last executing test programs: 23m49.516829284s ago: executing program 3 (id=365): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000001c0)={0xffff, 0x4, 0x9, 0x4, 0x5}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000180), {[{{@arp={@multicast2, @local, 0xffffff00, 0xff, 0x10, 0xc, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, 0xe, 0x2, 0x7, 0x9, 0x9d, 0x80f3, 'tunl0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x310}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffffff, 0xd, 0x5, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0xc9, 0x63b5, 0x2, 0x1ff, 0x7f, 'macvlan1\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @multicast2, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @rand_addr=0x64010102, 0x0, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) close(r2) 23m49.304007148s ago: executing program 3 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0x80, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x861, 0x8}) 23m49.158291424s ago: executing program 3 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfff9, 0x99}, 0x20) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x100}, {r1, 0x2}, {r2, 0x2000}], 0x3, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x8]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 23m48.83990095s ago: executing program 3 (id=371): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x11) 23m48.64613179s ago: executing program 3 (id=373): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0xffffffffffffffff, 0x1000, 0x10}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r12, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="f2", 0x1}], 0x1}, 0x4011) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r13, 0x29, 0x14, 0x0, 0xfff3) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 23m47.487028899s ago: executing program 3 (id=386): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x698202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) recvmsg$unix(r6, &(0x7f0000000740)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/247, 0xf7}], 0x3}, 0x40000041) openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x100000, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x4300, 0x4a213}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0xce20}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) r12 = getpid() r13 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000180)=r12, 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x0, 0xff, 0x0, 0x0, 0xfd, 0x2, 0x2600}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x448c1) 23m27.188833435s ago: executing program 32 (id=386): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x698202, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) recvmsg$unix(r6, &(0x7f0000000740)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/247, 0xf7}], 0x3}, 0x40000041) openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x100000, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x4300, 0x4a213}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0xce20}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) r12 = getpid() r13 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000180)=r12, 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x0, 0xff, 0x0, 0x0, 0xfd, 0x2, 0x2600}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x448c1) 4.815650437s ago: executing program 4 (id=13758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 4.802467121s ago: executing program 1 (id=13760): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x2) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x2) 4.724895938s ago: executing program 4 (id=13761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) (async) shutdown(r0, 0x1) 4.440003315s ago: executing program 1 (id=13766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x3, 0xf, 0x6}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x6, 0x249, 0xe, 0x101, 0x800, 0x101, 0x5, 0x5}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ip6gretap0\x00'}, 0x18) r6 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6401, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x80, 0x7, 0x2, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xea, 0x6f}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) 4.119600966s ago: executing program 1 (id=13770): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0xc884) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) 4.119115108s ago: executing program 2 (id=13771): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb010100030006a40e07fff024bb000000000000000040000000", 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) 3.743886208s ago: executing program 4 (id=13775): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x4c3, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x4008) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.728279506s ago: executing program 2 (id=13776): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000020000000000a010800000000000000000a0000000900010073797a31fe00000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0) 3.60390821s ago: executing program 2 (id=13778): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @dev}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="5b20bc9cc46a", 0x6) r7 = socket(0x2c, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}], 0x1}, 0x7377e9a917217d18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) r10 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r10, 0x1}, 0x20) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x80) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10c80, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x80}, {r4, 0x4000}, {r3, 0x10000}, {r2, 0x8600}, {r3, 0x20}, {r1, 0x100}, {r0, 0x200}, {r3, 0x1a4}, {r11, 0x2dfda5b0cef22874}], 0x9, &(0x7f00000001c0), &(0x7f0000000280)={[0x10]}, 0x8) 2.533763567s ago: executing program 5 (id=13783): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x3, 0x8, 0x7fffffff, 0x80, r1, 0x8, '\x00', r0, r2, 0x3, 0x4, 0x1, 0xa}, 0x50) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001500"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r11) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c8010000d713e6c4f61b00a7f325aa095d5033c52ef35987f9ff71075e065614846815ca059f90c1ed9aa84281b91fe8f26eb93bee3f5064d9c8f2b06bd32cb4ce0af655adbbc0d5ee0b54ca10462eaeb50d2d6118b23b0307e0df2b99fb92cdd6e90767e4730df0d67be9054613df27b19ea6bb5d600587b3ea248e1a1cc0c8e66e55e9efdf4f0ef82b7ebda690f4ebc05137d55decc43e39d9a1eef5801468b6cf585ad0369ea4eac17faeaed3c12e59b030f5eb65bddb7c0fc3500fb5bcb64f6f1701", @ANYRESHEX=r4, @ANYBLOB="05e7a3dd80e6a0263bd607f110faeb06713d13c4daff5bb4fedba0c1022361a378e6512b59fd2c2b31d2c1e204", @ANYRESHEX, @ANYRES8, @ANYRESOCT=r4, @ANYRES8=r12], 0x1c8}}, 0x2000c000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r13 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r13, &(0x7f0000000180)={0x27}, 0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r16, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3418000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x7c, r15, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1716}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x4, 0x0, {0x400, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x4, 0x24}}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x2, 0x2b2, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x1, 0x3}}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000044) 1.127490887s ago: executing program 1 (id=13785): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 1.126646525s ago: executing program 5 (id=13786): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11dc0, &(0x7f00000009c0)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0xd73, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xfa, 0x1, 0x0, 0x3, 0x7, 0x5}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x9, 0x1, 0x1, 0x1, 0x6, 0x10}, 0x2, {0x5d1, 0x40, 0x1, 0x15, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "3e9c7461135f3431c2d3ca7b42d20ba7a787f88c935da22c690597fc4c209f8f12ffc1876878d010b6b17d6f2e66175bf144289484a27b46f2adf6f8869bc24983094224f27aa9ea5149987348ab70db2234b2d9f0ab52f2216ed4b59dcc15c6e6ebb1fa972bb4b06da1b8401d0f811c9a9c2bc7cf23635e32af59f3deae9f40b93477879611c15444da1d841ad494be856af161da849f1b3e2a3dbd02a0d34f685795ec0ce67b7b93d4bae8fcd98d5cc1c775cc5dc88cde84b99e2118d8113ffd3b74952a12b3764165af3211bf79c8573d3623877718a180fe6bb69bf71bf03f9d7269392b0663aea7ba1b2cc15a5ac5a9f800f56ddc208ff89908d3183c4aa9a7ea58a9621a8868d9ca15ba186675c1e5770090766502986df7292c6560585f8cb9096e0258f43fd0abb94fb8da39e2950ae23dd05e96eea150cefe84c58d6e3d4d196f7a71c49314d5816ce9207233666e95a40e6a4f2d9493682e4f86fc0c31003c7ba27e7c322bfe6e9bf00a00e059ef8433883aba3ce7ce527ca650b39540346693b404649d6dde6b5e682064dabeadda60e998d5e07c56449db9db6aae620e20fb818700ffda7417c179e1499971ce2f06bc87df68e6f9b019ec2238729c9abb6ac0cc0bcea961a5b72e1291ec5a6350e8b01fc4eff72b2f823841cc8fe9133fe4148ae7e7b68acadc0e3ed1455d3b4df11fb945940520c0e2a1b6679339b4abd9cd1a48169898341c64077a76f75011f7ae3c8400f392938ef90b893816785a6c5098d43967777700bfbdf45b5aa05eba56a3fa4903e96cf91713b4b1842de023b5ac1e7003d22223cc558162e43a76ab7105d0539b89ecfeb9185e0ea7c782f4d93f2d23f710d63a3af62e8304bd93991dcfe781c9274b8e3a7f1dffa1e157fd0499f16cba56fdb9930141f7bed5b8080efbf6129366640621b1a46e1ce2a0550ad3ea1e79f09eef0e94fe9e603bffcb4e73a86ed49012e3d73fc8344a6b655aba6df481202717c09b08bcd49d6369dfcd1fffba289c4054576ecbc564e1f961aa04639f0c7c450417f7c737804aedc48430c91124748c6ab05da728da4948336d9b4d1a4fee1c9a6ffd782f0905127366ab9f02b4b9b10d2da405b6eb8c7b23ab257ee9b026a35308c262c66f3affd184f118d2a41e126e1baffc91cec4da89c0ba51a1031f162e5371d85daa85234e00d53b170a0ca53b5f17fe294d3de3d9c6f96da91eb14404642ed94486a857f859dbd89a1a213c3c9b9256bb3d0e2c96f2120eb82c827704697461b309841f285c9a8792bc8855817e216f7e45d744337ad38e0be715d24e2693e40bddb186aebf5a017eb2e11eed760aa02f9e9db6a24acaa5d46d422b02eed71f2224cf9fed9575a9db4f73a3bd104f9efd0804f61ee431bc6c9893fba875bc4989733f42e2fa7fe4e0f5511afee081a52945a0466e4b8530a3863c36064cfaf718f60a4f04ba4c033413000808bca77014cac56fd240717948645971e01fbf915f193b752b426f147515e0a9dc94d4514bd9ae1e145b6cd9cf5d6efb21adecf459cd1bb6fa43054f57c2c401b7e5bb051112555ef06849ecd3b03f280a42da8ef67a5e3591164af9613cb13f3e0fed67f0bce014a8912e1540129121fbf990edb15c9bc88239ec5b12a2997c8e171d25e6e0eaa8d4d47b0b8a64dfac22d7008354b8bb82b5384a262a94d3138c6685a18cd25fa660eeed7df98f891c58e4a58ea5ec3237d471324c6efbb9d165820bd7c1037ccda38686e164324d2c37be51475cd2c10d0519db4450d3fd991c5a192a666c13944db6e49e5dd093412893de200665456c95e2f4f40533981f0d45142e42845b650a71afce245b2bc0a311797b0e7833a43df23f2ca1e5a4aec84fea84f641139d1f2fa60e21f25ae4c0d45c0cd296c773a345247dfd44e9d9ac7f5515cfa2154f239691209e46de5e70b55deb0e1724c9c59b084ba08d614c55ae47907983f581e0b79434a987e004480071b4d62bbcb2999aaa01b95e24003dabf522bb753625893d8b8e5f31b9c7d000f07bd06b0338a8aa109216960a1a0c3ad62ad0919b9548afa5f444dbd9d878bb40c928342a58003bc687971acbc6b7eb3a60cbb419c829e680ea78f173bd3ad9e4bfe14523a4293e0e199eed88cfab582ed08c3316f587d8a8e62b65a64bbfaf3f240818f3c154a7b863513fef81b733340dbea31be7b75f87c861475f9b0ee4653652112349fb801b8a1e97fee8d1f2af7684126e51896faeacc535e04d23849874f73584f5979f148704730c59c44279855172dc35be2876c8033a7af025a6766d0bdaf21a0a7099c5349f4ee71b172671b5d487f709371551b0fafe416b143fa7a9b5f921c450cb0a498930bd991c51bd8e854ad00d0573795e285a46ad29a04fefd72c31698e8ce350233371ac8c05028e25caf4a1f196e44255be145de6c8cca42ec62dab93a90730f51b17e8662230850949d2e92e50069a293cc6bf47d8ebbc677d9c021641928d116e01d558ffcba0cbedf779a44a987e7d99aaa6acdb828948b6cc2dd2ffd27bff7833b14551ccf767be53af4124b1f2db5b48655dc1dafaf1dbf058e9abf6c41a19c41d1abb273acedec7d0826180bd6bc336a723390b49461f736b64b3ff7fc2cefda83daffee10acad1ac7b3e725898b435eda36380ea97df7118b31c7bfb9c5a87353ad5b8f1673ffd8cb93ebd215f5ff1f9949334e9e979c4e94863b73655a8c790569935e9bd5218516a5eedfca46ef191f528235355f8ed16328371bd480206c5023e6ff2052650c7faaf2b292f81a32709781419b2ee908fa93d3771a4a114c2a47642509ab0a7e43fc7538e11fa63185a1af95b41bbe36c932f0a65bf297971b5699461f38c06d98da5a1c446d93f01c5d3d037a40396a28a37602f8898a5e47cd6ac1324ddff7bd3c643ae54d8f1eef10e7a0121c0be8f76c9bcccbda11333a0bd8d8e13b905d6d9d424e837d8539e02d99c6d5e730806de9c006d453a6f8ed5f3c63f603ba74c134adf64250d8eace762b717d5cc1f7964df8fb147196c6821b02224067e97d19f7b7ec35b37686c9b7128ca14b03a7da8445c551f4730e4a80b1846583b023398f429ec17a3cc4b29cb916b6db3eab865f2636008fd33330b7b7a96308bb7158cfa87ab383827ad3c704a49e41f30c061c0e3ca78179cbb4d7b2de8a0aaf8c7a4faed3270e50d29024c20f749bc74f7b04910ddbfce93806918a97ea512c9e9df0d8e33c005d7a31105596c8e25f5956671f5c4f7b785cb07c862f50298a487386e79b6ee9cf58bad497bdbda52889225dbf739ca6bc157112294834bf4a9ede07c63e50984615b0c8c79f40bafbb1b186b61365739adab9ecd79675a56ecad50761a7d07f0e11b6a577c0ef62c69794be6c5dfdd58bed3fdb4591fd5297b609d16d16b0d907fc92afbab13fff6d7807d963f99dc20558227c2abf7a9db80bcde2801c81856ef541eb4545e66cca666e79773ebba144b09fb28ad9b363e5f66f6d84afb153eead6968b651176a2a36a3207f62305bf6e6182f561b189e2aceaff1fe1422a6910314f816516616594402b5b3143db377664c23835dd4a610ddf569e46b44bb05f89a98d6cfe779328fb6c50cbd635c6cbdae181f75e92deecf044919b25459bdf8f431be214e492274ec570e01d57025f9a02ef99168b8137c75a786909332d831b720a7ed53e2e603d1ceae2220f82f617c4a0ed6d81118949c1b930a80f963b737f6f051d6bf0f876e4b1a6a316acd45df1166ba1ebf6a83d408f9519b7ce47b0e178b57bdf94b8f12a5ae38f0c20c32086b78abfcc04ccb054a17f767130bf575bc42f0a6ab2e15f58df95470288e4c447e4f4b59a0d19bab1c6fc99f949c1326bb33f826855b7c445868a921481a60c87b9b06c900d7443e5b0ca515b6d2b09d2aac07662c45f542e5b74018a5b4eb93c67c8be5263992c35544749e6a783a02f54a3a290341a73d2b9fe4fb27ee46b0424249c8a2ea9b5f6f3fb030e5d74074a2ccbdc7ec39f4eb0275b133ce2562c0b710383bfdd59cc49b2a25003652c61e622e7e2d20079e7116a5529d7c7aeed331b8924e808173f4aaa1ea228e626071c1e0c7b9277a6efbab77d28609462423ce16407b5107831e55d6794400b3881a76df246f37388cd1838c85f85782558d276fb006f8981986e8e40ed136e7bcfac00ac966f8820e51cb6d7d7b01fdc5d25d52c8a60575f32d6735d9c37e3a34f1cc4f2ebe2038664a177a5d9f2b81cbee7c4d215abe4b655db17f19722944bd00832ccaf62678ef1da2549a771b1f053cc7ea26952e3813e7c30248d5779af6d6d91c52e8bf8ca80c4a940025d31b07ec8dcefdae1f09a104b1cb4148d9d557bf76a369b3f2d98dbbcec1700c37dbef6fdacdd55be2aae9e6d926a857d4d13a5ad718865e8531d85277af57e877ac9ef991c003144dfdfcf86581fa0d93751587b9f1900b71103849016815369f3c10789137c9f5a7f67eb8056dcc3c33f24a65e1ef6499add5e3da1c57bbf97a0a63b7040837dc72b3be2458241fc8d09949763514c3a2fcfc69e8351b14f7009854070996e2da8f8d1e19e4c5ee66eeb925bcc2bf3977b58cd44e37c1773490b4194658765dee18a41c6f336915da73a68fe379c3fb2aa64d5e0b0bfa6feb8e6b4d28892f298b42f18e293599bbbd730094b17fc880c1c3442d91d127726153c"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x1d1, &(0x7f00000002c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "1bf859", 0x19b, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0x2, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x3b, 0x12, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0xff, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}, @fragment={0x32, 0x0, 0x7, 0x1, 0x0, 0x3, 0x67}, @srh={0x6c, 0xc, 0x4, 0x6, 0x4, 0x50, 0x4, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x39}]}], {0x4e20, 0x4e21, 0x73, 0x0, @opaque="dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"}}}}}}, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @private}, &(0x7f0000001780)=0x8) 1.112047203s ago: executing program 2 (id=13787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x25, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}], 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x5, 0x2}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa0000, 0xfffffff8, 0x8509, 0x8, 0x13, 0x9, 0x8001, 0x5]}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [0x0, 0x0, 0xffffff00], [0xffffffff, 0xff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x40, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0x20}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) r3 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r3, &(0x7f0000000280)='V', 0x1, 0x40, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) close(r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b400000010f10000000000000000000000060000caae6f044557ae113e452f59c0cdef418db67233e14a421276a0e9dfdc2d", @ANYRESOCT=r2, @ANYBLOB="982a000001000000240012800b00010067656e65766500001400028005000d007f00000005000d00080000006800198014000400a7a0bacf24dbd2c0be30a040258f52cc140005000cf9d5ee5d86891eb778f8b8ddbb280414000500360aeb4f468d1006d5d7cb7c08841783140004005737ba2b7f5e25fdd053e22839944b90140005005a2aa51afedfee47e18aca9428bbd03008002800e57a0000"], 0xb4}}, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) 1.013242642s ago: executing program 0 (id=13788): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde2}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 903.502166ms ago: executing program 4 (id=13789): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) writev(r0, &(0x7f0000000000), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) socket$nl_route(0x10, 0x3, 0x0) 902.404643ms ago: executing program 1 (id=13790): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@dellink={0x48, 0x11, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1, 0xb14}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@dellink={0x48, 0x11, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1, 0xb14}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) close(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070000000000000000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e}, 0x28) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000400)=0x3, 0x4) 836.214678ms ago: executing program 5 (id=13791): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'xfrm0\x00', {0xffe}, 0x2b1}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {}, 0x105}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'xfrm0\x00', {0xffe}, 0x2b1}) (async) 724.975766ms ago: executing program 1 (id=13792): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007060108000000000000f1000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040015}, 0x288d0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000002a112, 0xffffffffffffffff, 0x2000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xd1383000) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x6, 0x3}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendto$ax25(r4, &(0x7f0000000100)="e2f3ca07bbb3e577eaee69751e6f2e3bd83410ddf9aa278761641ab06e76a799ba0e0b2b8013994e9612366ba7ff204e9493cfd544d7d630c2087e468bb0c324c08a87ee8da1db539d0320f48e6daaee39fcf85ee72b499e64", 0x59, 0x84, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="fff50000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) (async, rerun: 64) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) (rerun: 64) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x2000) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) 619.455855ms ago: executing program 5 (id=13793): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x4000804) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 64) 611.691921ms ago: executing program 4 (id=13794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$kcm(0x21, 0x2, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8, r2}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="05"], 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@generic={0x4, 0x9, 0xf, 0x64e}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ldst={0x0, 0x0, 0x3, 0x8, 0xc, 0x18}, @func, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x5a}, @jmp={0x5, 0x1, 0xa, 0xa, 0xa, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x7, 0x9, &(0x7f0000000540)=""/9, 0x41000, 0x6, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x5, 0x7, 0x9}, 0x10, 0x0, r6, 0x8, &(0x7f0000000700)=[r7, r9], &(0x7f00000007c0)=[{0x1, 0x5, 0x3, 0xb}, {0x5, 0x5, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x6}, {0x0, 0x4, 0x1, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x0, 0x3, 0x0, 0xc}, {0x4, 0x4, 0xe, 0x5}, {0x4, 0x2, 0xa, 0x8}], 0x10, 0x4f5}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r15, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 611.13761ms ago: executing program 0 (id=13795): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 513.920319ms ago: executing program 2 (id=13796): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) socket$alg(0x26, 0x5, 0x0) 489.317916ms ago: executing program 0 (id=13797): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = accept$packet(r5, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001a00)=0x14) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000001a40)=0xe22) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r5, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/191, 0xbf, 0x0, &(0x7f0000000600)=""/146, 0x92}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x11, &(0x7f0000000400)=""/17, 0x40f00, 0x31, '\x00', r7, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x8, 0x4, 0x46e}, 0x10, r8, 0x0, 0x5, &(0x7f0000000740)=[r5, r5, r5], &(0x7f0000000780)=[{0x2, 0x1, 0x5, 0xb}, {0x0, 0x4, 0x8, 0x8}, {0x3, 0x5, 0x10, 0xa}, {0x5, 0x2, 0x6, 0x3}, {0x2, 0x2, 0x0, 0x5}], 0x10, 0x3}, 0x94) sendmsg$nl_generic(r4, 0x0, 0x0) r9 = socket(0x29, 0x3, 0x101) syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c94400040000008f51a80e5f48fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c100000000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="32fb47b311f5103eb0b72b77e2bc37ba57cf36c3b2f5e7b4cf3eb72bb1c44faf844645c5642583b519ef4eb40951c63dbb71988cf1a4fc4310f7c27b43237b6bb589344c2cfd2bf2089eee26fd28498db5e24614922cdd3d16800b8a091c52c75f9034863075f3fe95e887cb3279d62620a792c1e5a785c60105002fc8bf26500dc81fd0619b12d87dffb59aace6b84aba8980afd648755e62bdf3b15bcf86f5028702b7b1136d66d032e6b2f90b2d61b8e1d0bab4dd6a6fe5d7bf4abc707e8c175171227ff726f2e39731d386ff6610b5ab8b2eb02c317235db9a6de8ea5b9df561426f8b53e8a0d0086d9ca1b46650139a4214ee3cd9434aea8b93f2486af20e6d0a65c37745d25611a92ef5806168c661519a75f22615390a6d08c1a22c101d111190ae342ad6dc0dd298d8ec7bd26f28bdfa6c76c60d3e5323bbfc76da3d6e1c1185f82290e5d9aa40249ca3c3e9f8ee6ac39bad3ac51549747d7705842533bf1c228394f1928e8835278730a2fd09165e3b1f8496583f94065bc6feecf10c197b8eba7d96f1e3eb81c60c69518a1da5cf191d0638e0b251be592cf44996faf803a4b158a662541d27143230323ed9ccc1ca48a783a749f48df46f5d4f28dbb34a790958a648358cb1e316c2c48b4c037a5ad0722d48c8930b396fe3e4466956c25e8043e7199c07363e2805356b66b3fcdc02ef4efd427a6851ac2ca1bcca4e4f1df46023a5f2cc95ca94316265a5cd49204f604770992fb7d66ee0ca1ca4a105b465ae62690ca77fd5ee0f88c48a1ee06e51802963061f68402f69d255eb3e416f9a024139a5298cfb8d4c542617c1fa8a67c355c83cdbdea17f9fdaf5e540a17bb8abebeb7d40c0573aaebfdcf56982cf176a49c0d145b4e6ebd7e026434fdbc260a33aaf488e490fac8d3ca762a5a56c32b6c0a6e9a666c5ea87d5061352f1fb1748f8407fa177bc817681ff78410c95d18f95bde360a8313085f891ce0e53f2403ba61990d0bfbf6e46846fcf6d742f208f1ea84e35bb7aa23c13d1546cd4dcf6e24aab477e2db71f272e9fd0e90598a7f5a24ad78fb9910daefb37f2696aaef06f551e2f292d615dda8e5a9d9b0903fb5fd0087db217523b12be7ab716f0c81775522a07cb033dd6d4f080c82fcfb5e096219744a71468c04aac7e26cc8e6cc13a21fa6c74bc09f495bae5ef2d532fac74468c2431bd7f44f83e63942127bd02ac95abdae60ad322e007a05636da176edec124f5ea4982f967bedced06fa3104424126cea3de8dd267a9504f014a483927b078026b4a468587cbaac3732a9e8ec39b9a512aca0368ad71cef57d158da8520e0d8af41feec1069bb5be9563902ac322244618873062d38202a82c4a7376d794e6ad962c86be5a3790894afb2eacb6800293cffcc8e4f3c630762386f1e22ec3fdfc06d75aab69bd2997d48eb7f14e58f768ffa3ecc140edd404b433b25674179e12bc1d9cbead02690de714125ba2a805942f952e14009e0a7d3171c03b45be1bbd13047221bb1b59d78a8e50f9c8b0bd9f7be53d6ef5b5133123a9905b0f376375d4c66936965284333e4b4790cf193858b9fb51b0a65ee431de41761d491d2fdb91bd78b3edfdac425bea40c6d047cecc75c03791822b48fbcd744bb12da6484636e30ef6a5bc958f9071e44b7b6155a28f66d892daade26bbefe9261e38bd87530cc49a343a2560e97f9cd39933d8b4d4a4b5a9d81e2911f41657bfb7384f36afafe730742f9c65183efab16b086dc75f7a5d913fa029a362eb72ee56d5d6aa8fa94e64fb9fada82681f9d3ada6f439f74c358d12d68366aa4695f47860b3b571030d471bad2bbe357a674eefd8da76fd27c8ce3431dd2d7811735a17a4af63b50aa376a28d1f277520d67a386f00699ebca2399505bec42dd2236459c12884d580cf3ec692da87c9cd19900b12e668ca2352343c4f0ef203c4247a760d897eb700b37636e2015fb22a759ec707325fadecf934ca46dc5dc1111cbd7e7688c75e1dd80813e005115893a3685d22713bd0240d8a4b08aabc3e2c01e5891078586600faad1d03e4203927b013ff78f65bf8003ee2aabe4f98de9ae68acfbb8337697cc44c15c5dcf98197269be3d9a52964887d1dab19249c89bcb29d2c6298947bf3d2b60dea5c60e61cd45f28107af9472fefd93c187ef5798f6c7ef48e7f937bf63855e6ce327ccce3494236aab5154df4192a7f4bc7ae82dca1c4b82e33b3e9b583be71bd4a61dd3b0c4ec227cdec537188e2b31594816fd43ef966784ed0d7046768c5779f3c0d19414859e937b87f145ce33d93e315cb04f270d174f4122aa3ff4d1462efed7354f9ee94f666dc6809e203702799e476ce2e29eaa8b3138fe51f04f68fd45506b610b9388a507075a1e4c7637523274bf1a9645bd369ce7836c766ef635beea0f2951ed72c9603e82b1bf512fb570204509994a5c266af67cf8b7db2857265478297539f4c984a936cf5ec7eca5589d0d6524976585e0887a567e76974721da3a8017a4331ccc19ae98cf060ec011840df32f297d597ddf60bca140351796865166305b2dd435448219010640fe036831493007a75e154c525249d4a1ba0dfed8d8e0cdd25e5932e4746c35eab50ad5d4029531498d24d95a1d6848250cdcb1359a7eca05aa2361d1c917a4f58ee3972a31dc9a91daeb8cb8c5b6880695218902253d259bbfbe139f372237ee190580ee6af1183445a1bd70b8094809f4f0f054d486698fb1241c0322eb40aa54402273a1a7a7a610f260134e0ab5a4dfcfce46591a477323c33f1ca7b03b5fe656fb2d56d1b1c509b4d04aba152e7144b092c79ff509be822049c510455b49ee33376643015ca1813f6587b6509dc83ebbe2d743ebf7be7842e3c852fb2f00430b039a58d8a8acb9a32c285969a04550c4a4000e3226b8e318fde34fe64c242ea47f35b9132b13604acc11c7db5d640f961cda9a086da1f9f55ed4242dfb66ea83a9c902aba7f75ca6196f0fd54adbb0c46ca21af41639f92197d857b129d0156374a8fc8ac6b1ffe2e3c5562784871c5bb1ccbe544745e32ecacd4a6daa44807e4e541f71bf09d6fd5a6cda1e3e0b9437d831b3561394120bd9d5ffe43ba1520aed34446aeded7cbe956279af42ba9e1511b78727453b2198e3a5e282e3f3d63c801d6e663197b4466d7e1178f6695ebd8b4acb3f201832d0356f6af117a70f8b1c75aa3e9f95efbb1f9ab660ad598e3e9f9871d78901a9889a83d32d88effab27afc6e88a82d5b60c64f3fc1f165bf2e1a2deb454b720cf726dde8aa9855b57109ad99598f4d23da95f59b2a0ea44a831ca9aaf207f59809809b6f8ec803bcada482ff316ef382826fb5539ac44288c5bd29e1a6dfc4c37554b13e16e30aec34d15fd1437170b6d982537a98e741669bb5dbd857b79be74364fdc65c68828a858cfbfdc6fba55b2f811d161f0e65527e562635ec431e6208e1cfd81008f416690bdac6e4a0a0b9ec65f73e4709477d034088b20e6f9811de8f5e791da4d19d3540429322b82026ae51a95c6a8878145f3ea55b9302f055c8e6a4a14966106fdeabf53be47366baf041ee79b3fb0b9800e0f0fb13cd50b90cbe4185f70a0299b0b1413f197d9af40a9ce88e88d168bec8f8d317b5fcccf09b7d6dff7a21d7bbba5b70fe9d0b5527dd41e0f2171bdd054739a8a2a317126d6d9fa63bf674fcd882ea60aa07938834fd9037ec0c5706be9f84e76ef6f0e736654bc2b0829b074d8b5f150289529867ef9ead1bdf5b34ce9034e092f8fc5589b4bcd13ac6bd16e6e6d06eee046b17e5b4542cd824c07819a76027046a68f59ab904a54a1186f9e8fc4858d2dde39fc47b77f1a423ebb9b8820b26cfdd1e99c251c4bda867171eabf2ac3c1379c06e7af4a3e686fda5c12c4f02fe96da679b4ff17b9b1606af08f662b45e161b9cd8eeb035c0c3df54fa47480f5e4c4f79867193c640d2b4544d168634245ae801490f4e6e37f1c8b1a818ab67386885549f33d8b07e6a717ca7a43ee6663a484db1125e198ee6f6e48094460427b01eb63e255c4dacd20abe2b6922bce3e6423806cd8d075606e850023b771b5b3734083d11ce81636475fc51b9389cf37016244c47fcb48b84a1e75a3567b94b5b4dfb5f908ecd8757b43410a5d83dce392245202f1eaa57fc486b079902907a60f5fa03216550c4bba0277d25bd2a5f59725dea77096e57400f540ebea52529ffb1a1a715192db607882dd7ee8ae2dd6a414dd57344a43e558fa97dba60cd8494ca14a8b2dff26a42ee802f46b94bffc5927fc3cad00e92ba256b02874d89ea4a5a39fee0d07f0ed0ccd46b645323d643edf03272d68b0487dbfcd251560fe733ca8013289eade85596994fde58eefb5a20a67b4d84810ce9f2ea9007e3e442fa3c39a379f903bbd74c06545f403c400b2384702e664ac65fcd15572b4a13b8f7b492f2138bcf8d4e11ebeab3ecb85b75b5cefd47adb60fec36ddbb1ab20cb3a96ce315e8c46ab405a679a31491d8b7e966a2223dd16ec09e73923a58de81df715034b28dcfc5e54e7045438a84633b81f47e2e01b19c3dd012a7e61daaa498554a5a944fc3cc1edadb17a19a1eba28b252490997b4c6489563bcfc67236a75d56696d6892f16de0512a58f648acebb8900e2f95c070bca8f03679ad7a7e0506a2d871a7ccf7559a3401f54fecfa65bc72efafe7957c12331bc858ced7079f2b36187b3833794336c9efaa7c5fd932260f339fb08cb8433e6fa57c69fe15785d6c2bbf56cc91f981398fbe1f3bb41fb5d96142853afb9c69a2c474d9c6f9f889084aaf604f4a61c7bb41a2cdd606f6ea0f9fda14181c2c056ffba03951b2520e0c95501d5f72c218168dd81fa011946fcf61df673015350aaea260ee919b888d69fa4c87f8a7e41ca5d9ffb5d15c26721aa5701409525cbce9f7380bba5e09a6f8a318ffc831501b2cd63611eb99d14ae7997a190034e50c0c2364d09536a1576aeb1d998643b1efcc97362d4a5f1a3971a87c5f534871227701a3f92f4052fb18304035faccbc76bb6818c5701063ac3c817ff23ea26b669f84fdef924f9a50d69d61017a60dc9ab5f937317d04de3330136faf82876e9c3151cb408928228ec759bebdafa36c721672a9e7febe11c17568585c57b5bdabe7f9b822e7da58c559794f4f8d2bd8a936e98aca1c045e37581b71dcc8ff92df877876b83ed47a238210c2640ee6a1756ef4f995c84177f408745a385570416136cf9e465de431382359997ef77bc2a9db13e854e255ac3ac5a10d32eca50dd0ee0b4cb4570cdba1bb49c6a8c0f2374dcba89276d7400554f3d88783db39302378f887e132a6c4681928e7f65fbb854f639654bdee10a537c19d0eeab0724da918e04cc40558563f4cccd1495ba19d6826db4a4c4f530862330b205b5fbe99cd9129c9e37fc995b841d5c66c2f00900928099e9fcb44cabf756726dc4ddefa32c685bfb968145224acad7c02a0e077bfc69a5813fd64e0b28cf6ff8f3e6c4c5cb880101455f3b4c499e7001543bd4ff1addd39951d4d96dbb4f950e4cb9f6ee4619fb851c1ab2f945fc353a5461c365ccf31f4c68160fa895711d14f2c5215112aeb5ef7ab309ed42fc7cb26ca5f017af0e4deda0a6d9a0aa975eed46a83e5757e5ffdaf4eeadeb48565014c8d5e7cb92290c922bb4de6eb31956ddec4fcf797397bd1f429294e11fa43f5d706ad4146a1411827f2d71683d9f880281b84b623e1c474e6597"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 255.67366ms ago: executing program 4 (id=13798): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x108) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_gfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12ff92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x0, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 254.406676ms ago: executing program 0 (id=13799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket(0x2c, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) close(0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 199.799667ms ago: executing program 5 (id=13800): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) (async) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 192.711363ms ago: executing program 2 (id=13801): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x12, 0x19, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x256, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0x20}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x76}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x2, 0x1000, &(0x7f0000000a80)=""/4096, 0x41000, 0x16, '\x00', 0x0, @fallback=0x6, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0xbaa, 0x9, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000001ac0)=[r4, r0], &(0x7f0000001b00)=[{0x4, 0x3, 0xc, 0x5}, {0x1, 0x4, 0x5, 0xb}, {0x4, 0x3, 0xe, 0x2}, {0x5, 0x3, 0x6, 0x92a16e609ba0ea5}, {0x1, 0x4, 0x9, 0x6}, {0x0, 0x4}], 0x10, 0x9e78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 83.551328ms ago: executing program 0 (id=13802): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x20044890, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000624ba1e4b70b040000003a0000000000000018000000001a00"/44], 0x30}}], 0x1, 0x4044800) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @remote, 0x4e20, 0x3, 'nq\x00', 0xa, 0x2, 0x2a}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x2000, 0xc24, 0x6, 0xfffffff9}}, 0x44) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) 78.894344ms ago: executing program 5 (id=13803): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtaction={0x1100, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x254, 0x1, [@m_ipt={0x250, 0x6, 0x0, 0x0, {{0x8}, {0x178, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xef, 0x6, {0x8, 'raw\x00', 0xf9, 0x200, "c4638267fb10b441e4bc431b373ba9501075d40a3d974c3b02720fce6a0d5d12ff4f06f878f08b3bc98aa50a379b62bca78e5cbc4ad1b10ccff86c6db291c88db4ef838eb1ae2a6a5aa6df4b23cfca03d1a4cd00903ab3a348556c1b292eb7badce797eb735313e9be75b070da5fa7f0fc9b744f2e70d5065b4d6f35af39197410930892ad3e68caf4664a91219f8cc60791340eb8f691c7c23e0131bcc6db11939806ca68eb6ed756c1a32b3aaf0ee3d0de8375576c722faaaa22b73ef088ec5480910250"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xb2, 0x6, "205c8883dc9c07ef246113fe39496e7dc1516dd1fb3f984692315359e777cabc9c2ae58becc6773242fd76006a5ecf4371133c8c64eeabf8dba315ebb2da60e606aeed56638db6cf39ce0d1fe6ecdce231e0b8098e7db26002d8a2b228f0cab4dc0154ae1488c04ede939125b9929de843d178de1ecbcd3d8d3ab21dbfe16003e95429a4c1e3d21709643855dc43fdf886ade6badb047f133d03000000c2e25b3cb9d9ddee3f4c4f9856136029a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xe98, 0x1, [@m_ipt={0x268, 0x13, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x95, 0x6, {0xd, 'security\x00', 0x6, 0x7f, "de822b6f7708e451972022ce52ed7664c9f0967bc21250627d2575de6e5cfa24ce1e6040279970947063abf0a99e192a7d36b458b3c9a5716c62a9d0505dd7b68f711a37bfd475c83603856b1134ecffc5496f615ea239f620fb4a8c9ec5b5693e54cfd4c49ccd419fe71b"}}, @TCA_IPT_TARG={0xe5, 0x6, {0xc, 'raw\x00', 0x0, 0x7f, "5bc9dd1f04e53bf27e3e69603bbadc5f6f909790805f554f1f24c05b12275eaff6d2ef52fb13faf4469ae27550cbb5ccaa037e18bce0bf4a142fff1025ece340da8091d8538fdd4680e89f0d814d7dfd9372e010c39b2ed5e2a1d0427cbab6fbed8ee5411e3ef29f9b3e3c159b0526d2712c628c71f7f183ca68f441def53750e36778b9389e22c24fbe239043ec4b609ce108bff8657e8b0c6208b2a758a6aac7e489753f94b7e3404d60911da47994999321253d8c1b5ce1becb"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x81, 0x6, "b907cf430c7132cd2bb94dab1bb2ebb4b351e2844ba30d1b7a524d7864fa18af96c421a0bf007d2b6c6a08d13535c97a1439ff76f54616feec91c88a27f4ad94d4414ac4d9e6305858b4dd430dd76a24dead1031e859eb616ece8e54387fa372589b7ed0e2a1d199b1deb405f471fbd90e4d914653c845a357403c2852"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xc2c, 0x11, 0x0, 0x0, {{0x8}, {0xb48, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xb0d, 0x6, {0x6, 'security\x00', 0xff, 0x12, "79a799d3fa19b65d04d1bc870a99af8cdedce0038f83685a78bd2104d97878fd197adeebb8d62b8d9d1794cb796eba0dd1fc826245aa2b6c884f0e5d437b4c6a0dfc8c0ef81d34e593618ff38cced43fc7b7039adb1e70c954c9c148140d7b1cbc379078a5c8064a2b183d10fc22485d15a0f4fee69bafd7260560b4e64dd392146c70f4ac0e2631b08c88f6bf1af2008f37a6d5149b0606724f33b06ff3a79ca79b8b2cde340eff82c282d726f8dffa2c60f17ccfc6749d19eadf42c172e3e59f45d70435bd493776c6257d9dc42b1158404226f7726a0bab85bd738073ba76e500bfebd312e3fa3f428c32b2e9042dc7bde1337183c2c9ba20874a3f33df747e8d269cc22eaf5b5e5af45bbe4f0aff0a579cd023dd812e173d70df4a5958d21c21c82c632c65711a7022a090e5db80afc1d284957fbbb402dcac4cafb9bc1a9feea0fbf6df3e4d92c6dc2ab9253a18ff60e368667e2382df380fece93fcfc1e17ef7eead22370443d282c818571aec4e896349c550e3b935dfcb8ef3806deb6b301a474c5e00aaefd59c24d5860dd30f3fd9dbfc7e435cfb2ba1c1f6361039168d24389e9fc3fbb4062475fa34cd8dcdfff4400a2241e569a7a030e857e039e68ecebf0a23fef3408c427ac1915585b738f6b6b83bb1ba3250d4730fe417f357fc98826320c4b559200231ddb3ba1a47357f83693b04251dc11965eeecba51f6e6dcb1d51f4bb19502edb393415dd480cdf63ae27c8cb9a11cada457d09725554e0e34ba9db0b25cad7763b02130d7448af8469d7e5be3621d4e2902ec6b1ca72c3669b87af9bdfd5a7c44ede723af3c15de5d7ef0b0264afb0161ccc3eeb3bf9833dd821cdb28539bc0198598cbae9dc2818771167cb0c165d75b41905433672d751c20f0dd81d0caab45fdad8e3ee7ed935ff278cb89f9fe32dfa022f11ad09b4dd2f83163d6bd8a1f2e8fca76d7f01928ff560e6917c5754f3883755089c55d779908106d6dfda6b89c5230b5f5d9da8db55bbafa24f9a04028c8942369f1272ca3c5df6c6247bb46948d01e4a72bfdd2ac1e692737048dd17225845061b6d3625eb7783a87e7a0983f5dcde6e7b1e762ab784abc649b7545ae257727fc1958d22cf72bb30280c79a4a6882e1ef65977406a624a85c371921f7d76b9816d70476cc5881789b26ef500012061933d98960a7ec7a43b4dd84a4bc78cc5ca23c63b1a18b2e4b0f803f57bfb1d6c2f90b5c6957ba034bf266c47a0a72de6be7cf66eee5b3d6879621e40567411d1104f53ab20b9cdba5e05e7d165bfeb9c82e2d88e98a3e30c55d4fd529ec05da3af07bb304b3501cb3420fcd76086d5e8c5755e808d5218e13acea483d678f9e629f1328a73deaecc9a34cc934ab1dbf1c2026f322da135b64eafa95c415aed56733a9ca022921083b688de97c3dcb9d3bfa345036704ce165db3d2802cba6f2121d61aa146c80f95da42e87d080963e06cc7680a66dcf773efcf1ddef06407bfcde35100f8b67a8e6e652553aa92f807638ecfd1ad8266bd9017d3a4bfeab9185df4b5688e0085da7955c3f543eeccd580f19b53b36c6372cd9b6cb3738fdd5a1dd70339d931e17e8ed2b2de4ae9048fb1847199123f46bb6a7a0dd272b2ca3b5b072c8ad8c630fbaeab46f0d0854ac39b8302ba36b859598a23adac20343226904430ce5687aef5710595137f5b0f48efa88af9087d02c4507ddcfe6fca1390c291ad76f79ec9e3ed412c1a47ff7e4d1c9cc8944c82dc76d9a6df80e3159abfe030eb9521452dfe45ee92d7565389ff037cff69cfb5a85dff9f2ad170b0741752b145d508c7fb5f82a508c618641f77cd87bd9441c7dee665b4be62423b14c33e0a704350228ca9c389d3105b89a64e5ee0561b4d46bd40a2da199eac8ab1327a236beaa39414ea3de8e4eac7083fbf33bb3adb4405842e48e36f57eb10bd3b50af77c61b480829cc74ffc795daf25d2ba35426094bfd21a69b4c6784c31713861afbc2038489cc7eec1c1d5fe96c4ba8db5e995050edcaae0d9046f200f6edf134291d28fe6c9497627de963ad09fc4a567f4ae7097c6fed74fb011e8cc73ed9957f1064a8a1b1fabcb58da59db0d21dc9008bc235073345fb81829e59c08e8c6037f94e0a3d3a7cb1883540deb21da2b8cf8439145183c3433121a7b3f73906bead4aaed180ec7eec669b5856a9398ca141d33721b9262e2728ef4f124a3968f0022162e084791b3257f9241e3cd6d5ad3cade495d8cb496cd6247b48e01988eb9088bd5dda73c98171ed6b566e60e5cf36c2ef71aa62ae007911a5363961854e6c7193539b6e71216077615ef12a02c8a9de9302bbe7f8da43f02bad8ac0307cb45cdc83da5b96cbeee70a7cda8a9245fca9447a4229e45290cc081901ba405e33dc99d62b571071f2d425cee677ef9c97ec799c612a300415e169410717d34d90488cc8880b32a05335fa130c88b34b3e815fbb641c3bf89f38307fd91be94a53d9520320b5de9cec6207e92d6c118f2a6ea1a753b75e2a6da87972f54251d377160be809c2896866b08ca6fce6e191b7b5b7b195d16a5bead6657bf76bdb2a283961f105a6674a4160debd5f66d631845ea44f675e2feab33b1ebede1d17b1426df312842eb9ec443c77f547e3967855504e65abda02f452f29ddf6db1223ba43f9adac13d17a6d68175b4adf6e932d2be397239f1232f93b2a276123f24730bfa012fac7f61dbeaaf79d1ebd9b09697f19389c48d35b05a8b71bbbf44bdfe20a03d59547002d93d57d447c835757b2987d22df4744a8fc9ede4e2fa47175752a32471c63d9f2fcbbbcc6bae22cb2773998479ea2e967f07d809112682a3bf0d3215d977e3084815ef21acbb71e737d3a43a3fcddeb36ed3ee72fec72e904aac536d0e3bfb29cc13c155736f4fa8c12e5e2f8847f7478479753d53e5c68c50b22c6e6963909e1fd98064165e0534ebb5fa6e79345b91f8dcefcaaf4bdbd71e2ad258e179e40fa8200419d0dc70d5d7458b7244a64771fb1debf07f3e4ea243b30431cf422ac6699fbb593718fa62640edb5143f0ff6430961593cffe16e6fb6445aecdeb45237b28b7c0ef5ce7ec6110f08fe9faf5dc47f065f859fb64c5412f455f7dfd9e0ea79dc5e1d02ca513e4b11011e7cbf2707bead29e0db95d73e1fccceb6d9c7595aaf73b4ce60cfd0fb135f5b5d069cf07e31ff759473bde9f7f84501d6ed570fa75660254d3abc8d8905841ac57f36c3599042df823670bd02b047d7a6596ee40b642f9bd6966a6bb382715ffde287bff3fbd8d125c9b329d4919ab26a7837a979aca638849ec9911bae201d7c275af892d5819f04d22375f88b517fd9f2f12e88e6ad4d8e80b6d6af17cdc79bca8d80e7d5099771f233e445cfd51638c173fafd8abaa82ed561fe059f96ab5d7a0ac76a14ff53740a2f4248aad70dc66ea6839b5a164d2e326d4487b4a1885062c0b3fe6b64776aefc64a92edf14131418a4d22084786b303d81ed1aa16dbb0b48009261aa2ba54f815ed0b8245beae314e3a9570d60973bf4a29056a0363f156ebf95295d99b15f2531700bbb3715625fdb9af29299c94520ec65277127e9e1ec1b215500d7ce041869b6f94095ab00c8063572f0d875c058dc86f9a2e69b7ed9d16e1aa437dca7a08e0e0deb5b97b60bc79bcaeb79e8b08f566a00e2ae2500d619f99f72d384bedc80481efd07eb5fa58de7af1c79b6bbcf197f232cef57cb6de281bc7cedd3a006aba80754e9daa5b7c294123ea61ce65edc0f72ab1cd9ab735eb4195dd8fe68b3d270927657c429683ecc5031b41b8555e7dfea851bea00b28c6106a56c042ecefde2734da2f9fefa3ba35feac018431fd24bfeaa4158b96b8a9fe00c74e7998eefc5a02ed32cfd260e7a221cf362ce49f3b2ef83759"}}]}, {0xbd, 0x6, "7aeb72fb05aed2b7250b4e304761d0d8e0dca642281104a39a3370a7cc751a130c57fcc80332f5013b30e682e632fafe646688ce1796cfa067f5174aad5efeb0e3ab81a13099335f4f32fa866fc03779764441b6007d60d0304beeb9dfa5dc91952d53c1422d84b1620f10fd46b0bfd944b02cbeafc8b8e37f2ff5dcc0989dfbe4d4269bff2552e4b5cf263711a36a0f296a16201a20e869b6bd4755ad90db11050b9e134331471f44b44ed24f655e919a1f964d6118cf1429"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1100}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) close(0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x1, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000340)={'nat\x00', 0x0, [0x5, 0x6731, 0x401, 0x10001, 0x2]}, &(0x7f00000003c0)=0x54) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000201600010a0000000000000000000000005a362abad7a4f18f632e7abb386421b488d7166f10f8bd390d42594434864204aa5b83596b82ff14ece4c8c667ac71fd12996635f9aecaf23fffe597a9def4071eeb6a2836a55cba17bfb3acef2495be21129865e8ea0e236aa4ee6ca58c686b"], 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r6], 0x30}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e24, @private=0xa010100}}) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000240)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="300027af41e7f3273f867300001c0001000000000004086aa42d53d57f5f5e5a4e1d3bdd28bfa16ee7c606b2e456786bda1a0dbedec2ddcf760dbf0cd81baafd9f856704657cbb469c458774440baaa3331bc6b8aa41a66a8e8d3408848bd840c4543414a421b6a04605d9e22b7bb6c9e3f5029b9e58bb176d388b1f7dc742e51e57fc54acce6d1db20f4c8ca956df936e1282993c3ca1bce5f0a6d2cb23904ae2dc67756711ec83965a2311038e135d3bf07b14adb18aebec79fa9f61d9ecdd1d0d87d2f471f0c79d488c6e831da562d0d3ad0000"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x3c05, 