last executing test programs: 3.118917488s ago: executing program 2 (id=7102): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$kcm(0xa, 0x2, 0x3a) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) 3.108753598s ago: executing program 2 (id=7107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000004000000040000000900009dda02dc0014c5cf5de073af26b2072672e32b74188f6d6bb9e68ba219f9569e00000000b6455fe12af24de2b151b8f9ea5a51b380baa3f01388ef16ecccdcf075359c92e76545bbb9e69001ef3c931371eeee2ec52854bf1de3281ebe46b25da7381aec952cec450d031f07c2d5c8b609f6266143c7cd3f7855769ac18e7815abc5cd57d6924cc75761d08757753c243b4a4ecd13c691e5961e190a8529dfec5b24d459baf3fd99553a8c258023cc43e5d69c12a54215d094609222e12c3f9ba69fa5569fba70cbbcd3c40b2eb4e8b128f53f1d550a9c95", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000bc0)={0x14, 0x2, {0x40, @struct={0x130c, 0x7}, 0x0, 0x6, 0x0, 0x4000000000000000, 0x4, 0x4, 0x403, @struct={0xb8f, 0x1}, 0x7, 0x57, [0x9, 0x2, 0x9, 0xb40, 0x0, 0x7]}, {0x401, @usage=0xffffffffffffff3c, 0x0, 0x5, 0x8, 0x80, 0x4, 0x100000000000000, 0x8, @usage=0x8001, 0x1, 0x8, [0x5, 0x4, 0x9, 0x5, 0x5, 0x4c]}, {0x526, @usage=0x882c, 0x0, 0x40, 0xffff, 0x1000, 0x0, 0x9, 0x800, @struct={0x9, 0x8}, 0x7ea1, 0x6, [0x84, 0x4c, 0x4, 0x8, 0x5, 0x9]}, {0x3, 0x5, 0x9}}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000480)="e923a6d130238c93589265e31fc4198c481cec77a5ac8b250ae0fd31278e0129adfa137723864f6f4c1b326b9b70ed296da1688d2c3adedeffa2818ba54611619d4e0eb67de10474124f78d4c6573c2e324da2df91c51ab98a4065c075be2040e108c1fda50adfe38d40897e7f5c6a7fe745e666895181f5206bac7706e0775dc17be332513e26c46ac1bcec7a615037746b2e4a99a33a76137a48e7026c48680cfa82504c8e92ef42c6c110c80f1c2238a4da831fbbbbdc97", 0xb9}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000100)="b4b24d8f91f1b2ab0528c5026d9a0218ff0563b948c9963cb1f93f731a9c3b105bee599052d0f88a955e8ec48a8629e2be478dcd41642fd6dfcbdd9bd8b4a98f4911f907f7b1fcf95358c66c3fd9", 0x4e}, {&(0x7f0000000080)}, {&(0x7f00000026c0)="08e15574dc1263d7a6afd16529a0e43a94877ba422cd59794ab3e69814990acca4e0dbfd1611927cb76184c9c5604ddfdb3541667f568d4f780163a1f2050bf1bb23f62e1afe5c2f741852504192295124d0c2f56231d98b72ccfaa196dce2de908b61e8fb34636d53411c83c8760a498e66c6d374da3ef1172cf7913c9520f96c7e6285d155f247f8aa33a98be72be59ab0f5cbe5725e9f347d7a408b53d2df2d81060351c4b50af779131be5136b9ea7a308f6edf98f1b50cdd113f7c88f4e1a819ff4313e252e7b5b76aa693e5c57bbe0ffd685b54bef176dbaa74496e0f589f93fada746a0fea52a472d0fd8aae78faeef8c3b2d395192cde069c5e6fa247af59be44a15252d872bc3f1399667cc53201977395d2df57049b230ba7b4ec775f4cd9dd37e25ee2e8ac4e0f46f269045d3055d4e15d5b25255b39146cae2c4d6c9db800df023dd364097c34cbbad254bacb95ccf95d9499831978c3c29e0f362869831deeff30e6df8ce2c9740ebf2d3625ec5ed922343f4f39c2c720ad4222189097f0e632ddf52bc31b95b40d62e2176a395c99c2f4f866014300f3b9bdbb88fb8133c187a3930f294451c38354b6d5e48eb7e40571592c115cbb226f2262aedbe61dab696e55886c0511bcb405446d6a027727cb67214468614780de92feb020ab4b363e1094fac3eabb9a3beaea9b1016caab2b6ad2c7b189b1ff73f597364bd30f6aea2253b6e1b941c13758c162ca0a00d0f1892c88a44c2f79c50af95ea5dca7179d14791ac590d1f140ca1986d7e62fc6142af74586c8327813c67f574a9e5282bb0ae67fbe5fca240d2da75d2c22fd9d45c62b74bfe4f748309b506a120966e336d7ff96a96c02d2164747ade2bbbfe37683dc15491e2c6a20d8fd3af5f75d7800fdba479bc618cc0e9b05762ef88d59cb2a5e0b65e24be6632925117a4be9326cca367d8b055c2398dbfab7a841b4516a4ed052a932a21fe17c5d6cf474320e1adab57af45dd42bd6f818cf1c1323c19a8ad124f18fde63bc5add3a85b717d65c4af1d47f012fba3f384dfe0cef02711021687c9edcaff8b83ec2fb0b553305fbcad263f97feae8b96e7fc7b5aaa2a85caf3f30c82135cac61900db621d2df333e94ed3e34ad0053f30b9095c0e27fbc68e9b44b549ea4000a959bd71b26a99c60e8dabb857c5bd169cc16e400e512617d437c4765aae39d654ccf11b70d45fe01e38e7a3c38e6db4f5cd61f185af49b28ddc8ab9a513c7ce8d969487bfe3a242697c786348552ec325263d90cae8aad336131570a032c6f85bf7933e3fd78f97ae9e67879abdf6c8b7e3e0b7473536c7065d5fe65ec7fa22df04643ab630a382511e5d4572b6a0cf1ea28359535d64324a29ef3dbb8e816df910a9670d09569f8fb6a4409733ebd6ae623773d250eacb54a0f3178004e977eab1397f40b09a24a32081c0e090334d7f14b779b339388754e6e3c0a4924a1b1c0d5badc3561c06b237ab35e9ddf9d01a767aedd944f96a552db7452acbbe982df0e9b4a734660c6b795f3f70d4262aeb4479c44c5d85f498c64f357a5749b2adc30d314f794b587b8b298dc81be592a7b7970b1c51d5d91c96dd33c34d4368be54633ea89d3c5e3b98a22b9ba66481d8147e7ab77607cd49bf034095c078f5428c60cbe34da3b5b9a5c1654ad43fe4afa923c63bcd1d55b3135e5c8ee2ee922921f5fa2e2a7c0ec69cf6bbf930de417a8ce72ffaa9b7376e66676b61dcd789cc49988aa6cb5e51fc91c5b556878d2c637f3fa1e456d480fd9b1c969c8da7050bbfec735d14bdb501c23c0873a3adb572a2698b23921ad8f505d9c472f071afaadc093babb154134ccfeb3194d0694233db196ed194e096d7e7392b145d9a44ad450c2205bfa1445c39acc874e50ae6e61c0dc8b718548774e8182bdf699c54fde64fdf07525940c70cbfbf106300a8227588b7e3e7c5fa87ac534ab392d1fea38319a4391f85bf17f07a2803c87c8421c7a071669463bae9705dfc15dba70deb958620e5414c065ae5776b1642e705b6a0cc7f2d196577fd7e2c2c1384ba84b1a0b4a49a8bbd3b9eaab721daeca7e45f8b238b9967ecf9eb4156abdfb0ff6bd80f0497139cec10b3e6d9afc090a00caff9ea6363419e9465020275e81d8fd92406ad6f8973fe732f5512b74493566ef8fc7723b893ebc40251a88ad06dd67cb9d6ed1fcbd7246bf7424b5c7b23cf80522e356c891ff3ae4d2c0d96b0264e6252ed4226682824604d8c37d05ef02438b6e4c8ee82e07af5e55f412ccd6e5cf5a81f9b5e79413cf7b7f6b8f8bc02a70b69b55003083fd9be37bacd64516a8e1cb57e235c0dffee882222e23d18ad72ec751e60f2e92279eaecdf45a4f3c260aa850b7c47a5cca0df3448afdec03c0692526559c28e6b45e4cc9a1ae1b2500594d8c3d21be87861d10316fbf437f917524c48bbd0f66054c9d27bde8a6f2e555648c2c9cc28d5b618929d7ce2424442d7705689cc1d1b6a25cfb7376f703985e28910c5cda10707584a36775d5a18023f8247ccd93ca6d9a1867db1a19a23257f80eee6955e24a2a250f91d91cbbeaf40f9a106d7c9730e82d25ebdbd3952ad8bd9faa8dc37e761f03002e1542e4d42b1d1929f268d4cb921fb5a12c46df6053ff8a35825f340a57cb82167b4d06b13cf9801aacee0942a320d91cb2bf93db251e772e10bb46c53268e12fc6234cabcc1f7deecf4e0fe86c67f5b4df69aa2f21031814066a28a76d6148997ba89fea946b682d433600a4425c74c648f385c80f47892345114e7bc1ce18c493b54b2f8380a518bb5f3be62f97d6651af9719f7bad565fce4e08c2f7cba5c93e242eba2772de93420608c90af98f08982cdf9523e6d06876f1d5911b51b37224db2574f4c93458ff2e7068ef4c666528ad204acb3d046fc5754e9e2785c4daf8c9e3217850aa46a8ffd3b2e9df3b794fd52bb1a87500e481a64b583b269ac0e8e4dd96f4d85b45e1c2dc67bd6f23278c961be2666b88f0228aa7bbfe8771e115757b454fe2c6fc710b9ef04a7de60bc3822a6d7dda6852166960500218448ee465fb8ce04701cef7a1bb80a90428bb9bc88732d0faf39f5552d155ec452a73bace6ceeba9050a6fc3572d805c3565b65518d6f4416651d14d84acf20c1c70452081ef67fab9d8953c90fe95e3c7aee09aa5d2dfbdb62dbd99b5e246852c6fa36a4d0a067cc93658e6176a770c4c0ff187a4b38627729a30e9ed116bc4e848cf49bec48ba493c6c905ca534dee5f3628d49db7ec18107551786b58e7821bc26a9a83e956e90c9c27f2c7b9b3b4e43ac80ebae3985047c4708355b353b12b6099e731a5829addd9ca5525deeb5379911b7eb7d3cbe85e4b81ff13251ec60d699fc2e173edb8be75683ecf842d366638cfbb8a7d23d5dd12f525456c815590ebf277e6c1f7d17ead5cead9a497e27041f61798fd3497ff28e917618da83a9333dfd809db24fe923e607291d6374a2e757b9992fbfed45c5d206303fcaa388d9d1a86c03ca69c531110c1e1aedf0fade7ac3e6e34314f7daad459a8e41513f6c40125555294c78c93229e883cb8b5e07a563e1d4f1a480e19ad0b708e309b95d3ba7b865dfa3cba46dda0e4313733115cc7f7a64fc8f436c827eded76602f6aa8617d9795fff679ac3b5526ce5264e86d61f1a48b942c4f0971187ee7267e01881d1aea5d6ab6498be4d11fe652eca1b4f367d083d3ffa16548d7be4783f69a9bdecdc607205f3dee3e7905a229e53c6ff461d79e27ce0faadcbd28a1fc797405c55ded91f22e8a4792f25063fa751d35d95523015947dfb6b7c1906d66f19e7ec043f0f84aba5c4d3506dded54aa7d1bfd41862041dd8d94571afe41ceae684fccc34de7ea1b34237dea420894789939c53d3da80a4d117477a6d6e1c053488c2e0be72c38b15c5d24f011a384679fa0709998825243f181f84fa3d7010b6d1c174cfcf8f81f426ddcf428f0ea75f14c28d3528aaf609e9b94524de64d53b3668d49e71e4a72ccdc04c8ec836a37ce5b4307506743a6242735e1476d537ec48bd7befbbb086d62a7ef9872f5e3627df31fc1ce7084dd507a75d1e28bbb3b25710ea22c6c2867b67a6b032afc25d32cb3707c75b21f40c49f56a9c1fd2435a796fa885b2e87345a279d9476dc56d0a44c14704185e249f2fadaf8a5b42515e5b72d0afab59c3721aa1bdd907bb0d092a9fd7827bce0a905de4c583bfca362141ceeeeb573d8f052e5d3269f1b8824e727fb574061cdc73e3948b346c36e35549bb1ac0f357988ea7e5f515b6ed440954ea3c6f92bc437ea4564868dc9ee179b7f887a64cd80f48261f48a25db213f80d8a5ba38ebcd447c72c0e0f0c32978030bd2f90ff926f271af5d86012ce5eb3b6f94eb8e285db81da135adad019750fbdf709859f53ec04946b5be1e002343f92ab9f4fe15f306771fa36026b3818936287e962fc8bd4f243e2b6a1329bedc97ed78a4f1e5506f2fee5858899b2b908b9e31080265b888ed0ff47d6814521c931988af03ff5ad63ddb301c8b9d4a6858c1570ecdac4c2bd5e7dbeadef890d6dad91f0d9eceb53d9c6a81ca2524724b7c6167b38f481c2e97344751fa55d1dfc2187eb68cdd31d8ab2fa2fbd88b850c3aac75e8f94290581ec12ba92731487b7b3de0e4ad588d593f923fffceb25062cf6582a4cf43d610852f5c4273e2646b3398b11eaaa6ab0e98e97ce2dbe489997f5dabf39223070167fa5d12e9853bc2b1c84910911a363876f9562477d1803e77696b7c17c6e9ba0542a14751217937017c69192abc493042318669952f1b80600067b6ede63545645403cc51012972d56f0bd120df394bdac8807940507d623315375fb33c682d3b24a744dbe3c2e9fbce95917f461bdcb012e13beacb9326a87ac8845a0c5cbd7e2d63b3027f0fb85b6893257f52799ca64bb9ce669a33c647d98b3b69b7267ba7f77dbcc64b079f0eeceded759e88e0bdedde194f2e8b8976cc90d9e504118c0048b419c83f6c39484f1cb76edb9c8342e9c9c15d5c572e229838ebaa498faef35b7fc07b8f92e31cbcedaa61affcebfec187884f274488782287668283a6fde46c000bfe541960b16aa4fc656ffa353ab0ada3d657ca905e637448560a9320b6d64aa1834c12257d1b2054a7dbfec40f79c92f113f4904a689f6cde6aba0cb9246cbbc44c65e9c6915baa092bb3ab1b83534f48f8a892c7eb8581bca47c1aaeb384e9196363bb8c1c800b58810e475de60c254467344cec97c66ff86ae06552375d0ff3c0e1f8c41626fc69a5d12d3cd118d8a7683f845e0da0eb2ee2ca1adcad1a5cce82566cba3c08e7d10ca16565a00500747e1eb832d3ff4e0532e2775e0b26b463d913b2e930f6ba4c93fda4f5740653fb71297b50aaf5dea63ab07626b2ec4a8c9fe2332073195d7ba5f872c19851594f4eddb0f5474706cf27dde8420461371ee11071690f6e90443b46c521d8767d8978360441d37439e3ef5b808f66659d4e52ec335ce4f5811a0d363d2c2e6d60963e3aee18b0fcfefa88dec73e35bcc4d01759a8cad6798917491aa49a50f39a790ce5fcdea05095cd399cc92ac15482e89cb5d3af4c7c8f92600804894315cb6631674b3122d44187c61daf9b88fb81385bfaa463b229581bbcfde5896b9df762e479e7f9cb9195dacdf927727d0edee9b9ff6cdb4ecab3f8217687c665b4af62d6587a9e0db1031a978f7517af1553beb1adbd741c2c164266f0ad798c", 0x1000}], 0x5) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000fc0)={r5, 0x5, 0x6}) read$nci(r2, &(0x7f0000000ac0)=""/212, 0xd4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008040) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 3.062114515s ago: executing program 1 (id=7110): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000003000000000000000d020000000000000000000005000000000000"], &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) socket$inet(0x2, 0x2, 0x3) 2.819139688s ago: executing program 1 (id=7113): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000bd0900030009797a30140004800800024000000000080001400000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800a0001006d615430126185da1e4102800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a3000000000140000001100010000000000000000000000000a00"/240], 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24040080}, 0x40) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="5900000000393b5f29f607003a91d5da"], &(0x7f0000000200)='GPL\x00'}, 0x90) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0x400cd}}, 0x44) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000680)={0x2, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) unshare(0x20020400) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x80000001, 0x7, 0x8001}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r9, 0xab}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00"/12, @ANYRES32, @ANYBLOB="ec3156eb516ede88570ea69002360bd917753e8db2704e5e6d8f56ed4efd9ae3a70b0963e8e9ae71cb39fe487eaae3a44360ae84bec318731e9134", @ANYRES64=0x0], 0x20) socket$inet_sctp(0x2, 0x1, 0x84) 2.818749104s ago: executing program 3 (id=7114): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) r1 = socket(0x11, 0x3, 0x0) sendmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}, {&(0x7f0000000900)="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", 0xfe2}], 0x2}}], 0x1, 0x24044015) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x202000, 0x800, 0x40000000, 0x7}, 0x19) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (rerun: 32) 2.570082495s ago: executing program 3 (id=7115): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000680)={0x1a, 0x28, 0xac, 0x4, 0x3, 0x4, @multicast}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, &(0x7f0000000000), &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.318341755s ago: executing program 3 (id=7118): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="597fe8a2b5eaaa6b0ed243fdb55f65d4", 0x10}], 0x1}, 0x20040810) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)=""/15, 0xf}], 0x259}, 0x8}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/108, 0x79}], 0x1, 0x0, 0xfffffcb9}, 0x9cd}], 0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.221963053s ago: executing program 2 (id=7119): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000100)=""/192, 0xc0, 0x0, &(0x7f00000001c0)=""/190, 0xbe}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010471"], 0x24}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) recvmsg(r7, &(0x7f00000004c0)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/213, 0xd5}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100003050000000003070000050b0000", @ANYRES32=0x0, @ANYBLOB="20020400061000001c0012800b00010062726964676500000c000280060006000180000008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.129673237s ago: executing program 1 (id=7120): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f6}]}, &(0x7f0000000140)='GPL\x00', 0xe07f, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xd, 0xfff, 0x53}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000080), &(0x7f0000000500)=r6}, 0x20) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x40) 1.68407488s ago: executing program 4 (id=7125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64) r2 = socket(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="8ff6b55b3294de9d1eb51d401000000000000000b702000014000000b70300000000000085000000bd760000bf0908000000000035090100000000009500000000070000b708000000000000639a04fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500006000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.556361014s ago: executing program 4 (id=7128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r7 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r7, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4) recvfrom$inet(r7, 0x0, 0x0, 0x40010120, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1528}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4014) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r10, 0x1, 0x60bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048854}, 0x4000000) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x7c}}, 0x0) 1.427267927s ago: executing program 4 (id=7129): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001e40)=0x0) sendmmsg$sock(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="ac37be73121a7c8e6e326c58245d870638b99c619eee9a7953d3e9af0ab85d7ed529fcf4b670f19425eb3812ef3d37d73e99009e483fe40c27843282d1708024c16e6dabf2bb2c74bd36cd85716dbed3022b54f57e858676a6111e3c91475c4a2fad0c1597ef842f9fba1cbbd816be49358dcebe51c658836453c44bcb9de38670753e73bde31e07a4baa529c2c18d943349ecbdf1b5622c1d574f2443ca6e8a9736dcdad6209256df614c5503edea25572b6a2c2f95263ae373f61135a0cf15c18b436bf86e90012132d8da439bdd602b883c0ceece35032d52", 0xda}, {&(0x7f0000000180)="6cdc60cdab768dc818454df3acd7cb1623076d364bbd2f365d999a9eda1f6d518a8041ef41924ce31337aad7329dbf94a357344c12ba69ae77ca00fa31d4f7da0e2c08c066fc067160454c7ecd3b9696b0fd91d9b6f6c702bccfde9ac1054768cc3e4799415160f70f124b6da556284643d1e1d3a1bebee74b5c683cdf440281b9cf573e872dcf5efe7db7f520b0d437479620999da317", 0x97}, {&(0x7f0000000240)="7f5e01c8b6bfd500c15e976bf2be0bfc56ac1c4405d690460d8061e084", 0x1d}, {&(0x7f0000000280)="84f8f10d2879419b88c622", 0xb}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="2f6938ee0222b2432af277a9e1c0bd5fd6047b367f", 0x15}], 0x6, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0xa7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="885293a4e3d21cad6868474935f67a2c8d324d783f7d7f2592893d782052ae78fc37c8148ee1a8c9a545ac6f1000d0fbfc5e34e640c651b33377e738c30926df5dfba5f379433d254bd4b8d3fbab6b3ad99fa28cc2bcb3d231ade008e3cc11b9fc60b0bf6e5fe24d3ffe97e6d107e92c1a23af25df68067e8d87f8b56e56c818c558b9f6519e92cccc0671c4eedf6b3c83aa46011885c35f31", 0x99}, {&(0x7f0000001580)="bc194365296090ed46170dfc4bd88ad5a889a1de69bf1fe623517134a1af52e486b8194015517e7c", 0x28}, {&(0x7f00000015c0)="14233fa1bbb1f46f8bdc6e3be559773c0cebf87ed15663168c19ef32bc274f2f5987abf23928bea32a7e931214a8913cb853275325b768b4c4610a2ab617ed62fdbdf3fc089829ec85135ab517a0ced9ebae3ea532595c05e4267b58adb311fc21e8a2adac84591ce9aeac99a51196a9b52d54bf817df706f219ffec7155a7f094e9b55b1dfb2d88f913881364b42494eb1bf9cf05836bdd488465c81e8508715898b6a721648a025dec08602818348c5240c0072e853c7f7194008f2ea4c0d1d59e3fceb97726e84b", 0xc9}, {&(0x7f00000016c0)="322fa2", 0x3}, {&(0x7f0000001700)="7efeb16906a86ea3cd32f4b4b5e84b3dfd3810285a1d418c96384b579c130b3f66b5a46d853e46440e54097308559e1cf50e90a7d7a07303a5f4a3cbae327eae27c711c513b8a62dc3046e13ff8e9d5be882ea1d30d87c55078a2d3bb8195a49a0b2eddb23399da15b50dbd3fe6f21e8390a7625", 0x74}], 0x6}}, {{&(0x7f0000001800)=@caif=@dbg={0x25, 0x2, 0x8f}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)="598a90306e74af274d01001ce7702bf2ec3f86745bf738ffa1d64d1a003b4502e7645dfb36ed6cebf34aad036c4fc32f5e9796b627163c8e691f14c6114ca72df636d0d2fc54624305fbfe986a7bd2dd089c042e04e2d52fc7731202fe94b51cee09c1fd3298ed2f182e56377bd0c9e7cff4f573054c867891c29e05454673597c756dc80ac22d51fa5dd540820d465af4b067881af91e061cdc3a1319a13c56a6aa39e9530ad74c87ab56b25969f43433727987e22614ab7de76ff066ccbc9b46415d7bff851fecb5f1314f3c5173c51df4d75f", 0xd4}], 0x1, &(0x7f00000019c0)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x18}}, {{&(0x7f0000001a00)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a80)="a25d", 0x2}, {&(0x7f0000001ac0)="2c443211d13b1e902e3fe9eb70a622d9a085cf48a8d370bfd7d43969649d832ed0c69c1c66f3817eb1188d35d7a3e81a3c6fdffb06e9712760797898944d59aa78a1164f5e4092a35bfe7165777979464bf993741a124427930c9ad96b02becdc40fbb813bf9959d6201e3bfe5d37f901a982617", 0x74}, {&(0x7f0000001b40)="b3218ffcb1ab2e5a2e85b2772a86586fac0f3548517abc3a3c77e4895cbba8a374be4a9719ce5ad70da00958e4039232d5653a1dc4e7d665e0fd22c020d0a03f6ba6df97002101646eda378c2a131205d2c42bc84759f822d8f3434f2522f4ce22a3cfbabdcccfefcae9004bef7d83d155bc9a9ff309836779d2dd229cbe6d4e3a", 0x81}, {&(0x7f0000001c00)="229814304c6d5754f4cbe878e2e1b5c347b0b1cbb47c81e34f06dfcbc568ceb3ed916549ed87d3037d6f70e536d3907b662d680c972e5f63f805e8dd9eaf8994e23d61d023d255c9299cb9d64d4b99171af4e4292da9e7c2fe8868b6b84b311d9a0be21b35017063c52928f5aad52002fc773f5b495ef57d30306347979e7ee853ead8c0be178ef41d4fa63058003b9038f6ae15bf8c80e96497724bb95a12a297", 0xa1}, {&(0x7f0000001cc0)="d1d32d0ca0994a11c388855ce4c0fb500ddd7206ad4747972ed4", 0x1a}, {&(0x7f0000001d00)="97c4de01e42b26a2f5ff68b27da8de2cb53ef06e30d8692417432b3328fca7981040c817ce67489cac9b8690c0a9150130254b6538b10a0e1dcf7e2e2afc1cac3a647718e15bf71bbac5892b74ac3a435feebbda8657ab5fcb17702439930e2d3be5e43d2e04640a63b25cb33559347fa92cab8b4b02d2889d5c26d66722ccccdaf285016e8d1f98361627e1ff458a71c83233156c87bafcfd", 0x99}], 0x6}}, {{&(0x7f0000001e80)=@nfc_llcp={0x27, r1, 0x0, 0x2, 0x4, 0x3, "0f89669afa6e2b0ffb11e423b1e2f8af2bb4c0f7d2f2fc2df78afa06c0cd90d179d324864f598d60a2d047a42a15a7b8cc7819118ff066cb66a227b2de71a4", 0x33}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001f00)="41a7dce4fa2fb7bd8b6c1655f8990b42cd3277b389427a59895a106d7521a703ef7d86f03a69704d22554a7d3ffc58c40444500f44db58c3e45b0832eb6f90960ea050a5e46948c103829f44753ba17bc8bcf930300a0cac5c45c35d96111282be72d0ea344f02da67265ebdd8817d2a87fe32d40082ef17014e99f7958c97f2500c6eb2e2700616d64f426b58de912ade068550bf02a1682286f87fa06dc07c85e575f4f6038d94ec26a7ead6d7552bff73066c61b4aa22aff28a1b438fbe4f287c7dd0bb5efa76b7cfa7919d8a73f416cd01509181440ef121c8f5c552f72026b4dd0e1829e893c809af7c027523a158af5b", 0xf3}, {&(0x7f0000002000)="d56683fc2dc4f2d62e2ccc4fa88847c5d31fd60741c8270b9bc923a5ee738278180ba7632cd46c878d28917363cfb4c5d2b24f3770cff9f60a0b9a61c8404a4d0b0863cc701c506d08f85d4e561498ca373c83dfac16105e753edd55387e79e20ee158c860a029a0624471c824abaed8e838629b36328e6e7b3799029d041330f69beba7ee758c3fca19d62285c295a998f1482699fe2f4796a50f1f8a9ddddf8cb2513bc75b4cb3d6ade4a390b0c56c3de5c71141d306f81820489d56992e8911bad0d10be519da3c5f8fb1d0b9a1bae829ccdb9e16664662", 0xd9}, {&(0x7f0000002100)="a25437de2ac650a954a8002aaa0b2b2df4e24fd70cb5d62454dd614d0cf41e38c92bd866655d6efe6205eede6eb7dbffa840d996f663a7b0b8ea7fc38e3ac567387507564f39b9d1756dd8221d80edd587e723ae2cd8027a5529026311882f5241f4a12d98f7389f90fd2f9bc651b0c47770f816c5251af3bcd7e7b70f2fab3bc0fbe4ba", 0x84}, {&(0x7f00000021c0)="03a8c233a952b7e5b93a32ae31a0994e6e1d593a34e22f77e97baded283271937208ac", 0x23}, {&(0x7f0000002200)}, {&(0x7f0000002240)="f3d86e847e18f135242d72e404ce5e2731c99ded6c7c4c5059856dc0dda5455f", 0x20}, {&(0x7f0000002280)="26a19035f17f", 0x6}], 0x7, &(0x7f0000002340)=[@timestamping={{0x14, 