62da66477235b6ffea3b22162a5241a9a2d67439b58fdf9079e923f13e16cee6f8b1a89141b50ddd1c3b25938aa29f4fc6cafd51eaa3887356553cbbbd0061343df7eb62bb662d0665e2311839a04884118c542ec9f1ce43adb5f97cc7efaea7e119ab1991c9880a50bebafe784a7f0b5aca791c1b1288413e3d7b9e49bef80ff58f759f086741c3a89e80a22836f97372c58e01b519f183bc853cf9f8357c75792d6154aa807e553a8c76e91427a599c95e3a5495df2ee82c0d8b782bfdfd7a01fdff51437c6bab995e691ed49d73ced6dffa5b695db71cd7018183025bb0802868a6b2875a60d1962e7ab4d3d8d79eb1308da7af348610e0ec3831333383c1a615d1ff2c6212f140f5eef98cf492f10872fac603b8198bf5196bb7e48549223c8c32abfdf63f82fff92fc8ddb91ff3b7826de735393fe534aabe4e48c2ea0f4860ad20c423e09e4dc2f3226b837f5548dcf2fcae5f1fb1209e5928d69bcbc15e367f45e13a847ca5372a58968410bf6a9cb8840795d29ba49baacafced1dcef84fbfb02b4df01f4da86bbbe7a2e3e9bb40ec999ba18f015abd9372e783b8801f750e964e23ec73a41e07404431d3d8b67cadaed7bce21b037028a555ede329fd40a9522124cfd3472e406dd6b3efbf47f220fdfc8b5227c5d2324d220e0fd51242cc47eea84f7e921a6de3e97e7a3b3c2daaaaf00cb973d6f5b626e120ffd6d703f4108b73b6db759e6bb2a2d8b6c84f6626412ed2cb06ac027dbf94890d599067158b135eeed1c030c9cc4dfea454bede7595a1a3c8609c9ef197b1bdb4c8156687aa0cd95fef41a443a3dd8db4bbbc3d7e3ac466b6a3dbad409c1149d0d22fbf247532655ef9fc42a4837b18456e97d27034c5c0cafe65d938586f656b1971032dfa390572fec6ca3f257d9c3ce489f591aa53a3c156748a6418bc48e721e1a6b3a80fc8b7e4e38bd5dd133017da0c7393d8881c778a29ad9acf3ff2d9b4f261964f786fc742d9ce6ea0ffc4e93de4665cb464a9660e10c2bc9a2ccec3d53ecd8139554e5efac646846a741b8172aa90547151d02bfbf3df14661955f3f3589d72553b6e61e4004ddeda4e86bac935016899efaa5bd2e9010697a0a042b8b64eb779bd9a7e54550521425d1857d4298ac28ed8ca6bc5d351c3cc27fe8edcbd65810ce012855e8f1743d560995c7608a31e26de82ea30db89d576e7515f5ac19e3c9a9cd7580799baa6dd80a44ae9452a75283d5bf14413680a8908b43a71fada7e6e2af543cae7959216018f69129beefa633378eab7a9750887f8579b7545272655de44321f1967accfac2b9e300ed4a352071f89d8734ca4ac78def166108bb985031c992cc143f6314340a23441aaf59dd54b0b6bde84996b8e0d93e18da416780254c8b3b67c7e943d00b87f162b572ceae44fa9b859b96bfe3cab90e7b93692a54e53d01a0b1f68a7ed2eba60064c4a121d89756428f324b831b0b809de6389bebf7da2f1396edd5b905f8abae73cb4050fb23436974243505ced6a26f5d2b12728390de04135ad4a9239bafa68007119a9865c44453e24f660602389fcb399aa856e6fdf473c784f9e299ec0f7df5b7d57ddf41a076a3b569dfddb405aa598771c2db184dd345887bd18f95070601011f365e059d92d53d3c6477e891388f73c83583c5bed28e605ad0347b2c361eabc84e80dcc5a03be197d0dcdef2359e5c75619862b27d02fc4be4d993880c07f45de0afef5f9ac5596be5a23476fa53ea35849c2361dba06f7cae22dd71f4e7a2bd3ab3d3e2a852aed24329a25c9c356e592c933359e36cc9c0606a8148b81bebf1cd88d7da4ca5f5b81a2211bf645b4b9d9505333c2d9e2f9a17fa51e6692c83324cd8e65bdc38bac1f658e583c1081f2540a788abaf1c66ed1df980a7b67249143243cdd04a75f033e9582586cbd3bef7b8d86aa231f8cbba139a534e296933406585760e5eeed188246efdd88719ce5ebbc33093b49b743be62276612e98e62e2e2011348a95c570689d65ee17d50329741f4f7adbe9ded203c4021974a578a26c433b6215400375507d4d5ff6e0eb2148c81c873279452546652e8644b8731b8aa2cee35b0e8e3ff303873a6feeb749998f284980fadd4ffc0f60241c2d8a78e1fe3474e95a26e934037450d751cce6df2c4a4dafa21568b54317ec92bca767f6b4c7fea4aafab9d6c1733ce1094cb483999d173d61d900dc5f3cc11942affb5453ee7cd3e67f09d82fd4934dea52cfbd873fae442009c549e7ba9af68fb7641fdc2d24416eff30a72b741411e0c72e5233e37fc6d5f4c31f9059894b6df5968e0e1bfad57d7ce6c594373a86c4552b1a95980dfc33a7d781d01c70a4c76aca82fe2ca4b8e9a143118991d38c400a69bf0c24248f5e3fe80c1743e6f5296f9b8f3963a35d2a50e5d53c64cd530f4ece896a37af2a9939e60f3c8dca55adb568008968922ae8e22503fa6bd9dfcc2a35f7a2f0a228e4895fcf880b8d3c700eeea89f2dbb1fbe3642c7e5a198b490f6c0fca6bd06024ab5f71db02fab6e831a1a67bcf1ea89903ae64493354d8aee3108ff59674500a0f5df926a497f44d5662d6373f937dc96ccbfa211d636140377349877b4c91d42622e2bb6a1c97bf0a88d839169e801f3f24cefeb4457d064e8e4f7533610910b2e5f9b28742d30fcd294b72a0e3024bc8d0ee53150bde4960a8b9cc24b4899051793e0177aa16709f7a10401f07445b7f59d306653de79c3ecab720aa9dcc11ed6be3d92314846d5553dad8ddc6f9a7f922941319e0fbab4212874f9dc959c28e5637f298a8d37864fb4530078959dfc225e550d1414e4240c712c311d1d2e9f24c948795b9971c5fb585508d77a37ee55f2fc357622633f99820df71a08a4fd903a07c9fe153e2c3262043709d24706c006756b0f258b59a463e383432464cfb6804b73197905fd0abcabce3cc3538edfe8e319a4b86efc1f00bc8cbc7a32bae6c9ce0335f2649f7c5933cceb9e24432c9631a006781a47d687b9cddf198a175ba78f07d7d71378cbdf98bf51daba8bc405200e6555367db1562e54414c92febc696d22f2690094925ede8a3f1f2e180eefc3b4aac88cb9d9b52844af35944f7c3e85ea014a6e30280c879f2feb4bc04e7eeab1a742290d03a771910ca3448e42b1b99bbae97cb04bb0378ff3b212180fabf7b76311528cb26a49eb0d75c945d3a42e727eb9db4eee8e6f58d5d507d0e33552da4ce8d97b2fba65792d66d977d7610a3f1c6c4cd3db29bc709b7732f4e3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xb5, 0x6, "205c8883dc9c07ef246113fe39496e7dc1516dd1fb3f984692315359e777cabc9c2ae58becc6773242fd76006a5ecf4371133c8c64eeabf8dba315ebb2da60e606aeed56638db6cf39ce0d1fe6ecdce231e0b8098e7db26002d8a2b228f0cab4dc0154ae1488c04ede939125b9929de843e5a1e4d178de1ecbcd3d8d3ab21dbfe16003e95429a4c1e3d21709643855dc43fdf886ade6badb047f133d5ed7fe83c2e25b3cb9d9ddee3f4c4f9856136029a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xe7c, 0x1, [@m_ipt={0x268, 0x13, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x95, 0x6, {0xd, 'security\x00', 0x6, 0x7f, "de822b6f7708e451972022ce52ed7664c9f0967bc21250627d2575de6e5cfa24ce1e6040279970947063abf0a99e192a7d36b458b3c9a5716c62a9d0505da0b68f711a37bfd475c83603856b1134ecffc5496f615ea239f620fb4a8c9ec5b5693e54cfd4c49ccd419fe71b"}}, @TCA_IPT_TARG={0xe5, 0x6, {0xc, 'raw\x00', 0x0, 0x7f, "5bc9dd1f04e53bf27e3e69603bbadc5f6f909790805f554f1f24c05b12275eaff6d2ef52fb13faf4469ae27550cbb5ccaa037e18bce0bf4a142fff1025ece340da8091d8538fdd4680e89f0d814d7dfd9372e010c39b2ed5e2a1d0427cbab6fbed8ee5411e3ef29f9b3e3c159b0526d2712c628c71f7f183ca68f441def53750e36778b9389e22c24fbe239043ec4b609ce108bff8657e8b0c6208b2a758a6aac7e489753f94b7e3404d60911da47994999321253d8c1b5ce1becb"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x81, 0x6, "b907cf430c7132cd2bb94dab1bb2ebb4b351e2844ba30d1b7a524d7864fa18af96c421a0bf007d2b6c6a08d13535c97a1439ff76f54616feec91c88a27f4ad94d4414ac4d9e6305858b4dd430dd76a24dead1031e859eb616ece8e54387fa372589b7ed0e2a1d199b1deb405f471fbd90e4d914653c845a357403c2852"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xc10, 0x11, 0x0, 0x0, {{0x8}, {0xb2c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xb0d, 0x6, {0x6, 'security\x00', 0xff, 0x12, "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"}}]}, {0xbd, 0x6, "7aeb72fb05aed2b7250b4e304761d0d8e0dca642281104a39a3370a7cc751a130c57fcc80332f5013b30e682e632fafe646688ce1796cfa067f5174aad5efeb0e3ab81a13099335f4f32fa866fc03779764441b6007d60d0304beeb9dfa5dc91952d53c1422d84b1620f10fd46b0bfd944b02cbeafc8b8e37f2ff5dcc0989dfbe4d4269bff2552e4b5cf263711a36a0f296a16201a20e869b6bd4755ad90db11050b9e134331471f44b44ed24f655e919a1f964d6118cf1429"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2024}}, 0x4008800) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000600)="00128f6787bbda3e1597c5f656fa1f40", 0x10}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x4044800) (async) sendmmsg$alg(r4, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000600)="00128f6787bbda3e1597c5f656fa1f40", 0x10}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x4044800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) close(0x4) (async) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket(0x8, 0x3, 0x3) (async) r6 = socket(0x8, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x61e2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x61e2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x15) 81.095451ms ago: executing program 5 (id=8882): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @random="000400", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010101, {0x5, 0x4, 0x1, 0x32, 0x95, 0x66, 0x8, 0xfb, 0x21, 0x3, @broadcast, @empty}, "3b1222ab89563240"}}}}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x1, 0xb, 0x100, 0x4, 0xffffff81, 0x0, 0x7, 0x6ac}}) setsockopt$inet6_int(r0, 0x29, 0x90, &(0x7f0000000000)=0xfffffffe, 0x4) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) (async) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000140)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000540)=""/107, 0x6b}], 0x4, &(0x7f0000000600)=""/64, 0x40}, 0x91}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/111, 0x6f}], 0x1, &(0x7f0000000700)=""/94, 0x5e}, 0x1ff}], 0x2, 0x12100, &(0x7f0000000800)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) (async) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r2, r4, 0x2, 0x100000000000003) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @remote, 0x8}, 0x1c) 0s ago: executing program 1 (id=8883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) listen(r2, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r2, 0x3206}, {r1}], 0x2, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) kernel console output (not intermixed with test programs): e slave device specified does not support setting the MAC address [ 887.729202][T31482] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 887.747551][T31482] bond1: (slave ip6gre1): making interface the new active one [ 887.767457][T31482] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 887.955977][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7098'. [ 888.237472][T31514] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 888.299530][T31519] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7103'. [ 888.334262][T31519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7103'. [ 888.347691][T31519] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7103'. [ 889.153386][T31563] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7115'. [ 889.187033][T31563] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7115'. [ 889.214778][T31574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7118'. [ 889.399254][T31590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7119'. [ 889.448105][T31592] lo: entered allmulticast mode [ 889.516300][T31592] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.586498][T31592] bridge_slave_0 (unregistering): left allmulticast mode [ 889.607986][T31592] bridge_slave_0 (unregistering): left promiscuous mode [ 889.627734][T31592] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.898735][T31615] sock: sock_timestamping_bind_phc: sock not bind to device [ 890.170035][T24171] IPVS: starting estimator thread 0... [ 890.278834][T31634] IPVS: using max 27 ests per chain, 64800 per kthread [ 890.341335][T22941] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.438943][T31647] netlink: 'syz.3.7136': attribute type 1 has an invalid length. [ 890.469271][T31647] netlink: 'syz.3.7136': attribute type 1 has an invalid length. [ 890.774896][T31662] xt_TCPMSS: Only works on TCP SYN packets [ 890.904627][T31667] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 891.960409][T31729] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 892.085626][T31734] openvswitch: netlink: IP tunnel dst address not specified [ 892.332328][T31750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.411441][T31757] syzkaller0: entered promiscuous mode [ 892.417041][T31757] syzkaller0: entered allmulticast mode [ 893.949496][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 908.710795][T31800] xt_hashlimit: size too large, truncated to 1048576 [ 908.799063][T31801] __nla_validate_parse: 11 callbacks suppressed [ 908.799090][T31801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7177'. [ 908.903559][T31809] netlink: 'syz.3.7184': attribute type 1 has an invalid length. [ 908.919857][T31809] netlink: 'syz.3.7184': attribute type 3 has an invalid length. [ 908.946789][T31809] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7184'. [ 909.542359][T31840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7191'. [ 910.168678][T31863] netlink: 808 bytes leftover after parsing attributes in process `syz.3.7199'. [ 910.322115][T31866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7201'. [ 910.332243][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7201'. [ 910.745047][T31878] netlink: 'syz.6.7206': attribute type 9 has an invalid length. [ 910.762589][T31878] netlink: 'syz.6.7206': attribute type 1 has an invalid length. [ 910.861398][T31878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 910.916424][T31879] bond7: (slave geneve4): making interface the new active one [ 910.956878][T31879] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 911.027973][T31882] netlink: 'syz.5.7207': attribute type 9 has an invalid length. [ 911.071912][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7207'. [ 911.147895][T31883] netlink: 'syz.5.7207': attribute type 3 has an invalid length. [ 911.204273][T31883] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7207'. [ 911.282397][T22941] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.321628][T22941] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.362543][T22941] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.384480][T31894] netlink: 'syz.6.7210': attribute type 2 has an invalid length. [ 911.397371][T22941] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.784940][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7216'. [ 911.829752][T31916] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 912.227175][T31940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7223'. [ 912.309138][T31940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 912.370697][T31947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.903300][T31963] macvtap1: entered promiscuous mode [ 912.934352][T31963] macvtap1: entered allmulticast mode [ 913.472890][T31988] IPVS: length: 8 != 1152 [ 914.108438][T32018] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 914.135444][T32018] netlink: 'syz.3.7247': attribute type 2 has an invalid length. [ 914.174068][T32018] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 914.504098][T32007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.652779][T32042] __nla_validate_parse: 2 callbacks suppressed [ 914.652803][T32042] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7250'. [ 914.670783][T32042] netlink: 'syz.5.7250': attribute type 9 has an invalid length. [ 914.961760][T24193] lo speed is unknown, defaulting to 1000 [ 914.967872][T24193] syz0: Port: 1 Link DOWN [ 915.107136][T32054] openvswitch: netlink: IP tunnel dst address not specified [ 915.127315][T22933] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.144645][T22933] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 915.197128][T22933] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.248758][T22933] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 915.257899][T22933] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.277452][T22933] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 915.336912][T22933] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.359499][T22933] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 915.505999][T32073] netlink: 'syz.6.7259': attribute type 1 has an invalid length. [ 915.530510][T32073] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7259'. [ 915.853642][T32090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7263'. [ 915.879971][T32090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7263'. [ 915.973735][T32095] netlink: 'syz.5.7264': attribute type 1 has an invalid length. [ 916.078176][T32099] bond2: (slave gretap1): making interface the new active one [ 916.131912][T32099] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 916.181691][T32095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.712803][T32120] netlink: 'syz.5.7273': attribute type 1 has an invalid length. [ 916.797231][T32124] syzkaller0: entered promiscuous mode [ 916.803753][T32124] syzkaller0: entered allmulticast mode [ 916.815502][T32124] nbd: must specify a device to reconfigure [ 916.823938][T32124] tcf_pedit_act: 7 callbacks suppressed [ 916.823962][T32124] tc action pedit 'at' offset 257 out of bounds [ 917.104204][T32140] netlink: 'syz.3.7279': attribute type 58 has an invalid length. [ 917.153821][T32140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7279'. [ 917.222546][T32148] xt_hashlimit: size too large, truncated to 1048576 [ 917.323139][T32154] netlink: 'syz.1.7281': attribute type 1 has an invalid length. [ 917.507706][T32159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7283'. [ 917.815862][T32178] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7292'. [ 917.833017][T32178] netem: invalid attributes len -24 [ 917.853635][T32178] netem: change failed [ 917.922484][T32178] netlink: 'syz.3.7292': attribute type 1 has an invalid length. [ 