last executing test programs: 9.748778322s ago: executing program 1 (id=2816): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x28c, 0x12, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0xff, 0x17, 0xd3, {0x4e21, 0x4e22, [0x3, 0x4, 0x5, 0xcc], [0x7, 0x555d944, 0x2, 0x5], 0x0, [0x5, 0x7]}, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "e6e510fc2f6525bfaaa1b60711c02fe61890ecb474e4cd649fd69593750d9a1af58572600898c6bd2f6e8841c3ffb86c3e4f46e411e24647f244567233c32300f6db162d4bb70c9530d6b1d2277c071008ed39115a8a49d17cbfbd26fa7364cbb9a4716a8146fb245dbe093e8aed6954a68d834b568fb0b79f5e460ea26e9c4e055eddb93d52620fd237970d9a3f786c5755038185653e6218386b51de0036bf8a472ec1d19eac96b9866cf5c41b6912f888ae087662459042c798b3df219cedf8ad6cc5"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "542ffe68caf1de4e8b6c13e5603d52ec8c8a1aec8aac86e8d7c285c5aa901e7f989f12301131fceeb5445af3336bf78bc1c5bf3ff1c95449206d5311af4b850ada7114e6ccb1afaefec4d614fbc0ad7bda9513fab1547412028e1b8ddd2c3bf4cc02b6fe6559b86e0b8a8154ffa8e7659a9644603bc388"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "9fe807097147a0936ab4ad09f9ccb6b76d55af2db62924a77ec2730bffe324119f8aab23370cb93a99825d6f17d9d680eded9c08ce0688cbf2416f5994c01b5a24d86157bf7e3ca1ac12cd128f8fdbec1953d48e3175fa33b05c7afa770b76d7ecba0513e2d269ce24f4155f68ad431562711845f571ba149a34650a00"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "7aaa86c8e6152c42b2fd3354189bc1adc0b455d934a38ac6414867a735b6c5cfb2d0b927310211d2fc427d471ebde5612f740c3094e7c8553e17e3db53a20f8954bafa09af35a2204cf6f2a0c600d6ffb2d0aa03bda970ebc98a856e82ac61ab3e7a50333d1099039769bf72240b6ed8b5"}]}, 0x28c}, 0x1, 0x0, 0x0, 0xbc433bac4d41db2a}, 0x20002040) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac0000001a000100000000000000000002000000000000000000000005001b0000000000850008"], 0xac}}, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x18) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={r5, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0], 0x0, 0x2a, &(0x7f0000001b00)=[{}], 0x8, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x1ff, @empty, 0x2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="77b09f93b05c76ddcbcebef4094288536b7707624d692ed48b83a23d978828fb5d469c701df004a6b5ad7d0b3c9e958b5502554753ac772b0e55373588c86580e0afa86872217a57d0e3db0fba27b7b161900bffa713c77f1c182216eb7309fbef4f9664ebd359bb5bf3ce468bf98d48c6aea60a4def312091d1f0e6bc494094cee029ded8435257f49076428d6f775eb57a296c956aa73c33db97f7a7e20fe58e00edaf7d782a2eb03975f49bf7fb57dd6fe5acd498ee365966dadfc4", 0xbd}, {&(0x7f0000000900)="1c2f6a02428b0778c74c356a199a71f3f6d968779bc526b9c6ba882da66a4a5736700edd3cc94016b993061614284d89804d5ab223dde9a1ca3929ad7fd2113e420dc1dec3a54322f697abff8c9d2a7f3eccb0477b16f60d222c09817ccc0ce85bf6f5a64b5573a01b2b170cf2449122c714fd0ac6cc1dbbd0d955fbcdafaa956e7913f5d2fed0af37c790d0b7e5387d59b63096550e29495d58aecd5129814c717ceb30d7096a87fd59bacf29b986988bcb3cb0b7bf618b3056267ea305f305533d8593c4", 0xc5}, {&(0x7f0000000380)="f3faa014dad2a8a94211f58c4ff08947c8afa4", 0x13}, {&(0x7f0000000a00)="7a77b9fe82dded06e452c2fcc1ac23ea950c19e21989702a39df848a6d197e623944bf84a49c71a34bbff08098ddf197f5b343644e27e8a4bb7b85f8e11d336fd989d7d22c0a862519e1b3cf69bdd0c6b6414ad7360eb33b7b10c1bd50af87fff1d80eeecf0614cf1b64f2fe77394782697bfdb532cc4c9c5b60462fb457bc3c3a10b44a70e9ad6f1d72a3857d2aab67af6b47edadb40cf0fa1fd98091915cb7eeca81b9895f19d3835c3329e4150a7cd62a792002c46bf23e69f4de9bbff0aca3af2df84ae1f2cbecf5181b4cb810d97decc379df389905ddf50b9f97515752b4e4df283b59a0bc661638ae61631c399049", 0xf2}, {&(0x7f0000000b00)="d93f3c7e11692a2f28dd3f528958eb7a68adca47592ba3bf5e382ea3dc08c5fd29f0b486016be512ad202de6855caf47045ccae594d352d1f8120caafff3658ef28ba2c4dc90e0675427312cc3946c43266a3afbb00bfb3a6e8daacd8f03013ec2742e614dbc4bc611a0dfac44423886b487de692c4a37b1eca78257cf47f49ba39f030575", 0x85}, {&(0x7f0000000bc0)="3b33b84886aa67b87458541423ad7c99cdf12e2f30e91cc20bafd328e32d2cb32395f6bee6dc55cae97d4c07b3b3e097a5b9aa416f18db6cad3c02744e965cd764e71bba18383afec56aae1435019fde285d1a2ce27bde40c6f7e9d90e21219cc9841cc2d9e3b8202a8e0da5f82122ac8a96e9747cf8dd330226be7837f08ea92e12c7ceffc21b9e57d80febb6d8f9fbe70e15bdab3f8981cf76d714a4b1d9711087b97a1559f3f5d5335b3c845a25b43c66a6c672509860ffc4bd5516ebfad074fe0511fe3d79f853458eb6b8d730f54127cfda6ed58af99216f382c3", 0xdd}, {&(0x7f00000004c0)="b1610722868d86df2bc958", 0xb}], 0x7, &(0x7f0000004100)=[@tclass={{0x14, 0x29, 0x43, 0x5481}}, @rthdr={{0x78, 0x29, 0x39, {0x73, 0xc, 0x1, 0x8, 0x0, [@mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0x95}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x88, 0x29, 0x39, {0x0, 0xe, 0x1, 0x20, 0x0, [@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff9}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x160}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x4, @mcast1, 0x3f}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000ec0)="b3aae8f14820c4e009491679df9574b9eb94b1c4eba4896a749b63cd2cbffe9282ea04a63e8e382c8fdb10504724f2770b8e1b8aa59b8bf200bb2ad38ec44c5dedad8f4e18a7c252388fc39f1fe20759d2817958335a4ff2a65d5e4dad671f0e43df05e42a4b8ab0d0e0505aec095c2c1818e2ba48756f601dc1c454914088b0623df8e0ba7ce2de1caf0bc752d65db8d20000ec00f82e1ffada13c4db9556fd267709", 0xa3}, {&(0x7f0000000f80)="41d99b7892167127", 0x8}, {&(0x7f0000000fc0)="6297907a4144c7eb5c8e25a7ff23ef38a1fd7ac944f88b818382cd31342a49c9d72fd8411f86de609f77e9bbd7fe83e8c994c814fdeff777c15ef889a947c3e13fef1b635f9079ea78213de06010586db282f4ccd1a32f784f4af8b10738398bcf650129831f8a4ab85d4b7a7f739d1706c09340c9e550625d7472ef4e5cc7179eacdd89f7ae63bb9c81", 0x8a}, {&(0x7f0000001080)="d07c0df402988283ce8e18bf3461c41c6e7b6fb57c8f113445192a477a7a7819deee67e73e2598bddc1f697d7103fe87d93095fd5a1a3d1d415fe32b1dd4b411bd9893bfde540ae1d66e25da16da408b11fcae684ef61e33753523aa65c39f83cb9edfa2db6ec18af1c1", 0x6a}], 0x4, &(0x7f0000001340)=[@dstopts_2292={{0x1d8, 0x29, 0x4, {0x67, 0x38, '\x00', [@pad1, @generic={0xa, 0xb6, "5ff01f64a5bf4f5db8d6023ba5ac1a7cdc5e50533d186813ceb6d505d26c4578c395dff91cf143bbc33aae26f7746f11044a70cbc0b3809bcc2a24392940763aab2092caad2d77f8d876c40e9ee3d5eaaee3f12ffd1935d252b4b423acd1b5b245be9e5721dc661ccf938b6aed10c7b9b030760e02af30a1c02c91d38577b9f1068e9aa5f74b26b6a31964db7d44c90182241dd9be92a8f8cf04bf1a64c3dadfc299c0222658a6c5afd6144f6241c05a0fedd3ca8318"}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x5, 0xfd, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x1f0}}, {{&(0x7f0000001140)={0xa, 0x4e20, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001180)="2947cc07be25ed955eb172c10d0858b426cdc89be3f9b1f53f62c29e859543855e7d93cba531e71590983a9219742fe2417f4fe11dd1d5e36bc703f67e54aff75bdc8579a9965cfa13444136ce61bd1bdf2c175705e6b89c19a2d31b19bf2c54d58ba0cea4b290975ee25dd64861a8c5dc5af57e8b7aa7b4ab72b6d882896edc7ca277c83b58e35c84aae5db3a251042390e62b4ed5012a2eda6627cc7692459710c78e3eb7b695f7a75fece007a741258324470c3e94d490b1e1b632d18", 0xbe}], 0x1}}, {{&(0x7f0000001280)={0xa, 0x4e20, 0xc, @local, 0x2001}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000012c0)="1f61004a8552f42758", 0x9}, {&(0x7f0000001540)="d4394d6ecf793d6b50928d9901e56c198482f802682145c987c4bc7c207e1c46f433564936bd7f12eda3e128672116d1c7d889b0703e740c81302eb05aec7d9faf335cf2b69972b07150185c328847b5f4f5ecb4602e5b37ab748eca86da29c52bed0d", 0x63}, {&(0x7f00000015c0)="c0aa7f477b5e41e0cc1c4d80c1aca9b8e4ce1ecd0cfbd247caf8ddb3aba0e79e4979f7b6df854fe454b14c3bd126d26921a0702d480cd7a036677043c89a02903273f5ba05f55714759fff5b554d5d30674aeaedb6463c5c9f1349df04f1d686f482c979634137b5bf693d947d7498c51c581697bd3e2095d65174839b09a0f381402c4a4645694e185d3f8bad5f3ba67401607c927538bf2b2368b43e0fa806487052ed8146dc00e47ed5c044b268520aec1faf6a231146841c3e8c17dc73abbc931b03a9a2e3ab9450d94287f6cae0", 0xd0}, {&(0x7f00000016c0)="782e22afdceb89050042386bfc2570e0cc22b9092a354cff0e3a1d80f173f53a5b205c081f7bf7277fa41cf39b1a7afcdc6f5642b36a819e305ac9c64d9f8ace1506a4a60de88a413a15205e1c7af2d6768133c99be2aef18fa8ea02aa3ccf0f3b3c3e03e2b0f9e2335161be0cfb3a14a0108a8c26815339462634610687b0c7a5b161d2dd8e1e365c5669929e66", 0x8e}], 0x4, &(0x7f00000017c0)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0xff, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}], 0x38}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x7663, @mcast1, 0x7ff}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001840)="cc03c99a27c3e7e01654b523e7320a2181af2671becb849b7418747b572cb60a830fd97746f25254e4d0fa3f20be2866200b6693c1c25556b648058cd523fa8e0eeaac1bae058123ac6f930b75b180fa6e71d2091def36", 0x57}, {&(0x7f00000018c0)="20e60961996c47abc2d5f47a61328e09854d7d0a97be5cc488c7f522427439ff7a1f810c3e3864a13fb85890d45ff95eb5f4799086455f8c2db03e6dc6bddfaf63cbea865ed228fb220427dc1f463a92e14e815f84745aad1f28976ec74b97a4efcfe8b28f1944a7afa3", 0x6a}, {&(0x7f0000001940)="b5ecad414610860422b006f84303f3419ef9dc9ef708ff22766d8503b9a3dbdc3e4b9158a4a263bcdd2399c4217c1c1c2189d19fedf4fd4578960c9303cb343ad07d84a595b53bd6aecac1becf8f7ed75d8016af0b714562726c6c9cdcb7fa2723aebef7", 0x64}, {&(0x7f00000019c0)="b2ab8d4d883cb87ea811be226477b3b88345be37a323d2e2582ca72bcba09576167bcf3a34f36118539980ecfa40", 0x2e}], 0x4, &(0x7f0000004280)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000000140000000000000029000000080000000600000000000000ed66edf5c931bd6efbd6a4ec2aa25b8670ba604c8f734a7ace458d184785854564480d14211248a652ccebd7f6c9620a48a406d6401e3d7bba87c4f19a04257397261351110b5baff1cd842f616c1fef483de400f8"], 0x1e0}}, {{&(0x7f0000001f40)={0xa, 0x4e21, 0x9, @empty, 0x80}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000000d40)="8ca260121a67a6cb5b6c6e27cb96710a3beda3decc4ee8624f173af20e476965fcdb53ce39f16558d56a63730055421aae7c05977a514eabd2b8814f699a6d214c62d753ddfbed7ef1c07292a7df3e26cbd33f3bfcb29cc454041d408f00fe15c7e68e9882442b3d7dc234f73b75f0340afb3fbdbf97a43d6864db8ea679819e418027d5d23d4540fff8a658269fe2729955a53c584a387af2ca5ddf7fe4827c2357a30b6d0ab45035e1170d6d054ada3798d8cc725300196cfd6b4176ded4d3834bc7465f3baf048f7677fc6c21be3bc5c16b6f809f63c849f98e3a6615", 0xde}, {&(0x7f0000002080)="870383a56a292fe44806cb8da43ecf4fdb9a5724e031f0bc5316eb38bc16d02b6a9c9e3c742134370247b65fadc589310b58bdfb7c4c5fcf0554696146ecf3eaf8a4b00a84fdaf0be00bfc6a0f56949e27c8f188608e6b8249c583c245d247000cb22671e6708157bc14649d299059cfc6e32033e3944b31be25f90e56d78e22db08e44c892fc27f5240715fc34c0306169998da35f0d8e00b1b90b35f2bbc01d313801b1e290bad99c637f4222ff4a4b6830c9e91565ae67123f434ef47a3e630557d90121a7dd06850b30cf5be730c7661512a1783ab50f24d0f79fc7a91de1ea9", 0xe2}, {&(0x7f0000002180)="ecd575224664ac6415e3b5f6c19820025defb0bf796920e742a8b34f6e285a725575a78067b49a7dc09e1369af4e00537c3864998a64eb9c3a413205d21e1c095acd44aa2f75d410fff5e71ad5db7e539e1957830cbd067c14904338a91a872b822b1c8e25b800c05f741111fc645dc6775aae6ea71fc2adcc36393d51dca3d33387473117d1c7f033519f2da3cf59a1c19fdbc36a7b4477b6975a0a3d1d64ca6edc6f93cbd9ab6024643182ee224cf2558a2eee7a0c07d0cd88f0aaf465e7c2983fef1afe29d71dc4289754a14c728176fe76110cc78c363ddd70a94dfe5ded3c281268c08c8ea1109306bd8432797d900c", 0xf2}, {&(0x7f0000001f80)="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", 0xfb}, {&(0x7f0000002380)="3761cfe26630326f0ea1d0bca8400f5e7eb45abbdf0e119cf333e919862e350c89159ee7af253257a09df7876660deee0087a50f0d21a60de7e96a3b2cc029cf0b4b4c904fa63f0b53d61cd98c10bdb190b86cdc578f065a57089f34dd60f4a4678a20f4e4c7558f84b082375df297e91115980a698c9a7a02478137741d09ed0a38a05f216c6b29c1d7029b10609c4c8c5f630a8e9afdabac6395f54bbf5af52d1a25d2fe42af21e4f2b17e17a2089a0ad3f1618dd3a77891174a33e2942d7dade07f473e9b44204ccd4f641cdc47cd077cfdec7e0d6420593a91c01ea450cf1259ad93e8949f", 0xe7}, {&(0x7f0000002480)="3e50f9fd744ca08665b0a1fc04f3d81ad4b5f582dd912607ba21a7b5ea17e1712e4b50cea801b2100d2f07ca61b55d30eec211336efdd98bbc2b8868febb90581aacb2c61d500ab2edbbacd8bd86f9ed0f78fe65d7effbc814dc4cea92505be547587855d2918f98daeea0e3adfd8f86509a69984e01ac884b76e7dee9a16a3c9ff488dece7a8ef00e8a256854726bedeed767b22c", 0x95}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="29f798b26bb3800e70a70b49bc4d03cb", 0x10}], 0x8, &(0x7f0000003680)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr={{0xa8, 0x29, 0x39, {0x5, 0x12, 0x1, 0x6, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2, @empty, @empty, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}}}], 0xc0}}, {{&(0x7f0000003600)={0xa, 0x4e21, 0xd, @loopback, 0x9c}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000003740)="2880a879bf8a40ab62cc566a8fade323994aed4125d313ee456e84af9f25372f55b94d36ed2013c3c0dedcaab416a416c5b74b165f9a5be38915aff6d04697a1d62fbc099eb5a16678f432ec3687b1760f91e57436ef5d1bb72f748198f427dcb4318c5c9f2f66bc570d5535a990dff318f486928546d45b9833755d11e1f689f426b45f44", 0x85}, {&(0x7f0000003800)="1c9a81df2b562e59c77c288f78e21d815a90fcef74bd92a26900ed702415fddab7dde687486a12f64ba20aa6d96de3ec7f5d8045b7f0a71df9d465524ee3b517be5da9a712ded911e4e7633b3a461638955bc53c13ca116e31039dc36cd6255806eba1e7ffa8005b0bd6d7ecbb2ca4eea508ac9e453e8f3ab37b43c5072d8c8ddfdbb6", 0x83}, {&(0x7f00000038c0)="c76ef7a01d90373e", 0x8}, {&(0x7f0000003900)="885871296789208019d8e56a1d7050163996a9dbd42c42e9c0aa9c4c5d15ce2293e1d4f150fa37bac528544c3f63e96d10630952861bb61ccd30f946891820089ab8dd137ff264ad6d378bfc8716d816d963f9e9b5f50914dbbad53cd6ce738a07bcd444b065b0a45151340da357550ae8391f18a7b5cab0cbc47337f5bcd548785152c2a03a23626b4befe76ea479dfc83e0737f9685754a544a3fb3afc", 0x9e}, {&(0x7f00000039c0)="e5fe923ea1e9b60caa02edf5200c6af521c37601ebae3178abe42011285fffaa96b5969a5dd3c9d1213b2ce41989781da24b5ba4b43832c514c7ba0588910b86f9118f0bf2bda90ea2d00a196e19e3fdb40784e2711602fa9be61368a1cf26c608fe1bdc2d9143a610c0bf366af310b15d9fb019afa55d85be626fe1ddbddc6842d88a22fc728144a42a37204c1bba6a80262acd4d8255601b6cdbedf79f2af08d15d5460c4437c447ef8386347bec5f04488af7a38baf9bae5d5f10755b479b89021f21e44bc26211a8f54f9a8f5266b170eae8c62a67f068b1ce6987e06ab9de0a65b0488bfa6cd56228d95c34ca7a", 0xf0}, {&(0x7f0000003ac0)="73164ab547df81df448a5ca9544ad6fc5ed51d89e002e4d362f654bc13258f8f7232badd3d9e3048c251b840df5333a56d8bdfd5e6d7f045219544f9808ac20bc5f3244ff261991e49657419740c1708ee471e391f3639ddb8e03f6ef20e417ba2013d5fb4b47b3eee06ed7663426cf82bff6beb674deac9c8805f2dd06d1addf4ee1279a7e24a06d66fff4fd5ed706ac187e0a9fb482b389439e3a97d5042818b7e074858305f57dc0ef2236708c665b90700fd9826239a677bd67be0fe991e9cb403e454557e2de96cd30344d12daf141723a58780197bcf61", 0xda}, {&(0x7f0000003bc0)="4465d64b63ce0c6dff5d050b1ebc22343ba3c1e41f80f08f45b4f13252f5f1cec33090806765592a651bec41f965ce82577707ccd8c4b7edd3dc09f61da0360c4e338bf267eaf844b63fbba1d6815b79e7693ff422d70b2f71abd3a0175ba079ff6bdb5b373bab99590fe501f7ddbc4bd34c6246e855909ae24807c3c3453c577c441071469bc37ec33273d9679e2f54f0a1801d8cb8490ab7a1715efb70e39827b96ee3da31e3964c6efcf228800ac38504b43ac8b8e49ae30e2f1f5fe71df22049151ffab9a6bdc30230c025456aa38ee04e73482716ea293b79c5f5f1", 0xde}, {&(0x7f0000003cc0)="8da8d7d009fb997e398b3c37a19d83df1a764b2ef8aaf51514b598dd7c8460e481465fba74a863eaf0fb588d3df4d7b6cf87d2bde412b197377e5226d826a35b65710e6674e10bfc20a2e8d17de57fe398769dc49f2aa019e9a220bce6c4d2cae26fab58875f654a32ec7f52643c", 0x6e}], 0x8}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003dc0)="4d09ecab8f553028e70de9d251061f8ac874e03f145a8182157e83641c24e731a780fc82e84236c15820", 0x2a}, {&(0x7f0000003e00)="78909d9d6f1cc18c911f6c99872e78a2e68ed07cc66296946a2d23b255e47f14b3d86af5e83a0063c2173b5036cbcd27f9c2af17ba87929092362200958691c9a85f17aa453401589594785b290928385c3d33d9ddf6a0ba1000943778e40a834fb1a8dbca6667297fb36b55324566b9a842bb71488448020c9c64720b9ebd0f645ea7a08c401bea24982c5172d14e42ce406370f08e2384343c36bb451a375a05da063d4310ee138c454a3f2f69c01f790f640d072e97881dbf4c5ee31901", 0xbf}], 0x2}}], 0x8, 0x400c415) (async) sendmmsg$inet6(r3, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) (async) ppoll(&(0x7f00000000c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0xb290}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$packet(0x11, 0x2, 0x300) 9.604630979s ago: executing program 1 (id=2818): syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0xfffffffffffffdd3, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000200), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) r4 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x200408d4}, 0xc000) 9.146074277s ago: executing program 1 (id=2826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x100, 0xc, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x9fe, 0x3, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ssrr={0x89, 0xb, 0xc3, [@empty, @remote]}, @rr={0x7, 0x1f, 0x54, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0xd8, [@multicast1]}, @ssrr={0x89, 0x17, 0x9, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x7d, 0x1, 0x9, [{@private=0xa010101, 0xf}]}, @ra={0x94, 0x4}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x0, @void}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r11}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000b00)={0xe8, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x64, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x0, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048000}, 0x48000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x10, 0x303, 0x8}, 0x10, 0x0, r0, 0x1, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x4, 0x2, 0x1}], 0x10, 0x3}, 0x94) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) poll(&(0x7f0000000440)=[{r12, 0x2}, {r0, 0x8082}, {r0, 0x108}, {r13, 0x2100}, {r14, 0x8010}, {0xffffffffffffffff, 0x4100}], 0x6, 0xdd92c1c) 8.193387664s ago: executing program 1 (id=2842): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000007b759c85f812b87102377f76ef230f83437b8f0fbd17fff142a53ec8ec535e1f06c7eac7e147cbafebb2e7fba0689e00d4eafe1eb257aea9b144c09955e412221c193f6abc77f0b70c686c22deb844ae47685ac45e8edabb1b30ca9eedf754c55c3947cf785c99f143ea5b672433ec3b3091319ed1dc5bc985748e32fbd7b1e2890f78592134930eb9fd5754473a91e70205b4f64399c1cadd5d58df850d3aa873ba5b2a", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff00"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x2, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r5, 0x2, 0x10}, &(0x7f0000000240)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) (async) r9 = socket$inet6(0xa, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffd}, 0xe) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r12}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a80"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000780)={0x1, 0x4, 0x9, 0x5, @vifc_lcl_addr=@rand_addr=0x64010100, @broadcast}, 