last executing test programs: 2.377139235s ago: executing program 1 (id=2450): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) write$nbd(r2, &(0x7f0000000740)={0x67446698, 0x0, 0x2, 0x2, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @mcast2, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}], 0x10}}], 0x1, 0x4008800) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x8800) 1.880196907s ago: executing program 3 (id=2455): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000007000000000000000014f194e20"], 0x52) 1.772478134s ago: executing program 3 (id=2456): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001980), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{r0, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x3, 0x28, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xcb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e658cf6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x1, 0x6, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x33, r6, 0x8, &(0x7f0000001900)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x3, 0x1, 0x7}, 0x10, 0x0, r7, 0x2, &(0x7f0000001b40)=[r8, r9], &(0x7f0000001b80)=[{0x0, 0x3, 0xb, 0x1}, {0x80000, 0x3, 0x1, 0xc}], 0x10, 0x8}, 0x94) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/186, 0xba}, {&(0x7f0000001500)=""/93, 0x5d}], 0x5, 0x80000000, 0x3) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) r12 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r12, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}, [@generic="574046d6"]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.547236177s ago: executing program 4 (id=2458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@empty]}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f0000000140)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x8}, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0x81) write$tun(r1, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x0, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3f, 0x3, "acd1e93ad0ea106ddb39225708bb69c808216067eee7c4a0", "561e1642983432c4630021d6bede7e392b9d9a148783918358d915b3071872e0"}}}}}}}, 0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x2e14, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x2e00, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x7ffc, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0xe4, 0x1e, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x90, 0x6, "447dcbcad94667957d800d5ed510f7707509b43539bb22a28ce020330b9fc8844310d0bdeef8de60e5487d3fcd21f90444c212688fb22015c0c2ca249158aa3cd7fa8162bae18a968b0b7f6fd5a6241b1fe474de0a2dd00c13568825d284cc41846c40620e14dbc819540749fde3d9198cea0685c41d7f99ac3b80cf66e3d5792739195b0e3383bff81a2c50"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x197c, 0x14, 0x0, 0x0, {{0xb}, {0x1928, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ea, 0x5, 0xffffffff, 0xfffffffc, 0x0, 0xfffffeff, 0x6, 0xe, 0xfffffff7, 0xae, 0xc03, 0x3, 0x0, 0x4, 0x79, 0x3, 0x6, 0x62ebf8, 0x4, 0x30000000, 0x5, 0x69ce, 0x101, 0x1, 0x2, 0x2, 0x800, 0x7fff, 0x5b12, 0x4800, 0x7fffffff, 0x50d9, 0x3, 0x200, 0x100, 0x0, 0x80000001, 0xb8a3, 0xffff0838, 0x5, 0x4, 0x8, 0x2, 0x8001, 0x2, 0xf, 0x5de, 0x1, 0x4, 0x1, 0x400, 0x8, 0x2, 0x2, 0x9ec0, 0x1, 0x81, 0xc, 0xffffffff, 0x6, 0x8, 0x0, 0x9, 0x2, 0xff, 0x1, 0x9b00, 0x8, 0x45f, 0x9, 0xe, 0x9, 0xfff, 0x4, 0x9, 0xc22e, 0x2, 0x1, 0x5, 0x8, 0xc3a5, 0x3, 0x1, 0x2, 0xf, 0x2, 0x5, 0x2, 0x1, 0x7, 0x7, 0xd, 0x3, 0x3, 0x3, 0x8001, 0x6, 0x1, 0x5, 0xb2c, 0x5, 0x2, 0xd, 0x3, 0x1004000, 0x7, 0x5, 0x5, 0x9, 0x6, 0x5, 0x8, 0xa1, 0x4, 0x2, 0xd8ba, 0xc, 0x0, 0xffff191e, 0x8001, 0x0, 0x5, 0x5, 0x4, 0xffffffff, 0x3, 0x430, 0x10, 0x7c6, 0x2, 0x1e, 0x101, 0x967, 0x0, 0x33d7, 0x1000, 0x401, 0x8, 0x400, 0x3, 0x1ff, 0x1ff, 0x8, 0xe, 0x0, 0x7ff, 0x9, 0x1, 0x2, 0x5, 0x5, 0x8, 0x2dd, 0x7, 0x6, 0x5, 0x0, 0xb3f, 0x8, 0x8, 0x8, 0x4, 0x1, 0x9, 0x7, 0xfffffffb, 0xdd4, 0x9, 0x8, 0x6, 0x2, 0x18000000, 0x4, 0x8, 0x81, 0x6, 0x3, 0x3, 0x4, 0x5, 0x100, 0x8, 0xcaf, 0x9, 0x2c, 0x4, 0x10000, 0x5, 0x80000000, 0x34f0, 0x7, 0xed, 0x3, 0x1, 0x9, 0xfff, 0x3, 0x0, 0x3, 0xfff, 0x6, 0x0, 0x8, 0x0, 0x9, 0x5, 0xab, 0x6, 0x8, 0xd8, 0xfff, 0x8, 0x3, 0xdf, 0xfffffff7, 0x80000001, 0xd, 0x8001, 0x4, 0x4582, 0x6, 0xfe, 0x6, 0x1, 0x2, 0x9, 0x9, 0x24, 0x2c08, 0x7fff, 0x2, 0xeb, 0x219, 0x1, 0xfffffffa, 0x5, 0x4027, 0x3ff, 0x7, 0x10001, 0x3ff, 0xfffffffb, 0x200, 0x0, 0x3c0, 0xfb8, 0x5, 0x81a1, 0x3, 0x6, 0x0, 0xffb, 0x82, 0x7, 0x8, 0x68]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xaf0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0xffffffffffffffff, 0x2, 0x2, 0x5, {0x2, 0x1, 0x8, 0x80, 0xe5c5, 0x800}, {0x2, 0x1, 0x6cd3, 0x6, 0x4, 0x8001}, 0x3, 0x80, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x7fffffff, 0x6, 0xfffffe01, 0x9, 0x2, 0x57b, 0x6, 0x1, 0x9, 0x2, 0x6, 0x5, 0x7, 0x800, 0x1, 0x10000, 0x9, 0xf, 0x8, 0x2, 0x3, 0x8, 0x9, 0x80000000, 0x5, 0x16, 0x505, 0xfffffffd, 0x3, 0x80000001, 0xfffff801, 0x2, 0x2, 0x6, 0x3, 0xfff, 0x7, 0x1, 0x7, 0x5, 0x7, 0xffffffff, 0x6, 0x101, 0x7, 0xbd8, 0x8, 0x2, 0xc, 0x1d, 0x1, 0x5, 0x6, 0x5, 0x0, 0x10000, 0x2, 0x5, 0x400, 0x7, 0x9, 0x241a, 0x1000, 0x3, 0x1, 0x4, 0x7, 0x7, 0x0, 0xe41, 0x3, 0x8, 0x3, 0x9, 0x1, 0x664, 0x0, 0x0, 0x4, 0xd, 0x7, 0x6, 0xff, 0x10000000, 0x8, 0x7, 0x7, 0x2, 0x7f, 0x6, 0x10001, 0x7, 0x7, 0x4, 0x8001, 0x32c80, 0xd9, 0x7f, 0x0, 0x5, 0x2b1, 0x7f, 0xf, 0x0, 0x5, 0x1, 0x8, 0x3, 0xfffffff7, 0x5, 0x9, 0x0, 0x0, 0x9, 0xfff, 0x7, 0x7, 0x3, 0x4, 0x100, 0x8001, 0x9, 0x101, 0x8, 0x8, 0x81, 0x401, 0x80000001, 0x7, 0x9, 0x7e, 0x7fffffff, 0x8, 0xf7a, 0x40, 0xfff, 0xc6, 0x10000, 0x50000000, 0x4, 0x5, 0x8, 0x10001, 0x0, 0x0, 0x5, 0x6, 0x8, 0xa4, 0x2, 0xc523, 0x1, 0x9, 0x5, 0x401, 0x800, 0x10001, 0x4, 0xa, 0x2, 0xfffffffe, 0x4, 0x0, 0x7, 0x8, 0x4, 0x7, 0x4, 0x0, 0x1, 0x8, 0x2, 0x6, 0x8000, 0x8, 0x9, 0x800, 0x8, 0x1, 0x22958b49, 0x9, 0x0, 0x8001, 0x168, 0x9d3e, 0x1, 0x4925, 0x1a00000, 0x1, 0x9, 0x8, 0x8, 0x8, 0x8, 0x5, 0x7, 0x40000, 0x1, 0x1, 0x9, 0x8, 0x0, 0xfffffffe, 0x100, 0x4ee9, 0x9, 0xfff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x4, 0x4, 0xb3dd, 0xa, 0xfffffff2, 0x7, 0x4, 0xff, 0x7, 0x5, 0x1, 0x4, 0x7a8f45a3, 0x80000001, 0xd, 0x0, 0x4, 0x6, 0x2, 0x200, 0xffffb6b2, 0x9, 0x2, 0x0, 0x0, 0x80000001, 0x1, 0x91a2, 0x80, 0x4e, 0x4, 0x7, 0x7, 0x3, 0x7, 0xd, 0x7fff, 0x1000, 0xfffffff7, 0x3, 0x4, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2f, 0x2, 0x1, 0xcaf, 0x30, 0x3, 0x1, 0x1000, 0x40, 0xc76, 0x9, 0x59, 0x8, 0x6, 0xfffffff2, 0xc, 0xfffffffd, 0x3, 0x5, 0x1, 0xf, 0x9, 0x6, 0x1, 0x9, 0xc9, 0x2, 0x101, 0x8, 0x1000, 0x8, 0xffffffff, 0x9, 0x9, 0x8000, 0x796, 0x7fff, 0x9, 0x7fff, 0xa8f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x8, 0x3, 0x1, 0x8, 0xc9, 0x2, 0x7, 0x10003, 0x100, 0xffffff3c, 0xf, 0x5, 0xfffffffd, 0x5, 0x2, 0x8000, 0x4, 0x8, 0x80000000, 0x10, 0x5, 0x2, 0x7, 0x9, 0x800, 0x100, 0x8, 0x2, 0x2378, 0xdb, 0x100, 0x3, 0xc, 0xff, 0x2, 0x9, 0xff, 0x4, 0x2de, 0x4, 0x6, 0xfffffffa, 0x2, 0xff, 0x1ff, 0x1, 0x10001, 0x65c, 0x5, 0x5, 0xfffffff8, 0xfff9, 0xc0, 0xfffffff4, 0x3ff, 0x4, 0x1aa22036, 0x1, 0x8, 0x4272, 0x3b5ebc4a, 0x3, 0x1000, 0x5, 0xfe, 0x4, 0x1, 0x1, 0x5d, 0xf, 0x2a3, 0x5, 0xa28a, 0x100, 0x4, 0x7, 0x8, 0x80000001, 0x2, 0x2, 0x7f, 0xfffffff8, 0x7fff, 0x9, 0x8001, 0x255c3325, 0x401, 0x9, 0x8, 0x50000000, 0x0, 0xfffffffc, 0x6, 0x9, 0x0, 0xca, 0x9, 0xffffffff, 0x346, 0x5, 0x98, 0x3, 0x9, 0x5, 0x2, 0x9, 0x80, 0x0, 0x6, 0x2, 0xf3, 0x908, 0xca, 0x5, 0x10001, 0x7, 0x8001, 0x1553, 0x6, 0x7fffffff, 0x0, 0x5, 0x2, 0x40, 0x200, 0x6, 0x3, 0x7ff, 0x3, 0x7ff, 0x230, 0x4, 0x9, 0x80000001, 0x45, 0x4, 0x0, 0x5, 0x9, 0x6, 0xa, 0x81, 0x6, 0x5, 0x3, 0x3, 0x7ff, 0x4, 0x5, 0xfff, 0x73a0, 0x2, 0x1ff, 0x1, 0x0, 0x8, 0xae4, 0x8, 0xfffffff8, 0x9, 0x0, 0xfffffffa, 0xfffffff7, 0x5, 0x4, 0x9, 0x3ff, 0x8b7, 0xa, 0x635d66a, 0x3, 0x8001, 0x1, 0x9, 0x0, 0xf, 0xf, 0x4, 0xfffffffd, 0x6, 0x80000001, 0x4, 0x4, 0x44b, 0x0, 0x400, 0x9, 0x7bb, 0x5, 0xffff, 0x2, 0x7, 0x10, 0x5, 0x80000001, 0x2, 0x2, 0xa73, 0xe, 0x1, 0x6, 0x7, 0x7, 0xe, 0x0, 0xb, 0x2, 0x9, 0x2771, 0xf, 0x8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x2, 0x4, 0x80000000, 0x6, 0xfffffe01, 0x3, 0xc4, 0x9, 0x6bee, 0x3ff, 0x0, 0x5, 0x6, 0x6, 0x9, 0x9, 0x5, 0x1a3d, 0x42, 0x1, 0x429, 0x63f9, 0x1, 0x7, 0x7, 0xe5, 0xf4, 0x401, 0xc2300000, 0x3, 0x5, 0x40, 0x8, 0x0, 0x7, 0x8, 0x0, 0x3, 0x1, 0x0, 0x1ff, 0x7, 0x0, 0xc, 0x2075, 0x5, 0x3, 0x1, 0x7fff, 0x6, 0x8000, 0x80000001, 0x2, 0x1, 0x7fff, 0x1, 0x1, 0x2, 0x5, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, 0x40, 0x946, 0x8, 0x3, 0x2, 0xff, 0x200, 0x6, 0x10, 0x3, 0x0, 0x1, 0x2, 0x5, 0x6, 0x10001, 0xd0, 0x9, 0x8d, 0x5, 0x4, 0x800, 0x4, 0x8, 0x40, 0xffff, 0xd6e, 0xf61d, 0x1bc, 0x40, 0x4, 0x193, 0x7, 0xaa4, 0x8, 0x7, 0xa, 0x200, 0x8, 0x2, 0x3, 0x8, 0x2, 0xff, 0x7ff, 0x138, 0x6, 0x2, 0xc, 0x3ff, 0xc, 0x6, 0x5, 0x5, 0x1, 0x7f, 0x1000, 0x2, 0x6e5, 0x2, 0x7f, 0x2, 0x5a, 0xed91, 0x7ff, 0x2, 0x9, 0x0, 0x200, 0xe91e, 0xfffffffe, 0x4, 0x10000, 0x7, 0x0, 0x4, 0x10000, 0x2, 0x7, 0xed, 0x7, 0x80, 0xffffffff, 0xffffffff, 0x1, 0x0, 0x8, 0x3, 0x1, 0x5, 0xe1, 0x0, 0x3c, 0x1, 0x5, 0x1ff, 0x4, 0xfffff801, 0x1, 0x4, 0x4, 0x7f, 0xf01b, 0xf, 0x5, 0x8001, 0x6, 0x7f, 0xd39, 0xffff8f52, 0x0, 0x9, 0x4, 0x9, 0xf, 0x401, 0x8, 0x1, 0x80000001, 0x8, 0xa8e, 0x6, 0x3, 0x7fffffff, 0x9, 0x7, 0x5d9003ec, 0x1, 0xfffffffa, 0xffffff15, 0x101, 0x7f, 0x200, 0xfff, 0x6, 0x3b, 0x5, 0xb, 0x6, 0x80000001, 0x3, 0x9, 0xe, 0x411, 0x5, 0x5, 0x7, 0x9, 0x1, 0x13e, 0xf, 0x400, 0x0, 0x6, 0x2, 0xffffffff, 0x1, 0xffff, 0x8, 0x4, 0x6, 0x6b0a, 0x2, 0x3, 0x8, 0x7, 0x82, 0x7fffffff, 0x8, 0x3ff, 0x6, 0x4, 0x10000, 0x7ff, 0x0, 0x5, 0xbd6e, 0x0, 0x14000000, 0x5, 0xaaf, 0x5, 0x8, 0x6, 0xd4dd, 0x2, 0xd6a4, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x7fff, 0x7, 0x40, 0x5, 0x4, 0x1000, 0x1, 0x0, 0x400, 0x2, 0x4, 0x3, 0x1c000000, 0x8bf, 0x9, 0x8000, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x8, 0xfffffff7, 0x8, 0x4, 0xffffff98, 0x7, 0x7, 0xd6bf, 0x8e, 0x8, 0x0, 0x5, 0x2, 0xfffffff9, 0x9, 0x9d7, 0x80000001, 0xfffff5d5, 0x8, 0x401, 0xef14, 0x3, 0x5, 0x8, 0x6be6, 0x9, 0x6, 0xfff, 0x8001, 0x4, 0x36, 0x100, 0x100, 0x5, 0x8001, 0xb, 0x3, 0x6, 0x9e, 0x72, 0xb, 0x4, 0x6, 0x3ff, 0x6, 0x2, 0x800, 0x0, 0x8, 0x10001, 0x6b5, 0x1, 0xa, 0x9, 0x2, 0x7, 0xeb, 0x80000000, 0x5, 0x0, 0x2, 0x2, 0x8, 0x1ff, 0x6, 0x2, 0x6, 0x4, 0x8, 0x6, 0x3, 0x0, 0x0, 0x7, 0x8, 0xfffff001, 0x39, 0x8, 0x0, 0xbf, 0x2, 0xc1f, 0x41c8, 0x0, 0xa7af, 0xe, 0x7ff, 0x1, 0x1, 0x136520, 0xffffffff, 0x7c, 0x401, 0x4, 0xfffffffa, 0x4, 0x3ff, 0x800, 0x5, 0x8, 0x7, 0xfb, 0x5, 0xfffffff8, 0xbe38, 0x8, 0x7ebf, 0x9, 0x1000, 0x10, 0x8, 0x6f, 0xfffffffc, 0x7, 0x7, 0x1000, 0x9, 0x80000000, 0x80, 0x8, 0x7f7e, 0x4, 0x9, 0x8, 0x6, 0x8, 0x8, 0x5, 0x2, 0x9, 0x85, 0x9, 0xd9, 0x4, 0xc68b, 0x0, 0x7f, 0x6, 0x8, 0x6, 0x7fffffff, 0x2, 0x1e8, 0x7, 0x8, 0x7fff, 0x80, 0x10000, 0x4, 0x80000001, 0xff, 0xfffffff9, 0x7024, 0x80, 0x9, 0x401, 0x0, 0x9, 0xa, 0xe33, 0x5, 0x5, 0x6, 0x4, 0x3ff, 0x101, 0x0, 0x5, 0x2, 0x0, 0x100, 0x0, 0x5, 0x3, 0x6, 0x6, 0x3, 0xffffff08, 0x6c, 0x0, 0x48, 0x800, 0xceeb, 0x3dead48f, 0xa, 0x19e, 0x8, 0x563, 0x5, 0xe814, 0x8, 0x4, 0x8000, 0x1, 0x0, 0x6e, 0x7, 0x61, 0x401, 0x5, 0x7, 0x7, 0x8000, 0x2, 0x1, 0x7fffffff, 0x1, 0x6, 0x7, 0xfffffffe, 0x4, 0x3, 0xca3d, 0x8, 0x8, 0x2, 0xe57, 0x40, 0x9, 0x9, 0x9, 0xfff, 0xffffffff, 0xe, 0x8, 0x100, 0xfffffffc, 0x20, 0x7ff, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x0, 0x3, 0x5, {0xb, 0x2, 0xa3b, 0x6, 0x800, 0x7}, {0x7, 0x2, 0x4, 0x6, 0x8, 0xffff7fff}, 0x0, 0x1ff, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x0, 0x1, 0x9d5, {0x5, 0x1, 0xee, 0x53, 0x1, 0xe000}, {0x2, 0x1, 0xf, 0xa853, 0x4, 0xaeb7}, 0x8, 0x2, 0x2be}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x5, 0x52, 0x1, 0x3, 0x6, 0x64a, 0x0, 0x7, 0x1, 0x1000, 0x2, 0x8, 0x74dcddcb, 0x200, 0xe, 0x2, 0xd67, 0x80000001, 0x6, 0x2020000, 0x7fff, 0xf8c, 0x9, 0x63, 0x8b6f, 0x1, 0x3, 0x2, 0xc00000, 0x800, 0x36, 0x5, 0x1, 0x9, 0x0, 0x5, 0x401, 0x2, 0x1, 0x5, 0x2, 0x5, 0x401, 0x5, 0x6, 0xfffffffd, 0x9, 0x8, 0x1, 0x5c0, 0x7, 0x7f, 0x6, 0x0, 0x0, 0x8001, 0x5, 0x401, 0x6, 0x515, 0x9, 0x4, 0xbcc, 0x1, 0x0, 0x2, 0x475c, 0xa7, 0xfffffffa, 0x5, 0x5, 0x0, 0x3, 0x4, 0x26f, 0x6, 0x9, 0x6, 0x2, 0xa76, 0x9, 0x27, 0xfffffffc, 0xe, 0x9, 0x6, 0x0, 0x9, 0x8, 0x2, 0x4, 0xfffffffb, 0x9, 0x813, 0x81, 0x77, 0xffffffff, 0x2, 0x1, 0x6, 0x3, 0x85b, 0x2, 0x0, 0x95, 0xacb8, 0xd2, 0x80000000, 0xffffffff, 0x1, 0xfffffffb, 0x8001, 0xd0, 0x2, 0x2, 0xc6e, 0x44b5cf26, 0x0, 0x100, 0x5, 0x40, 0x9, 0x7, 0x550, 0x80000000, 0x2, 0x6, 0x9, 0x1, 0x0, 0x9d5, 0x8001, 0xfffffffb, 0xf139, 0x200, 0x7fffffff, 0x7fff, 0x90, 0x8, 0x6, 0x8, 0x7, 0x1, 0x80, 0xffff4556, 0x9, 0x3, 0x7a9b, 0xfffffffa, 0x4, 0x9, 0x7, 0x7, 0x2, 0xc0000, 0x74, 0x4, 0x9, 0x9, 0x4, 0x2, 0x9, 0x101, 0x80000000, 0x3ff, 0x7, 0x1, 0x4, 0x10001, 0x6, 0x50a0, 0x7, 0x5, 0x1, 0x68a, 0x6, 0xb, 0x5, 0x3, 0xb7c, 0x2, 0x3, 0xdc, 0x6d, 0x3, 0x6, 0xfffffff7, 0x1, 0x0, 0x9, 0x94b, 0x2, 0x7, 0x75, 0x7, 0xc, 0x6, 0x9, 0xfffffffa, 0x9, 0x5, 0x9, 0xb, 0x4, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7ff, 0x6, 0xfffffffa, 0x6, 0x2, 0x4, 0x3, 0x8, 0x5, 0x13, 0xb9, 0x5, 0x9d, 0x3, 0x8, 0x6, 0x7fffffff, 0x8, 0x5, 0x5, 0x80, 0x4, 0x8000, 0x40, 0x0, 0x1, 0x10, 0x7, 0x7fffffff, 0x7, 0xba, 0x1, 0x7, 0x5, 0x8, 0x6, 0x1, 0x2, 0x3, 0x8, 0x8, 0x7, 0x2, 0x8, 0x8]}]]}, {0x29, 0x6, "1b2814d7e1328995f3f53e877e31a0f5bab62a8ec05932bf760436f0d5b5376d5761992df1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xd0, 0x1a, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffff1d3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3b9cece4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x7c, 0x6, "45d38453fe54579128982a9e46a693f2bf5193ea7aab76de587ef61b8665e186bbc359602800a263018afa3a1a447983fe35b3ec947236f0c3f722e1f951703affbf52866c890d5990909fc37048329e2d61b782e0943507f75d54d651648d6882d1eba72294f086728de967e6252049d1d2da5e07dfb449"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x10d8, 