0x1, 0x25, 0xd}}], 0x18}}], 0x5, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f00000024c0)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002500)="a2fd38b2535b3685c43ef501169215ad8792548911b07db4e5f03f2f3bcfa4f54b22c992d9932cbf2e66fb518316e839dd440a6e", 0x34}], 0x1}, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xc0, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xf6f}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x21}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000002740)=0x4, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000002780)=0x5, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000027c0)={0x3, 'batadv_slave_0\x00', {0xecfc}, 0x4}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002800)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002880)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000028c0)={0x0, 'team0\x00', {0x1}, 0x3b3}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002940)={0x0, @hci={0x1f, 0x1, 0xa234183f66652ee4}, @nfc={0x27, r1, 0x1, 0x3}, @rc={0x1f, @any, 0x8}, 0x7, 0x0, 0x0, 0x0, 0x1e, &(0x7f0000002900)='netdevsim0\x00', 0x99f0, 0xb, 0x2984}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000029c0)=0x60, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000002b00)={r4, &(0x7f0000002a00)='*\x00', 0x668501, &(0x7f0000002a40)={@align, {0xe78, 0xff, 0x40, 0x8}}, 0x7, &(0x7f0000002a80)={@_ha_fsid}, &(0x7f0000002ac0)=0x9}) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000002b40)={'pim6reg1\x00', {0x2, 0x4e24, @empty}}) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x8084}, 0x4008000) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) setsockopt$inet6_int(r7, 0x29, 0xcb, &(0x7f0000002d00)=0x8000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002d40)={'ipvlan1\x00'}) listen(r5, 0x400) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000002d80)=0xffffff01, 0x4) sendmsg$nl_route(r7, &(0x7f0000002ec0)={&(0x7f0000002dc0), 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)=@ipv6_newrule={0x68, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x20, 0x10, 0xff, 0x1, 0x0, 0x0, 0x7, 0x10}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xd}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffffff01}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0xc094}, 0x44800) socket$pppl2tp(0x18, 0x1, 0x1) 1.405979808s ago: executing program 4 (id=7130): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001c40)={0x0, 0xcc, &(0x7f0000001e40)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x1000, @remote, 0x6}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xcd}, @in6={0xa, 0x4e22, 0x9, @private1, 0x1}, @in6={0xa, 0x4e22, 0x4, @private0, 0x4}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0x80000000, @loopback, 0x40}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000001f40)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001500)=@mangle={'mangle\x00', 0x2, 0x6, 0x6b0, 0x3a8, 0x0, 0x0, 0x498, 0xf0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'veth0\x00', {0x6}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x28, 0x31, 0x1d02}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @common=@hbh={{0x48}, {0x80, 0x2, 0x1, [0xaf, 0x8a4, 0x4, 0x40, 0xf, 0x0, 0x4, 0x4, 0x76, 0x400, 0x5, 0x7, 0x5, 0x1, 0x8, 0x8], 0xc}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r4, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x396, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x7, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000001c80)=0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fbdbdf250b000000080003000300000040000180050002000400000008000700", @ANYRES32=r7, @ANYBLOB='\a\x00'/12, @ANYRES32=r8, @ANYBLOB="14000400fc0000000000000000000000000000000500020040000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000000000400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="30000000210a010800000000000000000a0400010900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000000000000000000d00000000000000000000000300000000040000000400000000000000050000000000001100000000000000000000e200010000050000000000000000030000000000000000000000006100"], 0x0, 0x6b, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 1.378934602s ago: executing program 3 (id=7131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (rerun: 32) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 1.260102528s ago: executing program 2 (id=7133): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200027bd7000ffdbdf25010000000e0001006ee5dfa766f05775cfefec56657464657673696d0000000f0002006e657464657673696d30000008000100706369001100020030303068f3"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0xa}}, 0x0, 0x0, 0x40, 0x0, "bb02a3c364ca41d6357e54452447400400f50400000014bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r4, 0x800) accept4(r4, 0x0, 0x0, 0x80000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000008c0)={'macsec0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "a138fb1f9492db9fe417b3de0dc411f4be81e902cb8ad5ef160c3e91c8864bb7", "c74bc4ef2a0425cefce2c7579110656b869d50da807f8ce7eb61814a429da10f", "4143b5a7b3752f1fa33f9474bb9787fed87fd666facd431277f34724409c761c", "4ea34884b1e01114d7f6f1660c6dc12a00", "a646ed89db088d4f147cea6360ac305aa1328e4ab21a28764b42e0c6e6e52867", "0016002d00", 0x18, 0x3, 0x10000, 0xa0de, 0xfffffff5}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff0700000800100007ff020008000f"], 0x54}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000800)={@random="61fe71b72b5f", @remote, @void, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "2abc4e31e925db12"}}}}, 0x0) 1.176901483s ago: executing program 1 (id=7134): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105300000000009597233284b4c9536b32ccb1e274cfce865c7a2fa504096e18dc088354bd9f1ea66b52217391f25dae9153cc8defe3c69068841e340c47c31aa35dd3f2734efc165678cd9689118fd2c5f3ec1200000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f000000a240)=0x40000) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x3, @link_local, 'macsec0\x00'}}, 0x1e) 1.15144928s ago: executing program 0 (id=7135): r0 = syz_init_net_socket$x25(0x9, 0x2, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x48, 0x29, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {0x9, 0x10}, {0x2, 0xffe0}}, [@c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x1, 0x1f, 0x4, 0x7, 0xffff, 0x3, 0x3ff}}]}}]}, 0x48}}, 0x40420d0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x48, 0x29, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {0x9, 0x10}, {0x2, 0xffe0}}, [@c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x1, 0x1f, 0x4, 0x7, 0xffff, 0x3, 0x3ff}}]}}]}, 0x48}}, 0x40420d0) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000180)="9551997faa3b8cb4ed78d417d8dc9b4d72dcf06b8aa55b16b3f08843821f4eba22ec55730e87d5c9ec87b8af6e842b53567e8ff68089a5f4c7f486") 1.03934372s ago: executing program 4 (id=7136): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80800) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) ioctl(r0, 0x1, &(0x7f00000000c0)="5e2e00f5892295487eacfd53dc951939094f5b463b1c74df8fc749040b6b2a98502b6c295f5d57175b999f47e3a2dee66d048a921402ed056abd3acd0bb3efa02cf5786cdeffa3489afe963289d3728cc3a8d6f86591f90e1f7c0c46833c0fc812b7eb283801c1f8067a79790b7258de95af090c36d585308593d7d738ac732c2cc34dc1bccc7f6fc0") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000180)={0x3a, 0x2, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, 0x18) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/220, 0xdc, 0x40, &(0x7f0000000340)={0xa, 0x4e20, 0x8, @remote, 0xf5}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000380)=""/145, &(0x7f0000000440)=0x91) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480)=0x2100, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f00000004c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x34}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x40880) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x8, 0x6, 0x2, {{0xa, 0x4, 0x3, 0x3a, 0x28, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x3, [{@empty, 0xfff}]}, @noop]}}}}}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000b80)={r1, &(0x7f0000000a80)='\x00', 0x4201, &(0x7f0000000ac0)={@align=0xc4, {0x8000, 0xff, 0x80, 0x8}}, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0xc}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x0, 0xc, 0x8, 0x6, 0x30, 0x8}, @call={0x85, 0x0, 0x0, 0x12}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000840)='syzkaller\x00', 0x25, 0x71, &(0x7f0000000880)=""/113, 0x41000, 0x2, '\x00', r7, @fallback=0x22, r2, 0x8, &(0x7f00000009c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x7, 0xaee, 0xa3}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000c80)=[r9, r10], 0x0, 0x10, 0x10}, 0x94) r11 = openat$cgroup_devices(r9, &(0x7f0000000d80)='devices.deny\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r11, 0x4008f510, &(0x7f0000000dc0)=0x4) recvfrom$l2tp6(r0, &(0x7f0000000e00)=""/16, 0x10, 0x2001, &(0x7f0000000e40)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000e80)=0x40, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup/syz0\x00', 0x1ff) sendto$l2tp6(r0, &(0x7f0000000f00)="c41d0d388473c23e5fd28451076265421dc9f1528d194558021d1e88e0a12f361950b08cda2f967a6951af93f595b78480778c86af52fab9ddc1a1b68e06429a0afdcb6b3d1c218f979fe8950ce53d0d4f148f28c5477d9a37d4e97bf3b00b5e7bccbe806c38ae3a73932651a0874b6630d3f906f5c392674e767e52dbfc3f973d425b2aa4997d3bcf8ff04379c03ff45e08b4b863ff0d922c3818523ae6cbc24900d9066fc5fc5c96fbbf5a99b3d08d726c4bc6b8afad3d3500805019fd1c65ef906a808c885b9190a7ee98b505df3a0d8a1f930484b64a613eff2c5b221b493efa760e3307eab5c41ffa4749faedf62f5f49a672e3260d92019e8ce1b06d26326a7526dbe490e699272ccd03ca2fef520f3f5571c22784216188134e4abc94cd6bb1eb3c151815893a08eeb9e4e621358ee1888ac12aff36f3e6b1ce64e888813cf7eaf0ed78a634c893c4b200c1eeadb20f57e6398de2c1c8b46af8ce48f606c4a479a434cee0901d8e390ac366871e5d8181f4f1f929621866eb2fe547d42800e9d7e43202eee39ae5ac54d176bff39c8814561bc13d32d1611fb0c718c46ef19ab1d6fda59a7be3411e74499ffc61f96c8d9bcce1710d0139a17b864d63cf376f1ed6647145fdb2b4b665b6a5414e491aa7dfb276985bd1165517487dc34c6236c3e97cf5dd55f25abf63a6048d5d826dcab9003a751ff03b5c6a05ae2bea8796fb4ea8662ff45f285c35a7b5315a5c8c56f7815431e98b3d9c623bd1c2da414b4fbdf148b4f90cba3bd2db2a40863bc6e926ac55c58dd1d663f51ac4febb29b178900487b910c69bc43ece8b990267571368462eb5a2d800af51ded2850cbaea93cba978ecb44519bccd5e1166c0f7173193e98dd0feafa56fdb39f97fd8cee95bb18a6c627a12ac5c81e769c74cb4869829deece0af845073b2976c81bdbe08c63177aa59dd1a666d05eed568d9fd195ff85498dd6f655e35ce7fa81ac9207ad9c54a0754043353d928c7ec7d37c83d65e269ccc0bb7b0590b2a44de384aa73be405dee46274b158f16573cdccb001b9ac2f70e21166d4495a62e684e8d3689dd8fb55cd070df4bd4103a922197354d4eaafbe59b3074af4259510da5c1c5dd19de5312e5d9d723f2a14175de4cf9d450d3733caaf3f838155eee24693afd4af9f011621ae48819205de211f35d05cf235bb7121abbaf537c75abf5be04788e32f8f92dc7dccfa5037980cd25944b105c56f32e994e3d59670789f2ded272e35447abff170a069e5f53c15a2e0eb957731cdc8aa35661c37ac06970ea03439f7786a28520a94249037474851a34cd16efffbe596b2191855e3c4ee5db2c7d77bd94c63529fafe9f69f83406c7774ba26ecbbe73696d6b1f82be6f9c157d20a02298e457af5aa1275a62296440800dbfc9d9029a2117896bc5562f1cabcd66b1f19868928a05578bb9de452bca47fac424a9712669d2a981c75a5d9e6158075424b31c41e34ee52b14f8ff935ceedb6cbccb55eb6eb6ef2d3b3b1f05c14183bdbeccc951919c4db89bbb637b81eca7c703fa2b86810a1fe483250c0dfb7bf3001eccc1e60779e30b88242bdc4f1b90cf85b44c2a16531a6b083e4b42a767e09bcd4e9fa728a508782c4231ca791a985c0a009c718de8e16a937a18c01658bf32e877a4969a69f22601494c0372525a5608beb55728f9a9f19ae147fa92d41e61e29877ab0eb13b4e52bc4db4a5d344af0aa7219633d9a06d7aa3f1b4de9661a653f83821ee7b19c7a06a2836e8ca04b9c90184c50734ab15daf1cfab22ff88d3f140845b773b7df671b32b97f5a9e6c5aa46304501ef648c59388760f5ebc1d4896eb0c62b9d2583a98e47dad62a966c378d7fddfd5e5475ddb945e218076199ad19ba9b13bacb7e439378fcd1c25d1e7fb5dbea67fee1e25fca24b109b8758557b956fcf66155f4f4beb72da531c841ab1ab25d167c292664d932d09e14f9a9add8c73104ee770d0d4ab4298fa13c316f418a499a21dd1dd71b679b047664924c1b62b656150101c8768b0c1d1b28e38e9f8abf5149bd6e9cad3e0a07ebe08d4e01eb7d33f79fac6b1baf6d8fdee57bb7d5c710f94b0ba355dbaf2c8718b698f6b6a638a13a7700c13cfd20c398edd4c32f82db784f3f94880ada133a2b697b406c87a56e4a7dae8a4e77e9dfef1578d2b09af07d09c0dc33bf9907c47320a459707b5a40ff8fce848e3f4ed8408d309f48e21a3396bda842192a5c58f7cab8041ce52f379e86afd8071e866225c62b73b0b4dbb39c2591d573af23ca37744eb6e84865f0be8a9ac1a5f6eff9047c9a2ec8e0c0cfa0e21c4f525d1985ac85edf5c85b95acfba73e1e636d8ebf7981b57503c435e7f31bb3482d4f766b135efafd38921be5e8da79d93a97e887ab3e688c78a1e4c176f98426d4838687111c46af5086913934544593c78a8e2697ba66419b2c02d04d63a7ebb65e57d47079b3c9577cf0b502c438e686a628462074c0989327332183a40a7bd9fc147882cbd64c68c51d456a7641ddd40d4d669482713af5c3af9e173c1790d24809befe50f8104a5ba8a1b857129880743fda08222b4b7b07af33e16d0a7176421ee43ae7e029d76ad0964d5e5d136a5013265cb194b988e1ec63e3b461a0a7b24086ebf9b76cf70b2c1730939745010aa5ccb1fc1e94e72e4955554be4d34805ebdabbd80608df8e0b5ef5248cab962c33441b18bc7a74a559f4017184f76445859520132fcf2f9fd7efb3725f46c0292038c831deb0d923fa1ac6cb3944feeba0a1fc319522e3749845166aee42de0129b75053c86161ae9c0e625ab91fc59828a21f40683f09cc30f0485b70f19fe0edf811a1e9f453a01711931f9b534d21aa9fabb2c1dcfa4a7d4922856c8006e51a30a0665976d727166702d912ee1cdf15394721d0732573f7a73ec4a732403fd8e8a37908cdd85a55f4ad5cacee48adfc5791a019e2f2b4a9e9aae12e476e9605b6d20eab0facb2e220d5e1e768ee7e8a3f90d8f100412e4f36e1923eaf189092309c63cc6806e78935d80cc657de08cf19ed55568e10426e49e423d0721297de2b67eb774febfac2a21b9d66a5d6f2842b0ed41dd95fa3ddf77ab0498c16eba8aa5c4c86df840b5273154447d2f6e3f458ac17e8c6f83e13b9a5618cde3aede5a51e965f5d02a443382833b9419ff786d53d3d4890bdf75b98b5a0791c8c5457a224d5b56b033eb4230cfba39d41164c00570c9f21876f8600eb0df9d5ea36a956dd133f397dde0bf343a6ac40048d6d2b4de715aafc69604bbc476cda79aa05acf3ae636b9f2843450ae5af5e919714486256435f4ac81057b8e542339470f31ccb5238ad0926d52c8eb45c0744830e8882a95b13d4c9f84d9616bfbb753ce41fc10212e7c4f0cd6672f82310f8224e9181947416c3af89428deba547cb1de2d73c19a1d196bf754fb7ef9446b5317b181248144fb9bb900f0179b1d1f6e918e1dca38ea5ba4b07c1acdb51f03f577194a314b87deab0228206ad8948dd9cb0a554cbaccff4429368048934d5e326c8a07d249f3fec0d03385db4de4f6dd33ca2edfab7bc3616eb5c093a98de6212ea78b553a4e50adb2e68956b4163c7624e143236bd784481894dcb2451f7c18bd7a587723523ae1524225e32e98a422d45bd7f154877589977c3a675673272a24d24ed5bed6c38cf188ca07ad74f3f7e9025e94b4b960062daa47753388f553f0f9ecf8c2e33f8876ff7b1fb3563ed5eb4aeeedb1f323beb30fa26a805dc9a8a752c419275385abc970b2a1a2b6350d00af10a89614d7119a3369e3adaedf4c874747856fb93863fa91f31e53603ddbbe74e27bd57c0029cdb65f1e8e19f4f8128a9b9cda4cfd40982e853ea8b6980d2870df8707cbe6574e6fa8fcd046751adb59efbab59bc11638c788bd5fb476dc2512f8cf5738a39aeb01fd6c35ab442f2fe4a760bd31760140d650d52c6afc90bbc47c43c3229f15d4f44acdd3e3847bbbafb2c1afdb6b6583a2fae58028ce5a630f53ce7d038c8f14e4d5617738982c80282fac7a6056eb3312c631f92f487ca4571faa3c7f1abedf32587441819658b7fe832886cd2068762c5b1702923c6fe95edb20fc6ab12047bb29e5d3b39f05b8a019604861c9b9c36ed4293827f86a03768daa4fe14609e01a2f1da79bcfa64186c484de9ab1681715b1ce06e6f5ee7e440c6b00305b95b6b37d48eed7a86eb446af782d12c8afae9717cb0a457db34a0eaabccb569c0a170f4e177fb848bcf6308a16d86406deeb674e53414d0853484f2b89c7df07c87b343671f1bb178e9db6478a1442d46cabeb2988894519e5bd4daee05b08d6367d5ba415e4206063aa0605c7cba1dd913e056f136261cd4f8610fc6d8eaf2f84ac03fb8e32ee6b2ad47ae1adc27bc46cb2aab013467e05cbe6bf07db284dd1b59103a67fcfdf5067243fbc59e89d2ccda558990c9a7e07bb4a0b11eef00b1538fd42eea0368ebae9ea41d5fe83374c13626d9e488e87e6636180917de7bdeb6125fdc62aac5f521d4c425c4c81136e4792aa21cc829b83b8b8a02b893e4e90df025e8af5570c3ae6e86b4cdf4e4fc8d29531c3209f2dad93a9a334617b40c18bbf50f1a818c3ee25161e17c2004102558ac9a0e0dda4b5596c06d9203baf75a112554aebf220898f9a8fd48b330032f25a7e5299d23f86d60370222cf6247ca212faf9a7927e4d2c7048da893d48597e54f29a4cdc8c3d88d4798d0d93b1f91c00e6f23f69e78c98a965cba2095fc5585c24c14b42a9ba904dcd4a38e67606bf6ea016f5ce9aad35a09e2fb50c9e4f229bf1d8d2dabc600c2b90737f7c87a2f1b1f0266cf01ef9c35b0cccc1ba5b7098ebf8386ed904d92df93e1043020fb660f837cf157116a4769b913d0bde4ea92e73fc3fcf59e4dc06745bec88bb9bd24d79eb2e635e18f44bb73bc8b2565ea7070b6d759d87836c2435b39c3939ff60008dbf27a6e43e335633c3038cc3450a94ea837a29d0113de19b93b867a3564ae27fa9d7488cad5b06e0309bb7baed079cb6c41351c2f80f07d3a6eae4cb9ea5f9a5c7b731618a9e4b1ca2f85f3fcec41b493ac5f3ed1031972b1af5a5dfc942607da31a0a05154923b96e9055719a90e4734f4a438c623ac4e7c4ef83810118308c9296c3065a38484695475e8bcad2b29a9838904ad8805a734f8e7acde2c4cc7e3017cd034b101a0231584f114a18e0f7111388decd5e7fd4576a5b60d9e02cace7766b5d343fad98daebd2bec67c790bb85b158386d29b25a36c5549bff43a221a6bff9eaa4bf03620b5d525d86987a602e7b8d155c43e56c91ab8cd6b97a459ea0dac2c426d46660ba21f608612d27e1c07b62eca9194e6c530fb4aaea62082b0be1689323e7a33e7e0398b119ddd9c916669e4005603b70bb9ca064bcc19eb41b96a5e0ddee7731076292484613b3b78f8566f1f1e47fe410473a0014a836c4ad2eec7db3547b542dd05e6d21ecd2a2e93e7beca7ea53a928ecc04e73ba339ce3b4c7405f1d544bc502283b3f362aeef3c78f29d303bc878c24d83086ce5ad843fdb1e9804f0935dd8bbc3175129cf188ce44930c3f4939f4eec011a6629d7f9407d705b5607d59ff973ab26323c416e22b91507c48d7ae313c248c585db2922ae29b030cc8339456878f398d2903bfafd46bc0ea67790b990226cc8da1b77dc7fe7c7cb192f3b238ad5043e04839c8248e6b0f5605684765ea42f26e70b1a4d2178ccd3313d2613d", 0x1000, 0x8890, &(0x7f0000001f00)={0xa, 0x0, 0xb8, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4, 0x4}, 0x20) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', 0x0, r9, 0x5, 0x4, 0x1}, 0x50) 1.004529331s ago: executing program 1 (id=7137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff0700000800100007ff020008000f"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c000000"], 0x0, 0x5}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf4e) writev(r7, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100), 0x0, 0x2) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) 976.128268ms ago: executing program 0 (id=7138): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x2}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltclass={0x2c, 0x29, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xe, 0x10}, {0x0, 0xc}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}}, 0x20000800) 912.288191ms ago: executing program 4 (id=7139): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 705.122039ms ago: executing program 0 (id=7140): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) (async) listen(r4, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcb3f4eb80d098952}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008084) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 544.05762ms ago: executing program 2 (id=7141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 382.721179ms ago: executing program 0 (id=7142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffdb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896", 0x3a}], 0x1) 382.264899ms ago: executing program 3 (id=7143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2}, 0x90) r0 = socket(0x10, 0x803, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x401, 0x70bd26, 0x25dfdbf8, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x8d0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="50000304"], 0x7) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) 343.13952ms ago: executing program 2 (id=7144): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x8001, 0x3, 0x206, 0x2e5, 0x8, 0x5, 0x10001, 0xf}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890) (async) r4 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000ac4698fb1db22253ac4a8239de6e089eb2ba69ee2d4797a8281193fc5c6fc66bdae2d8f793f272d7836f0e8eae0b203c4ce87b2b039152e749d911e01211725802d7010000562006c3b7e22358c69e58f6e202000000000000"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r7, 0x0, 0x0) (rerun: 32) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, 0x0, 0x0) (async) sendmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x1, 0x45) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x104, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xb4, 0x1, [@m_gact={0xb0, 0x1f, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcc, 0x2, 0x0, 0x7fff, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x5, 0x10000000, 0x47df07da, 0xff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd4e, 0x6}}]}, {0x46, 0x6, "61b7cc74ca2dc81b36ce52f9620a829874912d5890b4b10088b2b693fb379e175abb4c951ba865e86b1389cb4e1950ae90cfa5bcb993c32bf41a7fd7e3d93c7db3e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x3c, 0x1, [@m_simple={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, ':[}\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008084) (async) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_generic(0x10, 0x3, 0x10) 296.753329ms ago: executing program 0 (id=7145): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xd6, 0x5, 0x47, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xb}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 135.392973ms ago: executing program 3 (id=7146): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) 134.721632ms ago: executing program 0 (id=7147): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300000000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 