0x10) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, r11, 0x4000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x22, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb07c, 0x0, 0x0, 0x0, 0xffff9465}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x101}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000580)=""/14, 0x41100, 0x52, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x0, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r1, r1, r1, r6], &(0x7f0000000680)=[{0x5, 0x2, 0x1, 0x7}, {0x1, 0x2, 0x1, 0x5}], 0x10, 0x9}, 0x94) 7.926236447s ago: executing program 1 (id=2847): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0x9, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x7d, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0x9, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x7d, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6, 0x4}, 0x20) getsockname$inet6(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000380)=0x14) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000380)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.785748239s ago: executing program 1 (id=2848): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x9, [0x5, 0x1, 0x81, 0x4, 0x7, 0x23ad, 0x9, 0x2, 0x2]}, 0x16) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x9, [0x5, 0x1, 0x81, 0x4, 0x7, 0x23ad, 0x9, 0x2, 0x2]}, 0x16) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffe7c, 0x2, {0x0, "000000001000000000040200050000ff"}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffe7c, 0x2, {0x0, "000000001000000000040200050000ff"}}}]}, 0x48}}, 0x0) 2.906257536s ago: executing program 4 (id=2896): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa88a84d008100460008004557002c00640000c2069078ac1414aaffffffff4e204e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="610319000000000000020000"], 0x46) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x18) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000920404003400128008000100677470002800028008000200", @ANYRES32=r0, @ANYBLOB="0800046e49bc000100000014000800fe80000000000000000000000000001b"], 0x54}}, 0x0) 2.802209431s ago: executing program 3 (id=2897): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 2.569889596s ago: executing program 3 (id=2900): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close(r5) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0x80000000, 0x6, 0x8}) 2.354292521s ago: executing program 4 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x20, 0xa, 0x0, {{0x16, 0x4, 0x3, 0x36, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x2b, 0xf0, [@multicast2, @remote, @private=0xa010100, @multicast1, @multicast2, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @local, @multicast1]}, @lsrr={0x83, 0x17, 0xe, [@local, @local, @dev={0xac, 0x14, 0x14, 0x15}, @local, @local]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xd0, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8af8ff00000000b6080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000005afffe009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48850}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000180)=0x99a, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x4000}, [@IFLA_PROMISCUITY={0x0, 0x1e, 0xdee}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.133753909s ago: executing program 2 (id=2906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x670, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "18523de200f5baeb91"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5e8, 0x3, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb44}, @NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "c847bb06827631a2b01f711c7300eb8e00cd1dae64a42fe94975094aac0a00a6ff56f306c0109e1479a058c5a233d5d0ad6f9ca8cb69e8a9159905461641cd0c084905b236b9e43c25a6fd68337a4cd362ae96429efad3d1f9b321bb6de6878ca7ef3a169bb4ac5390"}, @NFTA_DATA_VALUE={0x3d, 0x1, "75f1d0128b3f49554400bf815d6fd4dd87e1ff24e9b7b6af0b9a2b76051d309fb8c3d6ab8b166a78b141fbd8dcc3ba740d47e7910e07c43d7c"}, @NFTA_DATA_VALUE={0xf4, 0x1, "8e2844599fab1e591d53e8005913cdcbc9cc3afb74e5a39fb6080573856a74ed658d8eb08c05de8c742a1fb53aef8f9382e46ae192c20c328d188cae2791c233b532b9aafa2ccaaddbe2501841c86b81063f64d0c8df21502656566d743224c0fe06566afbe2745ab916928d5b888f0af561ebe76997a14781a4331edd29f0910646b10a34a739fd3bb532406532f5cfd4bd7201c99c1a9d96d97ae50bdb0c8f17f29657cf95338b5a02456946f12c65330bc5e447fe9c29632d61ca4e283d5a0f978680529cab92d1a7cd61b6e6ce95944596f39371f714e8cf603c64c4d17677c9777f31b985db5ecb26e880aa38e7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x218, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x208, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_XOR={0x1f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "35329923100b8cd8063e2a5d2258287f79d8cc3d982db5bb2ee06c509b9be05118066b6ea10cc26eee71bc51f3563f83ba1454570be706366d27f9bc66699937c92dfce9f5348bfebe08bd9b77c2e79eb5a077d47cbcbb25c264a8d8e7f69d38caa4e385ca8555fa63818e8af933357889127f3d12c3083849919052a00f3b3a4eb825188d7e63b3414589ec9c31a72152da001d23c44a0bbb6ad785d43ed718f14a41181139b41516bcd24196aa45d71263ab650b2b0ed103146b6bcc82393c55b68fc93579a2481d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "0507867cdea8e48e10306bcaed5c07df0084ff67bb116f9323965e12100efe43ffb7fcbb4deb4ea19fd9cd00091b3df972cef31688ca9be6a34b726c29e0b0303d50a02e0e4260ad136109eba5818d8434bdb429da589b8d953b610bf710ff8f6e758def1862657b4af3dbfa981647a2cfb2a2e4ed4e4d93e8cf78ae01f958bdb9253c4bf1da858c44cdb060730f598cf4bf56ae6b3df1870ba590760184b8389a2f7fe69eb9cf93eb3542f3d908df2d7ec737ec8f14b3131a793e46910a235866b067eac307e0a35bdb6fd5a045f663e9c19ed0813befc6e0df2ce9bcadf1"}]}]}}}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x37, 0x1, "e4e42aa52794003dd65ab061ecabe9c456cf6e2d4e78cdd479744afeb099b26d82e1067a05579523124abab930f9c7ebbb401d"}, @NFTA_DATA_VALUE={0x1c, 0x1, "a02e6b349ae419969f253de7509516fc5149428edf2350e4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x89ad46fbdc2b527c}, @NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x670}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000841}, 0x48040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "ea37acdcf77adf0335d1515f12f817955e182130e73f9d36ddbb0f4fddc17c6d", "67e076ddf47a804dd6211939af9bf84023546c4c226f54d162bfb4fec53393c0", "632cdcdbc5b9536975e05e049cf70170896844876ce5a2fcecf4979d02364316", "763a138b4b11a764f01c3c5b1940afd1948eb10487e07b9699fff249cff1900b", "f9bfd8c959866f0ec5ac1de8269a784aea7525f99a955a2121877756b3743ae3", "d3e3097b6efbd5ea2a3f851e", 0x7fffffff, 0x1, 0x7ff, 0x1, 0x7f}}) setsockopt$sock_attach_bpf(r5, 0x6, 0xa, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="001e000100000000000000000002000d3c0100000700000000080001000000000008000d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 1.934605747s ago: executing program 0 (id=2909): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400), 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) socket$inet(0x2, 0x3, 0xa73) 1.586417568s ago: executing program 3 (id=2910): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xf8, "db58e8e40aa5c518b1c32702cebb18fe2e8827a18690586d7a3233b6d053692885fcbb2b3c841447a06d91b3d6e3e162a58c3e9aa2b45884a4fc3b22d21926643e0196d933d41a983c1ae20439679b67ecf2bc152e2dfba3e2b137abaa4e117f64428d7801be496629cd1ed35c94abebb31dff70f4688a841b68eaa502682e62b0e0f6e0f7912dc204646ce7866556e15f72ff690f79e5edb699508773ef0aa275bb7e299eb560426aaa9743a320ba911ef53ec868aa77a8a2f0979349643aea657dea586573c91e73bf2a323f304f24d9288803ab3e33d6620618dbe50029e8860dcce4cee3ec955ae61ef36c26da437ac5f56ad884a6df"}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x1f53}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 1.57360691s ago: executing program 4 (id=2911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendto$inet6(r3, &(0x7f0000000200)="1c7e215dc4cc46a3b67cea2fb369653b3ae105b08ef26cbc9f8b427438e4069755aad0c5b03dbb963edb62d4983023d6499e52f99b82b3f8175dea3e542a0d9709bd536bb4f0888fa564c8b30ed97a1c162c96be3f", 0x55, 0x24, &(0x7f00000002c0)={0xa, 0x4e23, 0x7, @empty, 0x400}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r4, &(0x7f0000000300)=""/93, 0x5d) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa, 0x16}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x20004000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getroute={0x108, 0x1a, 0x8, 0x70bd2d, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x3, 0x0, 0x0, 0xfe, 0xb, 0x100}, [@RTA_PREF={0x5, 0x14, 0x1b}, @RTA_OIF={0x8, 0x4, r6}, @RTA_PREF={0x5, 0x14, 0xe9}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x1c, 0x1, [{0x81, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x25f76}, {0x8000}, {0x9}, {0x5e8cd}]}}, @RTA_PRIORITY={0x8, 0x6, 0xada0000}, @RTA_METRICS={0x9a, 0x8, 0x0, 0x1, "1e1331ef35e062c6312c74544ffa9d986a341c84d50c0e27047b4c6e6280caa24c93210b341cb9d0b716ee0ed19836a60d6aad58ed9aa12536cd34e31170313e13ed265910f650671a7aec235f872e78bfae85a9016664ca082a9f822443740cdef753b6a4a296e6999822da2c9abc1a2dd0b12e8aa5332f62e93d6ea36a4ba91c69f1480e882c928f987b02a0172830e5f4f36afd09"}, @RTA_EXPIRES={0x8, 0x17, 0x8000}, @RTA_EXPIRES={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8044) 1.518313142s ago: executing program 0 (id=2912): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x380003, @empty, 0x40000000}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000040)) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000008}) (async) r6 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}], 0x20) sendfile(r0, r5, 0x0, 0x9) (async) sendfile(r5, r0, &(0x7f0000000140)=0x6, 0x276f) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) 1.43109812s ago: executing program 0 (id=2913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@ax25={{}, [@bcast, @remote, @bcast, @netrom, @default, @remote, @rose, @default]}, &(0x7f0000000140)=0x80, 0x80000) ioctl$FITHAW(r1, 0xc0045878) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0xd, &(0x7f0000000440)=0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x12c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd27c7b7a83dd9280}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x240408d5}, 0x14) 1.244874715s ago: executing program 2 (id=2914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.177694986s ago: executing program 4 (id=2915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8a, 0x2}, {0x0, 0x2}, {0xb1, 0x7}, {0x1, 0x4}, {0xff, 0x6}, {0x2, 0x1}, {0x8}, {0x15, 0x4}, {0x1, 0x6}, {0x31, 0x2}, {0x0, 0x5}, {0xbc, 0x7}, {0x17, 0x3}, {0x7, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x4a, 0x7}, {0x68, 0x4}, {0x8, 0x2}], "721781b0fc22e12c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x34, 0x4}, {0xb, 0x2}, {0x9, 0x1}, {0x8, 0x4}, {0xae}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x8, 0x1}, {0x4, 0x5}, {0x9, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0xc0}, {0x9}, {0xf7, 0x4}, {0x8}, {0x1, 0x6}, {0x4, 0x1}], "cb3fa46d3caed6ac"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x54084}, 0x20044094) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b *'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r5, 0x0, r8, 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) socket(0x10, 0x803, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0xc, 0xfff, 0x8, 0x0, 0x8, 0x3]}}]}]}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8a, 0x2}, {0x0, 0x2}, {0xb1, 0x7}, {0x1, 0x4}, {0xff, 0x6}, {0x2, 0x1}, {0x8}, {0x15, 0x4}, {0x1, 0x6}, {0x31, 0x2}, {0x0, 0x5}, {0xbc, 0x7}, {0x17, 0x3}, {0x7, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x4a, 0x7}, {0x68, 0x4}, {0x8, 0x2}], "721781b0fc22e12c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x34, 0x4}, {0xb, 0x2}, {0x9, 0x1}, {0x8, 0x4}, {0xae}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x8, 0x1}, {0x4, 0x5}, {0x9, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0xc0}, {0x9}, {0xf7, 0x4}, {0x8}, {0x1, 0x6}, {0x4, 0x1}], "cb3fa46d3caed6ac"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x54084}, 0x20044094) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b *'], 0x47) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) splice(r5, 0x0, r8, 0x0, 0x1000, 0x0) (async) 1.107496705s ago: executing program 2 (id=2916): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x7f7, 0x4) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', r4, 0x4, 0x8, 0x0, 0x5, 0x0, @local, @loopback, 0x20, 0x7800, 0x1ff, 0xfffffffb}}) sendto$packet(r2, &(0x7f0000000200)="10033bb100001100007fca1a0000000000060000000000000000a46a7798ae9761d2b2e08ae85272a942ff8d5d9282a1498e0d4aa0072726e6877d895ac50f00226d4567fb0117b5159511cf7974b65d5b5d429685c9e388816cd01729c2121ef4dc46064d3545ffc16dabb42a534f5ac815e48c0fc094", 0x77, 0x0, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.012726057s ago: executing program 0 (id=2917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x1, 0x0}, &(0x7f0000000140)=0x40) (fail_nth: 4) 914.66561ms ago: executing program 4 (id=2918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 914.008515ms ago: executing program 2 (id=2919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x1, 0x0}, &(0x7f0000000140)=0x40) 461.823472ms ago: executing program 3 (id=2920): unshare(0x20040600) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 323.327299ms ago: executing program 2 (id=2921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x800) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept$alg(r0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x800) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) (async) socket$phonet(0x23, 0x2, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 267.682085ms ago: executing program 0 (id=2922): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 248.507771ms ago: executing program 3 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060010"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x57}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 120.902024ms ago: executing program 0 (id=2924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) close(r3) r4 = socket(0x10, 0x80003, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) 37.911393ms ago: executing program 2 (id=2925): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8b081d", 0x0, 0x11, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0xfc}}}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a002430180004"], 0x2c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) (async, rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040020) (rerun: 64) 19.027648ms ago: executing program 3 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r7) (async) close(r4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 4 (id=2927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c2c7e54a74d86cd84fabbf1d96d7edcbc9ea253116601cdafc8e4d252cfc031cbee3640e07553a072b9f608b7e6a44188558bd61ba3320fb3766d1815c9ddaf7d91193d044d06c859610943fb9b7798a776804c1c7af74782a1d88d143d10c1f40c6552848bb08861f1cef0a0b24e5069a002ae1b377488ca852ca8a429d19b717e3f3e1e6825281d9aa6f09b18b4c576cca899dd55b15c101aaed740d94b8212e9dea8e0e40df1e52f89d6aeb63b5c9c84a2f82a", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 230.758801][ T9098] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 231.030297][ T9109] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 231.088375][ T9110] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 231.105744][ T9106] dvmrp1: entered allmulticast mode [ 231.123167][ T9110] netlink: 244 bytes leftover after parsing attributes in process `syz.2.846'. [ 231.353139][ T9117] bond0: entered allmulticast mode [ 231.369765][ T9117] bond_slave_0: entered allmulticast mode [ 231.378495][ T9117] bond_slave_1: entered allmulticast mode [ 231.429615][ T9122] tipc: Enabled bearer , priority 0 [ 231.440134][ T9122] tipc: Enabling of bearer rejected, already enabled [ 231.485370][ T9119] tipc: Disabling bearer [ 231.757841][ T9127] tipc: Enabled bearer , priority 0 [ 231.774772][ T9127] syzkaller0: entered promiscuous mode [ 231.804736][ T9127] syzkaller0: entered allmulticast mode [ 231.859753][ T9133] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 231.879497][ T9127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 231.954059][ T9136] gretap0: entered promiscuous mode [ 231.990448][ T9142] 0ªî{X¹¦: renamed from gretap0 [ 232.018411][ T9142] 0ªî{X¹¦: left promiscuous mode [ 232.038639][ T9142] 0ªî{X¹¦: entered allmulticast mode [ 232.062552][ T9134] tipc: Resetting bearer [ 232.169559][ T9153] netlink: 'syz.3.861': attribute type 16 has an invalid length. [ 232.180176][ T9147] tipc: Resetting bearer [ 232.191886][ T9153] netlink: 'syz.3.861': attribute type 17 has an invalid length. [ 232.241549][ T9147] tipc: Disabling bearer [ 232.265249][ T9153] lo: left promiscuous mode [ 232.273112][ T9153] tunl0: left promiscuous mode [ 232.294943][ T9153] gre0: left promiscuous mode [ 232.449447][ T9153] gretap0: left promiscuous mode [ 232.477180][ T9153] erspan0: left promiscuous mode [ 232.501293][ T9153] ip_vti0: left promiscuous mode [ 232.536985][ T9153] 8021q: adding VLAN 0 to HW filter on device ` [ 232.550446][ T9166] team_slave_0: entered allmulticast mode [ 232.592889][ T9178] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 232.728616][ T9179] bond4 (unregistering): Released all slaves [ 232.864226][ T9196] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 232.908013][ T9197] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 233.111307][ T9178] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 233.167276][ T9196] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 233.332644][ T9197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.342076][ T9207] __nla_validate_parse: 12 callbacks suppressed [ 233.342098][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.875'. [ 233.399116][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 233.428631][ T9198] bond1: (slave geneve4): making interface the new active one [ 233.441476][ T9198] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 233.507803][ T9210] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 233.517740][ T9210] netlink: 1620 bytes leftover after parsing attributes in process `syz.2.876'. [ 233.990341][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 234.006579][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 234.345483][ T9240] team_slave_1: entered promiscuous