last executing test programs: 3m37.208466707s ago: executing program 4 (id=12973): r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @local, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000ffff14000780080008000000008908000640000001250500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) recvmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x1) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)={0x2, 0x401, 0x5, 0x0, 0x0, [{{r6}, 0x2}, {{r6}, 0x100}, {{r5}, 0x100000001}, {{r5}}, {{r4}, 0x5}]}) 3m37.067733539s ago: executing program 4 (id=12975): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x90bd, 0x7, 0x132a6, 0x1, 0x6, '\x00', 0x0, r0, 0x2, 0x1, 0x5, 0xf, @void, @value, @value=r1}, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="31f75f743f6235a5b1f68426bac940fdd47bfaa407bf217a881c9df8e63ffa8afaa747178defd977da646dcc24f20986da8cd27d5175a5946013f77f9d411a03", 0x40}, {&(0x7f0000000180)="89c72aec00c44829068524afa1d2008e3cb3dc2db1bac795bb6a", 0x1a}, {&(0x7f00000001c0)="9bf0d53be889126847a753e9ddc5dbef50960d5dae1c075697d27fe8b6d6d00e8b2dde6553375873d4e01e3567df26a331f18eee42404e1211d97de967e8594ec8fd6eb7c8dc5de271ece00dee6eb832735918bae65c459ea20765789534eb46221efdfa4fed2498ecc107235609db9160420e5be997a18d04cef5f2ec42b604d01fc5888ebb770e171612801fcc6c3ad1458ae0feed332c62f01d6374b628ac185b5da788a048c52d3f269293dee173d8e6ef0ae0c7c861d88d4ef8606588f6be624fe296ee93d4911bd07db746e564037c40c94ee1058a9b08372c889a1de2e69da4dff29ed4440f86fa3013fc3c8aa513604b2b3ef90d55", 0xf9}, {&(0x7f00000002c0)="40dc7878214991df7b7f48723e85348fb86d0d525733aa89cb101eacb292d17375f9b7c9ef192cd16866731494629e5b087b58d8ce93f83458bb435ed8603d8ca290812ac78babea4f9816312bcc5b7848a90654f4d33882954194543de0e2b7c299a8422ad184689b439e33e72595c9457e28b79ed5023b05b055a1b904e6c59c723c68b13b62445d4d709b9144c94d6ae00af2de05b8ea560a208ab5ebe39dd3ed6eb94e983a6da1f9fd7d92958a7a21d9049a0c2fd713392f8d47f8bc6e3f8ca16ddb89bdd9901e840ae499cdc35b3bd3e2ccab616d", 0xd7}, {&(0x7f00000003c0)="7454035e4f1a7709adc99e8129f9f4cccddcee14563e60980085d6a0dbcc12f2b3b009c816d749613c6d8104889fad60e4ab04d9ecc5a180d94df31ced", 0x3d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="b2f807fa9e4b3778a587f9101f5ff5657f809155c1977d460efbd3278be23c9d237ebf46e91dc05f44bb07a70166c2b05232542b56c85ec67c4ad0f9c088c6cc40a2a144c90f210ba8aadcfc91cac07d9e89f8d9372e3384a3993505660e4b9f158cb3e47d3b56735e232982d73a4da4c3156e5a3f29a584ac5f82750e2d3136c42ed3ef4cbd80c7b4ed927695f9d20c8c1fe213675221c9e6989f84f80d20af0d2026b9092a27015ec87909ffe0c4486832cd1d9719c228c0110eb28ebfb09ef2d7b2eb71e9fcecee4c8c6a16df6f", 0xcf}, {&(0x7f00000005c0)="7f0f296227e627f92fcd0c78caf5894418e13447646d5ab8e1f02f5baab62bd41554700f686776c2bd3853d24c2a297698af43ff838732718bed5e593660b417fb833b", 0x43}, {&(0x7f0000000640)="7d2f2302474be8908261662ffaa1891c1b520a5a22bcf538da", 0x19}], 0x4, &(0x7f00000006c0)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}}, {{&(0x7f0000000740)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000780)="312a545c6fcd043fb93567781205089799f8b72d98a4c216c7f7ee5b47ddb29311b7bdfc8ac064dcde26eeddf90529793e9add8b4fd18675da3c1823a628cf52c25c082b72594dbc6bb5cf4ab397cfee6467197fc51ac1539ed8c5befcbb4530d85600817ef0c47d3685d0e40980dc7710995ca2537bdc2a90a9e4b5b7a45b40070c7901774eb3b25c559d92174a960321e4a48cc457879aa4f9235048b9478194fba2b09e5e6ee84c23065ed22d012ded715a5c8afcaf0d200df622f91d7476c1fb8674ea3c79d03f0e7db57cad345c66e6591e385886ac8091", 0xda}, {&(0x7f0000000880)="0bc7b37ccfcb5c", 0x7}], 0x2}}], 0x3, 0x40c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001a80)={&(0x7f00000009c0), 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x1034, 0x1a, 0x100, 0x70bd2b, 0x25dfdbff, {0x3}, [@nested={0x1020, 0x11c, 0x0, 0x1, [@typed={0x19, 0x75, 0x0, 0x0, @binary="2e107b1933c164f0f6886bd64cd79753b67cde5ded"}, @generic="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"]}]}, 0x1034}, 0x1, 0x0, 0x0, 0x40010}, 0x22008800) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000001ac0)={0x80}, 0x4) (async) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000001ac0)={0x80}, 0x4) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000001b00)) (async) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000001b00)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000001b40)) accept4$netrom(0xffffffffffffffff, &(0x7f0000001b80)={{0x3, @default}, [@default, @default, @remote, @bcast, @bcast, @netrom, @null, @rose]}, &(0x7f0000001c00)=0x48, 0x80800) (async) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001b80)={{0x3, @default}, [@default, @default, @remote, @bcast, @bcast, @netrom, @null, @rose]}, &(0x7f0000001c00)=0x48, 0x80800) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000001c40)=0x4, 0x4) (async) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000001c40)=0x4, 0x4) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001c80)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffff7, 0x8, 0x2, 0x4, 0x8000000000000000]}, &(0x7f0000001d00)=0x78) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001c80)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffff7, 0x8, 0x2, 0x4, 0x8000000000000000]}, &(0x7f0000001d00)=0x78) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001d40), &(0x7f0000001dc0)=0x60, 0x800) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f0000001e00)=""/28, 0x1c) (async) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f0000001e00)=""/28, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x10, 0x140f, 0x200, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10004011}, 0x40080) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000002100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/221, 0xdd, 0x1, &(0x7f0000002040)=""/159, 0x9f}, &(0x7f0000002140)=0x40) getpeername$inet(r8, &(0x7f0000002180)={0x2, 0x0, @multicast2}, &(0x7f00000021c0)=0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r5, 0x68142000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r5, 0x68142000) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000002200)={0x4d, "cc01b14557dba050ed799262065885df62d340774530b3021638a157e163d44d87b2e9ace95dcaf71730b24099f27d04479f5a88b9ebb442d366aaf45f2488109fcba53caebe9061dd4a4499869ab1ebdaeb7ae4640dcfc06d3311fad0ff2d0a9d837db1eb42508cd972630786730d0c95ea9cec7879e6cfd119d67e4289ee95"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000002cc0)={{r2, &(0x7f00000022c0)='\x00', 0x480800, &(0x7f0000002300)={@align=0x2, {0x5, 0x0, 0x400, 0xa}}, 0xffff8001, &(0x7f0000002340), &(0x7f0000002380)=0x3}, 0x9, &(0x7f0000002b80)=[{0x2, 0x4, &(0x7f00000023c0)='\x00', &(0x7f0000002400)="c315c339b2cc0e1e6e99ec94333a59bc9e1c8912aa44bbb4eb86362c151d0dd9e24763170e53b6ca85ac81cb73e607bb363786513ebcc75ab4d912d806b7a6a174771e14054e8a3f067caf5b094bca262594ed3987651d7dc5b18cd82a2a711f8665c34f6c1cfde817247a6e9754de76e99a71ca040187a8d9fd63c913ae64660025e15ede3573fbfd1e4847f89c46edcb413f16db28c0bc64b00abe24c8cc22f42aaeb1becef8c284bbdd42", 0xac, 0x16}, {0x1, 0x7f, &(0x7f00000024c0)='*]\x00', &(0x7f0000002500)="25cb3835b1be1f7d47c0420e5a50308fa8dad2fcc4874f89de0a761f144cd60910ce7c1fe83cc605fe2651be3f2975fb86b9aedbba2fe444f6373c688555e14fd40b4c56425f6fd5595c6a2a33f739c1a6d6287586e2b0e30572aacdf9c61a605dfdb7f5f3cf5bd4f374dbfdae3f72bdce9c1b9785f620d7b358289a76b0d1b3b3026d594e1b68b6", 0x88, 0x11}, {0x3, 0x5, &(0x7f00000025c0)='*$^%\x00', &(0x7f0000002600)="e92c993c0b975f7210e319a9b5fdbfbfc67e30cbc4f4bb42a175cfd870977a5383fdaa1a38148c1d7f43564f7d7fa11f39fe92700e", 0x35}, {0x1, 0x80000001, &(0x7f0000002640)='broute\x00', &(0x7f0000002680)="cc232b8e3a8c767d4008a1c12187f6897e3c87a2753de54f53979a70d21d9b6c89d808f51ef1307818c06f19f8d4ad40941c22899dfab391657d842caa3673f5884862efb9559c8440af", 0x4a, 0x38}, {0x0, 0x81, &(0x7f0000002700)='+\x00', &(0x7f0000002740)="1b062b20df16aa3fb40a4a14e5186bfff227318654f9751dee30556af79d5330c4f7c259ba5dde7b0dab8dee1b72c1ad50c7f6404938cc3aac607618309201e876d4992872e5db49891eb4c8e7a2f19aeef5", 0x52, 0x20}, {0x3, 0x5, &(0x7f00000027c0)='\x00', &(0x7f0000002800)="ce97f86122d5710fb298d29e85e87266683360b57b1d62b09ef603de07f5e45e39210bb8cbbc6cfb4553ac1228bce12efc1b430d8ee2de5826b62e715779c02b336794f5933b131e563d6b6bd4d0eb5c89a41de580abb1e04c71dfe2686f648838cb181ed147b1eddcc9cb2d3dc1a0d034becbd3486cf27516205ac7866b4aab6cd5ae88bb4236819df231fba50276518ba3c69ffbcaa756c7abdd839306f64d974169e173189adb483a7b30463ae88edc47d86d68f5defc9d519ba1d07e2dbdad75523363592f", 0xc7}, {0x1, 0xfffffffd, &(0x7f0000002900)='broute\x00', &(0x7f0000002940), 0x0, 0x10}, {0x2, 0xffff, &(0x7f0000002980)='\x00', &(0x7f00000029c0)="1f9df06047294ec952d5a0619ff89340a8463a5cfd645c837fdf5e5c551306f6285d4ee0e3651def82fa88ca384c0f8270389b74d4c1817b1e3248f236ef9e120d690b90bcc96861ec0cfb803ea7236c639549027f09175b3e3d738a8e10e2c8ad6311209d434aae9e48", 0x6a}, {0x2, 0x2, &(0x7f0000002a40)='\x00', &(0x7f0000002a80)="bdf1422b33cf6e89fca183f1a6b80e6f6d4fc7530c15c75d9d4b365650f3e191b4b97b842a19e07fa83ab616cf9764e91431c076893fb353839b8cf58e12463bdde119fbee621bafa12f7380259f3687d3a490b29cb8537404f47a7cabffd076671c87437a227e45d84374b6050f640b8800dd709a88d44f89a66f66f506c4bd24b0e3ca6c55d145709b7a1b70d020f5e21cdd6df41fda06a9d3a73a742c42bac845fcd2e7f4f1095e977690c6f402afb444d620b50f70e5723509dccefed8de9dd2c17f0b8285dcbd1d99118c045483639507e21aa9d47a5b9688bf59a36c59fcda01251ab735084ac1dbb8", 0xec, 0x2}]}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xd588761f4af982ef}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x8804) ioctl$sock_proto_private(r9, 0x89e6, &(0x7f0000002e80)="ab7649d9654b67") (async) ioctl$sock_proto_private(r9, 0x89e6, &(0x7f0000002e80)="ab7649d9654b67") bind$llc(r10, &(0x7f0000002ec0)={0x1a, 0x0, 0x2, 0x5, 0x5, 0x6, @random="f344bf74fd63"}, 0x10) accept$nfc_llcp(r6, &(0x7f0000002f00), &(0x7f0000002f80)=0x60) (async) r12 = accept$nfc_llcp(r6, &(0x7f0000002f00), &(0x7f0000002f80)=0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000002fc0)={'vxcan0\x00'}) 3m36.940015559s ago: executing program 4 (id=12978): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x3, 0x401}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 3m36.794640302s ago: executing program 4 (id=12979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000104ffb0000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4000000) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000080000009500000000000000733a22c8e03c45ddfd9a6e11025496fed3bfefcfea7c1f13586532a240dca8be2a9a87384667631e07cb65a2495f9670d699777f4235f3505e81b0c2da7806f82ef792287d951b876949f244554cd169d044e75e9018f2375ceb797f4d85ff3fa17cc095aecdfe60998cee4d10a2271cc4d0bc7a12f23280a8193159b54bc56eeff46f14619b211f42485f9f317b17eb9b53875279333d6048833a114efe31e34c806f6e10c8009bbeb09471f36e0e7b0ba3ae8857d23646b392d730dba5381bcbb2a8836948c15e355b008000"/230], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet6(r2, &(0x7f0000003600)=[{{&(0x7f00000006c0)={0xa, 0x4e22, 0x5, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000ff000000001800000000"], 0x30}}], 0x1, 0x880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0xa, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="03000e301bd4d200003708000000000000090000000078133ebf7634865ba2b7fec6bafac04f2b14a949d3e79c83bea83f9acd6c12e1becdc8b948808f7d8b999858c802be6ae4a44a46149c66aadfd0bac0b09f2e2e2a3152ef149e34e9f29b912e06cd5313e2f3bf146741836f6ef339f4411ec5c99d0292d7656069d9769519602a14e1f3ae0ce6e1558958206195479bfca9005e81abbb0b405af54931357298"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m36.587542964s ago: executing program 4 (id=12982): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0xa, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000180)=""/74, &(0x7f0000000340)=0x4a) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40000007f8fc74cd7ff45d17c6ca52de43b2e686ad01f81edce82508eeb3b8e3e9a95b7fb498984c76cf669849fb86f52da6a19cf2d05745ebe19da285a9870d6a1faabaf017cb8716ad00de4df5a4e2f849cf39a39bf69ea81e88150c22036925fa3a612f1d9f580d466f2f15a918c406cb703e29f498c545b9dcab9b0ea45c3d58e99373ab8ddb8881b752a3881f019ad8e26786155d7d36800645c621cffe356b4119567e630041614a7dd76040b5beb0df50da944e49f57a083deca9f652429da60b2100f37f4186bea1eb402607aa100"/220, @ANYRES16=r5, @ANYBLOB="00022abd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000080001007063690011000200303030303a30303a31302e300000000015008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000"], 0xf4}}, 0x20040840) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 3m35.793799879s ago: executing program 4 (id=12990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4000005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r3) 3m20.754489801s ago: executing program 32 (id=12990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4000005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r3) 2m30.30575746s ago: executing program 0 (id=13525): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc04c065}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700ff02000000000000000000000000000114000600fe80000000000000000000000000003508000100", @ANYRES32=r0, @ANYBLOB="08000400"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700ff02000000000000000000000000000114000600fe80000000000000000000000000003508000100", @ANYRES32=r0, @ANYBLOB="08000400"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020208000c0005a1010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000001000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c000280080002400000000208000340"], 0x80}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 2m29.808513364s ago: executing program 0 (id=13531): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={@_ha_fsid={[0x4, 0x9]}, {0xfffe, 0x9, 0x9, 0x7}}, 0x32e, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x6, 0x1, 0xfff, 0xa, 0x8, 0x1d, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec00"}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={@_ha_fsid={[0x4, 0x9]}, {0xfffe, 0x9, 0x9, 0x7}}, 0x32e, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) listen(r1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) (async) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x6, 0x1, 0xfff, 0xa, 0x8, 0x1d, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec00"}) (async) 2m29.742284173s ago: executing program 0 (id=13532): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)={[{0x2d, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'pids'}, {0x2b, 'perf_event'}]}, 0x28) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x40040, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r5}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000240)={r0, &(0x7f00000000c0)='\x00', 0x40, &(0x7f0000000180)={@_ha_fsid={[0xb3, 0x5]}, {0x4, 0x3, 0x800000, 0x1}}, 0x100, &(0x7f00000001c0), &(0x7f0000000200)=0x6}) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0xfffe, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xcd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000c540)=[{0x0}, {&(0x7f000000b540)="920ca227df656121a7da9d", 0xb}], 0x2}, 0x20000890) ppoll(&(0x7f0000000280)=[{r8, 0x1}, {r2, 0x224d}, {r2, 0x40c0}], 0x3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000140)={0x4}) 2m28.661180786s ago: executing program 0 (id=13540): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000c80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000c00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x70e8ebb10bdd241}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xb613}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x84}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xd9bc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000005}, 0x4001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000c80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000c00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x70e8ebb10bdd241}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xb613}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x84}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xd9bc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000005}, 0x4001) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) 2m28.441381585s ago: executing program 0 (id=13541): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$inet(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000680)="d1d65d6c73513e590a50ec25303b1b5b6477ec6be713b24ed292a51f8d34c4b972327163e7a9ade8107ce8dc2f23b559e7b513b6e605d193f1c915412457db5678c73cd7b8af9d36c890f795dda56a87d17739938dd9146badf485ebd4545ec4213f5479ff09cd4d9b89491ea835df4e94428318fe5874eb0cf1b4eb51c8bd9e150eae3415885116b1b1a6b52575bdfea5c36437b20e290d1d422550c44312bd3d4d40760269b5de03628fc1c94954d80f4be2737476cb0db7c18bbc42acb20d5ede7e10584254a37c32e9895d1cd928179da8a66d22ee5dd678f1f7f8fd9a00cc17799c55e9df158cba4ae989abc352fe54311baac9ce86fb049ca662812ee7ebb5d8edcccee9a28bbf28bd0b40b1b51a528dc88e17f454cbf573d7146340a3cd333e395fe8593b65c42e7977df0a26adc556890d528d67edea276f3ea6ab892a7e7500bc48aa7e08639aae5ff0d93ab7cb6d024a7cae6ca768d7713a76aa37d228146fdfbc60d9f5603b6859f0184fd08fbb89", 0xffffff52}, {0x0}], 0x2}, 0x404c0c4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 2m28.303778841s ago: executing program 0 (id=13542): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0x98) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000040)={0x4, &(0x7f0000004c40)=[{@none}, {}, {}, {@none}]}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m13.14505864s ago: executing program 33 (id=13542): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000080) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0x98) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000040)={0x4, &(0x7f0000004c40)=[{@none}, {}, {}, {@none}]}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.448913572s ago: executing program 5 (id=14781): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00'}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x1, 0x343, {{0x3f, 0x4, 0x3, 0x2, 0xfc, 0x67, 0x0, 0x63, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x2c, 0x66, 0x0, 0x3, [0xe, 0x1, 0x9, 0x6, 0x7fff, 0x10001, 0x7, 0xa, 0x4, 0x6]}, @end, @end, @lsrr={0x83, 0x17, 0x53, [@multicast2, @empty, @loopback, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0xc, 0x1d, 0x0, 0x7, [0x6, 0x401]}, @timestamp={0x44, 0x10, 0xc6, 0x0, 0x6, [0x1, 0xc01c, 0x35]}, @cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}, @cipso={0x86, 0x6b, 0x0, [{0x5, 0x10, "10b57bbe5a6bec7cc0a57ee8e6ae"}, {0x7, 0xf, "44fda29eb1c7e1ab6bccf019bd"}, {0x7, 0x11, "94e0dbfdd7e64cbffb09e163bf3917"}, {0x0, 0xb, "8d9ceb8110608a2701"}, {0x6, 0x7, "afd2da7721"}, {0x7, 0x6, "d57391d3"}, {0x6, 0xe, "7a0fa36146e05ad8bc692130"}, {0x5, 0x2}, {0x6, 0xd, "303167249f74d266ae5601"}]}, @timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x0, [{@private=0xa010100, 0x6}, {@private=0xa010100, 0x6}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@delchain={0x44, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ffa, 0xf}, {0x5, 0xa}, {0xf, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x13d9ad696e72040d}, 0x0) 3.245256636s ago: executing program 5 (id=14785): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0xc00) bind$llc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x101, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x16, 0x4, 0x1, 0x38, 0xf3, 0x67, 0x0, 0x9, 0x11, 0x0, @local, @multicast2, {[@noop, @generic={0x89, 0x4, "19c1"}, @timestamp_prespec={0x44, 0x3c, 0x16, 0x3, 0x1, [{@rand_addr=0x64010102, 0x588}, {@broadcast, 0x1000}, {@remote, 0x5}, {@remote, 0x20}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x3000}, {@loopback, 0x6}]}]}}, {0x4e24, 0x4e20, 0x9b, 0x0, @opaque="290b9c78c4adcbfd6fe804dc25f8ac217faf0c62cffad496dff3b2a8464c100a4f462e46470240401768084737310df6173e81b5738fe00662475c6a2eebacaffb7ea06cd5184376107c6e054b014a39a88b96b61e2a0d3885a73fb813ebe021e81eee1fe066f67b746b374e36f79154adcdd52f051b88044b8a948e2e02bec78ea76c5f1f704a7b8a64cb463c5c3311170877"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x4, 