917.945945][T32178] netlink: 272 bytes leftover after parsing attributes in process `syz.3.7292'. [ 918.191120][T32197] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7297'. [ 918.202566][T32196] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7297'. [ 918.387158][T32209] sctp: [Deprecated]: syz.6.7301 (pid 32209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.387158][T32209] Use struct sctp_sack_info instead [ 918.503670][T32211] veth7: entered promiscuous mode [ 918.509791][T32209] sctp: [Deprecated]: syz.6.7301 (pid 32209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.509791][T32209] Use struct sctp_sack_info instead [ 918.534219][T32207] veth7: left promiscuous mode [ 918.765268][T32235] xt_l2tp: invalid flags combination: 0 [ 921.370498][T22914] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 923.195011][T22914] bond4: left allmulticast mode [ 923.229807][T22914] bond4: left promiscuous mode [ 923.237690][T22914] bridge3: port 1(bond4) entered disabled state [ 923.302955][T22914] veth9: left allmulticast mode [ 923.318199][T22914] veth9: left promiscuous mode [ 923.336605][T22914] bridge6: port 2(veth9) entered disabled state [ 923.385961][T22914] veth7: left allmulticast mode [ 923.400105][T22914] veth7: left promiscuous mode [ 923.419362][T22914] bridge6: port 1(veth7) entered disabled state [ 923.460451][T32298] validate_nla: 6 callbacks suppressed [ 923.460476][T32298] netlink: 'syz.6.7326': attribute type 11 has an invalid length. [ 923.507369][T32298] __nla_validate_parse: 6 callbacks suppressed [ 923.507462][T32298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7326'. [ 923.597591][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7328'. [ 923.986463][T22914] bond7 (unregistering): (slave geneve3): Releasing active interface [ 924.199757][T22914] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 924.211033][T22914] bridge4 (unregistering): left promiscuous mode [ 924.352476][T22914] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 924.367483][T22914] bond0 (unregistering): Released all slaves [ 924.384635][T22914] bond1 (unregistering): Released all slaves [ 924.405700][T22914] team0: Port device bond2 removed [ 924.412428][T22914] bond2 (unregistering): Released all slaves [ 924.430356][T22914] bond3 (unregistering): Released all slaves [ 924.453869][T22914] bond4 (unregistering): Released all slaves [ 924.469248][T22914] bond5 (unregistering): Released all slaves [ 924.487728][T22914] bond6 (unregistering): Released all slaves [ 924.515477][T22914] bond7 (unregistering): Released all slaves [ 924.531325][T22914] bond8 (unregistering): Released all slaves [ 924.574939][T32298] netlink: 'syz.6.7326': attribute type 11 has an invalid length. [ 924.614033][T32298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7326'. [ 924.739561][T25173] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.788355][T22914] : left promiscuous mode [ 924.865808][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7331'. [ 924.889620][T25173] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.918425][T25173] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.955374][T25173] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.966280][T32323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7333'. [ 925.062848][T32328] netlink: 'syz.5.7335': attribute type 1 has an invalid length. [ 925.117950][T32328] bond3: entered promiscuous mode [ 925.124090][T32328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.162272][T22914] IPVS: stopping master sync thread 22673 ... [ 925.243744][T32336] netlink: 'syz.6.7337': attribute type 1 has an invalid length. [ 925.275650][T32332] bond3: (slave bridge1): making interface the new active one [ 925.303638][T32332] bridge1: entered promiscuous mode [ 925.314289][T32332] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 925.356889][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 925.380890][T32338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7338'. [ 925.418420][T32331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 925.432274][T32336] 8021q: adding VLAN 0 to HW filter on device bond8 [ 925.455952][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 925.468009][T32338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7338'. [ 925.481165][T22933] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.532962][T22933] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.639209][T22933] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.648054][T22933] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.962825][T32360] mac80211_hwsim hwsim61 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 926.371844][T32376] veth1_macvtap: left promiscuous mode [ 926.388977][T32376] macsec0: entered promiscuous mode [ 926.394282][T32376] macsec0: entered allmulticast mode [ 926.415749][T32371] syzkaller0: entered promiscuous mode [ 926.422198][T32371] syzkaller0: entered allmulticast mode [ 926.433428][T32382] veth1_macvtap: entered promiscuous mode [ 926.444622][T32382] veth1_macvtap: entered allmulticast mode [ 926.451566][T32382] macsec0: left promiscuous mode [ 926.457094][T32382] macsec0: left allmulticast mode [ 926.463286][T32382] veth1_macvtap: left allmulticast mode [ 926.882360][T32409] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 927.021880][T32393] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.029864][T32393] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.234358][T32393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.248218][T32393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.386174][T32418] netlink: 'syz.3.7359': attribute type 2 has an invalid length. [ 927.560073][T22914] veth1_macvtap: left promiscuous mode [ 927.565683][T22914] veth0_macvtap: left promiscuous mode [ 927.577974][T22914] veth1_vlan: left promiscuous mode [ 927.922752][T22914] team0 (unregistering): Port device batadv0 removed [ 928.193983][T22915] wlan1: Trigger new scan to find an IBSS to join [ 928.672434][T22941] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.682104][T22941] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.795357][T22941] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.845116][T22941] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.877415][T22941] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.918453][T22941] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.085947][T22941] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.104541][T22941] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.433717][T32507] __nla_validate_parse: 8 callbacks suppressed [ 929.433743][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7374'. [ 929.484376][T32495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7372'. [ 929.496797][T32501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7373'. [ 929.688747][T22914] IPVS: stop unused estimator thread 0... [ 929.852330][T32519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7376'. [ 929.942237][T32526] ipt_rpfilter: unknown options [ 929.986716][T32529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.155323][T32539] netlink: 'syz.3.7381': attribute type 1 has an invalid length. [ 930.275714][T32545] delete_channel: no stack [ 930.317139][T32539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 930.408141][T32545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7383'. [ 930.475969][T32553] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7385'. [ 930.498143][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7384'. [ 930.523008][T32553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7385'. [ 930.696261][T32563] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7387'. [ 930.699224][T32568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7389'. [ 930.835201][T32565] netlink: 'syz.6.7388': attribute type 12 has an invalid length. [ 930.869881][T32565] netlink: 'syz.6.7388': attribute type 11 has an invalid length. [ 931.250711][T32616] netlink: 'syz.0.7397': attribute type 22 has an invalid length. [ 931.432652][T22908] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.442577][T22908] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.453961][T32616] netlink: 'syz.0.7397': attribute type 22 has an invalid length. [ 931.475384][T22908] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.534141][T22908] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.683368][T32640] netlink: 'syz.3.7402': attribute type 1 has an invalid length. [ 931.724536][T32640] bond4: entered promiscuous mode [ 931.730738][T32640] bond4: entered allmulticast mode [ 931.745773][T32640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 931.814758][T32640] bond4 (unregistering): Released all slaves [ 931.892004][T32647] syzkaller0: entered promiscuous mode [ 931.897676][T32647] syzkaller0: entered allmulticast mode [ 931.917870][T32653] l2tp_ppp: sess 2/0: no socket in recv [ 932.185614][T32663] netlink: 'syz.3.7410': attribute type 83 has an invalid length. [ 932.581746][T32678] netlink: 'syz.0.7415': attribute type 1 has an invalid length. [ 932.846277][T32695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 932.867948][T32697] netlink: 'syz.0.7420': attribute type 1 has an invalid length. [ 932.987631][T32695] bond9 (unregistering): Released all slaves [ 933.155787][T22908] wlan1: Trigger new scan to find an IBSS to join [ 933.184720][T32709] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 933.198887][T32709] bond5 (unregistering): Released all slaves [ 933.271917][T32715] syz_tun: entered allmulticast mode [ 933.306582][T32709] netlink: 'syz.5.7423': attribute type 4 has an invalid length. [ 933.344562][T22908] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.387230][T22908] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.486720][T22908] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.520080][T22908] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.913429][T32736] nbd: must specify an index to disconnect [ 934.116117][ T59] wlan1: Creating new IBSS network, BSSID 46:01:bf:c5:01:7c [ 934.676176][ T311] __nla_validate_parse: 22 callbacks suppressed [ 934.676194][ T311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7445'. [ 934.732591][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7446'. [ 934.979478][ T329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7450'. [ 935.011740][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7452'. [ 935.236120][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7457'. [ 935.274271][ T347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7456'. [ 935.338984][ T355] validate_nla: 1 callbacks suppressed [ 935.339012][ T355] netlink: 'syz.5.7459': attribute type 1 has an invalid length. [ 935.374853][ T360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 935.511038][ T355] 8021q: adding VLAN 0 to HW filter on device bond6 [ 935.599639][ T366] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 935.755076][ T380] netlink: 'syz.3.7468': attribute type 3 has an invalid length. [ 935.779854][ T381] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 935.966623][ T396] netlink: 'syz.1.7472': attribute type 1 has an invalid length. [ 936.005941][ T400] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7470'. [ 936.071747][ T396] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 936.094940][ T403] ksmbd: Unknown IPC event: 8, ignore. [ 936.110089][ T396] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 936.136413][ T396] bond3: (slave ip6gre2): making interface the new active one [ 936.147422][ T396] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 936.157877][ T400] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7470'. [ 936.366773][ T418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7477'. [ 936.708801][ T442] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7486'. [ 936.912328][ T452] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 937.453135][ T481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.956932][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 938.864481][ T564] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 938.944265][ T569] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 939.112710][ T573] syzkaller0: entered promiscuous mode [ 939.120286][ T573] syzkaller0: entered allmulticast mode [ 939.130210][ T573] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 939.713214][ T603] netlink: 'syz.6.7534': attribute type 2 has an invalid length. [ 940.065100][ T619] __nla_validate_parse: 11 callbacks suppressed [ 940.065131][ T619] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.7539'. [ 940.129610][ T619] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 940.265906][ T623] IPVS: set_ctl: invalid protocol: 43 172.20.20.49:20003 [ 940.313533][ T623] syzkaller0: entered promiscuous mode [ 940.328561][ T623] syzkaller0: entered allmulticast mode [ 940.387827][ T635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7545'. [ 940.402195][ T636] netlink: 'syz.0.7544': attribute type 6 has an invalid length. [ 940.426380][ T636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7544'. [ 940.529632][ T636] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7544'. [ 940.798913][ T652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.223360][ T676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7557'. [ 941.257756][ T681] netlink: 'syz.5.7559': attribute type 3 has an invalid length. [ 941.267594][ T680] netlink: 'syz.5.7559': attribute type 3 has an invalid length. [ 941.290131][ T677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7557'. [ 941.533636][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7561'. [ 941.683753][ T706] syzkaller1: entered promiscuous mode [ 941.690608][ T706] syzkaller1: entered allmulticast mode [ 944.036446][ T669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.276858][ T723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7570'. [ 944.333704][ T729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7573'. [ 944.473893][ T736] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.7574'. [ 944.863954][ T757] macvtap1: entered promiscuous mode [ 944.891415][ T757] macvtap1: entered allmulticast mode [ 944.910622][ T757] veth1_vlan: entered allmulticast mode [ 945.150704][ T719] Bluetooth: hci1: command 0x0406 tx timeout [ 945.960245][ T813] __nla_validate_parse: 1 callbacks suppressed [ 945.960270][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7591'. [ 946.033995][ T816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 946.330413][ T819] syzkaller0: entered promiscuous mode [ 946.340849][ T819] syzkaller0: entered allmulticast mode [ 948.716485][ T800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.140868][ T865] sctp: [Deprecated]: syz.3.7605 (pid 865) Use of int in max_burst socket option deprecated. [ 949.140868][ T865] Use struct sctp_assoc_value instead [ 949.302638][ T870] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7606'. [ 950.241052][ T890] netlink: 'syz.3.7615': attribute type 83 has an invalid length. [ 950.311008][ T890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7615'. [ 950.342998][ T901] netlink: 'syz.5.7616': attribute type 2 has an invalid length. [ 950.396509][ T901] netlink: 'syz.5.7616': attribute type 2 has an invalid length. [ 950.667062][ T920] syzkaller0: entered promiscuous mode [ 950.673085][ T920] syzkaller0: entered allmulticast mode [ 950.741752][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7624'. [ 950.855010][ T5830] Bluetooth: hci2: link tx timeout [ 950.863879][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.876816][ T5830] Bluetooth: hci2: link tx timeout [ 950.882859][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.892011][ T5830] Bluetooth: hci2: link tx timeout [ 950.897378][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.905525][ T5830] Bluetooth: hci2: link tx timeout [ 950.916341][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.925897][ T5830] Bluetooth: hci2: link tx timeout [ 950.931164][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.939102][ T5830] Bluetooth: hci2: link tx timeout [ 950.944366][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.953257][ T5830] Bluetooth: hci2: link tx timeout [ 950.958633][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.967213][ T5830] Bluetooth: hci2: link tx timeout [ 950.974631][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.983638][ T5830] Bluetooth: hci2: link tx timeout [ 950.990270][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 950.999355][ T5830] Bluetooth: hci2: link tx timeout [ 951.004681][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.013148][ T5830] Bluetooth: hci2: link tx timeout [ 951.018503][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.026402][ T5830] Bluetooth: hci2: link tx timeout [ 951.031654][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.040290][ T5830] Bluetooth: hci2: link tx timeout [ 951.045508][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.066888][ T5830] Bluetooth: hci2: link tx timeout [ 951.073096][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.081094][ T5830] Bluetooth: hci2: link tx timeout [ 951.086255][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.120234][ T948] netlink: 'syz.5.7625': attribute type 1 has an invalid length. [ 951.134654][ T5830] Bluetooth: hci2: link tx timeout [ 951.141209][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.149774][ T5830] Bluetooth: hci2: link tx timeout [ 951.154966][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.183444][ T5830] Bluetooth: hci2: link tx timeout [ 951.188908][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.196728][ T5830] Bluetooth: hci2: link tx timeout [ 951.203351][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.265000][ T956] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7627'. [ 951.292277][ T956] netlink: 'syz.6.7627': attribute type 2 has an invalid length. [ 951.302483][ T948] 8021q: adding VLAN 0 to HW filter on device bond7 [ 951.314550][ T959] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7627'. [ 951.325225][ T959] netlink: 'syz.6.7627': attribute type 2 has an invalid length. [ 951.360822][ T943] bond7: (slave gretap2): making interface the new active one [ 951.405256][ T943] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 951.426272][ T958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7628'. [ 951.441934][ T958] veth0_macvtap: left promiscuous mode [ 951.683178][T22936] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.708021][T22936] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.750815][ T976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7633'. [ 951.763658][T22936] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.775249][T22936] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.104260][ T994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7638'. [ 952.322925][ T1004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 952.395444][T22910] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 952.420258][ T1004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 952.446649][ T1009] bond4: option miimon: invalid value (18446744073709551585) [ 952.462137][ T1009] bond4: option miimon: allowed values 0 - 2147483647 [ 952.471815][ T1009] bond4 (unregistering): Released all slaves [ 952.758084][ T1029] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 952.767837][ T1032] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 952.776057][ T1029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.800076][ T1032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.913663][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 952.940967][ T1040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7648'. [ 953.011022][ T1044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7649'. [ 953.066715][ T1046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7652'. [ 953.091429][ T1053] netlink: 'syz.1.7651': attribute type 64 has an invalid length. [ 953.330471][ T1076] netlink: 'syz.1.7658': attribute type 9 has an invalid length. [ 953.332949][ T1069] veth1: left allmulticast mode [ 953.599941][ T1089] xt_TPROXY: Can be used only with -p tcp or -p udp [ 953.814862][ T1101] netlink: 'syz.5.7668': attribute type 21 has an invalid length. [ 953.836530][ T1100] vlan3: entered allmulticast mode [ 953.945557][ T1101] syzkaller1: entered promiscuous mode [ 953.965159][ T1101] syzkaller1: entered allmulticast mode [ 954.110382][ T1112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.747791][ T1150] Unknown options in mask b7f2 [ 955.335348][ T1171] x_tables: duplicate underflow at hook 3 [ 955.499294][ T1167] syz_tun (unregistering): left allmulticast mode [ 956.560377][ T1223] IPv6: sit1: Disabled Multicast RS [ 956.608591][ T1223] sit1: entered allmulticast mode [ 956.670998][ T1230] __nla_validate_parse: 18 callbacks suppressed [ 956.671026][ T1230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7701'. [ 956.752277][ T1230] tipc: Enabling of bearer rejected, failed to enable media [ 957.130339][ T1263] netlink: 'syz.0.7709': attribute type 2 has an invalid length. [ 957.162401][ T1263] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7709'. [ 957.209526][ T1263] netlink: 'syz.0.7709': attribute type 11 has an invalid length. [ 957.332704][T24171] IPVS: starting estimator thread 0... [ 957.366292][ T1271] IPVS: ovf: TCP 172.20.20.170:0 - no destination available [ 957.465555][ T1273] IPVS: using max 32 ests per chain, 76800 per kthread [ 958.337074][ T1341] netlink: 'syz.5.7723': attribute type 1 has an invalid length. [ 958.375073][ T1341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7723'. [ 958.421793][ T1348] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7724'. [ 958.656290][ T1362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7727'. [ 958.864568][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 958.884670][ T1377] netlink: 'syz.3.7735': attribute type 2 has an invalid length. [ 958.904992][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 958.925284][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 958.954547][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 958.980810][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 958.991119][ T1383] atomic_op ffff888037dee998 conn xmit_atomic 0000000000000000 [ 958.999172][ T1377] netlink: 'syz.3.7735': attribute type 1 has an invalid length. [ 959.243509][ T1391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7738'. [ 959.285353][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7740'. [ 959.298727][ T1391] openvswitch: netlink: Flow actions attr not present in new flow. [ 959.353847][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7740'. [ 959.490227][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7740'. [ 959.516891][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7743'. [ 959.596457][ T1405] syzkaller0: entered promiscuous mode [ 959.607021][ T1405] syzkaller0: entered allmulticast mode [ 959.621299][ T1415] netlink: 'syz.5.7745': attribute type 1 has an invalid length. [ 959.845892][ T1420] bond8: (slave geneve2): making interface the new active one [ 959.855881][ T1420] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 960.015679][T11283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 960.025596][T11283] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 960.376789][ T1460] ipt_REJECT: TCP_RESET invalid for non-tcp [ 960.702111][T11283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 960.711301][T11283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 960.813369][ T1475] netlink: 'syz.3.7758': attribute type 11 has an invalid length. [ 960.834637][ T1475] netlink: 'syz.3.7758': attribute type 11 has an invalid length. [ 961.134414][ T1492] FAULT_INJECTION: forcing a failure. [ 961.134414][ T1492] name failslab, interval 1, probability 0, space 0, times 0 [ 961.228695][ T1492] CPU: 1 UID: 0 PID: 1492 Comm: syz.3.7761 Not tainted syzkaller #0 PREEMPT(full) [ 961.228729][ T1492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 961.228746][ T1492] Call Trace: [ 961.228765][ T1492] [ 961.228777][ T1492] dump_stack_lvl+0xe8/0x150 [ 961.228819][ T1492] should_fail_ex+0x412/0x560 [ 961.228862][ T1492] should_failslab+0xa8/0x100 [ 961.228896][ T1492] __kmalloc_noprof+0xe8/0x760 [ 961.228923][ T1492] ? rcu_is_watching+0x15/0xb0 [ 961.228955][ T1492] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 961.228998][ T1492] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 961.229040][ T1492] genl_family_rcv_msg_doit+0xd9/0x330 [ 961.229073][ T1492] ? __asan_memcpy+0x40/0x70 [ 961.229100][ T1492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 961.229139][ T1492] ? apparmor_capable+0x126/0x170 [ 961.229167][ T1492] ? bpf_lsm_capable+0x9/0x20 [ 961.229198][ T1492] ? security_capable+0x7e/0x2c0 [ 961.229240][ T1492] genl_rcv_msg+0x61c/0x7a0 [ 961.229280][ T1492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.229311][ T1492] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 961.229340][ T1492] ? __pfx_nl802154_set_channel+0x10/0x10 [ 961.229367][ T1492] ? __pfx_nl802154_post_doit+0x10/0x10 [ 961.229395][ T1492] ? __lock_acquire+0x6b5/0x2cf0 [ 961.229440][ T1492] netlink_rcv_skb+0x232/0x4b0 [ 961.229467][ T1492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.229502][ T1492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 961.229549][ T1492] ? down_read+0x272/0x2e0 [ 961.229569][ T1492] ? genl_rcv+0xd/0x40 [ 961.229602][ T1492] genl_rcv+0x28/0x40 [ 961.229632][ T1492] netlink_unicast+0x80f/0x9b0 [ 961.229665][ T1492] ? __pfx_netlink_unicast+0x10/0x10 [ 961.229691][ T1492] ? netlink_sendmsg+0x650/0xb40 [ 961.229719][ T1492] ? skb_put+0x11b/0x210 [ 961.229760][ T1492] netlink_sendmsg+0x813/0xb40 [ 961.229797][ T1492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.229828][ T1492] ? aa_sock_msg_perm+0xf1/0x1b0 [ 961.229865][ T1492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 961.229895][ T1492] ____sys_sendmsg+0x972/0x9f0 [ 961.229938][ T1492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.229981][ T1492] ? import_iovec+0x73/0xa0 [ 961.230014][ T1492] ___sys_sendmsg+0x2a5/0x360 [ 961.230053][ T1492] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.230127][ T1492] ? __fget_files+0x2a/0x420 [ 961.230148][ T1492] ? __fget_files+0x3a0/0x420 [ 961.230181][ T1492] __x64_sys_sendmsg+0x1bd/0x2a0 [ 961.230215][ T1492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 961.230258][ T1492] ? __pfx_ksys_write+0x10/0x10 [ 961.230299][ T1492] do_syscall_64+0x14d/0xf80 [ 961.230331][ T1492] ? trace_irq_disable+0x3b/0x150 [ 961.230351][ T1492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.230375][ T1492] ? clear_bhb_loop+0x40/0x90 [ 961.230404][ T1492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.230426][ T1492] RIP: 0033:0x7fba8fb9c819 [ 961.230448][ T1492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.230467][ T1492] RSP: 002b:00007fba909b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.230493][ T1492] RAX: ffffffffffffffda RBX: 00007fba8fe15fa0 RCX: 00007fba8fb9c819 [ 961.230511][ T1492] RDX: 0000000000048814 RSI: 0000200000000580 RDI: 0000000000000004 [ 961.230526][ T1492] RBP: 00007fba909b2090 R08: 0000000000000000 R09: 0000000000000000 [ 961.230541][ T1492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.230555][ T1492] R13: 00007fba8fe16038 R14: 00007fba8fe15fa0 R15: 00007fffd0275d78 [ 961.230592][ T1492] [ 961.819512][ T1506] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 961.828778][ T1506] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 961.930148][ T1514] __nla_validate_parse: 12 callbacks suppressed [ 961.930173][ T1514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7768'. [ 961.946165][ T1514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7768'. [ 962.236858][ T1530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7772'. [ 962.277462][ T1530] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7772'. [ 962.506173][ T1547] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7776'. [ 962.546084][ T1547] validate_nla: 3 callbacks suppressed [ 962.546110][ T1547] netlink: 'syz.3.7776': attribute type 7 has an invalid length. [ 962.572979][ T1542] can: request_module (can-proto-0) failed. [ 962.608676][ T1547] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7776'. [ 962.760617][ T1551] FAULT_INJECTION: forcing a failure. [ 962.760617][ T1551] name failslab, interval 1, probability 0, space 0, times 0 [ 962.793393][ T1558] netlink: 'syz.1.7779': attribute type 1 has an invalid length. [ 962.802499][ T1551] CPU: 1 UID: 0 PID: 1551 Comm: syz.6.7777 Not tainted syzkaller #0 PREEMPT(full) [ 962.802532][ T1551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.802547][ T1551] Call Trace: [ 962.802556][ T1551] [ 962.802567][ T1551] dump_stack_lvl+0xe8/0x150 [ 962.802604][ T1551] should_fail_ex+0x412/0x560 [ 962.802647][ T1551] should_failslab+0xa8/0x100 [ 962.802681][ T1551] __kmalloc_cache_noprof+0x88/0x660 [ 962.802712][ T1551] ? hwsim_update_pib+0x88/0x450 [ 962.802743][ T1551] hwsim_update_pib+0x88/0x450 [ 962.802770][ T1551] ? hwsim_hw_channel+0x50/0x2b0 [ 962.802795][ T1551] hwsim_hw_channel+0x178/0x2b0 [ 962.802832][ T1551] ieee802154_set_channel+0x2a1/0x570 [ 962.802869][ T1551] nl802154_set_channel+0x24d/0x450 [ 962.802906][ T1551] genl_family_rcv_msg_doit+0x22a/0x330 [ 962.802943][ T1551] ? __asan_memcpy+0x40/0x70 [ 962.802971][ T1551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 962.803019][ T1551] ? bpf_lsm_capable+0x9/0x20 [ 962.803051][ T1551] ? security_capable+0x7e/0x2c0 [ 962.803093][ T1551] genl_rcv_msg+0x61c/0x7a0 [ 962.803133][ T1551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.803164][ T1551] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 962.803190][ T1551] ? __pfx_nl802154_set_channel+0x10/0x10 [ 962.803219][ T1551] ? __pfx_nl802154_post_doit+0x10/0x10 [ 962.803245][ T1551] ? __lock_acquire+0x6b5/0x2cf0 [ 962.803288][ T1551] netlink_rcv_skb+0x232/0x4b0 [ 962.803315][ T1551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.803350][ T1551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.803398][ T1551] ? down_read+0x272/0x2e0 [ 962.803418][ T1551] ? genl_rcv+0xd/0x40 [ 962.803452][ T1551] genl_rcv+0x28/0x40 [ 962.803481][ T1551] netlink_unicast+0x80f/0x9b0 [ 962.803516][ T1551] ? __pfx_netlink_unicast+0x10/0x10 [ 962.803542][ T1551] ? netlink_sendmsg+0x650/0xb40 [ 962.803567][ T1551] ? skb_put+0x11b/0x210 [ 962.803602][ T1551] netlink_sendmsg+0x813/0xb40 [ 962.803641][ T1551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.803671][ T1551] ? aa_sock_msg_perm+0xf1/0x1b0 [ 962.803708][ T1551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.803737][ T1551] ____sys_sendmsg+0x972/0x9f0 [ 962.803778][ T1551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.803818][ T1551] ? import_iovec+0x73/0xa0 [ 962.803859][ T1551] ___sys_sendmsg+0x2a5/0x360 [ 962.803895][ T1551] ? __pfx____sys_sendmsg+0x10/0x10 [ 962.803965][ T1551] ? __fget_files+0x2a/0x420 [ 962.803985][ T1551] ? __fget_files+0x3a0/0x420 [ 962.804019][ T1551] __x64_sys_sendmsg+0x1bd/0x2a0 [ 962.804055][ T1551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 962.804099][ T1551] ? __pfx_ksys_write+0x10/0x10 [ 962.804141][ T1551] do_syscall_64+0x14d/0xf80 [ 962.804173][ T1551] ? trace_irq_disable+0x3b/0x150 [ 962.804193][ T1551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.804217][ T1551] ? clear_bhb_loop+0x40/0x90 [ 962.804246][ T1551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.804269][ T1551] RIP: 0033:0x7fb92519c819 [ 962.804291][ T1551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.804312][ T1551] RSP: 002b:00007fb9260dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.804337][ T1551] RAX: ffffffffffffffda RBX: 00007fb925415fa0 RCX: 00007fb92519c819 [ 962.804353][ T1551] RDX: 0000000000048814 RSI: 0000200000000580 RDI: 0000000000000004 [ 962.804367][ T1551] RBP: 00007fb9260dc090 R08: 0000000000000000 R09: 0000000000000000 [ 962.804381][ T1551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.804395][ T1551] R13: 00007fb925416038 R14: 00007fb925415fa0 R15: 00007ffcdfd02eb8 [ 962.804435][ T1551] [ 962.965958][ T1565] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7780'. [ 963.215270][ T1558] bond4: entered promiscuous mode [ 963.221228][ T1558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 963.522379][ T1577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7782'. [ 963.830572][ T1590] x_tables: duplicate underflow at hook 1 [ 963.841850][ T1592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.990702][ T1598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7788'. [ 964.030224][ T1606] batadv0: mtu less than device minimum [ 964.164342][ T1608] netlink: 'syz.0.7790': attribute type 2 has an invalid length. [ 964.209420][ T1608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7790'. [ 965.456281][ T1668] tipc: Enabling of bearer rejected, media not registered [ 965.747117][ T1682] IPv6: sit1: Disabled Multicast RS [ 965.886269][ T1689] netlink: 'syz.6.7805': attribute type 1 has an invalid length. [ 966.030850][ T1697] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 966.064858][ T1697] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 966.079737][ T1697] bond10: (slave