0x8, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffff7a0, 0x10000000, 0x90b0, 0x6}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x9, 0x6, 0xe40, 0x1}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x1, 0x1, 0x81}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0x0, 0x1}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0x8, 0x7}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x1, 0xc2, 0xe7}, 0x2f}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ct={0x140, 0x1e, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_LABELS={0x14, 0x7, "09c9aa82a050021c44af63489d3e0755"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0xe9, 0x6, "c616229abfbafaa2c6c64aea2defc4b15ffb491be9331a9f4348282ff68e86c7ff68e610ef559fd378901b6d16ad2110c57423b311c2bf334825b83e15f1e96ad25c77c9adcc470650cdfa8b25fc29c234ab9cbbda3e1534cbc3cab14c0518024eb9a36b142933f0a2b7c199bfe1a5093561e83c30f19fb7cdcad42733ee18b00cf82e8982dd795d2b8c042b6d72925d8c4d97dff9de80a177fb1df55ba289f7fda3c79060feb27dbefc1c114c8c26a3f246afcbc94921b9b976b2ad31130798fbfcf6b9dbc246f863495ff1cf332a7b10d2e88fd7c805ccd039a90e3d449b5f158ace1449"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2e14}}, 0x0) 1.464340984s ago: executing program 0 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000200025a726bd7000fddbdf250a1400cd0100000102000100080006000000000014000100fe80000000000000000000000000003c0500150002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000000)=0x64, 0x4) (async, rerun: 64) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r7, &(0x7f00000027c0)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) (async) unshare(0x60100) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x42851}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14f6ffff0106010400cecba2b3726a0800000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.330257035s ago: executing program 1 (id=2461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f000000a080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, &(0x7f0000000140)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r8, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d4, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000001080)={0xb, {{0xa, 0x4e23, 0x8, @private2, 0x4}}}, 0x88) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r10], 0x44}}, 0x8000) 1.143265558s ago: executing program 0 (id=2464): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async, rerun: 32) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x9) (rerun: 32) bind$bt_hci(r6, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async, rerun: 32) r7 = accept4$alg(r1, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg(r7, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89b0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) sendmmsg$alg(r8, &(0x7f00000000c0), 0x0, 0xc854) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 1.140543487s ago: executing program 4 (id=2465): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8014) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}, {&(0x7f0000002000)="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", 0x489}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="137d72", 0x3}], 0x1, &(0x7f0000001c80)=[@flowinfo={{0x14, 0x29, 0xb, 0x48000}}, @rthdr={{0x18, 0x29, 0x39, {0x6, 0x0, 0x2, 0x5}}}], 0x30}}], 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x158f03fe3d398fa5, &(0x7f0000000640)=""/122, &(0x7f00000006c0)=0x7a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x200, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x8, 0x978, 0x1, 0x0, 0x7, 0x4}}, {0xc, 0x2, [0x4, 0x80, 0x8, 0x200]}}, {{0x1c, 0x1, {0x1, 0xfc, 0x5d5, 0x9, 0x6, 0x513, 0x1, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x74}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000007c0)={'gretap0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r10, 0x700, 0x1, 0x3, 0x2cc0d5dc, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x64, 0x0, 0xb5, 0x3f, 0x0, @loopback, @multicast2}}}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffffff, 0xffffff], [0xff00007f, 0xff, 0x0, 0xff], 'xfrm0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x6, 0x9, 0x3, 0x12245fa0c869bd50}, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff, 0x5}, {0x0, 0x0, 0x0, 0x3}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {0x0, 0xfe}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x8, 0xb, 0x6}, {0x4, 0x2}]}}]}, @common=@inet=@TEE={0x0, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, 'pim6reg1\x00', {0x4}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6cc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe6a) 1.066864474s ago: executing program 1 (id=2466): ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000000)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x21, 0xe, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x48, {0x2, 0x10, 0x6, 0x5, [0x25c, 0x10000, 0x4, 0x8000000000000000, 0x3, 0x1, 0x9, 0xfffffffffffffffb]}}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0xfd, 0x1, [0x0, 0x2]}}]}, 0x80) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r0, &(0x7f00000000c0)='\x00', 0x130c01, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x1]}, {0x4, 0x8ff3, 0x85, 0x2}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0xb}, 0x3, &(0x7f0000000380)=[{0x3, 0x8, &(0x7f00000001c0)=')$-!].%)(+,\x00', &(0x7f0000000200)='a', 0x1, 0x20}, {0x2, 0x7, &(0x7f0000000240)='\x00', &(0x7f0000000280)="327afe9cc4424f6b9a08aabe61db695a2a8ccaea623a1adb4113edbdf8faf3f2067101cfd11b1accce80f71c54995a7fd31a86dcff7c72c75ca247d158e0d20d7ca1716790e65fab", 0x48, 0x18}, {0x1, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)="d1af2cbba2de801b6c5d818bd71be8939c1af078f3b765eece87f24cfc15edc63cc982de26bc05ce", 0x28, 0x10}]}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x3c, 0x23, '\x00', [@jumbo, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1a}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @generic={0x61, 0xec, "82c94a0c2ea1c7ad5e7c0f5dd08d388809ea27ff3597f85d748ff9a6228bc83b086558fb55a4b1df216948e881735746b636ddde8b52bbcaccfd76a528ffe493683e4add612a6b971016d5e55a2876b3f3eae03250018ad863b9208d3a8da605afed99b9a10093ec541564e4e40aa8234c01ca77b6f0fb4ed60387f969ca29c153b3801db9cad5200180dd9c1a42ebc8f1f965159daedc9dab1de6707903a6297a21dc4254441e5af92d1ad34fce106d918385f2a709321e6452146c3808a8bea8fcbc24ee841c3bbe35d97ac98cb2770e793f6c057429d81e52a4436181e329d8ab2cb7b8361b6e66c85e3e"}, @padn={0x1, 0x1, [0x0]}]}, 0x120) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000005c0)={r1, 0x1, 0x5, 0x53a7747a}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000600)={0x2c, 0x1, '\x00', [@ra={0x5, 0x2, 0x400}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1ff}]}, 0x18) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000006c0)={'wlan1\x00', {0x2, 0x0, @remote}}) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000a80)={&(0x7f0000000700), 0x10000, &(0x7f0000000740)=[{}, {}, {}, {}], &(0x7f0000000a40)}) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x8, 0xfffffffa, {{0x20, 0x4, 0x2, 0x1a, 0x80, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@end, @generic={0x88, 0xc, "67fb9e22ba2ed19bbe91"}, @cipso={0x86, 0x3e, 0x2, [{0x1, 0x5, "fc9742"}, {0x2, 0x4, "c9be"}, {0x2, 0xe, "cb3983948d84e3702f7c5130"}, {0x2, 0xe, "b5c943bd6975a16c7ac12e16"}, {0x3, 0xd, "9590e705a9fdc96b275fc5"}, {0x6, 0x6, "a99f6458"}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0x8, [0xfffffffe, 0x5, 0x8, 0x7, 0xd7, 0x0, 0x80000000]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) r8 = openat$cgroup(r2, &(0x7f0000000e00)='syz0\x00', 0x200002, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xf4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48885}, 0x20040001) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001000)={'xfrm0\x00', {0x2, 0x0, @multicast2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001040)={{r0}, "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"}) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4040014) sendto$netrom(r1, &(0x7f0000002180)="8023083e405738510d082c248a4a2d0532d73803331448e1084595f3412f05eac406a274d8c9ebda9318fa83c9e76f63427e4cc1f4ff7fba59331cd394ff82b57edce4c686a8ffcbbaf7129d4e7484156b16f20132d0813bba2ca681c0dd53932e302a5889236109d44efc072edd682122f9148ffb26ced6e8af63406cfc8c23fd4cbb2c0e754edcfec7ade3df5b421233ca18cc3e6438c7a4ec5a15b39ea27c9428f90f4e9d8ed2d5bd9b", 0xab, 0x10, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) accept$packet(r1, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002380)=0x14) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f00000023c0)) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000002400), &(0x7f0000002440)=0x4) sendmsg$tipc(r1, &(0x7f0000003900)={&(0x7f0000002480)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10, &(0x7f0000002880)=[{&(0x7f00000024c0)="9bcce4368f90893eaf52fa3375843753f6e3e3503f76b0ebdf3561aa6b6e9c16a3d653e423e39f29a9132e413921f7b7a4e32c825621c6b9591cb119dd334e8c93368197e9c7d15e9337ada3252a6a4c1110ce45ef639a5d1bc3ac6c5802dd0ea55521ec03663c9c9682935b999056a284abf67b054137c28879da19928f46be8aee5ca885faf6283e9b272d46", 0x8d}, {&(0x7f0000002580)="975bf99e208fb61b275b364438ec3d1d80b4e62ac01df422052cf9e18a08394c24aa98194e076a048c23320d3a6d16e37f32b5351f8eae2ecef6f731eb470470d617ac9a9c1357343d5a6dc0f62b7b9faf2d041a595d50f4eef1b9fd1bf220bc9e798d34dbe26465ef866835c6b83fac15d57ec4a551ee148fb7fcdd2215431267fe78645a98cfca95e7a4083ca2a9c29d23e81527787ae3ff28176af00062dd46a9c117eac55878f395edc15933a5c19f14476e01a3e2bab8d8d70a4cfa07e38b15ecff73cd8d57079203679b38c7b9c196253a5ce164cd2d9dfe6699fe839e", 0xe0}, {&(0x7f0000002680)="4f1d2ebec6c0f88c68a995978480eccd19741ad132e9564fc2c9f6d0b2ba161159f54127049d8c7826f4f3ae273cda6d2c69385cf47f6022db319202f1bb22307b53b92d42bf94fece9e25908ada0a2dd949952eb76d7ffac15c558ce399f49d8a9543e5b9b3d397339cc6f94eeafe6599168f5a6f0e414b7b5f019c5a8d5093ec58b75e1266d393acee4b804df26c4579d4a99c5357af18f073ae0b33a4a8fae3909f319960119535e6ba4243cecdaaae9b787d53be0313c1736d2cb44264e4e3673e83a2debb1fa3a9ae559c64ba3fc9005360f5244329d6e22baf5d7c2d20de2d6c714f7c70fc45", 0xe9}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="4c7c90fd0c3caa01c678ebd28bbe9ca4e665b00dcc44038e4769d53514277540dc0c32bd5868daee39c589a14d3c67ac6f243a3bd32a4f9b6f2df6188263e93badfb20c69fba3c4b309d505f40bf370b205d8f049578b82bcd7add0ea1a746dd0f34e19055c4c453ef975ef4c81435", 0x6f}, {&(0x7f0000002840)="1b8058b73148998d50a31416d1f69c23848c6b2354db00ddfee5a790a9e39d8629cdaa81ca458684689d1e1d0e747a530a4cd9", 0x33}], 0x6, &(0x7f0000002900)="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", 0x1000, 0x4008881}, 0x20000804) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000003a80)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000005) 990.670055ms ago: executing program 0 (id=2467): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) 930.585261ms ago: executing program 4 (id=2469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x2}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'ovf\x00', 0x9, 0xc, 0x400059}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x9) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac020400", @ANYRES16=r9, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x4}, 0x24044805) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x27}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40008000) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r13, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r13, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 896.828284ms ago: executing program 2 (id=2470): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'sit0\x00', r1, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 801.233485ms ago: executing program 3 (id=2471): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 748.189017ms ago: executing program 1 (id=2472): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100057dd9e60de5326ab2e5255d"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@getchain={0x4c, 0x66, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {0xd, 0x10}, {0xb, 0x517fd1bad6059edf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8c}, {0x8, 0xb, 0x401}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc00c081}, 0x4000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r11 = socket$inet(0xa, 0x801, 0x84) (async) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000002c0), &(0x7f0000000300)=0x8) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, 0x0) (async) accept4(r0, &(0x7f00000004c0)=@pppol2tpv3in6, &(0x7f0000000540)=0x80, 0x800) socket(0x10, 0xf, 0x4) 701.090206ms ago: executing program 3 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5218) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r3}, 0x20) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 666.349196ms ago: executing program 0 (id=2474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={0x20, r2, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x7d, 0x5, 0x6, 0x40, @mcast2, @local, 0x10, 0x8, 0x8, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x8001, 0xffffffff, {{0x27, 0x4, 0x2, 0x3a, 0x9c, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @empty, {[@timestamp={0x44, 0xc, 0xb7, 0x0, 0x0, [0x2, 0x53d2]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x1, [0x7ff, 0x4c, 0x9, 0x7fff, 0x10ad, 0x4]}, @timestamp={0x44, 0x14, 0x58, 0x0, 0x5, [0x7, 0x2, 0x2, 0x9]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x6b, [@private=0xa010102, @loopback, @local, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x34, 0xe0, 0x1, 0x2, [{@empty}, {@local, 