0xfffc}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) 2.860895718s ago: executing program 5 (id=14789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x8000, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002940)={r0, &(0x7f00000028c0), 0x0}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 2.76902003s ago: executing program 5 (id=14792): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007ffffffef0000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.552251914s ago: executing program 1 (id=14795): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x100010, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000003c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x140d, 0x100, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f00000000c0)=[@iv={0x28, 0x117, 0x2, 0x10, "be70221c76eae0445dfbda0935edf985"}], 0x28}], 0x1, 0x40800) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000000)={@dev, @initdev, @multicast2}, &(0x7f0000000580)=0xc) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000190000540000005400bed7d01d0000070000000f0000000000000c010000000f00000004000013060000000b00000000000000ffffffff0a000000000000000900000001000000af7d00000500000002000000070000000400000009000000000000120400000000003000003000199feed4cc2e1d75aba1a48ba9e53b957889a34d7ad1d2b5c97cbc904b7889cd8529c33206d4b1ab0f2105cece4dc5e80cbeeb81c6eecc7bbb4778779be51623992811c7bb75677d8aabe74bf24cf58bffe6017999991878d4d4"], &(0x7f0000000180)=""/176, 0x73, 0xb0, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0xc0000000, 0xfff, 0x10000, 0x80, r1, 0x4, '\x00', r8, r9, 0x3, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) 2.212377229s ago: executing program 5 (id=14800): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x400400c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7fffff8}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xa0, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendfile(r5, r6, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_tcp(0x2, 0x1, 0x0) 2.124682763s ago: executing program 6 (id=14802): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x1d0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0xfffffff8, 0x4) 1.89235156s ago: executing program 2 (id=14805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000feffffff07000000290000009500000000200000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2106ca004000000002000000020000cbff174500ea38f9b4aa9c63cb46", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) (async) r2 = socket(0x10, 0x3, 0x5) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) unshare(0x400) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r4, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r10, {0xb, 0x6}, {0x10, 0x9}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) writev(r13, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESDEC=r6], 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) (async) r14 = socket$inet(0x2, 0x800, 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r14, 0x0, 0x43, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 1.891317707s ago: executing program 6 (id=14807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = socket$inet6(0xa, 0x6, 0x3) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) r10 = socket(0x10, 0x809, 0x8) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x1c, 0x0, 0x0, @binary="96"}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r11, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10) 1.698906409s ago: executing program 3 (id=14808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e4000000070000000100000000000002040000000b000000000000090100000008000000016ef67d81b9685ef50000840069000009000000010000ff070000000b0000000700009304000000070000000d040000000000000c0000000300000007000000030000000e000000010100000f00000000000000090000000a00000001000000266700000300000000000000050000000c0000000300000003000000040000000000000e050000000100000003000000000000010000000015006407100000000000000a040000000400000000000009000000000b00000000000001000000002d0057050e0000000000000a030000"], 0x0, 0x103, 0x0, 0x0, 0x8}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000090000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="d20500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r5}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x1, 0x2, 0x8, 0x1, 0x200, 0x6}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x1fce000, 0x1ff, 0x7b7e, 0xc0, 0xa, 0x401, 0x4, 0x6, 0x0, 0xd3d, 0x6, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea7, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x3, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x5, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x47, 0x85ff, 0x4, 0x0, 0x964f, 0x5f, 0xfffffffd, 0x1, 0x8d5f, 0x4, 0x6, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x80, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xf1, 0x401, 0x80000000, 0x80000001, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0x400, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x9, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x6, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x49a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x19, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x7ba, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x7fff, 0x0, 0x3, 0x5, 0x5, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0x6, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0xb, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0xff, 0x1, 0xe, 0x9, 0x2, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x6, 0x7, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x9, 0xffffffff, 0x0, 0x5ae, 0x3, 0x2, 0x4, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x3, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0xfffffffd, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x6, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x4, 0x82, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x7, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0x5, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0xffffffff, 0x5, 0x7, 0x4, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0x7, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x9, 0x2, 0x0, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x5, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xb1, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x6, 0x0, 0xb, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d9, 0x101, 0x9, 0x8, 0x5, 0x6, 0x8, 0x7, 0x0, 0x57, 0x8, 0x7, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x6, 0x401, 0x0, 0xfae, 0xb6, 0x7, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0xff, 0x6cb7db37, 0x4, 0x2, 0x7, 0x1, 0x2, 0x4, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfd8, &(0x7f0000001e00)=""/4056, 0x41000, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=r12, @ANYRESHEX=r12, @ANYRESOCT=r12], 0x64}}, 0x40004) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r14}, 0xc) 1.654303851s ago: executing program 1 (id=14809): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 1.493235413s ago: executing program 2 (id=14810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x3}, 0x2000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 1.322875538s ago: executing program 2 (id=14811): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc8c0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000002c0)={r2, &(0x7f0000000080)=')!\x00', 0x2, &(0x7f0000000200)={@align=0x8, {0xffff, 0x6, 0x9, 0x7fffffffffffffff}}, 0x6, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2b) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000400)) (async) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0x2, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x1, 0x3a296951}, {0x10, 0x4, 0x7}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x41, 0x0, 0xfffffffd, 0x4b}, 0x28) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 1.257535861s ago: executing program 3 (id=14812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xfffffffc}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004005) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x0, 0xa, 0x6, 0xc, 0xfffffffffffffff0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5b}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xb}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x8005) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/25, @ANYRES16=0x0, @ANYBLOB="0c809900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) 1.097156129s ago: executing program 5 (id=14813): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r0, r1, 0x0, 0xffffffff000) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) (rerun: 32) 871.084148ms ago: executing program 6 (id=14814): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x28, r0, 0x801, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}, 0x28}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d433fffe800000000000000000000000000010ff02000000000000000000000000000188"], 0x340a) 821.437961ms ago: executing program 3 (id=14815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800010029bd3000fcdedf251d01010008000e", @ANYBLOB="150004000400000007020000918a76e1efa1"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000440)=""/63, &(0x7f0000000480)=0x3f) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xd, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xde, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000d6000000000000000000000085000000c20000109500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) 740.536462ms ago: executing program 2 (id=14816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3ff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000080), 0x4) 681.837684ms ago: executing program 3 (id=14817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x8d, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004003e000000000000000000850000002f000002850000007d0000009500000000fdff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004003e000000000000000000850000002f000002850000007d0000009500000000fdff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0xfffffffffffffe29, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) 605.848783ms ago: executing program 1 (id=14818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="40682918e82dc87f335942139292b182245bc884f2468af7c47949c69ce3f14d6fc520b138ba70a6a8bc8937b395102e7be7375084734961e45f36edfb93a94f3b7f864a6639d35891d4f0a034f742fcf00c2a3eb88e5495cf86c63f9d8927e00d95f08966c726391f8a2aa115f0b13e58c69fe2f7db2009a88d55d0450063ac7dceaae12bbb221b5c5749ccebef1d5af4fd005b333bf9cc44db8e43e68f4b827af9417b5a332ebfbc6e21ae0d628af3c06b47d3adb73e2d93b9de498689607152999703dbeb87aa575e1b", 0xcb}], 0x1}, 0x4830) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08003f0086"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000001140)={0x1, 0x4, 0x8, 0x3, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 604.552878ms ago: executing program 2 (id=14819): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x8d3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x107da6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0x80000001, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)) 396.820551ms ago: executing program 1 (id=14820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x4a}, 0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x604, 0x61}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000000000000000000000000000000000400000000000002b3708f17615c960f078552e40ca48663ff203a8aa7bfeabc8794229a890d578000b6621a22aef427ec78ce4d7548146572e1fd1227b4ec888ecfc8e373f2dd5975fe005c3b5b4df49a400a60c860687456cf9ae61a77b9cceabf693438f5ec303d7dcf5899e0cdfee556e3513e862622f78117817086f94978d566f5015a3365aac722e73e316d7e2ee0a614"], &(0x7f00000009c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r5, 0x1, 0xe, 0x0, &(0x7f0000000a40)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000003c0012800b000100697036746e6c00002c00028008000100", @ANYRES32=r8], 0x5c}}, 0x0) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b78", 0x22, 0x0, &(0x7f0000000040)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x14) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r10, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 394.38172ms ago: executing program 2 (id=14821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair(0x1e, 0x4, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'tunl0\x00', {0x2}}) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="2f825f669ccd"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket(0x10, 0x3, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}, [@TCA_NETEM_CORR={0x10, 0x1, {0xff, 0x7, 0x8}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400c1}, 0x40) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 393.442297ms ago: executing program 6 (id=14822): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x38, 0x1, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8, 0x1, 0x4}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000240)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x10004000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r1, @ANYRES64=r4, @ANYRES16=r6], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) 291.003486ms ago: executing program 6 (id=14823): unshare(0x6020400) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, r1, 0xb, 0x5}, 0x20) 225.388933ms ago: executing program 3 (id=14824): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4002050) 217.057004ms ago: executing program 1 (id=14825): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xf, &(0x7f0000002cc0)=ANY=[@ANYBLOB="18000000001811000000a8000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f0000001b40)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8a, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r3, 0x2f, 0x0, 0x0, @void, @value=r4}, 0x20) 184.59022ms ago: executing program 3 (id=14826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) close(r1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/124, 0x7c}], 0x5, &(0x7f0000000ac0)=""/184, 0xb8}, 0x20000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4048004) 125.028689ms ago: executing program 1 (id=14827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x6}, @void, @mpls={[{0x7, 0x0, 0x1}, {}, {0x200}, {0x1, 0x0, 0x1}, {0x5e, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}], @ipv4=@generic={{0x10, 0x4, 0x3, 0x6, 0xb2, 0x67, 0x0, 0xff, 0x84, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x26, [@local, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0xb, 0x9a, [@empty, @dev={0xac, 0x14, 0x14, 0x39}]}, @generic={0x0, 0xf, "364dfbbbc2ef8f01048d2af93a"}]}}, "6ada1a3ad43c5d05d2f681752db7fbe7c79994090a4f359951d8d28f8d65110376da8aba166773ed4b955ea8e8558bed05888fd9fcf31e4318296caa8198e404b9ea9cd14dc0a7f338ef3c75036b0b0459b0ae7e3f196e4b0d6c2ae4b7d2eaecbdbf4de6ea45c8a222c9b792e5d578c5f617"}}}, 0xd2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) close(0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) shutdown(r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c08000340000000000800044000000000050002000700000008000540000000010900010073797a30"], 0xdc}}, 0x0) 0s ago: executing program 6 (id=14828): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x40004}}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x2c, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@nested={0x8, 0x59, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) kernel console output (not intermixed with test programs): 295': attribute type 1 has an invalid length. [ 1743.489755][T25050] bond5: entered promiscuous mode [ 1743.495460][T25050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1743.658873][T25057] bond5: (slave bridge4): making interface the new active one [ 1743.689821][T25057] bridge4: entered promiscuous mode [ 1743.720095][T25057] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1743.762359][T25065] netlink: 'syz.3.13295': attribute type 3 has an invalid length. [ 1744.085669][T25085] syz_tun: entered promiscuous mode [ 1744.337993][T25096] Bluetooth: MGMT ver 1.23 [ 1744.349504][T25094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13303'. [ 1745.354424][T25087] lo speed is unknown, defaulting to 1000 [ 1745.534422][T25104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.739943][ T6911] IPVS: starting estimator thread 0... [ 1745.842188][T25140] IPVS: using max 25 ests per chain, 60000 per kthread [ 1746.274069][T25087] lo speed is unknown, defaulting to 1000 [ 1746.327214][T25101] lo speed is unknown, defaulting to 1000 [ 1747.385169][T25138] lo speed is unknown, defaulting to 1000 [ 1747.851517][T25101] lo speed is unknown, defaulting to 1000 [ 1747.893610][T25138] lo speed is unknown, defaulting to 1000 [ 1748.938753][T32192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.954429][T25209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13323'. [ 1749.084271][T25196] lo speed is unknown, defaulting to 1000 [ 1749.583394][ T7955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.625827][T25222] atomic_op ffff888086c53998 conn xmit_atomic 0000000000000000 [ 1749.634461][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13327'. [ 1749.671008][T25222] bond6: option broadcast_neighbor: invalid value (30) [ 1749.681560][T25222] bond6 (unregistering): Released all slaves [ 1749.705139][T25181] lo speed is unknown, defaulting to 1000 [ 1749.705164][T25196] lo speed is unknown, defaulting to 1000 [ 1750.045221][T25181] lo speed is unknown, defaulting to 1000 [ 1750.249852][T25236] vlan3: entered promiscuous mode [ 1750.748221][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13334'. [ 1751.122002][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13335'. [ 1751.131302][T25254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13335'. [ 1751.954850][T25292] netlink: 'syz.3.13346': attribute type 9 has an invalid length. [ 1751.963414][T25290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1751.969147][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13347'. [ 1751.988476][T25292] netlink: 'syz.3.13346': attribute type 11 has an invalid length. [ 1751.997860][T25292] netlink: 'syz.3.13346': attribute type 12 has an invalid length. [ 1752.008925][T25292] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.13346'. [ 1752.036478][T25292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13346'. [ 1752.098931][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13348'. [ 1752.159866][T25301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13350'. [ 1752.225863][T25303] nbd: must specify at least one socket [ 1752.378246][T25310] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1752.406293][T25315] netlink: 'syz.1.13351': attribute type 1 has an invalid length. [ 1752.433214][T25310] bond5: left promiscuous mode [ 1752.445196][T25310] bond6: left promiscuous mode [ 1752.481225][T25314] pim6reg1: entered promiscuous mode [ 1752.516740][T25314] pim6reg1: entered allmulticast mode [ 1752.788434][T25329] dvmrp0: entered allmulticast mode [ 1752.822383][T25338] netlink: 'syz.1.13361': attribute type 1 has an invalid length. [ 1752.830373][T25338] netlink: 'syz.1.13361': attribute type 2 has an invalid length. [ 1752.855709][T25338] vlan0: entered promiscuous mode [ 1752.862881][T25338] batadv0: entered promiscuous mode [ 1753.053973][T25346] SET target dimension over the limit! [ 1753.462838][T25360] siw: device registration error -23 [ 1753.507340][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.516074][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.526248][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.545818][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.556456][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.573622][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.602745][T25362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.684801][T25365] tipc: Enabling of bearer rejected, failed to enable media [ 1753.990203][T25383] netlink: 'syz.2.13375': attribute type 10 has an invalid length. [ 1754.053253][T25386] "syz.2.13375" (25386) uses obsolete ecb(arc4) skcipher [ 1754.070297][T25386] sctp: [Deprecated]: syz.2.13375 (pid 25386) Use of int in maxseg socket option. [ 1754.070297][T25386] Use struct sctp_assoc_value instead [ 1754.091062][T25386] __nla_validate_parse: 13 callbacks suppressed [ 1754.091083][T25386] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13375'. [ 1754.109196][T25388] IPVS: Error connecting to the multicast addr [ 1754.124015][T25388] wg2: entered allmulticast mode [ 1754.168241][T25394] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003 [ 1754.219927][T25398] ip6t_REJECT: ECHOREPLY is not supported [ 1754.335974][T25364] net_ratelimit: 267 callbacks suppressed [ 1754.335998][T25364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.362409][T25364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.794599][T25428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13388'. [ 1755.198725][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13391'. [ 1755.311577][T25439] syzkaller0: entered promiscuous mode [ 1755.319318][T25439] syzkaller0: entered allmulticast mode [ 1755.326929][T25441] hsr0: entered promiscuous mode [ 1755.372439][T25445] hsr_slave_0: left promiscuous mode [ 1755.423984][T25445] hsr0 (unregistering): left promiscuous mode [ 1755.917221][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13394'. [ 1757.876880][T25456] netlink: 'syz.3.13394': attribute type 2 has an invalid length. [ 1757.892402][T25456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13394'. [ 1758.098879][T25475] ip6erspan0: entered allmulticast mode [ 1758.120347][T25474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13398'. [ 1758.241905][T25487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13401'. [ 1758.330441][T25491] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1758.738948][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13406'. [ 1758.749338][T25512] netlink: 'syz.1.13411': attribute type 1 has an invalid length. [ 1758.780156][T25514] ipvlan2: entered promiscuous mode [ 1758.810377][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13406'. [ 1758.836566][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13406'. [ 1758.961312][T25517] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1758.983926][T25517] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1759.133137][T25520] bond7: (slave gretap1): making interface the new active one [ 1759.161227][T25520] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1759.208858][T25512] macvlan3: entered promiscuous mode [ 1759.222667][T25512] macvlan3: entered allmulticast mode [ 1759.230660][T25512] bond7: entered promiscuous mode [ 1759.236244][T25512] gretap1: entered promiscuous mode [ 1759.253425][T25512] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1759.276595][T25512] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1759.290510][T25512] bond7: left promiscuous mode [ 1759.297053][T25512] gretap1: left promiscuous mode [ 1759.336162][T25524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.356117][T25524] bridge_slave_0 (unregistering): left allmulticast mode [ 1759.364212][T25524] bridge_slave_0 (unregistering): left promiscuous mode [ 1759.371361][T25524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.519330][T25543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13418'. [ 1759.556212][T25549] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13419'. [ 1759.574201][T25549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1759.585753][T25549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.606537][T25549] bond0 (unregistering): Released all slaves [ 1760.142326][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13427'. [ 1760.697367][T25569] macvtap0: entered promiscuous mode [ 1760.867332][T25586] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma? [ 1760.881388][T25586] netlink: 'syz.3.13429': attribute type 3 has an invalid length. [ 1760.998576][T25592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13432'. [ 1761.022167][T25592] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13432'. [ 1761.092488][T25581] netlink: 95 bytes leftover after parsing attributes in process `syz.1.13428'. [ 1761.133533][T25590] tipc: Resetting bearer [ 1761.144372][T25586] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1761.227511][T25600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13434'. [ 1761.371779][T25611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13435'. [ 1761.487971][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.605239][T25619] netlink: 'syz.1.13439': attribute type 2 has an invalid length. [ 1761.618054][T25620] sctp: [Deprecated]: syz.3.13440 (pid 25620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1761.618054][T25620] Use struct sctp_sack_info instead [ 1761.632337][T25619] netlink: 'syz.1.13439': attribute type 2 has an invalid length. [ 1761.941072][T25601] lo speed is unknown, defaulting to 1000 [ 1762.149396][T25638] syzkaller0: entered promiscuous mode [ 1762.156047][T25638] syzkaller0: entered allmulticast mode [ 1762.545201][T25651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.554743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.579042][T25650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.580749][T25637] lo speed is unknown, defaulting to 1000 [ 1762.590508][T13625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.606253][T25601] lo speed is unknown, defaulting to 1000 [ 1762.606671][T25650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.652570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.088826][T25637] lo speed is unknown, defaulting to 1000 [ 1763.095665][T25663] siw: device registration error -23 [ 1763.514535][T25688] delete_channel: no stack [ 1763.541268][T25688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13459'. [ 1763.699746][T25688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1763.797115][T25689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13459'. [ 1765.158121][T25728] syzkaller0: entered promiscuous mode [ 1765.172554][T25728] syzkaller0: entered allmulticast mode [ 1765.740280][T25759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13472'. [ 1765.750197][T25759] netlink: 'syz.0.13472': attribute type 11 has an invalid length. [ 1767.793400][T25749] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1767.803924][T25749] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1767.816014][T25749] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1768.048967][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13475'. [ 1768.263835][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13479'. [ 1768.741558][T25752] lo speed is unknown, defaulting to 1000 [ 1768.813340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.518844][T25752] lo speed is unknown, defaulting to 1000 [ 1769.890813][T25843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.090593][T25829] lo speed is unknown, defaulting to 1000 [ 1770.681219][T25873] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13500'. [ 1770.822486][T25829] lo speed is unknown, defaulting to 1000 [ 1770.823388][T25883] netlink: ct family unspecified [ 1770.834824][T25883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1770.871886][T25883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1770.890483][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13503'. [ 1771.055229][T25887] team1: entered promiscuous mode [ 1771.061323][T25887] team1: entered allmulticast mode [ 1771.068872][T25887] 8021q: adding VLAN 0 to HW filter on device team1 [ 1771.686999][T25917] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13511'. [ 1772.238553][T25952] netlink: 'syz.0.13518': attribute type 15 has an invalid length. [ 1772.323338][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13519'. [ 1772.364773][T25953] netlink: 'syz.5.13519': attribute type 30 has an invalid length. [ 1772.525930][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13519'. [ 1772.537293][T25953] netlink: 'syz.5.13519': attribute type 30 has an invalid length. [ 1772.586288][T19828] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.619301][T19828] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.656119][T19828] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.685857][T19828] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.785286][T25973] netlink: 2076 bytes leftover after parsing attributes in process `syz.3.13523'. [ 1772.828384][T25973] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 1772.834648][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13524'. [ 1772.945612][T25975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1773.111265][T25984] ip6gretap1: entered allmulticast mode [ 1773.148657][T25986] geneve2: entered promiscuous mode [ 1773.215170][T19830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.243626][T19830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.254336][T25988] netlink: 'syz.0.13525': attribute type 9 has an invalid length. [ 1773.262516][T25988] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.13525'. [ 1773.310836][T25965] lo speed is unknown, defaulting to 1000 [ 1773.317072][T19830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.332258][T19830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.835828][T26015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13534'. [ 1773.878909][T25990] lo speed is unknown, defaulting to 1000 [ 1773.888870][T25965] lo speed is unknown, defaulting to 1000 [ 1774.220380][T26021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.375295][T26031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13539'. [ 1774.387716][T26021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.423507][T25990] lo speed is unknown, defaulting to 1000 [ 1774.535398][T26021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.553672][T26034] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1774.615906][T26032] syzkaller1: entered promiscuous mode [ 1774.621723][T26032] syzkaller1: entered allmulticast mode [ 1774.665605][T26036] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1774.771912][T26021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.978863][T26043] netlink: 'syz.0.13542': attribute type 10 has an invalid length. [ 1775.086318][T19824] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.248765][T26045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1775.306052][T26045] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13542'. [ 1775.356453][T26048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1775.441792][T26050] vlan1: entered allmulticast mode [ 1775.456999][T26050] bond0: entered allmulticast mode [ 1775.467543][T19832] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.573607][T26056] netlink: 'syz.5.13546': attribute type 1 has an invalid length. [ 1775.581651][T19832] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.631363][T26056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1775.648912][T19828] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.708087][T26056] bond2 (unregistering): Released all slaves [ 1776.419481][T26102] netlink: 'syz.1.13558': attribute type 1 has an invalid length. [ 1776.526700][T26102] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1776.678754][T26105] bond8: (slave veth11): Enslaving as an active interface with a down link [ 1776.701384][T26076] lo speed is unknown, defaulting to 1000 [ 1776.741182][T26110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1776.758839][T26110] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1777.115420][T26076] lo speed is unknown, defaulting to 1000 [ 1777.120626][T26075] lo speed is unknown, defaulting to 1000 [ 1777.547174][T26126] pim6reg99999991: entered allmulticast mode [ 1777.664856][T26075] lo speed is unknown, defaulting to 1000 [ 1777.700213][T26107] lo speed is unknown, defaulting to 1000 [ 1778.330420][T26107] lo speed is unknown, defaulting to 1000 [ 1778.609165][T26132] __nla_validate_parse: 3 callbacks suppressed [ 1778.609188][T26132] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13564'. [ 1779.628515][T26157] netlink: 'syz.5.13570': attribute type 33 has an invalid length. [ 1779.636717][T26157] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13570'. [ 1779.666031][T26157] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13570'. [ 1780.233606][T26177] pim6reg1: entered promiscuous mode [ 1780.239004][T26177] pim6reg1: entered allmulticast mode [ 1780.272348][T26163] lo speed is unknown, defaulting to 1000 [ 1780.276391][T26180] x_tables: unsorted entry at hook 2 [ 1780.311773][T26182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.355606][T26182] bridge0: entered allmulticast mode [ 1780.382403][T26182] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1780.715112][T26195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.727812][T26163] lo speed is unknown, defaulting to 1000 [ 1780.753477][T26200] netlink: 'syz.2.13581': attribute type 21 has an invalid length. [ 1780.905271][T26207] netlink: 'syz.3.13582': attribute type 4 has an invalid length. [ 1780.922360][T26207] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13582'. [ 1781.030439][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13584'. [ 1781.087191][T26211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.369147][T26214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13585'. [ 1781.380494][T26214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13585'. [ 1781.421021][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13585'. [ 1781.432229][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13585'. [ 1781.475604][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13585'. [ 1782.246922][T26245] netlink: 'syz.2.13591': attribute type 11 has an invalid length. [ 1782.465145][T26252] netlink: 'syz.2.13593': attribute type 3 has an invalid length. [ 1782.473886][T26252] netlink: 'syz.2.13593': attribute type 3 has an invalid length. [ 1782.957842][T26274] macsec1: entered promiscuous mode [ 1782.971313][T26274] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1783.113190][T26288] xt_limit: Overflow, try lower: 324382443/0 [ 1783.413661][T26300] veth5: entered promiscuous mode [ 1783.423304][T26302] syzkaller1: entered promiscuous mode [ 1783.428834][T26302] syzkaller1: entered allmulticast mode [ 1783.537466][T26280] lo speed is unknown, defaulting to 1000 [ 1785.834542][T26314] __nla_validate_parse: 7 callbacks suppressed [ 1785.834558][T26314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13614'. [ 1785.854071][T26280] lo speed is unknown, defaulting to 1000 [ 1786.044941][T26326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13617'. [ 1786.155902][T26335] netlink: 'syz.3.13619': attribute type 3 has an invalid length. [ 1786.176082][T26335] netlink: 772 bytes leftover after parsing attributes in process `syz.3.13619'. [ 1786.190649][T26335] netlink: 'syz.3.13619': attribute type 3 has an invalid length. [ 1786.200077][T26335] netlink: 772 bytes leftover after parsing attributes in process `syz.3.13619'. [ 1786.364160][T26342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1786.587466][T26352] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1786.717026][T26354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1786.819252][T26359] xt_hashlimit: size too large, truncated to 1048576 [ 1786.943569][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13627'. [ 1787.300126][T26371] syzkaller0: entered promiscuous mode [ 1787.338618][T26371] syzkaller0: entered allmulticast mode [ 1787.357513][T26360] lo speed is unknown, defaulting to 1000 [ 1787.509804][T26382] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13633'. [ 1787.519383][T26382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13633'. [ 1787.529124][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13633'. [ 1787.619648][ T6918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.765296][T26360] lo speed is unknown, defaulting to 1000 [ 1787.774463][T26385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13634'. [ 1788.041657][T26397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.048840][T26397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.058461][T26397] bridge0: left allmulticast mode [ 1788.068381][T26397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1788.574798][T11525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.583810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.660065][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.748354][T26415] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1789.365475][ T9265] lec:lec_start_xmit: lec0:No lecd attached [ 1789.696380][ T6918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.212566][T26480] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1790.337285][T26490] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1790.348625][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1790.365901][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1790.374261][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1790.390162][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1790.399869][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1790.740424][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.888690][T26519] xt_hashlimit: overflow, try lower: 0/0 [ 1790.904596][T26520] xt_hashlimit: overflow, try lower: 0/0 [ 1791.001779][T26521] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.027958][T26494] lo speed is unknown, defaulting to 1000 [ 1791.083877][T26521] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.160644][T26521] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.238918][T26521] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.295139][T19829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.304345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.479396][T19830] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.554270][T19824] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.574765][T26535] __nla_validate_parse: 36 callbacks suppressed [ 1791.574786][T26535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13675'. [ 1791.639657][T19829] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.674094][T19829] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.732572][T26494] lo speed is unknown, defaulting to 1000 [ 1791.773194][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.832430][T26519] lo speed is unknown, defaulting to 1000 [ 1792.225303][T26494] chnl_net:caif_netlink_parms(): no params data found [ 1792.359126][T26519] lo speed is unknown, defaulting to 1000 [ 1792.502400][ T8260] Bluetooth: hci6: command tx timeout [ 1792.539826][T26539] lo speed is unknown, defaulting to 1000 [ 1792.547470][T26494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.561604][T26494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.585302][T26494] bridge_slave_0: entered allmulticast mode [ 1792.604217][T26494] bridge_slave_0: entered promiscuous mode [ 1792.647272][T26494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.658634][T26494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.667537][T26494] bridge_slave_1: entered allmulticast mode [ 1792.684822][T26494] bridge_slave_1: entered promiscuous mode [ 1792.747348][T26494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.761562][T26494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.816706][ T6910] net_ratelimit: 3 callbacks suppressed [ 1792.816721][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.824322][T26494] team0: Port device team_slave_0 added [ 1792.840199][T26539] lo speed is unknown, defaulting to 1000 [ 1792.843764][T26494] team0: Port device team_slave_1 added [ 1792.999031][T26494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.015460][T26494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.084745][T26494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.183528][T26494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.190531][T26494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.276919][T26494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.526169][T26494] hsr_slave_0: entered promiscuous mode [ 1793.579703][T26494] hsr_slave_1: entered promiscuous mode [ 1793.597176][T26494] debugfs: 'hsr0' already exists in 'hsr' [ 1793.615721][T26494] Cannot create hsr debugfs directory [ 1793.623678][T26579] netlink: 'syz.2.13685': attribute type 21 has an invalid length. [ 1793.649186][T26579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1793.660428][T26579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1793.860473][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.887600][T26585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13686'. [ 1794.061528][T26587] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.13688'. [ 1794.334728][T11525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.343155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.582793][ T8260] Bluetooth: hci6: command tx timeout [ 1794.896482][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.052185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 1795.060360][ C1] lec:lec_tx_timeout: lec0 [ 1795.065298][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1795.937057][ T6918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.352736][T26571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1796.362361][T26584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13687'. [ 1796.393001][T26494] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1796.415079][T19829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.423503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.475736][T26494] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1796.553217][T26494] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1796.561578][T26603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13694'. [ 1796.588661][T26494] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1796.631026][T26603] nbd: socks must be embedded in a SOCK_ITEM attr [ 1796.643774][T26612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13694'. [ 1796.657958][T26612] nbd: nbd64 already in use [ 1796.667313][ T8260] Bluetooth: hci6: command tx timeout [ 1796.822259][T26625] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13696'. [ 1796.867386][T26625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13696'. [ 1796.901576][T26625] netlink: 'syz.2.13696': attribute type 1 has an invalid length. [ 1796.936532][T26625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13696'. [ 1796.940333][T26494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.981989][T22998] udevd[22998]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1796.994161][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.047261][T26494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.078623][T19824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.085866][T19824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.113758][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13699'. [ 1797.136274][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13699'. [ 1797.204005][T19826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.211189][T19826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.368047][T26643] netlink: 27 bytes leftover after parsing attributes in process `syz.5.13701'. [ 1797.418330][T26648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13702'. [ 1797.504799][T26651] xfrm0: entered allmulticast mode [ 1797.521482][T26651] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1797.598881][T26651] pim6reg: entered allmulticast mode [ 1797.689430][T26664] xt_cluster: node mask cannot exceed total number of nodes [ 1797.845481][T26673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13708'. [ 1798.006443][T26494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.037998][T19830] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1798.585477][T26494] veth0_vlan: entered promiscuous mode [ 1798.610576][T26494] veth1_vlan: entered promiscuous mode [ 1798.658103][T26494] veth0_macvtap: entered promiscuous mode [ 1798.691161][T26494] veth1_macvtap: entered promiscuous mode [ 1798.732363][ T8260] Bluetooth: hci6: command tx timeout [ 1798.741191][T26494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.764519][T26679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1798.774085][T26683] netlink: 'syz.5.13709': attribute type 1 has an invalid length. [ 1798.777009][T26494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.781940][T26683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13709'. [ 1798.801960][T26683] netlink: 'syz.5.13709': attribute type 1 has an invalid length. [ 1798.848060][T26693] sctp: [Deprecated]: syz.3.13711 (pid 26693) Use of int in maxseg socket option. [ 1798.848060][T26693] Use struct sctp_assoc_value instead [ 1798.884988][T26712] sctp: [Deprecated]: syz.3.13711 (pid 26712) Use of int in maxseg socket option. [ 1798.884988][T26712] Use struct sctp_assoc_value instead [ 1799.020048][T26711] bond10 (unregistering): Released all slaves [ 1799.059738][T26688] lo speed is unknown, defaulting to 1000 [ 1799.103891][T26719] bond1: entered allmulticast mode [ 1799.109394][T26719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1799.161837][T19824] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.180509][T19824] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.226210][T19824] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.235256][T19824] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.468688][T26734] openvswitch: netlink: IP tunnel dst address not specified [ 1799.509408][T13625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.518074][T13625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.657147][T13625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.682720][T13625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.754263][T26688] lo speed is unknown, defaulting to 1000 [ 1799.854557][T26745] tipc: Enabling of bearer rejected, failed to enable media [ 1800.032161][T26732] lo speed is unknown, defaulting to 1000 [ 1800.092655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1800.100790][ C1] lec:lec_tx_timeout: lec0 [ 1800.137953][T26756] syzkaller0: entered promiscuous mode [ 1800.152294][T26756] syzkaller0: entered allmulticast mode [ 1800.456638][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.470120][T26732] lo speed is unknown, defaulting to 1000 [ 1800.486554][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.495609][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.505260][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.514126][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.541387][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.549972][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1800.559997][T26765] netlink: 'syz.6.13725': attribute type 1 has an invalid length. [ 1801.044385][T26780] bond0: entered promiscuous mode [ 1801.059744][T26780] bond_slave_0: entered promiscuous mode [ 1801.069112][T26780] bond_slave_1: entered promiscuous mode [ 1801.077804][T26780] batadv_slave_0: entered promiscuous mode [ 1801.086732][T26780] batadv_slave_0: left promiscuous mode [ 1801.092940][T26780] bond0: left promiscuous mode [ 1801.097831][T26780] bond_slave_0: left promiscuous mode [ 1801.103881][T26780] bond_slave_1: left promiscuous mode [ 1801.708486][ T29] audit: type=1800 audit(1775003988.298:36): pid=26791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13732" name="memory.events" dev="tmpfs" ino=597 res=0 errno=0 [ 1802.335201][T26809] veth2: entered allmulticast mode [ 1802.857257][T26828] xt_bpf: check failed: parse error [ 1803.088643][T26836] syzkaller0: entered promiscuous mode [ 1803.112420][T26836] syzkaller0: entered allmulticast mode [ 1803.137103][T26836] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1803.425188][T26823] lo speed is unknown, defaulting to 1000 [ 1803.496013][T26844] __nla_validate_parse: 7 callbacks suppressed [ 1803.496037][T26844] netlink: 165 bytes leftover after parsing attributes in process `syz.5.13746'. [ 1803.746129][T26858] tipc: Started in network mode [ 1803.781562][T26858] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1803.807113][T26858] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0106 [ 1803.826644][T26858] tipc: Enabled bearer , priority 26 [ 1804.166435][T26865] bond2: Unable to set down delay as MII monitoring is disabled [ 1804.184315][T26865] bond2 (unregistering): Released all slaves [ 1804.242094][T26823] lo speed is unknown, defaulting to 1000 [ 1804.411518][T26880] ip6erspan0: entered allmulticast mode [ 1804.679047][T26886] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1804.698968][T26886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1804.762726][T26886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1804.854332][T26897] syzkaller1: entered promiscuous mode [ 1804.880479][T26897] syzkaller1: entered allmulticast mode [ 1804.990197][ T6918] tipc: Node number set to 1 [ 1805.209891][T26903] dummy0: entered promiscuous mode [ 1805.242651][T26903] macsec1: entered promiscuous mode [ 1805.314652][T26903] dummy0: left promiscuous mode [ 1805.719766][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13766'. [ 1805.723297][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13767'. [ 1805.751981][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13766'. [ 1806.019858][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13766'. [ 1806.110142][T19830] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1806.817444][T26927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1807.066642][T26951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1807.245486][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13782'. [ 1807.296308][T26962] syzkaller0: entered promiscuous mode [ 1807.310112][T26962] syzkaller0: entered allmulticast mode [ 1807.331752][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13782'. [ 1809.372449][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 1809.927924][T26990] netlink: 124 bytes leftover after parsing attributes in process `syz.6.13787'. [ 1810.038796][T26998] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.13790'. [ 1810.404082][T27021] team0: entered promiscuous mode [ 1810.419217][T27021] team_slave_0: entered promiscuous mode [ 1810.440719][T27021] team_slave_1: entered promiscuous mode [ 1810.575544][T27021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.583414][T27021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.624310][T27021] team0: left promiscuous mode [ 1810.629385][T27021] team_slave_0: left promiscuous mode [ 1810.636738][T27021] team_slave_1: left promiscuous mode [ 1810.847740][T27021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1810.930289][T27021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.163026][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13799'. [ 1811.404393][T27028] team0: entered promiscuous mode [ 1811.423521][T27028] team_slave_0: entered promiscuous mode [ 1811.440062][T27028] team_slave_1: entered promiscuous mode [ 1811.496818][T19830] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.506743][T19830] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.559569][T19830] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.582530][T19830] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.649549][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13804'. [ 1811.691560][T27061] sock: sock_timestamping_bind_phc: sock not bind to device [ 1811.752267][T27063] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1811.761323][T27063] netem: incorrect ge model size [ 1811.772012][T27063] netem: change failed [ 1812.243413][T27095] syzkaller0: entered promiscuous mode [ 1812.262334][T27095] syzkaller0: entered allmulticast mode [ 1812.359789][T27105] validate_nla: 25 callbacks suppressed [ 1812.359811][T27105] netlink: 'syz.6.13815': attribute type 10 has an invalid length. [ 1812.586556][T27117] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.13817'. [ 1812.640932][T27116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13818'. [ 1812.719056][T27105] dummy0: entered promiscuous mode [ 1812.746441][T27105] team0: Port device dummy0 added [ 1813.190743][T27138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13825'. [ 1813.222891][T27132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13823'. [ 1813.242473][T27132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13823'. [ 1813.268924][T27132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13823'. [ 1813.598222][T32192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.604512][T27158] netlink: 'syz.6.13830': attribute type 14 has an invalid length. [ 1813.747996][T27160] gre1: entered promiscuous mode [ 1813.772122][T27158] bond0: option xmit_hash_policy: invalid value (237) [ 1813.814859][T27162] syzkaller0: entered promiscuous mode [ 1813.822961][T27162] syzkaller0: entered allmulticast mode [ 1814.204552][T27147] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1814.520692][ T7955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.575778][T27184] syzkaller1: entered promiscuous mode [ 1814.603514][T27184] syzkaller1: entered allmulticast mode [ 1814.951311][T27203] __nla_validate_parse: 3 callbacks suppressed [ 1814.951333][T27203] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13843'. [ 1815.420039][T27209] lo speed is unknown, defaulting to 1000 [ 1815.823510][T27209] lo speed is unknown, defaulting to 1000 [ 1815.848119][T27228] netlink: 'syz.2.13849': attribute type 4 has an invalid length. [ 1815.856380][T27228] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13849'. [ 1815.931446][T27230] bond6: entered allmulticast mode [ 1816.008194][T27230] netlink: 'syz.3.13850': attribute type 4 has an invalid length. [ 1816.018232][T27230] netlink: 17 bytes leftover after parsing attributes in process `syz.3.13850'. [ 1816.148901][T27230] bridge6: entered promiscuous mode [ 1816.154482][T27230] bridge6: entered allmulticast mode [ 1816.188133][T27230] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1816.219639][T27240] xt_hashlimit: size too large, truncated to 1048576 [ 1816.797605][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13860'. [ 1816.808464][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13860'. [ 1817.234770][T27289] xt_CT: No such helper "snmp_trap" [ 1817.275413][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13867'. [ 1817.399825][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13870'. [ 1817.449237][T27303] dvmrp1: entered allmulticast mode [ 1817.486542][T27303] dvmrp1: left allmulticast mode [ 1817.512168][T27312] netlink: 'syz.6.13872': attribute type 2 has an invalid length. [ 1817.576321][T27312] : entered promiscuous mode [ 1817.878695][T27324] bond2: option fail_over_mac: invalid value (127) [ 1817.938751][T27334] netlink: 'syz.1.13880': attribute type 1 has an invalid length. [ 1817.950853][T27324] bond2 (unregistering): Released all slaves [ 1817.951179][T27334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13880'. [ 1818.101220][T27341] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.13883'. [ 1818.192493][T27343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.223616][T27343] bridge_slave_0 (unregistering): left allmulticast mode [ 1818.230718][T27343] bridge_slave_0 (unregistering): left promiscuous mode [ 1818.242280][T27343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.281295][T27332] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1818.336276][T27338] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1819.039009][T27374] Cannot find del_set index 0 as target [ 1819.047021][T27374] syzkaller1: entered promiscuous mode [ 1819.054986][T27374] syzkaller1: entered allmulticast mode [ 1819.555257][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13900'. [ 1819.621886][T27389] lo speed is unknown, defaulting to 1000 [ 1819.904539][ T6910] IPVS: starting estimator thread 0... [ 1820.002300][T27413] IPVS: using max 26 ests per chain, 62400 per kthread [ 1820.008499][T27389] lo speed is unknown, defaulting to 1000 [ 1820.241667][T27417] IPVS: length: 35 != 24 [ 1820.265456][T27404] lo speed is unknown, defaulting to 1000 [ 1820.489306][T27404] lo speed is unknown, defaulting to 1000 [ 1820.528984][T27424] netlink: 'syz.3.13903': attribute type 16 has an invalid length. [ 1820.557341][T27424] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13903'. [ 1821.858982][T27369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1822.189548][T27446] netlink: 'syz.5.13909': attribute type 10 has an invalid length. [ 1822.313039][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13910'. [ 1822.683608][T27457] lo speed is unknown, defaulting to 1000 [ 1822.822303][T27457] lo speed is unknown, defaulting to 1000 [ 1824.695582][T27432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1824.713032][T27459] netlink: 'syz.1.13912': attribute type 10 has an invalid length. [ 1824.727332][T27459] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13912'. [ 1824.955375][T27491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13920'. [ 1824.965986][T27491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13920'. [ 1825.050867][T27491] netlink: 'syz.6.13920': attribute type 3 has an invalid length. [ 1825.068997][T27491] netlink: 'syz.6.13920': attribute type 3 has an invalid length. [ 1825.505258][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13925'. [ 1825.635068][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13926'. [ 1826.268113][ T29] audit: type=1107 audit(1775004012.858:37): pid=27542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1826.299011][T27548] IPVS: Unknown mcast interface: vcan0 [ 1826.455749][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13931'. [ 1826.630811][T27564] netlink: 312 bytes leftover after parsing attributes in process `syz.6.13935'. [ 1826.643477][T27564] netlink: 'syz.6.13935': attribute type 1 has an invalid length. [ 1826.675904][T27563] netlink: 324 bytes leftover after parsing attributes in process `syz.6.13935'. [ 1826.693240][T27553] team0: Port device team_slave_0 removed [ 1826.750115][T27549] batman_adv: batadv0: Adding interface: ipvlan0 [ 1826.772184][T27549] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.838896][T27549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.850355][T27549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.860916][T27549] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 1827.114647][T27579] syzkaller0: entered promiscuous mode [ 1827.120300][T27579] syzkaller0: entered allmulticast mode [ 1827.483445][T27604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13942'. [ 1827.653601][T27611] netlink: 'syz.2.13947': attribute type 4 has an invalid length. [ 1828.000430][T27621] syzkaller0: entered promiscuous mode [ 1828.007589][T27621] syzkaller0: entered allmulticast mode [ 1828.025183][T27624] team_slave_1: Caught tx_queue_len zero misconfig [ 1828.317682][T27632] syzkaller1: entered promiscuous mode [ 1828.323419][T27632] syzkaller1: entered allmulticast mode [ 1828.615234][T27638] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.13957'. [ 1828.639091][T27638] xt_l2tp: unknown flags: 51 [ 1828.645730][T27639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13956'. [ 