mode [ 234.365343][ T9240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.384204][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.887'. [ 234.390740][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'. [ 234.410783][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 234.448990][ T9249] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 234.458856][ T9246] dummy0: entered promiscuous mode [ 234.467283][ T9246] net_ratelimit: 20 callbacks suppressed [ 234.467301][ T9246] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 234.672014][ T9260] pim6reg1: entered promiscuous mode [ 234.690075][ T9260] pim6reg1: entered allmulticast mode [ 235.087637][ T9273] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.241953][ T9290] netlink: 332 bytes leftover after parsing attributes in process `syz.3.900'. [ 235.251786][ T9287] pim6reg1: entered promiscuous mode [ 235.259293][ T9287] pim6reg1: entered allmulticast mode [ 235.271476][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 235.531372][ C0] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 235.605827][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.612839][ T9306] IPv6: sit1: Disabled Multicast RS [ 235.621143][ T9306] sit1: entered allmulticast mode [ 236.401801][ T9345] validate_nla: 1 callbacks suppressed [ 236.401822][ T9345] netlink: 'syz.2.917': attribute type 24 has an invalid length. [ 236.600091][ T9356] tipc: Enabled bearer , priority 0 [ 236.636257][ T9356] syzkaller0: entered promiscuous mode [ 236.651214][ T9356] syzkaller0: entered allmulticast mode [ 236.717520][ T9356] tipc: Resetting bearer [ 236.738476][ T9355] tipc: Resetting bearer [ 236.761465][ T6037] nci: nci_rsp_packet: unsupported rsp opcode 0xf20 [ 236.812854][ T9355] tipc: Disabling bearer [ 236.867491][ T6037] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 236.895400][ T6037] bond1: now running without any active interface! [ 237.210537][ T9392] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 237.218956][ T9392] netlink: 'syz.4.928': attribute type 11 has an invalid length. [ 237.644253][ T9397] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 237.745498][ T9406] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 237.859674][ T9397] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 237.868688][ T9411] netlink: 'syz.1.933': attribute type 3 has an invalid length. [ 237.974896][ T9417] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 238.228625][ T9435] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.281651][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.290641][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.699233][ T9457] __nla_validate_parse: 24 callbacks suppressed [ 238.699257][ T9457] netlink: 72 bytes leftover after parsing attributes in process `syz.2.948'. [ 238.850414][ T9463] netlink: 'syz.2.949': attribute type 10 has an invalid length. [ 238.865452][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 238.931925][ T9463] team0: Device hsr_slave_0 failed to register rx_handler [ 239.008122][ T9464] openvswitch: netlink: Missing key (keys=40, expected=80) [ 239.328084][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.955'. [ 239.356069][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 239.629139][ T9486] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 239.657452][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 240.314683][ T9528] netlink: 'syz.2.970': attribute type 17 has an invalid length. [ 240.323175][ T9527] netlink: 5 bytes leftover after parsing attributes in process `syz.1.969'. [ 240.341677][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 240.372004][ T6041] tipc: Subscription rejected, illegal request [ 240.391927][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 240.394642][ T9532] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.972'. [ 240.440088][ T9528] gretap0: entered promiscuous mode [ 240.475553][ T9528] gretap0: left promiscuous mode [ 240.590774][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 240.668747][ T9541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.016786][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.399765][ T9564] bond4: left promiscuous mode [ 242.405251][ T9564] bridge0: left promiscuous mode [ 242.559574][ T9577] bridge_slave_1 (unregistering): left allmulticast mode [ 242.572682][ T9577] bridge_slave_1 (unregistering): left promiscuous mode [ 242.581117][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.649299][ T6043] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.706562][ T6043] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.839237][ T6043] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.863326][ T6043] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.951679][ T9609] tun0: tun_chr_ioctl cmd 1074025675 [ 242.988419][ T9609] tun0: persist disabled [ 243.435122][ T9642] macvtap1: entered promiscuous mode [ 243.454981][ T9642] vlan0: entered promiscuous mode [ 243.493847][ T9642] macvtap1: entered allmulticast mode [ 243.509993][ T9642] vlan0: entered allmulticast mode [ 243.523614][ T9642] veth0_vlan: entered allmulticast mode [ 244.032931][ T9681] __nla_validate_parse: 7 callbacks suppressed [ 244.032951][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 244.076070][ T9675] bond2 (unregistering): Released all slaves [ 244.098148][ T9684] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 244.106637][ T9684] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1008'. [ 244.271223][ T9691] netlink: 'syz.3.1010': attribute type 1 has an invalid length. [ 244.302832][ T9691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1010'. [ 244.313087][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 244.774770][ T9730] Bluetooth: MGMT ver 1.23 [ 244.780901][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 244.781905][ T9730] netlink: 'syz.3.1018': attribute type 6 has an invalid length. [ 245.026384][ T9738] sctp: [Deprecated]: syz.4.1022 (pid 9738) Use of int in max_burst socket option deprecated. [ 245.026384][ T9738] Use struct sctp_assoc_value instead [ 245.170435][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 245.255409][ T9745] vlan2: entered promiscuous mode [ 245.260562][ T9745] bridge0: entered promiscuous mode [ 245.597117][ T9768] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.614901][ T9768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.622351][ T9768] IPv6: NLM_F_CREATE should be set when creating new route [ 245.629681][ T9768] IPv6: NLM_F_CREATE should be set when creating new route [ 245.788015][ T9773] netlink: 'syz.4.1036': attribute type 83 has an invalid length. [ 245.861899][ T9781] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 246.471397][ T9806] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 246.481659][ T9806] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.579090][ T9811] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 246.594614][ T9773] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 246.630032][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 246.750664][ T9815] vlan0: entered allmulticast mode [ 246.769891][ T9818] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.797841][ T9815] bridge0: entered allmulticast mode [ 246.842791][ T9815] bond5: (slave vlan0): making interface the new active one [ 246.894229][ T9815] bond5: (slave vlan0): Enslaving as an active interface with an up link [ 247.002643][ T9827] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 247.049799][ T9827] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1051'. [ 247.072024][ T9834] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 247.745691][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 247.778504][ T9868] netlink: 'syz.2.1062': attribute type 23 has an invalid length. [ 247.844381][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 248.037459][ T9884] vlan1: entered promiscuous mode [ 248.042782][ T9884] bond0: entered promiscuous mode [ 248.048700][ T9884] bond_slave_0: entered promiscuous mode [ 248.056220][ T9884] bond_slave_1: entered promiscuous mode [ 248.561787][ T9908] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 248.580597][ T9908] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1074'. [ 248.692873][ T9912] netlink: 'syz.4.1076': attribute type 7 has an invalid length. [ 248.803079][ T9923] bridge0: Device is already in use. [ 249.077731][ T9942] __nla_validate_parse: 3 callbacks suppressed [ 249.077752][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 249.121003][ T9941] validate_nla: 1 callbacks suppressed [ 249.121024][ T9941] netlink: 'syz.3.1083': attribute type 14 has an invalid length. [ 249.157195][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 249.179099][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 249.278810][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.288039][ T9951] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1086'. [ 249.316457][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.330836][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.352228][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.554378][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 249.772638][ T9972] macvtap1: entered allmulticast mode [ 249.803477][ T9972] veth0_macvtap: entered allmulticast mode [ 249.823716][ T9977] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1092'. [ 249.868214][ T9972] netlink: 'syz.0.1092': attribute type 2 has an invalid length. [ 249.886095][ T9985] syzkaller1: entered promiscuous mode [ 249.908232][ T9972] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1092'. [ 249.923183][ T9973] netlink: 'syz.2.1093': attribute type 3 has an invalid length. [ 249.931256][ T9985] syzkaller1: entered allmulticast mode [ 250.040704][ T9997] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 250.061200][ T9997] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 250.188683][T10004] nbd: must specify a size in bytes for the device [ 250.281520][T10006] veth0: entered promiscuous mode [ 250.287707][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 250.298787][T10005] veth0 (unregistering): left promiscuous mode [ 250.325824][T10005] veth1 (unregistering): left allmulticast mode [ 250.348890][T10005] veth1 (unregistering): left promiscuous mode [ 250.393325][T10005] bridge3: port 1(veth1) entered disabled state [ 250.422247][T10011] netlink: 'syz.1.1103': attribute type 8 has an invalid length. [ 250.558904][T10016] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1104'. [ 250.596728][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 250.647031][T10020] tipc: Enabled bearer , priority 0 [ 250.664410][T10020] syzkaller0: entered promiscuous mode [ 250.669947][T10020] syzkaller0: entered allmulticast mode [ 250.715249][T10018] tipc: Resetting bearer [ 250.798640][T10018] tipc: Disabling bearer [ 250.892650][ T55] block nbd0: Possible stuck request ffff888025505080: control (read@0,1024B). Runtime 60 seconds [ 250.903830][ T55] block nbd0: Possible stuck request ffff888025505240: control (read@1024,1024B). Runtime 60 seconds [ 250.914957][ T55] block nbd0: Possible stuck request ffff888025505400: control (read@2048,1024B). Runtime 60 seconds [ 250.926294][ T55] block nbd0: Possible stuck request ffff8880255055c0: control (read@3072,1024B). Runtime 60 seconds [ 250.942244][T10024] tipc: Enabled bearer , priority 0 [ 250.950382][T10032] syzkaller0: entered promiscuous mode [ 250.981161][T10032] syzkaller0: entered allmulticast mode [ 251.040666][T10024] tipc: Resetting bearer [ 251.073647][ C1] syzkaller0: tun_net_xmit 90 [ 251.078779][ C1] syzkaller0: tun_net_xmit 90 [ 251.092598][T10024] syzkaller0: tun_net_xmit 90 [ 251.097745][T10024] syzkaller0: tun_net_xmit 90 [ 251.121749][T10023] tipc: Resetting bearer [ 251.192010][T10023] tipc: Disabling bearer [ 251.681449][T10058] tunl0: entered promiscuous mode [ 251.711906][T10058] netlink: 'syz.4.1118': attribute type 3 has an invalid length. [ 252.428782][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.543299][T10104] dvmrp1: left allmulticast mode [ 252.598950][T10110] IPVS: length: 55 != 24 [ 252.677116][T10110] bond2: option xmit_hash_policy: invalid value (64) [ 252.692497][T10110] bond2 (unregistering): Released all slaves [ 253.958083][T10182] netlink: 'syz.0.1153': attribute type 3 has an invalid length. [ 254.140461][T10194] syzkaller1: entered promiscuous mode [ 254.163191][T10194] syzkaller1: entered allmulticast mode [ 254.317550][T10197] tipc: Enabling of bearer rejected, failed to enable media [ 254.494803][T10209] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 254.502683][T10209] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 254.531432][T10209] __nla_validate_parse: 16 callbacks suppressed [ 254.531451][T10209] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1162'. [ 254.553254][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 254.595113][T10216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1163'. [ 254.753171][T10224] tipc: Enabled bearer , priority 0 [ 254.776124][T10225] syzkaller0: entered promiscuous mode [ 254.793860][T10225] syzkaller0: entered allmulticast mode [ 254.814935][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 254.822954][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 254.847179][ T6026] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 254.860279][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 254.869457][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 254.885297][ T6042] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 254.909946][ T6042] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 254.923131][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 254.927897][T10224] tipc: Resetting bearer [ 254.952971][ T79] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 254.969022][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 254.988766][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 255.000722][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 255.005657][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'. [ 255.014250][T10222] tipc: Resetting bearer [ 255.040839][T10222] tipc: Disabling bearer [ 255.069877][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 255.153595][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 255.214894][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 255.295287][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 255.344648][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 255.361161][T10247] team_slave_0: mtu greater than device maximum [ 255.369250][T10228] netlink: 'syz.0.1169': attribute type 15 has an invalid length. [ 255.585216][T10258] IPVS: stopping master sync thread 10260 ... [ 255.592453][T10260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.935046][T10281] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 255.955051][T10281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.077920][T10289] 8021q: VLANs not supported on gre0 [ 256.103738][T10291] dvmrp0: entered allmulticast mode [ 256.350628][T10300] bridge_slave_0: left allmulticast mode [ 256.387430][T10300] bridge_slave_0: left promiscuous mode [ 256.426215][T10307] netlink: 'syz.1.1190': attribute type 11 has an invalid length. [ 256.452049][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.497544][T10300] bridge_slave_1: left allmulticast mode [ 256.530937][T10300] bridge_slave_1: left promiscuous mode [ 256.548765][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.593025][T10300] bond0: (slave bond_slave_0): Releasing backup interface [ 256.627093][T10300] team0: Port device team_slave_0 removed [ 256.650776][T10300] team_slave_1: left promiscuous mode [ 256.716308][T10300] team0: Port device team_slave_1 removed [ 256.756257][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.764562][T10300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.795855][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.814741][T10300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.222742][T10324] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 257.402806][T10335] tipc: Enabled bearer , priority 0 [ 257.411113][T10334] tipc: Enabling of bearer rejected, already enabled [ 257.424642][T10335] syzkaller0: entered allmulticast mode [ 257.705781][T10333] tipc: Disabling bearer [ 258.312100][T10374] bond4: (slave bridge0): Releasing backup interface [ 258.687178][T10400] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 258.699638][T10400] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 258.924795][T10402] bond7: (slave bridge0): Enslaving as an active interface with a down link [ 258.966923][T10408] gretap1: entered promiscuous mode [ 258.994327][T10408] gretap1: entered allmulticast mode [ 259.008415][T10408] bond7: (slave gretap1): making interface the new active one [ 259.034681][T10408] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 259.506240][T10438] validate_nla: 61 callbacks suppressed [ 259.506266][T10438] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 259.536069][T10438] __nla_validate_parse: 69 callbacks suppressed [ 259.536089][T10438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 259.551213][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 259.576187][T10438] dummy0: entered promiscuous mode [ 259.595870][T10438] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.619173][T10438] batman_adv: batadv0: Removing interface: dummy0 [ 259.633789][T10438] bridge0: port 4(dummy0) entered blocking state [ 259.643071][T10438] bridge0: port 4(dummy0) entered disabled state [ 259.653237][T10438] dummy0: entered allmulticast mode [ 259.690709][T10438] bridge0: port 4(dummy0) entered blocking state [ 259.697332][T10438] bridge0: port 4(dummy0) entered forwarding state [ 259.729596][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 259.742314][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 259.757136][T10453] sit0: entered promiscuous mode [ 259.772561][T10453] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 259.773216][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 259.797645][T10453] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1233'. [ 259.818783][T10452] bridge_slave_0: left allmulticast mode [ 259.852609][T10452] bridge_slave_0: left promiscuous mode [ 259.862709][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.907938][T10461] openvswitch: netlink: Flow actions attr not present in new flow. [ 259.908647][T10452] bond0: (slave bond_slave_0): Releasing backup interface [ 259.950446][T10452] bond0: (slave bond_slave_1): Releasing backup interface [ 259.960618][T10461] IPv6: Can't replace route, no match found [ 259.968253][T10461] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 259.985057][T10452] team0: Port device team_slave_0 removed [ 260.038594][T10452] team0: Port device team_slave_1 removed [ 260.052065][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.060206][T10452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.079228][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.088552][T10452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.141885][T10452] veth3: left allmulticast mode [ 260.160233][T10452] veth3: left promiscuous mode [ 260.175882][T10452] bridge3: port 2(veth3) entered disabled state [ 260.257555][T10452] bond1: (slave geneve4): Releasing active interface [ 260.647323][T10489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 260.682685][T10489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 260.770541][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 260.824139][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 261.119996][T10503] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 261.137412][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.497735][T10515] lo speed is unknown, defaulting to 1000 [ 261.498182][T10513] syz_tun: entered allmulticast mode [ 261.654817][T10512] syz_tun: left allmulticast mode [ 262.025906][T10521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 262.061923][T10521] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.087175][T10521] gretap2: entered promiscuous mode [ 262.098807][T10521] gretap2: entered allmulticast mode [ 263.026136][T10544] openvswitch: netlink: Flow key attr not present in new flow. [ 263.065855][T10544] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 263.084803][T10544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.510193][T10555] bridge0: port 1(veth0_to_bridge) entered blocking state [ 263.540659][T10543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.572122][T10555] bridge0: port 1(veth0_to_bridge) entered disabled state [ 263.593438][T10543] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 263.604084][T10555] veth0_to_bridge: entered allmulticast mode [ 263.705625][T10555] veth0_to_bridge: entered promiscuous mode [ 263.726848][T10543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.774132][T10543] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 263.895107][T10543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.901083][T10543] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 264.026939][T10543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.061492][T10543] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 265.669215][T10627] __nla_validate_parse: 5 callbacks suppressed [ 265.669234][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 265.934378][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.524644][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 266.915766][T10670] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 266.974872][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 266.985548][T10670] bond6 (unregistering): Released all slaves [ 267.092465][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 267.158282][T10672] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 267.218632][T10672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.532925][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 267.581828][T10714] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 267.620328][T10714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.810948][T10727] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 267.857192][T10727] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1296'. [ 267.897797][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 268.421772][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 268.999523][T10783] sctp: [Deprecated]: syz.2.1308 (pid 10783) Use of int in max_burst socket option. [ 268.999523][T10783] Use struct sctp_assoc_value instead [ 269.025693][T10774] bond0: (slave rose0): Error: Device can not be enslaved while up [ 269.147744][T10780] IPVS: Scheduler module ip_vs_sip not found [ 269.747146][T10818] netlink: 'syz.0.1316': attribute type 7 has an invalid length. [ 269.771955][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 269.788498][T10813] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.945070][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 270.371297][T10845] netlink: 'syz.3.1323': attribute type 58 has an invalid length. [ 270.724899][T10857] __nla_validate_parse: 1 callbacks suppressed [ 270.724919][T10857] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1328'. [ 270.831556][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 270.842038][T10854] syzkaller1: entered promiscuous mode [ 270.858403][T10854] syzkaller1: entered allmulticast mode [ 271.557693][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 271.753088][T10896] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.070917][T10904] netlink: 'syz.4.1339': attribute type 39 has an invalid length. [ 272.804352][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 272.822463][T10933] netlink: 'syz.2.1347': attribute type 62 has an invalid length. [ 272.860901][T10935] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 272.867271][T10933] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 272.914571][T10933] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1347'. [ 272.961999][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 273.017872][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 273.046087][T10942] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 273.077540][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 273.307369][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 273.867180][T10986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1359'. [ 274.188660][T11005] netlink: 'syz.4.1362': attribute type 15 has an invalid length. [ 274.621971][T11025] vlan2: entered allmulticast mode [ 274.636621][T11025] hsr0: entered allmulticast mode [ 274.652349][T11025] hsr_slave_0: entered allmulticast mode [ 274.679923][T11025] hsr_slave_1: entered allmulticast mode [ 274.811350][T11033] vlan2: entered allmulticast mode [ 274.914124][T11038] sit0: entered promiscuous mode [ 274.938640][T11038] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 275.680448][T11079] netlink: 'syz.1.1379': attribute type 39 has an invalid length. [ 275.691669][T11078] macvlan0: entered promiscuous mode [ 275.732959][T11078] batadv_slave_0: entered promiscuous mode [ 275.771679][T11078] debugfs: 'hsr1' already exists in 'hsr' [ 275.785537][T11087] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.797274][T11078] Cannot create hsr debugfs directory [ 276.018360][T11089] sctp: [Deprecated]: syz.2.1382 (pid 11089) Use of int in maxseg socket option. [ 276.018360][T11089] Use struct sctp_assoc_value instead [ 276.168733][T11109] __nla_validate_parse: 9 callbacks suppressed [ 276.168753][T11109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1388'. [ 276.470894][T11124] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 276.651259][T11132] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 276.695306][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 276.780891][T11142] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 277.080669][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 277.135898][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 277.480077][T11178] xt_socket: unknown flags 0x50 [ 277.630729][T11178] nft_compat: unsupported protocol 0 [ 277.767288][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 277.855051][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 277.921262][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 278.379287][T11220] tipc: Enabling of bearer rejected, failed to enable media [ 279.147794][T11250] syzkaller0: entered promiscuous mode [ 279.183919][T11250] syzkaller0: entered allmulticast mode [ 279.203842][T11252] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 279.236340][T11252] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.256749][T11260] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 279.257359][T11259] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 279.381367][T11260] team0: Device veth1_macvtap failed to register rx_handler [ 279.401533][T11259] team0: Device veth1_macvtap failed to register rx_handler [ 279.542113][T11272] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 279.559992][T11272] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 279.584738][T11272] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 279.604260][T11272] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 279.627355][T11272] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 280.140949][T11295] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 280.984283][ T55] block nbd0: Possible stuck request ffff888025505080: control (read@0,1024B). Runtime 90 seconds [ 281.003773][ T55] block nbd0: Possible stuck request ffff888025505240: control (read@1024,1024B). Runtime 90 seconds [ 281.015329][ T55] block nbd0: Possible stuck request ffff888025505400: control (read@2048,1024B). Runtime 90 seconds [ 281.026855][ T55] block nbd0: Possible stuck request ffff8880255055c0: control (read@3072,1024B). Runtime 90 seconds [ 281.097187][T11348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.297409][T11348] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1450'. [ 281.328100][T11359] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 281.353032][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1456'. [ 281.622400][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 281.665440][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 281.699734][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1459'. [ 281.764121][T11377] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 281.851896][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 281.883115][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 281.906185][T11377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.920621][T11380] geneve2: entered promiscuous mode [ 281.930842][T11380] geneve2: entered allmulticast mode [ 282.061886][T11382] bond1: (slave veth9): Enslaving as an active interface with a down link [ 282.108322][T11392] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 282.190857][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 282.195447][T11400] vlan1: entered allmulticast mode [ 282.205272][T11400] hsr0: entered allmulticast mode [ 282.214254][T11400] hsr_slave_0: entered allmulticast mode [ 282.228027][T11400] hsr_slave_1: entered allmulticast mode [ 282.280297][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1468'. [ 282.358481][T11410] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 282.391327][T11410] netlink: 'syz.0.1469': attribute type 2 has an invalid length. [ 282.399622][T11410] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 282.408130][T11410] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1469'. [ 282.516402][T11413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.541903][T11413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.743003][T11413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.754111][T11413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.772971][T11428] tipc: Enabled bearer , priority 0 [ 282.881319][T11413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.916288][T11413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.929352][T11444] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 282.948973][T11436] tipc: Disabling bearer [ 283.028197][T11413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.059486][T11413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.152779][T11448] tipc: Enabled bearer , priority 0 [ 283.187298][T11448] syzkaller0: entered promiscuous mode [ 283.206817][T11448] syzkaller0: entered allmulticast mode [ 283.236811][T11448] tipc: Resetting bearer [ 283.277803][T11447] tipc: Resetting bearer [ 283.294630][T11447] tipc: Disabling bearer [ 283.388311][ T6026] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.436048][ T6026] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.512286][ T6026] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.543753][ T6026] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.581569][ T6026] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.591000][ T6026] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.618591][ T6026] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.627333][ T6026] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.928413][T11494] ªªªªªª: renamed from vlan0 (while UP) [ 284.672138][ T6041] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 284.689850][ T6041] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 284.711128][ T6041] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 284.735163][ T6041] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 284.800430][T11530] netlink: 'syz.2.1503': attribute type 12 has an invalid length. [ 284.854611][T11532] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 284.910618][T11530] bond6: option primary_reselect: invalid value (255) [ 285.004233][T11539] sctp: [Deprecated]: syz.3.1505 (pid 11539) Use of int in maxseg socket option. [ 285.004233][T11539] Use struct sctp_assoc_value instead [ 285.038001][T11530] bond6 (unregistering): Released all slaves [ 285.116126][T11540] vlan2: entered allmulticast mode [ 285.129044][T11540] bond0: entered allmulticast mode [ 285.142478][T11540] bond_slave_0: entered allmulticast mode [ 285.184443][T11540] bond_slave_1: entered allmulticast mode [ 285.190326][T11540] geneve1: entered allmulticast mode [ 285.576066][T11553] netlink: 'syz.0.1511': attribute type 21 has an invalid length. [ 285.596773][T11553] netlink: 'syz.0.1511': attribute type 22 has an invalid length. [ 285.624390][T11553] netlink: 'syz.0.1511': attribute type 23 has an invalid length. [ 285.632275][T11553] netlink: 'syz.0.1511': attribute type 25 has an invalid length. [ 285.683659][T11553] netlink: 'syz.0.1511': attribute type 26 has an invalid length. [ 286.100965][T11582] netlink: 'syz.0.1518': attribute type 2 has an invalid length. [ 286.476567][T11606] __nla_validate_parse: 14 callbacks suppressed [ 286.476587][T11606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1526'. [ 286.734817][T11616] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1530'. [ 286.803755][T11618] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 286.823032][T11618] nbd: error processing sock list [ 286.863638][T11618] block nbd1: shutting down sockets [ 286.960664][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 287.040970][T11626] tipc: Enabled bearer , priority 0 [ 287.075224][T11626] syzkaller0: entered promiscuous mode [ 287.080766][T11626] syzkaller0: entered allmulticast mode [ 287.096116][T11623] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1533'. [ 287.254793][T11626] tipc: Resetting bearer [ 287.283929][T11624] tipc: Resetting bearer [ 287.312827][T11639] netlink: 'syz.1.1539': attribute type 21 has an invalid length. [ 287.354367][T11624] tipc: Disabling bearer [ 287.425297][T11639] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 287.458545][T11639] bond1 (unregistering): Released all slaves [ 287.540736][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.624752][T11654] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1541'. [ 287.908452][T11665] tipc: Enabled bearer , priority 0 [ 287.916353][T11664] tipc: Enabling of bearer rejected, already enabled [ 287.959357][T11661] tipc: Disabling bearer [ 288.010125][T11671] netlink: 'syz.2.1546': attribute type 1 has an invalid length. [ 288.046445][T11671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.149410][T11671] bond6: (slave veth9): Enslaving as an active interface with a down link [ 288.211636][T11673] bond1: (slave veth0_to_bond): Releasing active interface [ 288.276005][T11673] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 288.381716][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 288.398048][T11683] tc_dump_action: action bad kind [ 288.508999][T11688] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1552'. [ 288.817795][T11697] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1556'. [ 288.981327][T11712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1562'. [ 289.018145][T11712] unsupported nlmsg_type 40 [ 289.571288][T11747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.950717][T11762] tipc: Enabling of bearer rejected, failed to enable media [ 289.966464][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 289.994619][T11762] : renamed from hsr0 (while UP) [ 290.465431][T11790] vlan2: entered allmulticast mode [ 290.486792][T11790] bridge_slave_0: entered allmulticast mode [ 290.557224][T11799] validate_nla: 2 callbacks suppressed [ 290.557245][T11799] netlink: 'syz.2.1585': attribute type 16 has an invalid length. [ 290.602563][T11799] netlink: 'syz.2.1585': attribute type 3 has an invalid length. [ 290.694152][T11805] netlink: 'syz.3.1587': attribute type 7 has an invalid length. [ 290.716674][T11805] netlink: 'syz.3.1587': attribute type 8 has an invalid length. [ 290.761231][T11809] syzkaller1: entered promiscuous mode [ 290.783527][T11809] syzkaller1: entered allmulticast mode [ 291.458272][T11846] veth0: entered promiscuous mode [ 291.497184][T11846] veth0: left promiscuous mode [ 291.615419][T11856] __nla_validate_parse: 7 callbacks suppressed [ 291.615440][T11856] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1603'. [ 291.695549][T11856] xt_policy: neither incoming nor outgoing policy selected [ 291.899941][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 292.054239][T11872] lo speed is unknown, defaulting to 1000 [ 292.063188][T11877] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.1606'. [ 292.092295][T11877] openvswitch: netlink: Message has 5 unknown bytes. [ 293.575480][T11940] ksmbd: Unknown IPC event: 3, ignore. [ 293.666619][T11942] netlink: 'syz.0.1625': attribute type 11 has an invalid length. [ 293.687554][T11942] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 