0xb}, {@empty, 0x6}, {@multicast2, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@empty, 0x1}]}]}}}}}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'nicvf0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r14 = socket(0x2d, 0x2, 0x0) connect$qrtr(r14, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) bind$xdp(r14, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 619.616441ms ago: executing program 2 (id=2475): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) r3 = accept4(r2, 0x0, 0x0, 0x80800) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="26f6c7ff0f6508000000000000006d00006e49e374399a83b596883c9f55a22f270700341abd0568ccd7030a0808c8095ba44c47844714986507a852bafe679c9527b0ffd1e79ab9337bd8ddb835b239017e73ecab4848398384ea39934037eff8a41f67882495a6283cd32c221042fea6f59e01360d1fa73f53f0ece8a08ce975b5df9e3ad35c66840cb14060242665373a95dd0800000000000000", @ANYRES16=r7, @ANYBLOB="010026bd700004000000050000000800090002000000050004000800000008000b00000000000600010007000000"], 0x34}}, 0x20) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r10, 0x3) (async) accept4(r10, 0x0, 0x0, 0x0) (async) shutdown(r10, 0x1) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async, rerun: 64) getsockopt(r9, 0x111, 0x6, 0x0, &(0x7f0000000080)) (rerun: 64) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r11, 0xffffffffffffffff}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r12}, 0x18) 558.616724ms ago: executing program 2 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000009}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x8}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 482.802181ms ago: executing program 1 (id=2477): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r1, r0, 0x0, 0x400000000000) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r6, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) (async) r7 = socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r7, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000000)=0x82, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000b602451d9200030000000000000000009500"/37], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$tipc(r8, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) 404.236739ms ago: executing program 4 (id=2478): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 320.884753ms ago: executing program 4 (id=2479): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x8, 0x5, 0x24, @mcast2, @local, 0x80, 0x80, 0xb09, 0x5}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000500)='netdevsim\x00', 0x101000, &(0x7f0000000540)={@align=0x1, {0xa4, 0x2, 0x0, 0x40}}, 0x8, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x2}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000002c0)={@val={0x0, 0xf9}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "9e33e0", 0x14, 0x6, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x7, 0x0, 0x8}}}}}}}}, 0x4e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r12, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x6, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @generic={0x5, 0x2, 0x3, 0x2, 0x150}, @generic={0x9, 0x8, 0x5, 0x5, 0x17b}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x2, 0x17, &(0x7f0000000180)=""/23, 0x41000, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2af00, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r2, r3, r4, r5, r8, r9, r10, r11, 0x1, r12], &(0x7f0000000840)=[{0x2, 0x5, 0xf, 0xc}, {0x5, 0x1, 0xa, 0x1}, {0x3, 0x5, 0xb, 0x8}, {0x5, 0x3, 0xd, 0x3}], 0x10, 0x65aa3aa4}, 0x94) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r14, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r13, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) 303.439957ms ago: executing program 3 (id=2480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) (async) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) (async) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 235.986894ms ago: executing program 0 (id=2481): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="78d934d9851206cf64867862a52a42c92e54996252de534fda65c9ce25a3bf4b01e680b3fbe2c778f708306b4047150f52ad3843e42d835c191fc7c9b1b22739414d19e159d6f88dd5d8aa156cafacd41d59024614a60fa57f8394ccb282d8b3c2a2acd654c126bec23f51f9fd31dc16ee548cc493ea6ec22068a11183bd9bcf9b56d0608eeb79611a1fdf9adeaed9104df9e5728cf45767a053802e56d311a53cdc699cb53bb55d74754736adaaafa6c7ee5a375ad833456c750ab899b22409a746650b", 0xc4}, {&(0x7f0000000180)="43f7f462bce1285a6908785d3fee3ae545479cf726964121ccdfaf29f60e4d4dcca7188c3b87835e84add22a01cb6bbe3302088d8681a178558b461e90215caa37d504df9f838ad23192795e9ff46e6d3777d8752810e2cfb5dddbb9c8adc97fd52145227a94bc19e486f5b9db1ec08027217bf02b9b079f0cb9a0862d8bd883153f4b58018deb7f25d1acb4453c9f883f060052bffce46d1515bbd4dd1c3252257328d3b69492cdab7513706676b79cb21aa66196ce9fc7998a50f80aa57ec3ffc2f4d5846c909c96bfdc51", 0xcc}, {&(0x7f0000000280)="a539cacea66fd13b2eca74bd3068a31cf04e1590369e314676d067b438d6f9f8fdf77c2173c668a13f8f9d1521b168c6b58187ac0d3a8646e80688d8cbf6b714df47259ecc55c54c50f6fa5724c0d52a509aa9ec89e6a8a5290cd88c769a04ebba83a3621bfd41d732807f8d4337e1f7915bbaad097dedd9f6191cd2d175b5fdaf30431e2534ea44dcdd738727ed1ace1621d79bee8a24da77c673ee9f5d13fb712c", 0xa2}], 0x3, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1be}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)="9dbda1b0f7ff06853957426fedc57f63f8e93eae9c6aae1d26bc70822c8a3cf6f95954dece91f5c66c483e3094ba4a11a1dee4ae1a47c294dc3828dadd1e8abe873793cadde4d8beabd4f42f7a1275e4", 0x50}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="7603450fb2c26fd2aa5de8210af93972138b8d971fb7c037cd1b71f845b82ee32ad9b59c", 0x24}, {&(0x7f0000000500)="ea28be90f82115845d593859e23075fa660538aa039f5c9defe0c9b0b52c91f1ed2a1bdfb9b94b66e841292cd6b9482ff8eb98c8a8f17efa6ed9c59e0f153dfed1c565a33011e39e5f82de60088140a724a6db065d44ade455d0c71528ff145ebdcfc285cb46a757769ce5adab60c71844c3b9743b7d8c75d9406175c5a6b0cf1f4e2ac4cc981a5b4fc8e913d44da7537da98bd4278fd242715da57aa8c579e6c53ba873dab9f38c772477caf03b46a372acb68bb5733965c44bd1e52dc965510fab76ada97df168bbcef020b5bc3d1a29778b4b72", 0xd5}, {&(0x7f0000000600)="8a991dfb4a5c33367a6435e1f78c932407f854207761d83598a560f27beeb56f4ce37a024434d2d1669864e910bfdf437fdb357e335fd64acabfad2b2194b8d560af5733fc876940c80c7409e5326ad15a20486ccda57ba78124c84c253089b21b21182325d3b1c5506cb2016ae7801c0f908b2e64c496c4abdfffebe918186b772b789574e8c96545f1fba053ad3ba83b79909c40789abd4b46b5", 0x9b}, {&(0x7f00000006c0)="527fe3ed36ea9966e46b7b5fc1fb4c6efe0b031c77426c56026b7d29cc189ec3b2372e213d9e10837dea71a2dd7618046c45ca984bbf49bfe65082b4c6cd4e527f667b17828ac662687c226065d5947e7a4fc56da5b963f9e026f552d7967279869bc2ac45939032350607791448ed22aeb8a110d2753db94af9b6de5d1e1fa528fdd3251f1191f98e62718f9fba4659bd4765134fc34075c88d1c783a42cebfda260613b86da70e3df4d48847e5bfeb719dae1f5a2b282c027cb6ad1f9387f57f8f485e65581f90154d51df0ce9571f69fcc6a6aeaf43dc94e9936bddaa4722156446e9452705ec9a81ed6a6ff70dff9c75c5af", 0xf4}], 0x6}}], 0x3, 0x47f7b) 235.773869ms ago: executing program 2 (id=2482): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x3}}}}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) 129.085569ms ago: executing program 2 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HOOK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400dd}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0x11, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x2000c084) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HOOK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400dd}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0x11, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x2000c084) (async) 123.71198ms ago: executing program 3 (id=2484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c4630086180"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) 63.935709ms ago: executing program 0 (id=2485): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000080000850000003b0000009500000000000000a2e30334beba8e7aa6c647ff56dc0a8f54604a5eac9f677f534a569ffe5a9fc45a11bfa8ce5ba3efe8dcbcfcc50f65c3619a97a508a0ac6f7406469a4dbc76d01a9aaec76c57e1fe5cb389fa821ee559432d847af41d42df94e697ea13f74a184460755eaca8ebd1846034541812a2d682ed81947f921200b5cbd3d8c8758c0ca4361166bdd36514d7b02b30ee522fd2b80eada8527180f4079f21719bfaf3b019dd686452c0dd155796ac5344c79595c92b34af"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000056c0)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x170, 0x1, [@m_ipt={0x16c, 0x6, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xb5, 0x6, "205c8883dc9c07ef246113fe39496e7dc1516dd1fb3f984692315359e777cabc9c2ae58becc6773242fd76006a5ecf4371133c8c64eeabf8dba315ebb2da60e606aeed56638db6cf39ce0d1fe6ecdce231e0b8098e7db26002d8a2b228f0cab4dc0154ae1488c04ede939125b9929de843e5a1e4d178de1ecbcd3d8d3ab21dbfe16003e95429a4c1e3d21709643855dc43fdf886ade6badb047f133d5ed7fe83c2e25b3cb9d9ddee3f4c4f9856136029a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xe7c, 0x1, [@m_ipt={0x268, 0x13, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x95, 0x6, {0xd, 'security\x00', 0x6, 0x7f, "de822b6f7708e451972022ce52ed7664c9f0967bc21250627d2575de6e5cfa24ce1e6040279970947063abf0a99e192a7d36b458b3c9a5716c62a9d0505da0b68f711a37bfd475c83603856b1134ecffc5496f615ea239f620fb4a8c9ec5b5693e54cfd4c49ccd419fe71b"}}, @TCA_IPT_TARG={0xe5, 0x6, {0xc, 'raw\x00', 0x0, 0x7f, "5bc9dd1f04e53bf27e3e69603bbadc5f6f909790805f554f1f24c05b12275eaff6d2ef52fb13faf4469ae27550cbb5ccaa037e18bce0bf4a142fff1025ece340da8091d8538fdd4680e89f0d814d7dfd9372e010c39b2ed5e2a1d0427cbab6fbed8ee5411e3ef29f9b3e3c159b0526d2712c628c71f7f183ca68f441def53750e36778b9389e22c24fbe239043ec4b609ce108bff8657e8b0c6208b2a758a6aac7e489753f94b7e3404d60911da47994999321253d8c1b5ce1becb"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x81, 0x6, "b907cf430c7132cd2bb94dab1bb2ebb4b351e2844ba30d1b7a524d7864fa18af96c421a0bf007d2b6c6a08d13535c97a1439ff76f54616feec91c88a27f4ad94d4414ac4d9e6305858b4dd430dd76a24dead1031e859eb616ece8e54387fa372589b7ed0e2a1d199b1deb405f471fbd90e4d914653c845a357403c2852"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xc10, 0x11, 0x0, 0x0, {{0x8}, {0xb2c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xb0d, 0x6, {0x6, 'security\x00', 0xff, 0x12, "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"}}]}, {0xbd, 0x6, "7aeb72fb05aed2b7250b4e304761d0d8e0dca642281104a39a3370a7cc751a130c57fcc80332f5013b30e682e632fafe646688ce1796cfa067f5174aad5efeb0e3ab81a13099335f4f32fa866fc03779764441b6007d60d0304beeb9dfa5dc91952d53c1422d84b1620f10fd46b0bfd944b02cbeafc8b8e37f2ff5dcc0989dfbe4d4269bff2552e4b5cf263711a36a0f296a16201a20e869b6bd4755ad90db11050b9e134331471f44b44ed24f655e919a1f964d6118cf1429"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1000}}, 0x4008800) recvmmsg$unix(r8, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140f, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf4060085300", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x42c, 0x3f3, 0x100, 0x70bd2b, 0x25dfdbfd, {0x2, 0x2, 0x1a, [0x9, 0x401, 0x0, 0x2, 0x2, 0x10, 0x9, 0x7, 0x10, 0x116d, 0x9, 0x2, 0x5, 0x8, 0xfffffffd, 0x10, 0xb, 0x6, 0x3, 0x6, 0x6, 0x1, 0x7fffffff, 0x430, 0x7fffffff, 0x80, 0x1, 0x2, 0x8, 0x401, 0x8, 0x2, 0xe91a, 0x0, 0xc, 0xca8, 0x3, 0x10000, 0x8, 0x8, 0x7, 0x8, 0x7, 0x81, 0x1, 0x1c, 0xea, 0x80, 0x7, 0x6, 0x7, 0x7, 0x5, 0x7d, 0x2, 0x0, 0x2b9ebf85, 0x6, 0x1d5e, 0x783ae7d1, 0xffff, 0xff, 0x3, 0x8], [0x6, 0x7, 0x9, 0x5, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x4, 0x1, 0x2d, 0x9, 0x0, 0xff, 0x1, 0x5, 0x7, 0x11, 0x4, 0x7f, 0x1, 0x6, 0x401, 0x5, 0x7, 0xffff5b87, 0xe4a6, 0x9, 0x1, 0x4, 0xfd, 0x80, 0x3, 0x8, 0xfffffff9, 0x3, 0x5, 0x800, 0x3, 0x704, 0x5, 0x3, 0xfffffff8, 0x8000, 0x10001, 0x6d, 0x2, 0x7ff, 0x84a, 0x80000000, 0x1c83, 0x9, 0x9, 0xe6b0, 0x26, 0x3, 0x5, 0xf9, 0x9, 0x4, 0x3, 0x5, 0xfff], [0x3, 0x20, 0x0, 0xeae, 0x2, 0x1, 0x8, 0xbcd, 0xffffffff, 0x5, 0x8, 0xff, 0x6, 0x5, 0xb, 0xb267, 0xa, 0x7, 0x9, 0x1, 0x1659, 0x9, 0xe, 0x3, 0x6, 0xf34, 0x1ff, 0x9, 0xd, 0x20000000, 0xfff, 0x2, 0x28f, 0xd79, 0x8, 0x2, 0x6, 0xfffff0fe, 0x8001, 0x5, 0x4, 0x1, 0x2, 0x40, 0x7, 0x5, 0x4, 0x80000001, 0x6, 0x6, 0x9, 0xc9, 0x3, 0x2, 0x6, 0x5f3b, 0x6, 0x81, 0x1, 0x7, 0xbc, 0x731d, 0x0, 0x7], [0x60d3dc26, 0xa, 0x23, 0xfffffff9, 0x1, 0x0, 0x0, 0x2, 0xfb, 0x9, 0x300, 0x10001, 0x3, 0x4, 0x1000, 0x5, 0x20000, 0xa299, 0xfffffffe, 0x1, 0x4, 0x4, 0x4, 0x8, 0x41c3a7c5, 0xb, 0xf, 0x8, 0x0, 0xff, 0x2, 0x6, 0x1, 0x1, 0x9, 0x4, 0x1, 0x840, 0x0, 0x8, 0x0, 0x8a0a, 0x6, 0x6991, 0x8, 0x3ff, 0x8, 0xe6, 0x401, 0x4, 0xd, 0x1, 0xfffffffa, 0xa5c1, 0x6, 0x352a, 0xc, 0x8000, 0x9, 0x4, 0x1c8, 0x228d, 0x3ff, 0x6], 0xb, ['syz2\x00', '\x00', '\x00', 'wg2\x00']}, ["", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 63.085706ms ago: executing program 1 (id=2486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000400000000000013be0000de4c", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 31.164496ms ago: executing program 4 (id=2487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 0s ago: executing program 2 (id=2488): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca05", 0x139}], 0x1}}], 0x1, 0x81) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) kernel console output (not intermixed with test programs): 