0x1, "0c3df8", 0x8005}}) 0s ago: executing program 0 (id=13804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x19, 0x9, 0x0, 0x25dfdbfb, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 1371.217449][T20030] syz_tun: tun_net_xmit 42 [ 1371.250024][T20030] syz_tun: tun_net_xmit 42 [ 1371.255306][T20030] syz_tun: tun_net_xmit 42 [ 1371.260374][T20030] syz_tun: tun_net_xmit 42 [ 1371.277247][T20030] syz_tun: tun_net_xmit 42 [ 1371.282280][T20030] syz_tun: tun_net_xmit 42 [ 1371.287510][T20030] syz_tun: tun_net_xmit 42 [ 1371.315660][T20030] syz_tun: tun_net_xmit 42 [ 1371.390057][T20030] syz_tun: tun_net_xmit 42 [ 1371.399164][T20030] syz_tun: tun_net_xmit 42 [ 1371.404835][T20030] syz_tun: tun_net_xmit 42 [ 1371.443826][T20030] syz_tun: tun_net_xmit 42 [ 1371.449681][T20030] syz_tun: tun_net_xmit 42 [ 1371.522460][T20030] syz_tun: tun_net_xmit 42 [ 1371.528379][T20030] syz_tun: tun_net_xmit 42 [ 1371.545933][T20030] syz_tun: tun_net_xmit 42 [ 1371.562246][T20030] syz_tun: tun_net_xmit 42 [ 1371.574731][T20030] syz_tun: tun_net_xmit 42 [ 1371.580322][T20030] syz_tun: tun_net_xmit 42 [ 1371.602388][T20030] syz_tun: tun_net_xmit 42 [ 1371.620412][T20030] syz_tun: tun_net_xmit 42 [ 1371.625366][T20030] syz_tun: tun_net_xmit 42 [ 1371.630236][T20030] syz_tun: tun_net_xmit 42 [ 1371.635166][T20030] syz_tun: tun_net_xmit 42 [ 1371.639985][T20030] syz_tun: tun_net_xmit 42 [ 1371.648008][T20030] syz_tun: tun_net_xmit 42 [ 1371.652954][T20030] syz_tun: tun_net_xmit 42 [ 1371.659139][T20030] syz_tun: tun_net_xmit 42 [ 1371.664037][T20030] syz_tun: tun_net_xmit 42 [ 1371.669744][T20030] syz_tun: tun_net_xmit 42 [ 1371.685394][T20030] syz_tun: tun_net_xmit 42 [ 1371.690223][T20030] syz_tun: tun_net_xmit 42 [ 1371.701664][T20030] syz_tun: tun_net_xmit 42 [ 1371.715094][T20030] syz_tun: tun_net_xmit 42 [ 1371.719974][T20030] syz_tun: tun_net_xmit 42 [ 1371.733157][T20030] syz_tun: tun_net_xmit 42 [ 1371.745384][T20030] syz_tun: tun_net_xmit 42 [ 1371.750313][T20030] syz_tun: tun_net_xmit 42 [ 1371.767247][T20030] syz_tun: tun_net_xmit 42 [ 1371.772416][T20030] syz_tun: tun_net_xmit 42 [ 1371.779651][T20030] syz_tun: tun_net_xmit 42 [ 1371.785031][T20030] syz_tun: tun_net_xmit 42 [ 1371.791328][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12304'. [ 1371.800751][T20030] syz_tun: tun_net_xmit 42 [ 1371.806394][T20030] syz_tun: tun_net_xmit 42 [ 1371.811291][T20030] syz_tun: tun_net_xmit 42 [ 1371.819130][T20030] syz_tun: tun_net_xmit 42 [ 1371.824000][T20030] syz_tun: tun_net_xmit 42 [ 1371.829516][T20030] syz_tun: tun_net_xmit 42 [ 1371.834420][T20030] syz_tun: tun_net_xmit 42 [ 1371.839408][T20030] syz_tun: tun_net_xmit 42 [ 1371.849206][T20030] syz_tun: tun_net_xmit 42 [ 1371.854523][T20030] syz_tun: tun_net_xmit 42 [ 1371.859381][T20030] syz_tun: tun_net_xmit 42 [ 1371.864392][T20030] syz_tun: tun_net_xmit 42 [ 1371.870555][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12304'. [ 1371.882988][T20030] syz_tun: tun_net_xmit 42 [ 1371.891694][T20030] syz_tun: tun_net_xmit 42 [ 1371.896632][T20030] syz_tun: tun_net_xmit 42 [ 1371.901586][T20030] syz_tun: tun_net_xmit 42 [ 1371.908458][T20030] syz_tun: tun_net_xmit 42 [ 1371.913417][T20030] syz_tun: tun_net_xmit 42 [ 1371.918441][T20030] syz_tun: tun_net_xmit 42 [ 1371.924260][T20030] syz_tun: tun_net_xmit 42 [ 1371.929081][T20030] syz_tun: tun_net_xmit 42 [ 1371.944293][T20030] syz_tun: tun_net_xmit 42 [ 1371.949152][T20030] syz_tun: tun_net_xmit 42 [ 1371.954102][T20030] syz_tun: tun_net_xmit 42 [ 1371.959550][T20030] syz_tun: tun_net_xmit 42 [ 1371.964630][T20030] syz_tun: tun_net_xmit 42 [ 1371.969445][T20030] syz_tun: tun_net_xmit 42 [ 1371.976773][T20030] syz_tun: tun_net_xmit 42 [ 1371.981594][T20030] syz_tun: tun_net_xmit 42 [ 1371.986785][T20030] syz_tun: tun_net_xmit 42 [ 1371.991622][T20030] syz_tun: tun_net_xmit 42 [ 1371.996836][T20030] syz_tun: tun_net_xmit 42 [ 1372.001620][T20030] syz_tun: tun_net_xmit 42 [ 1372.006787][T20030] syz_tun: tun_net_xmit 42 [ 1372.012133][T20030] syz_tun: tun_net_xmit 42 [ 1372.019756][T20030] syz_tun: tun_net_xmit 42 [ 1372.024677][T20030] syz_tun: tun_net_xmit 42 [ 1372.029680][T20030] syz_tun: tun_net_xmit 42 [ 1372.035345][T20030] syz_tun: tun_net_xmit 42 [ 1372.040301][T20030] syz_tun: tun_net_xmit 42 [ 1372.045400][T20030] syz_tun: tun_net_xmit 42 [ 1372.050171][T20030] syz_tun: tun_net_xmit 42 [ 1372.055178][T20030] syz_tun: tun_net_xmit 42 [ 1372.060013][T20030] syz_tun: tun_net_xmit 42 [ 1372.065038][T20030] syz_tun: tun_net_xmit 42 [ 1372.071565][T20030] syz_tun: tun_net_xmit 42 [ 1372.078070][T20030] syz_tun: tun_net_xmit 42 [ 1372.082851][T20030] syz_tun: tun_net_xmit 42 [ 1372.088013][T20030] syz_tun: tun_net_xmit 42 [ 1372.102096][T20030] syz_tun: tun_net_xmit 42 [ 1372.107119][T20030] syz_tun: tun_net_xmit 42 [ 1372.112098][T20030] syz_tun: tun_net_xmit 42 [ 1372.117441][T20030] syz_tun: tun_net_xmit 42 [ 1372.122234][T20030] syz_tun: tun_net_xmit 42 [ 1372.127175][T20030] syz_tun: tun_net_xmit 42 [ 1372.132670][T20030] syz_tun: tun_net_xmit 42 [ 1372.138086][T20030] syz_tun: tun_net_xmit 42 [ 1372.142904][T20030] syz_tun: tun_net_xmit 42 [ 1372.148941][T20030] syz_tun: tun_net_xmit 42 [ 1372.154761][T20030] syz_tun: tun_net_xmit 42 [ 1372.160795][T20030] syz_tun: tun_net_xmit 42 [ 1372.166710][T20030] syz_tun: tun_net_xmit 42 [ 1372.171524][T20030] syz_tun: tun_net_xmit 42 [ 1372.182260][T20030] syz_tun: tun_net_xmit 42 [ 1372.188080][T20030] syz_tun: tun_net_xmit 42 [ 1372.192910][T20030] syz_tun: tun_net_xmit 42 [ 1372.201996][T20030] syz_tun: tun_net_xmit 42 [ 1372.214442][T20030] syz_tun: tun_net_xmit 42 [ 1372.219291][T20030] syz_tun: tun_net_xmit 42 [ 1372.224793][T20030] syz_tun: tun_net_xmit 42 [ 1372.229649][T20030] syz_tun: tun_net_xmit 42 [ 1372.237640][T20030] syz_tun: tun_net_xmit 42 [ 1372.242399][T20030] syz_tun: tun_net_xmit 42 [ 1372.249371][T20030] syz_tun: tun_net_xmit 42 [ 1372.255104][T20030] syz_tun: tun_net_xmit 42 [ 1372.259902][T20030] syz_tun: tun_net_xmit 42 [ 1372.265083][T20030] syz_tun: tun_net_xmit 42 [ 1372.269860][T20030] syz_tun: tun_net_xmit 42 [ 1372.275023][T20030] syz_tun: tun_net_xmit 42 [ 1372.279820][T20030] syz_tun: tun_net_xmit 42 [ 1372.285663][T20030] syz_tun: tun_net_xmit 42 [ 1372.290567][T20030] syz_tun: tun_net_xmit 42 [ 1372.297268][T20030] syz_tun: tun_net_xmit 42 [ 1372.302109][T20030] syz_tun: tun_net_xmit 42 [ 1372.309513][T20030] syz_tun: tun_net_xmit 42 [ 1372.321831][T20030] syz_tun: tun_net_xmit 42 [ 1372.327146][T20030] syz_tun: tun_net_xmit 42 [ 1372.332044][T20030] syz_tun: tun_net_xmit 42 [ 1372.337578][T20030] syz_tun: tun_net_xmit 42 [ 1372.342419][T20030] syz_tun: tun_net_xmit 42 [ 1372.347556][T20030] syz_tun: tun_net_xmit 42 [ 1372.352457][T20030] syz_tun: tun_net_xmit 42 [ 1372.357525][T20030] syz_tun: tun_net_xmit 42 [ 1372.362283][T20030] syz_tun: tun_net_xmit 42 [ 1372.368218][T20030] syz_tun: tun_net_xmit 42 [ 1372.373059][T20030] syz_tun: tun_net_xmit 42 [ 1372.378289][T20030] syz_tun: tun_net_xmit 42 [ 1372.383190][T20030] syz_tun: tun_net_xmit 42 [ 1372.395014][T20030] syz_tun: tun_net_xmit 42 [ 1372.399855][T20030] syz_tun: tun_net_xmit 42 [ 1372.407490][T20030] syz_tun: tun_net_xmit 42 [ 1372.412311][T20030] syz_tun: tun_net_xmit 42 [ 1372.417796][T20030] syz_tun: tun_net_xmit 42 [ 1372.422651][T20030] syz_tun: tun_net_xmit 42 [ 1372.427668][T20030] syz_tun: tun_net_xmit 42 [ 1372.435786][T20030] syz_tun: tun_net_xmit 42 [ 1372.440689][T20030] syz_tun: tun_net_xmit 42 [ 1372.445697][T20030] syz_tun: tun_net_xmit 42 [ 1372.450707][T20030] syz_tun: tun_net_xmit 42 [ 1372.456595][T20030] syz_tun: tun_net_xmit 42 [ 1372.461808][T20030] syz_tun: tun_net_xmit 42 [ 1372.469151][ T5831] Bluetooth: hci4: command tx timeout [ 1372.478835][T20030] syz_tun: tun_net_xmit 42 [ 1372.483623][T20030] syz_tun: tun_net_xmit 42 [ 1372.492743][T20030] syz_tun: tun_net_xmit 42 [ 1372.498700][T20030] syz_tun: tun_net_xmit 42 [ 1372.503607][T20030] syz_tun: tun_net_xmit 42 [ 1372.509557][T20030] syz_tun: tun_net_xmit 42 [ 1372.514951][T20030] syz_tun: tun_net_xmit 42 [ 1372.519940][T20030] syz_tun: tun_net_xmit 42 [ 1372.525264][T20030] syz_tun: tun_net_xmit 42 [ 1372.530086][T20030] syz_tun: tun_net_xmit 42 [ 1372.535343][T20030] syz_tun: tun_net_xmit 42 [ 1372.540199][T20030] syz_tun: tun_net_xmit 42 [ 1372.547213][T20030] syz_tun: tun_net_xmit 42 [ 1372.552045][T20030] syz_tun: tun_net_xmit 42 [ 1372.557609][T20030] syz_tun: tun_net_xmit 42 [ 1372.562396][T20030] syz_tun: tun_net_xmit 42 [ 1372.568014][T20030] syz_tun: tun_net_xmit 42 [ 1372.572880][T20030] syz_tun: tun_net_xmit 42 [ 1372.578027][T20030] syz_tun: tun_net_xmit 42 [ 1372.582813][T20030] syz_tun: tun_net_xmit 42 [ 1372.587935][T20030] syz_tun: tun_net_xmit 42 [ 1372.592772][T20030] syz_tun: tun_net_xmit 42 [ 1372.597982][T20030] syz_tun: tun_net_xmit 42 [ 1372.602777][T20030] syz_tun: tun_net_xmit 42 [ 1372.608277][T20030] syz_tun: tun_net_xmit 42 [ 1372.613188][T20030] syz_tun: tun_net_xmit 42 [ 1372.618123][T20030] syz_tun: tun_net_xmit 42 [ 1372.623086][T20030] syz_tun: tun_net_xmit 42 [ 1372.628150][T20030] syz_tun: tun_net_xmit 42 [ 1372.632992][T20030] syz_tun: tun_net_xmit 42 [ 1372.638065][T20030] syz_tun: tun_net_xmit 42 [ 1372.642869][T20030] syz_tun: tun_net_xmit 42 [ 1372.648458][T20030] syz_tun: tun_net_xmit 42 [ 1372.653280][T20030] syz_tun: tun_net_xmit 42 [ 1372.658168][T20030] syz_tun: tun_net_xmit 42 [ 1372.662986][T20030] syz_tun: tun_net_xmit 42 [ 1372.667933][T20030] syz_tun: tun_net_xmit 42 [ 1372.672760][T20030] syz_tun: tun_net_xmit 42 [ 1372.677693][T20030] syz_tun: tun_net_xmit 42 [ 1372.682502][T20030] syz_tun: tun_net_xmit 42 [ 1372.687338][T20030] syz_tun: tun_net_xmit 42 [ 1372.692126][T20030] syz_tun: tun_net_xmit 42 [ 1372.697071][T20030] syz_tun: tun_net_xmit 42 [ 1372.701795][T20030] syz_tun: tun_net_xmit 42 [ 1372.707768][T20030] syz_tun: tun_net_xmit 42 [ 1372.712570][T20030] syz_tun: tun_net_xmit 42 [ 1372.723453][T20030] syz_tun: tun_net_xmit 42 [ 1372.728732][T20030] syz_tun: tun_net_xmit 42 [ 1372.733549][T20030] syz_tun: tun_net_xmit 42 [ 1372.738574][T20030] syz_tun: tun_net_xmit 42 [ 1372.743458][T20030] syz_tun: tun_net_xmit 42 [ 1372.749236][T20030] syz_tun: tun_net_xmit 42 [ 1372.754067][T20030] syz_tun: tun_net_xmit 42 [ 1372.758966][T20030] syz_tun: tun_net_xmit 42 [ 1372.763757][T20030] syz_tun: tun_net_xmit 42 [ 1372.768883][T20030] syz_tun: tun_net_xmit 42 [ 1372.773715][T20030] syz_tun: tun_net_xmit 42 [ 1372.786377][T20030] syz_tun: tun_net_xmit 42 [ 1372.791415][T20030] syz_tun: tun_net_xmit 42 [ 1372.796575][T20030] syz_tun: tun_net_xmit 42 [ 1372.801382][T20030] syz_tun: tun_net_xmit 42 [ 1372.806402][T20030] syz_tun: tun_net_xmit 42 [ 1372.811202][T20030] syz_tun: tun_net_xmit 42 [ 1372.816112][T20030] syz_tun: tun_net_xmit 42 [ 1372.821018][T20030] syz_tun: tun_net_xmit 42 [ 1372.825978][T20030] syz_tun: tun_net_xmit 42 [ 1372.831174][T20030] syz_tun: tun_net_xmit 42 [ 1372.836943][T20030] syz_tun: tun_net_xmit 42 [ 1372.841820][T20030] syz_tun: tun_net_xmit 42 [ 1372.846793][T20030] syz_tun: tun_net_xmit 42 [ 1372.851580][T20030] syz_tun: tun_net_xmit 42 [ 1372.857112][T20030] syz_tun: tun_net_xmit 42 [ 1372.861967][T20030] syz_tun: tun_net_xmit 42 [ 1372.867611][T20030] syz_tun: tun_net_xmit 42 [ 1372.872451][T20030] syz_tun: tun_net_xmit 42 [ 1372.877434][T20030] syz_tun: tun_net_xmit 42 [ 1372.882246][T20030] syz_tun: tun_net_xmit 42 [ 1372.893078][T20030] syz_tun: tun_net_xmit 42 [ 1372.898108][T20030] syz_tun: tun_net_xmit 42 [ 1372.902930][T20030] syz_tun: tun_net_xmit 42 [ 1372.908312][T20030] syz_tun: tun_net_xmit 42 [ 1372.913599][T20030] syz_tun: tun_net_xmit 42 [ 1372.918907][T20030] syz_tun: tun_net_xmit 42 [ 1372.923693][T20030] syz_tun: tun_net_xmit 42 [ 1372.928856][T20030] syz_tun: tun_net_xmit 42 [ 1372.933693][T20030] syz_tun: tun_net_xmit 42 [ 1372.944092][T20030] syz_tun: tun_net_xmit 42 [ 1372.953174][T20030] syz_tun: tun_net_xmit 42 [ 1372.958574][T20030] syz_tun: tun_net_xmit 42 [ 1372.963520][T20030] syz_tun: tun_net_xmit 42 [ 1372.968682][T20030] syz_tun: tun_net_xmit 42 [ 1372.975514][T20030] syz_tun: tun_net_xmit 42 [ 1372.980365][T20030] syz_tun: tun_net_xmit 42 [ 1372.985604][T20030] syz_tun: tun_net_xmit 42 [ 1372.990408][T20030] syz_tun: tun_net_xmit 42 [ 1372.995607][T20030] syz_tun: tun_net_xmit 42 [ 1373.000479][T20030] syz_tun: tun_net_xmit 42 [ 1373.011817][T20030] syz_tun: tun_net_xmit 42 [ 1373.016875][T20030] syz_tun: tun_net_xmit 42 [ 1373.021691][T20030] syz_tun: tun_net_xmit 42 [ 1373.027034][T20030] syz_tun: tun_net_xmit 42 [ 1373.032550][T20030] syz_tun: tun_net_xmit 42 [ 1373.038763][T20030] syz_tun: tun_net_xmit 42 [ 1373.043557][T20030] syz_tun: tun_net_xmit 42 [ 1373.049029][T20030] syz_tun: tun_net_xmit 42 [ 1373.053873][T20030] syz_tun: tun_net_xmit 42 [ 1373.059137][T20030] syz_tun: tun_net_xmit 42 [ 1373.064015][T20030] syz_tun: tun_net_xmit 42 [ 1373.072345][T20030] syz_tun: tun_net_xmit 42 [ 1373.077179][T20030] syz_tun: tun_net_xmit 42 [ 1373.082043][T20030] syz_tun: tun_net_xmit 42 [ 1373.087217][T20030] syz_tun: tun_net_xmit 42 [ 1373.092141][T20030] syz_tun: tun_net_xmit 42 [ 1373.097202][T20030] syz_tun: tun_net_xmit 42 [ 1373.102438][T20030] syz_tun: tun_net_xmit 42 [ 1373.108027][T20030] syz_tun: tun_net_xmit 42 [ 1373.113044][T20030] syz_tun: tun_net_xmit 42 [ 1373.118035][T20030] syz_tun: tun_net_xmit 42 [ 1373.122959][T20030] syz_tun: tun_net_xmit 42 [ 1373.127981][T20030] syz_tun: tun_net_xmit 42 [ 1373.132856][T20030] syz_tun: tun_net_xmit 42 [ 1373.138187][T20030] syz_tun: tun_net_xmit 42 [ 1373.143352][T20030] syz_tun: tun_net_xmit 42 [ 1373.148977][T20030] syz_tun: tun_net_xmit 42 [ 1373.153945][T20030] syz_tun: tun_net_xmit 42 [ 1373.159081][T20030] syz_tun: tun_net_xmit 42 [ 1373.163928][T20030] syz_tun: tun_net_xmit 42 [ 1373.168997][T20030] syz_tun: tun_net_xmit 42 [ 1373.173915][T20030] syz_tun: tun_net_xmit 42 [ 1373.179843][T20030] syz_tun: tun_net_xmit 42 [ 1373.184693][T20030] syz_tun: tun_net_xmit 42 [ 1373.189504][T20030] syz_tun: tun_net_xmit 42 [ 1373.194606][T20030] syz_tun: tun_net_xmit 42 [ 1373.221209][T20030] syz_tun: tun_net_xmit 42 [ 1373.226704][T20030] syz_tun: tun_net_xmit 42 [ 1373.231459][T20030] syz_tun: tun_net_xmit 42 [ 1373.237409][T20030] syz_tun: tun_net_xmit 42 [ 1373.242274][T20030] syz_tun: tun_net_xmit 42 [ 1373.247349][T20030] syz_tun: tun_net_xmit 42 [ 1373.252143][T20030] syz_tun: tun_net_xmit 42 [ 1373.257277][T20030] syz_tun: tun_net_xmit 42 [ 1373.262087][T20030] syz_tun: tun_net_xmit 42 [ 1373.267483][T20030] syz_tun: tun_net_xmit 42 [ 1373.272336][T20030] syz_tun: tun_net_xmit 42 [ 1373.277664][T20030] syz_tun: tun_net_xmit 42 [ 1373.282434][T20030] syz_tun: tun_net_xmit 42 [ 1373.288933][T20030] syz_tun: tun_net_xmit 42 [ 1373.293764][T20030] syz_tun: tun_net_xmit 42 [ 1373.299067][T20030] syz_tun: tun_net_xmit 42 [ 1373.304790][T20030] syz_tun: tun_net_xmit 42 [ 1373.309913][T20030] syz_tun: tun_net_xmit 42 [ 1373.315079][T20030] syz_tun: tun_net_xmit 42 [ 1373.320010][T20030] syz_tun: tun_net_xmit 42 [ 1373.325261][T20030] syz_tun: tun_net_xmit 42 [ 1373.330234][T20030] syz_tun: tun_net_xmit 42 [ 1373.339422][T20030] syz_tun: tun_net_xmit 42 [ 1373.345778][T20030] syz_tun: tun_net_xmit 42 [ 1373.350741][T20030] syz_tun: tun_net_xmit 42 [ 1373.356159][T20030] syz_tun: tun_net_xmit 42 [ 1373.360973][T20030] syz_tun: tun_net_xmit 42 [ 1373.366540][T20030] syz_tun: tun_net_xmit 42 [ 1373.371358][T20030] syz_tun: tun_net_xmit 42 [ 1373.378537][T20030] syz_tun: tun_net_xmit 42 [ 1373.383317][T20030] syz_tun: tun_net_xmit 42 [ 1373.388591][T20030] syz_tun: tun_net_xmit 42 [ 1373.393563][T20030] syz_tun: tun_net_xmit 42 [ 1373.399314][T20030] syz_tun: tun_net_xmit 42 [ 1373.404451][T20030] syz_tun: tun_net_xmit 42 [ 1373.409365][T20030] syz_tun: tun_net_xmit 42 [ 1373.414339][T20030] syz_tun: tun_net_xmit 42 [ 1373.419202][T20030] syz_tun: tun_net_xmit 42 [ 1373.424003][T20030] syz_tun: tun_net_xmit 42 [ 1373.432266][T20030] syz_tun: tun_net_xmit 42 [ 1373.438666][T20030] syz_tun: tun_net_xmit 42 [ 1373.443831][T20030] syz_tun: tun_net_xmit 42 [ 1373.449906][T20030] syz_tun: tun_net_xmit 42 [ 1373.454798][T20030] syz_tun: tun_net_xmit 42 [ 1373.459623][T20030] syz_tun: tun_net_xmit 42 [ 1373.465207][T20030] syz_tun: tun_net_xmit 42 [ 1373.472583][T20030] syz_tun: tun_net_xmit 42 [ 1373.478291][T20030] syz_tun: tun_net_xmit 42 [ 1373.483169][T20030] syz_tun: tun_net_xmit 42 [ 1373.488545][T20030] syz_tun: tun_net_xmit 42 [ 1373.493360][T20030] syz_tun: tun_net_xmit 42 [ 1373.498684][T20030] syz_tun: tun_net_xmit 42 [ 1373.503515][T20030] syz_tun: tun_net_xmit 42 [ 1373.508623][T20030] syz_tun: tun_net_xmit 42 [ 1373.513461][T20030] syz_tun: tun_net_xmit 42 [ 1373.518531][T20030] syz_tun: tun_net_xmit 42 [ 1373.523359][T20030] syz_tun: tun_net_xmit 42 [ 1373.529691][T20030] syz_tun: tun_net_xmit 42 [ 1373.541014][T20030] syz_tun: tun_net_xmit 42 [ 1373.547209][T20030] syz_tun: tun_net_xmit 42 [ 1373.552188][T20030] syz_tun: tun_net_xmit 42 [ 1373.557065][T20030] syz_tun: tun_net_xmit 42 [ 1373.562027][T20030] syz_tun: tun_net_xmit 42 [ 1373.566911][T20030] syz_tun: tun_net_xmit 42 [ 1373.571784][T20030] syz_tun: tun_net_xmit 42 [ 1373.580191][T20030] syz_tun: tun_net_xmit 42 [ 1373.585055][T20030] syz_tun: tun_net_xmit 42 [ 1373.589950][T20030] syz_tun: tun_net_xmit 42 [ 1373.594741][T20030] syz_tun: tun_net_xmit 42 [ 1373.599556][T20030] syz_tun: tun_net_xmit 42 [ 1373.604483][T20030] syz_tun: tun_net_xmit 42 [ 1373.609591][T20030] syz_tun: tun_net_xmit 42 [ 1373.615816][T20030] syz_tun: tun_net_xmit 42 [ 1373.620560][T20030] syz_tun: tun_net_xmit 42 [ 1373.625430][T20030] syz_tun: tun_net_xmit 42 [ 1373.630283][T20030] syz_tun: tun_net_xmit 42 [ 1373.635109][T20030] syz_tun: tun_net_xmit 42 [ 1373.639894][T20030] syz_tun: tun_net_xmit 42 [ 1373.647388][T20030] syz_tun: tun_net_xmit 42 [ 1374.722468][T20010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.729766][T20010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.737406][T20010] bridge_slave_0: entered allmulticast mode [ 1374.746346][T20010] bridge_slave_0: entered promiscuous mode [ 1374.795135][T20010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.813182][T20010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.839130][T20010] bridge_slave_1: entered allmulticast mode [ 1374.851848][T20010] bridge_slave_1: entered promiscuous mode [ 1375.015442][T20221] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12308'. [ 1375.057304][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12308'. [ 1375.112014][T20010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.171896][T20226] gretap3: entered promiscuous mode [ 1375.252377][T20010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.396345][T20229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1375.415548][T20229] bridge0: port 3(bond1) entered blocking state [ 1375.422098][T20229] bridge0: port 3(bond1) entered disabled state [ 1375.430367][T20229] bond1: entered allmulticast mode [ 1375.439893][T20229] bond1: entered promiscuous mode [ 1375.452532][T20229] bridge0: port 3(bond1) entered blocking state [ 1375.459033][T20229] bridge0: port 3(bond1) entered forwarding state [ 1375.546592][T20235] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1375.558795][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12313'. [ 1375.568130][T20235] bond1 (unregistering): Released all slaves [ 1375.616875][T20215] virt_wifi0 speed is unknown, defaulting to 1000 [ 1375.658805][T20010] team0: Port device team_slave_0 added [ 1375.670696][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12313'. [ 1375.748395][T20010] team0: Port device team_slave_1 added [ 1375.972437][T11819] bridge0: port 3(bond1) entered disabled state [ 1376.046206][T20265] netlink: 'syz.4.12317': attribute type 14 has an invalid length. [ 1376.080085][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1376.105157][T20010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.112333][T20010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.175179][T20010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.188671][T20010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.198628][T20010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.231080][T20273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12318'. [ 1376.242802][T20010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.426402][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12319'. [ 