0s ago: executing program 1 (id=7148): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r4, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x100008, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010000104000000000400000100fd0000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c000280050009008f00000008000b400000ae2f0400060014000700fc0200"/68], 0x5c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000003c0)={{r4, &(0x7f00000000c0)='*\xc5\x00', 0x20000, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x5]}, {0xa, 0x9, 0x4, 0x6}}, 0xcab, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x1}, {[0x3, 0xfffffff9, 0x0, 0x3]}, 0x7e2, 0x22, &(0x7f0000000380)=""/34}) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c1af2ff012d82e2cff4c0f78e8122c65171d202007f23"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x19459dd74f7b26ca) getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000004c0), &(0x7f0000000540)=0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) kernel console output (not intermixed with test programs): 81][T25813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5474'. [ 555.454271][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5477'. [ 555.661460][T25833] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 556.101383][T25850] sctp: [Deprecated]: syz.2.5485 (pid 25850) Use of int in maxseg socket option. [ 556.101383][T25850] Use struct sctp_assoc_value instead [ 556.256612][T25856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.436211][ T30] audit: type=1107 audit(1770937804.306:3): pid=25859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 556.442387][T25860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5490'. [ 556.605154][T25869] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 556.905541][T25882] netlink: 'syz.2.5497': attribute type 11 has an invalid length. [ 556.940038][T25888] netlink: 'syz.3.5499': attribute type 5 has an invalid length. [ 557.086177][T25896] xt_hashlimit: invalid interval [ 557.434883][T25913] syzkaller1: entered promiscuous mode [ 557.449279][T25913] syzkaller1: entered allmulticast mode [ 558.031664][T25940] xt_time: unknown flags 0xf4 [ 558.090599][T25950] __nla_validate_parse: 10 callbacks suppressed [ 558.090618][T25950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5514'. [ 558.092692][T25947] IPv6: sit1: Disabled Multicast RS [ 558.458487][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 558.481517][T25962] IPVS: length: 226 != 24 [ 558.672745][T25967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.714425][T25967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5523'. [ 558.844529][T25981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5527'. [ 558.980489][T25989] netlink: 'syz.1.5531': attribute type 11 has an invalid length. [ 559.206979][T26005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5535'. [ 559.287507][T26000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5533'. [ 559.610305][T26028] netlink: 'syz.2.5540': attribute type 39 has an invalid length. [ 559.689782][T26032] netlink: 'syz.4.5541': attribute type 15 has an invalid length. [ 559.731022][T26024] netlink: 'syz.3.5538': attribute type 10 has an invalid length. [ 559.744633][T26032] netlink: 'syz.4.5541': attribute type 1 has an invalid length. [ 559.780535][T26036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5544'. [ 559.811590][T26024] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 559.953889][T26045] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5546'. [ 560.117064][T26040] xt_hashlimit: size too large, truncated to 1048576 [ 560.493701][T26063] Cannot find set identified by id 0 to match [ 560.504924][T26065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.521529][T26063] netlink: 'syz.3.5551': attribute type 9 has an invalid length. [ 560.530739][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5551'. [ 560.541914][T26063] netlink: 'syz.3.5551': attribute type 9 has an invalid length. [ 560.549959][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5551'. [ 560.985119][T26074] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 561.112782][T26074] bond6: entered promiscuous mode [ 561.149562][T26074] bond6: entered allmulticast mode [ 561.160660][T26074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.483475][T26107] netlink: 'syz.2.5565': attribute type 29 has an invalid length. [ 561.543238][T26107] netlink: 'syz.2.5565': attribute type 29 has an invalid length. [ 561.892697][T26130] gtp0: entered promiscuous mode [ 561.899361][T26130] gtp0: entered allmulticast mode [ 561.964910][T26130] syzkaller0: entered promiscuous mode [ 561.987753][T26130] syzkaller0: entered allmulticast mode [ 562.496037][T26167] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 562.522357][T26168] x_tables: duplicate underflow at hook 1 [ 563.314826][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.314826][T26215] Use struct sctp_assoc_value instead [ 563.352640][T26219] __nla_validate_parse: 6 callbacks suppressed [ 563.352659][T26219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5601'. [ 563.368651][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.368651][T26215] Use struct sctp_assoc_value instead [ 563.385841][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.385841][T26215] Use struct sctp_assoc_value instead [ 563.400882][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.400882][T26215] Use struct sctp_assoc_value instead [ 563.423458][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.423458][T26215] Use struct sctp_assoc_value instead [ 563.441212][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.441212][T26215] Use struct sctp_assoc_value instead [ 563.456473][T26221] netlink: 'syz.1.5603': attribute type 9 has an invalid length. [ 563.465016][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'. [ 563.474870][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.474870][T26215] Use struct sctp_assoc_value instead [ 563.501557][T26221] netlink: 'syz.1.5603': attribute type 9 has an invalid length. [ 563.516348][T26226] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5603'. [ 563.519538][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'. [ 563.556340][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.556340][T26215] Use struct sctp_assoc_value instead [ 563.599283][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.599283][T26215] Use struct sctp_assoc_value instead [ 563.654837][T26215] sctp: [Deprecated]: syz.3.5600 (pid 26215) Use of int in maxseg socket option. [ 563.654837][T26215] Use struct sctp_assoc_value instead [ 563.995565][T26247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5608'. [ 564.031854][T26249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.162722][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5611'. [ 564.345900][T26269] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5613'. [ 564.558054][T26279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5616'. [ 564.598159][T26281] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 564.631057][T26279] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5616'. [ 564.728995][T26279] veth5: entered promiscuous mode [ 564.739883][T26293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5619'. [ 564.967046][T26305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.836389][T26340] netlink: 'syz.4.5634': attribute type 1 has an invalid length. [ 565.948198][T26340] 8021q: adding VLAN 0 to HW filter on device bond9 [ 565.985397][T26353] º: renamed from veth1_vlan (while UP) [ 566.188385][T26368] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 566.720253][T26408] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 567.785508][T26481] vlan5: entered promiscuous mode [ 567.798546][T26481] geneve1: entered promiscuous mode [ 567.820993][T26481] vlan5: entered allmulticast mode [ 567.826794][T26481] geneve1: entered allmulticast mode [ 568.070405][T26515] netlink: 'syz.4.5684': attribute type 1 has an invalid length. [ 568.168916][T26515] bond10: entered promiscuous mode [ 568.176674][T26515] bond10: entered allmulticast mode [ 568.215566][T26515] 8021q: adding VLAN 0 to HW filter on device bond10 [ 568.237959][T26525] erspan2: entered allmulticast mode [ 568.261535][T26525] bond10: (slave erspan2): making interface the new active one [ 568.270265][T26525] erspan2: entered promiscuous mode [ 568.276796][T26525] bond10: (slave erspan2): Enslaving as an active interface with an up link [ 568.377094][T26538] __nla_validate_parse: 18 callbacks suppressed [ 568.377116][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 568.434485][T26535] netlink: 'syz.2.5689': attribute type 1 has an invalid length. [ 568.461235][T26542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 568.549713][T26538] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 568.575389][T26538] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 568.596711][T26538] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 568.660899][T26553] netlink: 'syz.1.5695': attribute type 64 has an invalid length. [ 568.697317][T26553] tipc: Resetting bearer [ 568.778387][T26560] netlink: 'syz.0.5697': attribute type 1 has an invalid length. [ 568.794978][T26560] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5697'. [ 568.855107][T26566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5699'. [ 568.925991][T26563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5698'. [ 569.478860][T26604] ipvlan3: entered allmulticast mode [ 569.514214][T26604] batadv_slave_1: entered allmulticast mode [ 569.552183][T26604] batman_adv: batadv0: Adding interface: ipvlan3 [ 569.586420][T26604] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.629883][T26604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.659316][T26604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.674672][T26604] batman_adv: batadv0: Interface activated: ipvlan3 [ 570.086208][T26640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5720'. [ 570.121961][T26640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5720'. [ 570.255594][T26656] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5724'. [ 570.322533][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5724'. [ 570.458027][T26664] netlink: 'syz.3.5727': attribute type 1 has an invalid length. [ 570.479975][T26664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5727'. [ 570.563624][T26669] syzkaller1: entered promiscuous mode [ 570.579051][T26669] syzkaller1: entered allmulticast mode [ 570.920965][T26681] tipc: New replicast peer: 255.255.255.255 [ 570.927709][T26681] tipc: Enabled bearer , priority 10 [ 570.981821][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.991853][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.008479][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.018837][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 571.028258][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.145164][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 571.153525][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.163762][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.176646][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 571.187996][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.312971][T26701] Bluetooth: MGMT ver 1.23 [ 571.966406][T26739] netlink: 'syz.4.5749': attribute type 1 has an invalid length. [ 572.024495][ T5920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.042871][ T5920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.069729][ T5920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 572.106437][ T6619] tipc: Node number set to 669522479 [ 572.184723][ T5920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.203887][ T5920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.239252][ T5920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 572.363749][ T5920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.383665][ T5920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.409316][ T5920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 572.608972][ T5920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.623414][ T5920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.644969][T26768] openvswitch: netlink: Missing key (keys=40, expected=100) [ 572.660834][ T5920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 572.922345][T26786] tipc: Failed to remove unknown binding: 66,0,0/2053891094:30557566/30557567 [ 572.931913][T26786] tipc: Failed to remove unknown binding: 66,0,0/2053891094:30557566/30557567 [ 573.133556][T26685] chnl_net:caif_netlink_parms(): no params data found [ 573.269991][ T51] Bluetooth: hci0: command tx timeout [ 573.332650][T26797] openvswitch: netlink: Flow key attr not present in new flow. [ 573.638922][T26805] block nbd1: reconnected socket [ 573.706967][T26808] __nla_validate_parse: 4 callbacks suppressed [ 573.706985][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5764'. [ 573.823817][ T5920] dvmrp6 (unregistering): left allmulticast mode [ 573.864881][ T5920] bond3 (unregistering): (slave geneve2): Releasing active interface [ 574.075076][ T5920] bond1 (unregistering): Released all slaves [ 574.090892][ T5920] bond2 (unregistering): Released all slaves [ 574.106696][ T5920] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 574.114870][ T5920] vcan1: left promiscuous mode [ 574.128358][ T5920] bond0 (unregistering): Released all slaves [ 574.143210][ T5920] bond3 (unregistering): Released all slaves [ 574.157586][ T5920] bond4 (unregistering): Released all slaves [ 574.200672][T26798] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 574.221900][T26808] dummy0 (unregistering): left promiscuous mode [ 574.354184][ T51] block nbd1: Receive control failed (result -32) [ 574.398231][ T5920] tipc: Left network mode [ 574.606817][T26685] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.638648][T26685] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.646236][T26685] bridge_slave_0: entered allmulticast mode [ 574.659242][T26685] bridge_slave_0: entered promiscuous mode [ 574.694441][T26685] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.704741][T26685] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.736652][T26685] bridge_slave_1: entered allmulticast mode [ 574.749315][T26685] bridge_slave_1: entered promiscuous mode [ 574.848035][T26850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5773'. [ 574.896959][T26850] netlink: 356 bytes leftover after parsing attributes in process `syz.4.5773'. [ 574.995161][T26843] syzkaller0: entered promiscuous mode [ 575.084067][T26843] syzkaller0: entered allmulticast mode [ 575.124100][T26685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.156049][T26685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.334881][ T51] Bluetooth: hci0: command tx timeout [ 576.740455][T26685] team0: Port device team_slave_0 added [ 576.759004][T26685] team0: Port device team_slave_1 added [ 576.773530][ T25] block nbd1: Possible stuck request ffff8880268e8000: control (read@0,1024B). Runtime 300 seconds [ 576.786320][ T25] block nbd1: Possible stuck request ffff8880268e8200: control (read@1024,1024B). Runtime 300 seconds [ 576.801811][ T25] block nbd1: Possible stuck request ffff8880268e8400: control (read@2048,1024B). Runtime 300 seconds [ 576.807883][T26884] netlink: 'syz.0.5779': attribute type 4 has an invalid length. [ 576.818645][ T25] block nbd1: Possible stuck request ffff8880268e8600: control (read@3072,1024B). Runtime 300 seconds [ 576.832816][ T1680] block nbd1: Dead connection, failed to find a fallback [ 576.841935][ T1680] block nbd1: shutting down sockets [ 576.847313][ T1680] blk_print_req_error: 138 callbacks suppressed [ 576.847328][ T1680] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.865120][ T1680] buffer_io_error: 138 callbacks suppressed [ 576.865136][ T1680] Buffer I/O error on dev nbd1, logical block 2, async page read [ 576.879648][ T1680] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.889414][ T1680] Buffer I/O error on dev nbd1, logical block 1, async page read [ 576.897198][ T1680] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.908419][ T1680] Buffer I/O error on dev nbd1, logical block 0, async page read [ 576.916769][ T1680] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.926814][ T1680] Buffer I/O error on dev nbd1, logical block 3, async page read [ 576.936156][ T6999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.946187][ T6999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 576.954145][ T6999] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.963715][ T6999] Buffer I/O error on dev nbd1, logical block 1, async page read [ 576.971642][ T6999] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.981308][ T6999] Buffer I/O error on dev nbd1, logical block 2, async page read [ 577.009446][ T6999] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.019029][ T6999] Buffer I/O error on dev nbd1, logical block 3, async page read [ 577.031760][ T6999] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.041480][ T6999] Buffer I/O error on dev nbd1, logical block 0, async page read [ 577.049502][ T6999] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.063030][ T6999] Buffer I/O error on dev nbd1, logical block 1, async page read [ 577.090100][ T6999] ldm_validate_partition_table(): Disk read failed. [ 577.111224][ T6999] Dev nbd1: unable to read RDB block 0 [ 577.117381][ T6999] nbd1: unable to read partition table [ 577.166391][ T5186] udevd[5186]: worker [6999] terminated by signal 9 (Killed) [ 577.199266][ T5186] udevd[5186]: worker [6999] failed while handling '/devices/virtual/block/nbd1' [ 577.234028][T26887] vlan3: entered promiscuous mode [ 577.259782][T26887] bridge0: entered promiscuous mode [ 577.419544][ T51] Bluetooth: hci0: command tx timeout [ 577.509284][T26888] syzkaller0: entered promiscuous mode [ 577.515042][T26888] syzkaller0: entered allmulticast mode [ 577.544407][ T5920] hsr_slave_0: left promiscuous mode [ 577.553233][ T5920] hsr_slave_1: left promiscuous mode [ 577.576823][ T5920] veth0_macvtap: left allmulticast mode [ 577.582851][ T5920] team_slave_1: left promiscuous mode [ 577.588693][ T5920] veth1_macvtap: left promiscuous mode [ 577.595321][ T5920] veth0_macvtap: left promiscuous mode [ 577.601241][ T5920] veth1_vlan: left promiscuous mode [ 577.606753][ T5920] veth0_vlan: left promiscuous mode [ 577.884959][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 577.998840][ T5920] team0 (unregistering): Port device dummy0 removed [ 578.143911][T26685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.151428][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.178066][T26685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.489424][ T51] Bluetooth: hci0: command tx timeout [ 579.748747][T26685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.768824][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.796010][T26685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.063430][T26685] hsr_slave_0: entered promiscuous mode [ 580.100337][T26685] hsr_slave_1: entered promiscuous mode [ 580.270528][ T5920] IPVS: stop unused estimator thread 0... [ 580.368591][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5797'. [ 580.499027][ T5920] veth8: left allmulticast mode [ 580.515154][T26990] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5800'. [ 580.524676][ T5920] veth8: left promiscuous mode [ 580.525184][ T5920] bridge0: port 1(veth8) entered disabled state [ 580.751695][T26995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5802'. [ 580.767673][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 580.783824][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5802'. [ 581.183548][ T5920] dvmrp0 (unregistering): left allmulticast mode [ 581.535224][ T5920] ` (unregistering): Released all slaves [ 581.546453][ T5920] bond1 (unregistering): Released all slaves [ 581.561344][ T5920] bond2 (unregistering): Released all slaves [ 581.578348][ T5920] bond0 (unregistering): Released all slaves [ 581.717475][ T5920] : left promiscuous mode [ 581.886338][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5810'. [ 581.911992][T27025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5810'. [ 581.946999][ T5920] tipc: Left network mode [ 581.988122][T27025] 8021q: adding VLAN 0 to HW filter on device bond5 [ 582.633337][T27064] bond0: (slave gre0): Error: Device type is different from other slaves [ 582.732364][T27073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.931968][T27083] x_tables: duplicate entry at hook 1 [ 583.045781][T27093] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5827'. [ 583.083654][T27095] netlink: 'syz.3.5826': attribute type 33 has an invalid length. [ 583.182329][T27093] nftables ruleset with unbound chain [ 583.221558][T27095] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 583.236188][T27095] bond7 (unregistering): Released all slaves [ 583.414715][T26685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 583.592332][T26685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 583.623204][T27115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5830'. [ 