1829.307774][T27656] x_tables: duplicate underflow at hook 1 [ 1830.977084][T27613] lo speed is unknown, defaulting to 1000 [ 1831.396480][T27672] netlink: 'syz.2.13965': attribute type 1 has an invalid length. [ 1831.544428][T27672] bond2: entered promiscuous mode [ 1831.552415][T27672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1831.602456][T27662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13963'. [ 1831.646236][T27673] macvtap1: entered allmulticast mode [ 1831.661915][T27673] ip6gretap0: entered allmulticast mode [ 1831.675673][T27673] ip6gretap0: left allmulticast mode [ 1831.742680][T27677] vlan2: entered allmulticast mode [ 1831.747966][T27677] bond2: entered allmulticast mode [ 1831.765564][T27679] bond2: (slave bridge4): making interface the new active one [ 1831.773951][T27679] bridge4: entered promiscuous mode [ 1831.779298][T27679] bridge4: entered allmulticast mode [ 1831.787190][T27679] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1831.805547][T27662] ip6gre2: entered promiscuous mode [ 1831.810888][T27662] ip6gre2: entered allmulticast mode [ 1831.827069][T27613] lo speed is unknown, defaulting to 1000 [ 1831.827095][T27618] lo speed is unknown, defaulting to 1000 [ 1832.414220][T27618] lo speed is unknown, defaulting to 1000 [ 1833.681960][T27717] netlink: 'syz.2.13977': attribute type 1 has an invalid length. [ 1833.751959][T27719] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:0 [ 1833.786852][T27719] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002 [ 1833.908967][T27717] bond3: entered promiscuous mode [ 1833.914624][T27717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1833.966959][T27720] vlan3: entered allmulticast mode [ 1833.975712][T27720] bond3: entered allmulticast mode [ 1834.051305][T27722] bond3: (slave bridge5): making interface the new active one [ 1834.112321][T27722] bridge5: entered promiscuous mode [ 1834.117954][T27722] bridge5: entered allmulticast mode [ 1834.126167][T27722] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1834.156086][T27728] netlink: 'syz.6.13979': attribute type 2 has an invalid length. [ 1834.536705][T27736] m1Ie5èÿá: entered promiscuous mode [ 1834.715800][T27744] syzkaller0: entered promiscuous mode [ 1834.721340][T27744] syzkaller0: entered allmulticast mode [ 1834.990284][T27760] netlink: 'syz.3.13984': attribute type 21 has an invalid length. [ 1835.002433][T27762] netlink: 'syz.5.13990': attribute type 1 has an invalid length. [ 1835.318951][T27762] bond2: entered promiscuous mode [ 1835.356406][T27762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1835.402324][T27760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13984'. [ 1835.457747][T27768] vlan2: entered allmulticast mode [ 1835.488516][T27768] bond2: entered allmulticast mode [ 1835.540839][T27772] bond2: (slave bridge1): making interface the new active one [ 1835.549377][T27772] bridge1: entered promiscuous mode [ 1835.555275][T27772] bridge1: entered allmulticast mode [ 1835.579889][T27772] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1835.875979][T27799] netlink: 'syz.5.13998': attribute type 1 has an invalid length. [ 1836.007285][T27805] netlink: 'syz.6.14001': attribute type 8 has an invalid length. [ 1836.015806][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13998'. [ 1836.016469][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14001'. [ 1836.054147][T27792] bond3: (slave gretap1): making interface the new active one [ 1836.083998][T27792] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1836.119915][T27805] bond0: entered promiscuous mode [ 1836.151590][T27805] bond_slave_0: entered promiscuous mode [ 1836.173418][T27815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14003'. [ 1836.189903][T27815] netlink: 'syz.3.14003': attribute type 15 has an invalid length. [ 1836.192456][T27805] bond_slave_1: entered promiscuous mode [ 1836.219117][T27805] gretap0: entered promiscuous mode [ 1836.228510][T27805] bond0: left promiscuous mode [ 1836.236588][T27805] bond_slave_0: left promiscuous mode [ 1836.242895][T27805] bond_slave_1: left promiscuous mode [ 1836.257349][T27805] gretap0: left promiscuous mode [ 1836.277254][T27817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14004'. [ 1836.372551][T27825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1836.450818][T27824] batman_adv: batadv0: Adding interface: vlan0 [ 1836.483734][T27824] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1836.499200][T27827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14007'. [ 1836.511962][T27827] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1836.513928][T27829] netlink: 'syz.5.14008': attribute type 1 has an invalid length. [ 1836.522234][T27831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14006'. [ 1836.604143][T27835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1836.621660][T27829] bond4: entered promiscuous mode [ 1836.659450][T27829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1836.681602][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1836.690882][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1836.700821][T27835] netlink: 'syz.3.14010': attribute type 6 has an invalid length. [ 1836.738206][T27829] bond4: (slave bridge2): making interface the new active one [ 1836.753553][T27835] netlink: 'syz.3.14010': attribute type 5 has an invalid length. [ 1836.760190][T27846] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14013'. [ 1836.775275][T27829] bridge2: entered promiscuous mode [ 1836.787643][T27829] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1837.027559][T27836] vlan3: entered allmulticast mode [ 1837.032977][T27836] bond4: entered allmulticast mode [ 1837.038102][T27836] bridge2: entered allmulticast mode [ 1837.045314][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.054255][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.058286][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.068458][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.072652][T27841] netlink: 'syz.3.14010': attribute type 6 has an invalid length. [ 1837.085248][T19832] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.090329][T27841] netlink: 'syz.3.14010': attribute type 5 has an invalid length. [ 1837.112887][T27835] netlink: 'syz.3.14010': attribute type 6 has an invalid length. [ 1837.134449][T19832] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.143349][T27835] netlink: 'syz.3.14010': attribute type 5 has an invalid length. [ 1837.185121][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.185298][T19832] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.202314][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1837.226188][T27841] netlink: 'syz.3.14010': attribute type 6 has an invalid length. [ 1837.242805][T27841] netlink: 'syz.3.14010': attribute type 5 has an invalid length. [ 1837.257207][T19832] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1837.328489][T27868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14015'. [ 1837.493102][T27876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input12 [ 1837.717569][T19830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.737140][T19830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.747772][T27883] netlink: 'syz.2.14018': attribute type 1 has an invalid length. [ 1838.046188][T27883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1838.115784][T27890] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1838.145477][T27890] bond4: (slave batadv1): making interface the new active one [ 1838.184388][T27890] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1838.264874][T27893] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1838.276481][T27893] bond4 (unregistering): Released all slaves [ 1838.376799][T27879] delete_channel: no stack [ 1838.750728][T27923] bond7: entered promiscuous mode [ 1838.786297][T27923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1838.821548][T27931] vlan4: entered allmulticast mode [ 1838.842652][T27931] bond7: entered allmulticast mode [ 1838.871082][T27936] bond7: (slave bridge8): making interface the new active one [ 1838.878948][T27936] bridge8: entered promiscuous mode [ 1838.884746][T27936] bridge8: entered allmulticast mode [ 1838.897604][T27936] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 1838.930310][T27930] syzkaller1: entered promiscuous mode [ 1838.942274][T27930] syzkaller1: entered allmulticast mode [ 1839.079367][T27940] tun0: tun_chr_ioctl cmd 3223385353 [ 1839.167853][T27945] !: entered promiscuous mode [ 1839.947118][T27978] bond5: entered promiscuous mode [ 1839.952796][T27978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1839.996629][T27978] vlan4: entered allmulticast mode [ 1840.012580][T27978] bond5: entered allmulticast mode [ 1840.047337][T27978] bond5: (slave bridge4): making interface the new active one [ 1840.055108][T27978] bridge4: entered promiscuous mode [ 1840.060578][T27978] bridge4: entered allmulticast mode [ 1840.068626][T27978] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1840.621661][T28002] vxlan2: entered promiscuous mode [ 1841.021619][T28026] wg2: Caught tx_queue_len zero misconfig [ 1841.327897][T28039] syzkaller0: entered promiscuous mode [ 1841.351744][T28039] syzkaller0: entered allmulticast mode [ 1842.521121][T28103] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 1842.598874][T28103] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1842.625142][T28103] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1842.683489][T28103] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1842.904773][T28125] __nla_validate_parse: 124 callbacks suppressed [ 1842.904797][T28125] netlink: 192 bytes leftover after parsing attributes in process `syz.6.14076'. [ 1842.980547][T28125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14076'. [ 1843.055269][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14080'. [ 1843.233371][T28147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14081'. [ 1843.247780][T28147] hsr_slave_0: left promiscuous mode [ 1843.261925][T28147] hsr_slave_1: left promiscuous mode [ 1843.385718][T28129] lo speed is unknown, defaulting to 1000 [ 1843.464025][T28154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14082'. [ 1843.556670][T28159] vxcan2: entered allmulticast mode [ 1844.025750][T28129] lo speed is unknown, defaulting to 1000 [ 1844.176061][T28191] openvswitch: netlink: Multiple metadata blocks provided [ 1844.206684][T28191] validate_nla: 8 callbacks suppressed [ 1844.206705][T28191] netlink: 'syz.5.14090': attribute type 1 has an invalid length. [ 1844.291994][T28199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14093'. [ 1844.316980][T28185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14090'. [ 1845.197881][T28232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14099'. [ 1845.325604][T28232] dvmrp1: entered allmulticast mode [ 1845.431344][T28232] dvmrp1: left allmulticast mode [ 1845.531768][T28246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14103'. [ 1845.655615][T28250] netlink: 'syz.2.14105': attribute type 1 has an invalid length. [ 1845.688709][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14106'. [ 1845.926971][T28267] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1845.970472][T28268] 8021q: VLANs not supported on dvmrp0 [ 1847.634739][T28328] netlink: 'syz.1.14127': attribute type 1 has an invalid length. [ 1847.930773][T28344] __nla_validate_parse: 4 callbacks suppressed [ 1847.930795][T28344] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14131'. [ 1847.949612][T28344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14131'. [ 1848.041695][T28348] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14132'. [ 1848.441135][T28355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14134'. [ 1848.471081][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.482599][T28361] netlink: 'syz.1.14136': attribute type 1 has an invalid length. [ 1848.524792][T28360] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.14135'. [ 1848.558868][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.568144][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.577278][T28365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14135'. [ 1848.578393][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.595412][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.604749][T28356] netlink: 'syz.3.14134': attribute type 1 has an invalid length. [ 1848.793522][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14140'. [ 1848.808404][T28372] bond1: entered promiscuous mode [ 1848.853252][T28372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1848.986873][T28380] vlan2: entered allmulticast mode [ 1849.012615][T28380] bond1: entered allmulticast mode [ 1849.044211][T28372] bond1: (slave bridge1): making interface the new active one [ 1849.051845][T28372] bridge1: entered promiscuous mode [ 1849.094150][T28372] bridge1: entered allmulticast mode [ 1849.111795][T28372] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1849.136126][T28388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1849.367523][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14145'. [ 1849.741795][T28416] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14148'. [ 1849.886713][T28424] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14151'. [ 1849.935222][T28430] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1849.943319][T28424] ip6tnl0: Caught tx_queue_len zero misconfig [ 1850.116904][T28441] validate_nla: 60 callbacks suppressed [ 1850.116927][T28441] netlink: 'syz.2.14155': attribute type 83 has an invalid length. [ 1850.197084][T28441] xt_policy: neither incoming nor outgoing policy selected [ 1850.813456][T28468] netlink: 'syz.6.14160': attribute type 8 has an invalid length. [ 1851.666301][T28506] syzkaller1: entered promiscuous mode [ 1851.672860][T28506] syzkaller1: entered allmulticast mode [ 1852.044511][T28527] netlink: 'syz.6.14172': attribute type 5 has an invalid length. [ 1852.070446][T28474] lo speed is unknown, defaulting to 1000 [ 1852.168574][T28531] xt_hashlimit: size too large, truncated to 1048576 [ 1852.251167][T28536] openvswitch: netlink: IP tunnel dst address not specified [ 1852.707035][T28474] lo speed is unknown, defaulting to 1000 [ 1853.178915][ T8260] Bluetooth: hci6: link tx timeout [ 1853.185672][ T8260] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1853.199251][ T8260] Bluetooth: hci6: link tx timeout [ 1853.204948][ T8260] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1853.225534][T28557] syzkaller0: entered promiscuous mode [ 1853.225587][T28554] __nla_validate_parse: 12 callbacks suppressed [ 1853.225602][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14179'. [ 1853.257152][T28557] syzkaller0: entered allmulticast mode [ 1853.276358][T28555] netlink: 'syz.6.14179': attribute type 1 has an invalid length. [ 1853.276640][T28559] netlink: 'syz.6.14179': attribute type 1 has an invalid length. [ 1853.328332][T28555] bond2: entered promiscuous mode [ 1853.334765][T28555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1853.381501][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.393003][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.401524][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1853.408933][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.418626][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1853.567955][T28548] lo speed is unknown, defaulting to 1000 [ 1853.957053][T28578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14183'. [ 1854.353671][T28548] lo speed is unknown, defaulting to 1000 [ 1854.987640][T28564] lo speed is unknown, defaulting to 1000 [ 1855.144596][T28597] netlink: 'syz.6.14189': attribute type 9 has an invalid length. [ 1855.168119][T28597] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.14189'. [ 1855.212310][ T8260] Bluetooth: hci6: command 0x0406 tx timeout [ 1855.470942][T28605] veth1: entered promiscuous mode [ 1855.478427][T28605] veth1: entered allmulticast mode [ 1855.486525][T28610] syzkaller1: entered promiscuous mode [ 1855.502253][T28610] syzkaller1: entered allmulticast mode [ 1855.514142][T28564] lo speed is unknown, defaulting to 1000 [ 1857.665938][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14200'. [ 1857.736379][T28653] tipc: Enabling of bearer rejected, failed to enable media [ 1857.779615][T28655] netlink: 'syz.3.14202': attribute type 1 has an invalid length. [ 1857.788862][T28655] netlink: 240 bytes leftover after parsing attributes in process `syz.3.14202'. [ 1858.584968][T28683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14210'. [ 1858.886948][T28696] netlink: 'syz.5.14213': attribute type 11 has an invalid length. [ 1858.924075][T28696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14213'. [ 1859.052656][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1859.060797][ C1] lec:lec_tx_timeout: lec0 [ 1859.065856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1859.607827][T28714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14217'. [ 1859.730494][T28714] sit1: entered promiscuous mode [ 1859.918269][T28724] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1859.964168][T28724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14221'. [ 1860.030322][T28728] netlink: 'syz.5.14221': attribute type 8 has an invalid length. [ 1860.052919][T28729] netlink: 'syz.2.14225': attribute type 21 has an invalid length. [ 1860.086462][T28729] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14225'. [ 1860.162442][T28736] netlink: 'syz.3.14227': attribute type 1 has an invalid length. [ 1860.230031][T28736] bond9: entered promiscuous mode [ 1860.242577][T28736] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1860.339416][T28744] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1860.346743][T28744] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1860.357815][T28744] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1860.371237][T28744] bond9: (slave ip6gre3): making interface the new active one [ 1860.380166][T28744] ip6gre3: entered promiscuous mode [ 1860.386937][T28744] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 1860.396976][T28746] syzkaller1: entered promiscuous mode [ 1860.402812][T28746] syzkaller1: entered allmulticast mode [ 1860.445981][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14229'. [ 1860.919546][T28769] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14232'. [ 1861.071332][T28777] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14234'. [ 1861.126105][T28779] netlink: 211852 bytes leftover after parsing attributes in process `syz.3.14233'. [ 1861.151989][T28776] netlink: 'syz.3.14233': attribute type 1 has an invalid length. [ 1861.194963][T28776] bond10: entered promiscuous mode [ 1861.200651][T28776] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1861.235826][T28779] bond10: (slave veth7): making interface the new active one [ 1861.248413][T28779] veth7: entered promiscuous mode [ 1861.259758][T28779] bond10: (slave veth7): Enslaving as an active interface with an up link [ 1861.637876][T28792] lo speed is unknown, defaulting to 1000 [ 1861.776788][T28792] lo speed is unknown, defaulting to 1000 [ 1863.070574][T28731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1863.298934][T28807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14242'. [ 1863.344342][T28807] netlink: 'syz.1.14242': attribute type 1 has an invalid length. [ 1863.537576][T28824] netlink: 'syz.3.14245': attribute type 10 has an invalid length. [ 1863.630656][T28829] __nla_validate_parse: 1 callbacks suppressed [ 1863.630678][T28829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14248'. [ 1863.644849][T28831] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1863.653264][T28829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14248'. [ 