79.730510][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.740290][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.748841][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.757716][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.765663][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.776919][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.785276][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.794643][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.897601][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.907487][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.934483][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.944470][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.965011][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.975511][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.983641][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.994250][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.052024][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.062275][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.070696][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.080425][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.096934][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.106634][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.116047][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.125250][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.195810][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.238546][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.264372][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.275816][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.290179][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.297485][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.324577][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.331686][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.359250][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.384043][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.391169][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.420293][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.427491][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.444505][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.466176][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.525469][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.532739][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.543637][ T5834] Bluetooth: hci4: command tx timeout [ 80.553338][ T5834] Bluetooth: hci0: command tx timeout [ 80.561552][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.569301][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.591313][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.623227][ T5834] Bluetooth: hci1: command tx timeout [ 80.623341][ T5836] Bluetooth: hci2: command tx timeout [ 80.635085][ T5837] Bluetooth: hci3: command tx timeout [ 80.686608][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.693942][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.706109][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.713290][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.749104][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.821867][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.849973][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.900287][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.907509][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.968230][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.975400][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.115554][ T5823] veth0_vlan: entered promiscuous mode [ 81.150752][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.165142][ T5823] veth1_vlan: entered promiscuous mode [ 81.195478][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.348100][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.367681][ T5835] veth0_vlan: entered promiscuous mode [ 81.388197][ T5835] veth1_vlan: entered promiscuous mode [ 81.430741][ T5823] veth0_macvtap: entered promiscuous mode [ 81.455270][ T5823] veth1_macvtap: entered promiscuous mode [ 81.515386][ T5835] veth0_macvtap: entered promiscuous mode [ 81.536346][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.578653][ T5835] veth1_macvtap: entered promiscuous mode [ 81.595170][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.614001][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650966][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.680036][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.700084][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.720999][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.729019][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.748778][ T5831] veth0_vlan: entered promiscuous mode [ 81.768317][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.777182][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.793119][ T5831] veth1_vlan: entered promiscuous mode [ 81.809212][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.824571][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.870584][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.911678][ T5827] veth0_vlan: entered promiscuous mode [ 81.924846][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.944739][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.954893][ T5827] veth1_vlan: entered promiscuous mode [ 82.019700][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.040779][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.046948][ T5822] veth0_vlan: entered promiscuous mode [ 82.085026][ T5827] veth0_macvtap: entered promiscuous mode [ 82.105171][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.116813][ T5831] veth0_macvtap: entered promiscuous mode [ 82.119159][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.129612][ T5831] veth1_macvtap: entered promiscuous mode [ 82.164544][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.179264][ T5822] veth1_vlan: entered promiscuous mode [ 82.199228][ T5827] veth1_macvtap: entered promiscuous mode [ 82.258346][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.260796][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.283607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.317893][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.334773][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.348090][ T5822] veth0_macvtap: entered promiscuous mode [ 82.372184][ T5822] veth1_macvtap: entered promiscuous mode [ 82.395499][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.407619][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.456048][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.498210][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.536852][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.556249][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.568482][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.606634][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618731][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.634851][ T5836] Bluetooth: hci0: command tx timeout [ 82.641031][ T5837] Bluetooth: hci4: command tx timeout [ 82.662148][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.673199][ T5948] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7'. [ 82.687656][ T5948] netlink: 'syz.2.7': attribute type 11 has an invalid length. [ 82.702633][ T5836] Bluetooth: hci3: command tx timeout [ 82.710023][ T5837] Bluetooth: hci2: command tx timeout [ 82.716506][ T5836] Bluetooth: hci1: command tx timeout [ 82.719843][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.771400][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.816703][ T3531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.835895][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.851548][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.875723][ T3531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896081][ T3531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.909527][ T3531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.000459][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.010139][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.069246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.105383][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.151239][ T5962] IPv6: sit1: Disabled Multicast RS [ 83.173862][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.181727][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.282182][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.308029][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.344363][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.369140][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.384243][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.457504][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 83.690732][ T5982] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 83.895018][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16'. [ 84.054504][ T6002] Zero length message leads to an empty skb [ 84.210192][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 84.269390][ T6007] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 84.340817][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.404892][ T6007] bridge_slave_1: left allmulticast mode [ 84.438823][ T6007] bridge_slave_1: left promiscuous mode [ 84.531697][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.618960][ T6007] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.649080][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 84.665621][ T6038] netlink: 7 bytes leftover after parsing attributes in process `syz.2.31'. [ 84.702844][ T5837] Bluetooth: hci4: command tx timeout [ 84.708299][ T5837] Bluetooth: hci0: command tx timeout [ 84.708671][ T6038] erspan0: entered promiscuous mode [ 84.789410][ T5837] Bluetooth: hci2: command tx timeout [ 84.794936][ T5836] Bluetooth: hci1: command tx timeout [ 84.794953][ T5834] Bluetooth: hci3: command tx timeout [ 84.945598][ T6049] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 85.045454][ T6055] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 85.140470][ T6049] Bluetooth: MGMT ver 1.23 [ 85.757331][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.898595][ T6079] bond0: entered promiscuous mode [ 85.919423][ T6079] bond_slave_0: entered promiscuous mode [ 85.940451][ T6079] bond_slave_1: entered promiscuous mode [ 85.976817][ T6079] batadv0: entered promiscuous mode [ 86.031155][ T6079] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.098365][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 86.117531][ T6079] bond0: left promiscuous mode [ 86.149595][ T6079] bond_slave_0: left promiscuous mode [ 86.192757][ T6079] bond_slave_1: left promiscuous mode [ 86.252099][ T6079] batadv0: left promiscuous mode [ 86.528610][ T6078] infiniband sy1: set active [ 86.534071][ T6078] infiniband sy1: added bond0 [ 86.628371][ T6078] RDS/IB: sy1: added [ 86.664938][ T6078] smc: adding ib device sy1 with port count 1 [ 86.680852][ T6078] smc: ib device sy1 port 1 has no pnetid [ 86.800067][ T6104] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 86.910469][ T6108] tipc: Started in network mode [ 86.957735][ T6108] tipc: Node identity 5acdb621b5ea, cluster identity 4711 [ 86.993714][ T6108] tipc: Enabled bearer , priority 0 [ 87.138294][ T6109] syzkaller0: entered promiscuous mode [ 87.192378][ T6109] syzkaller0: entered allmulticast mode [ 87.214087][ T6109] tipc: Resetting bearer [ 87.296009][ T6107] tipc: Resetting bearer [ 87.416366][ T6121] netlink: 'syz.2.54': attribute type 32 has an invalid length. [ 87.446730][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 88.053001][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.55'. [ 88.552554][ T6107] tipc: Disabling bearer [ 88.603887][ T6121] bond1: Setting coupled_control to off (0) [ 88.612361][ T5923] tipc: Node number set to 4012357153 [ 88.634837][ T6124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.030944][ T6148] tipc: Enabling of bearer rejected, failed to enable media [ 89.174725][ T6144] syzkaller1: entered promiscuous mode [ 89.271255][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 89.282127][ T6157] netlink: 'syz.0.66': attribute type 21 has an invalid length. [ 89.295377][ T6157] netlink: 128 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.313131][ T6157] netlink: 3 bytes leftover after parsing attributes in process `syz.0.66'. [ 89.373417][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 89.540569][ T6170] warning: `syz.0.