583.657357][T26685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 583.684299][T26685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.945388][T27135] netem: change failed [ 584.173774][T26685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.232650][T27145] netlink: 'syz.4.5835': attribute type 21 has an invalid length. [ 584.265969][T27145] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5835'. [ 584.413909][T26685] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.717490][T27163] netem: change failed [ 584.748868][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.756058][T11948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.906477][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.913741][T11948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.485759][T27189] team_slave_0: left promiscuous mode [ 585.508606][T27189] team_slave_1: left promiscuous mode [ 585.600436][T27189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.704584][T27189] bond1: left allmulticast mode [ 585.709683][T27189] bond1: left promiscuous mode [ 586.010607][ T5920] team0 (unregistering): Port device batadv1 removed [ 586.424096][ T5920] team0 (unregistering): Port device dummy0 removed [ 586.492288][T11954] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.523112][T11954] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.564588][T11954] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.810931][T26685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.821843][T27252] netlink: 'syz.1.5852': attribute type 29 has an invalid length. [ 586.838436][T27252] netlink: 'syz.1.5852': attribute type 29 has an invalid length. [ 586.863847][T27252] __nla_validate_parse: 1 callbacks suppressed [ 586.863875][T27252] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5852'. [ 586.910227][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5852'. [ 586.983409][T26685] veth0_vlan: entered promiscuous mode [ 587.030657][T26685] veth1_vlan: entered promiscuous mode [ 587.089029][T26685] veth0_macvtap: entered promiscuous mode [ 587.129953][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5855'. [ 587.138329][T26685] veth1_macvtap: entered promiscuous mode [ 587.184578][T26685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.218528][T26685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.245604][T11947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.255374][T11947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.299794][T11947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.318062][T11947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.431613][T27272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5857'. [ 587.478495][T11947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.502484][T11947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.561539][T11947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.591205][T11947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.866175][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5863'. [ 587.887064][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5863'. [ 588.026505][T27302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5866'. [ 588.524028][T27327] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.566500][T27329] netlink: 'syz.2.5872': attribute type 1 has an invalid length. [ 588.645208][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5873'. [ 588.704218][ T5920] IPVS: stop unused estimator thread 0... [ 588.885142][T27331] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 588.985975][T27339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5876'. [ 589.005454][T27339] netlink: 'syz.1.5876': attribute type 7 has an invalid length. [ 589.028950][T27339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5876'. [ 589.209502][T27350] netlink: 'syz.1.5882': attribute type 11 has an invalid length. [ 589.218036][T27350] netlink: 'syz.1.5882': attribute type 2 has an invalid length. [ 590.431228][T27418] netlink: 'syz.4.5901': attribute type 1 has an invalid length. [ 590.622482][T27423] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 590.678095][T27423] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 590.689303][T27423] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 590.748638][T27429] bond11: (slave vcan0): The slave device specified does not support setting the MAC address [ 590.793126][T27429] bond11: (slave vcan0): making interface the new active one [ 590.820051][T27429] bond11: (slave vcan0): Enslaving as an active interface with an up link [ 591.138563][T27449] bond7: Removing last arp target with arp_interval on [ 591.334589][T27461] netlink: 'syz.2.5915': attribute type 21 has an invalid length. [ 591.647399][T27479] netlink: 'syz.0.5921': attribute type 10 has an invalid length. [ 592.025495][T27502] xt_hashlimit: size too large, truncated to 1048576 [ 592.451252][T27525] netlink: 'syz.1.5934': attribute type 1 has an invalid length. [ 592.479265][T27525] netlink: 'syz.1.5934': attribute type 2 has an invalid length. [ 592.487204][T27525] netlink: 'syz.1.5934': attribute type 1 has an invalid length. [ 592.496801][T27525] __nla_validate_parse: 15 callbacks suppressed [ 592.496816][T27525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5934'. [ 592.517962][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5934'. [ 592.614860][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 592.786420][T27542] sock: sock_set_timeout: `syz.0.5942' (pid 27542) tries to set negative timeout [ 593.194378][T27562] netlink: 'syz.4.5947': attribute type 8 has an invalid length. [ 593.279778][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'. [ 593.399737][T27574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5950'. [ 593.498943][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5953'. [ 593.611351][T27576] bond12: (slave vcan2): The slave device specified does not support setting the MAC address [ 593.631236][T27576] bond12: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 593.674609][T27576] bond12: (slave vcan2): making interface the new active one [ 593.693042][T27576] bond12: (slave vcan2): Enslaving as an active interface with an up link [ 593.716079][T27587] macvlan3: left promiscuous mode [ 593.721944][T27594] ksmbd: Unknown IPC event: 3, ignore. [ 593.753936][T27587] bridge2: left promiscuous mode [ 593.801277][T27587] bridge2: left allmulticast mode [ 593.817180][T27587] bond2: left promiscuous mode [ 593.840240][T27587] geneve3: left promiscuous mode [ 593.858801][T27587] geneve3: left allmulticast mode [ 593.872010][T27587] bond6: left promiscuous mode [ 593.897982][T27587] bond6: left allmulticast mode [ 594.345105][T27625] validate_nla: 1 callbacks suppressed [ 594.345126][T27625] netlink: 'syz.2.5964': attribute type 1 has an invalid length. [ 594.359528][T27625] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5964'. [ 594.368695][T27625] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5964'. [ 594.592503][T27605] tipc: Resetting bearer [ 594.668347][T27605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.687222][T27605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.259891][T27605] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 595.319612][ T6624] syz1: Port: 1 Link DOWN [ 595.351857][T11954] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.399642][T11954] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.429284][T11954] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.450661][T11954] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.489272][T11954] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.511609][T11954] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.549200][T11954] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.577275][T11954] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.589988][T27644] Bluetooth: MGMT ver 1.23 [ 595.608550][T27643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5969'. [ 595.625058][T27646] netlink: 'syz.2.5970': attribute type 2 has an invalid length. [ 595.634165][T27643] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5969'. [ 595.669795][T27643] x_tables: duplicate underflow at hook 2 [ 595.758766][T27652] netlink: 'syz.4.5972': attribute type 16 has an invalid length. [ 595.769888][T27653] netlink: 'syz.2.5973': attribute type 16 has an invalid length. [ 595.777852][T27652] netlink: 'syz.4.5972': attribute type 3 has an invalid length. [ 595.791101][T27653] netlink: 'syz.2.5973': attribute type 17 has an invalid length. [ 595.876828][T27652] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 596.002684][T27653] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.018586][T27653] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.102029][T27653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.119490][T27653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.316471][T27675] macvtap1: entered promiscuous mode [ 596.322911][T27675] macvtap1: entered allmulticast mode [ 596.334425][T27675] º: entered allmulticast mode [ 596.378758][T11947] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.388440][T11947] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.409844][T11947] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.447803][T11947] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.802658][T27704] syzkaller0: entered promiscuous mode [ 596.808199][T27704] syzkaller0: entered allmulticast mode [ 596.827350][T27714] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 596.936166][T27721] netlink: 'syz.0.5987': attribute type 11 has an invalid length. [ 596.961258][T27725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.025057][T27794] __nla_validate_parse: 5 callbacks suppressed [ 599.025076][T27794] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6000'. [ 599.108405][T27794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6000'. [ 599.295933][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 599.306233][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 599.314505][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 599.324773][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 599.333535][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.515405][T27815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6003'. [ 599.939488][T27832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6008'. [ 600.284421][T27839] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6009'. [ 600.597323][T27802] chnl_net:caif_netlink_parms(): no params data found [ 600.772715][T27859] netlink: 'syz.2.6014': attribute type 23 has an invalid length. [ 600.813960][T27802] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.825383][T27868] netlink: 296 bytes leftover after parsing attributes in process `syz.0.6015'. [ 600.841272][T27802] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.860120][T27802] bridge_slave_0: entered allmulticast mode [ 600.868131][T27802] bridge_slave_0: entered promiscuous mode [ 600.884642][T27802] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.896383][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6017'. [ 600.903550][T27802] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.913596][T27802] bridge_slave_1: entered allmulticast mode [ 600.931902][T27802] bridge_slave_1: entered promiscuous mode [ 600.966836][T27870] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 600.974805][T27872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6017'. [ 601.026534][T27870] bond10 (unregistering): Released all slaves [ 601.182689][T27883] tipc: Enabling of bearer rejected, failed to enable media [ 601.248471][T27802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.267082][T27802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.343822][T27802] team0: Port device team_slave_0 added [ 601.376159][T27802] team0: Port device team_slave_1 added [ 601.411666][ T51] Bluetooth: hci5: command tx timeout [ 601.458605][T27802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.478432][T27903] openvswitch: netlink: Message has 4 unknown bytes. [ 601.488041][T27802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.544594][T27802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.648904][T27802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.678228][T27802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.722141][T27802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.848440][T27917] syzkaller1: entered promiscuous mode [ 601.854243][T27917] syzkaller1: entered allmulticast mode [ 601.893504][T27920] netlink: 'syz.1.6032': attribute type 3 has an invalid length. [ 601.918108][T27802] hsr_slave_0: entered promiscuous mode [ 601.931482][T27802] hsr_slave_1: entered promiscuous mode [ 601.938012][T27802] debugfs: 'hsr0' already exists in 'hsr' [ 601.944006][T27802] Cannot create hsr debugfs directory [ 602.272529][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6035'. [ 602.450691][T27942] syzkaller1: entered promiscuous mode [ 602.456238][T27942] syzkaller1: entered allmulticast mode [ 602.661581][T27802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.840741][T27970] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6042'. [ 602.856170][T27802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.990916][T27802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.041487][T27984] netlink: 'syz.2.6046': attribute type 1 has an invalid length. [ 603.336662][T27802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 603.363008][T27802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 603.424606][T27802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 603.446103][T27802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 603.490336][ T51] Bluetooth: hci5: command tx timeout [ 603.667216][T28025] netlink: 'syz.3.6055': attribute type 2 has an invalid length. [ 603.732599][T28025] netlink: 'syz.3.6055': attribute type 3 has an invalid length. [ 603.830090][T27802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.867012][T27802] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.903665][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.910882][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.942868][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.950090][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.221657][T28048] __nla_validate_parse: 8 callbacks suppressed [ 604.221686][T28048] netlink: 4668 bytes leftover after parsing attributes in process `syz.1.6062'. [ 604.392432][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6064'. [ 604.406189][T27802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.430225][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6064'. [ 604.716396][T28078] netlink: 'syz.2.6067': attribute type 16 has an invalid length. [ 604.728134][T28078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6067'. [ 604.907338][T27802] veth0_vlan: entered promiscuous mode [ 604.961420][T27802] veth1_vlan: entered promiscuous mode [ 605.006178][T27802] veth0_macvtap: entered promiscuous mode [ 605.028059][T27802] veth1_macvtap: entered promiscuous mode [ 605.086944][T27802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.126146][T27802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.145965][T28099] syzkaller0: entered promiscuous mode [ 605.160253][T28099] syzkaller0: entered allmulticast mode [ 605.181939][T11954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.196438][T11954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.220734][T28101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.234663][T28101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.257720][T11954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.266833][T11954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.438574][T11948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.470203][T11948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.546355][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.558214][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.569276][ T51] Bluetooth: hci5: command tx timeout [ 605.751789][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6079'. [ 605.761100][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6079'. [ 605.929799][T28135] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6082'. [ 606.124957][T28148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6087'. [ 606.145018][T28146] nbd: must specify at least one socket [ 606.178755][T28146] pimreg: entered allmulticast mode [ 606.330169][T28158] netlink: 'syz.4.6088': attribute type 15 has an invalid length. [ 606.476468][T28166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6090'. [ 606.535022][T18297] IPVS: ip_vs_send_async error -101 [ 606.559562][T28170] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6091'. [ 606.731080][T28178] ip6gre1: entered promiscuous mode [ 606.752087][T28178] netlink: zone id is out of range [ 606.761837][T28178] netlink: zone id is out of range [ 606.772771][T28178] netlink: zone id is out of range [ 606.779405][T28181] syzkaller0: entered promiscuous mode [ 606.789204][T28181] syzkaller0: entered allmulticast mode [ 606.796971][T28178] netlink: zone id is out of range [ 606.813298][T28178] netlink: zone id is out of range [ 606.818881][T28178] netlink: zone id is out of range [ 606.825008][T28178] netlink: zone id is out of range [ 606.830658][T28178] netlink: zone id is out of range [ 606.836616][T28178] netlink: zone id is out of range [ 606.842274][T28178] netlink: zone id is out of range [ 606.998889][T28195] netlink: 'syz.3.6101': attribute type 2 has an invalid length. [ 607.016197][T28197] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 607.026748][T28196] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 607.649487][ T51] Bluetooth: hci5: command tx timeout [ 607.701818][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.709098][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.756114][T28229] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.763430][T28229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.770979][T28229] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.778120][T28229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.793199][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.800720][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.811799][T28246] netlink: 'syz.3.6115': attribute type 11 has an invalid length. [ 607.867328][T28246] netlink: 'syz.3.6115': attribute type 10 has an invalid length. [ 607.879722][T28249] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 607.899713][T28246] bridge_slave_1: left allmulticast mode [ 607.905420][T28246] bridge_slave_1: left promiscuous mode [ 607.912353][T28249] tipc: Failed to remove unknown binding: 66,0,0/2053891094:394190198/394190199 [ 607.926332][T28246] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.926910][T28249] tipc: Failed to remove unknown binding: 66,0,0/2053891094:394190198/394190199 [ 608.010287][T28246] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 608.091961][T28254] lo: entered allmulticast mode [ 608.101513][T28259] lo: left allmulticast mode [ 608.143289][T28251] syzkaller0: entered promiscuous mode [ 608.148820][T28251] syzkaller0: entered allmulticast mode [ 608.327668][T28251] tipc: Started in network mode [ 608.333715][T28251] tipc: Node identity caf151eeabad, cluster identity 4711 [ 608.348295][T28251] tipc: Enabled bearer , priority 0 [ 608.582391][T28283] netlink: 'syz.0.6125': attribute type 7 has an invalid length. [ 608.597261][T28283] netlink: 'syz.0.6125': attribute type 7 has an invalid length. [ 608.607820][T28283] netlink: 'syz.0.6125': attribute type 7 has an invalid length. [ 608.625294][T28283] netlink: 'syz.0.6125': attribute type 7 has an invalid length. [ 608.797175][T28250] tipc: Resetting bearer [ 608.821061][T28250] tipc: Disabling bearer [ 608.878147][T28296] : entered promiscuous mode [ 608.891851][T28291] netlink: 'syz.1.6129': attribute type 2 has an invalid length. [ 608.933813][T28302] netlink: 'syz.4.6134': attribute type 2 has an invalid length. [ 609.094455][T28306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.107288][T28307] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 609.120809][T28306] bond1: entered promiscuous mode [ 609.125898][T28306] bond1: entered allmulticast mode [ 609.141937][T28312] ipt_REJECT: ECHOREPLY no longer supported. [ 609.320377][T28321] __nla_validate_parse: 14 callbacks suppressed [ 609.320397][T28321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6142'. [ 609.437870][T28327] 8021q: adding VLAN 0 to HW filter on device bond11 [ 609.513108][T28340] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6146'. [ 609.523599][T28340] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6146'. [ 609.533193][T28340] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6146'. [ 609.618261][T28344] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6148'. [ 610.086692][T28378] bond9: entered promiscuous mode [ 610.107401][T28378] bond9: entered allmulticast mode [ 610.115399][T28378] 8021q: adding VLAN 0 to HW filter on device bond9 [ 610.140416][T28374] syzkaller0: entered promiscuous mode [ 610.146092][T28374] syzkaller0: entered allmulticast mode [ 