294.244464][T11958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1629'. [ 294.436373][T11976] C: renamed from lo (while UP) [ 294.465234][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1634'. [ 295.381436][T12016] openvswitch: netlink: Message has -1 unknown bytes. [ 295.729600][T12027] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1645'. [ 295.882363][T12033] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1647'. [ 295.939898][T12034] tipc: Enabled bearer , priority 0 [ 295.955950][T12034] syzkaller0: entered promiscuous mode [ 295.972301][T12034] syzkaller0: entered allmulticast mode [ 296.041191][T12034] tipc: Resetting bearer [ 296.063051][T12030] tipc: Resetting bearer [ 296.097964][T12030] tipc: Disabling bearer [ 296.551067][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 296.579583][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 297.250419][T12094] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 297.445161][T12100] team0: Device vti0 is up. Set it down before adding it as a team port [ 298.016405][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 298.389459][T12118] bridge0: port 1(veth0_to_bridge) entered blocking state [ 298.396831][T12118] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 298.460885][T12118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.834512][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 298.867505][T12157] xfrm1: entered promiscuous mode [ 298.872618][T12157] xfrm1: entered allmulticast mode [ 298.897719][T12157] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1688'. [ 298.919413][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 299.020380][T12157] macvtap2: entered promiscuous mode [ 299.060643][T12157] vlan0: entered promiscuous mode [ 299.087430][T12157] macvtap2: entered allmulticast mode [ 299.108271][T12157] vlan0: entered allmulticast mode [ 299.127203][T12157] veth0_vlan: entered allmulticast mode [ 299.157247][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 299.180335][T12171] macvtap3: entered promiscuous mode [ 299.199238][T12171] macvtap3: entered allmulticast mode [ 299.228941][T12178] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1692'. [ 299.247233][T12177] macvtap4: entered promiscuous mode [ 299.265793][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 299.267583][T12177] macvtap4: entered allmulticast mode [ 299.309492][T12171] macvtap5: entered promiscuous mode [ 299.315101][T12171] macvtap5: entered allmulticast mode [ 299.591233][T12199] netlink: 'syz.0.1699': attribute type 11 has an invalid length. [ 300.170871][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1706'. [ 300.185728][T12224] lo speed is unknown, defaulting to 1000 [ 300.295696][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1711'. [ 300.338888][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 300.410139][T12238] IPv6: sit1: Disabled Multicast RS [ 300.416777][T12238] sit1: entered allmulticast mode [ 300.499821][T12242] dvmrp0: entered allmulticast mode [ 300.611622][T12248] tipc: Enabled bearer , priority 0 [ 300.639835][T12248] syzkaller0: entered promiscuous mode [ 300.653526][T12248] syzkaller0: entered allmulticast mode [ 300.697713][T12248] tipc: Resetting bearer [ 300.954443][T12254] vlan0: entered allmulticast mode [ 300.973744][T12254] bond0: entered allmulticast mode [ 301.294168][T12270] syzkaller1: entered promiscuous mode [ 301.311962][T12270] syzkaller1: entered allmulticast mode [ 301.386634][T12246] tipc: Resetting bearer [ 301.416593][T12246] tipc: Disabling bearer [ 301.438578][T12281] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:24 [ 301.558702][T12284] macvlan0: entered promiscuous mode [ 301.568849][T12284] team0: entered promiscuous mode [ 301.615532][T12284] batadv_slave_1: entered promiscuous mode [ 301.626360][T12284] debugfs: 'hsr1' already exists in 'hsr' [ 301.632263][T12284] Cannot create hsr debugfs directory [ 301.927317][T12291] vxcan1: tx address claim with dlc 0 [ 301.933139][T12291] vxcan1: tx address claim with dlc 0 [ 301.943001][T12291] vxcan1: tx address claim with dlc 0 [ 301.952606][T12291] vxcan1: tx address claim with dlc 0 [ 301.958741][T12291] vxcan1: tx address claim with dlc 0 [ 301.964663][T12291] vxcan1: tx address claim with dlc 0 [ 301.970238][T12291] vxcan1: tx address claim with dlc 0 [ 301.976902][T12291] vxcan1: tx address claim with dlc 0 [ 301.982644][T12291] vxcan1: tx address claim with dlc 0 [ 301.988742][T12291] vxcan1: tx address claim with dlc 0 [ 301.995250][T12291] vxcan1: tx address claim with dlc 0 [ 302.000951][T12291] vxcan1: tx address claim with dlc 0 [ 302.019100][T12291] vxcan1: tx address claim with dlc 0 [ 302.038038][T12291] vxcan1: tx address claim with dlc 0 [ 302.059495][T12291] vxcan1: tx address claim with dlc 0 [ 302.069288][T12291] vxcan1: tx address claim with dlc 0 [ 302.079201][T12291] vxcan1: tx address claim with dlc 0 [ 302.091089][T12291] vxcan1: tx address claim with dlc 0 [ 302.099159][T12291] vxcan1: tx address claim with dlc 0 [ 302.120358][T12291] vxcan1: tx address claim with dlc 0 [ 302.131745][T12291] vxcan1: tx address claim with dlc 0 [ 302.141879][T12291] vxcan1: tx address claim with dlc 0 [ 302.152073][T12291] vxcan1: tx address claim with dlc 0 [ 302.159792][T12291] vxcan1: tx address claim with dlc 0 [ 302.169704][T12291] vxcan1: tx address claim with dlc 0 [ 302.177127][T12291] vxcan1: tx address claim with dlc 0 [ 302.206111][T12291] vxcan1: tx address claim with dlc 0 [ 302.219295][T12291] vxcan1: tx address claim with dlc 0 [ 302.230114][T12291] vxcan1: tx address claim with dlc 0 [ 302.236350][T12291] vxcan1: tx address claim with dlc 0 [ 302.242071][T12291] vxcan1: tx address claim with dlc 0 [ 302.249197][T12291] vxcan1: tx address claim with dlc 0 [ 302.261834][T12291] vxcan1: tx address claim with dlc 0 [ 302.277634][T12298] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 302.286609][T12298] bridge0: port 5(team0) entered blocking state [ 302.293082][T12298] bridge0: port 5(team0) entered disabled state [ 302.304356][T12298] team0: entered allmulticast mode [ 302.310531][T12298] team_slave_0: entered allmulticast mode [ 302.319940][T12298] team_slave_1: entered allmulticast mode [ 302.357621][T12298] team0: left allmulticast mode [ 302.362659][T12298] team_slave_0: left allmulticast mode [ 302.386415][T12298] team_slave_1: left allmulticast mode [ 302.580356][T12306] block nbd4: not configured, cannot reconfigure [ 302.982450][T12326] nbd: must specify a size in bytes for the device [ 303.870885][T12358] bridge3: entered promiscuous mode [ 303.893791][T12358] bridge3: entered allmulticast mode [ 304.301598][T12377] syzkaller0: entered promiscuous mode [ 304.323884][T12377] syzkaller0: entered allmulticast mode [ 304.675174][T12397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.799339][T12406] syzkaller0: refused to change device tx_queue_len [ 305.047095][T12418] __nla_validate_parse: 8 callbacks suppressed [ 305.047116][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 305.217299][T12431] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1765'. [ 305.381452][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 305.465449][T12439] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.630988][T12446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1770'. [ 305.666828][T12450] netlink: 'syz.4.1772': attribute type 1 has an invalid length. [ 305.677964][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'. [ 305.718379][T12450] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1772'. [ 305.751067][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 305.802885][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'. [ 306.102629][T12471] netlink: 'syz.2.1782': attribute type 10 has an invalid length. [ 306.142129][T12471] geneve1: entered promiscuous mode [ 306.157066][T12471] geneve1: entered allmulticast mode [ 306.165461][T12471] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 306.501883][ T6041] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.544263][ T6041] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.559345][ T6041] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.569896][ T6041] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.620739][T12501] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 306.630657][T12501] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 306.675048][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 307.666640][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 307.748845][T12530] netlink: 'syz.4.1798': attribute type 2 has an invalid length. [ 307.848143][T12533] netlink: 'syz.3.1796': attribute type 4 has an invalid length. [ 308.233715][T12554] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 308.247815][T12557] sock: sock_set_timeout: `syz.1.1805' (pid 12557) tries to set negative timeout [ 308.259688][T12556] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 308.666434][T12580] vlan1: entered allmulticast mode [ 309.301376][T12605] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 309.312253][T12612] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.359569][T12605] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 309.566672][T12622] NCSI netlink: No device for ifindex 0 [ 309.787675][T12628] netlink: 'syz.1.1824': attribute type 15 has an invalid length. [ 309.824873][T12629] netlink: 'syz.1.1824': attribute type 15 has an invalid length. [ 310.062419][T12637] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 310.090036][T12637] bond2 (unregistering): Released all slaves [ 310.317463][T12656] __nla_validate_parse: 13 callbacks suppressed [ 310.317483][T12656] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1833'. [ 310.377762][T12656] unknown channel width for channel at 909000KHz? [ 310.402704][T12660] netlink: 'syz.1.1834': attribute type 8 has an invalid length. [ 310.435613][T12663] ip6gre0: Master is either lo or non-ether device [ 310.440892][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 310.504849][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 310.537265][T12660] batadv_slave_1 (unregistering): left promiscuous mode [ 311.046758][ T55] block nbd0: Possible stuck request ffff888025505080: control (read@0,1024B). Runtime 120 seconds [ 311.058096][ T55] block nbd0: Possible stuck request ffff888025505240: control (read@1024,1024B). Runtime 120 seconds [ 311.070648][ T55] block nbd0: Possible stuck request ffff888025505400: control (read@2048,1024B). Runtime 120 seconds [ 311.082273][ T55] block nbd0: Possible stuck request ffff8880255055c0: control (read@3072,1024B). Runtime 120 seconds [ 311.110108][T12695] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 311.144770][T12708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1847'. [ 311.174619][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 311.176278][T12695] netlink: 'syz.1.1845': attribute type 2 has an invalid length. [ 311.230482][T12715] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1849'. [ 311.270031][T12714] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 311.502323][T12736] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 312.477233][T12798] openvswitch: netlink: Message has 4 unknown bytes. [ 312.510518][T12799] openvswitch: netlink: Message has 4 unknown bytes. [ 312.527218][T12798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.567830][T12799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.866063][T12820] netlink: 125 bytes leftover after parsing attributes in process `syz.0.1876'. [ 312.903198][T12822] validate_nla: 1 callbacks suppressed [ 312.903221][T12822] netlink: 'syz.2.1877': attribute type 21 has an invalid length. [ 312.976095][T12822] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1877'. [ 313.057378][T12822] netlink: 'syz.2.1877': attribute type 5 has an invalid length. [ 313.082796][T12822] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1877'. [ 313.221702][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 313.285503][ T5878] Bluetooth: hci4: command tx timeout [ 313.405363][T12848] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 313.506276][T12848] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 313.723032][T12867] dvmrp0: left allmulticast mode [ 313.770197][T12866] bond0: Error: Cannot enslave bond to itself. [ 313.788606][T12866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.981044][T12882] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.678668][T12889] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 315.631056][T12890] bond8: (slave bridge6): making interface the new active one [ 315.639270][T12890] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 315.804404][T12897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 316.385277][T12919] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 316.452331][T12919] bond2 (unregistering): Released all slaves [ 316.784813][T12952] __nla_validate_parse: 2 callbacks suppressed [ 316.784834][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1914'. [ 317.117072][T12981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1917'. [ 317.180395][T12970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1917'. [ 317.336546][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1924'. [ 317.515052][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 317.641036][T13012] openvswitch: netlink: Unknown key attributes 2 [ 317.710981][T13013] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 317.924930][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 317.936097][T13029] netlink: 'syz.3.1936': attribute type 4 has an invalid length. [ 318.007573][T13033] netlink: 'syz.3.1936': attribute type 4 has an invalid length. [ 318.175061][T13038] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 318.195067][T13038] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 318.197466][T13040] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1939'. [ 318.267694][T13040] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.469734][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 318.727565][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 318.789012][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 319.122909][T13088] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 319.349127][T13098] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 319.372332][T13088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.376507][ T6036] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 319.452688][T13088] veth5: entered promiscuous mode [ 319.468913][T13088] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 319.535240][ T6036] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 319.952736][T13128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.956122][ T1103] smc: removing ib device syz1 [ 319.976880][T13128] bond_slave_0: left promiscuous mode [ 319.988729][T13128] bond_slave_0: left allmulticast mode [ 320.008730][T13128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.021064][T13128] bond_slave_1: left promiscuous mode [ 320.031287][T13128] bond_slave_1: left allmulticast mode [ 320.042147][T13128] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 320.055663][T13128] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 320.066219][T13128] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 320.077358][T13128] geneve1: left promiscuous mode [ 320.082645][T13128] geneve1: left allmulticast mode [ 320.090522][T13128] bond0 (unregistering): Released all slaves [ 320.461586][T13154] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 320.480458][T13154] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 320.504936][T13154] netlink: 'syz.4.1972': attribute type 2 has an invalid length. [ 320.577019][T13160] tipc: Enabling of bearer rejected, failed to enable media [ 321.748012][T13215] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 321.797780][T13215] __nla_validate_parse: 10 callbacks suppressed [ 321.797802][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 321.848552][T13215] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1988'. [ 321.871018][T13215] netlink: 'syz.0.1988': attribute type 5 has an invalid length. [ 321.949936][T13219] syzkaller1: entered promiscuous mode [ 321.981793][T13219] syzkaller1: entered allmulticast mode [ 322.042948][T13221] tipc: Enabled bearer , priority 0 [ 322.065590][T13221] syzkaller0: entered promiscuous mode [ 322.081426][T13221] syzkaller0: entered allmulticast mode [ 322.272105][T13223] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.272136][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 322.322265][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 322.372362][T13231] unknown channel width for channel at 909000KHz? [ 322.385709][T13231] unknown channel width for channel at 909000KHz? [ 322.392192][T13231] unknown channel width for channel at 909000KHz? [ 322.423622][T13221] tipc: Resetting bearer [ 322.438267][T13232] unknown channel width for channel at 909000KHz? [ 322.448921][T13232] unknown channel width for channel at 909000KHz? [ 322.458220][T13232] unknown channel width for channel at 909000KHz? [ 322.481097][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 322.516869][T13220] tipc: Resetting bearer [ 322.543588][T13220] tipc: Disabling bearer [ 322.594852][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.605872][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 323.095170][T13258] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 323.264146][T13255] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 323.371257][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'. [ 323.710088][T13295] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2010'. [ 323.735260][T13296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.751837][T13296] validate_nla: 1 callbacks suppressed [ 323.751861][T13296] netlink: 'syz.2.2011': attribute type 21 has an invalid length. [ 324.196277][T13324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2019'. [ 324.221764][T13324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2019'. [ 324.409498][T13329] bond1: entered promiscuous mode [ 324.414764][T13329] bond1: entered allmulticast mode [ 324.420499][T13329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.468729][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2022'. [ 324.575286][T13338] wg1 