1376.427442][T20010] hsr_slave_0: entered promiscuous mode [ 1376.450465][T20010] hsr_slave_1: entered promiscuous mode [ 1376.463137][T20010] debugfs: 'hsr0' already exists in 'hsr' [ 1376.477106][T20010] Cannot create hsr debugfs directory [ 1376.590607][T20215] lo speed is unknown, defaulting to 1000 [ 1376.603370][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12320'. [ 1376.617959][T20280] netlink: 'syz.2.12320': attribute type 10 has an invalid length. [ 1376.641840][T20280] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12320'. [ 1377.034851][T11827] hsr_slave_0: left promiscuous mode [ 1377.055555][T11827] hsr_slave_1: left promiscuous mode [ 1377.072037][T11827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.160476][T20313] Bluetooth: MGMT ver 1.23 [ 1377.478673][T11827] team0 (unregistering): Port device team_slave_1 removed [ 1377.500205][T11827] team0 (unregistering): Port device team_slave_0 removed [ 1377.708103][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1377.925466][T20334] netlink: 'syz.2.12329': attribute type 32 has an invalid length. [ 1378.350407][T13333] hid-generic 0005:07C0:1010.0001: item fetching failed at offset 0/1 [ 1378.411992][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12332'. [ 1378.460209][T13333] hid-generic 0005:07C0:1010.0001: probe with driver hid-generic failed with error -22 [ 1378.973713][T20010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1379.011491][T20010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1379.046115][T20010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1379.087583][T20010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1379.126012][T20010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1379.277485][T20388] delete_channel: no stack [ 1379.287185][T20385] delete_channel: no stack [ 1379.291880][T20385] delete_channel: no stack [ 1379.297195][T20385] delete_channel: no stack [ 1379.301942][T20385] delete_channel: no stack [ 1379.319547][T20391] netlink: 'syz.4.12338': attribute type 10 has an invalid length. [ 1379.337787][T20385] delete_channel: no stack [ 1379.342586][T20385] delete_channel: no stack [ 1379.350982][T20385] delete_channel: no stack [ 1379.370664][T20385] delete_channel: no stack [ 1379.384026][T20385] delete_channel: no stack [ 1379.395734][T20385] delete_channel: no stack [ 1379.417305][T20385] delete_channel: no stack [ 1379.431205][T20385] delete_channel: no stack [ 1379.441209][T20385] delete_channel: no stack [ 1379.446869][T20385] delete_channel: no stack [ 1379.451597][T20385] delete_channel: no stack [ 1379.457345][T20385] delete_channel: no stack [ 1379.462006][T20385] delete_channel: no stack [ 1379.468845][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12336'. [ 1379.476853][T20010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1379.489700][T20010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1379.504688][T20385] delete_channel: no stack [ 1379.509541][T20385] delete_channel: no stack [ 1379.521299][T20385] delete_channel: no stack [ 1379.526268][T20385] delete_channel: no stack [ 1379.531022][T20385] delete_channel: no stack [ 1379.537043][T20385] delete_channel: no stack [ 1379.541800][T20385] delete_channel: no stack [ 1379.551481][T20385] delete_channel: no stack [ 1379.557131][T20010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1379.565885][T20385] delete_channel: no stack [ 1379.573940][T20385] delete_channel: no stack [ 1379.669906][T20385] delete_channel: no stack [ 1379.690996][T20385] delete_channel: no stack [ 1379.706472][T20385] delete_channel: no stack [ 1379.717839][T20385] delete_channel: no stack [ 1379.739805][T20385] delete_channel: no stack [ 1379.759219][T20385] delete_channel: no stack [ 1379.775245][T20385] delete_channel: no stack [ 1379.789598][T20385] delete_channel: no stack [ 1379.807783][T20385] delete_channel: no stack [ 1379.822144][T20385] delete_channel: no stack [ 1379.846191][T20385] delete_channel: no stack [ 1379.855702][T20010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.861370][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12341'. [ 1379.871843][T20385] delete_channel: no stack [ 1379.872675][T20385] delete_channel: no stack [ 1379.898315][T20385] delete_channel: no stack [ 1379.903325][T20385] delete_channel: no stack [ 1379.947814][T20415] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1379.954561][T20385] delete_channel: no stack [ 1379.959314][T20385] delete_channel: no stack [ 1379.968565][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12341'. [ 1379.985253][T20385] delete_channel: no stack [ 1379.990042][T20385] delete_channel: no stack [ 1380.005702][T20010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.008666][T20385] delete_channel: no stack [ 1380.048637][T20385] delete_channel: no stack [ 1380.061199][T20385] delete_channel: no stack [ 1380.072405][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.079744][T11827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.080382][T20385] delete_channel: no stack [ 1380.109890][T20385] delete_channel: no stack [ 1380.130487][T20385] delete_channel: no stack [ 1380.146759][T20385] delete_channel: no stack [ 1380.156183][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.163414][T11827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.181613][T20385] delete_channel: no stack [ 1380.192327][T20385] delete_channel: no stack [ 1380.216335][T20385] delete_channel: no stack [ 1380.223352][T20385] delete_channel: no stack [ 1380.242632][T20385] delete_channel: no stack [ 1380.257034][T20385] delete_channel: no stack [ 1380.270129][T20385] delete_channel: no stack [ 1380.290721][T20385] delete_channel: no stack [ 1380.304980][T20385] delete_channel: no stack [ 1380.318317][T20385] delete_channel: no stack [ 1380.329851][T20385] delete_channel: no stack [ 1380.412947][T20433] openvswitch: netlink: IP tunnel dst address not specified [ 1380.691101][T20010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.980164][T20010] veth0_vlan: entered promiscuous mode [ 1381.032127][T20010] veth1_vlan: entered promiscuous mode [ 1381.147185][T20466] netlink: 'syz.4.12351': attribute type 2 has an invalid length. [ 1381.179204][T20010] veth0_macvtap: entered promiscuous mode [ 1381.223898][T20466] vþ: entered promiscuous mode [ 1381.272282][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1381.283241][T20010] veth1_macvtap: entered promiscuous mode [ 1381.398514][T20010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.400201][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1381.549766][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12356'. [ 1381.566144][T20010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.590241][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12356'. [ 1381.624988][ T3929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.638133][ T3929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.698829][ T3929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.715833][T20497] IPv6: addrconf: prefix option has invalid lifetime [ 1381.746675][ T3929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.825696][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12359'. [ 1382.190622][T11819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.218552][T11819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.305231][T20526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12367'. [ 1382.421566][T11819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.451191][T11819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.999907][T20553] virt_wifi0 speed is unknown, defaulting to 1000 [ 1383.314643][T20564] netlink: 'syz.1.12375': attribute type 1 has an invalid length. [ 1383.402379][ T7625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1383.415108][ T7625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1383.425309][ T7625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1383.437976][ T7625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1383.448339][ T7625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1383.787162][T20566] virt_wifi0 speed is unknown, defaulting to 1000 [ 1384.215941][ T9340] syz_tun (unregistering): left allmulticast mode [ 1384.585121][T11825] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.603686][T11825] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1384.700954][T20553] lo speed is unknown, defaulting to 1000 [ 1384.773882][T11825] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.844285][T11825] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1384.991254][T20629] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12388'. [ 1385.173794][T11825] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.221193][T11825] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1385.300139][T20645] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12391'. [ 1385.584296][ T5831] Bluetooth: hci5: command tx timeout [ 1385.616669][T11825] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.639583][T11825] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1385.708222][T20566] lo speed is unknown, defaulting to 1000 [ 1385.885690][T20665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12394'. [ 1386.383789][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12398'. [ 1386.569089][T20698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12400'. [ 1386.599099][T20700] netlink: 'syz.2.12401': attribute type 1 has an invalid length. [ 1386.630828][T11825] bridge0: port 3(batadv0) entered disabled state [ 1386.689930][T11825] bridge_slave_0: left allmulticast mode [ 1386.709873][T11825] bridge_slave_0: left promiscuous mode [ 1386.739828][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.848564][T20712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12405'. [ 1387.448789][T11825] bond4 (unregistering): (slave bridge7): Releasing active interface [ 1387.593648][T11825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.604294][T11825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.614727][T11825] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1387.625735][T11825] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1387.640153][T11825] bond0 (unregistering): Released all slaves [ 1387.651290][T11825] bond1 (unregistering): Released all slaves [ 1387.667258][T11825] bond2 (unregistering): Released all slaves [ 1387.675701][ T5831] Bluetooth: hci5: command tx timeout [ 1387.691475][T11825] bond3 (unregistering): Released all slaves [ 1387.710524][T11825] bond4 (unregistering): Released all slaves [ 1387.745881][T20710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1387.838066][T11825] 9: left promiscuous mode [ 1388.058729][T20725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12407'. [ 1388.269730][T20566] chnl_net:caif_netlink_parms(): no params data found [ 1389.070875][T20566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.086940][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.104600][T20566] bridge_slave_0: entered allmulticast mode [ 1389.112730][T20566] bridge_slave_0: entered promiscuous mode [ 1389.163761][T20566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.194368][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.211978][T20566] bridge_slave_1: entered allmulticast mode [ 1389.226842][T20742] Cannot find add_set index 0 as target [ 1389.230509][T20566] bridge_slave_1: entered promiscuous mode [ 1389.422071][T20566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.560447][T20566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.746362][ T5831] Bluetooth: hci5: command tx timeout [ 1389.972446][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1390.001203][T20566] team0: Port device team_slave_0 added [ 1390.032940][T20566] team0: Port device team_slave_1 added [ 1390.179117][T20566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.199685][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.284353][T20566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.309524][T20566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.334168][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.409771][T20841] netlink: 'syz.2.12432': attribute type 2 has an invalid length. [ 1390.417176][T20566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.501755][T20831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.515997][T20831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.528603][T20831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1390.566873][T20841] 9: entered promiscuous mode [ 1390.694486][T20831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.744347][T20831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.773255][T20831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1390.990711][T20856] Cannot find set identified by id 1 to match [ 1391.001320][T20831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.017907][T20831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.081341][T20831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1391.172005][T20858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12437'. [ 1391.210493][T11825] hsr_slave_0: left promiscuous mode [ 1391.240511][T11825] hsr_slave_1: left promiscuous mode [ 1391.257224][T11825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.296635][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.407466][T20875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1391.422484][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1391.453333][T20875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1391.491660][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1391.507522][T20875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1391.808852][T20891] netlink: 'syz.2.12441': attribute type 1 has an invalid length. [ 1391.824290][ T5831] Bluetooth: hci5: command tx timeout [ 1392.021385][T11825] team0 (unregistering): Port device team_slave_1 removed [ 1392.043829][T11825] team0 (unregistering): Port device team_slave_0 removed [ 1392.060980][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1392.207737][T20566] hsr_slave_0: entered promiscuous mode [ 1392.214830][T20566] hsr_slave_1: entered promiscuous mode [ 1392.221058][T20566] debugfs: 'hsr0' already exists in 'hsr' [ 1392.229569][T20566] Cannot create hsr debugfs directory [ 1392.273784][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1392.363004][T20831] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.378357][T20831] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.392244][T20831] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1392.651373][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12447'. [ 1392.856248][T20914] netlink: 'syz.4.12447': attribute type 11 has an invalid length. [ 1392.878253][T20914] netlink: 'syz.4.12447': attribute type 11 has an invalid length. [ 1392.898797][T20914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12447'. [ 1392.940358][T11827] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.957543][T11827] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1392.971942][T11827] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1393.031341][T20927] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1393.120259][T11827] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.150939][T20932] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1393.167280][T11827] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1393.181970][T11827] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1393.213176][T11827] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.237033][T11827] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1393.254514][T11827] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1393.351290][T11825] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.373097][T11825] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1393.392300][T11825] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1393.573279][T20946] netlink: 'syz.0.12454': attribute type 1 has an invalid length. [ 1393.608329][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1393.642367][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1393.713602][T20946] netlink: 'syz.0.12454': attribute type 2 has an invalid length. [ 1393.760218][T20946] netlink: 'syz.0.12454': attribute type 2 has an invalid length. [ 1393.810272][T20946] netlink: 'syz.0.12454': attribute type 2 has an invalid length. [ 1393.894653][T20953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.902839][T20955] virt_wifi0 speed is unknown, defaulting to 1000 [ 1394.304493][T20566] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1394.339325][T20566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1394.364995][T20566] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1394.399122][T20566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.441090][T20566] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1394.482490][T20566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1394.516492][T20566] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1394.577496][T20566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1394.613470][T20955] lo speed is unknown, defaulting to 1000 [ 1395.024838][T20566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.078677][T20566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.124139][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.131552][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.176237][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.183450][T11827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.730855][T21030] syzkaller0: entered promiscuous mode [ 1395.738611][T21030] syzkaller0: entered allmulticast mode [ 1396.149821][T20566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.630847][T21070] syzkaller0: entered promiscuous mode [ 1396.648208][T21070] syzkaller0: entered allmulticast mode [ 1396.949815][T21087] vlan2: entered allmulticast mode [ 1397.260536][T21105] netlink: 'syz.2.12479': attribute type 1 has an invalid length. [ 1397.363679][T21110] __nla_validate_parse: 7 callbacks suppressed [ 1397.363698][T21110] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12478'. [ 1397.851112][ T8760] lec:lec_start_xmit: lec0:No lecd attached [ 1399.593867][T20566] veth0_vlan: entered promiscuous mode [ 1399.603177][T21105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1399.631550][T21116] team0 (unregistering): Port device team_slave_0 removed [ 1399.659143][T21116] team0 (unregistering): Port device team_slave_1 removed [ 1399.784984][T20566] veth1_vlan: entered promiscuous mode [ 1399.899056][T20566] veth0_macvtap: entered promiscuous mode [ 1399.921630][T21154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12485'. [ 1399.998773][T20566] veth1_macvtap: entered promiscuous mode [ 1400.074660][T21163] netlink: 'syz.1.12489': attribute type 3 has an invalid length. [ 1400.098734][T20566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.153878][T20566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.239468][T11827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.262260][T11827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.292279][T11827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.328020][T11827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.423654][T21175] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1400.622534][T11827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.648227][T11827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.770568][T21197] netlink: 'syz.2.12499': attribute type 2 has an invalid length. [ 1400.815097][T21197] netlink: 'syz.2.12499': attribute type 11 has an invalid length. [ 1400.834949][T21197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12499'. [ 1400.845031][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.869240][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.921917][T21203] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.12500'. [ 1401.075107][T21215] sctp: [Deprecated]: syz.1.12502 (pid 21215) Use of int in maxseg socket option. [ 1401.075107][T21215] Use struct sctp_assoc_value instead [ 1401.098699][T21218] netlink: 272 bytes leftover after parsing attributes in process `syz.5.12373'. [ 1401.127163][T21218] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 1401.177377][T21226] sctp: [Deprecated]: syz.2.12503 (pid 21226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1401.177377][T21226] Use struct sctp_sack_info instead [ 1401.208996][T21224] No such timeout policy "syz0" [ 1401.428138][T21241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12507'. [ 