1863.670109][T28829] netlink: 'syz.1.14248': attribute type 5 has an invalid length. [ 1863.779837][T28837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14251'. [ 1863.996691][T28837] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1864.092548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1864.100680][ C1] lec:lec_tx_timeout: lec0 [ 1864.307911][T28834] lo speed is unknown, defaulting to 1000 [ 1864.530496][T28842] netlink: 'syz.1.14252': attribute type 21 has an invalid length. [ 1864.581185][T28842] netlink: 'syz.1.14252': attribute type 6 has an invalid length. [ 1864.604749][T28842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14252'. [ 1864.672814][T28846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14255'. [ 1864.923896][T28834] lo speed is unknown, defaulting to 1000 [ 1865.055200][T28872] netlink: 48 bytes leftover after parsing attributes in process `syz.6.14260'. [ 1865.196636][T28874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14261'. [ 1865.247181][T28877] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14262'. [ 1865.337518][T28877] netlink: 'syz.5.14262': attribute type 11 has an invalid length. [ 1865.357273][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14264'. [ 1865.372426][T28877] netlink: 'syz.5.14262': attribute type 23 has an invalid length. [ 1865.390689][T28877] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14262'. [ 1865.553784][T28877] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1865.956929][T28893] netlink: 'syz.1.14268': attribute type 1 has an invalid length. [ 1865.965141][T28893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1866.348502][T28910] netlink: 'syz.5.14273': attribute type 3 has an invalid length. [ 1866.593474][T28914] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1866.601012][T28914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1866.655734][T28916] netlink: zone id is out of range [ 1866.661760][T28916] netlink: zone id is out of range [ 1866.690544][T28916] netlink: zone id is out of range [ 1866.700857][T28916] netlink: zone id is out of range [ 1866.710678][T28916] netlink: zone id is out of range [ 1866.728170][T28916] netlink: zone id is out of range [ 1866.811654][T28920] netlink: 'syz.2.14278': attribute type 1 has an invalid length. [ 1866.828369][T28920] netlink: 'syz.2.14278': attribute type 7 has an invalid length. [ 1867.467222][T28963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.718503][T28979] netlink: 'syz.2.14293': attribute type 14 has an invalid length. [ 1867.734591][T28979] netlink: 'syz.2.14293': attribute type 12 has an invalid length. [ 1867.952000][T28961] bridge0: port 1(vlan0) entered blocking state [ 1867.967209][T28961] bridge0: port 1(vlan0) entered disabled state [ 1867.989271][T28961] vlan0: entered allmulticast mode [ 1868.008275][T28961] bond0: entered allmulticast mode [ 1868.036172][T28961] vlan0: entered promiscuous mode [ 1868.043170][T28993] netlink: 'syz.5.14297': attribute type 2 has an invalid length. [ 1868.053758][T28961] bond0: entered promiscuous mode [ 1868.839714][T29023] netlink: 'syz.5.14304': attribute type 1 has an invalid length. [ 1868.929805][T29026] __nla_validate_parse: 18 callbacks suppressed [ 1868.929829][T29026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14305'. [ 1869.151736][T29023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1869.200526][T29028] vlan5: entered promiscuous mode [ 1869.240884][T29028] bond7: entered promiscuous mode [ 1869.250963][T29028] vlan5: entered allmulticast mode [ 1869.262344][T29028] bond7: entered allmulticast mode [ 1869.275308][T29026] 8021q: VLANs not supported on sit0 [ 1869.303910][T29026] netlink: 'syz.2.14305': attribute type 10 has an invalid length. [ 1869.337304][T29026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14305'. [ 1869.371295][T29023] bond7: (slave bridge7): making interface the new active one [ 1869.383764][T29023] bridge7: entered promiscuous mode [ 1869.389344][T29023] bridge7: entered allmulticast mode [ 1869.397388][T29023] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1869.407872][T29026] dummy0: entered promiscuous mode [ 1869.418693][T29026] bridge0: port 1(dummy0) entered blocking state [ 1869.441942][T29026] bridge0: port 1(dummy0) entered disabled state [ 1869.455507][T29026] dummy0: entered allmulticast mode [ 1869.483940][T29026] bridge0: port 1(dummy0) entered blocking state [ 1869.490520][T29026] bridge0: port 1(dummy0) entered forwarding state [ 1870.066601][T29065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14313'. [ 1870.085487][T29063] bond4: entered promiscuous mode [ 1870.091988][T29063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1870.230509][T29063] vlan4: entered allmulticast mode [ 1870.236052][T29063] bond4: entered allmulticast mode [ 1870.297911][T29063] bond4: (slave bridge6): making interface the new active one [ 1870.314951][T29063] bridge6: entered promiscuous mode [ 1870.327621][T29063] bridge6: entered allmulticast mode [ 1870.346681][T29063] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1870.402729][T29082] validate_nla: 2 callbacks suppressed [ 1870.402749][T29082] netlink: 'syz.3.14316': attribute type 27 has an invalid length. [ 1870.436794][T29081] netlink: 'syz.3.14316': attribute type 27 has an invalid length. [ 1870.545456][T29081] macvtap0: left promiscuous mode [ 1870.560897][T29081] Nßôž: left allmulticast mode [ 1870.581031][T29081] ip6gre1: left promiscuous mode [ 1870.597419][T29081] ip6gre1: left allmulticast mode [ 1870.610429][T29081] bond1: left promiscuous mode [ 1870.625109][T29081] hsr1: left allmulticast mode [ 1870.633912][T29081] batadv0: left allmulticast mode [ 1870.639006][T29081] bond0: left allmulticast mode [ 1870.644943][T29081] bond_slave_0: left allmulticast mode [ 1870.651586][T29081] bond_slave_1: left allmulticast mode [ 1870.664058][T29081] vxcan3: left allmulticast mode [ 1870.669786][T29097] sctp: [Deprecated]: syz.2.14318 (pid 29097) Use of int in max_burst socket option. [ 1870.669786][T29097] Use struct sctp_assoc_value instead [ 1870.694254][T29081] bond3: left promiscuous mode [ 1870.699156][T29081] bridge2: left promiscuous mode [ 1870.708263][T29081] ipvlan2: left allmulticast mode [ 1870.719631][T29081] bond3: left allmulticast mode [ 1870.724906][T29081] bridge2: left allmulticast mode [ 1870.730336][T29081] gretap1: left promiscuous mode [ 1870.736975][T29081] bond4: left promiscuous mode [ 1870.747749][T29081] bridge3: left promiscuous mode [ 1870.753129][T29081] bond5: left promiscuous mode [ 1870.758153][T29081] bridge4: left promiscuous mode [ 1870.764151][T29081] team1: left promiscuous mode [ 1870.769058][T29081] team1: left allmulticast mode [ 1870.777726][T29081] geneve2: left promiscuous mode [ 1870.788084][T29103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14322'. [ 1870.789698][T29081] bond6: left allmulticast mode [ 1870.798104][T29103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14322'. [ 1870.803524][T29081] bridge6: left promiscuous mode [ 1870.817317][T29081] bridge6: left allmulticast mode [ 1870.826405][T29081] ip6gre2: left promiscuous mode [ 1870.831374][T29081] ip6gre2: left allmulticast mode [ 1870.840601][T29081] bond7: left promiscuous mode [ 1870.845734][T29081] bridge8: left promiscuous mode [ 1870.853135][T29081] vlan4: left allmulticast mode [ 1870.858030][T29081] bond7: left allmulticast mode [ 1870.863551][T29081] bridge8: left allmulticast mode [ 1870.872364][T29081] sit1: left promiscuous mode [ 1870.878672][T29081] bond9: left promiscuous mode [ 1870.884911][T29081] ip6gre3: left promiscuous mode [ 1870.894030][T29081] bond10: left promiscuous mode [ 1870.898906][T29081] veth7: left promiscuous mode [ 1870.967307][T29100] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1870.980627][T29100] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1870.990723][T19836] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1870.997295][T29106] sctp: [Deprecated]: syz.1.14323 (pid 29106) Use of int in max_burst socket option deprecated. [ 1870.997295][T29106] Use struct sctp_assoc_value instead [ 1871.001958][T19836] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.026651][T19836] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1871.035202][T19836] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.049095][T19836] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1871.057755][T19836] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.072732][T19836] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1871.081938][T19836] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.243039][T29110] vlan3: entered promiscuous mode [ 1871.254675][T29110] batadv_slave_1: entered promiscuous mode [ 1871.299363][T29112] tipc: Enabled bearer , priority 0 [ 1871.307851][T29112] syzkaller0: entered promiscuous mode [ 1871.314108][T29112] syzkaller0: entered allmulticast mode [ 1871.469867][T29122] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14326'. [ 1871.495350][T29112] tipc: Resetting bearer [ 1871.518335][T29128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14330'. [ 1871.547540][T29128] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1871.675367][T29140] net_ratelimit: 1 callbacks suppressed [ 1871.675389][T29140] openvswitch: netlink: IP tunnel dst address not specified [ 1871.768288][T29111] tipc: Resetting bearer [ 1871.774938][T29143] netlink: 'syz.6.14334': attribute type 1 has an invalid length. [ 1871.783212][T29143] netlink: 280 bytes leftover after parsing attributes in process `syz.6.14334'. [ 1871.833234][T29111] tipc: Disabling bearer [ 1871.882777][T29150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1872.141171][T29167] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1872.255356][T29173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14342'. [ 1873.161316][T29197] vlan0: entered promiscuous mode [ 1873.166848][T29197] gretap0: entered promiscuous mode [ 1873.429735][T29217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14352'. [ 1873.606838][T29223] tunl0: Caught tx_queue_len zero misconfig [ 1873.933910][T29231] __nla_validate_parse: 31 callbacks suppressed [ 1873.933935][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1873.946593][T29240] netlink: 'syz.6.14359': attribute type 1 has an invalid length. [ 1873.955784][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1873.977477][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1873.995090][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.015393][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.032306][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.066710][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.076492][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.090714][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1874.107503][T29244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14361'. [ 1874.131401][T29244] openvswitch: netlink: Flow key attr not present in new flow. [ 1874.153738][T29244] x_tables: duplicate underflow at hook 2 [ 1874.194667][T29231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.216330][T29231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.360498][T19825] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.371880][ T29] audit: type=1107 audit(1775004060.958:38): pid=29246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1874.384245][T19825] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.384294][T19825] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.384333][T19825] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.454999][T29247] syzkaller0: entered promiscuous mode [ 1874.460537][T29247] syzkaller0: entered allmulticast mode [ 1874.482784][T29247] bond0: entered promiscuous mode [ 1874.498022][T29247] bond0: left promiscuous mode [ 1874.725473][T29266] netlink: 'syz.3.14368': attribute type 2 has an invalid length. [ 1874.930766][T29252] syzkaller0: entered promiscuous mode [ 1874.944688][T29252] syzkaller0: entered allmulticast mode [ 1874.980464][T19836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1874.999252][T19836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.007357][ T6914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.075491][ T6914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.102848][ T6914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.126808][T29288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1875.500112][T29314] netlink: 'syz.3.14381': attribute type 13 has an invalid length. [ 1875.514662][T29314] netlink: 'syz.3.14381': attribute type 17 has an invalid length. [ 1875.917788][T29331] netlink: 'syz.1.14382': attribute type 1 has an invalid length. [ 1877.804069][T32192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.833367][T29314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.842934][T29314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.853701][T29314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1877.870203][T29263] lo speed is unknown, defaulting to 1000 [ 1877.876613][T29317] syzkaller0: entered promiscuous mode [ 1877.884442][T29317] syzkaller0: entered allmulticast mode [ 1878.042376][T29336] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1878.330993][T29263] lo speed is unknown, defaulting to 1000 [ 1878.505604][T29361] syzkaller0: entered promiscuous mode [ 1878.511181][T29361] syzkaller0: entered allmulticast mode [ 1878.537117][T29327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1878.657544][ T7955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.701335][T29368] x_tables: duplicate underflow at hook 1 [ 1878.840280][T29375] netlink: 'syz.2.14396': attribute type 142 has an invalid length. [ 1878.850854][T29375] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1879.052805][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1879.103015][T29377] syzkaller0: entered promiscuous mode [ 1879.108610][T29377] syzkaller0: entered allmulticast mode [ 1879.454330][T29398] netlink: 'syz.1.14400': attribute type 1 has an invalid length. [ 1881.624865][T29408] __nla_validate_parse: 105 callbacks suppressed [ 1881.624886][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14403'. [ 1881.661491][T29411] syzkaller1: entered promiscuous mode [ 1881.671244][T29411] syzkaller1: entered allmulticast mode [ 1881.724786][T29408] bond0: (slave rose0): refused to change device type [ 1881.731818][T29409] bond0: (slave rose0): refused to change device type [ 1882.001032][T29424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14410'. [ 1882.120080][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14411'. [ 1882.339515][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14416'. [ 1882.434486][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14416'. [ 1882.453889][T29446] syzkaller0: entered promiscuous mode [ 1882.465638][T29446] syzkaller0: entered allmulticast mode [ 1882.507618][T29446] netlink: 'syz.2.14419': attribute type 10 has an invalid length. [ 1882.519275][T29449] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.14420'. [ 1883.143521][T29482] netlink: 'syz.2.14428': attribute type 58 has an invalid length. [ 1883.269136][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14421'. [ 1883.313595][T29451] netlink: 124 bytes leftover after parsing attributes in process `syz.3.14421'. [ 1883.384645][T29454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14421'. [ 1883.466691][T29496] pim6reg1: entered promiscuous mode [ 1883.485701][T29496] pim6reg1: entered allmulticast mode [ 1883.563033][T29497] delete_channel: no stack [ 1883.663884][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14425'. [ 1883.701347][T29495] delete_channel: no stack [ 1884.096181][T29519] sctp: [Deprecated]: syz.3.14435 (pid 29519) Use of int in max_burst socket option deprecated. [ 1884.096181][T29519] Use struct sctp_assoc_value instead [ 1884.365441][T29525] bond5: option all_slaves_active: invalid value (5) [ 1884.379139][T29525] bond5 (unregistering): Released all slaves [ 1884.416450][T29530] bond5: Invalid ad_actor_system MAC address. [ 1884.424497][T29530] bond5: option ad_actor_system: invalid value (7) [ 1884.438214][T29530] bond5 (unregistering): Released all slaves [ 1884.599515][T29541] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1885.093194][T29546] lo speed is unknown, defaulting to 1000 [ 1885.465744][T29546] lo speed is unknown, defaulting to 1000 [ 1885.520091][T29568] lo speed is unknown, defaulting to 1000 [ 1885.721395][T29568] lo speed is unknown, defaulting to 1000 [ 1885.727831][T29574] siw: device registration error -23 [ 1886.098692][T29586] vlan2: entered allmulticast mode [ 1886.105021][T29586] macvtap0: entered allmulticast mode [ 1886.332348][T29590] netlink: 'syz.1.14456': attribute type 1 has an invalid length. [ 1886.391653][T29595] openvswitch: netlink: IPv4 tun info is not correct [ 1886.595776][T29597] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1887.292379][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1887.738751][T29549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1888.121823][T29619] netlink: set zone limit has 4 unknown bytes [ 1888.151292][T29611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.166366][T29611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1888.194531][T29611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1888.357437][T29635] __nla_validate_parse: 13 callbacks suppressed [ 1888.357460][T29635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14465'. [ 1888.486602][T29639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14467'. [ 1888.523278][T29635] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1888.682507][T11525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1889.002704][T11525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1889.526730][T29676] ip6tnl2: entered promiscuous mode [ 1889.886827][T29694] dvmrp0: entered allmulticast mode [ 1890.056709][T29709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14485'. [ 1890.861436][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14492'. [ 1890.921999][T29736] gtp0: entered promiscuous mode [ 1890.947055][T29736] gtp0: entered allmulticast mode [ 1891.090296][T29741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1891.097641][T29741] IPv6: NLM_F_CREATE should be set when creating new route [ 1891.176887][T29743] IPVS: set_ctl: invalid protocol: 171 224.0.0.2:20001 [ 1891.215799][T29743] xt_hashlimit: overflow, try lower: 0/0 [ 1891.229752][T29745] tipc: Invalid UDP bearer configuration [ 1891.229827][T29745] tipc: Enabling of bearer rejected, failed to enable media [ 1891.262937][T29747] netlink: 'syz.1.14497': attribute type 1 has an invalid length. [ 1891.295970][ T8260] Bluetooth: hci1: command 0x0406 tx timeout [ 1891.428397][T29747] bond11: entered promiscuous mode [ 1891.458129][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14500'. [ 1891.484340][T29747] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1891.518176][T29758] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1891.592854][T29758] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 1891.619856][T29758] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1891.639931][T29758] bond11: (slave vti0): making interface the new active one [ 1891.647568][T29758] vti0: entered promiscuous mode [ 1891.654909][T29758] bond11: (slave vti0): Enslaving as an active interface with an up link [ 1891.855699][T29772] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14504'. [ 1891.866848][T29774] netlink: 'syz.2.14503': attribute type 1 has an invalid length. [ 1891.876518][T29777] netlink: 184 bytes leftover after parsing attributes in process `syz.1.14505'. [ 1891.877122][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14504'. [ 