ip6gre1): making interface the new active one [ 966.092995][ T1697] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 966.102568][ T1686] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 966.139232][ T1686] bond5: (slave lo): Enslaving as an active interface with an up link [ 966.151096][ T1706] netlink: 'syz.3.7809': attribute type 21 has an invalid length. [ 966.182456][ T1686] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 966.207503][ T1702] hsr_slave_0: left promiscuous mode [ 966.224768][ T1702] hsr_slave_1: left promiscuous mode [ 967.215184][ T1754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.244565][ T1756] netlink: 'syz.6.7823': attribute type 21 has an invalid length. [ 967.270719][ T1756] __nla_validate_parse: 10 callbacks suppressed [ 967.270741][ T1756] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7823'. [ 967.301738][ T1754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7822'. [ 967.342382][ T1763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7825'. [ 967.356242][ T1756] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 967.391098][T22936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 967.654759][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7831'. [ 967.707582][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7831'. [ 967.874724][T22936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.887002][T22936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.920507][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7836'. [ 967.973666][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7836'. [ 968.613030][ T1834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7845'. [ 968.652388][ T1838] netlink: 'syz.5.7848': attribute type 7 has an invalid length. [ 969.097510][ T1847] ipvlan2: entered allmulticast mode [ 969.124680][ T1847] batman_adv: batadv0: Adding interface: ipvlan2 [ 969.144921][ T1847] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.197666][ T1847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.230852][ T1851] netlink: 'syz.5.7852': attribute type 3 has an invalid length. [ 969.283343][ T1847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.283691][ T1851] netlink: 'syz.5.7852': attribute type 3 has an invalid length. [ 969.303115][ T1847] batman_adv: batadv0: Interface activated: ipvlan2 [ 969.326991][ T1854] vcan0: entered promiscuous mode [ 969.333985][ T1854] vcan0: entered allmulticast mode [ 969.343928][ T1851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7852'. [ 969.436815][ T1858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 970.152430][ T1877] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 970.169716][ T1877] bond8 (unregistering): Released all slaves [ 970.739739][ T1904] veth0_to_team: entered allmulticast mode [ 970.906767][ T1901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.931036][ T1909] openvswitch: netlink: Unknown nsh attribute 0 [ 971.151058][T11283] wlan1: Trigger new scan to find an IBSS to join [ 971.165507][ T1901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.357829][ T1901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.433211][ T1928] netlink: 'syz.5.7871': attribute type 5 has an invalid length. [ 971.567274][ T1901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.844325][T22941] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.927063][T22941] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.943324][T22941] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.023590][T22941] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.711919][ T1990] __nla_validate_parse: 6 callbacks suppressed [ 972.711949][ T1990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7891'. [ 972.743135][ T1993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7892'. [ 972.939887][ T1999] syzkaller1: entered promiscuous mode [ 972.969247][ T1999] syzkaller1: entered allmulticast mode [ 973.024604][ T2005] netlink: 'syz.3.7897': attribute type 10 has an invalid length. [ 973.038788][ T2005] mac80211_hwsim hwsim68 wlan1: left allmulticast mode [ 973.053729][ T2005] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 973.089901][ T2005] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 973.203020][ T2015] Cannot find del_set index 1 as target [ 973.861416][ T2052] –: renamed from vxcan1 (while UP) [ 973.867098][ T2043] xt_hashlimit: size too large, truncated to 1048576 [ 973.976200][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7913'. [ 973.993511][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7913'. [ 974.026602][ T2057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7913'. [ 974.191698][T22926] wlan1: Trigger new scan to find an IBSS to join [ 974.362248][ T2082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7920'. [ 974.378099][ T2082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7920'. [ 974.816051][ T2107] netlink: 'syz.0.7929': attribute type 21 has an invalid length. [ 974.869590][ T2110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7930'. [ 974.943318][ T2115] netlink: 'syz.1.7932': attribute type 12 has an invalid length. [ 975.137049][ T2123] tap0: tun_chr_ioctl cmd 1074025676 [ 975.152455][T22908] wlan1: Trigger new scan to find an IBSS to join [ 975.178451][ T2123] tap0: owner set to 0 [ 975.413237][ T2139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7939'. [ 975.586829][ T2146] syzkaller0: entered promiscuous mode [ 975.604215][ T2146] syzkaller0: entered allmulticast mode [ 975.846202][ T2156] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7946'. [ 976.101671][ T2171] macvlan0: left allmulticast mode [ 976.110513][ T2171] netlink: 'syz.3.7950': attribute type 1 has an invalid length. [ 976.133824][ T2171] netlink: 'syz.3.7950': attribute type 2 has an invalid length. [ 978.222829][ T2294] xt_hashlimit: overflow, try lower: 3/0 [ 978.280056][ T2291] nbd5: detected capacity change from 0 to 127 [ 978.342335][ T2295] __nla_validate_parse: 8 callbacks suppressed [ 978.342364][ T2295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7981'. [ 978.423219][ T2300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7983'. [ 978.474705][ T2303] delete_channel: no stack [ 978.507425][ T719] block nbd5: Receive control failed (result -104) [ 978.531545][ T2305] netlink: 'syz.0.7985': attribute type 2 has an invalid length. [ 978.579873][ T2305] netlink: 'syz.0.7985': attribute type 2 has an invalid length. [ 978.630955][ T2305] netlink: 'syz.0.7985': attribute type 1 has an invalid length. [ 978.645401][ T2305] netlink: 'syz.0.7985': attribute type 2 has an invalid length. [ 978.670013][ T2308] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7988'. [ 978.769207][ T2314] netlink: 'syz.1.7986': attribute type 1 has an invalid length. [ 978.841396][ T2314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 978.851698][ T2323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7986'. [ 978.873381][ T2323] macvlan4: entered allmulticast mode [ 978.965109][ T2314] bond6: (slave veth0_to_bond): making interface the new active one [ 979.011831][ T2314] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 979.084774][ T2323] bond6: entered promiscuous mode [ 979.093155][ T2314] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 979.100512][ T2323] veth0_to_bond: entered promiscuous mode [ 979.114561][ T2323] bond6: entered allmulticast mode [ 979.134681][ T2323] veth0_to_bond: entered allmulticast mode [ 979.289871][ T2342] IPVS: set_ctl: invalid protocol: 247 127.0.0.1:20002 [ 979.399178][ T2348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7997'. [ 979.519119][ T2355] netlink: 'syz.6.8000': attribute type 10 has an invalid length. [ 979.541927][ T2353] netlink: 396 bytes leftover after parsing attributes in process `syz.1.7998'. [ 979.560038][ T2356] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7999'. [ 979.582111][ T2356] NCSI netlink: No device for ifindex 813332851 [ 979.685144][ T2355] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8000'. [ 979.811910][ T2361] bond7: entered promiscuous mode [ 979.817489][ T2361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 980.137301][ T2378] vlan3: entered allmulticast mode [ 980.157059][ T2378] hsr0: entered allmulticast mode [ 980.164081][ T2378] hsr_slave_0: entered allmulticast mode [ 980.171169][ T2378] hsr_slave_1: entered allmulticast mode [ 980.196841][ T2375] ipvlan3: entered allmulticast mode [ 980.203209][ T2375] bond7: entered allmulticast mode [ 980.241828][ T2361] ipvlan4: entered allmulticast mode [ 980.322567][ T2384] bond7: (slave bridge8): making interface the new active one [ 980.337946][ T2384] bridge8: entered promiscuous mode [ 980.366848][ T2384] bridge8: entered allmulticast mode [ 980.377202][ T2401] sctp: [Deprecated]: syz.6.8010 (pid 2401) Use of int in maxseg socket option. [ 980.377202][ T2401] Use struct sctp_assoc_value instead [ 980.396474][ T2384] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 980.415195][ T2391] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 980.435707][ T2391] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 980.463188][ T2391] gretap3: entered promiscuous mode [ 980.484223][ T2391] gretap3: entered allmulticast mode [ 980.611436][ T2409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8011'. [ 980.762631][ T2413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8012'. [ 981.126633][ T2443] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 981.855528][ T2502] validate_nla: 5 callbacks suppressed [ 981.855554][ T2502] netlink: 'syz.0.8032': attribute type 1 has an invalid length. [ 982.241114][ T2523] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 982.312565][ T2524] netlink: 'syz.1.8037': attribute type 2 has an invalid length. [ 982.330615][ T2524] netlink: 'syz.1.8037': attribute type 2 has an invalid length. [ 982.338971][ T2525] netlink: 'syz.1.8037': attribute type 2 has an invalid length. [ 982.378921][ T2525] netlink: 'syz.1.8037': attribute type 2 has an invalid length. [ 982.407161][ T2533] netlink: 'syz.3.8039': attribute type 1 has an invalid length. [ 982.427121][ T2530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.437960][ T2533] netlink: 'syz.3.8039': attribute type 1 has an invalid length. [ 982.437996][ T2533] netlink: 'syz.3.8039': attribute type 8 has an invalid length. [ 983.068130][ T2580] nbd: must specify a size in bytes for the device [ 983.410038][ T2604] __nla_validate_parse: 13 callbacks suppressed [ 983.410066][ T2604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8051'. [ 983.488753][ T2611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8049'. [ 983.502700][ T2604] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8051'. [ 983.816610][ T2619] netlink: 'syz.6.8053': attribute type 10 has an invalid length. [ 983.841084][ T2620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8054'. [ 983.867200][ T2619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.890257][ T2619] batadv0: entered promiscuous mode [ 983.903270][ T2619] batadv0: entered allmulticast mode [ 983.922370][ T2619] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 983.944398][ T2620] vlan1: entered promiscuous mode [ 983.964298][ T2620] gretap0: entered promiscuous mode [ 983.985862][ T2619] netlink: 'syz.6.8053': attribute type 10 has an invalid length. [ 984.011092][ T2619] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8053'. [ 984.043984][ T2627] bond0: entered promiscuous mode [ 984.050283][ T2627] bond_slave_0: entered promiscuous mode [ 984.056579][ T2627] bond_slave_1: entered promiscuous mode [ 984.065204][ T2627] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 984.082367][ T2627] bond0: left allmulticast mode [ 984.091608][ T2627] mac80211_hwsim hwsim68 wlan1: left allmulticast mode [ 984.148093][ T2619] bond0: (slave batadv0): Releasing backup interface [ 984.182824][ T2619] bridge0: port 1(batadv0) entered blocking state [ 984.220440][ T2619] bridge0: port 1(batadv0) entered disabled state [ 984.399724][ T2644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8058'. [ 984.594039][ T2653] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.8060'. [ 984.672363][ T2676] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8061'. [ 984.685122][ T2653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8060'. [ 984.702338][ T2678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8063'. [ 984.729445][T22908] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 984.740552][T22908] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 985.208774][ T2695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.222460][ T2695] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 985.232415][ T2695] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 985.279157][ T2695] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 985.490805][ T2682] Cannot find del_set index 4 as target [ 985.733676][ T2716] bridge0: port 1(batadv0) entered disabled state [ 985.819443][ T2716] bond0: (slave netdevsim0): Releasing backup interface [ 985.864150][ T2716] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 985.895252][ T2716] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 985.964451][ T2716] bond4: (slave geneve2): Releasing active interface [ 986.029838][ T2716] bond7: (slave geneve4): Releasing active interface [ 986.051239][ T2716] bond10: (slave ip6gre1): Releasing backup interface [ 986.070523][T22926] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.090307][T22926] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.131246][T22926] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.176698][T22926] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.472081][ T2745] syzkaller0: entered promiscuous mode [ 986.477688][ T2745] syzkaller0: entered allmulticast mode [ 986.683913][ T2758] syzkaller0: entered promiscuous mode [ 986.689759][ T2758] syzkaller0: entered allmulticast mode [ 986.730367][ T2760] sock: sock_timestamping_bind_phc: sock not bind to device [ 987.251131][ T2787] netlink: ct family unspecified [ 987.555089][ T2816] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 987.615591][ T2816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 987.623236][ T2816] IPv6: NLM_F_CREATE should be set when creating new route [ 987.630715][ T2816] IPv6: NLM_F_CREATE should be set when creating new route [ 987.742874][ T2799] lo speed is unknown, defaulting to 1000 [ 987.972164][ T2832] syzkaller1: entered allmulticast mode [ 988.225618][ T2841] syzkaller0: entered promiscuous mode [ 988.239201][ T2841] syzkaller0: entered allmulticast mode [ 988.327695][ T2857] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 988.342143][ T2848] bond8: option fail_over_mac: invalid value (16) [ 988.472392][ T2848] bond8 (unregistering): Released all slaves [ 988.895702][ T2881] syzkaller0: entered promiscuous mode [ 988.901485][ T2881] syzkaller0: entered allmulticast mode [ 988.976999][ T2889] __nla_validate_parse: 14 callbacks suppressed [ 988.977025][ T2889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8105'. [ 989.019510][ T2889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8105'. [ 989.120734][ T2891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8106'. [ 989.132789][ T2894] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8107'. [ 989.584888][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8103'. [ 992.159084][ T2897] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 992.345985][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8109'. [ 992.370685][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8109'. [ 992.393656][ T2909] veth0_to_team: entered allmulticast mode [ 992.570217][ T2919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8113'. [ 992.609270][ T2925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8112'. [ 992.815756][ T2935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8118'. [ 992.971363][ T2943] syzkaller0: entered promiscuous mode [ 992.984689][ T2943] syzkaller0: entered allmulticast mode [ 993.850163][ T2995] xt_hashlimit: size too large, truncated to 1048576 [ 993.875809][ T2988] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 993.895134][ T2988] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 993.911417][ T2988] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 994.019731][ T2994] xt_hashlimit: size too large, truncated to 1048576 [ 994.321480][ T3012] x_tables: duplicate entry at hook 1 [ 994.531992][ T3020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 994.631710][ T3031] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 994.683709][ T3029] __nla_validate_parse: 4 callbacks suppressed [ 994.683734][ T3029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8145'. [ 