speed is unknown, defaulting to 1000 [ 324.581448][T13338] wg1 speed is unknown, defaulting to 1000 [ 324.660268][T13338] wg1 speed is unknown, defaulting to 1000 [ 324.699566][T13338] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 324.842011][T13338] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.974869][T13338] wg1 speed is unknown, defaulting to 1000 [ 324.986204][T13338] wg1 speed is unknown, defaulting to 1000 [ 325.012020][T13338] wg1 speed is unknown, defaulting to 1000 [ 325.049865][T13338] wg1 speed is unknown, defaulting to 1000 [ 325.092165][T13338] wg1 speed is unknown, defaulting to 1000 [ 325.181515][T13377] netlink: 'syz.3.2034': attribute type 5 has an invalid length. [ 325.217068][T13380] tipc: Enabled bearer , priority 0 [ 325.245849][T13372] syzkaller0: entered promiscuous mode [ 325.251864][T13372] syzkaller0: entered allmulticast mode [ 325.293999][T13384] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 325.320682][T13372] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 325.441145][T13372] tipc: Resetting bearer [ 325.496592][T13371] tipc: Resetting bearer [ 325.574628][T13371] tipc: Disabling bearer [ 325.637388][T13408] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 325.812342][T13416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.829559][T13416] bond2: (slave bond3): making interface the new active one [ 325.858600][T13416] bond2: (slave bond3): Enslaving as an active interface with an up link [ 326.903319][T13491] __nla_validate_parse: 8 callbacks suppressed [ 326.926002][T13491] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2062'. [ 326.963044][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 326.971230][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 326.988013][T13494] sctp: [Deprecated]: syz.3.2063 (pid 13494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.988013][T13494] Use struct sctp_sack_info instead [ 327.000779][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 327.174106][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2068'. [ 327.236783][T13508] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 327.391913][T13520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'. [ 327.867845][T13537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.164727][T13545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.202861][T13548] tipc: Enabled bearer , priority 0 [ 328.242055][T13554] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 328.276286][T13548] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 328.309657][T13548] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 328.332130][T13548] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 328.420769][T13564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.457239][T13548] tipc: Resetting bearer [ 328.598128][T13554] veth9: entered promiscuous mode [ 328.612190][T13554] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 329.194759][ T5970] tipc: Node number set to 2886997162 [ 329.365165][T13621] tipc: Enabling of bearer rejected, already enabled [ 329.392838][T13621] sit0: left promiscuous mode [ 329.466063][T13621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.554175][T13632] openvswitch: netlink: Missing key (keys=40, expected=100) [ 329.611836][T13632] openvswitch: netlink: Missing key (keys=40, expected=100) [ 329.716638][T13639] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 329.728213][T13639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 329.745933][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2103'. [ 329.989784][T13659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2110'. [ 330.014979][T13660] tipc: Enabled bearer , priority 0 [ 330.040375][T13660] tipc: Resetting bearer [ 330.078754][T13656] tipc: Disabling bearer [ 330.108464][T13663] syzkaller1: entered promiscuous mode [ 330.127341][T13663] syzkaller1: entered allmulticast mode [ 330.236920][T13669] lo speed is unknown, defaulting to 1000 [ 330.358566][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2112'. [ 330.552387][T13669] wg1 speed is unknown, defaulting to 1000 [ 331.019774][T13703] netlink: 'syz.0.2118': attribute type 27 has an invalid length. [ 331.226651][T13713] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 333.140633][T13792] __nla_validate_parse: 6 callbacks suppressed [ 333.140655][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 333.792782][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2149'. [ 333.935248][T13820] bond2: (slave ip6gretap1): Removing an active aggregator [ 333.975353][T13820] bond2: (slave ip6gretap1): Releasing backup interface [ 333.989394][T13820] bond2: (slave ip6gretap1): the permanent HWaddr of slave - a6:23:cd:cd:d0:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 334.077609][T13820] bond2: (slave veth5): Releasing backup interface [ 334.118981][T13820] bond3: (slave veth9): Releasing backup interface [ 334.175629][ T9586] wg1 speed is unknown, defaulting to 1000 [ 334.319056][T13824] kthread_run failed with err -4 [ 334.334314][T13836] : renamed from bridge_slave_0 (while UP) [ 334.358701][T13841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.519626][T13847] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2155'. [ 334.570659][T13853] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2155'. [ 334.586943][T13853] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 334.606773][T13853] tipc: Disabling bearer [ 334.627478][T13853] 0ªî{X¹¦: entered allmulticast mode [ 334.644556][T13853] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 334.706879][T13847] 0ªî{X¹¦: entered promiscuous mode [ 334.728890][T13847] 0ªî{X¹¦: left allmulticast mode [ 334.764974][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'. [ 334.841314][T13862] syzkaller0: entered promiscuous mode [ 334.882146][T13862] syzkaller0: entered allmulticast mode [ 334.956992][T13870] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 335.111438][T13876] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.2164'. [ 335.140371][T13876] openvswitch: netlink: Message has 5 unknown bytes. [ 335.167114][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 335.241993][T13882] sctp: [Deprecated]: syz.1.2164 (pid 13882) Use of int in maxseg socket option. [ 335.241993][T13882] Use struct sctp_assoc_value instead [ 335.517988][T13887] tipc: Enabled bearer , priority 0 [ 335.556413][T13890] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2169'. [ 335.577303][T13887] syzkaller0: entered promiscuous mode [ 335.582981][T13887] syzkaller0: entered allmulticast mode [ 335.592688][T13887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 335.698536][T13887] tipc: Resetting bearer [ 335.778996][T13886] tipc: Resetting bearer [ 335.977230][T13886] tipc: Disabling bearer [ 336.021902][T13918] openvswitch: netlink: IP tunnel dst address not specified [ 336.196705][T13929] netlink: 'syz.1.2179': attribute type 10 has an invalid length. [ 336.304282][T13929] team0: Device hsr_slave_0 failed to register rx_handler [ 336.467379][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 336.859559][T13963] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 336.924303][T13965] bond0: entered promiscuous mode [ 336.930050][T13967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2186'. [ 337.193273][T13974] netlink: 'syz.1.2189': attribute type 13 has an invalid length. [ 337.199850][T13971] batadv1: entered allmulticast mode [ 337.219189][T13975] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.229694][T13974] veth0_macvtap: left promiscuous mode [ 337.255441][T13974] macvtap0: entered allmulticast mode [ 337.279604][T13974] macvtap0: refused to change device tx_queue_len [ 337.562716][T13985] IPVS: Error connecting to the multicast addr [ 337.852973][T13998] tipc: Enabled bearer , priority 0 [ 337.867453][T13998] syzkaller0: entered promiscuous mode [ 337.872988][T13998] syzkaller0: entered allmulticast mode [ 337.894277][T13999] tipc: Resetting bearer [ 337.932299][T13996] tipc: Resetting bearer [ 338.045028][T13996] tipc: Disabling bearer [ 338.346672][T14024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 338.361023][T14023] IPVS: stopping master sync thread 14024 ... [ 338.379930][T14026] __nla_validate_parse: 5 callbacks suppressed [ 338.379950][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2203'. [ 338.442314][T14030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2204'. [ 338.445354][T14026] netlink: 'syz.0.2203': attribute type 3 has an invalid length. [ 338.481494][T14026] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2203'. [ 338.544830][T14033] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 338.699051][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 338.738893][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 338.839298][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 339.288467][T14071] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 339.370077][T14069] bond2: option all_slaves_active: invalid value (222) [ 339.390204][T14077] netlink: 'syz.3.2218': attribute type 1 has an invalid length. [ 339.405147][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 339.418767][T14069] bond2 (unregistering): Released all slaves [ 339.421887][T14080] netlink: 'syz.2.2219': attribute type 1 has an invalid length. [ 339.503970][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2218'. [ 339.515097][T14071] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.592560][T14075] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.617187][T14075] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 339.639647][T14075] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 339.759061][T14085] vlan2: entered allmulticast mode [ 339.764455][T14085] bond10: entered allmulticast mode [ 339.803089][T14094] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 339.841586][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 340.052357][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'. [ 340.062147][T14094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.901561][T14164] lo: entered allmulticast mode [ 340.924330][T14164] lo: left allmulticast mode [ 341.126904][ T55] block nbd0: Possible stuck request ffff888025505080: control (read@0,1024B). Runtime 150 seconds [ 341.137926][ T55] block nbd0: Possible stuck request ffff888025505240: control (read@1024,1024B). Runtime 150 seconds [ 341.152490][ T55] block nbd0: Possible stuck request ffff888025505400: control (read@2048,1024B). Runtime 150 seconds [ 341.164129][ T55] block nbd0: Possible stuck request ffff8880255055c0: control (read@3072,1024B). Runtime 150 seconds [ 341.190557][T14179] x_tables: ip_tables: udp match: only valid for protocol 17 [ 341.648501][T14197] syzkaller0: entered promiscuous mode [ 341.663677][T14197] syzkaller0: entered allmulticast mode [ 341.840002][T14206] lo speed is unknown, defaulting to 1000 [ 342.226021][T14229] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 342.240764][T14229] nbd: error processing sock list [ 342.252481][T14229] block nbd2: shutting down sockets [ 342.466584][T14245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.536945][T14245] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 342.581016][T14206] wg1 speed is unknown, defaulting to 1000 [ 342.930956][T14263] netlink: 'syz.3.2270': attribute type 15 has an invalid length. [ 343.011490][T14270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.471942][T14284] netlink: 'syz.0.2274': attribute type 1 has an invalid length. [ 343.551802][T14288] netlink: 'syz.3.2276': attribute type 12 has an invalid length. [ 343.589149][T14288] bond5: option primary_reselect: invalid value (255) [ 343.599339][T14288] bond5 (unregistering): Released all slaves [ 343.665314][T14284] vlan2: entered allmulticast mode [ 343.672669][T14284] bridge0: entered allmulticast mode [ 343.800861][T14297] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 343.811280][T14298] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 343.986945][T14309] netlink: 'syz.3.2280': attribute type 12 has an invalid length. [ 344.107596][T14314] __nla_validate_parse: 14 callbacks suppressed [ 344.107619][T14314] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2283'. [ 344.241596][T14318] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2284'. [ 344.388641][T14325] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2287'. [ 344.563056][T14333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2290'. [ 344.622900][T14337] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2292'. [ 344.639515][T14338] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2292'. [ 344.941304][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2298'. [ 344.964627][T14359] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2298'. [ 345.008089][T14359] xt_HMARK: proto mask must be zero with L3 mode [ 345.022732][T14368] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 345.032207][T14368] netlink: 'syz.3.2300': attribute type 4 has an invalid length. [ 345.042149][T14368] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.2300'. [ 345.172802][T14369] tipc: Enabled bearer , priority 0 [ 345.286594][T14376] netlink: 'syz.1.2303': attribute type 10 has an invalid length. [ 345.297640][T14376] bridge0: port 1(veth0_to_bridge) entered disabled state [ 345.312524][T14376] bridge0: port 1(veth0_to_bridge) entered blocking state [ 345.320180][T14376] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 345.350234][T14376] bridge0: entered allmulticast mode [ 345.361622][T14376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 345.384599][T14367] tipc: Resetting bearer [ 345.633445][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2308'. [ 345.837537][T14403] netlink: 'syz.4.2307': attribute type 10 has an invalid length. [ 345.845134][ T5878] Bluetooth: hci0: command tx timeout [ 347.113950][T14367] tipc: Disabling bearer [ 347.139517][T14403] bond0: (slave wlan1): Opening slave failed [ 347.573315][T14430] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 347.668636][T14430] bond2 (unregistering): Released all slaves [ 347.770235][T14443] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 347.783741][T14443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.928392][T14451] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20004 [ 348.029609][T14454] netlink: 'syz.2.2326': attribute type 4 has an invalid length. [ 348.750507][T14501] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 348.892770][T14507] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 349.014249][T14507] veth11: entered promiscuous mode [ 349.046936][T14507] bond0: (slave veth11): Enslaving as a backup interface with a down link [ 349.420186][T14533] nft_compat: unsupported protocol 1 [ 349.428497][T14535] __nla_validate_parse: 10 callbacks suppressed [ 349.428519][T14535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 349.675286][T14548] : renamed from bridge_slave_0 (while UP) [ 349.830265][T14552] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2355'. [ 349.874623][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 349.918373][T14552] netlink: 'syz.3.2355': attribute type 1 has an invalid length. [ 349.967957][T14552] netlink: 'syz.3.2355': attribute type 2 has an invalid length. [ 350.049541][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'. [ 350.133042][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 350.170267][T14565] tipc: Enabled bearer , priority 0 [ 350.205660][T14565] syzkaller0: entered promiscuous mode [ 350.211211][T14565] syzkaller0: entered allmulticast mode [ 350.347526][T14565] tipc: Resetting bearer [ 350.560424][T14563] tipc: Resetting bearer [ 350.606022][T14563] tipc: Disabling bearer [ 350.631449][T14589] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 350.732225][T14595] netlink: 'syz.1.2368': attribute type 6 has an invalid length. [ 350.774022][T14595] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 350.831465][T14595] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2368'. [ 351.080775][T14608] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 351.626525][T14635] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 351.699299][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 351.721661][T14643] tipc: Enabled bearer , priority 0 [ 351.729537][T14643] syzkaller0: entered promiscuous mode [ 351.735414][T14643] syzkaller0: entered allmulticast mode [ 351.863757][T14642] tipc: Resetting bearer [ 351.946797][T14642] tipc: Disabling bearer [ 352.321582][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 352.507410][T14681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2400'. [ 352.529404][T14681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2400'. [ 352.638651][T14688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.672722][T14691] bond5: (slave gretap0): making interface the new active one [ 352.684360][T14691] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 352.714658][T14692] syzkaller0: entered promiscuous mode [ 352.738702][T14692] syzkaller0: entered allmulticast mode [ 352.816649][T14692] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.881600][T14701] validate_nla: 3 callbacks suppressed [ 352.881622][T14701] netlink: 'syz.0.2407': attribute type 83 has an invalid length. [ 353.328803][T14723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.336285][T14723] IPv6: NLM_F_CREATE should be set when creating new route [ 353.690926][T14743] vlan2: entered allmulticast mode [ 353.703825][T14743] gretap0: entered allmulticast mode [ 353.962146][T14767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.969800][T14768] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 354.283032][T14780] bond6: entered allmulticast mode [ 354.294857][T14780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.310289][T14780] bridge0: port 1(bond6) entered blocking state [ 354.318557][T14780] bridge0: port 1(bond6) entered disabled state [ 354.332812][T14780] bond6: entered promiscuous mode [ 354.450816][T14761] lo speed is unknown, defaulting to 1000 [ 354.569886][T14794] tipc: Enabled bearer , priority 0 [ 354.578481][T14794] syzkaller0: entered promiscuous mode [ 354.585600][T14794] syzkaller0: entered allmulticast mode [ 354.594246][T14797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 354.686316][T14794] tipc: Resetting bearer [ 354.764044][T14791] tipc: Resetting bearer [ 354.822331][T14812] __nla_validate_parse: 7 callbacks suppressed [ 354.822353][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 354.830966][T14791] tipc: Disabling bearer [ 354.912811][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2438'. [ 354.927712][T14814] netlink: 'syz.3.2439': attribute type 4 has an invalid length. [ 354.946685][T14814] netlink: 'syz.3.2439': attribute type 4 has an invalid length. [ 354.988632][T14814] openvswitch: netlink: Message has 4 unknown bytes. [ 355.036650][T14761] wg1 speed is unknown, defaulting to 1000 [ 355.203064][T14823] unsupported nla_type 52263 [ 355.970069][T14846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2448'. [ 355.984815][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'. [ 356.027571][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'. [ 356.234317][T14857] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 356.242115][T14857] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2454'. [ 356.298033][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 356.455235][T14877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2458'. [ 356.522776][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2460'. [ 356.557908][T14886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2460'. [ 356.838302][T14900] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 358.075736][T14962] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 358.130198][T14962] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 358.244850][T14970] can: request_module (can-proto-5) failed. [ 358.667798][T14999] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.717054][T15001] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.891465][T15021] netlink: 'syz.4.2493': attribute type 16 has an invalid length. [ 358.936606][T15021] netlink: 'syz.4.2493': attribute type 17 has an invalid length. [ 359.082156][T15021] tunl0: left promiscuous mode [ 359.105402][T15021] 0ªî{X¹¦: left allmulticast mode [ 359.163259][T15021] team_slave_0: left allmulticast mode [ 359.201122][T15021] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.249566][T15039] tipc: Enabling of bearer rejected, already enabled [ 359.372901][T15046] tipc: Enabling of bearer rejected, failed to enable media [ 359.896406][T15076] openvswitch: netlink: Missing key (keys=40, expected=80) [ 359.937868][T15076] __nla_validate_parse: 8 callbacks suppressed [ 359.937889][T15076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2509'. [ 360.005104][T15084] tipc: Enabled bearer , priority 0 [ 360.034761][T15084] syzkaller0: entered promiscuous mode [ 360.040300][T15084] syzkaller0: entered allmulticast mode [ 360.081185][T15084] tipc: Resetting bearer [ 360.159903][T15084] tipc: Disabling bearer [ 360.220794][T15096] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 360.254888][T15096] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2514'. [ 360.279306][T15096] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 360.290846][T15096] openvswitch: netlink: Duplicate key (type 0). [ 360.301266][T15101] xt_socket: unknown flags 0xe4 [ 360.412363][T15107] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 360.443705][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 360.444580][T15107] netlink: 'syz.2.2518': attribute type 2 has an invalid length. [ 360.462147][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 360.477974][T15108] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 360.487078][T15108] netlink: 'syz.2.2518': attribute type 2 has an invalid length. [ 360.536655][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2519'. [ 360.704096][T15122] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 360.717630][T15118] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2521'. [ 361.125049][T15146] netlink: 'syz.4.2529': attribute type 6 has an invalid length. [ 361.138496][T15147] netlink: 'syz.4.2529': attribute type 6 has an invalid length. [ 361.281345][T15155] tipc: Enabling of bearer rejected, failed to enable media [ 361.331551][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2532'. [ 361.361323][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2532'. [ 361.376322][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 361.575050][T15168] netlink: 163944 bytes leftover after parsing attributes in process `syz.1.2537'. [ 361.696860][T15179] syzkaller1: entered promiscuous mode [ 361.714600][T15179] syzkaller1: entered allmulticast mode [ 361.905796][T15188] dvmrp0: entered allmulticast mode [ 362.037197][ T10] lo speed is unknown, defaulting to 1000 [ 362.050137][ T10] syz0: Port: 1 Link DOWN [ 362.069029][ T10] lo speed is unknown, defaulting to 1000 [ 362.177516][T15202] gre0: entered allmulticast mode [ 362.225398][T15209] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 362.258854][T15209] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.288318][T15209] bond7: (slave geneve2): making interface the new active one [ 362.298621][T15209] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 362.654046][T15232] tipc: Enabled bearer , priority 0 [ 362.668355][T15232] syzkaller0: entered promiscuous mode [ 362.682750][T15232] syzkaller0: entered allmulticast mode [ 362.734003][T15232] tipc: Resetting bearer [ 362.757077][T15231] tipc: Resetting bearer [ 362.799141][T15231] tipc: Disabling bearer [ 363.010684][T15249] netlink: ct family unspecified [ 363.026013][T15249] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.123169][T15254] ip6gre0: Master is either lo or non-ether device [ 363.387124][T15259] bond7: entered promiscuous mode [ 363.437032][T15259] bond7: entered allmulticast mode [ 363.471625][T15259] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.855322][T15298] netlink: 'syz.1.2578': attribute type 2 has an invalid length. [ 363.871761][T15300] netlink: 'syz.2.2579': attribute type 30 has an invalid length. [ 363.897312][T15302] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20002 [ 363.994691][T15300] bond8: option arp_missed_max: invalid value (0) [ 364.001188][T15300] bond8: option arp_missed_max: allowed values 1 - 255 [ 364.015782][T15300] bond8 (unregistering): Released all slaves [ 364.091623][ T36] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 364.158782][ T9604] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 364.175558][ T36] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 364.734522][T15352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.884221][ T5868] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 364.982364][T15366] __nla_validate_parse: 16 callbacks suppressed [ 364.982391][T15366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2598'. [ 365.011799][T15366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2598'. [ 365.123818][ T9604] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 365.272432][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 365.462640][T15400] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 365.752570][T15423] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2618'. [ 365.808681][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2620'. [ 365.912380][T15430] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2621'. [ 366.203159][T15448] erspan0: entered allmulticast mode [ 366.306737][T15457] netlink: 'syz.4.2631': attribute type 4 has an invalid length. [ 366.650750][T15478] bond0: Error: Cannot enslave bond to itself. [ 366.859736][T15492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.002382][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 367.057722][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 367.071141][ T59] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.073301][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2644'. [ 367.106278][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.267385][T15511] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2648'. [ 367.505631][T15531] tipc: Enabled bearer , priority 0 [ 367.609308][T15535] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 367.638872][T15531] tipc: Disabling bearer [ 367.778764][T15541] netlink: 'syz.4.2656': attribute type 1 has an invalid length. [ 367.921443][T15541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.098769][T15550] veth15: entered promiscuous mode [ 368.148140][T15550] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 368.173545][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 368.425568][T15588] tipc: Enabling of bearer rejected, media not registered [ 368.835547][T15607] syzkaller0: entered allmulticast mode [ 369.104586][T15628] raw_sendmsg: syz.4.2681 forgot to set AF_INET. Fix it! [ 369.452576][T15661] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 369.606783][T15669] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 369.645961][T15669] netlink: 'syz.0.2694': attribute type 2 has an invalid length. [ 369.809053][T15680] netlink: 'syz.1.2697': attribute type 3 has an invalid length. [ 369.992475][T15691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.030899][T15691] netlink: 'syz.2.2701': attribute type 12 has an invalid length. [ 370.049160][T15691] __nla_validate_parse: 42 callbacks suppressed [ 370.049181][T15691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2701'. [ 370.291275][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 370.536629][T15727] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 370.548234][T15727] netlink: 'syz.4.2713': attribute type 8 has an invalid length. [ 370.559334][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2713'. [ 370.891231][T15748] netlink: 'syz.4.2720': attribute type 2 has an invalid length. [ 370.896734][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 371.008952][T15746] bond8: Invalid ad_actor_system MAC address. [ 371.015397][T15746] bond8: option ad_actor_system: invalid value (1) [ 371.028007][T15746] bond8 (unregistering): Released all slaves [ 371.037400][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2723'. [ 371.073581][T15751] tipc: Enabling of bearer rejected, failed to enable media [ 371.205289][ T55] block nbd0: Possible stuck request ffff888025505080: control (read@0,1024B). Runtime 180 seconds [ 371.217023][ T55] block nbd0: Possible stuck request ffff888025505240: control (read@1024,1024B). Runtime 180 seconds [ 371.228643][ T55] block nbd0: Possible stuck request ffff888025505400: control (read@2048,1024B). Runtime 180 seconds [ 371.240317][ T55] block nbd0: Possible stuck request ffff8880255055c0: control (read@3072,1024B). Runtime 180 seconds [ 371.306128][T15768] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 371.340957][T15768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2726'. [ 371.382571][T15768] nbd: illegal input index 33022 [ 371.608246][T15785] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2731'. [ 371.903048][T15792] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2735'. [ 372.059919][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 372.069171][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 372.101773][T15801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 372.230662][T15801] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.240237][T15801] gretap2: entered promiscuous mode [ 372.246766][T15801] gretap2: entered allmulticast mode [ 372.269302][T15813] netlink: 'syz.4.2738': attribute type 29 has an invalid length. [ 372.377600][T15819] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 372.750624][T15834] syzkaller0: entered promiscuous mode [ 372.763618][T15834] syzkaller0: entered allmulticast mode [ 372.776783][T15831] tipc: Enabled bearer , priority 0 [ 372.792821][T15834] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 372.931495][T15831] tipc: Resetting bearer [ 372.978648][T15850] xt_l2tp: missing protocol rule (udp|l2tpip) [ 372.979009][T15853] xt_socket: unknown flags 0x50 [ 373.006799][T15831] tipc: Disabling bearer [ 373.031279][T15855] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 373.291063][T15876] tipc: Enabled bearer , priority 0 [ 373.303214][T15876] syzkaller0: entered promiscuous mode [ 373.309318][T15876] syzkaller0: entered allmulticast mode [ 373.359794][T15876] tipc: Resetting bearer [ 373.447784][T15875] tipc: Resetting bearer [ 373.576927][T15875] tipc: Disabling bearer [ 373.609050][T15868] lo speed is unknown, defaulting to 1000 [ 374.125478][T15868] wg1 speed is unknown, defaulting to 1000 [ 375.040208][T15959] bond1: (slave veth0_to_bond): Releasing active interface [ 375.093052][T15959] bond1: (slave veth9): Releasing active interface [ 375.140086][T15959] bond2: (slave bond3): Releasing backup interface [ 375.184279][T15959] bond5: (slave gretap0): Releasing active interface [ 375.269786][T15964] __nla_validate_parse: 10 callbacks suppressed [ 375.269811][T15964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2782'. [ 375.300904][T15963] lo speed is unknown, defaulting to 1000 [ 375.337623][T15964] nbd: illegal input index -8454144 [ 375.999723][T15963] wg1 speed is unknown, defaulting to 1000 [ 376.323795][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 376.492265][T16022] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2798'. [ 376.522780][T16026] IPv6: NLM_F_REPLACE set, but no existing node found! [ 376.539010][T16028] sctp: [Deprecated]: syz.0.2799 (pid 16028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.539010][T16028] Use struct sctp_sack_info instead [ 376.882373][T16040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.950149][T16046] netlink: 'syz.0.2803': attribute type 11 has an invalid length. [ 376.968125][T16046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2803'. [ 377.186157][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 377.451444][T16082] validate_nla: 3 callbacks suppressed [ 377.451466][T16082] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 377.665165][T16097] netlink: 'syz.2.2817': attribute type 39 has an invalid length. [ 377.744635][T16100] netlink: 'syz.3.2821': attribute type 1 has an invalid length. [ 377.752747][T16100] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2821'. [ 377.762648][T16100] netlink: 'syz.3.2821': attribute type 1 has an invalid length. [ 378.018504][T16109] tipc: Enabled bearer , priority 0 [ 378.057381][T16109] syzkaller0: entered promiscuous mode [ 378.062930][T16109] syzkaller0: entered allmulticast mode [ 378.131176][T16109] tipc: Resetting bearer [ 378.174541][T16109] netlink: 'syz.4.2824': attribute type 21 has an invalid length. [ 378.182470][T16109] netlink: 'syz.4.2824': attribute type 6 has an invalid length. [ 378.223657][T16109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2824'. [ 378.334746][T16107] tipc: Resetting bearer [ 378.398372][T16107] tipc: Disabling bearer [ 378.467618][T16131] bridge0: port 5(ipvlan0) entered blocking state [ 378.480358][T16131] bridge0: port 5(ipvlan0) entered disabled state [ 378.493973][T16131] ipvlan0: entered allmulticast mode [ 378.521114][T16131] ipvlan0: left allmulticast mode [ 379.042908][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 379.098636][T16170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.229982][T16183] netlink: 'syz.3.2846': attribute type 29 has an invalid length. [ 379.281517][T16183] netlink: 'syz.3.2846': attribute type 29 has an invalid length. [ 379.330646][T16183] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2846'. [ 379.476265][T16195] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2848'. [ 379.508682][T16195] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2848'. [ 379.592874][T16203] openvswitch: netlink: Missing key (keys=40, expected=100) [ 380.308948][T16225] __nla_validate_parse: 2 callbacks suppressed [ 380.308972][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 380.401525][T16225] tc_dump_action: action bad kind [ 380.413596][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 380.439933][T16225] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2857'. [ 380.467450][T16223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.697724][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.708729][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.718167][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.728417][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.737813][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.751971][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.759943][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.769295][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.780423][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.789340][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.829856][T16237] lo speed is unknown, defaulting to 1000 [ 380.988871][T16237] wg1 speed is unknown, defaulting to 1000 [ 381.160483][T16237] chnl_net:caif_netlink_parms(): no params data found [ 381.255716][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.263941][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.271286][T16237] bridge_slave_0: entered allmulticast mode [ 381.285498][T16237] bridge_slave_0: entered promiscuous mode [ 381.299851][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.308211][T16252] netlink: 'syz.3.2862': attribute type 21 has an invalid length. [ 381.316646][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.324169][T16237] bridge_slave_1: entered allmulticast mode [ 381.332381][T16237] bridge_slave_1: entered promiscuous mode [ 381.341419][T16252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2862'. [ 381.528064][T16237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.594044][T16237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.729171][T16237] team0: Port device team_slave_0 added [ 381.816266][T16237] team0: Port device team_slave_1 added [ 381.961226][T16237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.990224][T16282] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 382.011944][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.043963][T16237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.057093][T16237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.064347][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.149704][T16237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.227219][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 382.245074][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 382.247836][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2872'. [ 