1891.895493][T29777] openvswitch: netlink: Flow key attr not present in new flow. [ 1891.907600][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14504'. [ 1891.959005][T29774] bond5: entered promiscuous mode [ 1891.964823][T29774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1891.984314][T29775] syzkaller1: entered promiscuous mode [ 1891.989836][T29775] syzkaller1: entered allmulticast mode [ 1892.050011][T29782] vlan5: entered allmulticast mode [ 1892.085910][T29782] bond5: entered allmulticast mode [ 1892.154241][T29791] netlink: 'syz.6.14508': attribute type 9 has an invalid length. [ 1892.166872][T29774] bond5: (slave bridge8): making interface the new active one [ 1892.175506][T29791] netlink: 'syz.6.14508': attribute type 6 has an invalid length. [ 1892.189082][T29774] bridge8: entered promiscuous mode [ 1892.212942][T29774] bridge8: entered allmulticast mode [ 1892.221089][T29774] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1892.243969][T29794] netlink: 'syz.6.14508': attribute type 1 has an invalid length. [ 1892.251932][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14508'. [ 1892.538270][T29812] syz_tun: entered promiscuous mode [ 1892.547207][T29812] syz_tun: entered allmulticast mode [ 1893.011253][T29826] netlink: 'syz.3.14517': attribute type 6 has an invalid length. [ 1893.536317][T29846] netlink: 'syz.2.14522': attribute type 1 has an invalid length. [ 1893.645455][T29854] __nla_validate_parse: 4 callbacks suppressed [ 1893.645475][T29854] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14522'. [ 1893.691151][T29806] lo speed is unknown, defaulting to 1000 [ 1893.870505][T29860] openvswitch: netlink: Actions may not be safe on all matching packets [ 1894.026728][T29860] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1894.034985][T29860] bond3: entered promiscuous mode [ 1894.045485][T29860] team0: Port device bond3 added [ 1894.112771][T29872] netlink: 41 bytes leftover after parsing attributes in process `syz.1.14528'. [ 1894.139931][T29872] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14528'. [ 1894.276956][T29806] lo speed is unknown, defaulting to 1000 [ 1894.283354][T29850] lo speed is unknown, defaulting to 1000 [ 1894.342931][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14529'. [ 1894.456752][T29883] mac80211_hwsim hwsim170 wlan1: Caught tx_queue_len zero misconfig [ 1894.667987][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14535'. [ 1894.695777][T29895] : entered promiscuous mode [ 1894.736301][T29850] lo speed is unknown, defaulting to 1000 [ 1894.865565][T29898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14536'. [ 1895.145466][T29904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14537'. [ 1895.454631][T29910] netlink: 'syz.1.14538': attribute type 11 has an invalid length. [ 1895.469338][T29912] netlink: 7 bytes leftover after parsing attributes in process `syz.6.14540'. [ 1895.510085][T29912] netlink: 104 bytes leftover after parsing attributes in process `syz.6.14540'. [ 1896.165886][T29927] bond0: (slave sit0): refused to change device type [ 1896.370554][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14546'. [ 1896.411713][T29927] netlink: zone id is out of range [ 1896.692993][T29949] netlink: 'syz.1.14552': attribute type 7 has an invalid length. [ 1896.700882][T29949] netlink: 'syz.1.14552': attribute type 8 has an invalid length. [ 1896.709349][T29949] netlink: 'syz.1.14552': attribute type 8 has an invalid length. [ 1896.721382][T29949] netlink: 'syz.1.14552': attribute type 4 has an invalid length. [ 1896.731443][T29955] netlink: 'syz.3.14553': attribute type 2 has an invalid length. [ 1896.740257][T29949] netlink: 'syz.1.14552': attribute type 7 has an invalid length. [ 1896.934035][T29962] batman_adv: batadv0: Removing interface: vlan0 [ 1897.090496][T29947] lo speed is unknown, defaulting to 1000 [ 1897.097889][T29968] syzkaller0: entered promiscuous mode [ 1897.120622][T29968] syzkaller0: entered allmulticast mode [ 1897.328264][T29947] lo speed is unknown, defaulting to 1000 [ 1897.901417][T30000] FAULT_INJECTION: forcing a failure. [ 1897.901417][T30000] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.922742][T30000] CPU: 1 UID: 0 PID: 30000 Comm: syz.6.14564 Not tainted syzkaller #0 PREEMPT(full) [ 1897.922773][T30000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1897.922786][T30000] Call Trace: [ 1897.922795][T30000] [ 1897.922804][T30000] dump_stack_lvl+0xe8/0x150 [ 1897.922840][T30000] should_fail_ex+0x412/0x560 [ 1897.922877][T30000] should_failslab+0xa8/0x100 [ 1897.922906][T30000] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1897.922944][T30000] ? xfrm_add_sa+0x1c58/0x4230 [ 1897.922978][T30000] kmemdup_noprof+0x2b/0x70 [ 1897.923007][T30000] xfrm_add_sa+0x1c58/0x4230 [ 1897.923046][T30000] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1897.923071][T30000] ? apparmor_capable+0x126/0x170 [ 1897.923101][T30000] ? __nla_parse+0x40/0x60 [ 1897.923128][T30000] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1897.923163][T30000] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1897.923229][T30000] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1897.923264][T30000] ? rcu_is_watching+0x15/0xb0 [ 1897.923292][T30000] ? trace_contention_end+0x3d/0x150 [ 1897.923314][T30000] ? __mutex_lock+0x319/0x1300 [ 1897.923352][T30000] netlink_rcv_skb+0x232/0x4b0 [ 1897.923377][T30000] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1897.923408][T30000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1897.923448][T30000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1897.923471][T30000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1897.923496][T30000] xfrm_netlink_rcv+0x79/0x90 [ 1897.923524][T30000] netlink_unicast+0x80f/0x9b0 [ 1897.923565][T30000] ? __pfx_netlink_unicast+0x10/0x10 [ 1897.923598][T30000] ? netlink_sendmsg+0x650/0xb40 [ 1897.923618][T30000] ? skb_put+0x11b/0x210 [ 1897.923646][T30000] netlink_sendmsg+0x813/0xb40 [ 1897.923680][T30000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1897.923707][T30000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1897.923738][T30000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1897.923766][T30000] ____sys_sendmsg+0x972/0x9f0 [ 1897.923804][T30000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1897.923842][T30000] ? import_iovec+0x73/0xa0 [ 1897.923870][T30000] ___sys_sendmsg+0x2a5/0x360 [ 1897.923904][T30000] ? __pfx____sys_sendmsg+0x10/0x10 [ 1897.923980][T30000] ? __fget_files+0x2a/0x420 [ 1897.924010][T30000] ? __fget_files+0x3a0/0x420 [ 1897.924052][T30000] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1897.924082][T30000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1897.924121][T30000] ? __pfx_ksys_write+0x10/0x10 [ 1897.924158][T30000] do_syscall_64+0x14d/0xf80 [ 1897.924186][T30000] ? trace_irq_disable+0x3b/0x150 [ 1897.924204][T30000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.924226][T30000] ? clear_bhb_loop+0x40/0x90 [ 1897.924252][T30000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.924273][T30000] RIP: 0033:0x7f8d8039c819 [ 1897.924294][T30000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.924312][T30000] RSP: 002b:00007f8d812fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1897.924335][T30000] RAX: ffffffffffffffda RBX: 00007f8d80615fa0 RCX: 00007f8d8039c819 [ 1897.924351][T30000] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1897.924364][T30000] RBP: 00007f8d812fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1897.924377][T30000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.924390][T30000] R13: 00007f8d80616038 R14: 00007f8d80615fa0 R15: 00007ffc8340bed8 [ 1897.924424][T30000] [ 1898.451805][T30005] netlink: 'syz.3.14566': attribute type 10 has an invalid length. [ 1898.854674][T30010] __nla_validate_parse: 4 callbacks suppressed [ 1898.854696][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14568'. [ 1898.902616][T30009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14568'. [ 1899.496347][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14575'. [ 1899.512328][T30039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14575'. [ 1899.539505][T11776] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.548098][T11776] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.558635][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14575'. [ 1899.565015][T30043] FAULT_INJECTION: forcing a failure. [ 1899.565015][T30043] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.568366][T11776] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.591802][T30039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14575'. [ 1899.611298][T11776] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.624553][T30043] CPU: 1 UID: 0 PID: 30043 Comm: syz.1.14576 Not tainted syzkaller #0 PREEMPT(full) [ 1899.624582][T30043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1899.624595][T30043] Call Trace: [ 1899.624603][T30043] [ 1899.624612][T30043] dump_stack_lvl+0xe8/0x150 [ 1899.624648][T30043] should_fail_ex+0x412/0x560 [ 1899.624693][T30043] should_failslab+0xa8/0x100 [ 1899.624723][T30043] __kmalloc_node_noprof+0xf0/0x7c0 [ 1899.624748][T30043] ? crypto_create_tfm_node+0x83/0x3f0 [ 1899.624783][T30043] crypto_create_tfm_node+0x83/0x3f0 [ 1899.624817][T30043] crypto_alloc_tfm_node+0x172/0x3f0 [ 1899.624854][T30043] esp_init_state+0x3c3/0x1240 [ 1899.624875][T30043] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1899.624901][T30043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.624931][T30043] ? __lock_acquire+0x6b5/0x2cf0 [ 1899.624959][T30043] ? __pfx_esp_init_state+0x10/0x10 [ 1899.625019][T30043] ? __xfrm_init_state+0x842/0x1460 [ 1899.625053][T30043] __xfrm_init_state+0xac9/0x1460 [ 1899.625080][T30043] ? __xfrm_init_state+0x842/0x1460 [ 1899.625113][T30043] xfrm_add_sa+0x3073/0x4230 [ 1899.625152][T30043] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1899.625177][T30043] ? apparmor_capable+0x126/0x170 [ 1899.625207][T30043] ? __nla_parse+0x40/0x60 [ 1899.625233][T30043] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1899.625268][T30043] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1899.625336][T30043] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1899.625372][T30043] ? rcu_is_watching+0x15/0xb0 [ 1899.625407][T30043] ? trace_contention_end+0x3d/0x150 [ 1899.625429][T30043] ? __mutex_lock+0x319/0x1300 [ 1899.625468][T30043] netlink_rcv_skb+0x232/0x4b0 [ 1899.625493][T30043] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1899.625522][T30043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1899.625562][T30043] ? netlink_deliver_tap+0x2e/0x1b0 [ 1899.625584][T30043] ? netlink_deliver_tap+0x2e/0x1b0 [ 1899.625610][T30043] xfrm_netlink_rcv+0x79/0x90 [ 1899.625638][T30043] netlink_unicast+0x80f/0x9b0 [ 1899.625751][T30043] ? __pfx_netlink_unicast+0x10/0x10 [ 1899.625785][T30043] ? netlink_sendmsg+0x650/0xb40 [ 1899.625805][T30043] ? skb_put+0x11b/0x210 [ 1899.625835][T30043] netlink_sendmsg+0x813/0xb40 [ 1899.625868][T30043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1899.625895][T30043] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1899.625926][T30043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1899.625953][T30043] ____sys_sendmsg+0x972/0x9f0 [ 1899.625989][T30043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1899.626028][T30043] ? import_iovec+0x73/0xa0 [ 1899.626055][T30043] ___sys_sendmsg+0x2a5/0x360 [ 1899.626088][T30043] ? __pfx____sys_sendmsg+0x10/0x10 [ 1899.626157][T30043] ? __fget_files+0x2a/0x420 [ 1899.626185][T30043] ? __fget_files+0x3a0/0x420 [ 1899.626227][T30043] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1899.626258][T30043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1899.626297][T30043] ? __pfx_ksys_write+0x10/0x10 [ 1899.626335][T30043] do_syscall_64+0x14d/0xf80 [ 1899.626364][T30043] ? trace_irq_disable+0x3b/0x150 [ 1899.626384][T30043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.626405][T30043] ? clear_bhb_loop+0x40/0x90 [ 1899.626431][T30043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.626451][T30043] RIP: 0033:0x7fcab339c819 [ 1899.626472][T30043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.626490][T30043] RSP: 002b:00007fcab41dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1899.626513][T30043] RAX: ffffffffffffffda RBX: 00007fcab3615fa0 RCX: 00007fcab339c819 [ 1899.626529][T30043] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1899.626542][T30043] RBP: 00007fcab41dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.626555][T30043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1899.626568][T30043] R13: 00007fcab3616038 R14: 00007fcab3615fa0 R15: 00007ffe860ac778 [ 1899.626604][T30043] [ 1900.530730][ T29] audit: type=1804 audit(1775004087.118:39): pid=30060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14579" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2498 res=1 errno=0 [ 1900.582213][ T29] audit: type=1800 audit(1775004087.118:40): pid=30060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14579" name="cgroup.controllers" dev="tmpfs" ino=2498 res=0 errno=0 [ 1901.032142][T30067] netlink: 'syz.1.14582': attribute type 1 has an invalid length. [ 1901.127307][T30067] bond12: entered promiscuous mode [ 1901.139715][T30067] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1901.230385][T30067] bond12: (slave bridge4): making interface the new active one [ 1901.238401][T30067] bridge4: entered promiscuous mode [ 1901.246139][T30067] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 1901.298679][T30073] vlan0: entered allmulticast mode [ 1901.304423][T30073] bond12: entered allmulticast mode [ 1901.309728][T30073] bridge4: entered allmulticast mode [ 1901.524417][T30082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14585'. [ 1902.269705][T30076] lo speed is unknown, defaulting to 1000 [ 1902.748813][T30076] lo speed is unknown, defaulting to 1000 [ 1902.761725][T30112] siw: device registration error -23 [ 1902.909279][T30114] tipc: Enabled bearer , priority 0 [ 1902.926653][T30114] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14594'. [ 1903.043136][T30114] syzkaller0: entered promiscuous mode [ 1903.056290][T30114] syzkaller0: entered allmulticast mode [ 1903.090248][T30113] tipc: Resetting bearer [ 1903.167614][T30113] tipc: Disabling bearer [ 1903.292265][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1903.389946][T30126] netlink: 'syz.1.14596': attribute type 1 has an invalid length. [ 1903.577693][T30126] bond13: entered promiscuous mode [ 1903.592685][T30126] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1903.739223][T30129] vlan2: entered allmulticast mode [ 1903.760291][T30129] bond13: entered allmulticast mode [ 1903.886036][T30132] bond13: (slave bridge5): making interface the new active one [ 1903.912052][T30132] bridge5: entered promiscuous mode [ 1903.917710][T30132] bridge5: entered allmulticast mode [ 1903.919927][T30137] No such timeout policy "syz0" [ 1903.949105][T30132] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 1904.162579][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14602'. [ 1904.338502][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14603'. [ 1904.491596][T30167] netlink: 'syz.3.14608': attribute type 1 has an invalid length. [ 1904.501749][T30165] xt_CONNSECMARK: invalid mode: 254 [ 1904.540389][T30167] bond11: entered promiscuous mode [ 1904.546737][T30167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1904.596999][T30165] bond14: entered allmulticast mode [ 1904.603186][T30165] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1904.635118][T30167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1904.653505][T30167] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 1904.667593][T30167] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1904.711716][T30167] bond11: (slave vti0): making interface the new active one [ 1904.725726][T30167] vti0: entered promiscuous mode [ 1904.743701][T30167] bond11: (slave vti0): Enslaving as an active interface with an up link [ 1904.961935][T30176] netlink: 'syz.5.14611': attribute type 1 has an invalid length. [ 1905.074373][T30176] bond9: entered promiscuous mode [ 1905.080054][T30176] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1905.124555][T30180] vlan7: entered allmulticast mode [ 1905.136349][T30180] bond9: entered allmulticast mode [ 1905.228142][T30176] bond9: (slave bridge9): making interface the new active one [ 1905.256428][T30176] bridge9: entered promiscuous mode [ 1905.270063][T30176] bridge9: entered allmulticast mode [ 1905.280602][T30176] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 1905.936129][T30225] netlink: 'syz.6.14626': attribute type 22 has an invalid length. [ 1905.989376][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14626'. [ 1906.077287][T30240] 8021q: VLANs not supported on ip6gre0 [ 1906.105402][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14626'. [ 1906.127717][T30225] netlink: 'syz.6.14626': attribute type 22 has an invalid length. [ 1906.182631][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14626'. [ 1906.204824][T30246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1906.235761][T30246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1906.245395][T30246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1906.274729][T30229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.286915][T30246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14628'. [ 1906.299634][T30229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.555238][T30229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.567367][T30229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.600120][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14635'. [ 1906.619373][T30264] netlink: 'syz.5.14635': attribute type 1 has an invalid length. [ 1906.686486][T30270] netlink: 'syz.3.14636': attribute type 2 has an invalid length. [ 1906.696234][T30270] netlink: 'syz.3.14636': attribute type 11 has an invalid length. [ 1906.716519][T30229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.728349][T30229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.835202][T30229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.905581][T30229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.976321][T30278] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1907.001977][T30283] netlink: 'syz.5.14639': attribute type 1 has an invalid length. [ 1907.038989][T30283] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1907.218280][T19840] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.237602][T19840] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.261060][T19840] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.271442][T30294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.281437][T19840] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.300466][T30291] dvmrp1: entered allmulticast mode [ 1907.338336][T19836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.359980][T19836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.409110][T19836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1907.435322][T19836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.527550][T30302] netlink: zone id is out of range [ 1907.539844][T30302] netlink: zone id is out of range [ 1907.546518][T30302] netlink: zone id is out of range [ 1907.552561][T30302] netlink: zone id is out of range [ 1907.557710][T30302] netlink: zone id is out of range [ 1907.563582][T30302] netlink: zone id is out of range [ 1907.568734][T30302] netlink: zone id is out of range [ 1907.574877][T30302] netlink: zone id is out of range [ 1907.789633][T30312] netlink: 'syz.1.14647': attribute type 2 has an invalid length. [ 1908.258647][T30310] lo speed is unknown, defaulting to 1000 [ 1908.471080][T30340] netlink: 'syz.6.14658': attribute