995.098157][ T3057] validate_nla: 2 callbacks suppressed [ 995.098187][ T3057] netlink: 'syz.0.8153': attribute type 1 has an invalid length. [ 995.128679][ T3060] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 995.246967][ T3057] bond8: (slave gretap1): making interface the new active one [ 995.271913][ T3057] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 995.341052][ T3068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8156'. [ 995.545155][ T3078] tap0: tun_chr_ioctl cmd 2148553947 [ 997.981989][ T3051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 998.319282][ T3103] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8166'. [ 998.452088][ T3107] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.8168'. [ 998.497084][ T3116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8171'. [ 998.637872][ T3125] smc: net device team0 applied user defined pnetid SYZ2 [ 998.652891][ T3125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8172'. [ 998.751144][ T3128] netlink: 'syz.5.8175': attribute type 4 has an invalid length. [ 998.861234][ T3137] netlink: 'syz.5.8177': attribute type 1 has an invalid length. [ 998.869890][ T3137] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8177'. [ 998.880070][ T3137] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8177'. [ 998.890798][ T3137] netlink: 658 bytes leftover after parsing attributes in process `syz.5.8177'. [ 998.991194][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8178'. [ 999.404352][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 999.426361][ T3160] syzkaller0: entered promiscuous mode [ 999.436282][ T3160] syzkaller0: entered allmulticast mode [ 999.445108][ T3165] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 999.465555][ T3165] bond9: (slave lo): Enslaving as an active interface with an up link [ 999.477398][ T3165] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 999.503409][T24194] lo speed is unknown, defaulting to 1000 [ 999.509875][T24194] syz0: Port: 1 Link ACTIVE [ 999.514528][ T6857] lo speed is unknown, defaulting to 1000 [ 1002.515276][ T3174] mac80211_hwsim hwsim65 ÿ: renamed from wlan1 [ 1002.660398][ T3201] __nla_validate_parse: 1 callbacks suppressed [ 1002.660423][ T3201] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1002.737123][ T3210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8196'. [ 1002.777084][ T3210] openvswitch: netlink: Unknown nsh attribute 0 [ 1002.850758][ T3218] netlink: 'syz.6.8196': attribute type 5 has an invalid length. [ 1002.902333][ T3220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8198'. [ 1002.971317][ T3220] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1003.006918][ T3220] team0: Port device batadv2 added [ 1003.415776][ T3241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8202'. [ 1003.467949][ T3241] netlink: 'syz.1.8202': attribute type 15 has an invalid length. [ 1003.521676][ T3241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8202'. [ 1003.538553][ T3241] netlink: 'syz.1.8202': attribute type 15 has an invalid length. [ 1003.610462][ T3250] netlink: 'syz.3.8205': attribute type 1 has an invalid length. [ 1003.736665][ T3250] bond13: entered promiscuous mode [ 1003.742899][ T3250] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1003.777383][ T3259] netem: change failed [ 1003.800531][ T3257] netlink: 'syz.0.8210': attribute type 1 has an invalid length. [ 1003.819870][ T3257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1003.839395][ T3258] netem: change failed [ 1003.923784][ T3265] pim6reg527: entered allmulticast mode [ 1003.983929][ T3269] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1004.016104][ T3269] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1004.065310][ T3269] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1004.082927][ T3272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.101507][ T3269] bond13: (slave ip6gre1): making interface the new active one [ 1004.114390][ T3269] ip6gre1: entered promiscuous mode [ 1004.123966][ T3269] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 1004.145294][ T3276] netlink: 'syz.0.8214': attribute type 1 has an invalid length. [ 1004.156940][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1004.166324][ T3279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1004.176096][ T3279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1004.705139][ T3303] openvswitch: netlink: Missing valid actions attribute. [ 1004.715954][ T3303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.735319][ T3303] xt_cgroup: path and classid specified [ 1004.741912][ T3303] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1004.975548][ T3285] lo speed is unknown, defaulting to 1000 [ 1005.094718][ T3321] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1005.171716][ T3325] sock: sock_set_timeout: `syz.6.8227' (pid 3325) tries to set negative timeout [ 1005.883685][ T3359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.937317][ T3361] netlink: 'syz.3.8239': attribute type 1 has an invalid length. [ 1006.087501][ T3361] bond14: entered promiscuous mode [ 1006.125898][ T3361] bond14: entered allmulticast mode [ 1006.133185][ T3361] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1006.152766][ T3365] macvlan4: entered promiscuous mode [ 1006.158405][ T3365] macvlan4: entered allmulticast mode [ 1006.166749][ T3365] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1006.510895][ T3403] netlink: 'syz.5.8249': attribute type 1 has an invalid length. [ 1006.535285][ T3402] bond15: entered promiscuous mode [ 1006.541195][ T3402] bond15: entered allmulticast mode [ 1006.548677][ T3402] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1006.567614][ T3407] xt_l2tp: invalid flags combination: 0 [ 1006.650205][ T3403] bond10: entered promiscuous mode [ 1006.655954][ T3403] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1006.725442][ T3412] Unknown options in mask b7f2 [ 1006.752204][ T3417] netlink: 'syz.6.8251': attribute type 1 has an invalid length. [ 1006.761700][ T3417] netlink: 'syz.6.8251': attribute type 1 has an invalid length. [ 1007.045045][ T3436] lo: Caught tx_queue_len zero misconfig [ 1007.748100][ T3480] __nla_validate_parse: 9 callbacks suppressed [ 1007.748129][ T3480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8267'. [ 1007.797110][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1007.834389][ T3481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1007.952583][ T3488] bond16: entered allmulticast mode [ 1008.314150][ T3508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8277'. [ 1008.345157][ T3510] validate_nla: 4 callbacks suppressed [ 1008.345180][ T3510] netlink: 'syz.3.8278': attribute type 21 has an invalid length. [ 1008.362126][ T1557] block nbd5: Possible stuck request ffff8880279f0000: control (read@0,1024B). Runtime 30 seconds [ 1008.369715][ T3508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.381023][ T1557] block nbd5: Possible stuck request ffff8880279f0200: control (read@1024,1024B). Runtime 30 seconds [ 1008.381895][ T1557] block nbd5: Possible stuck request ffff8880279f0400: control (read@2048,1024B). Runtime 30 seconds [ 1008.381936][ T1557] block nbd5: Possible stuck request ffff8880279f0600: control (read@3072,1024B). Runtime 30 seconds [ 1008.382493][ T3511] netlink: 'syz.3.8278': attribute type 21 has an invalid length. [ 1008.382521][ T3511] IPv6: NLM_F_CREATE should be specified when creating new route [ 1008.634849][ T3527] netlink: zone id is out of range [ 1008.641371][ T3527] netlink: zone id is out of range [ 1008.646730][ T3527] netlink: zone id is out of range [ 1008.652555][ T3527] netlink: zone id is out of range [ 1008.657836][ T3527] netlink: zone id is out of range [ 1009.006302][ T3556] netdevsim netdevsim6 : renamed from netdevsim0 [ 1009.119611][ T3557] can: request_module (can-proto-0) failed. [ 1009.396652][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1009.682365][ T3597] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8305'. [ 1009.954542][ T3612] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8305'. [ 1010.070515][ T3621] netlink: 'syz.3.8311': attribute type 143 has an invalid length. [ 1010.101160][ T3621] : entered promiscuous mode [ 1010.529771][ T3652] lo: entered allmulticast mode [ 1010.545719][ T3652] lo: left allmulticast mode [ 1010.587805][ T3652] ip6t_srh: unknown srh match flags 5F28 [ 1010.607935][ T3659] netlink: 'syz.6.8325': attribute type 1 has an invalid length. [ 1010.665075][ T3659] bond11: (slave gretap1): making interface the new active one [ 1010.683604][ T3659] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1010.879682][ T3670] sctp: [Deprecated]: syz.0.8330 (pid 3670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1010.879682][ T3670] Use struct sctp_sack_info instead [ 1011.180908][ T3689] netlink: 'syz.0.8335': attribute type 21 has an invalid length. [ 1011.196181][ T3687] xt_hashlimit: size too large, truncated to 1048576 [ 1011.205554][ T3689] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8335'. [ 1011.247946][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8336'. [ 1011.489471][ T3705] net_ratelimit: 8 callbacks suppressed [ 1011.489499][ T3705] openvswitch: netlink: IP tunnel dst address not specified [ 1011.805581][ T3718] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8346'. [ 1011.920225][ T3726] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 1011.933211][ T3726] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1012.093055][ T3734] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1012.261037][ T3740] ip6t_srh: unknown srh match flags 4000 [ 1012.270918][ T3740] netlink: 'syz.3.8351': attribute type 8 has an invalid length. [ 1012.302847][ T3744] syzkaller1: entered promiscuous mode [ 1012.309885][ T3744] syzkaller1: entered allmulticast mode [ 1012.377451][ T3748] syzkaller0: entered promiscuous mode [ 1012.393600][ T3748] syzkaller0: entered allmulticast mode [ 1012.404252][ T3751] lo: entered promiscuous mode [ 1012.411079][ T3751] lo: left allmulticast mode [ 1012.416114][ T3751] tunl0: entered promiscuous mode [ 1012.422146][ T3751] tunl0: left allmulticast mode [ 1012.427446][ T3751] gre0: entered promiscuous mode [ 1012.434153][ T3751] gre0: left allmulticast mode [ 1012.439650][ T3751] gretap0: entered promiscuous mode [ 1012.445213][ T3751] gretap0: left allmulticast mode [ 1012.451133][ T3751] erspan0: entered promiscuous mode [ 1012.456556][ T3751] erspan0: left allmulticast mode [ 1012.465191][ T3751] ip_vti0: entered promiscuous mode [ 1012.470844][ T3751] ip_vti0: left allmulticast mode [ 1012.476505][ T3751] ip6_vti0: entered promiscuous mode [ 1012.507667][ T3751] ip6_vti0: left allmulticast mode [ 1012.517867][ T3751] sit0: entered promiscuous mode [ 1012.525842][ T3751] sit0: left allmulticast mode [ 1012.531178][ T3751] ip6tnl0: entered promiscuous mode [ 1012.536576][ T3751] ip6tnl0: left allmulticast mode [ 1012.545192][ T3751] ip6gre0: entered promiscuous mode [ 1012.551707][ T3751] ip6gre0: left allmulticast mode [ 1012.557172][ T3751] ip6gretap0: entered promiscuous mode [ 1012.563114][ T3751] ip6gretap0: left allmulticast mode [ 1012.575659][ T3751] bridge0: entered promiscuous mode [ 1012.582224][ T3751] bridge0: left allmulticast mode [ 1012.587805][ T3751] vcan0: entered promiscuous mode [ 1012.596039][ T3751] vcan0: left allmulticast mode [ 1012.615829][ T3751] dummy0: entered promiscuous mode [ 1012.621438][ T3751] dummy0: left allmulticast mode [ 1012.638189][ T3751] nlmon0: entered promiscuous mode [ 1012.644733][ T3751] nlmon0: left allmulticast mode [ 1012.662466][ T3751] caif0: entered promiscuous mode [ 1012.667612][ T3751] caif0: left allmulticast mode [ 1012.698168][ T3751] batadv0: entered promiscuous mode [ 1012.705190][ T3751] batadv0: left allmulticast mode [ 1012.710871][ T3751] vxcan0: entered promiscuous mode [ 1012.716051][ T3751] vxcan0: left allmulticast mode [ 1012.723500][ T3751] vxcan1: entered promiscuous mode [ 1012.732299][ T3751] vxcan1: left allmulticast mode [ 1012.747304][ T3751] veth0: entered promiscuous mode [ 1012.753272][ T3751] veth0: left allmulticast mode [ 1012.759937][ T3751] veth1: entered promiscuous mode [ 1012.775380][ T3751] wg0: entered promiscuous mode [ 1012.781326][ T3751] wg0: left allmulticast mode [ 1012.786422][ T3751] wg1: entered promiscuous mode [ 1012.792780][ T3751] wg1: left allmulticast mode [ 1012.799595][ T3751] wg2: entered promiscuous mode [ 1012.804734][ T3751] wg2: left allmulticast mode [ 1012.810460][ T3751] veth0_to_bridge: entered promiscuous mode [ 1012.816815][ T3751] veth0_to_bridge: left allmulticast mode [ 1012.846033][ T3751] veth1_to_bridge: entered promiscuous mode [ 1012.855486][ T3751] veth1_to_bridge: left allmulticast mode [ 1012.862028][ T3751] veth0_to_bond: entered promiscuous mode [ 1012.868092][ T3751] veth0_to_bond: left allmulticast mode [ 1012.880145][ T3751] bond_slave_0: left allmulticast mode [ 1012.886016][ T3751] veth1_to_bond: entered promiscuous mode [ 1012.892503][ T3751] veth1_to_bond: left allmulticast mode [ 1012.898930][ T3751] bond_slave_1: left allmulticast mode [ 1012.904830][ T3751] veth1_to_team: entered promiscuous mode [ 1012.915091][ T3751] veth1_to_team: left allmulticast mode [ 1012.921462][ T3751] team_slave_1: entered promiscuous mode [ 1012.927404][ T3751] team_slave_1: left allmulticast mode [ 1012.933777][ T3751] veth0_to_batadv: entered promiscuous mode [ 1012.941245][ T3751] veth0_to_batadv: left allmulticast mode [ 1012.947460][ T3751] batadv_slave_0: entered promiscuous mode [ 1012.953834][ T3751] batadv_slave_0: left allmulticast mode [ 1012.972445][ T3751] veth1_to_batadv: entered promiscuous mode [ 1012.978752][ T3751] veth1_to_batadv: left allmulticast mode [ 1012.984934][ T3751] batadv_slave_1: entered promiscuous mode [ 1012.993963][ T3751] xfrm0: entered promiscuous mode [ 1013.000726][ T3751] xfrm0: left allmulticast mode [ 1013.006023][ T3751] veth0_to_hsr: entered promiscuous mode [ 1013.012064][ T3751] veth0_to_hsr: left allmulticast mode [ 1013.018028][ T3751] veth1_to_hsr: entered promiscuous mode [ 1013.025156][ T3751] veth1_to_hsr: left allmulticast mode [ 1013.034784][ T3751] hsr0: entered promiscuous mode [ 1013.050218][ T3751] hsr0: left allmulticast mode [ 1013.055882][ T3751] hsr_slave_0: left allmulticast mode [ 1013.062670][ T3751] hsr_slave_1: left allmulticast mode [ 1013.069509][ T3751] veth1_virt_wifi: entered promiscuous mode [ 1013.075706][ T3751] veth1_virt_wifi: left allmulticast mode [ 1013.082486][ T3751] veth0_virt_wifi: entered promiscuous mode [ 1013.089923][ T3751] veth0_virt_wifi: left allmulticast mode [ 1013.096117][ T3751] virt_wifi0: entered promiscuous mode [ 1013.102108][ T3751] virt_wifi0: left allmulticast mode [ 1013.108192][ T3751] vlan0: entered promiscuous mode [ 1013.116797][ T3751] vlan1: entered promiscuous mode [ 1013.123867][ T3751] vlan1: left allmulticast mode [ 1013.129796][ T3751] macvlan0: entered promiscuous mode [ 1013.136698][ T3751] macvlan1: entered promiscuous mode [ 1013.169828][ T3751] macvlan1: left allmulticast mode [ 1013.175280][ T3751] ipvlan0: entered promiscuous mode [ 1013.186782][ T3751] ipvlan0: left allmulticast mode [ 1013.194881][ T3751] ipvlan1: entered promiscuous mode [ 1013.233105][ T3751] ipvlan1: left allmulticast mode [ 1013.252673][ T3751] veth1_macvtap: left allmulticast mode [ 1013.263511][ T3751] veth0_macvtap: left allmulticast mode [ 1013.276155][ T3751] macvtap0: entered promiscuous mode [ 1013.282059][ T3751] macvtap0: left allmulticast mode [ 1013.287438][ T3751] macsec0: entered promiscuous mode [ 1013.292722][ T3772] __nla_validate_parse: 9 callbacks suppressed [ 1013.292745][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8357'. [ 1013.309933][ T3751] macsec0: left allmulticast mode [ 1013.315239][ T3751] geneve0: entered promiscuous mode [ 1013.321193][ T3751] geneve1: entered promiscuous mode [ 1013.326617][ T3751] geneve1: left allmulticast mode [ 1013.332804][ T3751] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1013.340434][ T3751] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1013.347929][ T3751] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1013.355543][ T3751] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1013.364007][ T3751] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1013.371537][ T3751] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1013.379198][ T3751] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1013.386657][ T3751] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1013.396259][ T3751] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1013.403538][ T3751] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1013.411158][ T3751] syztnl1: entered promiscuous mode [ 1013.416468][ T3751] syztnl1: left allmulticast mode [ 1013.422482][ T3751] team0: entered promiscuous mode [ 1013.427557][ T3751] batadv2: entered promiscuous mode [ 1013.433179][ T3751] team0: left allmulticast mode [ 1013.438827][ T3751] vti0: entered promiscuous mode [ 1013.444044][ T3751] vti0: left allmulticast mode [ 1013.450463][ T3751] vlan0.4: entered promiscuous mode [ 1013.456169][ T3751] vlan0.4: left allmulticast mode [ 1013.462034][ T3751] vlan0: left allmulticast mode [ 1013.467453][ T3751] veth0_vlan: left allmulticast mode [ 1013.474687][ T3751] batadv1: entered promiscuous mode [ 1013.483067][ T3751] batadv1: left allmulticast mode [ 1013.489593][ T3751] batadv2: left allmulticast mode [ 1013.495059][ T3751] ip6erspan0: entered promiscuous mode [ 1013.501178][ T3751] ip6erspan0: left allmulticast mode [ 1013.506834][ T3751] macvlan2: entered promiscuous mode [ 1013.514519][ T3751] bond1: entered promiscuous mode [ 1013.530462][ T3751] bridge1: entered promiscuous mode [ 1013.536476][ T3751] vlan2: entered promiscuous mode [ 1013.542868][ T3751] vlan2: left allmulticast mode [ 1013.547850][ T3751] geneve0: left allmulticast mode [ 1013.563274][ T3751] bond2: entered promiscuous mode [ 1013.579264][ T3751] vti1: entered promiscuous mode [ 1013.585567][ T3751] ip6tnl1: entered promiscuous mode [ 1013.594270][ T3751] veth1_vlan: left allmulticast mode [ 1013.600683][ T3751] macvtap1: left allmulticast mode [ 1013.608133][ T3751] macvlan3: entered promiscuous mode [ 1013.614618][ T3751] mac80211_hwsim hwsim78 wlan2: entered promiscuous mode [ 1013.623441][ T3751] vxlan0: entered promiscuous mode [ 1013.642635][ T3751] erspan1: entered promiscuous mode [ 1013.655833][ T3751] bond3: entered promiscuous mode [ 1013.669429][ T3751] sit1: entered promiscuous mode [ 1013.684535][ T3751] sit2: entered promiscuous mode [ 1013.694003][ T3751] bridge2: entered promiscuous mode [ 1013.700492][ T3751] bridge3: entered promiscuous mode [ 1013.711384][ T3751] macsec0.3: entered promiscuous mode [ 1013.717351][ T3751] veth2: entered promiscuous mode [ 1013.729203][ T3751] veth3: entered promiscuous mode [ 1013.734535][ T3751] bond4: entered promiscuous mode [ 1013.743000][ T3751] bond5: entered promiscuous mode [ 1013.748737][ T3751] bond6: entered promiscuous mode [ 1013.754331][ T3751] bond7: entered promiscuous mode [ 1013.759860][ T3751] bond8: entered promiscuous mode [ 1013.765147][ T3751] bond9: entered promiscuous mode [ 1013.770957][ T3751] bond10: entered promiscuous mode [ 1013.776253][ T3751] bond11: entered promiscuous mode [ 1013.782551][ T3751] bond12: entered promiscuous mode [ 1013.794989][ T3751] : entered promiscuous mode [ 1013.810875][ T3751] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1013.824415][ T3751] ipvlan2: entered promiscuous mode [ 1013.830571][ T3751] ipvlan2: left allmulticast mode [ 1013.835791][ T3751] batadv_slave_1: left allmulticast mode [ 1013.876100][ T3751] bond14: left allmulticast mode [ 1013.890644][ T3751] bond15: left allmulticast mode [ 1013.900011][ T3751] bond16: entered promiscuous mode [ 1013.905222][ T3751] bond16: left allmulticast mode [ 1013.911122][ T3751] veth4: entered promiscuous mode [ 1013.916545][ T3751] veth5: entered promiscuous mode [ 1013.969765][ T3759] xfrm1: entered promiscuous mode [ 1013.974914][ T3759] xfrm1: entered allmulticast mode [ 1014.080156][T32595] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.144722][T32595] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.290635][T32595] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.306692][ T3791] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1014.319759][T32595] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.524908][ T3802] syzkaller1: entered promiscuous mode [ 1014.531848][ T3802] syzkaller1: entered allmulticast mode [ 1014.550204][ T3805] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8366'. [ 1014.627437][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8369'. [ 1014.660129][ T3810] netlink: 'syz.3.8369': attribute type 5 has an invalid length. [ 1014.682229][ T3810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8369'. [ 1014.862867][ T3823] netlink: 'syz.3.8373': attribute type 83 has an invalid length. [ 1014.913898][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8372'. [ 1014.945817][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8372'. [ 1014.997877][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8372'. [ 1015.010003][ T3831] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8376'. [ 1015.081105][ T3833] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8375'. [ 1015.210928][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8372'. [ 1017.870329][ T3863] openvswitch: netlink: Flow actions attr not present in new flow. [ 1018.335948][ T3891] netlink: 'syz.1.8390': attribute type 1 has an invalid length. [ 1018.408395][ T3891] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1018.421423][ T3891] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1018.498063][ T3899] macvlan5: entered promiscuous mode [ 1018.529004][ T3899] macvlan5: entered allmulticast mode [ 1018.563955][ T3899] bond8: entered promiscuous mode [ 1018.591883][ T3899] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1018.625355][ T3899] bond8: left promiscuous mode [ 1018.657436][ T3908] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1018.675730][ T3908] __nla_validate_parse: 1 callbacks suppressed [ 1018.675755][ T3908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8394'. [ 1018.802366][ T3915] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1018.823115][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1018.844984][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1018.865016][ T3919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8398'. [ 1018.895812][ T3915] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1019.001646][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8400'. [ 1019.051048][ T3933] netlink: 'syz.1.8402': attribute type 1 has an invalid length. [ 1019.137512][ T3937] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8403'. [ 1019.167950][ T3940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8402'. [ 1019.460101][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8407'. [ 1019.544232][ T3935] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1019.589819][ T3935] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1019.636310][ T3943] macvlan5: entered promiscuous mode [ 1019.642472][ T3943] macvlan5: entered allmulticast mode [ 1019.654904][ T3943] bond9: entered promiscuous mode [ 1019.661643][ T3943] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1019.673400][ T3943] bond9: left promiscuous mode [ 1019.835729][ T3973] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1019.853684][ T3973] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1020.019419][ T3984] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1020.534575][ T3996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1021.596920][ T4052] netlink: 'syz.0.8433': attribute type 10 has an invalid length. [ 1021.655366][ T4052] veth0_vlan: left promiscuous mode [ 1021.680866][ T4052] veth0_vlan: entered promiscuous mode [ 1021.691598][ T4052] team0: Device veth0_vlan failed to register rx_handler [ 1022.042034][ T4069] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 1022.142264][ T4080] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 1022.405401][ T4096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.602523][ T4109] netlink: 'syz.6.8449': attribute type 2 has an invalid length. [ 1022.683105][ T4120] netlink: 'syz.1.8452': attribute type 83 has an invalid length. [ 1022.923161][ T4134] netlink: 'syz.6.8455': attribute type 2 has an invalid length. [ 1023.007888][ T4139] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1023.323075][ T4111] lo speed is unknown, defaulting to 1000 [ 1023.370250][ T4149] netlink: 'syz.1.8461': attribute type 1 has an invalid length. [ 1023.478816][ T4149] bond10: entered promiscuous mode [ 1023.485882][ T4149] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1023.653991][ T4154] bond10: (slave bridge12): making interface the new active one [ 1023.667516][ T4154] bridge12: entered promiscuous mode [ 1023.676544][ T4154] bond10: (slave bridge12): Enslaving as an active interface with an up link [ 1023.687458][ T4134] erspan0: entered allmulticast mode [ 1023.715224][ T4163] __nla_validate_parse: 7 callbacks suppressed [ 1023.715249][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1024.005902][ T4179] openvswitch: netlink: Message has 4 unknown bytes. [ 1024.220249][ T4187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1024.265469][ T4191] netlink: 388 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1024.649402][ T4210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.885912][ T4223] netlink: 'syz.3.8486': attribute type 3 has an invalid length. [ 1024.907128][ T4227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8484'. [ 1024.935164][ T4228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8485'. [ 1025.443548][ T4257] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1025.504694][ T4257] bond12 (unregistering): Released all slaves [ 1025.515446][ T4267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8499'. [ 1025.573434][ T4260] ip6tnl0: Caught tx_queue_len zero misconfig [ 1025.599817][ T4265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1025.753444][ T4273] ip6tnl2: entered allmulticast mode [ 1025.798704][ T4277] bridge_slave_0: invalid flags given to default FDB implementation [ 1025.814642][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1025.834526][ T4278] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1025.857528][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1026.021532][ T4281] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1026.361731][ T4292] syzkaller0: entered promiscuous mode [ 1026.367401][ T4292] syzkaller0: entered allmulticast mode [ 1026.549273][ T4307] netlink: 'syz.1.8510': attribute type 11 has an invalid length. [ 1028.242054][ T4317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8514'. [ 1030.279784][ T4311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1030.289050][ T4286] lo speed is unknown, defaulting to 1000 [ 1030.681726][ T4340] tunl0: Caught tx_queue_len zero misconfig [ 1030.805142][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8521'. [ 1031.044567][ T4326] lo speed is unknown, defaulting to 1000 [ 1031.157202][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1031.369784][ T4371] syzkaller0: entered promiscuous mode [ 1031.375790][ T4371] syzkaller0: entered allmulticast mode [ 1033.476827][ T4386] netlink: 'syz.1.8532': attribute type 3 has an invalid length. [ 1033.654566][ T4398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1033.929846][ T4411] netlink: 'syz.6.8536': attribute type 13 has an invalid length. [ 1034.332511][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 1034.345294][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 1034.650310][ T4388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.671819][ T4440] lo: left promiscuous mode [ 1034.676644][ T4440] tunl0: left promiscuous mode [ 1034.736330][ T4440] gre0: left promiscuous mode [ 1034.757097][ T4440] gretap0: left promiscuous mode [ 1034.762991][ T4440] erspan0: left promiscuous mode [ 1034.768502][ T4440] ip_vti0: left promiscuous mode [ 1034.774286][ T4440] ip6_vti0: left promiscuous mode [ 1034.789244][ T4440] sit0: left promiscuous mode [ 1034.794208][ T4440] ip6tnl0: left promiscuous mode [ 1034.831363][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8543'. [ 1034.837733][ T4440] ip6gre0: left promiscuous mode [ 1034.876822][ T4440] ip6gretap0: left promiscuous mode [ 1034.887040][ T4440] bridge0: left promiscuous mode [ 1034.907351][ T4440] vcan0: left promiscuous mode [ 1034.925757][ T4440] bond0: left promiscuous mode [ 1034.933564][ T4440] dummy0: left promiscuous mode [ 1034.939169][ T4440] nlmon0: left promiscuous mode [ 1034.944580][ T4440] caif0: left promiscuous mode [ 1034.953222][ T4440] batadv0: left promiscuous mode [ 1034.961398][ T4440] vxcan0: left promiscuous mode [ 1034.966519][ T4440] vxcan1: left promiscuous mode [ 1034.972472][ T4440] veth0: left promiscuous mode [ 1034.977565][ T4440] veth1: left promiscuous mode [ 1034.990954][ T4440] wg0: left promiscuous mode [ 1034.996457][ T4440] wg1: left promiscuous mode [ 1035.002759][ T4440] wg2: left promiscuous mode [ 1035.009012][ T4440] veth0_to_bridge: left promiscuous mode [ 1035.015324][ T4440] veth1_to_bridge: left promiscuous mode [ 1035.021769][ T4440] veth0_to_bond: left promiscuous mode [ 1035.027533][ T4440] bond_slave_0: left promiscuous mode [ 1035.034404][ T4440] veth1_to_bond: left promiscuous mode [ 1035.041093][ T4440] bond_slave_1: left promiscuous mode [ 1035.046941][ T4440] veth1_to_team: left promiscuous mode [ 1035.053297][ T4440] team_slave_1: left promiscuous mode [ 1035.060272][ T4440] veth0_to_batadv: left promiscuous mode [ 1035.066350][ T4440] batadv_slave_0: left promiscuous mode [ 1035.074051][ T4440] veth1_to_batadv: left promiscuous mode [ 1035.080828][ T4440] batadv_slave_1: left promiscuous mode [ 1035.087003][ T4440] xfrm0: left promiscuous mode [ 1035.093329][ T4440] veth0_to_hsr: left promiscuous mode [ 1035.099874][ T4440] veth1_to_hsr: left promiscuous mode [ 1035.105847][ T4440] hsr0: left promiscuous mode [ 1035.112471][ T4440] vlan1: left promiscuous mode [ 1035.117767][ T4440] macvlan0: left promiscuous mode [ 1035.124733][ T4440] macvlan1: left promiscuous mode [ 1035.130819][ T4440] ipvlan0: left promiscuous mode [ 1035.136447][ T4440] ipvlan1: left promiscuous mode [ 1035.142526][ T4440] macvtap0: left promiscuous mode [ 1035.151035][ T4440] geneve1: left promiscuous mode [ 1035.156618][ T4440] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1035.164755][ T4440] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1035.172621][ T4440] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 1035.181527][ T4440] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 1035.189437][ T4440] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1035.196834][ T4440] mac80211_hwsim hwsim68 wlan1: left promiscuous mode [ 1035.204474][ T4440] syztnl1: left promiscuous mode [ 1035.211554][ T4440] team0: left promiscuous mode [ 1035.216773][ T4440] vti0: left promiscuous mode [ 1035.223531][ T4440] vlan0.4: left promiscuous mode [ 1035.239915][ T4440] vlan0: left promiscuous mode [ 1035.245609][ T4440] batadv1: left promiscuous mode [ 1035.251494][ T4440] batadv2: left promiscuous mode [ 1035.257324][ T4440] ip6erspan0: left promiscuous mode [ 1035.263497][ T4440] macvlan2: left promiscuous mode [ 1035.270655][ T4440] bond1: left promiscuous mode [ 1035.275793][ T4440] bridge1: left promiscuous mode [ 1035.281666][ T4440] vlan2: left promiscuous mode [ 1035.286719][ T4440] geneve0: left promiscuous mode [ 1035.293295][ T4440] bond2: left promiscuous mode [ 1035.300280][ T4440] vti1: left promiscuous mode [ 1035.305484][ T4440] ip6tnl1: left promiscuous mode [ 1035.312510][ T4440] macvtap1: left promiscuous mode [ 1035.318066][ T4440] macvlan3: left promiscuous mode [ 1035.325295][ T4440] mac80211_hwsim hwsim78 wlan2: left promiscuous mode [ 1035.333252][ T4440] vxlan0: left promiscuous mode [ 1035.338574][ T4440] erspan1: left promiscuous mode [ 1035.343984][ T4440] bond3: left promiscuous mode [ 1035.352978][ T4440] sit1: left promiscuous mode [ 1035.358097][ T4440] sit2: left promiscuous mode [ 1035.363399][ T4440] bridge2: left promiscuous mode [ 1035.368979][ T4440] bridge3: left promiscuous mode [ 1035.374491][ T4440] macsec0.3: left promiscuous mode [ 1035.381397][ T4440] macsec0: left promiscuous mode [ 1035.386877][ T4440] veth2: left promiscuous mode [ 1035.392587][ T4440] veth3: left promiscuous mode [ 1035.397827][ T4440] bond4: left promiscuous mode [ 1035.403446][ T4440] bond5: left promiscuous mode [ 1035.410298][ T4440] bond6: left promiscuous mode [ 1035.415597][ T4440] bond7: left promiscuous mode [ 1035.421004][ T4440] bond8: left promiscuous mode [ 1035.426224][ T4440] bond9: left promiscuous mode [ 1035.432208][ T4440] bond10: left promiscuous mode [ 1035.437651][ T4440] bond11: left promiscuous mode [ 1035.446883][ T4440] bond12: left promiscuous mode [ 1035.459775][ T4440] : left promiscuous mode [ 1035.464605][ T4440] ipvlan2: left promiscuous mode [ 1035.473156][ T4440] bond13: left