382.264812][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 382.318609][T16303] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2875'. [ 382.357137][T16294] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2873'. [ 382.359390][T16298] syz.3.2872: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 382.397994][T16237] hsr_slave_0: entered promiscuous mode [ 382.412401][T16298] CPU: 1 UID: 0 PID: 16298 Comm: syz.3.2872 Not tainted syzkaller #0 PREEMPT(full) [ 382.412450][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.412480][T16298] Call Trace: [ 382.412489][T16298] [ 382.412499][T16298] dump_stack_lvl+0x189/0x250 [ 382.412536][T16298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.412564][T16298] ? __pfx__printk+0x10/0x10 [ 382.412596][T16298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.412624][T16298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 382.412653][T16298] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 382.412682][T16298] warn_alloc+0x214/0x310 [ 382.412744][T16298] ? __pfx_warn_alloc+0x10/0x10 [ 382.412788][T16298] ? __get_vm_area_node+0x28f/0x300 [ 382.412819][T16298] ? hash_ipport_create+0x741/0x1410 [ 382.412848][T16298] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 382.412915][T16298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 382.412958][T16298] ? rcu_is_watching+0x15/0xb0 [ 382.412980][T16298] ? hash_ipport_create+0x741/0x1410 [ 382.413001][T16298] ? hash_ipport_create+0x741/0x1410 [ 382.413020][T16298] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 382.413050][T16298] ? hash_ipport_create+0x741/0x1410 [ 382.413071][T16298] ? hash_ipport_create+0x6d5/0x1410 [ 382.413099][T16298] hash_ipport_create+0x741/0x1410 [ 382.413121][T16298] ? __lock_acquire+0xab9/0xd20 [ 382.413168][T16298] ? __pfx_hash_ipport_create+0x10/0x10 [ 382.413195][T16298] ? __nla_parse+0x40/0x60 [ 382.413219][T16298] ? __pfx_hash_ipport_create+0x10/0x10 [ 382.413245][T16298] ip_set_create+0xa94/0x1940 [ 382.413277][T16298] ? ip_set_create+0x4a2/0x1940 [ 382.413324][T16298] ? __pfx_ip_set_create+0x10/0x10 [ 382.413395][T16298] nfnetlink_rcv_msg+0xb4d/0x1130 [ 382.413431][T16298] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 382.413487][T16298] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 382.413519][T16298] ? kasan_save_free_info+0x46/0x50 [ 382.413602][T16298] netlink_rcv_skb+0x208/0x470 [ 382.413627][T16298] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 382.413663][T16298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.413701][T16298] ? bpf_lsm_capable+0x9/0x20 [ 382.413730][T16298] ? security_capable+0x7e/0x2e0 [ 382.413773][T16298] nfnetlink_rcv+0x26a/0x2520 [ 382.413811][T16298] ? __dev_queue_xmit+0x1d79/0x3b50 [ 382.413854][T16298] ? __dev_queue_xmit+0x27b/0x3b50 [ 382.413897][T16298] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 382.413926][T16298] ? __pfx___dev_queue_xmit+0x10/0x10 [ 382.413972][T16298] ? ref_tracker_free+0x63a/0x7d0 [ 382.413990][T16298] ? __asan_memcpy+0x40/0x70 [ 382.414010][T16298] ? __pfx_ref_tracker_free+0x10/0x10 [ 382.414048][T16298] ? skb_clone+0x246/0x3a0 [ 382.414080][T16298] ? __netlink_deliver_tap+0x807/0x850 [ 382.414104][T16298] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.414134][T16298] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.414167][T16298] netlink_unicast+0x82c/0x9e0 [ 382.414209][T16298] ? __pfx_netlink_unicast+0x10/0x10 [ 382.414246][T16298] ? netlink_sendmsg+0x642/0xb30 [ 382.414268][T16298] ? skb_put+0x11b/0x210 [ 382.414298][T16298] netlink_sendmsg+0x805/0xb30 [ 382.414333][T16298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.414361][T16298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 382.414387][T16298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.414411][T16298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.414437][T16298] __sock_sendmsg+0x21c/0x270 [ 382.414474][T16298] ____sys_sendmsg+0x505/0x830 [ 382.414508][T16298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.414547][T16298] ? import_iovec+0x74/0xa0 [ 382.414579][T16298] ___sys_sendmsg+0x21f/0x2a0 [ 382.414610][T16298] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.414674][T16298] ? __fget_files+0x2a/0x420 [ 382.414693][T16298] ? __fget_files+0x3a0/0x420 [ 382.414724][T16298] __x64_sys_sendmsg+0x19b/0x260 [ 382.414757][T16298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.414807][T16298] ? do_syscall_64+0xbe/0x3b0 [ 382.414838][T16298] do_syscall_64+0xfa/0x3b0 [ 382.414861][T16298] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.414884][T16298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.414906][T16298] ? clear_bhb_loop+0x60/0xb0 [ 382.414934][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.415026][T16298] RIP: 0033:0x7f4de998eec9 [ 382.415038][T16237] hsr_slave_1: entered promiscuous mode [ 382.415047][T16298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.415066][T16298] RSP: 002b:00007f4dea749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.415087][T16298] RAX: ffffffffffffffda RBX: 00007f4de9be6090 RCX: 00007f4de998eec9 [ 382.415100][T16298] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 0000000000000005 [ 382.415114][T16298] RBP: 00007f4de9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 382.415141][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.415155][T16298] R13: 00007f4de9be6128 R14: 00007f4de9be6090 R15: 00007ffef070eff8 [ 382.415193][T16298] [ 382.424643][T16298] Mem-Info: [ 382.424667][T16298] active_anon:5650 inactive_anon:0 isolated_anon:0 [ 382.424667][T16298] active_file:3209 inactive_file:39974 isolated_file:0 [ 382.424667][T16298] unevictable:768 dirty:63 writeback:0 [ 382.424667][T16298] slab_reclaimable:12972 slab_unreclaimable:122378 [ 382.424667][T16298] mapped:29287 shmem:1364 pagetables:1237 [ 382.424667][T16298] sec_pagetables:0 bounce:0 [ 382.424667][T16298] kernel_misc_reclaimable:0 [ 382.424667][T16298] free:1299224 free_pcp:14477 free_cma:0 [ 382.424729][T16298] Node 0 active_anon:22600kB inactive_anon:0kB active_file:12836kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117148kB dirty:252kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14196kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.424787][T16298] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.424844][T16298] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.424916][T16298] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 382.424976][T16298] Node 0 DMA32 free:1282276kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22552kB inactive_anon:0kB active_file:12836kB inactive_file:158120kB unevictable:1536kB writepending:252kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:39980kB local_pcp:22248kB free_cma:0kB [ 382.425051][T16298] lowmem_reserve[]: 0 0 1 1 1 [ 382.425099][T16298] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 382.425164][T16298] lowmem_reserve[]: 0 0 0 0 0 [ 382.425211][T16298] Node 1 Normal free:3899248kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17920kB local_pcp:10400kB free_cma:0kB [ 382.425278][T16298] lowmem_reserve[]: 0 0 0 0 0 [ 382.425327][T16298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.425479][T16298] Node 0 DMA32: 463*4kB (UM) 500*8kB (UME) 297*16kB (UM) 977*32kB (UM) 961*64kB (UM) 458*128kB (UME) 252*256kB (UM) 84*512kB (UM) 29*1024kB (UME) 4*2048kB (ME) 238*4096kB (M) = 1282252kB [ 382.436833][T16298] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 382.515897][T16311] validate_nla: 1 callbacks suppressed [ 382.515919][T16311] netlink: 'syz.0.2877': attribute type 10 has an invalid length. [ 382.535403][T16298] = 12kB [ 382.662476][T16320] netlink: 'syz.0.2877': attribute type 30 has an invalid length. [ 382.665534][T16298] Node 1 Normal: 192*4kB (UME) 56*8kB (UME) 49*16kB (UME) 121*32kB (UME) 38*64kB (UME) 10*128kB (UME) 6*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3899248kB [ 382.665765][T16298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.665785][T16298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.665805][T16298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.665824][T16298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.665844][T16298] 44543 total pagecache pages [ 382.665868][T16298] 0 pages in swap cache [ 382.665878][T16298] Free swap = 124996kB [ 382.665888][T16298] Total swap = 124996kB [ 382.665899][T16298] 2097051 pages RAM [ 382.665909][T16298] 0 pages HighMem/MovableOnly [ 382.665918][T16298] 425673 pages reserved [ 382.665928][T16298] 0 pages cma reserved [ 382.765445][T16314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.895489][ T5878] Bluetooth: hci1: command tx timeout [ 383.425269][T16320] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 383.807537][T16237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.835485][T16237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.014812][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.023951][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 384.058354][T16237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.077244][T16237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.097264][T16369] netlink: 'syz.0.2891': attribute type 21 has an invalid length. [ 384.243079][T16237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.255638][T16237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.019424][T16422] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 385.032395][T16422] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 385.095757][T16426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.444382][ T5878] Bluetooth: hci1: command tx timeout [ 385.470593][T16237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.540846][T16237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.599922][T16237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.631412][T16237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.662237][T16437] __nla_validate_parse: 10 callbacks suppressed [ 385.662261][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'. [ 385.705788][T16448] netlink: 'syz.3.2910': attribute type 4 has an invalid length. [ 385.968479][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.040753][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.082009][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.089598][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.150722][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.158794][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.313821][T16476] FAULT_INJECTION: forcing a failure. [ 386.313821][T16476] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 386.349587][T16476] CPU: 1 UID: 0 PID: 16476 Comm: syz.0.2917 Not tainted syzkaller #0 PREEMPT(full) [ 386.349620][T16476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.349634][T16476] Call Trace: [ 386.349644][T16476] [ 386.349653][T16476] dump_stack_lvl+0x189/0x250 [ 386.349687][T16476] ? __pfx____ratelimit+0x10/0x10 [ 386.349712][T16476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.349739][T16476] ? __pfx__printk+0x10/0x10 [ 386.349775][T16476] ? __might_fault+0xb0/0x130 [ 386.349814][T16476] should_fail_ex+0x414/0x560 [ 386.349876][T16476] _copy_from_user+0x2d/0xb0 [ 386.349908][T16476] copy_from_sockptr+0x5e/0xa0 [ 386.349935][T16476] do_tcp_getsockopt+0x1a9f/0x2660 [ 386.349973][T16476] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 386.349999][T16476] ? sock_recv_errqueue+0x500/0x510 [ 386.350019][T16476] ? __might_fault+0xb0/0x130 [ 386.350052][T16476] ? _parse_integer_limit+0x1ae/0x1f0 [ 386.350077][T16476] ? aa_label_sk_perm+0x4cd/0x630 [ 386.350117][T16476] ? __lock_acquire+0xab9/0xd20 [ 386.350152][T16476] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 386.350220][T16476] ? __lock_acquire+0xab9/0xd20 [ 386.350283][T16476] tcp_getsockopt+0x83/0x130 [ 386.350308][T16476] ? sock_recv_errqueue+0x500/0x510 [ 386.350329][T16476] ? sock_recv_errqueue+0x500/0x510 [ 386.350349][T16476] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 386.350380][T16476] do_sock_getsockopt+0x36f/0x450 [ 386.350412][T16476] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 386.350438][T16476] ? write_ibpb+0x30/0x40 [ 386.350463][T16476] ? __fget_files+0x3a0/0x420 [ 386.350481][T16476] ? __fget_files+0x2a/0x420 [ 386.350510][T16476] __x64_sys_getsockopt+0x1a5/0x250 [ 386.350537][T16476] ? write_ibpb+0x30/0x40 [ 386.350567][T16476] ? write_ibpb+0x30/0x40 [ 386.350596][T16476] do_syscall_64+0xfa/0x3b0 [ 386.350620][T16476] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.350643][T16476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.350665][T16476] ? clear_bhb_loop+0x60/0xb0 [ 386.350692][T16476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.350712][T16476] RIP: 0033:0x7f9d99d8eec9 [ 386.350732][T16476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.350758][T16476] RSP: 002b:00007f9d97fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 386.350781][T16476] RAX: ffffffffffffffda RBX: 00007f9d99fe6090 RCX: 00007f9d99d8eec9 [ 386.350798][T16476] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 386.350811][T16476] RBP: 00007f9d97fd5090 R08: 0000200000000140 R09: 0000000000000000 [ 386.350826][T16476] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 386.350846][T16476] R13: 00007f9d99fe6128 R14: 00007f9d99fe6090 R15: 00007fff3ff42e38 [ 386.350882][T16476] [ 386.662066][T16237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.756310][T16237] veth0_vlan: entered promiscuous mode [ 386.770561][T16237] veth1_vlan: entered promiscuous mode [ 386.838409][T16237] veth0_macvtap: entered promiscuous mode [ 386.851072][T16237] veth1_macvtap: entered promiscuous mode [ 386.881124][T16237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.916479][T16237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.947733][ T6049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.979820][ T6049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.989437][ T6049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.016336][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 387.052490][ T6049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.221142][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 387.232192][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.255303][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.258152][ T6027] [ 387.265328][ T6027] ============================================ [ 387.271703][ T6027] WARNING: possible recursive locking detected [ 387.277958][ T6027] syzkaller #0 Not tainted [ 387.282405][ T6027] -------------------------------------------- [ 387.288655][ T6027] kworker/u8:11/6027 is trying to acquire lock: [ 387.294918][ T6027] ffffe8ffffd44b40 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 387.304294][ T6027] [ 387.304294][ T6027] but task is already holding lock: [ 387.311669][ T6027] ffffe8ffffc44b90 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 387.320905][ T6027] [ 387.320905][ T6027] other info that might help us debug this: [ 387.329427][ T6027] Possible unsafe locking scenario: [ 387.329427][ T6027] [ 387.336886][ T6027] CPU0 [ 387.340174][ T6027] ---- [ 387.343464][ T6027] lock(&pd_list->lock); [ 387.347819][ T6027] lock(&pd_list->lock); [ 387.352193][ T6027] [ 387.352193][ T6027] *** DEADLOCK *** [ 387.352193][ T6027] [ 387.360421][ T6027] May be due to missing lock nesting notation [ 387.360421][ T6027] [ 387.368850][ T6027] 3 locks held by kworker/u8:11/6027: [ 387.374252][ T6027] #0: ffff888020371148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.386908][ T6027] #1: ffffc900046c7bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.399322][ T6027] #2: ffffe8ffffc44b90 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 387.409105][ T6027] [ 387.409105][ T6027] stack backtrace: [ 387.415221][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 387.415244][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.415257][ T6027] Workqueue: pencrypt_parallel padata_parallel_worker [ 387.415288][ T6027] Call Trace: [ 387.415297][ T6027] [ 387.415306][ T6027] dump_stack_lvl+0x189/0x250 [ 387.415329][ T6027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.415348][ T6027] ? __pfx__printk+0x10/0x10 [ 387.415372][ T6027] ? print_lock_name+0xde/0x100 [ 387.415396][ T6027] print_deadlock_bug+0x28b/0x2a0 [ 387.415414][ T6027] validate_chain+0x1a3f/0x2140 [ 387.415435][ T6027] ? __queue_work+0x102/0xfb0 [ 387.415452][ T6027] ? look_up_lock_class+0x74/0x170 [ 387.415470][ T6027] ? register_lock_class+0x51/0x320 [ 387.415505][ T6027] ? __queue_work+0xc56/0xfb0 [ 387.415523][ T6027] __lock_acquire+0xab9/0xd20 [ 387.415549][ T6027] ? padata_do_serial+0x73e/0xb80 [ 387.415570][ T6027] lock_acquire+0x120/0x360 [ 387.415592][ T6027] ? padata_do_serial+0x73e/0xb80 [ 387.415615][ T6027] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.415638][ T6027] _raw_spin_lock+0x2e/0x40 [ 387.415663][ T6027] ? padata_do_serial+0x73e/0xb80 [ 387.415688][ T6027] padata_do_serial+0x73e/0xb80 [ 387.415714][ T6027] ? padata_parallel_worker+0x44/0x1d0 [ 387.415734][ T6027] padata_parallel_worker+0x75/0x1d0 [ 387.415754][ T6027] ? process_scheduled_works+0x9ef/0x17b0 [ 387.415770][ T6027] process_scheduled_works+0xae1/0x17b0 [ 387.415796][ T6027] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.415817][ T6027] worker_thread+0x8a0/0xda0 [ 387.415842][ T6027] kthread+0x70e/0x8a0 [ 387.415862][ T6027] ? __pfx_worker_thread+0x10/0x10 [ 387.415877][ T6027] ? __pfx_kthread+0x10/0x10 [ 387.415896][ T6027] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.415909][ T6027] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.415924][ T6027] ? __pfx_kthread+0x10/0x10 [ 387.415942][ T6027] ret_from_fork+0x439/0x7d0 [ 387.415959][ T6027] ? __pfx_ret_from_fork+0x10/0x10 [ 387.415977][ T6027] ? __switch_to_asm+0x39/0x70 [ 387.415996][ T6027] ? __switch_to_asm+0x33/0x70 [ 387.416017][ T6027] ? __pfx_kthread+0x10/0x10 [ 387.416039][ T6027] ret_from_fork_asm+0x1a/0x30 [ 387.416065][ T6027] [ 387.649678][T16237] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 387.661655][ T5878] Bluetooth: hci1: command tx timeout [ 387.718531][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.732932][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.684100][ T5878] Bluetooth: hci1: command tx timeout [ 393.613524][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!