1401.508346][T21245] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12509'. [ 1401.782033][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1402.097473][T21289] IPVS: length: 4096 != 24 [ 1402.546509][T28521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.504148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1403.512258][ C1] lec:lec_tx_timeout: lec0 [ 1403.520083][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.586937][T28521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.737101][T21195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1403.774699][T21294] netlink: 'syz.2.12519': attribute type 1 has an invalid length. [ 1403.782584][T21294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12519'. [ 1403.841741][T21294] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 1403.940460][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1404.281563][ T7625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1404.293652][T21318] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12526'. [ 1404.315616][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.325698][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.335917][ T7625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1404.345340][ T7625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1404.354450][ T7625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1404.374687][ T7625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1404.434800][T21321] netlink: 'syz.2.12527': attribute type 5 has an invalid length. [ 1404.479370][T21314] virt_wifi0 speed is unknown, defaulting to 1000 [ 1404.626441][T28521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.753798][T21335] gretap2: entered promiscuous mode [ 1404.763585][T21335] batman_adv: batadv0: Adding interface: gretap2 [ 1404.776985][T21335] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1404.816669][T21335] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1404.859227][T21329] tipc: Started in network mode [ 1404.867080][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.890456][T21329] tipc: Node identity 9abbf670a49e, cluster identity 4711 [ 1404.900622][T21329] tipc: Enabled bearer , priority 11 [ 1404.998641][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12533'. [ 1405.050019][T21334] syzkaller0: entered promiscuous mode [ 1405.057915][T21334] syzkaller0: entered allmulticast mode [ 1405.066924][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12529'. [ 1405.088723][T21314] lo speed is unknown, defaulting to 1000 [ 1405.393344][T21366] netlink: 'syz.2.12539': attribute type 21 has an invalid length. [ 1405.401879][T21366] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1405.478692][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1405.668766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.677414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.830490][T13429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.467135][ T7625] Bluetooth: hci2: command tx timeout [ 1407.281164][T21352] virt_wifi0 speed is unknown, defaulting to 1000 [ 1407.287774][T21369] netlink: 'syz.2.12540': attribute type 29 has an invalid length. [ 1407.287840][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1407.314192][ T8633] tipc: Node number set to 1042675312 [ 1407.580438][T21391] Cannot find add_set index 2 as target [ 1407.641114][T21391] veth5: entered promiscuous mode [ 1407.650575][T21391] veth5: entered allmulticast mode [ 1407.669464][T21393] netlink: 576 bytes leftover after parsing attributes in process `syz.2.12545'. [ 1407.699962][T21393] tipc: Resetting bearer [ 1407.721831][T21314] chnl_net:caif_netlink_parms(): no params data found [ 1407.757287][T23771] net_ratelimit: 3 callbacks suppressed [ 1407.757307][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.037138][T21314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.044654][T21314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.052400][T21314] bridge_slave_0: entered allmulticast mode [ 1408.060691][T21314] bridge_slave_0: entered promiscuous mode [ 1408.069913][T21314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.077325][T21314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.084940][T21314] bridge_slave_1: entered allmulticast mode [ 1408.093028][T21314] bridge_slave_1: entered promiscuous mode [ 1408.144070][T21314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.157589][T21352] lo speed is unknown, defaulting to 1000 [ 1408.170898][T21314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.199773][T21412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12551'. [ 1408.333245][T21314] team0: Port device team_slave_0 added [ 1408.398592][T21314] team0: Port device team_slave_1 added [ 1408.497617][T21314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.512010][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.551052][T21314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.562529][ T7625] Bluetooth: hci2: command tx timeout [ 1408.572873][T21314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.580311][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.607376][T21314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.629921][T21428] vlan2: entered allmulticast mode [ 1408.800823][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.827204][T21314] hsr_slave_0: entered promiscuous mode [ 1408.837105][T21314] hsr_slave_1: entered promiscuous mode [ 1408.859209][T21314] debugfs: 'hsr0' already exists in 'hsr' [ 1408.868523][T21314] Cannot create hsr debugfs directory [ 1408.874388][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.119931][T21444] __nla_validate_parse: 1 callbacks suppressed [ 1409.119951][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12561'. [ 1409.369470][T21314] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.400037][T21314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1409.422028][T21314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1409.512712][T21314] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.532869][T21314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1409.544198][T21314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1409.688334][T21314] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.704086][T21314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1409.716236][T21314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1409.738675][T21461] netlink: 'syz.2.12568': attribute type 10 has an invalid length. [ 1409.758608][T21463] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1409.784281][T21461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.793186][T21461] bridge_slave_1: left allmulticast mode [ 1409.800175][T21461] bridge_slave_1: left promiscuous mode [ 1409.825297][T13333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.830715][T21461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.864846][T21461] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1409.900372][T21314] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.915183][T21314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1409.928393][T21314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1410.060598][T21473] netlink: 'syz.1.12571': attribute type 3 has an invalid length. [ 1410.209230][T21476] delete_channel: no stack [ 1410.274034][T21314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1410.316015][T21314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1410.339872][T21314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1410.367652][T21314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1410.405668][T21314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1410.441884][T21314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1410.469658][T21314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1410.527752][T21314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1410.578410][T21498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12575'. [ 1410.632454][ T7625] Bluetooth: hci2: command tx timeout [ 1410.761185][T21314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.847743][T21314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.865425][T13333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.907979][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.915270][T13429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.980792][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.988073][T13429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.007295][T21520] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1411.355956][T21541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12585'. [ 1411.585999][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.595023][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.608549][T13333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.671965][T21314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.905633][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.967001][T21314] veth0_vlan: entered promiscuous mode [ 1412.029763][T21314] veth1_vlan: entered promiscuous mode [ 1412.149310][T21314] veth0_macvtap: entered promiscuous mode [ 1412.167991][T21568] netlink: 'syz.2.12593': attribute type 11 has an invalid length. [ 1412.191731][T21314] veth1_macvtap: entered promiscuous mode [ 1412.194794][T21568] netlink: 'syz.2.12593': attribute type 11 has an invalid length. [ 1412.233115][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.252266][T21568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12593'. [ 1412.263477][T21571] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12594'. [ 1412.290818][T21314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.477374][T21314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.558517][T13429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.576845][T13429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.633330][T13429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.686219][T13429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.699820][T21583] netlink: 'syz.4.12599': attribute type 2 has an invalid length. [ 1412.716969][ T7625] Bluetooth: hci2: command tx timeout [ 1412.785417][T21581] netlink: 'syz.5.12598': attribute type 1 has an invalid length. [ 1412.866591][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.947593][T13333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.061432][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12601'. [ 1413.086566][T21600] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.12602'. [ 1413.374300][T13429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.418101][T13429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.504348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.593665][T13429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.622886][T13429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.918594][T21627] xt_l2tp: unknown flags: 10 [ 1413.984942][T13333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.040741][T21631] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12522'. [ 1414.149565][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.365568][T21646] smc: net device team0 applied user defined pnetid SYZ2 [ 1414.506017][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12617'. [ 1414.767878][T21671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12619'. [ 1414.838293][T21671] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12619'. [ 1414.885108][T21671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12619'. [ 1414.901523][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12620'. [ 1415.019810][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12622'. [ 1415.033751][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.179744][T21693] sctp: [Deprecated]: syz.5.12625 (pid 21693) Use of int in maxseg socket option. [ 1415.179744][T21693] Use struct sctp_assoc_value instead [ 1415.346330][T21698] netlink: 'syz.2.12628': attribute type 2 has an invalid length. [ 1415.377048][T21698] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12628'. [ 1415.668033][T21714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1415.906505][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.076776][T21743] netlink: 'syz.1.12638': attribute type 5 has an invalid length. [ 1416.084833][T28521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.402709][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12640'. [ 1416.586908][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12643'. [ 1416.641783][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12643'. [ 1416.661397][T21768] team0: No ports can be present during mode change [ 1417.046187][T21783] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1417.101411][T21783] bond1 (unregistering): Released all slaves [ 1417.108950][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.350032][ T3931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.372762][T21784] virt_wifi0 speed is unknown, defaulting to 1000 [ 1417.710245][T21824] delete_channel: no stack [ 1417.932799][ T5883] IPVS: starting estimator thread 0... [ 1417.979962][T21836] net_ratelimit: 2 callbacks suppressed [ 1417.979984][T21836] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 1418.054304][T21841] IPVS: using max 29 ests per chain, 69600 per kthread [ 1418.156273][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.728911][T21784] lo speed is unknown, defaulting to 1000 [ 1419.184780][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.239776][T21877] vlan2: entered allmulticast mode [ 1419.257001][T21877] gretap0: entered allmulticast mode [ 1419.761898][T21916] __nla_validate_parse: 7 callbacks suppressed [ 1419.761920][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12682'. [ 1419.918334][T21925] x_tables: duplicate underflow at hook 3 [ 1419.958388][T21927] netlink: 'syz.2.12689': attribute type 4 has an invalid length. [ 1419.969968][T21927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12689'. [ 1420.000708][T21927] .`: renamed from bond0 (while UP) [ 1420.077120][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12687'. [ 1420.096063][T21930] netlink: 'syz.0.12687': attribute type 18 has an invalid length. [ 1420.114676][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12687'. [ 1420.160368][T13429] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.171904][T21941] netlink: 'syz.1.12691': attribute type 1 has an invalid length. [ 1420.180203][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12687'. [ 1420.190875][T13429] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.200377][T21930] netlink: 'syz.0.12687': attribute type 18 has an invalid length. [ 1420.224844][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.233258][T13429] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.247342][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12687'. [ 1420.277021][T21945] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1420.290947][T21945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1420.330088][T21941] bond1: entered promiscuous mode [ 1420.336720][T21941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1420.349693][T13429] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.385706][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.470534][T21941] bond1: (slave bridge3): making interface the new active one [ 1420.494351][T21941] bridge3: entered promiscuous mode [ 1420.500855][T21941] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1420.855177][T21982] pim6reg: entered allmulticast mode [ 1420.927143][T21982] pim6reg: left allmulticast mode [ 1420.967385][T21998] netlink: 'syz.2.12709': attribute type 1 has an invalid length. [ 1420.981119][T21998] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12709'. [ 1420.997515][T22003] Cannot find add_set index 46338 as target [ 1421.025653][T22003] netlink: 'syz.0.12707': attribute type 7 has an invalid length. [ 1421.033547][T22003] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12707'. [ 1421.092035][T22006] netlink: 212 bytes leftover after parsing attributes in process `syz.2.12710'. [ 1421.265672][T23771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.696356][T22041] netlink: 'syz.1.12720': attribute type 1 has an invalid length. [ 1421.905892][T22054] netlink: 'syz.0.12723': attribute type 39 has an invalid length. [ 1422.307888][T28521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.408357][T22073] xt_NFQUEUE: number of total queues is 0 [ 1422.471224][T22079] Cannot find set identified by id 4 to match [ 1422.495405][T22077] netlink: 288 bytes leftover after parsing attributes in process `syz.5.12731'. [ 1423.115041][ T3931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.125290][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.135104][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.359316][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.761860][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.772401][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1423.780773][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.787091][ T1300] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1424.399736][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.417243][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.249997][T22087] kthread_run failed with err -4 [ 1425.432043][T22106] __nla_validate_parse: 1 callbacks suppressed [ 1425.432065][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12735'. [ 1425.451855][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.478789][T22109] netlink: 'syz.4.12737': attribute type 3 has an invalid length. [ 1425.602152][T22105] netem: incorrect ge model size [ 1425.611278][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12740'. [ 1425.620777][T22105] netem: change failed [ 1425.630608][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12740'. [ 1425.703039][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12740'. [ 1425.706339][T11827] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.732181][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12740'. [ 1425.763298][T11827] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.787959][T11827] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.801513][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12744'. [ 1425.811336][T11827] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.855584][T22126] netem: change failed [ 1426.035644][T22137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1426.064799][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12749'. [ 1426.155909][T22143] netlink: 'syz.0.12750': attribute type 1 has an invalid length. [ 1426.258595][T22150] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1426.483114][T22172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1426.492456][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.538547][T22174] bridge_slave_1 (unregistering): left allmulticast mode [ 1426.564028][T22174] bridge_slave_1 (unregistering): left promiscuous mode [ 1426.571550][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.683917][T22187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.865342][ T7625] Bluetooth: hci1: command 0x0c1a tx timeout [ 1428.865523][T22181] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1428.882472][T22181] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1429.290609][T22154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1429.355006][T22181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1429.360988][T22181] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1429.467692][T22181] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1429.482922][T22181] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1429.491912][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12763'. [ 1429.501249][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12763'. [ 1429.510804][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1429.510839][ C1] lec:lec_tx_timeout: lec0 [ 1429.530353][T22246] netlink: 'syz.4.12762': attribute type 18 has an invalid length. [ 1429.595378][ T3917] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.605205][ T3917] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.659854][ T3917] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.660568][T22181] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1429.697747][T22181] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1429.711600][ T3917] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.897786][T22258] netlink: 'syz.0.12766': attribute type 1 has an invalid length. [ 1429.961846][T22260] IPv6: sit1: Disabled Multicast RS [ 1429.988603][T22260] sit1: entered allmulticast mode [ 1430.055564][T22181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1430.061549][T22181] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1430.232871][T22263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.372364][T22263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.400392][T22263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.556905][T22263] gretap2: left promiscuous mode [ 1430.600440][ T3927] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.611712][ T3927] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.620894][ T3927] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.633076][ T3927] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.677379][ T3927] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.687466][ T3927] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.697433][ T3927] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1430.707926][ T3927] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.022473][T22298] netlink: 'syz.4.12775': attribute type 3 has an invalid length. [ 1431.425171][T22327] Bluetooth: MGMT ver 1.23 [ 1431.524054][T22338] __nla_validate_parse: 2 callbacks suppressed [ 1431.553321][T22325] netlink: 'syz.5.12782': attribute type 9 has an invalid length. [ 1431.573233][T22338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12784'. [ 1431.616068][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12782'. [ 1431.935503][T22356] netlink: 'syz.4.12789': attribute type 1 has an invalid length. [ 1431.972338][T22356] bond2: entered promiscuous mode [ 1431.980471][T22356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1431.995251][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12789'. [ 1432.005490][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12789'. [ 1432.257123][T22370] netlink: 'syz.0.12790': attribute type 1 has an invalid length. [ 1432.325402][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12793'. [ 1432.340771][T22370] bond1: entered promiscuous mode [ 1432.353820][T22370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1434.391056][T22391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1434.398478][T22391] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1434.410349][T22391] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1434.427609][T22391] bond1: (slave vti0): making interface the new active one [ 1434.435114][T22391] vti0: entered promiscuous mode [ 1434.441869][T22391] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1434.459352][T22396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.488859][T22396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.589163][T22407] netlink: 'syz.2.12798': attribute type 9 has an invalid length. [ 1434.801290][T22418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1434.902803][T22427] bond1: entered allmulticast mode [ 1434.934993][T22427] vti0: entered allmulticast mode [ 1434.949720][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12802'. [ 1434.980273][T22431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12802'. [ 1435.007564][T22434] netlink: 'syz.1.12805': attribute type 1 has an invalid length. [ 1435.023262][T22434] netlink: 'syz.1.12805': attribute type 3 has an invalid length. [ 1435.034643][T22434] netlink: 212 bytes leftover after parsing attributes in process `syz.1.12805'. [ 1435.156916][T22440] netlink: 'syz.0.12806': attribute type 12 has an invalid length. [ 1435.185033][T22440] netlink: 'syz.0.12806': attribute type 29 has an invalid length. [ 1435.201592][T22440] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12806'. [ 1435.215116][T22440] netlink: 59 bytes leftover after parsing attributes in process `syz.0.12806'. [ 1435.843906][T22471] netlink: 'syz.1.12811': attribute type 64 has an invalid length. [ 1435.924493][T22469] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1436.096877][T22480] pimreg: entered allmulticast mode [ 1436.563222][T22507] __nla_validate_parse: 1 callbacks suppressed [ 1436.563243][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12823'. [ 1436.961755][T22525] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1436.970815][T22525] syzkaller1: linktype set to 823 [ 1437.054583][T22528] netlink: 'syz.5.12828': attribute type 11 has an invalid length. [ 1437.157705][T22538] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12830'. [ 1437.230469][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12831'. [ 1437.243949][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12831'. [ 1437.430470][T22553] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12835'. [ 1437.465649][T22553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12835'. [ 1437.476211][T22553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12835'. [ 1444.227330][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1461.096493][ T8760] lec:lec_start_xmit: lec0:No lecd attached [ 1466.545660][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 1466.553769][ C1] lec:lec_tx_timeout: lec0 [ 1483.698980][T22590] netlink: 'syz.1.12837': attribute type 10 has an invalid length. [ 1483.723831][T22589] : entered promiscuous mode [ 1483.774887][T22590] batman_adv: batadv0: Adding interface: netdevsim0 [ 1483.810714][T22599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12840'. [ 1483.826679][T22590] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.880243][T22590] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1483.917188][T22605] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.12842'. [ 1483.949643][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12842'. [ 1484.004498][T22605] hsr_slave_0 (unregistering): left promiscuous mode [ 1484.211105][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12844'. [ 1484.223460][T22610] syzkaller0: entered promiscuous mode [ 1484.229742][T22610] syzkaller0: entered allmulticast mode [ 1484.244279][T22610] tcf_pedit_act: 7 callbacks suppressed [ 1484.244297][T22610] tc action pedit 'at' offset 257 out of bounds [ 1485.192997][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1485.202429][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1485.209044][ T1300] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1486.576332][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12857'. [ 1486.987056][T22684] Cannot find del_set index 1 as target [ 1487.003230][T22684] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.12866'. [ 1487.053700][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12868'. [ 1487.080066][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12868'. [ 1487.152936][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12868'. [ 1487.163852][T22701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12870'. [ 1487.176409][T22701] netlink: 'syz.2.12870': attribute type 1 has an invalid length. [ 1487.185342][T22701] netlink: 'syz.2.12870': attribute type 2 has an invalid length. [ 1487.329355][T22708] virt_wifi0 speed is unknown, defaulting to 1000 [ 1487.505267][T22718] tipc: Enabled bearer , priority 0 [ 1487.608363][T22718] syzkaller0: entered promiscuous mode [ 1487.615358][T22718] syzkaller0: entered allmulticast mode [ 1487.621823][T22718] tipc: Resetting bearer [ 1487.656079][T22717] tipc: Resetting bearer [ 1489.527435][T22717] tipc: Disabling bearer [ 1489.548192][T22708] lo speed is unknown, defaulting to 1000 [ 1489.697838][T22740] netlink: 'syz.1.12879': attribute type 1 has an invalid length. [ 1489.809193][T22740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1489.938538][T22757] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 1489.991533][T22763] syzkaller0: entered promiscuous mode [ 1490.046717][T22758] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 [ 1490.054340][T22758] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 1490.075215][T22763] syzkaller0: entered allmulticast mode [ 1490.258960][T22770] __nla_validate_parse: 4 callbacks suppressed [ 1490.258983][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12888'. [ 1490.517761][T22785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1490.544266][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1490.552385][ C1] lec:lec_tx_timeout: lec0 [ 1490.926343][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1490.930216][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.038752][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.108771][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.152340][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.172776][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12902'. [ 1491.197799][T22812] netlink: 'syz.5.12901': attribute type 1 has an invalid length. [ 1491.252059][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.292481][T22812] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 1491.327749][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.422825][T22812] macvlan2: entered promiscuous mode [ 1491.435983][T22812] macvlan2: entered allmulticast mode [ 1491.456075][T22812] bond2: entered promiscuous mode [ 1491.461186][T22812] bridge2: entered promiscuous mode [ 1491.475110][T22812] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1491.488119][T22812] bond2: left promiscuous mode [ 1491.497892][T22812] bridge2: left promiscuous mode [ 1491.522060][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1491.876777][T22844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1492.067685][T22849] syzkaller0: entered promiscuous mode [ 1492.073472][T22849] syzkaller0: entered allmulticast mode [ 1492.091834][T22859] netlink: 'syz.0.12915': attribute type 22 has an invalid length. [ 1492.185633][T22859] netlink: 'syz.0.12915': attribute type 22 has an invalid length. [ 1494.309401][T22877] netlink: 'syz.4.12919': attribute type 1 has an invalid length. [ 1494.660983][T22901] virt_wifi0 speed is unknown, defaulting to 1000 [ 1494.995301][T22901] lo speed is unknown, defaulting to 1000 [ 1495.112128][T22929] ksmbd: Unknown IPC event: 3, ignore. [ 1495.449279][T22953] __nla_validate_parse: 35 callbacks suppressed [ 1495.449304][T22953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12938'. [ 1495.486901][T22957] netlink: 'syz.2.12942': attribute type 2 has an invalid length. [ 1495.501178][T22957] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12942'. [ 1495.523329][T22959] netlink: 220 bytes leftover after parsing attributes in process `syz.5.12941'. [ 1496.166843][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12952'. [ 1496.186404][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12952'. [ 1496.205231][T22994] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12953'. [ 1496.213581][T22995] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12953'. [ 1496.239266][T22990] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12951'. [ 1496.330069][T22999] geneve2: entered promiscuous mode [ 1496.347273][T22999] geneve2: entered allmulticast mode [ 1496.381387][T23001] netlink: 'syz.0.12955': attribute type 1 has an invalid length. [ 1496.394200][T11825] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1496.403215][T11825] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1496.447312][T11825] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1496.475180][T11825] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1496.559228][T23001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1496.859339][T23029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.893230][T23029] bridge_slave_0 (unregistering): left promiscuous mode [ 1496.901972][T23029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.101005][T23046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12968'. [ 1497.416416][T23072] openvswitch: netlink: Multiple metadata blocks provided [ 1497.617313][T23084] netlink: 'syz.2.12980': attribute type 1 has an invalid length. [ 1497.855685][T23095] netlink: 'syz.2.12983': attribute type 9 has an invalid length. [ 1497.887576][T23095] netdevsim netdevsim2 : renamed from netdevsim0 [ 1497.917196][T23097] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12984'. [ 1498.483807][T23116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.573864][T23116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.680278][T23131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.971732][T23149] bond3: option all_slaves_active: invalid value (222) [ 1498.985629][T23149] bond3 (unregistering): Released all slaves [ 1499.059789][T23156] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1499.083987][T23156] bond3 (unregistering): Released all slaves [ 1499.167427][T23158] bond0: entered promiscuous mode [ 1499.172537][T23158] bond0: entered allmulticast mode [ 1499.178586][T23158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.821136][T23196] sctp: [Deprecated]: syz.4.13014 (pid 23196) Use of int in max_burst socket option deprecated. [ 1499.821136][T23196] Use struct sctp_assoc_value instead [ 1499.966434][T23205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1500.006408][T23201] macvlan0: entered promiscuous mode [ 1500.575423][T23235] __nla_validate_parse: 6 callbacks suppressed [ 1500.575445][T23235] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13023'. [ 1500.594797][T23235] bridge_slave_1: default FDB implementation only supports local addresses [ 1500.940700][T23247] x_tables: duplicate entry at hook 3 [ 1500.962122][T23248] x_tables: duplicate entry at hook 3 [ 1501.283655][T23262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13030'. [ 1501.365213][T23262] vti1: entered allmulticast mode [ 1501.411399][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13031'. [ 1501.496001][T23266] sctp: [Deprecated]: syz.5.13031 (pid 23266) Use of int in max_burst socket option. [ 1501.496001][T23266] Use struct sctp_assoc_value instead [ 1501.597642][T23272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13031'. [ 1501.607322][T23272] netlink: 6 bytes leftover after parsing attributes in process `syz.5.13031'. [ 1501.859633][T23251] bond3: entered promiscuous mode [ 1501.882238][T23251] bond3: entered allmulticast mode [ 1501.900099][T23280] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13035'. [ 1501.915108][T23251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1502.009459][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13035'. [ 1502.037057][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13035'. [ 1502.350135][T23291] dvmrp0: entered allmulticast mode [ 1502.533823][T23302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1502.938713][T23319] syzkaller0: entered promiscuous mode [ 1502.960440][T23319] syzkaller0: entered allmulticast mode [ 1503.167923][T23329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1503.199350][T23328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1503.398670][T23343] netdevsim netdevsim1 : renamed from netdevsim0 [ 1503.830321][T23361] syzkaller0: entered promiscuous mode [ 1503.850083][T23361] syzkaller0: entered allmulticast mode [ 1503.899245][T23367] netlink: 'syz.2.13061': attribute type 9 has an invalid length. [ 1504.059914][T23374] netlink: 'syz.5.13063': attribute type 12 has an invalid length. [ 1504.079884][T23380] netlink: 'syz.1.13062': attribute type 21 has an invalid length. [ 1504.116566][T23380] netlink: 'syz.1.13062': attribute type 6 has an invalid length. [ 1504.136920][T23384] ip6gretap0: entered promiscuous mode [ 1504.142468][T23384] ip6gretap0: entered allmulticast mode [ 1504.519079][T23394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1504.574377][T23410] netlink: 'syz.0.13072': attribute type 1 has an invalid length. [ 1504.582453][T23410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1504.630474][T23394] bond2 (unregistering): Released all slaves [ 1504.819037][T23417] netlink: 'syz.5.13075': attribute type 2 has an invalid length. [ 1504.993587][T23427] ksmbd: Daemon and kernel module version mismatch. ksmbd: 48, kernel module: 1. User-space ksmbd should terminate. [ 1505.096592][T23433] syzkaller0: entered promiscuous mode [ 1505.106467][T23433] syzkaller0: entered allmulticast mode [ 1505.450039][T23451] openvswitch: netlink: Missing valid actions attribute. [ 1505.457643][T23451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1505.611968][T23461] __nla_validate_parse: 13 callbacks suppressed [ 1505.612014][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13092'. [ 1505.642665][T23461] ip6erspan1: entered promiscuous mode [ 1505.753737][T23464] netlink: 'syz.5.13093': attribute type 11 has an invalid length. [ 1505.762262][T23464] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13093'. [ 1505.791469][T23465] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13093'. [ 1506.481376][T23512] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13109'. [ 1506.585412][T23518] netlink: 'syz.5.13110': attribute type 39 has an invalid length. [ 1506.609154][T23518] hsr_slave_1 (unregistering): left promiscuous mode [ 1506.623669][T23519] nbd: couldn't find device at index 0 [ 1506.641832][T23519] nbd: couldn't find a device at index 0 [ 1506.776869][T23528] only policy match revision 0 supported [ 1506.776893][T23528] unable to load match [ 1506.791511][T23528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13114'. [ 1506.804513][T23528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13114'. [ 1506.860825][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13116'. [ 1506.986077][T23537] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13119'. [ 1507.019069][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13118'. [ 1507.149380][T23546] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13122'. [ 1507.210640][T23552] netlink: 'syz.2.13124': attribute type 5 has an invalid length. [ 1507.419163][T23566] netlink: 'syz.2.13129': attribute type 3 has an invalid length. [ 1507.570228][T23575] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1507.903862][T23604] bond3: entered promiscuous mode [ 1507.936624][T23604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1508.131340][T23627] sctp: [Deprecated]: syz.1.13142 (pid 23627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1508.131340][T23627] Use struct sctp_sack_info instead [ 1509.035362][T23686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.057430][T23686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.220503][T23692] validate_nla: 4 callbacks suppressed [ 1509.220534][T23692] netlink: 'syz.1.13162': attribute type 3 has an invalid length. [ 1509.639415][T23701] delete_channel: no stack [ 1511.476199][T23725] netlink: 'syz.2.13173': attribute type 1 has an invalid length. [ 1511.700961][T23743] netlink: 'syz.0.13177': attribute type 1 has an invalid length. [ 1511.782620][T23743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1511.821193][T23743] vlan2: entered allmulticast mode [ 1511.841041][T23743] bond3: entered allmulticast mode [ 1511.868032][T23743] bond3: (slave geneve2): making interface the new active one [ 1511.876741][T23743] geneve2: entered allmulticast mode [ 1511.886455][T23743] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1511.909729][T23743] __nla_validate_parse: 7 callbacks suppressed [ 1511.909749][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13177'. [ 1511.925664][T23749] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001 [ 1511.940673][T23747] syzkaller0: entered promiscuous mode [ 1511.951048][T23747] syzkaller0: entered allmulticast mode [ 1511.959669][T23749] x_tables: duplicate underflow at hook 1 [ 1512.118341][T23757] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1512.169222][T23757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1512.185414][T23758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13180'. [ 1512.209994][T23763] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.13183'. [ 1512.212812][T23757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13180'. [ 1512.239426][T23763] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1512.253918][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13183'. [ 1512.306564][T23761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.346664][T23761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.516682][T23761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.535832][T23761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.572076][T23779] netlink: 'syz.5.13187': attribute type 10 has an invalid length. [ 1512.596144][T23779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.614247][T23779] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1512.648588][T23761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.661200][T23761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.690114][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13188'. [ 