promiscuous mode [ 1035.478793][ T4440] ip6gre1: left promiscuous mode [ 1035.484039][ T4440] bond14: left promiscuous mode [ 1035.489370][ T4440] bond15: left promiscuous mode [ 1035.494405][ T4440] bond16: left promiscuous mode [ 1035.502162][ T4440] veth4: left promiscuous mode [ 1035.507131][ T4440] veth5: left promiscuous mode [ 1035.634284][ T4460] syzkaller0: entered promiscuous mode [ 1035.640712][ T4460] syzkaller0: entered allmulticast mode [ 1035.779406][ T4469] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8547'. [ 1035.975941][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1035.991273][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.006167][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.034243][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.063255][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.596581][ T4471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1038.113082][ T719] Bluetooth: hci0: command tx timeout [ 1038.439765][ T1557] block nbd5: Possible stuck request ffff8880279f0000: control (read@0,1024B). Runtime 60 seconds [ 1038.450606][ T1557] block nbd5: Possible stuck request ffff8880279f0200: control (read@1024,1024B). Runtime 60 seconds [ 1038.462033][ T1557] block nbd5: Possible stuck request ffff8880279f0400: control (read@2048,1024B). Runtime 60 seconds [ 1038.474025][ T1557] block nbd5: Possible stuck request ffff8880279f0600: control (read@3072,1024B). Runtime 60 seconds [ 1039.061417][ T4493] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 1039.466563][ T4510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8554'. [ 1039.505922][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8555'. [ 1039.539383][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8555'. [ 1039.646380][ T4512] vlan1: entered allmulticast mode [ 1039.750569][ T4520] netlink: 'syz.5.8558': attribute type 1 has an invalid length. [ 1039.842778][ T4520] bond11: entered promiscuous mode [ 1039.850940][ T4520] bond11: entered allmulticast mode [ 1039.856781][ T4520] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1039.914491][ T4532] netlink: 'syz.1.8562': attribute type 1 has an invalid length. [ 1039.927147][ T4528] macvlan2: entered promiscuous mode [ 1039.935513][ T4532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8562'. [ 1039.937677][ T4528] macvlan2: entered allmulticast mode [ 1039.954520][ T4528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1039.979277][ T4481] lo speed is unknown, defaulting to 1000 [ 1040.014026][ T4525] syzkaller0: entered promiscuous mode [ 1040.020413][ T4525] syzkaller0: entered allmulticast mode [ 1040.199459][ T719] Bluetooth: hci0: command tx timeout [ 1042.280203][ T5830] Bluetooth: hci0: command tx timeout [ 1043.076105][ T5195] udevd[5195]: worker [1924] /devices/virtual/block/nbd5 is taking a long time [ 1043.382036][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8567'. [ 1043.406126][ T4545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8565'. [ 1043.488048][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.706179][ T4481] chnl_net:caif_netlink_parms(): no params data found [ 1043.771717][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1043.781229][ T4575] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1044.053967][ T4567] ip6_vti0: entered promiscuous mode [ 1044.142059][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.161061][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.192906][ T4481] bridge_slave_0: entered allmulticast mode [ 1044.221738][ T4481] bridge_slave_0: entered promiscuous mode [ 1044.251036][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.269289][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.277717][ T4481] bridge_slave_1: entered allmulticast mode [ 1044.297318][ T4481] bridge_slave_1: entered promiscuous mode [ 1044.350740][ T5830] Bluetooth: hci0: command tx timeout [ 1044.485064][ T4481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.543176][ T4481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.578146][ T4614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1044.705080][ T4481] team0: Port device team_slave_0 added [ 1044.725976][ T4481] team0: Port device team_slave_1 added [ 1044.790585][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.797665][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.824881][ T4481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.847215][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.873209][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.929199][ T4481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.972502][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8591'. [ 1045.141052][ T4481] hsr_slave_0: entered promiscuous mode [ 1045.149070][ T4481] hsr_slave_1: entered promiscuous mode [ 1045.156265][ T4481] debugfs: 'hsr0' already exists in 'hsr' [ 1045.163723][ T4481] Cannot create hsr debugfs directory [ 1045.264959][ T4646] xt_TCPMSS: Only works on TCP SYN packets [ 1045.273963][ T4647] sctp: [Deprecated]: syz.0.8593 (pid 4647) Use of int in maxseg socket option. [ 1045.273963][ T4647] Use struct sctp_assoc_value instead [ 1045.473634][ T4664] netlink: 'syz.1.8596': attribute type 10 has an invalid length. [ 1045.494407][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1045.775494][ T4481] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.789109][ T4674] "syz.0.8601" (4674) uses obsolete ecb(arc4) skcipher [ 1045.804420][ T4481] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.927501][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8603'. [ 1045.961104][ T4679] : entered promiscuous mode [ 1046.020563][ T4481] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.032865][ T4481] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.182878][ T4481] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.195760][ T4481] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.267225][ T4702] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1046.334384][ T4481] netdevsim netdevsim6  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.354652][ T4481] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.395250][ T4707] netlink: 'syz.0.8611': attribute type 6 has an invalid length. [ 1046.623203][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8614'. [ 1046.663753][ T4721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8616'. [ 1046.682925][ T4721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8616'. [ 1046.752163][ T4718] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1046.866529][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1047.067126][ T4481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1047.086682][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.096675][ T4481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1047.113102][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.129809][ T4481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1047.149908][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.371030][ T4481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1047.382771][ T4481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.403231][ T4746] macvtap1: entered promiscuous mode [ 1047.409107][ T4746] macvtap1: entered allmulticast mode [ 1047.414545][ T4746] veth1_vlan: entered allmulticast mode [ 1047.451741][ T4748] macvtap2: entered promiscuous mode [ 1047.457446][ T4748] macvtap2: entered allmulticast mode [ 1047.510699][ T4759] netlink: 'syz.3.8625': attribute type 8 has an invalid length. [ 1047.551818][ T4758] netlink: 'syz.3.8625': attribute type 8 has an invalid length. [ 1047.584214][ T4758] bond0: entered promiscuous mode [ 1047.590976][ T4758] bond_slave_0: entered promiscuous mode [ 1047.596919][ T4758] bond_slave_1: entered promiscuous mode [ 1047.605953][ T4758] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 1047.616334][ T4758] bond0: left promiscuous mode [ 1047.622363][ T4758] bond_slave_0: left promiscuous mode [ 1047.628130][ T4758] bond_slave_1: left promiscuous mode [ 1047.636493][ T4758] mac80211_hwsim hwsim68 wlan1: left promiscuous mode [ 1047.666810][ T4759] bond0: entered promiscuous mode [ 1047.672408][ T4759] bond_slave_0: entered promiscuous mode [ 1047.678635][ T4759] bond_slave_1: entered promiscuous mode [ 1047.684843][ T4759] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 1047.696980][ T4759] bond0: left promiscuous mode [ 1047.702266][ T4759] bond_slave_0: left promiscuous mode [ 1047.708041][ T4759] bond_slave_1: left promiscuous mode [ 1047.720665][ T4759] mac80211_hwsim hwsim68 wlan1: left promiscuous mode [ 1047.865071][ T4481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.914029][ T4481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.956698][T22914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.964018][T22914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.001488][T22914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.008764][T22914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.214605][ T4784] xt_policy: output policy not valid in PREROUTING and INPUT [ 1048.400238][ T4789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.446430][ T4794] __nla_validate_parse: 4 callbacks suppressed [ 1048.446456][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8635'. [ 1048.466050][ T4794] bond0: Caught tx_queue_len zero misconfig [ 1048.485395][ T4794] tipc: Enabled bearer , priority 10 [ 1048.562646][ T4481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.169103][ T4481] veth0_vlan: entered promiscuous mode [ 1049.195395][ T4481] veth1_vlan: entered promiscuous mode [ 1049.316670][ T4481] veth0_macvtap: entered promiscuous mode [ 1049.337569][ T4481] veth1_macvtap: entered promiscuous mode [ 1050.107516][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.143246][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.206005][T22910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.256505][T22910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.281618][T22910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.302397][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8652'. [ 1050.321088][T22910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.365680][ T4845] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.8653'. [ 1050.723752][ T4866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8659'. [ 1050.757477][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8656'. [ 1050.794090][T11283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.826532][ T4867] netlink: 'syz.1.8657': attribute type 3 has an invalid length. [ 1050.840003][T11283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.892563][ T4859] syzkaller0: entered promiscuous mode [ 1050.899671][ T4859] syzkaller0: entered allmulticast mode [ 1051.003538][T11283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.023786][T11283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.242525][ T4887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1051.255694][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8663'. [ 1051.266807][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8663'. [ 1051.376254][ T4889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8664'. [ 1054.371548][ T4892] xt_bpf: check failed: parse error [ 1054.414713][ T4892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1054.451969][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1054.560975][ T4900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8545'. [ 1054.634118][ T4913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8670'. [ 1054.940995][ T4924] netlink: 'syz.5.8673': attribute type 1 has an invalid length. [ 1055.062315][ T4929] netlink: 'syz.3.8675': attribute type 1 has an invalid length. [ 1055.089301][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8673'. [ 1055.132575][ T4933] netlink: 'syz.6.8676': attribute type 1 has an invalid length. [ 1055.192230][ T4924] vlan2: entered allmulticast mode [ 1055.225033][ T4924] bridge4: entered allmulticast mode [ 1055.532968][ T4952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1055.549351][ T4949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1055.564621][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8683'. [ 1055.605301][ T4961] xt_hashlimit: size too large, truncated to 1048576 [ 1055.691078][ T4947] netlink: 'syz.3.8680': attribute type 4 has an invalid length. [ 1055.700223][ T4963] netlink: 'syz.5.8684': attribute type 10 has an invalid length. [ 1055.728455][ T4947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8680'. [ 1056.113032][ T4979] netlink: 'syz.3.8689': attribute type 24 has an invalid length. [ 1056.397702][ T5002] tcpmss_tg6_check: 1 callbacks suppressed [ 1056.397728][ T5002] xt_TCPMSS: Only works on TCP SYN packets [ 1056.778078][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8697'. [ 1056.971488][ T5026] syzkaller0: entered promiscuous mode [ 1056.977166][ T5026] syzkaller0: entered allmulticast mode [ 1057.116950][ T5034] TC_ACT_REPEAT abuse ? [ 1057.134071][ T5039] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 1057.230110][ T5039] team0: entered promiscuous mode [ 1057.236299][ T5039] team0: entered allmulticast mode [ 1057.414160][ T5051] openvswitch: netlink: IP tunnel dst address not specified [ 1057.430157][ T5053] openvswitch: netlink: IP tunnel dst address not specified [ 1057.452759][ T5051] netlink: 'syz.3.8705': attribute type 32 has an invalid length. [ 1057.499906][ T5051] bond18: Setting coupled_control to off (0) [ 1057.538659][ T5057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.827256][ T5070] netlink: 'syz.1.8712': attribute type 10 has an invalid length. [ 1057.944785][ T5070] bridge_slave_1: left allmulticast mode [ 1057.997170][ T5070] bridge_slave_1: left promiscuous mode [ 1058.010609][ T5085] sctp: [Deprecated]: syz.1.8712 (pid 5085) Use of int in max_burst socket option. [ 1058.010609][ T5085] Use struct sctp_assoc_value instead [ 1058.011997][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.076888][ T5070] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1058.237757][ T5094] netlink: 'syz.0.8717': attribute type 18 has an invalid length. [ 1058.360241][ T5094] netlink: 'syz.0.8717': attribute type 18 has an invalid length. [ 1058.645462][ T5116] netlink: 'syz.1.8724': attribute type 28 has an invalid length. [ 1058.653619][ T5116] netlink: 'syz.1.8724': attribute type 3 has an invalid length. [ 1058.854570][ T5088] lo speed is unknown, defaulting to 1000 [ 1059.345772][ T5151] netlink: 'syz.3.8735': attribute type 8 has an invalid length. [ 1059.755009][ T5170] netlink: 'syz.6.8740': attribute type 4 has an invalid length. [ 1059.784077][ T5170] __nla_validate_parse: 10 callbacks suppressed [ 1059.784110][ T5170] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8740'. [ 1060.097412][ T5186] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8743'. [ 1060.148174][ T5186] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8743'. [ 1060.416449][ T5202] netlink: 'syz.5.8747': attribute type 1 has an invalid length. [ 1060.507595][ T5204] : renamed from bond0 (while UP) [ 1060.545351][ T5202] bond13: (slave ip6gretap1): making interface the new active one [ 1060.574616][ T5202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1060.615158][ T5216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8751'. [ 1060.618816][ T5202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1060.664315][ T5202] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1060.801188][ T5224] Bluetooth: MGMT ver 1.23 [ 1060.837516][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1060.906819][ T5226] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8755'. [ 1061.019367][ T5232] veth7: entered allmulticast mode [ 1061.151317][ T5239] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1061.171889][ T5239] block nbd6: shutting down sockets [ 1061.202617][ T5244] geneve3: entered promiscuous mode [ 1061.207938][ T5244] geneve3: entered allmulticast mode [ 1061.267441][ T5239] netlink: 'syz.5.8759': attribute type 1 has an invalid length. [ 1061.300147][ T5239] nbd: error processing sock list [ 1061.322885][ T5247] netlink: 'syz.3.8763': attribute type 4 has an invalid length. [ 1061.423125][ T5255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8762'. [ 1061.792909][ T5264] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8767'. [ 1062.537185][ T5254] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1062.951283][ T5305] openvswitch: netlink: IP tunnel dst address not specified [ 1063.095772][ T5308] netlink: 'syz.1.8779': attribute type 6 has an invalid length. [ 1063.125465][ T5313] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1068.512115][ T1557] block nbd5: Possible stuck request ffff8880279f0000: control (read@0,1024B). Runtime 90 seconds [ 1068.523724][ T1557] block nbd5: Possible stuck request ffff8880279f0200: control (read@1024,1024B). Runtime 90 seconds [ 1068.534795][ T1557] block nbd5: Possible stuck request ffff8880279f0400: control (read@2048,1024B). Runtime 90 seconds [ 1068.546642][ T1557] block nbd5: Possible stuck request ffff8880279f0600: control (read@3072,1024B). Runtime 90 seconds [ 1077.086973][ T5346] xt_TCPMSS: Only works on TCP SYN packets [ 1077.173565][ T5351] netlink: 'syz.0.8790': attribute type 1 has an invalid length. [ 1077.246571][ T5353] vlan3: entered allmulticast mode [ 1077.255668][ T5353] bond0: entered allmulticast mode [ 1077.261663][ T5353] bond_slave_0: entered allmulticast mode [ 1077.267463][ T5353] bond_slave_1: entered allmulticast mode [ 1077.274965][ T5353] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 1077.289113][ T5353] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8795'. [ 1077.344127][ T5353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.356817][ T5353] bond_slave_0: left allmulticast mode [ 1077.380583][ T5353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.410914][ T5353] bond_slave_1: left allmulticast mode [ 1077.429738][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1077.452136][ T5353] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1077.512889][ T5353] mac80211_hwsim hwsim68 wlan1: left allmulticast mode [ 1077.527466][ T5353] bond0 (unregistering): Released all slaves [ 1077.547246][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8800'. [ 1077.615010][ T5361] gretap1: entered promiscuous mode [ 1077.621866][ T5361] batman_adv: batadv0: Adding interface: gretap1 [ 1077.629748][ T5361] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1077.651104][ T5361] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1077.883552][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8803'. [ 1077.912627][ T5380] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8804'. [ 1077.931735][ T5382] x_tables: unsorted entry at hook 3 [ 1077.944618][ T5383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8803'. [ 1078.066718][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8806'. [ 1078.143622][ T5391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.180598][ T5387] bridge0: entered promiscuous mode [ 1078.197787][ T5387] macsec1: entered promiscuous mode [ 1078.241721][ T5387] macsec1: entered allmulticast mode [ 1078.258705][ T5387] bridge0: entered allmulticast mode [ 1078.273925][ T5387] bridge0: port 3(macsec1) entered blocking state [ 1078.282721][ T5387] bridge0: port 3(macsec1) entered disabled state [ 1078.294693][ T5387] bridge0: left allmulticast mode [ 1078.300893][ T5387] bridge0: left promiscuous mode [ 1078.323047][ T5398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.376060][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8809'. [ 1078.390511][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8809'. [ 1078.414503][ T5394] netlink: 'syz.5.8809': attribute type 1 has an invalid length. [ 1078.425010][ T5394] netlink: 'syz.5.8809': attribute type 7 has an invalid length. [ 1078.449914][ T5394] netlink: 'syz.5.8809': attribute type 8 has an invalid length. [ 1078.457743][ T5394] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8809'. [ 1078.484798][ T5394] NCSI netlink: No device for ifindex 65584 [ 1078.504908][ T5400] netlink: 'syz.1.8811': attribute type 1 has an invalid length. [ 1078.544455][ T5400] netlink: 'syz.1.8811': attribute type 1 has an invalid length. [ 1078.705078][ T5411] --map-set only usable from mangle table [ 1079.351687][ T5438] F: renamed from ip6_vti0 [ 1079.362585][ T5438] F: entered allmulticast mode [ 1079.514029][ T5442] syzkaller0: entered promiscuous mode [ 1079.521849][ T5442] syzkaller0: entered allmulticast mode [ 1079.944133][ T5450] nbd6: detected capacity change from 0 to 63 [ 1080.013573][ T719] block nbd6: Receive control failed (result -104) [ 1080.021264][ T5830] block nbd6: Receive control failed (result -32) [ 1082.490567][ T5481] netlink: 'syz.0.8833': attribute type 4 has an invalid length. [ 1082.594396][ T5487] __nla_validate_parse: 10 callbacks suppressed [ 1082.594422][ T5487] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8836'. [ 1082.630140][ T5486] netlink: 'syz.3.8835': attribute type 1 has an invalid length. [ 1082.864278][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8839'. [ 1082.968797][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8841'. [ 1083.524891][ T5537] netlink: 'syz.3.8844': attribute type 1 has an invalid length. [ 1083.543911][ T5537] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1083.582209][ T5537] netlink: 'syz.3.8844': attribute type 1 has an invalid length. [ 1083.634027][ T5499] lo speed is unknown, defaulting to 1000 [ 1083.644055][ T5537] netlink: 'syz.3.8844': attribute type 8 has an invalid length. [ 1083.721954][ T5537] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1084.017875][ T5556] netlink: 'syz.1.8855': attribute type 16 has an invalid length. [ 1084.020122][ T5561] tipc: Resetting bearer [ 1084.035939][ T5561] tipc: Resetting bearer [ 1084.068519][ T5556] netlink: 'syz.1.8855': attribute type 17 has an invalid length. [ 1084.109565][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8858'. [ 1084.132041][ T5561] tipc: Resetting bearer [ 1084.150851][ T5561] tipc: Resetting bearer [ 1084.271193][ T5556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.382736][ T59] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1085.002242][ T5593] netlink: 'syz.5.8864': attribute type 1 has an invalid length. [ 1085.013279][ T5586] openvswitch: netlink: Message has 4 unknown bytes. [ 1085.279084][ T5604] netlink: 'syz.5.8867': attribute type 15 has an invalid length. [ 1085.297376][ T5604] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8867'. [ 1085.453242][ T5599] bond0: option fail_over_mac: invalid value (16) [ 1085.507546][ T5599] bond0 (unregistering): Released all slaves [ 1085.773251][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8873'. [ 1085.795015][ T5623] pim6reg1: entered promiscuous mode [ 1085.819708][ T5623] pim6reg1: entered allmulticast mode [ 1085.926035][ T5643] netlink: 'syz.3.8875': attribute type 18 has an invalid length. [ 1086.121859][ T5648] bond0: entered allmulticast mode [ 1086.140098][ T5648] bridge5: entered promiscuous mode [ 1086.145614][ T5648] bridge5: entered allmulticast mode [ 1086.156405][ T5648] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 1086.211036][ T5654] : entered promiscuous mode [ 1086.313315][ T5661] netlink: 404 bytes leftover after parsing attributes in process `syz.1.8879'. [ 1086.334389][ T5661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8879'. [ 1086.480762][ T5670] ================================================================== [ 1086.489159][ T5670] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 1086.497133][ T5670] Read of size 8 at addr ffff8880581071a0 by task syz.6.8881/5670 [ 1086.504994][ T5670] [ 1086.507632][ T5670] CPU: 1 UID: 0 PID: 5670 Comm: syz.6.8881 Not tainted syzkaller #0 PREEMPT(full) [ 1086.507662][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1086.507679][ T5670] Call Trace: [ 1086.507688][ T5670] [ 1086.507698][ T5670] dump_stack_lvl+0xe8/0x150 [ 1086.507745][ T5670] print_report+0xba/0x230 [ 1086.507775][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1086.507857][ T5670] kasan_report+0x117/0x150 [ 1086.507889][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1086.507927][ T5670] af_alg_pull_tsgl+0x1c6/0x740 [ 1086.507970][ T5670] skcipher_recvmsg+0x5df/0x1140 [ 1086.508008][ T5670] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1086.508033][ T5670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1086.508068][ T5670] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1086.508095][ T5670] ? security_socket_recvmsg+0x7e/0x2c0 [ 1086.508122][ T5670] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1086.508144][ T5670] sock_recvmsg+0x172/0x1b0 [ 1086.508170][ T5670] ____sys_recvmsg+0x1e6/0x4a0 [ 1086.508205][ T5670] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1086.508242][ T5670] ? import_iovec+0x73/0xa0 [ 1086.508270][ T5670] ___sys_recvmsg+0x215/0x590 [ 1086.508303][ T5670] ? __pfx____sys_recvmsg+0x10/0x10 [ 1086.508347][ T5670] ? __fget_files+0x3a0/0x420 [ 1086.508375][ T5670] do_recvmmsg+0x334/0x800 [ 1086.508412][ T5670] ? __pfx_do_recvmmsg+0x10/0x10 [ 1086.508451][ T5670] ? __pfx_do_futex+0x10/0x10 [ 1086.508545][ T5670] __x64_sys_recvmmsg+0x198/0x250 [ 1086.508579][ T5670] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1086.508619][ T5670] do_syscall_64+0x14d/0xf80 [ 1086.508651][ T5670] ? trace_irq_disable+0x3b/0x150 [ 1086.508672][ T5670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.508696][ T5670] ? clear_bhb_loop+0x40/0x90 [ 1086.508721][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.508744][ T5670] RIP: 0033:0x7f9384b9c819 [ 1086.508769][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.508791][ T5670] RSP: 002b:00007f9385b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1086.508817][ T5670] RAX: ffffffffffffffda RBX: 00007f9384e15fa0 RCX: 00007f9384b9c819 [ 1086.508834][ T5670] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000006 [ 1086.508850][ T5670] RBP: 00007f9384c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1086.508865][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.508879][ T5670] R13: 00007f9384e16038 R14: 00007f9384e15fa0 R15: 00007ffcd3c1d4a8 [ 1086.508917][ T5670] [ 1086.508926][ T5670] [ 1086.761535][ T5670] Allocated by task 5670: [ 1086.766078][ T5670] kasan_save_track+0x3e/0x80 [ 1086.770804][ T5670] __kasan_kmalloc+0x93/0xb0 [ 1086.775428][ T5670] __kmalloc_noprof+0x35c/0x760 [ 1086.780318][ T5670] sock_kmalloc+0xd6/0x160 [ 1086.784782][ T5670] skcipher_recvmsg+0x54d/0x1140 [ 1086.789795][ T5670] sock_recvmsg+0x172/0x1b0 [ 1086.794440][ T5670] ____sys_recvmsg+0x1e6/0x4a0 [ 1086.799241][ T5670] ___sys_recvmsg+0x215/0x590 [ 1086.803955][ T5670] do_recvmmsg+0x334/0x800 [ 1086.808411][ T5670] __x64_sys_recvmmsg+0x198/0x250 [ 1086.813486][ T5670] do_syscall_64+0x14d/0xf80 [ 1086.818127][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.824140][ T5670] [ 1086.826526][ T5670] The buggy address belongs to the object at ffff888058107180 [ 1086.826526][ T5670] which belongs to the cache kmalloc-32 of size 32 [ 1086.840639][ T5670] The buggy address is located 0 bytes to the right of [ 1086.840639][ T5670] allocated 32-byte region [ffff888058107180, ffff8880581071a0) [ 1086.855818][ T5670] [ 1086.858200][ T5670] The buggy address belongs to the physical page: [ 1086.864691][ T5670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58107 [ 1086.873619][ T5670] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1086.880865][ T5670] page_type: f5(slab) [ 1086.884930][ T5670] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 1086.893821][ T5670] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 1086.902531][ T5670] page dumped because: kasan: bad access detected [ 1086.909227][ T5670] page_owner tracks the page as allocated [ 1086.914976][ T5670] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 99744901457, free_ts 38019181445 [ 1086.935953][ T5670] post_alloc_hook+0x231/0x280 [ 1086.940823][ T5670] get_page_from_freelist+0x24dc/0x2580 [ 1086.946629][ T5670] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1086.952822][ T5670] allocate_slab+0x77/0x660 [ 1086.957370][ T5670] refill_objects+0x331/0x3c0 [ 1086.962266][ T5670] __pcs_replace_empty_main+0x2e6/0x730 [ 1086.967854][ T5670] __kmalloc_cache_noprof+0x392/0x660 [ 1086.973272][ T5670] ref_tracker_alloc+0x15a/0x4c0 [ 1086.978245][ T5670] batadv_hard_if_event+0xeef/0x1700 [ 1086.983712][ T5670] notifier_call_chain+0x1be/0x400 [ 1086.988868][ T5670] register_netdevice+0x173a/0x1cf0 [ 1086.994204][ T5670] veth_newlink+0x4a4/0xb70 [ 1086.998844][ T5670] rtnl_newlink_create+0x329/0xb70 [ 1087.004018][ T5670] rtnl_newlink+0x166a/0x1bb0 [ 1087.008840][ T5670] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1087.013988][ T5670] netlink_rcv_skb+0x232/0x4b0 [ 1087.018832][ T5670] page last free pid 1 tgid 1 stack trace: [ 1087.024682][ T5670] __free_frozen_pages+0xc2b/0xdb0 [ 1087.029929][ T5670] free_contig_range+0xbb/0x170 [ 1087.034924][ T5670] destroy_args+0x4e5/0x570 [ 1087.039472][ T5670] debug_vm_pgtable+0x3f8/0x410 [ 1087.044377][ T5670] do_one_initcall+0x250/0x8d0 [ 1087.049722][ T5670] do_initcall_level+0x104/0x190 [ 1087.054701][ T5670] do_initcalls+0x59/0xa0 [ 1087.059073][ T5670] kernel_init_freeable+0x2a6/0x3e0 [ 1087.064304][ T5670] kernel_init+0x1d/0x1d0 [ 1087.068668][ T5670] ret_from_fork+0x51e/0xb90 [ 1087.073299][ T5670] ret_from_fork_asm+0x1a/0x30 [ 1087.078375][ T5670] [ 1087.080772][ T5670] Memory state around the buggy address: [ 1087.086474][ T5670] ffff888058107080: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1087.094771][ T5670] ffff888058107100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1087.102874][ T5670] >ffff888058107180: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1087.111052][ T5670] ^ [ 1087.116204][ T5670] ffff888058107200: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1087.124339][ T5670] ffff888058107280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1087.132505][ T5670] ================================================================== [ 1087.179198][ T5670] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1087.186516][ T5670] CPU: 1 UID: 0 PID: 5670 Comm: syz.6.8881 Not tainted syzkaller #0 PREEMPT(full) [ 1087.196229][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1087.206353][ T5670] Call Trace: [ 1087.209693][ T5670] [ 1087.212676][ T5670] vpanic+0x56c/0xa60 [ 1087.216839][ T5670] ? __pfx_vpanic+0x10/0x10 [ 1087.221463][ T5670] ? __pfx___schedule+0x10/0x10 [ 1087.226394][ T5670] panic+0xc5/0xd0 [ 1087.230204][ T5670] ? __pfx_panic+0x10/0x10 [ 1087.234868][ T5670] ? preempt_schedule_common+0x82/0xd0 [ 1087.240533][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1087.245738][ T5670] check_panic_on_warn+0x89/0xb0 [ 1087.250747][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1087.255836][ T5670] end_report+0x73/0x180 [ 1087.260183][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1087.265378][ T5670] kasan_report+0x128/0x150 [ 1087.269969][ T5670] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1087.275061][ T5670] af_alg_pull_tsgl+0x1c6/0x740 [ 1087.279968][ T5670] skcipher_recvmsg+0x5df/0x1140 [ 1087.284995][ T5670] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1087.290434][ T5670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1087.295461][ T5670] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1087.300810][ T5670] ? security_socket_recvmsg+0x7e/0x2c0 [ 1087.306527][ T5670] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1087.311960][ T5670] sock_recvmsg+0x172/0x1b0 [ 1087.316590][ T5670] ____sys_recvmsg+0x1e6/0x4a0 [ 1087.321430][ T5670] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1087.326799][ T5670] ? import_iovec+0x73/0xa0 [ 1087.331446][ T5670] ___sys_recvmsg+0x215/0x590 [ 1087.336361][ T5670] ? __pfx____sys_recvmsg+0x10/0x10 [ 1087.341616][ T5670] ? __fget_files+0x3a0/0x420 [ 1087.346500][ T5670] do_recvmmsg+0x334/0x800 [ 1087.350975][ T5670] ? __pfx_do_recvmmsg+0x10/0x10 [ 1087.355968][ T5670] ? __pfx_do_futex+0x10/0x10 [ 1087.360870][ T5670] __x64_sys_recvmmsg+0x198/0x250 [ 1087.365957][ T5670] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1087.371575][ T5670] do_syscall_64+0x14d/0xf80 [ 1087.376317][ T5670] ? trace_irq_disable+0x3b/0x150 [ 1087.381405][ T5670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.387717][ T5670] ? clear_bhb_loop+0x40/0x90 [ 1087.392645][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.398683][ T5670] RIP: 0033:0x7f9384b9c819 [ 1087.403132][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.423117][ T5670] RSP: 002b:00007f9385b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1087.431841][ T5670] RAX: ffffffffffffffda RBX: 00007f9384e15fa0 RCX: 00007f9384b9c819 [ 1087.439936][ T5670] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000006 [ 1087.448120][ T5670] RBP: 00007f9384c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1087.456214][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.464650][ T5670] R13: 00007f9384e16038 R14: 00007f9384e15fa0 R15: 00007ffcd3c1d4a8 [ 1087.472668][ T5670] [ 1087.476492][ T5670] Kernel Offset: disabled [ 1087.480838][ T5670] Rebooting in 86400 seconds..