610.160374][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'. [ 610.179928][T28374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6156'. [ 610.199893][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'. [ 610.224183][T28374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6156'. [ 610.687686][T28402] team_slave_0: entered promiscuous mode [ 610.693512][T28402] team_slave_1: entered promiscuous mode [ 610.710781][T28402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 610.718458][T28402] team0: Device macvlan2 is already an upper device of the team interface [ 610.732757][T28405] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6164'. [ 610.780846][T28402] team_slave_0: left promiscuous mode [ 610.786384][T28402] team_slave_1: left promiscuous mode [ 610.891293][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.904159][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.912479][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.920744][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.936106][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.954029][T28408] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 611.288963][T28428] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.312460][T28428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.319792][T28428] IPv6: NLM_F_CREATE should be set when creating new route [ 611.327081][T28428] IPv6: NLM_F_CREATE should be set when creating new route [ 611.334396][T28428] IPv6: NLM_F_CREATE should be set when creating new route [ 611.502241][T28430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.673875][T28450] validate_nla: 10 callbacks suppressed [ 611.673895][T28450] netlink: 'syz.0.6174': attribute type 10 has an invalid length. [ 611.888019][ T5920] bond0: (slave netdevsim0): Releasing backup interface [ 611.960266][T28460] bond12: entered promiscuous mode [ 611.965583][T28460] bond12: entered allmulticast mode [ 611.974105][T28460] 8021q: adding VLAN 0 to HW filter on device bond12 [ 612.351450][T28409] chnl_net:caif_netlink_parms(): no params data found [ 612.435424][ T5920] batadv1: left allmulticast mode [ 612.448971][ T5920] batadv1: left promiscuous mode [ 612.471697][ T5920] bridge0: port 3(batadv1) entered disabled state [ 612.501091][ T5920] bridge_slave_0: left allmulticast mode [ 612.507169][ T5920] bridge_slave_0: left promiscuous mode [ 612.515846][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.794741][ T5920] bond3 (unregistering): (slave gretap1): Releasing active interface [ 613.089561][ T5826] Bluetooth: hci2: command tx timeout [ 613.118329][T28510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.249235][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.259752][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.270129][ T5920] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 613.280954][ T5920] bond0 (unregistering): Released all slaves [ 613.294526][ T5920] macvlan3 (unregistering): left allmulticast mode [ 613.302985][ T5920] team0: Port device macvlan3 removed [ 613.312971][ T5920] bond1 (unregistering): Released all slaves [ 613.327599][ T5920] bond2 (unregistering): Released all slaves [ 613.342789][ T5920] bond3 (unregistering): Released all slaves [ 613.358807][ T5920] bond4 (unregistering): (slave veth3): Releasing active interface [ 613.367580][ T5920] bond4 (unregistering): Released all slaves [ 613.386219][ T5920] bond5 (unregistering): Released all slaves [ 613.400457][ T5920] bond6 (unregistering): Released all slaves [ 613.415187][ T5920] bond7 (unregistering): Released all slaves [ 613.434336][ T5920] bond8 (unregistering): Released all slaves [ 613.450902][ T5920] bond9 (unregistering): Released all slaves [ 613.497600][T28500] netlink: 'syz.0.6187': attribute type 1 has an invalid length. [ 613.681541][ T5920] tipc: Left network mode [ 613.782845][T28409] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.790273][T28409] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.798456][T28409] bridge_slave_0: entered allmulticast mode [ 613.808047][T28409] bridge_slave_0: entered promiscuous mode [ 613.902977][T28409] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.917854][T28409] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.928058][T28409] bridge_slave_1: entered allmulticast mode [ 613.951817][T28409] bridge_slave_1: entered promiscuous mode [ 614.186348][T28409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.266462][T28409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.376504][T28567] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 614.625488][T28409] team0: Port device team_slave_0 added [ 614.666824][T28409] team0: Port device team_slave_1 added [ 614.973223][ T5920] hsr_slave_1: left promiscuous mode [ 614.986740][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.049214][T28603] __nla_validate_parse: 6 callbacks suppressed [ 615.049234][T28603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6207'. [ 615.108010][T28603] net_ratelimit: 45 callbacks suppressed [ 615.108031][T28603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.169792][ T5826] Bluetooth: hci2: command tx timeout [ 615.226232][ T5920] pim6reg527 (unregistering): left allmulticast mode [ 615.472067][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6212'. [ 615.527394][ T5920] team_slave_1 (unregistering): left allmulticast mode [ 615.554486][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 615.588408][ T5920] team_slave_0 (unregistering): left allmulticast mode [ 615.596583][T28632] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6212'. [ 615.634580][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 615.814016][ T5920] team0 (unregistering): left allmulticast mode [ 615.849941][T28409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.856987][T28409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.883138][T28409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.996658][T28610] syzkaller0: entered promiscuous mode [ 616.020322][T28610] syzkaller0: entered allmulticast mode [ 616.073815][T28409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.101469][T28409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.160254][T28409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.251350][ T5826] Bluetooth: hci2: command tx timeout [ 617.916715][T28409] hsr_slave_0: entered promiscuous mode [ 617.926422][T28409] hsr_slave_1: entered promiscuous mode [ 617.939023][T28409] debugfs: 'hsr0' already exists in 'hsr' [ 617.960400][T28409] Cannot create hsr debugfs directory [ 618.029764][ T5920] IPVS: stop unused estimator thread 0... [ 618.048837][T28675] netlink: 'syz.4.6222': attribute type 1 has an invalid length. [ 618.168656][T28683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6223'. [ 618.415833][T28693] netlink: 'syz.1.6226': attribute type 1 has an invalid length. [ 618.462618][T28693] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6226'. [ 618.798891][T28717] netlink: 'syz.4.6233': attribute type 1 has an invalid length. [ 619.126517][T28730] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 619.332993][ T5826] Bluetooth: hci2: command tx timeout [ 619.472631][T28409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 619.540856][T28409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 619.582410][T28409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 619.779875][T28740] syzkaller0: entered promiscuous mode [ 619.785524][T28740] syzkaller0: entered allmulticast mode [ 619.792902][T28409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 619.807878][T28762] netlink: 'syz.0.6241': attribute type 12 has an invalid length. [ 619.817307][T28762] netlink: 'syz.0.6241': attribute type 29 has an invalid length. [ 619.828706][T28762] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6241'. [ 619.838135][T28762] netlink: 23 bytes leftover after parsing attributes in process `syz.0.6241'. [ 620.006804][T28775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6243'. [ 622.675046][T28764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.856385][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6249'. [ 622.932809][T28409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.978863][T28409] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.995833][T28859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6253'. [ 623.005515][T28859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6253'. [ 623.058918][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.066187][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.094792][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.102124][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.238984][T28868] team0 (unregistering): Port device team_slave_0 removed [ 623.272623][T28868] team0 (unregistering): Port device team_slave_1 removed [ 623.498079][T28409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.599878][T28409] veth0_vlan: entered promiscuous mode [ 623.625592][T28409] veth1_vlan: entered promiscuous mode [ 623.685192][T28892] netlink: set zone limit has 4 unknown bytes [ 623.705516][T28894] netlink: zone id is out of range [ 623.711054][T28894] netlink: zone id is out of range [ 623.728924][T28409] veth0_macvtap: entered promiscuous mode [ 623.762021][T28409] veth1_macvtap: entered promiscuous mode [ 623.820869][T28409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.850037][T28900] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.6267'. [ 623.861494][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6267'. [ 623.868221][T28409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.881019][T28900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.911356][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.929013][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.949351][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.966165][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.031632][T28910] sctp: [Deprecated]: syz.4.6269 (pid 28910) Use of int in max_burst socket option deprecated. [ 624.031632][T28910] Use struct sctp_assoc_value instead [ 624.202809][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.225606][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.286807][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.300264][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.322117][T28920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6271'. [ 624.332832][T28920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6271'. [ 624.344558][T28920] netlink: 'syz.4.6271': attribute type 5 has an invalid length. [ 624.356895][T28922] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6272'. [ 624.387562][T28923] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6272'. [ 624.417227][ T30] audit: type=1107 audit(1770937872.296:4): pid=28924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 624.695690][T28940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6276'. [ 624.897976][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.909387][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.917204][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.926317][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.934546][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.950471][T28943] xt_CT: No such helper "snmp_trap" [ 624.963427][T28952] Cannot find del_set index 0 as target [ 625.035439][T28948] sctp: [Deprecated]: syz.1.6279 (pid 28948) Use of int in max_burst socket option. [ 625.035439][T28948] Use struct sctp_assoc_value instead [ 625.499007][T28966] xt_CT: No such helper "syz0" [ 626.488202][T28947] chnl_net:caif_netlink_parms(): no params data found [ 626.538807][T29050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.707801][T28947] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.715314][T28947] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.723932][T28947] bridge_slave_0: entered allmulticast mode [ 626.732017][T28947] bridge_slave_0: entered promiscuous mode [ 626.759567][T28947] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.766908][T28947] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.775766][T28947] bridge_slave_1: entered allmulticast mode [ 626.784339][T28947] bridge_slave_1: entered promiscuous mode [ 626.807779][T29061] syzkaller0: entered promiscuous mode [ 626.813471][T29061] syzkaller0: entered allmulticast mode [ 626.905486][T28947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.918670][T28947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.011697][ T5826] Bluetooth: hci1: command tx timeout [ 627.031602][T28947] team0: Port device team_slave_0 added [ 627.040949][T28947] team0: Port device team_slave_1 added [ 627.086887][T28947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.095108][T28947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.121858][T28947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.136246][T28947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.148000][T28947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.191727][T28947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.342037][T28947] hsr_slave_0: entered promiscuous mode [ 627.358171][T28947] hsr_slave_1: entered promiscuous mode [ 627.373709][T28947] debugfs: 'hsr0' already exists in 'hsr' [ 627.386398][T28947] Cannot create hsr debugfs directory [ 627.635984][T29092] bridge_slave_1: left allmulticast mode [ 627.646717][T29092] bridge_slave_1: left promiscuous mode [ 627.659709][T29092] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.673428][T29094] nbd: couldn't find a device at index 2 [ 627.685332][T29092] bridge_slave_0: left allmulticast mode [ 627.692401][T29092] bridge_slave_0: left promiscuous mode [ 627.699505][T29092] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.854094][T22492] IPVS: starting estimator thread 0... [ 627.860251][T29105] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 627.959209][T29106] IPVS: using max 30 ests per chain, 72000 per kthread [ 628.087249][T29115] __nla_validate_parse: 6 callbacks suppressed [ 628.087266][T29115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6326'. [ 628.310013][T29126] syzkaller1: entered promiscuous mode [ 628.315688][T29126] syzkaller1: entered allmulticast mode [ 628.324944][T29130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6331'. [ 628.391231][T28947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.412582][T28947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.442509][T28947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.465887][T28947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.682101][T29158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6336'. [ 628.710528][T29158] netlink: 'syz.2.6336': attribute type 7 has an invalid length. [ 628.743629][T29158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6336'. [ 628.764184][T29160] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6337'. [ 628.776421][T28947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.797352][T29158] gretap0: entered promiscuous mode [ 628.835153][T29158] gretap0: left promiscuous mode [ 628.906081][T28947] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.944163][T29016] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.951459][T29016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.976521][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6340'. [ 629.003994][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.011216][T11951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.087689][T29170] batadv_slave_0: entered promiscuous mode [ 629.100606][ T5826] Bluetooth: hci1: command tx timeout [ 629.321958][T29184] syz_tun: entered allmulticast mode [ 629.330985][T29176] syz_tun: left allmulticast mode [ 629.532318][T29198] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6345'. [ 630.066336][T29187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.073339][T29187] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 630.838528][T29169] batadv_slave_0: left promiscuous mode [ 630.839268][T29187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 630.884159][T29187] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 631.005410][T29205] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 631.018100][T29187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 631.038100][T29187] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 631.162626][T29187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 631.168852][T29187] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 631.181209][ T5826] Bluetooth: hci1: command tx timeout [ 631.246903][T28947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.314600][T28947] veth0_vlan: entered promiscuous mode [ 631.361741][T29217] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 631.376064][T29217] syzkaller1: Refused to change device type [ 631.384506][T28947] veth1_vlan: entered promiscuous mode [ 631.408243][T29222] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 631.418296][T29223] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 631.435970][T29223] syzkaller1: Refused to change device type [ 631.467624][T29229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6354'. [ 631.504718][T28947] veth0_macvtap: entered promiscuous mode [ 631.549231][T29229] bond_slave_0: entered promiscuous mode [ 631.555069][T29229] bond_slave_0: entered allmulticast mode [ 631.577444][T28947] veth1_macvtap: entered promiscuous mode [ 631.586889][T29229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6354'. [ 631.662109][T28947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.726525][T28947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.774517][T29031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.815413][T29031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.832571][T29240] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 631.851808][T29031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.922528][T29031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.155528][T29257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6360'. [ 632.331561][T29030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.339806][T29030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.467415][T29237] bridge4: entered promiscuous mode [ 632.473459][T29237] bridge4: entered allmulticast mode [ 632.541891][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.550325][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.729403][T29270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.838367][T29274] netlink: 'syz.0.6275': attribute type 2 has an invalid length. [ 633.018723][T29279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.188380][T29293] netlink: 'syz.0.6370': attribute type 3 has an invalid length. [ 633.196783][T29293] netlink: 'syz.0.6370': attribute type 1 has an invalid length. [ 633.198334][T29294] : renamed from bond0 [ 633.277714][T29296] netlink: 'syz.1.6371': attribute type 1 has an invalid length. [ 633.326800][T29298] netlink: 'syz.0.6372': attribute type 2 has an invalid length. [ 633.422035][T29301] netlink: 'syz.4.6373': attribute type 12 has an invalid length. [ 633.440672][T29301] __nla_validate_parse: 2 callbacks suppressed [ 633.440917][T29301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6373'. [ 633.464255][T29302] A: renamed from veth1_macvtap [ 633.473399][T29301] lo speed is unknown, defaulting to 1000 [ 633.481428][T29301] lo speed is unknown, defaulting to 1000 [ 633.488680][T29301] lo speed is unknown, defaulting to 1000 [ 633.548218][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6373'. [ 633.761755][T29301] infiniband syz0: set active [ 633.766625][T22491] lo speed is unknown, defaulting to 1000 [ 633.777150][T29301] infiniband syz0: added lo [ 633.784759][T29323] netlink: 'syz.3.6380': attribute type 33 has an invalid length. [ 633.817371][T29323] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 633.831816][T29323] bond1 (unregistering): Released all slaves [ 633.869508][T29301] RDS/IB: syz0: added [ 633.881250][T29301] smc: adding ib device syz0 with port count 1 [ 633.887455][T29301] smc: ib device syz0 port 1 has no pnetid [ 633.903935][ T5937] lo speed is unknown, defaulting to 1000 [ 633.913652][T29301] lo speed is unknown, defaulting to 1000 [ 634.001636][T29327] netlink: 'syz.3.6382': attribute type 4 has an invalid length. [ 634.160580][T29336] netlink: 'syz.1.6384': attribute type 1 has an invalid length. [ 634.176267][T29336] netlink: 'syz.1.6384': attribute type 7 has an invalid length. [ 634.196885][T29336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6384'. [ 634.245083][T29335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6381'. [ 634.346997][T29301] lo speed is unknown, defaulting to 1000 [ 634.560952][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6390'. [ 634.577401][T29355] bridge_slave_1: left allmulticast mode [ 634.587084][T29355] bridge_slave_1: left promiscuous mode [ 634.599605][T29355] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.666764][T29355] bridge_slave_0: left allmulticast mode [ 634.711783][T29355] bridge_slave_0: left promiscuous mode [ 634.748032][T29355] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.895229][T29369] geneve2: entered