1512.759489][T23761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.788468][T23761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.839976][T23789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1512.937931][T11825] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.962428][T11825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.971279][T11825] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.980375][T11825] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.996739][T11825] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.005415][T11825] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.023875][T11825] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.037709][T11825] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.217537][T23807] bond0: left promiscuous mode [ 1513.222384][T23807] bond0: left allmulticast mode [ 1513.295335][T23812] netlink: 'syz.0.13200': attribute type 1 has an invalid length. [ 1513.516019][T23826] syzkaller0: entered promiscuous mode [ 1513.522810][T23826] syzkaller0: entered allmulticast mode [ 1513.535068][T23827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13204'. [ 1513.693174][T23841] sctp: [Deprecated]: syz.5.13208 (pid 23841) Use of int in max_burst socket option. [ 1513.693174][T23841] Use struct sctp_assoc_value instead [ 1513.801163][T23850] xt_hashlimit: size too large, truncated to 1048576 [ 1513.857473][T23854] –: renamed from vxcan1 (while UP) [ 1514.143602][T23866] xt_hashlimit: size too large, truncated to 1048576 [ 1514.312339][T23870] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1514.373230][T23880] bridge1: entered promiscuous mode [ 1514.379358][T23880] bridge1: entered allmulticast mode [ 1514.495386][T23888] xt_SECMARK: invalid mode: 9 [ 1514.500477][T23887] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13220'. [ 1514.665197][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13222'. [ 1514.691681][T23904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13224'. [ 1514.762958][T23892] xt_ecn: cannot match TCP bits for non-tcp packets [ 1515.045810][T23919] syzkaller0: entered promiscuous mode [ 1515.053013][T23919] syzkaller0: entered allmulticast mode [ 1516.322842][T23993] netlink: 'syz.5.13244': attribute type 4 has an invalid length. [ 1516.710936][T24026] netlink: 'syz.2.13255': attribute type 10 has an invalid length. [ 1516.912954][T24044] tipc: Enabled bearer , priority 0 [ 1516.987493][T24044] syzkaller0: entered promiscuous mode [ 1516.993276][T24044] syzkaller0: entered allmulticast mode [ 1517.000114][T24044] tipc: Resetting bearer [ 1517.011732][T24047] __nla_validate_parse: 6 callbacks suppressed [ 1517.011753][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13259'. [ 1517.037093][T24043] tipc: Resetting bearer [ 1517.603230][T24073] netlink: 'syz.5.13264': attribute type 1 has an invalid length. [ 1517.613197][T24073] netlink: 212 bytes leftover after parsing attributes in process `syz.5.13264'. [ 1518.040141][T24095] netlink: 165 bytes leftover after parsing attributes in process `syz.5.13271'. [ 1518.364591][T24104] sctp: [Deprecated]: syz.5.13272 (pid 24104) Use of int in max_burst socket option deprecated. [ 1518.364591][T24104] Use struct sctp_assoc_value instead [ 1519.292586][T24043] tipc: Disabling bearer [ 1519.496049][T24115] netlink: 'syz.5.13276': attribute type 1 has an invalid length. [ 1519.577784][T24115] bond4: entered promiscuous mode [ 1519.595252][T24115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1519.630839][T24113] lo: entered promiscuous mode [ 1519.648090][T24133] netlink: 'syz.0.13279': attribute type 1 has an invalid length. [ 1519.659777][T24113] tunl0: entered promiscuous mode [ 1519.688053][T24113] gre0: entered promiscuous mode [ 1519.724865][T24113] gretap0: entered promiscuous mode [ 1519.737061][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13276'. [ 1519.751966][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13276'. [ 1519.767231][T24113] erspan0: entered promiscuous mode [ 1519.777501][T24113] ip_vti0: entered promiscuous mode [ 1519.797949][T24139] sctp: [Deprecated]: syz.1.13280 (pid 24139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1519.797949][T24139] Use struct sctp_sack_info instead [ 1519.835894][T24133] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1519.862990][T24137] vlan3: entered promiscuous mode [ 1519.874686][T24137] bond5: entered promiscuous mode [ 1519.879974][T24137] vlan3: entered allmulticast mode [ 1519.885896][T24137] bond5: entered allmulticast mode [ 1519.926182][T24115] bond4: (slave bridge3): making interface the new active one [ 1519.933801][T24115] bridge3: entered promiscuous mode [ 1519.941284][T24115] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1519.963144][T24143] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1519.972775][T24143] bond5: (slave batadv1): making interface the new active one [ 1519.980885][T24143] batadv1: entered promiscuous mode [ 1519.987260][T24143] batadv1: entered allmulticast mode [ 1520.010823][T24143] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1520.070464][T24141] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1520.092937][T24141] bond5 (unregistering): Released all slaves [ 1520.338252][T24167] netlink: 7 bytes leftover after parsing attributes in process `syz.5.13287'. [ 1520.501689][T24185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13294'. [ 1520.722609][T24198] xt_socket: unknown flags 0x50 [ 1520.728366][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1521.210857][T24207] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1521.235584][T24206] veth0: entered promiscuous mode [ 1521.294662][T24206] veth0: left promiscuous mode [ 1521.323210][T24213] batman_adv: batadv0: Adding interface: dummy0 [ 1521.330246][T24213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.379541][T24213] batman_adv: batadv0: Interface activated: dummy0 [ 1521.398400][T24215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1521.475940][T24213] batadv0: mtu less than device minimum [ 1521.499062][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.510895][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.522662][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.534468][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.546180][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.557976][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.569736][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.581417][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.592990][T24213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1521.673686][T24221] vcan0: tx address claim with dlc 1 [ 1521.735716][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13303'. [ 1522.032139][T24244] xt_HMARK: proto mask must be zero with L3 mode [ 1522.089196][T24244] netlink: 'syz.5.13310': attribute type 1 has an invalid length. [ 1522.230384][T24258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13313'. [ 1522.365403][T24270] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13318'. [ 1522.476261][T24270] syzkaller1: entered promiscuous mode [ 1522.491908][T24270] syzkaller1: entered allmulticast mode [ 1522.547167][T24279] tipc: Enabling of bearer rejected, media not registered [ 1522.549736][T24281] netlink: 'syz.4.13320': attribute type 10 has an invalid length. [ 1522.758282][T24299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13324'. [ 1523.163284][T24322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13330'. [ 1523.199880][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13332'. [ 1523.347379][T24288] batman_adv: batadv0: Interface deactivated: dummy0 [ 1523.702812][T24288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.188197][T24288] bond1: left promiscuous mode [ 1524.193111][T24288] bridge3: left promiscuous mode [ 1524.236039][T24288] geneve2: left promiscuous mode [ 1524.241278][T24288] geneve2: left allmulticast mode [ 1524.249552][T24288] bond3: left promiscuous mode [ 1524.259459][T24288] bond3: left allmulticast mode [ 1524.428955][T24353] tipc: Enabling of bearer rejected, failed to enable media [ 1524.442570][ T3926] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.451666][ T3926] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 19999 - 0 [ 1524.475739][ T3926] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.496965][ T3926] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1524.525706][ T3926] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.553348][ T3926] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1524.562983][ T3926] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.574837][ T3926] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1524.585536][T24365] netlink: 'syz.2.13336': attribute type 11 has an invalid length. [ 1524.593484][T24365] netlink: 'syz.2.13336': attribute type 11 has an invalid length. [ 1524.613644][T24365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13336'. [ 1524.748349][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13340'. [ 1524.808816][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13343'. [ 1524.820020][T24375] netlink: 'syz.0.13340': attribute type 1 has an invalid length. [ 1524.847503][T24375] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13340'. [ 1524.856438][T24380] macsec1: entered promiscuous mode [ 1524.863992][T24380] bridge0: entered promiscuous mode [ 1524.866441][T24375] netlink: 658 bytes leftover after parsing attributes in process `syz.0.13340'. [ 1524.893401][T24380] macsec1: entered allmulticast mode [ 1524.905032][T24380] bridge0: entered allmulticast mode [ 1524.911176][T24380] bridge0: port 1(macsec1) entered blocking state [ 1524.919457][T24380] bridge0: port 1(macsec1) entered disabled state [ 1524.931053][T24380] bridge0: left allmulticast mode [ 1524.938361][T24380] bridge0: left promiscuous mode [ 1525.102780][T28524] IPVS: starting estimator thread 0... [ 1525.194268][T24400] IPVS: using max 31 ests per chain, 74400 per kthread [ 1525.515491][T24425] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1525.601758][T24431] netlink: 'syz.0.13356': attribute type 1 has an invalid length. [ 1525.635172][T24431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1525.822210][T24444] netlink: 'syz.5.13360': attribute type 5 has an invalid length. [ 1525.848894][ T3919] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.848908][T24444] netlink: 'syz.5.13360': attribute type 5 has an invalid length. [ 1525.848945][ T3919] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.878712][ T3929] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1525.888647][ T3929] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1526.043326][T24454] bond3: option all_slaves_active: invalid value (222) [ 1526.052862][T24454] bond3 (unregistering): Released all slaves [ 1526.107729][ T8760] lec:lec_start_xmit: lec0:No lecd attached [ 1526.179151][T24462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.490703][T24482] netlink: 'syz.4.13375': attribute type 8 has an invalid length. [ 1526.508991][T24482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.516892][T24482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.738981][T24496] syzkaller0: entered promiscuous mode [ 1526.760139][T24496] syzkaller0: entered allmulticast mode [ 1527.062740][T24520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1527.763630][T24554] __nla_validate_parse: 24 callbacks suppressed [ 1527.763652][T24554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13399'. [ 1527.890093][T24556] net_ratelimit: 11 callbacks suppressed [ 1527.890115][T24556] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1528.147170][T24570] netlink: 'syz.1.13402': attribute type 10 has an invalid length. [ 1528.469998][T24578] netlink: 'syz.4.13407': attribute type 17 has an invalid length. [ 1528.478284][T24578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1528.506008][T24578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1528.666146][T24588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13410'. [ 1528.683392][T24589] xt_time: unknown flags 0xf4 [ 1528.961616][T24608] netlink: 'syz.5.13418': attribute type 1 has an invalid length. [ 1528.969879][T24608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13418'. [ 1529.008639][T24610] openvswitch: netlink: Multiple metadata blocks provided [ 1529.226576][T24625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1529.234862][T24623] netlink: 'syz.5.13423': attribute type 1 has an invalid length. [ 1529.252839][T24623] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13423'. [ 1529.532262][T24642] xt_hashlimit: size too large, truncated to 1048576 [ 1529.681202][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1529.721315][T24650] netlink: 'syz.5.13430': attribute type 5 has an invalid length. [ 1529.743794][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1529.758646][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1529.769003][T24650] netlink: 'syz.5.13430': attribute type 5 has an invalid length. [ 1529.777746][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1530.056098][T24660] mac80211_hwsim hwsim144 syzkaller0: entered promiscuous mode [ 1530.063944][T24660] mac80211_hwsim hwsim144 syzkaller0: entered allmulticast mode [ 1530.296899][T24675] virt_wifi0 speed is unknown, defaulting to 1000 [ 1530.573732][T24675] lo speed is unknown, defaulting to 1000 [ 1530.993854][T24720] sctp: [Deprecated]: syz.5.13450 (pid 24720) Use of int in max_burst socket option. [ 1530.993854][T24720] Use struct sctp_assoc_value instead [ 1531.012084][T24720] sctp: [Deprecated]: syz.5.13450 (pid 24720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.012084][T24720] Use struct sctp_sack_info instead [ 1531.504078][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1531.512273][ C1] lec:lec_tx_timeout: lec0 [ 1531.571154][T24743] syzkaller0: entered promiscuous mode [ 1531.577003][T24743] syzkaller0: entered allmulticast mode [ 1532.017767][T24776] netlink: 'syz.2.13467': attribute type 14 has an invalid length. [ 1532.088492][T24776] netlink: 'syz.2.13467': attribute type 13 has an invalid length. [ 1532.253602][T24790] syzkaller0: entered promiscuous mode [ 1532.269573][T24790] syzkaller0: entered allmulticast mode [ 1532.459190][T24809] SET target dimension over the limit! [ 1532.816823][T24835] netlink: 'syz.1.13481': attribute type 1 has an invalid length. [ 1532.885715][T24835] bond6: entered promiscuous mode [ 1532.906959][T24845] __nla_validate_parse: 9 callbacks suppressed [ 1532.906982][T24845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13485'. [ 1532.926692][T24835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1532.981526][T24849] bond6: (slave bridge4): making interface the new active one [ 1532.989275][T24849] bridge4: entered promiscuous mode [ 1532.998747][T24849] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1533.023873][T24835] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1533.059483][T24835] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1533.131491][T24866] netlink: 'syz.5.13490': attribute type 1 has an invalid length. [ 1533.140653][T24861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1533.220627][T24867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13490'. [ 1533.303178][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1533.353485][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13492'. [ 1533.862096][T24909] sctp: [Deprecated]: syz.5.13503 (pid 24909) Use of int in maxseg socket option. [ 1533.862096][T24909] Use struct sctp_assoc_value instead [ 1533.927969][T24908] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13501'. [ 1534.330243][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13509'. [ 1534.459493][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13509'. [ 1534.524015][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13511'. [ 1534.560687][T24957] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13502'. [ 1534.830825][T24967] netlink: 'syz.5.13513': attribute type 1 has an invalid length. [ 1534.909733][T24967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1534.933108][T24972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1534.960709][T24967] netlink: 'syz.5.13513': attribute type 5 has an invalid length. [ 1534.973114][T24967] netlink: 'syz.5.13513': attribute type 6 has an invalid length. [ 1534.986395][T24972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1535.021266][T24973] bond6: (slave gretap1): making interface the new active one [ 1535.031262][T24973] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1535.188106][T24984] syzkaller0: entered promiscuous mode [ 1535.196509][T24984] syzkaller0: entered allmulticast mode [ 1535.208994][T24987] 8021q: VLANs not supported on gre0 [ 1535.228114][T24989] pim6reg: entered allmulticast mode [ 1535.492076][T25009] syzkaller0: entered promiscuous mode [ 1535.498850][T25009] syzkaller0: entered allmulticast mode [ 1535.671367][T25021] xt_l2tp: invalid flags combination: 8 [ 1535.693118][T25017] bridge0: entered allmulticast mode [ 1535.879391][T25036] netlink: 'syz.1.13532': attribute type 1 has an invalid length. [ 1535.955184][T25036] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1535.995729][T25037] syzkaller0: entered promiscuous mode [ 1536.009744][T25037] syzkaller0: entered allmulticast mode [ 1536.030138][T25049] tipc: Enabling of bearer rejected, failed to enable media [ 1536.640390][T25063] syzkaller0: entered promiscuous mode [ 1536.744618][T25063] syzkaller0: entered allmulticast mode [ 1536.871553][T25079] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1539.404601][T25103] __nla_validate_parse: 9 callbacks suppressed [ 1539.404626][T25103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13546'. [ 1539.487594][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13548'. [ 1539.537227][T25109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.544503][T25109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.736303][T25120] netlink: 'syz.0.13548': attribute type 1 has an invalid length. [ 1539.754390][T25126] netlink: 'syz.1.13553': attribute type 4 has an invalid length. [ 1539.807637][T25126] netlink: 'syz.1.13553': attribute type 4 has an invalid length. [ 1539.932631][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13555'. [ 1539.942440][T25137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13555'. [ 1539.962823][T25138] netlink: 'syz.5.13556': attribute type 1 has an invalid length. [ 1539.994400][T25138] netlink: 'syz.5.13556': attribute type 2 has an invalid length. [ 1540.014369][T25141] netlink: zone id is out of range [ 1540.026938][T25138] netlink: 'syz.5.13556': attribute type 1 has an invalid length. [ 1540.041419][T25141] netlink: zone id is out of range [ 1540.055363][T25141] netlink: zone id is out of range [ 1540.063184][T25138] sctp: [Deprecated]: syz.5.13556 (pid 25138) Use of int in max_burst socket option deprecated. [ 1540.063184][T25138] Use struct sctp_assoc_value instead [ 1540.085770][T25141] netlink: zone id is out of range [ 1540.091009][T25141] netlink: zone id is out of range [ 1540.121759][T25141] netlink: zone id is out of range [ 1540.128517][T25141] netlink: zone id is out of range [ 1540.134618][T25141] netlink: zone id is out of range [ 1540.139920][T25141] netlink: zone id is out of range [ 1540.166815][T25148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13559'. [ 1540.175155][T25141] netlink: zone id is out of range [ 1540.187057][T25148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13559'. [ 1540.204911][T25148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13559'. [ 1540.245114][T25149] syzkaller0: entered promiscuous mode [ 1540.261186][T25149] syzkaller0: entered allmulticast mode [ 1540.383873][T25165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13565'. [ 1540.404570][T25162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13562'. [ 1540.427954][T25169] netlink: 'syz.4.13564': attribute type 2 has an invalid length. [ 1540.436787][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13562'. [ 1540.450172][T25165] netlink: 'syz.1.13565': attribute type 1 has an invalid length. [ 1540.957047][T25201] syzkaller0: entered promiscuous mode [ 1540.962772][T25201] syzkaller0: entered allmulticast mode [ 1541.275338][T25230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.287481][T25230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.301372][T25230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.310445][T25230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.353659][T25241] nbd: illegal input index -8454144 [ 1541.361825][T25233] netlink: 'syz.2.13580': attribute type 1 has an invalid length. [ 1541.447109][T25233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1542.129939][T25298] netlink: 'syz.5.13596': attribute type 8 has an invalid length. [ 1542.264765][T25298] bond0: entered promiscuous mode [ 1542.318420][T25298] bond_slave_0: entered promiscuous mode [ 1542.368843][T25298] bond_slave_1: entered promiscuous mode [ 1542.381911][T25298] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1542.399091][T25298] gretap0: entered promiscuous mode [ 1542.408301][T25298] ip6gretap0: entered promiscuous mode [ 1542.418066][T25298] debugfs: 'hsr0' already exists in 'hsr' [ 1542.423992][T25298] Cannot create hsr debugfs directory [ 1542.455261][T25298] hsr0: entered promiscuous mode [ 1542.692368][T25322] dvmrp0: left allmulticast mode [ 1542.709514][T25322] pimreg: left allmulticast mode [ 1542.855125][T25332] netlink: 'syz.0.13605': attribute type 1 has an invalid length. [ 1542.863288][T25332] netlink: 'syz.0.13605': attribute type 4 has an invalid length. [ 1543.574527][T25375] delete_channel: no stack [ 1543.830300][T25387] netlink: 'syz.0.13619': attribute type 1 has an invalid length. [ 1543.898643][T25388] delete_channel: no stack [ 1543.933111][T25387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1543.976128][T25396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1543.986367][T25396] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 1544.055553][T25396] bond7: (slave vcan1): Error -95 calling set_mac_address [ 1544.140557][T25403] netlink: 'syz.4.13624': attribute type 11 has an invalid length. [ 1544.321936][T25417] gretap0: refused to change device tx_queue_len [ 1544.398957][ T5489] veth0_macvtap: left promiscuous mode [ 1544.536686][T25434] x_tables: duplicate underflow at hook 3 [ 1544.560684][T25431] mac80211_hwsim hwsim149 wlan1: entered allmulticast mode [ 1544.590615][T25434] syzkaller1: entered promiscuous mode [ 1544.611237][T25434] syzkaller1: entered allmulticast mode [ 1544.702352][T25435] __nla_validate_parse: 26 callbacks suppressed [ 1544.702380][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13633'. [ 1544.794340][T25447] ip6tnl0: Caught tx_queue_len zero misconfig [ 1544.855162][T25451] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13639'. [ 1545.036802][T25458] netlink: 144 bytes leftover after parsing attributes in process `syz.4.13642'. [ 1545.645280][T25504] netlink: 192 bytes leftover after parsing attributes in process `syz.2.13648'. [ 1545.774567][T25483] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1545.796945][T25483] bond8 (unregistering): Released all slaves [ 1545.823836][T25486] syzkaller0: entered promiscuous mode [ 1545.831439][T25486] syzkaller0: entered allmulticast mode [ 1546.445260][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13656'. [ 1546.579008][T25542] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1546.632274][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1546.642431][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1546.651623][ T1300] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1546.678685][T25542] team1: entered promiscuous mode [ 1546.690716][T25542] team1: entered allmulticast mode [ 1546.702359][T25549] netlink: 300 bytes leftover after parsing attributes in process `syz.2.13657'. [ 1546.738507][T25549] validate_nla: 3 callbacks suppressed [ 1546.738534][T25549] netlink: 'syz.2.13657': attribute type 1 has an invalid length. [ 1546.820168][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1547.269229][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13665'. [ 1547.354900][T25583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1547.377997][T25588] bond7: entered promiscuous mode [ 1547.424013][T25588] bond7: entered allmulticast mode [ 1547.440088][T25588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1547.484270][T25588] team0: Port device bond7 added [ 1547.529615][T25583] vxcan2: entered promiscuous mode [ 1547.536420][T25583] bond7: (slave vxcan2): refused to change device type [ 1547.794468][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13671'. [ 1547.848993][T25602] lo: Caught tx_queue_len zero misconfig [ 1547.995303][T25614] siw: device registration error -23 [ 1548.113116][T25619] netlink: 830 bytes leftover after parsing attributes in process `syz.5.13677'. [ 1548.204014][T25624] netlink: 'syz.2.13678': attribute type 10 has an invalid length. [ 1548.213807][T25624] veth0_vlan: left promiscuous mode [ 1548.229666][T25624] veth0_vlan: entered promiscuous mode [ 1548.242280][T25624] team0: Device veth0_vlan failed to register rx_handler [ 1548.331425][T25628] syzkaller0: entered promiscuous mode [ 1548.343292][T25628] syzkaller0: entered allmulticast mode [ 1548.364543][T25628] xt_socket: unknown flags 0xe4 [ 1548.767638][T25647] net_ratelimit: 46 callbacks suppressed [ 1548.767660][T25647] openvswitch: netlink: IPv4 tun info is not correct [ 1548.796443][T25651] syzkaller0: entered promiscuous mode [ 1548.808918][T25655] netlink: 'syz.2.13688': attribute type 28 has an invalid length. [ 1548.817374][T25651] syzkaller0: entered allmulticast mode [ 1548.824570][T25655] netlink: 'syz.2.13688': attribute type 3 has an invalid length. [ 1549.217428][T25660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.329079][T25682] netlink: 'syz.5.13696': attribute type 10 has an invalid length. [ 1549.368207][T25681] netlink: 'syz.1.13697': attribute type 32 has an invalid length. [ 1549.421293][T25681] bond7: option coupled_control: invalid value (192) [ 1549.447367][T25681] bond7 (unregistering): Released all slaves [ 1549.803866][T25700] netlink: 'syz.0.13704': attribute type 8 has an invalid length. [ 1549.938225][T25709] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1549.954815][T25712] sctp: [Deprecated]: syz.1.13705 (pid 25712) Use of int in max_burst socket option. [ 1549.954815][T25712] Use struct sctp_assoc_value instead [ 1549.973012][T25712] __nla_validate_parse: 6 callbacks suppressed [ 1549.973034][T25712] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13705'. [ 1550.111326][T25716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.132089][T25716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.145610][T25716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.155480][T25716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.165289][T25716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.177628][T25715] netlink: 204 bytes leftover after parsing attributes in process `syz.2.13709'. [ 1550.267116][T25727] virt_wifi0 speed is unknown, defaulting to 1000 [ 1550.280565][T25722] netlink: 'syz.0.13711': attribute type 1 has an invalid length. [ 1550.305010][T25722] netlink: 'syz.0.13711': attribute type 2 has an invalid length. [ 1550.312933][T25722] netlink: 'syz.0.13711': attribute type 1 has an invalid length. [ 1550.335437][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13711'. [ 1550.667267][T25727] lo speed is unknown, defaulting to 1000 [ 1550.842277][T25747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1550.853078][T25745] syzkaller0: entered promiscuous mode [ 1550.875797][T25745] syzkaller0: entered allmulticast mode [ 1551.041573][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13718'. [ 1551.411087][T25768] mac80211_hwsim hwsim144 syzkaller0: left promiscuous mode [ 1551.420918][T25768] mac80211_hwsim hwsim144 syzkaller0: left allmulticast mode [ 1551.619437][T25776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13724'. [ 1551.644239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.652363][ C1] lec:lec_tx_timeout: lec0 [ 1552.101446][T25809] validate_nla: 3 callbacks suppressed [ 1552.101467][T25809] netlink: 'syz.5.13732': attribute type 1 has an invalid length. [ 1552.237791][T25816] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1552.251093][T25816] bridge0: port 3(bond8) entered blocking state [ 1552.259238][T25816] bridge0: port 3(bond8) entered disabled state [ 1552.267810][T25816] bond8: entered allmulticast mode [ 1552.276118][T25816] bond8: entered promiscuous mode [ 1552.281762][T25816] bridge0: port 3(bond8) entered blocking state [ 1552.288225][T25816] bridge0: port 3(bond8) entered forwarding state [ 1552.314975][T25816] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1552.484782][T25831] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1552.530200][T25836] netlink: 'syz.5.13741': attribute type 1 has an invalid length. [ 1552.543636][T25836] netlink: 'syz.5.13741': attribute type 1 has an invalid length. [ 1552.687111][T25838] netlink: 'syz.1.13742': attribute type 3 has an invalid length. [ 1552.802256][T25851] netlink: 'syz.2.13747': attribute type 17 has an invalid length. [ 1553.202613][ T3919] bridge0: port 3(bond8) entered disabled state [ 1553.273338][T25883] x_tables: unsorted entry at hook 1 [ 1553.283348][T25880] syz_tun (unregistering): left allmulticast mode [ 1553.349671][T25886] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1553.369354][T25886] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1554.261399][T25928] syzkaller0: entered promiscuous mode [ 1554.288168][T25928] syzkaller0: entered allmulticast mode [ 1554.373947][T25951] syzkaller0: entered promiscuous mode [ 1554.387282][T25951] syzkaller0: entered allmulticast mode [ 1555.626728][T25988] __nla_validate_parse: 12 callbacks suppressed [ 1555.626748][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13783'. [ 1557.007671][T26003] netlink: 'syz.1.13785': attribute type 8 has an invalid length. [ 1557.018431][T26003] xt_l2tp: wrong L2TP version: 0 [ 1557.039135][T26005] netlink: 'syz.1.13785': attribute type 8 has an invalid length. [ 1557.070610][T26010] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1557.103016][T26009] netlink: 'syz.5.13786': attribute type 21 has an invalid length. [ 1557.114209][T26009] netlink: 'syz.5.13786': attribute type 22 has an invalid length. [ 1557.122350][T26009] netlink: 'syz.5.13786': attribute type 23 has an invalid length. [ 1557.174290][T26009] netlink: 'syz.5.13786': attribute type 25 has an invalid length. [ 1557.182456][T26009] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13786'. [ 1557.301843][T26017] netlink: 'syz.1.13790': attribute type 4 has an invalid length. [ 1557.362724][T26026] 8021q: VLANs not supported on xfrm0 [ 1557.377830][T26027] 8021q: VLANs not supported on xfrm0 [ 1557.397840][T26028] netlink: 'syz.0.13788': attribute type 1 has an invalid length. [ 1557.734721][T26052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13796'. [ 1558.132946][T26077] ================================================================== [ 1558.141110][T26077] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 1558.148889][T26077] Read of size 8 at addr ffff88808a99b520 by task syz.5.13803/26077 [ 1558.156916][T26077] [ 1558.159285][T26077] CPU: 1 UID: 0 PID: 26077 Comm: syz.5.13803 Not tainted syzkaller #0 PREEMPT(full) [ 1558.159311][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1558.159325][T26077] Call Trace: [ 1558.159334][T26077] [ 1558.159343][T26077] dump_stack_lvl+0xe8/0x150 [ 1558.159377][T26077] print_report+0xba/0x230 [ 1558.159402][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.159434][T26077] kasan_report+0x117/0x150 [ 1558.159467][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.159522][T26077] af_alg_pull_tsgl+0x1c6/0x740 [ 1558.159593][T26077] skcipher_recvmsg+0x5df/0x1140 [ 1558.159631][T26077] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.159658][T26077] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1558.159700][T26077] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1558.159727][T26077] ? security_socket_recvmsg+0x7e/0x2c0 [ 1558.159754][T26077] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.159781][T26077] sock_recvmsg+0x172/0x1b0 [ 1558.159807][T26077] ____sys_recvmsg+0x1e6/0x4a0 [ 1558.159845][T26077] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1558.159888][T26077] ? import_iovec+0x73/0xa0 [ 1558.159918][T26077] ___sys_recvmsg+0x215/0x590 [ 1558.159953][T26077] ? __pfx____sys_recvmsg+0x10/0x10 [ 1558.159983][T26077] ? get_futex_key+0x8cd/0x1690 [ 1558.160024][T26077] ? __fget_files+0x3a0/0x420 [ 1558.160050][T26077] do_recvmmsg+0x334/0x800 [ 1558.160086][T26077] ? __pfx_do_recvmmsg+0x10/0x10 [ 1558.160125][T26077] ? __pfx_do_futex+0x10/0x10 [ 1558.160163][T26077] __x64_sys_recvmmsg+0x198/0x250 [ 1558.160196][T26077] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1558.160237][T26077] do_syscall_64+0x14d/0xf80 [ 1558.160270][T26077] ? trace_irq_disable+0x3b/0x150 [ 1558.160289][T26077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.160313][T26077] ? clear_bhb_loop+0x40/0x90 [ 1558.160339][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.160363][T26077] RIP: 0033:0x7f11db39c819 [ 1558.160385][T26077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.160405][T26077] RSP: 002b:00007f11dc2cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1558.160431][T26077] RAX: ffffffffffffffda RBX: 00007f11db615fa0 RCX: 00007f11db39c819 [ 1558.160449][T26077] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000007 [ 1558.160465][T26077] RBP: 00007f11db432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1558.160480][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.160495][T26077] R13: 00007f11db616038 R14: 00007f11db615fa0 R15: 00007ffc64c0be28 [ 1558.160524][T26077] [ 1558.160534][T26077] [ 1558.413216][T26077] Allocated by task 26077: [ 1558.417673][T26077] kasan_save_track+0x3e/0x80 [ 1558.422365][T26077] __kasan_kmalloc+0x93/0xb0 [ 1558.426974][T26077] __kmalloc_noprof+0x35c/0x760 [ 1558.431849][T26077] sock_kmalloc+0xd6/0x160 [ 1558.436289][T26077] skcipher_recvmsg+0x54d/0x1140 [ 1558.441248][T26077] sock_recvmsg+0x172/0x1b0 [ 1558.445765][T26077] ____sys_recvmsg+0x1e6/0x4a0 [ 1558.450554][T26077] ___sys_recvmsg+0x215/0x590 [ 1558.455253][T26077] do_recvmmsg+0x334/0x800 [ 1558.459723][T26077] __x64_sys_recvmmsg+0x198/0x250 [ 1558.464782][T26077] do_syscall_64+0x14d/0xf80 [ 1558.469400][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.475304][T26077] [ 1558.477672][T26077] The buggy address belongs to the object at ffff88808a99b500 [ 1558.477672][T26077] which belongs to the cache kmalloc-32 of size 32 [ 1558.491578][T26077] The buggy address is located 0 bytes to the right of [ 1558.491578][T26077] allocated 32-byte region [ffff88808a99b500, ffff88808a99b520) [ 1558.506010][T26077] [ 1558.508369][T26077] The buggy address belongs to the physical page: [ 1558.514785][T26077] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808a99b600 pfn:0x8a99b [ 1558.524958][T26077] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1558.533036][T26077] page_type: f5(slab) [ 1558.537043][T26077] raw: 00fff00000000200 ffff88813fea7780 ffff88813fea64c8 ffffea0000a61d90 [ 1558.545642][T26077] raw: ffff88808a99b600 000000080040003a 00000000f5000000 0000000000000000 [ 1558.554232][T26077] page dumped because: kasan: bad access detected [ 1558.560669][T26077] page_owner tracks the page as allocated [ 1558.566396][T26077] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14364, tgid 14364 (syz.0.10792), ts 1225364950871, free_ts 1225344019318 [ 1558.586480][T26077] post_alloc_hook+0x231/0x280 [ 1558.591291][T26077] get_page_from_freelist+0x24dc/0x2580 [ 1558.596860][T26077] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1558.602719][T26077] allocate_slab+0x77/0x660 [ 1558.607249][T26077] refill_objects+0x331/0x3c0 [ 1558.611949][T26077] __pcs_replace_empty_main+0x2e6/0x730 [ 1558.617512][T26077] __kmalloc_cache_noprof+0x392/0x660 [ 1558.622900][T26077] kmem_cache_free+0x15b/0x630 [ 1558.627676][T26077] tear_down_vmas+0x312/0x520 [ 1558.632368][T26077] exit_mmap+0x4b6/0xa10 [ 1558.636661][T26077] __mmput+0x118/0x430 [ 1558.640760][T26077] exit_mm+0x168/0x220 [ 1558.644844][T26077] do_exit+0x6a2/0x23c0 [ 1558.649008][T26077] do_group_exit+0x21b/0x2d0 [ 1558.653609][T26077] __x64_sys_exit_group+0x3f/0x40 [ 1558.658647][T26077] x64_sys_call+0x221a/0x2240 [ 1558.663358][T26077] page last free pid 14364 tgid 14364 stack trace: [ 1558.669898][T26077] __free_frozen_pages+0xc2b/0xdb0 [ 1558.675041][T26077] tlb_finish_mmu+0x144/0x230 [ 1558.679736][T26077] exit_mmap+0x498/0xa10 [ 1558.683986][T26077] __mmput+0x118/0x430 [ 1558.688076][T26077] exit_mm+0x168/0x220 [ 1558.692195][T26077] do_exit+0x6a2/0x23c0 [ 1558.696376][T26077] do_group_exit+0x21b/0x2d0 [ 1558.700983][T26077] __x64_sys_exit_group+0x3f/0x40 [ 1558.706026][T26077] x64_sys_call+0x221a/0x2240 [ 1558.710723][T26077] do_syscall_64+0x14d/0xf80 [ 1558.715467][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.721642][T26077] [ 1558.723976][T26077] Memory state around the buggy address: [ 1558.729616][T26077] ffff88808a99b400: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1558.737695][T26077] ffff88808a99b480: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1558.745778][T26077] >ffff88808a99b500: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1558.753850][T26077] ^ [ 1558.758979][T26077] ffff88808a99b580: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 1558.767065][T26077] ffff88808a99b600: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1558.775131][T26077] ================================================================== [ 1558.824418][T26077] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1558.831698][T26077] CPU: 0 UID: 0 PID: 26077 Comm: syz.5.13803 Not tainted syzkaller #0 PREEMPT(full) [ 1558.841269][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1558.851416][T26077] Call Trace: [ 1558.854751][T26077] [ 1558.857706][T26077] vpanic+0x56c/0xa60 [ 1558.861727][T26077] ? __pfx_vpanic+0x10/0x10 [ 1558.866272][T26077] ? __pfx___schedule+0x10/0x10 [ 1558.871168][T26077] panic+0xc5/0xd0 [ 1558.874922][T26077] ? __pfx_panic+0x10/0x10 [ 1558.879408][T26077] ? preempt_schedule_common+0x82/0xd0 [ 1558.884917][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.889984][T26077] check_panic_on_warn+0x89/0xb0 [ 1558.894973][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.900031][T26077] end_report+0x73/0x180 [ 1558.904332][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.909391][T26077] kasan_report+0x128/0x150 [ 1558.913930][T26077] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1558.918994][T26077] af_alg_pull_tsgl+0x1c6/0x740 [ 1558.923889][T26077] skcipher_recvmsg+0x5df/0x1140 [ 1558.928863][T26077] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.934312][T26077] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1558.939301][T26077] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1558.944612][T26077] ? security_socket_recvmsg+0x7e/0x2c0 [ 1558.950191][T26077] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1558.955719][T26077] sock_recvmsg+0x172/0x1b0 [ 1558.960258][T26077] ____sys_recvmsg+0x1e6/0x4a0 [ 1558.965068][T26077] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1558.970439][T26077] ? import_iovec+0x73/0xa0 [ 1558.974995][T26077] ___sys_recvmsg+0x215/0x590 [ 1558.979701][T26077] ? __pfx____sys_recvmsg+0x10/0x10 [ 1558.984923][T26077] ? get_futex_key+0x8cd/0x1690 [ 1558.989802][T26077] ? __fget_files+0x3a0/0x420 [ 1558.994494][T26077] do_recvmmsg+0x334/0x800 [ 1558.998950][T26077] ? __pfx_do_recvmmsg+0x10/0x10 [ 1559.003915][T26077] ? __pfx_do_futex+0x10/0x10 [ 1559.008633][T26077] __x64_sys_recvmmsg+0x198/0x250 [ 1559.013688][T26077] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1559.019291][T26077] do_syscall_64+0x14d/0xf80 [ 1559.023912][T26077] ? trace_irq_disable+0x3b/0x150 [ 1559.028957][T26077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.035072][T26077] ? clear_bhb_loop+0x40/0x90 [ 1559.039774][T26077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.045683][T26077] RIP: 0033:0x7f11db39c819 [ 1559.050120][T26077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.069749][T26077] RSP: 002b:00007f11dc2cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1559.078190][T26077] RAX: ffffffffffffffda RBX: 00007f11db615fa0 RCX: 00007f11db39c819 [ 1559.086184][T26077] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000007 [ 1559.094175][T26077] RBP: 00007f11db432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.102170][T26077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.110152][T26077] R13: 00007f11db616038 R14: 00007f11db615fa0 R15: 00007ffc64c0be28 [ 1559.118174][T26077] [ 1559.121824][T26077] Kernel Offset: disabled [ 1559.126159][T26077] Rebooting in 86400 seconds..