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.584377][ T6175] x_tables: duplicate entry at hook 3 [ 89.616792][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 90.431604][ T6222] sctp: [Deprecated]: syz.1.86 (pid 6222) Use of int in maxseg socket option. [ 90.431604][ T6222] Use struct sctp_assoc_value instead [ 90.499082][ T6221] sctp: [Deprecated]: syz.1.86 (pid 6221) Use of int in maxseg socket option. [ 90.499082][ T6221] Use struct sctp_assoc_value instead [ 90.627400][ T6233] netlink: 'syz.4.90': attribute type 3 has an invalid length. [ 90.719709][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.769286][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 90.787765][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.825000][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 90.918483][ T6248] netlink: 'syz.0.95': attribute type 8 has an invalid length. [ 90.957464][ T6248] bond0: entered promiscuous mode [ 90.963171][ T6248] bond_slave_0: entered promiscuous mode [ 90.972239][ T6248] bond_slave_1: entered promiscuous mode [ 90.979154][ T6248] bridge_slave_1: entered promiscuous mode [ 90.988558][ T6248] gretap0: entered promiscuous mode [ 90.998998][ T6248] ip6gretap0: entered promiscuous mode [ 91.008228][ T6248] hsr1: entered promiscuous mode [ 91.937818][ T6291] veth3: entered promiscuous mode [ 91.956212][ T6291] veth3: entered allmulticast mode [ 92.003101][ T24] cfg80211: failed to load regulatory.db [ 92.892694][ T6352] tap0: tun_chr_ioctl cmd 1074025676 [ 92.898047][ T6352] tap0: owner set to 0 [ 92.961884][ T6349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.131510][ T6366] __nla_validate_parse: 3 callbacks suppressed [ 93.131528][ T6366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.123'. [ 93.241598][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 93.268478][ T6369] veth0_virt_wifi: entered promiscuous mode [ 93.311041][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 93.393171][ T6373] hsr0: entered promiscuous mode [ 93.417573][ T6373] macvlan0: entered allmulticast mode [ 93.439645][ T6373] hsr0: entered allmulticast mode [ 93.459161][ T6385] Bluetooth: MGMT ver 1.23 [ 93.464664][ T6373] hsr_slave_0: entered allmulticast mode [ 93.496428][ T6373] hsr_slave_1: entered allmulticast mode [ 93.892220][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 93.942336][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 93.957668][ T6416] ipt_ECN: cannot use operation on non-tcp rule [ 94.153845][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 94.166558][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.174452][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.292128][ T6418] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.318985][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 94.524768][ T6436] netlink: 150224 bytes leftover after parsing attributes in process `syz.4.146'. [ 94.567518][ T6442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.670991][ T6444] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.150'. [ 95.187904][ C0] Illegal XDP return value 16128 on prog (id 23) dev team0, expect packet loss! [ 95.239109][ T6484] tipc: Failed to remove unknown binding: 66,0,0/4012357153:1948014064/1948014065 [ 95.275159][ T6484] tipc: Failed to remove unknown binding: 66,0,0/4012357153:1948014064/1948014065 [ 95.314368][ T6487] IPVS: length: 239 != 24 [ 95.619155][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 95.808825][ T6520] netlink: 'syz.3.175': attribute type 15 has an invalid length. [ 95.844163][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 95.852673][ T6520] netlink: 'syz.3.175': attribute type 15 has an invalid length. [ 95.853425][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 95.870701][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 95.879713][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 96.253976][ T6543] syzkaller0: entered promiscuous mode [ 96.259568][ T6543] syzkaller0: entered allmulticast mode [ 97.509386][ T6556] : renamed from bond0 [ 97.704598][ T6566] openvswitch: netlink: IP tunnel dst address not specified [ 98.126422][ T6589] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 98.149618][ T6589] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 98.626274][ T6612] dvmrp0: entered allmulticast mode [ 98.856003][ T6623] __nla_validate_parse: 10 callbacks suppressed [ 98.856023][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 98.940505][ T6626] xt_policy: output policy not valid in PREROUTING and INPUT [ 99.082282][ T6630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.205'. [ 99.106070][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 99.107458][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 99.143370][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 99.152957][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 99.204049][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 99.366225][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 99.793840][ T6662] tipc: Enabling of bearer rejected, failed to enable media [ 99.804737][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 99.813955][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 99.832105][ T6627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.953653][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.961567][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.006661][ T6669] veth0_to_bridge: entered promiscuous mode [ 100.518885][ T6676] netlink: 'syz.3.219': attribute type 12 has an invalid length. [ 100.579311][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.604337][ T6699] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.806017][ T6706] netlink: 'syz.2.226': attribute type 14 has an invalid length. [ 100.829849][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.839335][ T6706] netlink: 'syz.2.226': attribute type 14 has an invalid length. [ 100.839384][ T6708] sctp: [Deprecated]: syz.3.225 (pid 6708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.839384][ T6708] Use struct sctp_sack_info instead [ 100.847704][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.877300][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.891642][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.231302][ T6775] bond1: Unable to set down delay as MII monitoring is disabled [ 102.242281][ T6775] bond1 (unregistering): Released all slaves [ 102.369109][ T6783] team0 (unregistering): Port device team_slave_0 removed [ 102.395889][ T6783] team0 (unregistering): Port device team_slave_1 removed [ 102.436690][ T6779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.830837][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.838196][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.918908][ T6799] netlink: 'syz.4.250': attribute type 1 has an invalid length. [ 103.434248][ T6834] syzkaller0: entered promiscuous mode [ 103.441027][ T6834] syzkaller0: entered allmulticast mode [ 103.560285][ T6845] tipc: Started in network mode [ 103.566534][ T6845] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 103.597172][ T6845] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 103.613344][ T6845] tipc: Enabled bearer , priority 10 [ 103.727844][ T6849] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 103.741314][ T6849] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 104.278939][ T6880] __nla_validate_parse: 21 callbacks suppressed [ 104.278959][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 104.374314][ T6885] netlink: 72 bytes leftover after parsing attributes in process `syz.4.277'. [ 104.603132][ T6896] x_tables: duplicate underflow at hook 2 [ 104.862822][ T5909] tipc: Node number set to 1 [ 105.077502][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.289'. [ 105.152091][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.289'. [ 105.244414][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 105.389072][ T6933] bond0: option xmit_hash_policy: invalid value (64) [ 105.427672][ T6933] bond0 (unregistering): Released all slaves [ 105.679486][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 105.716160][ T6959] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 105.719316][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 105.771605][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 105.806003][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 105.818765][ T6969] bond1: (slave gretap1): making interface the new active one [ 105.873700][ T6969] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 106.212462][ T6997] netlink: 84 bytes leftover after parsing attributes in process `syz.0.303'. [ 106.240404][ T7000] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 106.639720][ T7020] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 106.997635][ T7042] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.015976][ T7042] dvmrp0: entered allmulticast mode [ 107.501289][ T7065] x_tables: duplicate underflow at hook 3 [ 107.766250][ T7089] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 107.786339][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.797848][ T7089] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.936828][ T7097] syzkaller0: entered promiscuous mode [ 107.963727][ T7097] syzkaller0: entered allmulticast mode [ 108.002687][ T7101] x_tables: duplicate underflow at hook 1 [ 108.107036][ T7101] block nbd0: server does not support multiple connections per device. [ 108.134680][ T7101] block nbd0: shutting down sockets [ 108.187486][ T7101] x_tables: duplicate underflow at hook 1 [ 108.351445][ T7127] SET target dimension over the limit! [ 108.429142][ T7130] netlink: 'syz.4.336': attribute type 25 has an invalid length. [ 108.448440][ T7130] veth1_to_bond: entered allmulticast mode [ 108.467897][ T7130] veth1_to_bond: left allmulticast mode [ 108.631380][ T7143] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 108.729723][ T7143] bond2: entered promiscuous mode [ 108.745304][ T7143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.801913][ T7150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.840957][ T7150] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 108.868640][ T7155] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.872426][ T7150] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 108.896289][ T7150] bond2: (slave ip6gre1): making interface the new active one [ 108.903972][ T7150] ip6gre1: entered promiscuous mode [ 108.910822][ T7150] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 109.146898][ T7121] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 109.156225][ T7126] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 109.524197][ T7182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.765521][ T7196] netlink: 'syz.3.356': attribute type 21 has an invalid length. [ 109.775185][ T7191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.779781][ T7199] __nla_validate_parse: 7 callbacks suppressed [ 109.779802][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 109.797927][ T7196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.356'. [ 109.829502][ T7191] tipc: Enabling of bearer rejected, failed to enable media [ 109.893675][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 110.304619][ T5834] Bluetooth: hci0: command 0x080f tx timeout [ 110.384868][ T5834] Bluetooth: hci4: command 0x0401 tx timeout [ 110.493311][ T7242] trusted_key: syz.1.367 sent an empty control message without MSG_MORE. [ 110.856816][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 111.104916][ T7270] netlink: 148 bytes leftover after parsing attributes in process `syz.1.376'. [ 111.161997][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 111.199450][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 111.221880][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 111.241310][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 111.294892][ T7276] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 111.312167][ T7276] netlink: 'syz.4.379': attribute type 39 has an invalid length. [ 111.492173][ T7290] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 111.672590][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'. [ 112.003709][ T7327] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.484545][ T7359] netlink: 'syz.0.401': attribute type 21 has an invalid length. [ 112.664728][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.672495][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.489166][ T7408] vlan0: entered promiscuous mode [ 113.496923][ T7411] netlink: 'syz.4.421': attribute type 32 has an invalid length. [ 113.505188][ T7408] gretap0: entered promiscuous mode [ 113.648574][ T7420] xt_l2tp: invalid flags combination: 0 [ 113.677532][ T7411] bond1: option coupled_control: invalid value (170) [ 113.729802][ T7411] bond1 (unregistering): Released all slaves [ 113.847667][ T7432] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 114.207249][ T7458] x_tables: duplicate underflow at hook 2 [ 114.824962][ T7498] __nla_validate_parse: 15 callbacks suppressed [ 114.824983][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 114.931645][ T7504] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 115.103163][ T7507] netlink: 240 bytes leftover after parsing attributes in process `syz.0.446'. [ 115.193690][ T7516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.450'. [ 115.207805][ T7518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.312229][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 115.588516][ T7549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.701243][ T7556] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 115.792083][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.813884][ T7560] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 115.871840][ T7574] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 115.951037][ T7578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.997077][ T7578] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 116.092719][ T7567] syz.0.463 (7567) used greatest stack depth: 17472 bytes left [ 116.129875][ T7574] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 116.156434][ T7583] netlink: 'syz.1.467': attribute type 15 has an invalid length. [ 116.362018][ T7601] netlink: 248 bytes leftover after parsing attributes in process `syz.2.471'. [ 116.502088][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 116.514632][ T7605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.522133][ T7605] IPv6: NLM_F_CREATE should be set when creating new route [ 116.542060][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 116.569588][ T7611] ipt_REJECT: TCP_RESET invalid for non-tcp [ 116.583852][ T7605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.669427][ T7616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.478'. [ 116.682455][ T7616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.478'. [ 116.691600][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 116.943372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.575506][ T7647] netlink: 'syz.2.485': attribute type 3 has an invalid length. [ 117.733641][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.749162][ T7661] tipc: Enabling of bearer rejected, failed