promiscuous mode [ 635.091338][T29385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6394'. [ 635.111953][T29301] lo speed is unknown, defaulting to 1000 [ 635.279986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b263c00: rx timeout, send abort [ 635.502059][T29301] lo speed is unknown, defaulting to 1000 [ 635.770173][T29301] lo speed is unknown, defaulting to 1000 [ 635.780060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b260c00: rx timeout, send abort [ 635.788333][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b263c00: abort rx timeout. Force session deactivation [ 636.002052][T29435] syzkaller0: entered promiscuous mode [ 636.007598][T29435] syzkaller0: entered allmulticast mode [ 636.205025][T29301] lo speed is unknown, defaulting to 1000 [ 636.288325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b260c00: abort rx timeout. Force session deactivation [ 636.399701][T29441] bond1: entered promiscuous mode [ 636.474677][T29441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.708387][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6418'. [ 636.774843][T29452] bond1: (slave bridge0): making interface the new active one [ 636.782954][T29452] bridge0: entered promiscuous mode [ 636.790486][T29452] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 636.863830][T29301] lo speed is unknown, defaulting to 1000 [ 637.657506][T29522] syzkaller1: entered promiscuous mode [ 637.674091][T29522] syzkaller1: entered allmulticast mode [ 637.703134][T29301] lo speed is unknown, defaulting to 1000 [ 637.894169][T29530] validate_nla: 2 callbacks suppressed [ 637.894198][T29530] netlink: 'syz.2.6435': attribute type 13 has an invalid length. [ 637.929532][T29530] macvtap0: entered allmulticast mode [ 637.942857][T29530] macvtap0: refused to change device tx_queue_len [ 638.016731][T29532] syzkaller0: entered allmulticast mode [ 638.421730][T29560] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6444'. [ 638.444039][T29560] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 638.530861][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6446'. [ 638.620637][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6446'. [ 638.728007][T29579] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6448'. [ 638.756615][T29579] bridge_slave_1: default FDB implementation only supports local addresses [ 638.791157][T29581] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6449'. [ 638.807253][T29585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.858336][T29581] netlink: 'syz.3.6449': attribute type 39 has an invalid length. [ 638.879444][T29582] tipc: Enabled bearer , priority 0 [ 639.042279][T29602] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6453'. [ 639.062532][T29582] syzkaller0: entered promiscuous mode [ 639.074999][T29582] syzkaller0: entered allmulticast mode [ 639.087507][T29582] tipc: Resetting bearer [ 639.272500][T29030] tipc: Resetting bearer [ 639.422598][T29580] tipc: Resetting bearer [ 640.819899][T29645] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6464'. [ 640.831299][T29646] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6464'. [ 641.123464][T29580] tipc: Disabling bearer [ 641.320687][T29652] veth0: entered promiscuous mode [ 641.418078][T29659] netlink: 'syz.0.6466': attribute type 21 has an invalid length. [ 641.466549][T29652] team0 (unregistering): Port device team_slave_0 removed [ 641.506178][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6471'. [ 641.543924][T29652] team0 (unregistering): Port device team_slave_1 removed [ 641.615377][T29663] bridge_slave_1: left allmulticast mode [ 641.662082][T29663] bridge_slave_1: left promiscuous mode [ 641.679514][T29663] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.790274][T29663] bridge_slave_0: left allmulticast mode [ 641.796010][T29663] bridge_slave_0: left promiscuous mode [ 641.837830][T29681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6471'. [ 641.855989][T29663] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.936958][T29663] bridge0 (unregistering): left allmulticast mode [ 641.997698][T29650] veth0: left promiscuous mode [ 642.030054][T29688] ipt_REJECT: TCP_RESET invalid for non-tcp [ 642.461984][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6478'. [ 642.734076][T29733] netlink: 'syz.4.6483': attribute type 1 has an invalid length. [ 642.903418][T29733] bond2: entered promiscuous mode [ 642.909360][T29733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.083029][T29733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.111472][T29733] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 643.177967][T29733] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 643.244364][T29733] bond2: (slave vti0): making interface the new active one [ 643.279664][T29733] vti0: entered promiscuous mode [ 643.290478][T29766] netlink: 'syz.2.6490': attribute type 1 has an invalid length. [ 643.303932][T29733] bond2: (slave vti0): Enslaving as an active interface with an up link [ 643.365162][T29762] netlink: 'syz.2.6490': attribute type 10 has an invalid length. [ 643.571553][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.571653][T29775] __nla_validate_parse: 5 callbacks suppressed [ 643.571667][T29775] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6491'. [ 643.611635][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.624493][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.660668][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.671287][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.710295][T29781] netlink: 'syz.0.6492': attribute type 9 has an invalid length. [ 644.023691][T29793] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6496'. [ 644.033978][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6494'. [ 644.078558][T29789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6494'. [ 644.476469][T29776] lo speed is unknown, defaulting to 1000 [ 644.690224][T29831] nbd4: detected capacity change from 0 to 127 [ 644.700266][T29834] netlink: 'syz.0.6508': attribute type 10 has an invalid length. [ 644.711797][T29778] block nbd4: Send control failed (result -32) [ 644.718547][T29778] block nbd4: Request send failed, requeueing [ 644.724927][ T5826] block nbd4: Receive control failed (result -32) [ 644.764636][ T1680] block nbd4: Dead connection, failed to find a fallback [ 644.774035][ T1680] block nbd4: shutting down sockets [ 644.781659][ T1680] blk_print_req_error: 54 callbacks suppressed [ 644.781676][ T1680] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.797544][ T1680] buffer_io_error: 54 callbacks suppressed [ 644.797559][ T1680] Buffer I/O error on dev nbd4, logical block 0, async page read [ 644.811438][T29778] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.821171][T29778] Buffer I/O error on dev nbd4, logical block 1, async page read [ 644.829423][T29778] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.838920][T29778] Buffer I/O error on dev nbd4, logical block 2, async page read [ 644.846983][T29778] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.856869][T29778] Buffer I/O error on dev nbd4, logical block 3, async page read [ 644.865649][T29778] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.875258][T29778] Buffer I/O error on dev nbd4, logical block 0, async page read [ 644.883191][T29778] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.892800][T29778] Buffer I/O error on dev nbd4, logical block 1, async page read [ 644.900787][T29778] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.910369][T29778] Buffer I/O error on dev nbd4, logical block 2, async page read [ 644.918260][T29778] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.927844][T29778] Buffer I/O error on dev nbd4, logical block 3, async page read [ 644.935877][T29778] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.945661][T29778] Buffer I/O error on dev nbd4, logical block 0, async page read [ 644.953701][T29778] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 644.963287][T29778] Buffer I/O error on dev nbd4, logical block 1, async page read [ 644.973803][T29778] ldm_validate_partition_table(): Disk read failed. [ 644.981215][T29778] Dev nbd4: unable to read RDB block 0 [ 644.987386][T29778] nbd4: unable to read partition table [ 645.027867][T29778] ldm_validate_partition_table(): Disk read failed. [ 645.036542][T29778] Dev nbd4: unable to read RDB block 0 [ 645.053401][T29778] nbd4: unable to read partition table [ 645.092398][T11951] smc: removing ib device syz1 [ 645.095395][T29832] lo speed is unknown, defaulting to 1000 [ 645.424386][T29851] sctp: [Deprecated]: syz.3.6512 (pid 29851) Use of int in max_burst socket option deprecated. [ 645.424386][T29851] Use struct sctp_assoc_value instead [ 645.560368][T29857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6513'. [ 645.675590][T29859] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 645.679855][T29861] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 645.735306][ T5826] Bluetooth: hci4: command tx timeout [ 645.735533][T29859] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6515'. [ 645.805559][T29859] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6515'. [ 645.822772][T29859] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 645.830893][T29859] netlink: 'syz.3.6515': attribute type 8 has an invalid length. [ 645.873908][T29859] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6515'. [ 646.123596][T29776] chnl_net:caif_netlink_parms(): no params data found [ 646.522218][T29890] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6523'. [ 646.607960][T29895] IPv6: Can't replace route, no match found [ 646.815244][T29776] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.858826][T29776] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.876441][T29776] bridge_slave_0: entered allmulticast mode [ 646.907661][T29776] bridge_slave_0: entered promiscuous mode [ 646.918168][T29776] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.931437][T29776] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.939054][T29776] bridge_slave_1: entered allmulticast mode [ 646.951553][T29776] bridge_slave_1: entered promiscuous mode [ 647.114877][T29776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.151148][T29905] xt_hashlimit: size too large, truncated to 1048576 [ 647.162153][T29776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.366445][T29776] team0: Port device team_slave_0 added [ 647.500820][T29776] team0: Port device team_slave_1 added [ 647.664308][T29776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.696687][T29776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.769328][T29776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.809939][ T5826] Bluetooth: hci4: command tx timeout [ 647.828999][T29776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.845437][T29776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.876014][T29776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.140749][T29776] hsr_slave_0: entered promiscuous mode [ 648.148030][T29776] hsr_slave_1: entered promiscuous mode [ 648.162922][T29776] debugfs: 'hsr0' already exists in 'hsr' [ 648.168909][T29776] Cannot create hsr debugfs directory [ 648.590479][T29934] syzkaller0: entered promiscuous mode [ 648.596250][T29934] syzkaller0: entered allmulticast mode [ 648.622326][T29934] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.630678][T29934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.637911][T29934] IPv6: NLM_F_CREATE should be set when creating new route [ 648.657325][T29943] veth0_macvtap: Device is already in use. [ 649.891306][ T5826] Bluetooth: hci4: command tx timeout [ 650.440646][T29972] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6542'. [ 650.668192][T29994] xt_hashlimit: size too large, truncated to 1048576 [ 650.687430][T29993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6550'. [ 650.697547][T29993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6550'. [ 650.824361][T30006] –: renamed from vxcan1 (while UP) [ 651.080627][T30011] 8021q: VLANs not supported on ip_vti0 [ 651.135541][T30013] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6553'. [ 651.154283][T30015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6552'. [ 651.179454][T30013] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6553'. [ 651.202165][T29776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.251208][T29776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.312598][T29776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.348353][T29776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.546905][T29776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.589478][T29776] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.607357][T29029] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.614698][T29029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.637724][T29031] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.644982][T29031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.706739][T30046] sctp: [Deprecated]: syz.4.6561 (pid 30046) Use of int in max_burst socket option deprecated. [ 651.706739][T30046] Use struct sctp_assoc_value instead [ 651.923007][T30060] netlink: 'syz.4.6563': attribute type 1 has an invalid length. [ 651.938813][T30060] netlink: 'syz.4.6563': attribute type 2 has an invalid length. [ 651.989944][ T5826] Bluetooth: hci4: command tx timeout [ 652.098934][T29776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.165120][T29776] veth0_vlan: entered promiscuous mode [ 652.185115][T29776] veth1_vlan: entered promiscuous mode [ 652.260510][T29776] veth0_macvtap: entered promiscuous mode [ 652.276142][T29776] veth1_macvtap: entered promiscuous mode [ 652.298280][T30068] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6566'. [ 652.322104][T29776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.350239][T29776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.366091][T30068] tipc: Started in network mode [ 652.372806][T30068] tipc: Node identity ac1414aa, cluster identity 4711 [ 652.382243][T30068] tipc: Enabled bearer , priority 10 [ 652.427383][T30075] dvmrp0: entered allmulticast mode [ 652.480171][T29029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.551035][T29029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.589335][T29029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.613389][T30088] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6570'. [ 652.633410][T29029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.728657][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'. [ 652.761373][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 652.793375][T29016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.817094][T29016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.826435][T30094] netlink: 'syz.4.6572': attribute type 14 has an invalid length. [ 652.839431][T30094] netlink: 'syz.4.6572': attribute type 13 has an invalid length. [ 652.961685][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.980293][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.509271][T22491] tipc: Node number set to 2886997162 [ 654.017429][T30173] netlink: 'syz.1.6590': attribute type 13 has an invalid length. [ 654.458971][T30203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.634640][T30213] xt_ecn: cannot match TCP bits for non-tcp packets [ 654.894535][T30230] netlink: 'syz.3.6605': attribute type 1 has an invalid length. [ 654.952098][T30231] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 655.158977][T30249] netlink: 'syz.1.6609': attribute type 1 has an invalid length. [ 655.287998][T30254] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 655.318656][T30263] netlink: 'syz.1.6613': attribute type 4 has an invalid length. [ 655.327489][T30254] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 655.358964][T30254] syzkaller0: entered promiscuous mode [ 655.607230][T30277] __nla_validate_parse: 6 callbacks suppressed [ 655.607249][T30277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6616'. [ 655.654324][T30253] syzkaller0: left promiscuous mode [ 655.680689][T30280] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6617'. [ 655.861098][T30295] netlink: 'syz.3.6622': attribute type 28 has an invalid length. [ 655.869284][T30295] netlink: 'syz.3.6622': attribute type 3 has an invalid length. [ 655.877125][T30295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6622'. [ 656.143674][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6627'. [ 656.205306][T30312] bond1: Invalid ad_actor_system MAC address. [ 656.213578][T30312] bond1: option ad_actor_system: invalid value (1) [ 656.245192][T30312] bond1 (unregistering): Released all slaves [ 656.313650][T30316] bond3 (unregistering): Released all slaves [ 656.338018][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6629'. [ 656.582904][T30343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6635'. [ 656.599300][T30342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6635'. [ 656.710607][T30350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6637'. [ 656.830501][T30353] veth3: entered promiscuous mode [ 656.856080][T30353] veth3: entered allmulticast mode [ 656.936796][T30364] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.985597][T30374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6642'. [ 657.127135][T30374] team0: Port device team_slave_0 removed [ 657.370767][T30387] geneve2: entered promiscuous mode [ 657.395594][T29016] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 53017 - 0 [ 657.421786][T29016] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 53017 - 0 [ 657.447464][T30391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6647'. [ 657.460993][T29016] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 53017 - 0 [ 657.473299][T29016] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 53017 - 0 [ 657.495585][T30391] veth0_to_team: entered promiscuous mode [ 657.512566][T30391] veth0_to_team: left promiscuous mode [ 657.621553][T30400] validate_nla: 2 callbacks suppressed [ 657.621572][T30400] netlink: 'syz.3.6648': attribute type 25 has an invalid length. [ 657.983012][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.029817][T30424] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 658.057232][T30424] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 658.256828][T30439] syzkaller0: entered promiscuous mode [ 658.262683][T30439] syzkaller0: entered allmulticast mode [ 658.650981][T30460] gretap0: entered promiscuous mode [ 659.009989][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.966894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.025833][T30492] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20002 [ 660.050095][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.615436][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.624337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.011186][T30424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.090922][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.261903][T30506] __nla_validate_parse: 5 callbacks suppressed [ 661.261923][T30506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6679'. [ 661.309498][T30505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6679'. [ 661.425672][T30514] netlink: 'syz.3.6681': attribute type 15 has an invalid length. [ 661.520280][T30523] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 661.686932][T30538] netlink: 'syz.2.6688': attribute type 1 has an invalid length. [ 661.710797][T30538] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6688'. [ 661.749332][T30537] netlink: 'syz.2.6688': attribute type 1 has an invalid length. [ 661.801514][T30537] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6688'. [ 662.035570][T30543] lo speed is unknown, defaulting to 1000 [ 662.139449][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.235979][T30567] syzkaller1: entered promiscuous mode [ 662.270626][T30567] syzkaller1: entered allmulticast mode [ 662.431774][T30583] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 662.840232][T30602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6702'. [ 662.896281][T30602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6702'. [ 662.917677][T30606] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.6704'. [ 663.056616][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6706'. [ 663.109730][T30609] veth5: entered promiscuous mode [ 663.165174][T30613] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 663.173012][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.317574][T30624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6708'. [ 663.422461][T30629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6709'. [ 663.466443][T30635] netlink: 'syz.4.6711': attribute type 30 has an invalid length. [ 663.478022][T30624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.554221][T30637] netlink: 'syz.2.6712': attribute type 10 has an invalid length. [ 663.817014][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.189591][T30686] netlink: 'syz.1.6723': attribute type 4 has an invalid length. [ 664.211183][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.237261][T30690] bond0: Error: Cannot enslave