type 1 has an invalid length. [ 1908.482358][T30340] tipc: Started in network mode [ 1908.487283][T30340] tipc: Node identity ac14142f, cluster identity 4711 [ 1908.502405][T30340] tipc: New replicast peer: 0.0.0.0 [ 1908.508954][T30340] tipc: Enabled bearer , priority 26 [ 1908.520205][T30340] tipc: New replicast peer: 172.30.1.7 [ 1908.677972][T30310] lo speed is unknown, defaulting to 1000 [ 1909.141283][T30362] syzkaller1: entered promiscuous mode [ 1909.147182][T30362] syzkaller1: entered allmulticast mode [ 1909.306604][T30366] batman_adv: batadv0: Adding interface: wlan1 [ 1909.329787][T30366] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1909.622153][ T6915] tipc: Node number set to 2886997039 [ 1909.908508][T30384] tipc: Enabled bearer , priority 0 [ 1909.937752][T30382] tipc: Disabling bearer [ 1910.229389][T30400] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1910.368110][T30408] __nla_validate_parse: 8 callbacks suppressed [ 1910.368211][T30408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14677'. [ 1910.443178][T30390] lo speed is unknown, defaulting to 1000 [ 1910.965358][T30431] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1911.166004][T30437] xt_hashlimit: size too large, truncated to 1048576 [ 1911.188654][T30398] lo speed is unknown, defaulting to 1000 [ 1911.194681][T30390] lo speed is unknown, defaulting to 1000 [ 1911.645311][T30458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14690'. [ 1911.713389][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14692'. [ 1911.756885][T30464] x_tables: duplicate entry at hook 2 [ 1911.992605][T30398] lo speed is unknown, defaulting to 1000 [ 1912.261896][T30490] netlink: 'syz.3.14698': attribute type 3 has an invalid length. [ 1912.270034][T30490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14698'. [ 1912.279421][T30490] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14698'. [ 1912.496829][T30492] netlink: 'syz.5.14699': attribute type 29 has an invalid length. [ 1912.507003][T30494] veth1: entered allmulticast mode [ 1912.596951][T30498] netlink: 'syz.5.14699': attribute type 29 has an invalid length. [ 1912.970366][T30521] net_ratelimit: 9 callbacks suppressed [ 1912.970391][T30521] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 1913.167471][T30525] netlink: 'syz.6.14705': attribute type 1 has an invalid length. [ 1913.275125][T30538] netlink: 'syz.6.14705': attribute type 39 has an invalid length. [ 1913.306905][T30525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1913.364216][T30536] bond5: (slave bridge3): making interface the new active one [ 1913.373449][T30536] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1913.383015][T30492] lo speed is unknown, defaulting to 1000 [ 1914.061366][T30568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14718'. [ 1914.243919][T30492] lo speed is unknown, defaulting to 1000 [ 1914.459843][T30579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1914.486997][T30578] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 1914.538971][T30583] netlink: 276 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1914.552696][T30583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14722'. [ 1914.826838][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.838928][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.847565][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1914.854747][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.864029][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1914.917326][T30594] batman_adv: batadv0: Adding interface: wlan1 [ 1914.928582][T30594] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.961107][T30594] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1915.018892][T30598] netlink: 'syz.3.14728': attribute type 2 has an invalid length. [ 1915.033126][T30596] syzkaller0: entered promiscuous mode [ 1915.041724][T30596] syzkaller0: entered allmulticast mode [ 1915.065720][T30599] netlink: 'syz.3.14728': attribute type 2 has an invalid length. [ 1915.100082][T30598] : entered promiscuous mode [ 1915.107801][T30599] : left promiscuous mode [ 1915.714526][T30613] netlink: 'syz.2.14732': attribute type 4 has an invalid length. [ 1915.723106][T30613] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14732'. [ 1915.724705][T30612] syzkaller1: entered promiscuous mode [ 1915.737975][T30612] syzkaller1: entered allmulticast mode [ 1915.855174][ T6915] IPVS: starting estimator thread 0... [ 1915.915400][T30630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.944296][T30629] IPVS: using max 25 ests per chain, 60000 per kthread [ 1915.995575][T30636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14737'. [ 1916.181457][T30644] pim6reg1: entered promiscuous mode [ 1916.187588][T30644] pim6reg1: entered allmulticast mode [ 1916.271676][T30651] vlan0: entered promiscuous mode [ 1916.271720][T30654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14739'. [ 1916.277138][T30651] bridge0: entered promiscuous mode [ 1916.305089][T30656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14743'. [ 1916.409846][T30656] bond6: entered allmulticast mode [ 1916.428739][T30656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1916.465865][T30658] tipc: Enabling of bearer rejected, failed to enable media [ 1917.342895][T30688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14751'. [ 1918.453623][T30730] netlink: 80 bytes leftover after parsing attributes in process `syz.6.14765'. [ 1918.510625][T30735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14765'. [ 1918.701012][T30744] netlink: 'syz.3.14766': attribute type 23 has an invalid length. [ 1918.761144][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14767'. [ 1919.170472][T30768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14774'. [ 1919.192292][T30767] netlink: 192 bytes leftover after parsing attributes in process `syz.1.14772'. [ 1919.365050][T30777] netlink: 'syz.5.14776': attribute type 1 has an invalid length. [ 1919.408097][T30777] bond11: entered promiscuous mode [ 1919.413902][T30777] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1919.475023][T30780] netlink: 'syz.1.14777': attribute type 1 has an invalid length. [ 1919.483126][T30777] vlan8: entered allmulticast mode [ 1919.483153][T30777] bond11: entered allmulticast mode [ 1919.514987][T30777] bond11: (slave bridge10): making interface the new active one [ 1919.524454][T30777] bridge10: entered promiscuous mode [ 1919.529970][T30777] bridge10: entered allmulticast mode [ 1919.554686][T30777] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 1919.722889][T30783] openvswitch: netlink: Unknown nsh attribute 0 [ 1919.776982][T30787] delete_channel: no stack [ 1920.092031][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 1920.100183][ C1] lec:lec_tx_timeout: lec0 [ 1920.106101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1920.263658][T30817] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1920.264548][T30818] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1920.454918][T30829] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1920.504197][T30832] netlink: 'syz.5.14792': attribute type 1 has an invalid length. [ 1920.618204][T30832] bond12: entered promiscuous mode [ 1920.624438][T30832] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1920.644638][T30840] vlan9: entered allmulticast mode [ 1920.663833][T30840] bond12: entered allmulticast mode [ 1920.750016][T30832] bond12: (slave bridge11): making interface the new active one [ 1920.765528][T30832] bridge11: entered promiscuous mode [ 1920.775511][T30832] bridge11: entered allmulticast mode [ 1920.791106][T30852] tipc: Failed to remove unknown binding: 66,0,0/0:3224226700/3224226702 [ 1920.802476][T30852] tipc: Failed to remove unknown binding: 66,0,0/0:3224226700/3224226701 [ 1920.820245][T30852] tipc: Failed to remove unknown binding: 66,0,0/0:3224226700/3224226702 [ 1920.829423][T30852] tipc: Failed to remove unknown binding: 66,0,0/0:3224226700/3224226701 [ 1920.837890][T30832] bond12: (slave bridge11): Enslaving as an active interface with an up link [ 1920.953947][T30856] __nla_validate_parse: 7 callbacks suppressed [ 1920.953969][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14799'. [ 1920.990989][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14799'. [ 1921.137108][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14803'. [ 1921.154248][T30864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1921.325874][T30878] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14807'. [ 1921.447950][T30886] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1921.673866][T30886] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1921.703258][T30895] syzkaller0: entered promiscuous mode [ 1921.711080][T30895] syzkaller0: entered allmulticast mode [ 1921.725143][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14808'. [ 1921.741258][T30886] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1921.764245][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14810'. [ 1921.776828][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14810'. [ 1921.811672][T30886] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1922.026470][T19825] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1922.095514][T19829] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1922.133626][T19829] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1922.244781][T19829] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1922.720632][T30928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14817'. [ 1922.752359][T30928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14817'. [ 1922.837031][T30931] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14820'. [ 1922.849207][T30933] tipc: Enabled bearer , priority 0 [ 1922.878002][T30931] netlink: 'syz.1.14820': attribute type 1 has an invalid length. [ 1922.887022][T30933] syzkaller0: entered allmulticast mode [ 1923.001448][T30939] tipc: Resetting bearer [ 1923.013017][T30932] tipc: Resetting bearer [ 1923.054060][T30932] tipc: Disabling bearer [ 1923.132879][ T30] INFO: task syz.0.13542:26043 blocked for more than 143 seconds. [ 1923.140760][ T30] Not tainted syzkaller #0 [ 1923.150127][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1923.160806][ T30] task:syz.0.13542 state:D stack:23672 pid:26043 tgid:26041 ppid:19765 task_flags:0x400140 flags:0x00080002 [ 1923.174316][ T30] Call Trace: [ 1923.177641][ T30] [ 1923.180613][ T30] __schedule+0x15dd/0x52d0 [ 1923.186075][ T30] ? __pfx___schedule+0x10/0x10 [ 1923.191063][ T30] ? schedule+0x90/0x360 [ 1923.196742][ T30] schedule+0x164/0x360 [ 1923.201036][ T30] schedule_preempt_disabled+0x13/0x30 [ 1923.207656][ T30] __mutex_lock+0x7fe/0x1300 [ 1923.213205][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1923.222871][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1923.229698][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1923.235951][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1923.239591][T30955] netlink: 'syz.6.14828': attribute type 89 has an invalid length. [ 1923.240564][ T30] ? genlmsg_put+0x137/0x2e0 [ 1923.253998][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1923.259670][ T30] ? kmem_cache_free+0x187/0x630 [ 1923.265184][ T30] ? nlmon_xmit+0xb0/0x100 [ 1923.269727][ T30] ? __nla_parse+0x40/0x60 [ 1923.274514][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1923.280789][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1923.287322][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1923.294351][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1923.300013][ T30] ? __asan_memcpy+0x40/0x70 [ 1923.304862][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1923.311353][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 1923.316854][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1923.321476][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1923.326719][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1923.333184][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1923.338253][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1923.343276][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1923.348407][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1923.354153][ T30] ? down_read+0x272/0x2e0 [ 1923.358670][ T30] ? genl_rcv+0xd/0x40 [ 1923.363011][ T30] genl_rcv+0x28/0x40 [ 1923.367100][ T30] netlink_unicast+0x80f/0x9b0 [ 1923.372770][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1923.378198][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1923.383715][ T30] ? skb_put+0x11b/0x210 [ 1923.388192][ T30] netlink_sendmsg+0x813/0xb40 [ 1923.393367][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1923.398946][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1923.404130][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1923.409583][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1923.414799][ T30] ? futex_unqueue+0x211/0x240 [ 1923.419882][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1923.425569][ T30] ? import_iovec+0x73/0xa0 [ 1923.430149][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1923.435276][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1923.440521][ T30] ? futex_wait+0x29a/0x380 [ 1923.445488][ T30] ? __fget_files+0x2a/0x420 [ 1923.450105][ T30] ? __fget_files+0x3a0/0x420 [ 1923.455618][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1923.460589][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1923.466342][ T30] ? rcu_is_watching+0x15/0xb0 [ 1923.471407][ T30] do_syscall_64+0x14d/0xf80 [ 1923.476564][ T30] ? trace_irq_disable+0x3b/0x150 [ 1923.481615][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.487783][ T30] ? clear_bhb_loop+0x40/0x90 [ 1923.492865][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.498772][ T30] RIP: 0033:0x7fef6f59c819 [ 1923.503563][ T30] RSP: 002b:00007fef7042b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1923.512033][ T30] RAX: ffffffffffffffda RBX: 00007fef6f815fa0 RCX: 00007fef6f59c819 [ 1923.520108][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 1923.528524][ T30] RBP: 00007fef6f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1923.537156][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1923.545584][ T30] R13: 00007fef6f816038 R14: 00007fef6f815fa0 R15: 00007ffede80bd78 [ 1923.553750][ T30] [ 1923.556979][ T30] [ 1923.556979][ T30] Showing all locks held in the system: [ 1923.568499][ T30] 1 lock held by khungtaskd/30: [ 1923.573481][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1923.583836][ T30] 2 locks held by getty/5584: [ 1923.588715][ T30] #0: ffff8880366f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1923.598704][ T30] #1: ffffc9000321e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1923.609297][ T30] 3 locks held by kworker/0:12/6488: [ 1923.615023][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1923.626391][ T30] #1: ffffc9000c467c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1923.639131][ T30] #2: ffff888053716240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 1923.649539][ T30] 2 locks held by syz.4.12990/23832: [ 1923.654995][ T30] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1923.663622][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1923.673889][ T30] 2 locks held by syz.0.13542/26043: [ 1923.679273][ T30] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1923.687802][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1923.698458][ T30] 4 locks held by syz.1.14827/30943: [ 1923.704150][ T30] #0: ffff88808d954cc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1923.714562][ T30] #1: ffffffff8fc35ab0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1923.726325][ T30] #2: ffff88805c7b58d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1923.736835][ T30] #3: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1923.748251][ T30] [ 1923.750607][ T30] ============================================= [ 1923.750607][ T30] [ 1923.759202][ T30] NMI backtrace for cpu 0 [ 1923.759223][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1923.759246][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1923.759260][ T30] Call Trace: [ 1923.759268][ T30] [ 1923.759277][ T30] dump_stack_lvl+0xe8/0x150 [ 1923.759314][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1923.759340][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1923.759368][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1923.759393][ T30] sys_info+0x135/0x170 [ 1923.759412][ T30] watchdog+0xfd9/0x1030 [ 1923.759435][ T30] ? watchdog+0x21a/0x1030 [ 1923.759460][ T30] kthread+0x388/0x470 [ 1923.759481][ T30] ? __pfx_watchdog+0x10/0x10 [ 1923.759497][ T30] ? __pfx_kthread+0x10/0x10 [ 1923.759520][ T30] ret_from_fork+0x51e/0xb90 [ 1923.759549][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.759574][ T30] ? __switch_to+0xc7d/0x1450 [ 1923.759601][ T30] ? __pfx_kthread+0x10/0x10 [ 1923.759623][ T30] ret_from_fork_asm+0x1a/0x30 [ 1923.759671][ T30] [ 1923.759679][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1923.870773][ C1] NMI backtrace for cpu 1 [ 1923.870792][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1923.870810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1923.870821][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1923.870848][ C1] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 22 18 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1923.870863][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1923.870879][ C1] RAX: 0000000000410a59 RBX: ffffffff819a913a RCX: 0000000080000001 [ 1923.870891][ C1] RDX: 0000000000000001 RSI: ffffffff8df272cd RDI: ffffffff8c27ca80 [ 1923.870903][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 1923.870915][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 1923.870927][ C1] R13: 1ffff11003b58000 R14: 0000000000000001 R15: 1ffff11003b58000 [ 1923.870939][ C1] FS: 0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 1923.870953][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1923.870965][ C1] CR2: 00007fcab35e7158 CR3: 0000000093ae4000 CR4: 00000000003526f0 [ 1923.870987][ C1] Call Trace: [ 1923.870995][ C1] [ 1923.871002][ C1] default_idle+0x9/0x20 [ 1923.871018][ C1] default_idle_call+0x72/0xb0 [ 1923.871035][ C1] do_idle+0x36a/0x5f0 [ 1923.871056][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1923.871077][ C1] ? __pfx_do_idle+0x10/0x10 [ 1923.871103][ C1] cpu_startup_entry+0x43/0x60 [ 1923.871124][ C1] start_secondary+0x101/0x110 [ 1923.871143][ C1] common_startup_64+0x13e/0x147 [ 1923.871167][ C1] [ 1924.040764][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1924.047643][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1924.056764][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1924.066821][ T30] Call Trace: [ 1924.070133][ T30] [ 1924.073090][ T30] vpanic+0x56c/0xa60 [ 1924.077188][ T30] ? __pfx___schedule+0x10/0x10 [ 1924.082055][ T30] ? __pfx_vpanic+0x10/0x10 [ 1924.086703][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1924.091919][ T30] panic+0xc5/0xd0 [ 1924.095670][ T30] ? __pfx_panic+0x10/0x10 [ 1924.100156][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1924.105653][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1924.111835][ T30] watchdog+0x1023/0x1030 [ 1924.116191][ T30] ? watchdog+0x21a/0x1030 [ 1924.120638][ T30] kthread+0x388/0x470 [ 1924.124727][ T30] ? __pfx_watchdog+0x10/0x10 [ 1924.129419][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.134023][ T30] ret_from_fork+0x51e/0xb90 [ 1924.138642][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1924.143765][ T30] ? __switch_to+0xc7d/0x1450 [ 1924.148462][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.153058][ T30] ret_from_fork_asm+0x1a/0x30 [ 1924.157854][ T30] [ 1924.161036][ T30] Kernel Offset: disabled [ 1924.165422][ T30] Rebooting in 86400 seconds..