to enable media [ 118.055012][ T7676] bond2: Unable to set up delay as MII monitoring is disabled [ 118.109372][ T7676] bond2 (unregistering): Released all slaves [ 118.332384][ T7692] netlink: 'syz.1.498': attribute type 24 has an invalid length. [ 118.668808][ T7719] syzkaller1: entered promiscuous mode [ 118.706828][ T7719] syzkaller1: entered allmulticast mode [ 118.897934][ T7732] ipt_ECN: cannot use operation on non-tcp rule [ 119.105620][ T7746] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 119.281068][ T10] IPVS: starting estimator thread 0... [ 119.354119][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.432600][ T7763] IPVS: using max 38 ests per chain, 91200 per kthread [ 119.453570][ T7746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.771667][ T7799] FAULT_INJECTION: forcing a failure. [ 119.771667][ T7799] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 119.797031][ T7800] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 119.809774][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT(full) [ 119.809801][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.809818][ T7799] Call Trace: [ 119.809825][ T7799] [ 119.809833][ T7799] dump_stack_lvl+0xe8/0x150 [ 119.809876][ T7799] should_fail_ex+0x412/0x560 [ 119.809908][ T7799] prepare_alloc_pages+0x22a/0x650 [ 119.809937][ T7799] __alloc_frozen_pages_noprof+0x12f/0x380 [ 119.810061][ T7799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.810102][ T7799] alloc_pages_bulk_noprof+0x558/0x700 [ 119.810126][ T7799] ? __kmalloc_noprof+0x37d/0x760 [ 119.810145][ T7799] ? copy_splice_read+0x16f/0xaa0 [ 119.810168][ T7799] ? __kmalloc_noprof+0x1b8/0x760 [ 119.810191][ T7799] copy_splice_read+0x19f/0xaa0 [ 119.810228][ T7799] ? __pfx_copy_splice_read+0x10/0x10 [ 119.810254][ T7799] ? trace_kmalloc+0x2a/0x110 [ 119.810271][ T7799] ? look_up_lock_class+0x57/0x110 [ 119.810294][ T7799] ? register_lock_class+0x31/0x2e0 [ 119.810319][ T7799] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 119.810345][ T7799] ? alloc_pipe_info+0x373/0x4d0 [ 119.810366][ T7799] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 119.810385][ T7799] splice_direct_to_actor+0x4a0/0xc70 [ 119.810422][ T7799] ? __pfx_direct_splice_actor+0x10/0x10 [ 119.810457][ T7799] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 119.810484][ T7799] ? get_pid_task+0x20/0x1f0 [ 119.810509][ T7799] do_splice_direct+0x195/0x290 [ 119.810538][ T7799] ? __pfx_do_splice_direct+0x10/0x10 [ 119.810564][ T7799] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 119.810584][ T7799] ? bpf_lsm_file_permission+0x9/0x20 [ 119.810605][ T7799] ? security_file_permission+0x75/0x260 [ 119.810629][ T7799] ? rw_verify_area+0x255/0x4d0 [ 119.810654][ T7799] do_sendfile+0x535/0x7d0 [ 119.810686][ T7799] ? __pfx_do_sendfile+0x10/0x10 [ 119.810708][ T7799] ? __fget_files+0x3a0/0x420 [ 119.810735][ T7799] __se_sys_sendfile64+0x144/0x1a0 [ 119.810759][ T7799] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 119.810790][ T7799] do_syscall_64+0x14d/0xf80 [ 119.810814][ T7799] ? trace_irq_disable+0x3b/0x150 [ 119.810828][ T7799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.810846][ T7799] ? clear_bhb_loop+0x40/0x90 [ 119.810867][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.810884][ T7799] RIP: 0033:0x7f316e59c819 [ 119.810915][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.810930][ T7799] RSP: 002b:00007f316f50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 119.810964][ T7799] RAX: ffffffffffffffda RBX: 00007f316e815fa0 RCX: 00007f316e59c819 [ 119.810977][ T7799] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 119.810988][ T7799] RBP: 00007f316f50c090 R08: 0000000000000000 R09: 0000000000000000 [ 119.810999][ T7799] R10: 00000000fffc0003 R11: 0000000000000246 R12: 0000000000000001 [ 119.811010][ T7799] R13: 00007f316e816038 R14: 00007f316e815fa0 R15: 00007fffad84a308 [ 119.811038][ T7799] [ 120.128438][ T7800] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 120.248806][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.493705][ T7821] __nla_validate_parse: 11 callbacks suppressed [ 120.493727][ T7821] netlink: 808 bytes leftover after parsing attributes in process `syz.2.531'. [ 120.545084][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 120.611213][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.533'. [ 121.279320][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 121.333929][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 121.501290][ T7870] team1: entered promiscuous mode [ 121.508160][ T7870] team1: entered allmulticast mode [ 121.520671][ T7869] netlink: 'syz.0.544': attribute type 5 has an invalid length. [ 121.787837][ T7888] netlink: 'syz.0.549': attribute type 83 has an invalid length. [ 121.796459][ T7896] netlink: 'syz.0.549': attribute type 83 has an invalid length. [ 121.999512][ T7909] netlink: 'syz.2.555': attribute type 19 has an invalid length. [ 122.211080][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 122.249962][ T7922] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 122.320794][ T7922] IPv6: sit1: Disabled Multicast RS [ 122.333724][ T7922] sit1: entered allmulticast mode [ 122.697397][ T7950] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 122.878675][ T7968] bridge4: entered promiscuous mode [ 122.905536][ T7968] bridge4: entered allmulticast mode [ 123.065887][ T7984] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 123.073959][ T7984] netlink: 396 bytes leftover after parsing attributes in process `syz.3.574'. [ 123.154683][ T7985] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 123.448128][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 123.510125][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 123.597888][ T8011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.579'. [ 124.191643][ T8031] vlan2: entered allmulticast mode [ 124.205359][ T8031] bond0: entered allmulticast mode [ 124.215042][ T8040] Bluetooth: MGMT ver 1.23 [ 124.220619][ T8040] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 124.366630][ T8045] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 124.593084][ T8061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.846198][ T8065] syzkaller0: entered promiscuous mode [ 124.862005][ T8065] syzkaller0: entered allmulticast mode [ 125.618120][ T8121] xt_hashlimit: size too large, truncated to 1048576 [ 127.223417][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.231504][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.241930][ T8101] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 127.252673][ T6052] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.270766][ T8101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 127.312564][ T8101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 127.370482][ T8168] syzkaller1: entered promiscuous mode [ 127.401593][ T8168] syzkaller1: entered allmulticast mode [ 127.505178][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.650653][ T8198] x_tables: duplicate underflow at hook 2 [ 127.845408][ T8205] __nla_validate_parse: 10 callbacks suppressed [ 127.845434][ T8205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.615'. [ 127.874289][ T8211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.063617][ T6052] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 128.078841][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 128.112247][ T3531] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 128.113107][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 128.121726][ T3531] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.152686][ T3531] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.178184][ T3531] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.797489][ T8261] bridge0: port 3(macsec1) entered blocking state [ 128.804923][ T8261] bridge0: port 3(macsec1) entered disabled state [ 128.821541][ T8261] macsec1: entered allmulticast mode [ 128.847778][ T8261] macsec1: left allmulticast mode [ 129.015690][ T8279] bond2: option min_links: invalid value (18446744073709551614) [ 129.032761][ T8279] bond2: option min_links: allowed values 0 - 2147483647 [ 129.063624][ T8279] bond2 (unregistering): Released all slaves [ 129.159784][ T8291] nbd: must specify at least one socket [ 129.346781][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 129.522406][ T8314] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 129.709872][ T8324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.090332][ T8353] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 130.146214][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 130.325389][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 130.347701][ T8373] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 130.368936][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 130.393939][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 130.514106][ T8379] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 130.549197][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 130.600019][ T8384] netlink: 116 bytes leftover after parsing attributes in process `syz.3.668'. [ 130.719316][ T8391] xt_hashlimit: invalid rate [ 130.755674][ T8385] veth0_to_bond: entered promiscuous mode [ 130.761903][ T8385] veth0_to_bond: entered allmulticast mode [ 131.582849][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 131.640277][ T8437] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 131.661268][ T8437] bond2 (unregistering): Released all slaves [ 132.053313][ T8465] ip6t_srh: unknown srh match flags 4000 [ 132.120861][ T8467] bond0: entered promiscuous mode [ 132.156879][ T8467] bond_slave_0: entered promiscuous mode [ 132.171639][ T8467] bond_slave_1: entered promiscuous mode [ 132.234357][ T8467] gretap0: entered promiscuous mode [ 132.241184][ T8467] debugfs: 'hsr1' already exists in 'hsr' [ 132.259269][ T8467] Cannot create hsr debugfs directory [ 132.268388][ T8467] hsr1: entered promiscuous mode [ 132.476050][ T8489] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003 [ 132.814886][ T8505] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 132.945710][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952236][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.736447][ T8570] __nla_validate_parse: 7 callbacks suppressed [ 133.736467][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 133.772589][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 133.815048][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.841848][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 133.907246][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'. [ 134.125817][ T8589] netlink: 220 bytes leftover after parsing attributes in process `syz.2.728'. [ 134.157359][ T8588] syzkaller1: entered promiscuous mode [ 134.167985][ T8588] syzkaller1: entered allmulticast mode [ 134.170369][ T8589] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 134.453139][ T8602] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.735'. [ 134.527614][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 134.554339][ T8608] Cannot find del_set index 1 as target [ 134.600654][ T8612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.739'. [ 134.605483][ T8616] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 134.624881][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.650296][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.737'. [ 134.905732][ T8624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.743'. [ 135.121935][ T8640] vcan0: entered allmulticast mode [ 135.149729][ T8640] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 135.166935][ T8634] netlink: 'syz.2.746': attribute type 83 has an invalid length. [ 135.202731][ T8640] syzkaller0: entered promiscuous mode [ 135.208248][ T8640] syzkaller0: entered allmulticast mode [ 135.539912][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.554177][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.569085][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.579599][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.570364][ T8675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.661571][ T8699] xt_time: unknown flags 0xf4 [ 136.726526][ T8701] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 136.984491][ T8717] netlink: 'syz.4.772': attribute type 13 has an invalid length. [ 137.013484][ T8719] vcan1: entered promiscuous mode [ 137.038981][ T8719] vcan1: entered allmulticast mode [ 137.240891][ T8733] sctp: [Deprecated]: syz.0.777 (pid 8733) Use of int in maxseg socket option. [ 137.240891][ T8733] Use struct sctp_assoc_value instead [ 137.258538][ T8727] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 137.268549][ T8727] netlink: 'syz.3.776': attribute type 12 has an invalid length. [ 137.313103][ T8733] sctp: [Deprecated]: syz.0.777 (pid 8733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.313103][ T8733] Use struct sctp_sack_info instead [ 137.342690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.566732][ T8753] syzkaller1: entered promiscuous mode [ 137.587334][ T8753] syzkaller1: entered allmulticast mode [ 137.816420][ T8763] syzkaller1: entered promiscuous mode [ 137.836025][ T8763] syzkaller1: entered allmulticast mode [ 138.087558][ T8776] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.868335][ T8827] __nla_validate_parse: 17 callbacks suppressed [ 138.868365][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 138.893668][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 138.931386][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 139.037506][ T8832] gre0: entered promiscuous mode [ 139.056731][ T8832] gre0: entered allmulticast mode [ 139.258280][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 