bond to itself. [ 664.892132][T11951] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.049341][T30743] netlink: 'syz.2.6741': attribute type 2 has an invalid length. [ 665.064771][T30743] netlink: 'syz.2.6741': attribute type 1 has an invalid length. [ 665.072995][T30743] netlink: 'syz.2.6741': attribute type 1 has an invalid length. [ 665.081020][T30743] netlink: 'syz.2.6741': attribute type 2 has an invalid length. [ 665.097625][T30743] netlink: 'syz.2.6741': attribute type 2 has an invalid length. [ 665.167743][T30752] sctp: [Deprecated]: syz.2.6745 (pid 30752) Use of int in maxseg socket option. [ 665.167743][T30752] Use struct sctp_assoc_value instead [ 665.187923][T30752] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 665.187940][T30752] sctp: [Deprecated]: syz.2.6745 (pid 30752) Use of int in maxseg socket option. [ 665.187940][T30752] Use struct sctp_assoc_value instead [ 665.261179][T22506] net_ratelimit: 6 callbacks suppressed [ 665.261198][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.299511][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.380636][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.393638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.566156][T11951] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.575700][T11951] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.605209][T11951] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.000921][T30791] __nla_validate_parse: 6 callbacks suppressed [ 667.000939][T30791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6754'. [ 667.032758][T30787] Cannot find add_set index 2 as target [ 667.042964][T30791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 667.065978][T30791] team0: Port device batadv1 added [ 667.096966][T30792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6757'. [ 667.153857][T30797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6759'. [ 667.241055][T30799] syzkaller0: entered promiscuous mode [ 667.246886][T30799] syzkaller0: entered allmulticast mode [ 667.264117][T30799] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6760'. [ 667.341324][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.650687][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.659042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.771851][T30826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6767'. [ 667.771909][T30825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6767'. [ 667.890026][T18297] IPVS: ip_vs_send_async error -101 [ 667.923258][T30832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6769'. [ 667.949734][T30835] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.6770'. [ 667.978725][T30835] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.6770'. [ 668.369365][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.432216][T30862] bridge0: entered promiscuous mode [ 668.437496][T30862] bridge0: entered allmulticast mode [ 668.453083][T30862] team0: Port device bridge0 added [ 668.509330][T30862] bridge0: port 1(team0) entered blocking state [ 668.517670][T30862] bridge0: port 1(team0) entered disabled state [ 668.528889][T30862] team0: entered allmulticast mode [ 668.534682][T30862] team_slave_0: entered allmulticast mode [ 668.622056][T30862] team_slave_1: entered allmulticast mode [ 668.655892][T30862] team0: left allmulticast mode [ 668.663439][T30862] team_slave_0: left allmulticast mode [ 668.668953][T30862] team_slave_1: left allmulticast mode [ 668.731851][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6782'. [ 668.781769][T30884] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 668.983162][T30893] geneve3: entered promiscuous mode [ 668.988461][T30893] geneve3: entered allmulticast mode [ 669.110765][T30900] syzkaller1: entered promiscuous mode [ 669.126477][T30900] syzkaller1: entered allmulticast mode [ 669.187436][T30900] netlink: set zone limit has 4 unknown bytes [ 669.682620][T30928] xt_hashlimit: size too large, truncated to 1048576 [ 670.072908][T30951] netlink: 'syz.2.6803': attribute type 1 has an invalid length. [ 670.168743][T30958] netlink: 'syz.1.6806': attribute type 1 has an invalid length. [ 670.191639][T30958] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 670.224938][T30958] : entered promiscuous mode [ 670.449373][T22491] net_ratelimit: 7 callbacks suppressed [ 670.449396][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.522652][T30984] netlink: 'syz.1.6813': attribute type 9 has an invalid length. [ 670.537311][T30984] netlink: 'syz.1.6813': attribute type 11 has an invalid length. [ 670.549304][T30984] netlink: 'syz.1.6813': attribute type 12 has an invalid length. [ 671.196141][T31036] netlink: 'syz.3.6833': attribute type 1 has an invalid length. [ 671.241123][T31040] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 671.259511][T31040] netlink: 'syz.0.6831': attribute type 1 has an invalid length. [ 671.287000][T31040] netlink: 'syz.0.6831': attribute type 8 has an invalid length. [ 671.493473][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.717937][T31070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.807204][T31065] bond1: option primary_reselect: invalid value (255) [ 671.834938][T31065] bond1 (unregistering): Released all slaves [ 672.017140][T31071] bond1: option primary_reselect: invalid value (255) [ 672.033464][T31071] bond1 (unregistering): Released all slaves [ 672.148559][T31087] __nla_validate_parse: 19 callbacks suppressed [ 672.148579][T31087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6843'. [ 672.393566][T31095] veth3: entered allmulticast mode [ 672.467815][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6848'. [ 672.515281][T31104] openvswitch: netlink: Unknown nsh attribute 0 [ 672.532432][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.598228][T31107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6849'. [ 672.662004][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6851'. [ 672.690641][T31112] bridge_slave_1: left allmulticast mode [ 672.712591][T31112] bridge_slave_1: left promiscuous mode [ 672.737516][T31112] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.801543][T31112] bridge_slave_0: left allmulticast mode [ 672.808520][T31112] bridge_slave_0: left promiscuous mode [ 672.826163][T31112] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.848077][T31124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6854'. [ 672.920609][T31131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6851'. [ 673.549999][T31166] bridge0: port 3(macsec0) entered blocking state [ 673.556684][T31166] bridge0: port 3(macsec0) entered disabled state [ 673.570599][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.585689][T31166] macsec0: entered allmulticast mode [ 673.591930][T31166] veth1_macvtap: entered allmulticast mode [ 673.600709][T31166] macsec0: entered promiscuous mode [ 673.607049][T31170] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6865'. [ 673.647711][T31170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6865'. [ 673.920075][T31173] syzkaller0: entered promiscuous mode [ 673.929363][T31173] syzkaller0: entered allmulticast mode [ 674.083738][T31193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 674.107205][T31193] sctp: [Deprecated]: syz.1.6869 (pid 31193) Use of int in max_burst socket option. [ 674.107205][T31193] Use struct sctp_assoc_value instead [ 674.292840][T31200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6872'. [ 674.616694][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.693241][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.701715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.941748][T31244] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 675.087207][T31255] validate_nla: 4 callbacks suppressed [ 675.087225][T31255] netlink: 'syz.4.6890': attribute type 1 has an invalid length. [ 675.227517][T31252] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.241200][T31266] netlink: 'syz.2.6892': attribute type 16 has an invalid length. [ 675.290575][T31266] netlink: 'syz.2.6892': attribute type 17 has an invalid length. [ 675.373635][T31252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.396609][T31252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.651052][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.692560][T31266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.711419][T31266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.736387][T29027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.769699][T29027] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.778673][T29027] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.788306][T29027] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.890593][T31286] netlink: 'syz.2.6894': attribute type 13 has an invalid length. [ 676.100431][T31300] netlink: 'syz.3.6898': attribute type 21 has an invalid length. [ 676.119933][T29021] bridge_slave_1: left allmulticast mode [ 676.126487][T29021] bridge_slave_1: left promiscuous mode [ 676.136427][T29021] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.166335][T29021] bridge_slave_0: left allmulticast mode [ 676.178460][T29021] bridge_slave_0: left promiscuous mode [ 676.196029][T29021] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.333399][T29021] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 676.414773][T29021] bond4 (unregistering): (slave erspan1): Releasing active interface [ 676.423230][T29021] erspan1 (unregistering): left promiscuous mode [ 676.484502][T29021] dvmrp1 (unregistering): left allmulticast mode [ 676.494309][T29021] dvmrp6 (unregistering): left allmulticast mode [ 676.539618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.690650][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.896486][T29021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.907216][T29021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.917497][T29021] bond0 (unregistering): Released all slaves [ 676.928622][T29021] bond1 (unregistering): Released all slaves [ 676.945680][T29021] bond2 (unregistering): Released all slaves [ 676.964246][T29021] bond3 (unregistering): Released all slaves [ 676.979103][T29021] bond4 (unregistering): Released all slaves [ 676.998050][T29021] bond5 (unregistering): Released all slaves [ 677.024756][T29021] bond6 (unregistering): Released all slaves [ 677.039847][T29021] bond7 (unregistering): Released all slaves [ 677.055490][T29021] bond8 (unregistering): Released all slaves [ 677.072256][T29021] bond9 (unregistering): Released all slaves [ 677.094126][T29021] bond10 (unregistering): Released all slaves [ 677.110292][T29021] bond11 (unregistering): Released all slaves [ 677.126072][T29021] bond12 (unregistering): Released all slaves [ 677.240941][T31306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.311598][T31306] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 677.423650][T29021] tipc: Left network mode [ 677.553519][T29021] IPVS: stopping master sync thread 18297 ... [ 677.574963][T29021] IPVS: stopping backup sync thread 26368 ... [ 677.589963][T31339] vlan2: entered promiscuous mode [ 677.595602][T31339] vlan2: entered allmulticast mode [ 677.601166][T31339] hsr_slave_1: entered allmulticast mode [ 677.648054][T31351] wireguard0: entered promiscuous mode [ 677.653939][T31351] wireguard0: entered allmulticast mode [ 677.731640][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.786252][T31359] xt_hashlimit: size too large, truncated to 1048576 [ 677.923648][T31366] netlink: 'syz.2.6914': attribute type 1 has an invalid length. [ 678.136031][T31370] bond2: (slave gretap1): making interface the new active one [ 678.168504][T31381] __nla_validate_parse: 5 callbacks suppressed [ 678.168543][T31381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6915'. [ 678.203275][T31370] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 678.288873][T31366] gretap2: entered promiscuous mode [ 678.340113][T31366] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 678.396177][T31381] veth0_to_team: entered promiscuous mode [ 678.431336][T31381] veth0_to_team: left promiscuous mode [ 678.472473][T31383] macvlan3: entered promiscuous mode [ 678.478132][T31383] macvlan3: entered allmulticast mode [ 678.484998][T31383] bond2: entered promiscuous mode [ 678.490610][T31383] gretap1: entered promiscuous mode [ 678.520130][T31383] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 678.548875][T31383] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 678.580385][T31383] bond2: left promiscuous mode [ 678.595923][T31383] gretap1: left promiscuous mode [ 678.774154][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.103054][ T6626] IPVS: starting estimator thread 0... [ 679.117932][T31427] macvtap1: entered promiscuous mode [ 679.142507][T31427] macvtap1: entered allmulticast mode [ 679.199200][T31431] IPVS: using max 26 ests per chain, 62400 per kthread [ 679.199792][T31427] veth1_vlan: entered allmulticast mode [ 679.377527][T31433] macvtap2: entered promiscuous mode [ 679.422198][T31433] macvtap2: entered allmulticast mode [ 679.813628][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.850345][T31467] syzkaller0: entered promiscuous mode [ 679.855889][T31467] syzkaller0: entered allmulticast mode [ 679.958444][T31470] netlink: 'syz.3.6936': attribute type 1 has an invalid length. [ 679.997514][T31471] netlink: 'syz.3.6936': attribute type 1 has an invalid length. [ 680.217794][T31485] IPVS: Scheduler module ip_vs_sip not found [ 680.266764][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6941'. [ 680.320145][T29021] hsr_slave_0: left promiscuous mode [ 680.343293][T29021] hsr_slave_1: left promiscuous mode [ 680.450296][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.458678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.536058][T31507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6945'. [ 680.813028][T31514] netlink: 'syz.2.6948': attribute type 13 has an invalid length. [ 680.821170][T31514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6948'. [ 680.842981][T31514] netlink: 'syz.2.6948': attribute type 13 has an invalid length. [ 680.851955][T29030] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.861715][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.871770][T29030] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.882334][T31514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6948'. [ 680.891720][T29030] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.915595][T29030] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.951400][T31516] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 681.046979][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'. [ 681.063929][T29021] IPVS: stop unused estimator thread 0... [ 681.120691][T31525] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6952'. [ 681.370369][T31540] netlink: 'syz.3.6956': attribute type 5 has an invalid length. [ 681.378204][T31540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6956'. [ 681.401124][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6956'. [ 681.485350][T31544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.540363][T31548] sctp: [Deprecated]: syz.4.6960 (pid 31548) Use of int in max_burst socket option. [ 681.540363][T31548] Use struct sctp_assoc_value instead [ 681.617895][T31554] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 681.653601][T31554] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 681.666674][T31554] gretap1: entered promiscuous mode [ 681.672331][T31554] gretap1: entered allmulticast mode [ 681.733821][T31565] xt_hashlimit: size too large, truncated to 1048576 [ 681.734900][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.748899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.876019][T31579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.888157][T31579] openvswitch: netlink: IP tunnel dst address not specified [ 681.895953][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.973474][T31581] lo: entered allmulticast mode [ 682.031711][T31585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.079379][T31581] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6968'. [ 682.339697][T31607] netlink: 'syz.2.6975': attribute type 29 has an invalid length. [ 682.360978][T31607] netlink: 'syz.2.6975': attribute type 29 has an invalid length. [ 682.617850][T31626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.626754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.723616][T31628] bond1: entered promiscuous mode [ 682.728772][T31628] bond1: entered allmulticast mode [ 682.734775][T31628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.758556][T31628] macvlan3: entered promiscuous mode [ 682.764117][T31628] macvlan3: entered allmulticast mode [ 682.765802][T31633] netlink: 'syz.1.6983': attribute type 1 has an invalid length. [ 682.778301][T31628] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 682.778338][T31633] netlink: 'syz.1.6983': attribute type 2 has an invalid length. [ 682.794124][T31633] netlink: 'syz.1.6983': attribute type 1 has an invalid length. [ 682.932487][T22492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.973755][T31643] netlink: 'syz.3.6986': attribute type 10 has an invalid length. [ 683.002977][T31643] team0: Port device dummy0 added [ 683.029717][ T6621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.204424][T31654] __nla_validate_parse: 5 callbacks suppressed [ 683.204444][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 683.369770][T31667] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6993'. [ 683.581236][T31685] lo: Caught tx_queue_len zero misconfig [ 683.586992][T31685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 683.793727][T31702] IPVS: set_ctl: invalid protocol: 22 172.20.20.43:20001 [ 683.822827][T31706] Bluetooth: MGMT ver 1.23 [ 683.886488][T31707] netlink: 'syz.1.7005': attribute type 16 has an invalid length. [ 684.404144][T31707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.423613][T31707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.571294][T29030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.592560][T29030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.615663][T29030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.624994][T29030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.772200][T31733] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7011'. [ 684.802134][T31733] netem: invalid attributes len -24 [ 684.807400][T31733] netem: change failed [ 684.925784][T31746] netlink: 59 bytes leftover after parsing attributes in process `syz.3.7013'. [ 684.963649][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7013'. [ 685.016561][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7017'. [ 685.173897][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7022'. [ 685.187408][T31766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7022'. [ 685.197721][T31762] syzkaller0: entered promiscuous mode [ 685.204223][T31762] syzkaller0: entered allmulticast mode [ 685.562746][T31786] tipc: Started in network mode [ 685.567769][T31786] tipc: Node identity 32d25c470228, cluster identity 4711 [ 685.584491][T31786] tipc: Enabled bearer , priority 0 [ 685.592219][T31786] syzkaller0: entered promiscuous mode [ 685.598206][T31786] syzkaller0: entered allmulticast mode [ 685.619033][T31786] tipc: Resetting bearer [ 685.629947][T31785] tipc: Resetting bearer [ 685.646149][T31785] tipc: Disabling bearer [ 685.750507][T31799] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7031'. [ 685.787548][T31802] delete_channel: no stack [ 685.865465][T31806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7034'. [ 686.057695][T22489] net_ratelimit: 5 callbacks suppressed [ 686.057714][T22489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.213233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.851614][ T6624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.090120][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.489694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.537070][T31832] lo: entered allmulticast mode [ 687.549463][T31832] lo: left allmulticast mode [ 687.617737][T31837] gtp0: entered promiscuous mode [ 687.637688][T31842] sctp: [Deprecated]: syz.0.7042 (pid 31842) Use of int in max_burst socket option. [ 687.637688][T31842] Use struct sctp_assoc_value instead [ 687.642918][T31837] gtp0: entered allmulticast mode [ 687.665647][T31832] openvswitch: netlink: Multiple metadata blocks provided [ 687.733126][T31837] sctp: [Deprecated]: syz.4.7041 (pid 31837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.733126][T31837] Use struct sctp_sack_info instead [ 687.969445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.977919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.049682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.069370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.353284][T31887] syzkaller0: entered promiscuous mode [ 688.373202][T31887] syzkaller0: entered allmulticast mode [ 688.374140][T31886] validate_nla: 1 callbacks suppressed [ 688.374165][T31886] netlink: 'syz.1.7058': attribute type 11 has an invalid length. [ 688.394903][T31886] __nla_validate_parse: 1 callbacks suppressed [ 