139.378640][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 139.507448][ T8857] xt_TCPMSS: Only works on TCP SYN packets [ 139.539957][ T8865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 139.581675][ T8865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 139.595790][ T8870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.817'. [ 139.596887][ T8867] syzkaller0: entered promiscuous mode [ 139.611106][ T8867] syzkaller0: entered allmulticast mode [ 139.796500][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 139.808449][ T8877] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.820'. [ 139.845867][ T8881] x_tables: duplicate underflow at hook 2 [ 139.852053][ T8882] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.924855][ T8888] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 139.988391][ T8893] netlink: 'syz.2.824': attribute type 21 has an invalid length. [ 140.019017][ T8894] netlink: 'syz.4.827': attribute type 9 has an invalid length. [ 140.163862][ T8906] netlink: 'syz.4.831': attribute type 9 has an invalid length. [ 140.281876][ T8910] h: entered promiscuous mode [ 140.299684][ T8909] bond0: entered promiscuous mode [ 140.308674][ T8909] bond_slave_0: entered promiscuous mode [ 140.322029][ T8909] bond_slave_1: entered promiscuous mode [ 140.338073][ T8909] batadv0: entered promiscuous mode [ 140.364694][ T8909] debugfs: 'hsr1' already exists in 'hsr' [ 140.379990][ T8909] Cannot create hsr debugfs directory [ 140.390371][ T8915] netlink: 'syz.3.834': attribute type 9 has an invalid length. [ 140.401820][ T8909] hsr1: entered promiscuous mode [ 140.407670][ T8915] netlink: 'syz.3.834': attribute type 6 has an invalid length. [ 140.444874][ T8910] can: request_module (can-proto-3) failed. [ 140.545640][ T8921] syzkaller1: entered promiscuous mode [ 140.551411][ T8921] syzkaller1: entered allmulticast mode [ 140.622495][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 140.670154][ T8928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.714488][ T8933] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 140.915826][ T8940] netlink: 'syz.1.839': attribute type 3 has an invalid length. [ 141.084064][ T8946] netlink: 'syz.1.842': attribute type 3 has an invalid length. [ 141.359754][ T8921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.371140][ T8921] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 141.405721][ T8921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.417774][ T8921] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 141.452166][ T8921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.468702][ T8921] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 141.519092][ T8921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.537431][ T8921] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 142.050900][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.071162][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.215984][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.252668][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.309459][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.371527][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.421270][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.502879][ T9007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.799746][ T9034] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.810658][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e30800: rx timeout, send abort [ 142.953270][ T9049] syzkaller1: entered promiscuous mode [ 142.959254][ T9049] syzkaller1: entered allmulticast mode [ 143.311446][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e30400: rx timeout, send abort [ 143.320114][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e30800: abort rx timeout. Force session deactivation [ 143.467306][ T9075] syzkaller0: entered promiscuous mode [ 143.495979][ T9075] syzkaller0: entered allmulticast mode [ 143.819739][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e30400: abort rx timeout. Force session deactivation [ 144.042158][ T9114] __nla_validate_parse: 10 callbacks suppressed [ 144.042178][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 144.177254][ T9123] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 144.370595][ T9137] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.884'. [ 144.421142][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 144.876747][ T9176] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 144.944437][ T9176] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 144.990791][ T5834] block nbd0: Receive control failed (result -32) [ 145.013725][ T5837] block nbd1: Receive control failed (result -32) [ 145.086017][ T9182] sctp: [Deprecated]: syz.3.895 (pid 9182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.086017][ T9182] Use struct sctp_sack_info instead [ 145.178282][ T9187] openvswitch: netlink: Key type 50 is out of range max 32 [ 145.643648][ T9218] IPVS: set_ctl: invalid protocol: 4 172.20.20.28:20003 [ 146.207804][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 146.286680][ T9262] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 146.347139][ T9275] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 146.349795][ T9273] syzkaller0: entered promiscuous mode [ 146.362481][ T9275] netlink: 476 bytes leftover after parsing attributes in process `syz.4.916'. [ 146.377625][ T9275] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.916'. [ 146.389873][ T9273] syzkaller0: entered allmulticast mode [ 146.408940][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 146.429738][ T9273] tc action pedit offset must be on 32 bit boundaries [ 146.463947][ T9277] netlink: 'syz.4.916': attribute type 5 has an invalid length. [ 146.482393][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 146.597721][ T9277] geneve3: entered promiscuous mode [ 146.603058][ T9288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.611391][ T9277] geneve3: entered allmulticast mode [ 146.618970][ T9287] tipc: Enabled bearer , priority 11 [ 146.641589][ T1030] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 146.677124][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 146.709593][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 146.752689][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 146.786506][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 146.881931][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 147.364785][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 147.424961][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 147.475743][ T9343] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 147.525461][ T9352] x_tables: unsorted underflow at hook 4 [ 147.533855][ T9343] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 147.563368][ T9347] netlink: 'syz.0.938': attribute type 12 has an invalid length. [ 147.602638][ T9351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.707285][ T9363] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 148.542611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.561367][ T9413] netlink: 'syz.3.959': attribute type 11 has an invalid length. [ 149.133180][ T9441] __nla_validate_parse: 7 callbacks suppressed [ 149.133199][ T9441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 149.155187][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 149.208021][ T9445] sch_tbf: burst 12 is lower than device bridge6 mtu (1514) ! [ 149.280338][ T9449] x_tables: duplicate underflow at hook 2 [ 149.289357][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'. [ 149.567198][ T24] IPVS: starting estimator thread 0... [ 149.611216][ T9469] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 149.664575][ T9467] IPVS: using max 33 ests per chain, 79200 per kthread [ 150.065317][ T9493] openvswitch: netlink: Tunnel attr 12810 out of range max 16 [ 150.105081][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 150.192178][ T9505] netlink: 43 bytes leftover after parsing attributes in process `syz.4.987'. [ 150.274153][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.990'. [ 150.299176][ T9514] netlink: 14 bytes leftover after parsing attributes in process `syz.3.990'. [ 150.315082][ T35] smc: removing ib device sy1 [ 150.325291][ T9514]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.355903][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 150.380055][ T9514]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.413704][ T9514]  (unregistering): Released all slaves [ 150.580169][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 150.611318][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.996'. [ 151.503186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.618674][ T9567] bond0: (slave gre0): refused to change device type [ 151.948948][ T9587] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 152.124163][ T9595] netlink: 'syz.4.1017': attribute type 9 has an invalid length. [ 152.262863][ T9595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.270232][ T9595] IPv6: NLM_F_CREATE should be set when creating new route [ 152.821475][ T9629] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 152.839706][ T9629] netlink: 'syz.3.1026': attribute type 2 has an invalid length. [ 152.851814][ T9629] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 152.860340][ T9629] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 153.001164][ T9635] set match dimension is over the limit! [ 153.025300][ T9635] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 153.143816][ T9643] netlink: 'syz.3.1031': attribute type 12 has an invalid length. [ 153.168376][ T9643] netlink: 'syz.3.1031': attribute type 12 has an invalid length. [ 153.184833][ T9643] netlink: 'syz.3.1031': attribute type 12 has an invalid length. [ 153.195073][ T9643] netlink: 'syz.3.1031': attribute type 12 has an invalid length. [ 153.204201][ T9643] netlink: 'syz.3.1031': attribute type 12 has an invalid length. [ 153.513989][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.543329][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.564257][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.571831][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.661824][ T9670] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 153.717526][ T9672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.728148][ T9672] team0: Device macvlan2 is already an upper device of the team interface [ 154.013871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cb39400: rx timeout, send abort [ 154.023960][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cb39400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.185827][ T9699] veth5: entered allmulticast mode [ 154.276724][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.284441][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.385444][ T9718] xt_connbytes: Forcing CT accounting to be enabled [ 154.449770][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.469737][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.629134][ T9711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.641379][ T9711] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.654356][ T9711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.671163][ T9713] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 154.689152][ T9713] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.714792][ T3531] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.726297][ T3531] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 154.741407][ T9714] team0: Device gtp0 is up. Set it down before adding it as a team port [ 154.790583][ T9723] team0: No ports can be present during mode change [ 154.800520][ T3531] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.817370][ T3531] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 154.830807][ T3531] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.840913][ T3531] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 154.890726][ T3531] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.924006][ T3531] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 155.065782][ T9738] __nla_validate_parse: 44 callbacks suppressed [ 155.065804][ T9738] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1060'. [ 155.153705][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1063'. [ 155.167340][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1062'. [ 155.196546][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 155.199797][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1062'. [ 155.227968][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 155.274196][ T9744] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1062'. [ 155.325130][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.342730][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.430052][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1067'. [ 156.197892][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 156.206893][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1080'. [ 156.234326][ T9808] veth0_to_bond: entered allmulticast mode [ 156.448898][ T9818] nbd: must specify a size in bytes for the device [ 156.599538][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.657100][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.991907][ T9853] sctp: [Deprecated]: syz.2.1097 (pid 9853) Use of int in max_burst socket option. [ 156.991907][ T9853] Use struct sctp_assoc_value instead [ 158.474977][ T9937] validate_nla: 36 callbacks suppressed [ 158.475009][ T9937] netlink: 'syz.3.1123': attribute type 7 has an invalid length. [ 158.508557][ T9937] netlink: 'syz.3.1123': attribute type 8 has an invalid length. [ 