688.394919][T31886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7058'. [ 688.416940][T31886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7058'. [ 688.429219][T31886] netlink: 'syz.1.7058': attribute type 5 has an invalid length. [ 688.437450][T31886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7058'. [ 688.463571][T31890] netlink: 'syz.2.7059': attribute type 1 has an invalid length. [ 688.624749][T31890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.702432][T31893] bond3: (slave geneve2): making interface the new active one [ 688.726396][T31893] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 688.767641][T29030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.788408][T29030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.815416][T31914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7063'. [ 688.850290][T29030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.880800][T29030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.922262][T31916] netlink: 'syz.4.7064': attribute type 1 has an invalid length. [ 688.992867][T31923] bond4: (slave ip6gretap1): making interface the new active one [ 689.001360][T31923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.010234][T31923] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.018332][T31923] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 689.122467][T31928] sctp: [Deprecated]: syz.0.7068 (pid 31928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.122467][T31928] Use struct sctp_sack_info instead [ 689.325440][T31945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7074'. [ 689.361866][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7074'. [ 689.396348][T31945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7074'. [ 689.441249][T31951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7074'. [ 689.908041][T31982] netlink: 'syz.0.7086': attribute type 10 has an invalid length. [ 689.916419][T31982] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7086'. [ 689.934335][T31984] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7087'. [ 690.082474][T31987] bond5: entered promiscuous mode [ 690.096678][T31987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.133958][T31987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.141725][T31987] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 690.154252][T31987] bond5: (slave sit1): Error -95 calling set_mac_address [ 691.020869][T32052] netlink: 'syz.2.7107': attribute type 2 has an invalid length. [ 691.034439][T32053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.077686][T32053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.133173][T32057] ip6tnl0: entered promiscuous mode [ 691.209397][ C1] net_ratelimit: 8 callbacks suppressed [ 691.209418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.249613][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.337813][T32069] netlink: 'syz.4.7112': attribute type 2 has an invalid length. [ 691.375704][T32069] : entered promiscuous mode [ 691.386222][T32072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.558764][ T6624] IPVS: starting estimator thread 0... [ 691.650089][T32078] IPVS: using max 25 ests per chain, 60000 per kthread [ 691.863062][T32086] netlink: 'syz.0.7117': attribute type 9 has an invalid length. [ 691.889523][T32088] "syz.3.7118" (32088) uses obsolete ecb(arc4) skcipher [ 691.896653][T32086] netlink: 'syz.0.7117': attribute type 11 has an invalid length. [ 691.927978][T32086] netlink: 'syz.0.7117': attribute type 12 has an invalid length. [ 692.050337][T32093] bond0: entered promiscuous mode [ 692.055485][T32093] bond_slave_0: entered promiscuous mode [ 692.078009][T32093] bond_slave_1: entered promiscuous mode [ 692.117675][T32099] xt_hashlimit: size too large, truncated to 1048576 [ 692.129400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.290053][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.298660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.468825][T32116] xt_l2tp: missing protocol rule (udp|l2tpip) [ 692.549781][T32119] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 692.911560][T32131] nbd5: detected capacity change from 0 to 127 [ 693.329749][T22505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.348077][ T6624] lo speed is unknown, defaulting to 1000 [ 693.361401][T32165] ip6tnl0: Caught tx_queue_len zero misconfig [ 693.379354][T32170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.396097][ T6624] syz0: Port: 1 Link DOWN [ 693.422198][T32159] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.432342][ T6624] lo speed is unknown, defaulting to 1000 [ 693.444886][T32159] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.513266][T32159] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.635888][ T5826] block nbd5: Receive control failed (result -104) [ 693.644345][T32182] validate_nla: 4 callbacks suppressed [ 693.644362][T32182] netlink: 'syz.2.7141': attribute type 3 has an invalid length. [ 693.745523][T32184] __nla_validate_parse: 15 callbacks suppressed [ 693.745546][T32184] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7142'. [ 694.028913][T32159] infiniband syz2: set down [ 694.034943][ T6624] ip6_vti0 speed is unknown, defaulting to 1000 [ 694.041451][T32159] infiniband syz2: added ip6_vti0 [ 694.117900][T32159] RDS/IB: syz2: added [ 694.155349][T32159] ================================================================== [ 694.163480][T32159] BUG: KASAN: slab-use-after-free in rds_conn_path_connect_if_down+0x118/0x3a0 [ 694.172559][T32159] Read of size 4 at addr ffff888067c90180 by task syz.4.7139/32159 [ 694.180480][T32159] [ 694.182831][T32159] CPU: 0 UID: 0 PID: 32159 Comm: syz.4.7139 Not tainted syzkaller #0 PREEMPT(full) [ 694.182855][T32159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 694.182867][T32159] Call Trace: [ 694.182874][T32159] [ 694.182882][T32159] dump_stack_lvl+0xe8/0x150 [ 694.182911][T32159] print_report+0xba/0x230 [ 694.182932][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 694.182960][T32159] kasan_report+0x117/0x150 [ 694.182987][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 694.183019][T32159] kasan_check_range+0x264/0x2c0 [ 694.183046][T32159] rds_conn_path_connect_if_down+0x118/0x3a0 [ 694.183074][T32159] ? rds_conn_path_connect_if_down+0x23/0x3a0 [ 694.183103][T32159] rds_ib_nodev_connect+0x4e/0xa0 [ 694.183119][T32159] rds_ib_add_one+0x7e0/0xa10 [ 694.183147][T32159] add_client_context+0x37c/0x7a0 [ 694.183172][T32159] ? __pfx_add_client_context+0x10/0x10 [ 694.183191][T32159] ? xa_find_after+0xae/0x430 [ 694.183221][T32159] enable_device_and_get+0x19c/0x3e0 [ 694.183240][T32159] ? __pfx_enable_device_and_get+0x10/0x10 [ 694.183262][T32159] ? device_add+0x70b/0xb70 [ 694.183284][T32159] ib_register_device+0x110f/0x13e0 [ 694.183307][T32159] ? __pfx_ib_register_device+0x10/0x10 [ 694.183332][T32159] ? xa_load+0x60/0x210 [ 694.183355][T32159] ? xa_load+0x60/0x210 [ 694.183376][T32159] ? xa_load+0x60/0x210 [ 694.183399][T32159] ? xa_load+0x1db/0x210 [ 694.183424][T32159] ? ib_device_set_netdev+0x5c9/0x6d0 [ 694.183449][T32159] rxe_register_device+0x1e3/0x350 [ 694.183483][T32159] rxe_net_add+0x81/0x110 [ 694.183510][T32159] rxe_newlink+0xdd/0x190 [ 694.183532][T32159] nldev_newlink+0x5bd/0x650 [ 694.183550][T32159] ? __pfx_nldev_newlink+0x10/0x10 [ 694.183603][T32159] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 694.183630][T32159] ? arch_stack_walk+0xfb/0x150 [ 694.183665][T32159] ? bpf_lsm_capable+0x9/0x20 [ 694.183682][T32159] ? security_capable+0x7e/0x2c0 [ 694.183707][T32159] ? __pfx_nldev_newlink+0x10/0x10 [ 694.183725][T32159] rdma_nl_rcv+0x6d7/0xa10 [ 694.183747][T32159] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 694.183774][T32159] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.183795][T32159] netlink_unicast+0x80f/0x9b0 [ 694.183825][T32159] ? __pfx_netlink_unicast+0x10/0x10 [ 694.183851][T32159] ? netlink_sendmsg+0x650/0xb40 [ 694.183868][T32159] ? skb_put+0x11b/0x210 [ 694.183901][T32159] netlink_sendmsg+0x813/0xb40 [ 694.183922][T32159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.183951][T32159] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.183974][T32159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.183997][T32159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.184012][T32159] ____sys_sendmsg+0xa68/0xad0 [ 694.184032][T32159] ? __might_fault+0xaf/0x130 [ 694.184053][T32159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.184076][T32159] ? import_iovec+0x73/0xa0 [ 694.184093][T32159] ___sys_sendmsg+0x2a5/0x360 [ 694.184112][T32159] ? __lock_acquire+0x6b5/0x2cf0 [ 694.184131][T32159] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.184171][T32159] ? futex_wait+0x29a/0x380 [ 694.184204][T32159] ? __fget_files+0x2a/0x420 [ 694.184219][T32159] ? __fget_files+0x3a0/0x420 [ 694.184240][T32159] __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.184262][T32159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.184288][T32159] ? rcu_is_watching+0x15/0xb0 [ 694.184313][T32159] do_syscall_64+0x14d/0xf80 [ 694.184335][T32159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.184351][T32159] ? trace_irq_disable+0x37/0x100 [ 694.184371][T32159] ? clear_bhb_loop+0x40/0x90 [ 694.184390][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.184407][T32159] RIP: 0033:0x7f86ddb9bf79 [ 694.184423][T32159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.184439][T32159] RSP: 002b:00007f86de9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.184458][T32159] RAX: ffffffffffffffda RBX: 00007f86dde15fa0 RCX: 00007f86ddb9bf79 [ 694.184477][T32159] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000007 [ 694.184489][T32159] RBP: 00007f86ddc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 694.184500][T32159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.184510][T32159] R13: 00007f86dde16038 R14: 00007f86dde15fa0 R15: 00007ffd67ffbbe8 [ 694.184531][T32159] [ 694.184537][T32159] [ 694.602799][T32159] Allocated by task 17155: [ 694.607228][T32159] kasan_save_track+0x3e/0x80 [ 694.611943][T32159] __kasan_slab_alloc+0x6c/0x80 [ 694.616933][T32159] kmem_cache_alloc_noprof+0x2bc/0x650 [ 694.622420][T32159] copy_net_ns+0x1e3/0x730 [ 694.626850][T32159] create_new_namespaces+0x3e7/0x6a0 [ 694.632167][T32159] unshare_nsproxy_namespaces+0x11a/0x160 [ 694.637916][T32159] ksys_unshare+0x4f4/0x900 [ 694.642444][T32159] __x64_sys_unshare+0x38/0x50 [ 694.647233][T32159] do_syscall_64+0x14d/0xf80 [ 694.651849][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.657753][T32159] [ 694.660089][T32159] Freed by task 29021: [ 694.664168][T32159] kasan_save_track+0x3e/0x80 [ 694.668864][T32159] kasan_save_free_info+0x46/0x50 [ 694.673904][T32159] __kasan_slab_free+0x5c/0x80 [ 694.678699][T32159] kmem_cache_free+0x180/0x610 [ 694.683481][T32159] cleanup_net+0x5cc/0x800 [ 694.688013][T32159] process_scheduled_works+0xaec/0x17a0 [ 694.693569][T32159] worker_thread+0xa50/0xfc0 [ 694.698178][T32159] kthread+0x388/0x470 [ 694.702265][T32159] ret_from_fork+0x51e/0xb90 [ 694.706868][T32159] ret_from_fork_asm+0x1a/0x30 [ 694.711659][T32159] [ 694.713996][T32159] Last potentially related work creation: [ 694.719720][T32159] kasan_save_stack+0x3e/0x60 [ 694.724420][T32159] kasan_record_aux_stack+0xbd/0xd0 [ 694.729643][T32159] insert_work+0x3d/0x330 [ 694.733990][T32159] __queue_work+0xccf/0xf90 [ 694.738524][T32159] queue_delayed_work_on+0x11a/0x1e0 [ 694.743840][T32159] __inet_insert_ifa+0x9bf/0xbc0 [ 694.748796][T32159] devinet_ioctl+0x12ff/0x1b30 [ 694.753581][T32159] inet_ioctl+0x42a/0x560 [ 694.757928][T32159] sock_do_ioctl+0x101/0x320 [ 694.762531][T32159] sock_ioctl+0x5c6/0x7f0 [ 694.766881][T32159] __se_sys_ioctl+0xfc/0x170 [ 694.771512][T32159] do_syscall_64+0x14d/0xf80 [ 694.776124][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.782033][T32159] [ 694.784456][T32159] Second to last potentially related work creation: [ 694.792518][T32159] kasan_save_stack+0x3e/0x60 [ 694.797220][T32159] kasan_record_aux_stack+0xbd/0xd0 [ 694.802430][T32159] insert_work+0x3d/0x330 [ 694.806770][T32159] __queue_work+0xccf/0xf90 [ 694.811374][T32159] call_timer_fn+0x192/0x5a0 [ 694.815987][T32159] __run_timer_base+0x67e/0x8b0 [ 694.820849][T32159] run_timer_softirq+0x103/0x170 [ 694.825806][T32159] handle_softirqs+0x22a/0x7c0 [ 694.830587][T32159] do_softirq+0x76/0xd0 [ 694.834759][T32159] __local_bh_enable_ip+0xf8/0x130 [ 694.839878][T32159] cfg80211_mlme_unregister_socket+0x2ce/0x670 [ 694.846046][T32159] nl80211_netlink_notify+0x356/0x840 [ 694.851442][T32159] notifier_call_chain+0x19d/0x3a0 [ 694.856574][T32159] blocking_notifier_call_chain+0x6a/0x90 [ 694.862308][T32159] netlink_release+0x123b/0x1ad0 [ 694.867260][T32159] sock_close+0xc3/0x240 [ 694.871554][T32159] __fput+0x44f/0xa70 [ 694.875555][T32159] fput_close_sync+0x11f/0x240 [ 694.880336][T32159] __x64_sys_close+0x7e/0x110 [ 694.885030][T32159] do_syscall_64+0x14d/0xf80 [ 694.889659][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.895566][T32159] [ 694.897903][T32159] The buggy address belongs to the object at ffff888067c90000 [ 694.897903][T32159] which belongs to the cache net_namespace of size 9472 [ 694.912314][T32159] The buggy address is located 384 bytes inside of [ 694.912314][T32159] freed 9472-byte region [ffff888067c90000, ffff888067c92500) [ 694.926213][T32159] [ 694.928550][T32159] The buggy address belongs to the physical page: [ 694.934987][T32159] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67c90 [ 694.943765][T32159] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 694.952279][T32159] memcg:ffff88803652c401 [ 694.956525][T32159] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 694.964082][T32159] page_type: f5(slab) [ 694.968082][T32159] raw: 00fff00000000040 ffff888140410dc0 dead000000000100 dead000000000122 [ 694.976775][T32159] raw: 0000000000000000 0000000800030003 00000000f5000000 ffff88803652c401 [ 694.985549][T32159] head: 00fff00000000040 ffff888140410dc0 dead000000000100 dead000000000122 [ 694.994228][T32159] head: 0000000000000000 0000000800030003 00000000f5000000 ffff88803652c401 [ 695.002911][T32159] head: 00fff00000000003 ffffea00019f2401 00000000ffffffff 00000000ffffffff [ 695.011592][T32159] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 695.020285][T32159] page dumped because: kasan: bad access detected [ 695.026805][T32159] page_owner tracks the page as allocated [ 695.032530][T32159] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 87158570714, free_ts 87156835897 [ 695.053913][T32159] post_alloc_hook+0x228/0x280 [ 695.058714][T32159] get_page_from_freelist+0x24dc/0x2580 [ 695.064285][T32159] __alloc_frozen_pages_noprof+0x18d/0x380 [ 695.070116][T32159] allocate_slab+0x77/0x660 [ 695.074721][T32159] refill_objects+0x331/0x3c0 [ 695.079423][T32159] refill_sheaf+0x29/0x50 [ 695.083770][T32159] __pcs_replace_empty_main+0x3ef/0x620 [ 695.089328][T32159] kmem_cache_alloc_noprof+0x37d/0x650 [ 695.094897][T32159] copy_net_ns+0x1e3/0x730 [ 695.099320][T32159] create_new_namespaces+0x3e7/0x6a0 [ 695.104621][T32159] unshare_nsproxy_namespaces+0x11a/0x160 [ 695.110351][T32159] ksys_unshare+0x4f4/0x900 [ 695.114878][T32159] __x64_sys_unshare+0x38/0x50 [ 695.119672][T32159] do_syscall_64+0x14d/0xf80 [ 695.124274][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.130189][T32159] page last free pid 5480 tgid 5480 stack trace: [ 695.136529][T32159] __free_frozen_pages+0xbf8/0xd70 [ 695.141657][T32159] skb_release_data+0x6f0/0x940 [ 695.146538][T32159] __kfree_skb+0x5d/0x210 [ 695.150972][T32159] netlink_recvmsg+0x5d6/0xa50 [ 695.155765][T32159] sock_recvmsg+0x22c/0x270 [ 695.160277][T32159] ____sys_recvmsg+0x1e6/0x4a0 [ 695.165055][T32159] ___sys_recvmsg+0x215/0x590 [ 695.169743][T32159] __x64_sys_recvmsg+0x1ba/0x2a0 [ 695.174957][T32159] do_syscall_64+0x14d/0xf80 [ 695.179568][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.185479][T32159] [ 695.187815][T32159] Memory state around the buggy address: [ 695.193452][T32159] ffff888067c90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 695.201553][T32159] ffff888067c90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 695.209625][T32159] >ffff888067c90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 695.217695][T32159] ^ [ 695.221773][T32159] ffff888067c90200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 695.229849][T32159] ffff888067c90280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 695.237918][T32159] ================================================================== [ 695.250143][T32159] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 695.257398][T32159] CPU: 0 UID: 0 PID: 32159 Comm: syz.4.7139 Not tainted syzkaller #0 PREEMPT(full) [ 695.266881][T32159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 695.276980][T32159] Call Trace: [ 695.280290][T32159] [ 695.283258][T32159] vpanic+0x1e0/0x670 [ 695.287284][T32159] panic+0xc5/0xd0 [ 695.291045][T32159] ? __pfx_panic+0x10/0x10 [ 695.295499][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 695.301703][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 695.307891][T32159] check_panic_on_warn+0x89/0xb0 [ 695.312854][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 695.319032][T32159] end_report+0x6f/0x140 [ 695.323312][T32159] kasan_report+0x128/0x150 [ 695.327939][T32159] ? rds_conn_path_connect_if_down+0x118/0x3a0 [ 695.334134][T32159] kasan_check_range+0x264/0x2c0 [ 695.339108][T32159] rds_conn_path_connect_if_down+0x118/0x3a0 [ 695.345217][T32159] ? rds_conn_path_connect_if_down+0x23/0x3a0 [ 695.351333][T32159] rds_ib_nodev_connect+0x4e/0xa0 [ 695.356396][T32159] rds_ib_add_one+0x7e0/0xa10 [ 695.361105][T32159] add_client_context+0x37c/0x7a0 [ 695.366154][T32159] ? __pfx_add_client_context+0x10/0x10 [ 695.371722][T32159] ? xa_find_after+0xae/0x430 [ 695.376434][T32159] enable_device_and_get+0x19c/0x3e0 [ 695.381737][T32159] ? __pfx_enable_device_and_get+0x10/0x10 [ 695.387572][T32159] ? device_add+0x70b/0xb70 [ 695.392111][T32159] ib_register_device+0x110f/0x13e0 [ 695.397341][T32159] ? __pfx_ib_register_device+0x10/0x10 [ 695.402921][T32159] ? xa_load+0x60/0x210 [ 695.407108][T32159] ? xa_load+0x60/0x210 [ 695.411287][T32159] ? xa_load+0x60/0x210 [ 695.415471][T32159] ? xa_load+0x1db/0x210 [ 695.419824][T32159] ? ib_device_set_netdev+0x5c9/0x6d0 [ 695.425241][T32159] rxe_register_device+0x1e3/0x350 [ 695.430379][T32159] rxe_net_add+0x81/0x110 [ 695.434736][T32159] rxe_newlink+0xdd/0x190 [ 695.439107][T32159] nldev_newlink+0x5bd/0x650 [ 695.443721][T32159] ? __pfx_nldev_newlink+0x10/0x10 [ 695.448889][T32159] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 695.455084][T32159] ? arch_stack_walk+0xfb/0x150 [ 695.459972][T32159] ? bpf_lsm_capable+0x9/0x20 [ 695.464680][T32159] ? security_capable+0x7e/0x2c0 [ 695.469638][T32159] ? __pfx_nldev_newlink+0x10/0x10 [ 695.474770][T32159] rdma_nl_rcv+0x6d7/0xa10 [ 695.479225][T32159] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 695.484196][T32159] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.489414][T32159] netlink_unicast+0x80f/0x9b0 [ 695.494222][T32159] ? __pfx_netlink_unicast+0x10/0x10 [ 695.499538][T32159] ? netlink_sendmsg+0x650/0xb40 [ 695.504484][T32159] ? skb_put+0x11b/0x210 [ 695.508746][T32159] netlink_sendmsg+0x813/0xb40 [ 695.513529][T32159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.518834][T32159] ? aa_sock_msg_perm+0xf1/0x1b0 [ 695.523792][T32159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.529101][T32159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.534413][T32159] ____sys_sendmsg+0xa68/0xad0 [ 695.539201][T32159] ? __might_fault+0xaf/0x130 [ 695.543905][T32159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.549263][T32159] ? import_iovec+0x73/0xa0 [ 695.553782][T32159] ___sys_sendmsg+0x2a5/0x360 [ 695.558495][T32159] ? __lock_acquire+0x6b5/0x2cf0 [ 695.563470][T32159] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.568686][T32159] ? futex_wait+0x29a/0x380 [ 695.573222][T32159] ? __fget_files+0x2a/0x420 [ 695.577825][T32159] ? __fget_files+0x3a0/0x420 [ 695.582534][T32159] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.587511][T32159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.592996][T32159] ? rcu_is_watching+0x15/0xb0 [ 695.597955][T32159] do_syscall_64+0x14d/0xf80 [ 695.602560][T32159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.608647][T32159] ? trace_irq_disable+0x37/0x100 [ 695.613684][T32159] ? clear_bhb_loop+0x40/0x90 [ 695.618373][T32159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.624279][T32159] RIP: 0033:0x7f86ddb9bf79 [ 695.628708][T32159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.648330][T32159] RSP: 002b:00007f86de9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.656761][T32159] RAX: ffffffffffffffda RBX: 00007f86dde15fa0 RCX: 00007f86ddb9bf79 [ 695.664833][T32159] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000007 [ 695.672817][T32159] RBP: 00007f86ddc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 695.680802][T32159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.688788][T32159] R13: 00007f86dde16038 R14: 00007f86dde15fa0 R15: 00007ffd67ffbbe8 [ 695.696780][T32159] [ 695.700415][T32159] Kernel Offset: disabled [ 695.704742][T32159] Rebooting in 86400 seconds..