158.542733][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 158.856733][ T9960] openvswitch: netlink: Invalid VLAN frame [ 159.092957][ T9973] bond3: Removing last ns target with arp_interval on [ 159.436081][ T9999] bridge_slave_0 (unregistering): left allmulticast mode [ 159.444590][ T9999] bridge_slave_0 (unregistering): left promiscuous mode [ 159.451684][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.541314][ T9999] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 159.946735][T10029] : renamed from hsr0 (while UP) [ 159.997822][T10030] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 160.030241][T10035] netlink: 'syz.0.1148': attribute type 6 has an invalid length. [ 160.419794][T10055] __nla_validate_parse: 23 callbacks suppressed [ 160.419813][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.477994][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.509333][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.544232][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.574769][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.593374][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.604031][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.626608][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.654445][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.686001][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 160.783816][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.918892][T10080] pim6reg527: entered allmulticast mode [ 160.995586][T10085] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 161.405651][T10112] x_tables: unsorted underflow at hook 1 [ 161.444541][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 161.523673][T10121] syzkaller0: entered promiscuous mode [ 161.537015][T10121] syzkaller0: entered allmulticast mode [ 163.259844][T10155] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 163.265489][T10157] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 163.530804][T10174] syzkaller0: entered promiscuous mode [ 163.554133][T10174] syzkaller0: entered allmulticast mode [ 163.726516][T10194] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 163.730214][T10195] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 163.993930][T10211] syzkaller0: entered promiscuous mode [ 164.003863][T10211] syzkaller0: entered allmulticast mode [ 164.013413][T10211] tc action pedit offset must be on 32 bit boundaries [ 164.294223][T10226] netlink: 'syz.2.1199': attribute type 10 has an invalid length. [ 164.457486][T10234] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 164.469514][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 164.478641][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 164.486740][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 164.504455][T10234] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 164.513547][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 164.522044][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 164.530434][T10234] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 165.374060][T10294] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.463104][T10301] x_tables: duplicate underflow at hook 1 [ 165.817152][T10324] __nla_validate_parse: 101 callbacks suppressed [ 165.817169][T10324] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1229'. [ 165.875854][T10324] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1229'. [ 165.878300][T10331] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1230'. [ 165.916726][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 165.935238][T10330] syzkaller0: entered promiscuous mode [ 165.942749][T10318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.947738][T10330] syzkaller0: entered allmulticast mode [ 165.957203][T10334] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1230'. [ 166.128146][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 166.164620][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 166.182731][T10342] Cannot find del_set index 4 as target [ 166.218161][T10344] ipvlan2: entered allmulticast mode [ 166.284069][T10344] syz_tun: entered allmulticast mode [ 166.646609][T10372] vlan1: entered promiscuous mode [ 166.651780][T10372] bridge0: entered promiscuous mode [ 166.930647][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 167.005604][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 167.036824][T10403] netlink: 'syz.4.1250': attribute type 11 has an invalid length. [ 167.234184][T10415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1254'. [ 167.799670][T10462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.140288][T10474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.341501][T10495] delete_channel: no stack [ 168.392234][T10492] syzkaller0: entered promiscuous mode [ 168.400137][T10492] syzkaller0: entered allmulticast mode [ 168.789228][T10525] block nbd0: Unsupported socket: should be TCP or UNIX. [ 169.189225][T10541] validate_nla: 132 callbacks suppressed [ 169.189242][T10541] netlink: 'syz.2.1290': attribute type 58 has an invalid length. [ 170.256540][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.337393][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.349330][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.368660][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.822783][T10716] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 171.877885][T10721] __nla_validate_parse: 23 callbacks suppressed [ 171.877904][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 172.027201][T10733] syzkaller0: entered promiscuous mode [ 172.037667][T10733] syzkaller0: entered allmulticast mode [ 172.073568][T10735] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1338'. [ 172.267174][T10749] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 172.514566][T10765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.580320][T10765] bridge7: entered promiscuous mode [ 172.603214][T10765] bridge7: entered allmulticast mode [ 172.622968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.677021][T10755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.762685][T10765] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 172.770500][T10765] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1343'. [ 172.966273][T10781] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 172.975799][T10781] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 173.141345][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 173.240830][T10770] wireguard0: entered promiscuous mode [ 173.286186][T10789] IPVS: length: 24 != 30744 [ 173.550247][T10815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1358'. [ 173.577022][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 173.766580][T10825] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 173.772150][T10829] gtp0: entered promiscuous mode [ 173.789700][T10829] gtp0: entered allmulticast mode [ 173.841550][T10825] bond3: entered promiscuous mode [ 173.847449][T10825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.887684][T10826] bond3: (slave bridge6): making interface the new active one [ 173.897743][T10831] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 173.966521][T10826] bridge6: entered promiscuous mode [ 173.995058][T10826] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 174.153133][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 174.240947][T10848] erspan0: entered promiscuous mode [ 174.255760][T10848] macvtap1: entered promiscuous mode [ 174.272127][T10848] macvtap1: entered allmulticast mode [ 174.285796][T10848] erspan0: entered allmulticast mode [ 174.971982][T10888] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 175.201063][T10901] netlink: 'syz.0.1381': attribute type 2 has an invalid length. [ 175.227308][T10901] netlink: 'syz.0.1381': attribute type 5 has an invalid length. [ 175.264318][T10902] veth0: entered promiscuous mode [ 175.281426][T10909] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1385'. [ 175.291324][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 175.303990][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1386'. [ 175.388462][T10902] bridge8: port 1(veth9) entered blocking state [ 175.405000][T10902] bridge8: port 1(veth9) entered disabled state [ 175.411722][T10902] veth9: entered allmulticast mode [ 175.426617][T10902] veth9: entered promiscuous mode [ 175.450670][T10910] bridge8: port 2(veth11) entered blocking state [ 175.458137][T10910] bridge8: port 2(veth11) entered disabled state [ 175.464832][T10910] veth11: entered allmulticast mode [ 175.471585][T10910] veth11: entered promiscuous mode [ 175.497046][T10900] veth0: left promiscuous mode [ 175.523150][T10914] syzkaller1: entered promiscuous mode [ 175.542804][T10914] syzkaller1: entered allmulticast mode [ 175.684924][T10929] xt_bpf: check failed: parse error [ 175.698711][T10929] xt_bpf: check failed: parse error [ 175.890731][T10942] gretap0: entered promiscuous mode [ 175.906200][T10942] vlan2: entered promiscuous mode [ 176.346607][T10972] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 176.773589][T11003] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 176.876309][T11001] sock: sock_timestamping_bind_phc: sock not bind to device [ 177.261270][T11041] __nla_validate_parse: 15 callbacks suppressed [ 177.261288][T11041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1426'. [ 177.749464][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 177.858655][T11078] netlink: 'syz.4.1437': attribute type 9 has an invalid length. [ 177.879581][T11078] netlink: 'syz.4.1437': attribute type 11 has an invalid length. [ 177.900754][T11078] netlink: 'syz.4.1437': attribute type 12 has an invalid length. [ 177.940440][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1438'. [ 177.946304][T11078] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1437'. [ 177.981904][T11085] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 177.999778][T11089] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1439'. [ 178.009956][T11086] ip6gretap1: entered promiscuous mode [ 178.035414][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1440'. [ 178.140230][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 178.714758][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 178.739689][T11110] af_packet: tpacket_rcv: packet too big, clamped from 280 to 4294967272. macoff=96 [ 178.750294][T11110] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1445'. [ 178.763588][T11110] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 178.773601][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 179.569659][T11153] team0: Port device team_slave_0 removed [ 179.617768][T11161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.771434][T11168] xt_hashlimit: size too large, truncated to 1048576 [ 179.972593][T11191] s5: renamed from vlan1 [ 180.008466][T11194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.417775][T11222] validate_nla: 4 callbacks suppressed [ 180.417793][T11222] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 180.579651][T11222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.637085][T11231] bond4: (slave bridge2): making interface the new active one [ 180.685986][T11231] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 181.084249][T11251] IPVS: length: 239 != 24 [ 181.096081][T11251] xt_TCPMSS: Only works on TCP SYN packets [ 181.205357][T11258] netlink: 'syz.4.1486': attribute type 7 has an invalid length. [ 181.232668][T11258] netlink: 'syz.4.1486': attribute type 8 has an invalid length. [ 181.655137][T11293] ip6t_REJECT: ECHOREPLY is not supported [ 182.088982][T11324] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.629036][T11349] __nla_validate_parse: 15 callbacks suppressed [ 182.629055][T11349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1518'. [ 183.194333][T11384] netlink: 212112 bytes leftover after parsing attributes in process `syz.0.1529'. [ 183.335147][T11391] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1532'. [ 183.449013][T11401] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 183.577240][T11413] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1538'. [ 183.597195][T11401] bond5: entered promiscuous mode [ 183.611147][T11401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.737048][T11401] bond5: (slave bridge3): making interface the new active one [ 183.744957][T11401] bridge3: entered promiscuous mode [ 183.751772][T11401] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 183.809629][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 183.817686][T11424] raw_sendmsg: syz.3.1543 forgot to set AF_INET. Fix it! [ 183.927882][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 183.960624][T11422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1543'. [ 183.980780][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 183.992100][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 184.177177][T11445] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 184.457873][T11474] tipc: Can't bind to reserved service type 1 [ 184.649767][T11485] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 184.864366][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 185.015869][T11510] delete_channel: no stack [ 185.041229][T11511] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 185.098044][T11514] netlink: 'syz.4.1567': attribute type 63 has an invalid length. [ 185.134157][T11514] netlink: 'syz.4.1567': attribute type 63 has an invalid length. [ 185.377866][T11534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.976074][T11571] can: request_module (can-proto-0) failed. [ 186.153238][T11590] netlink: 'syz.1.1589': attribute type 8 has an invalid length. [ 186.237173][T11587] netlink: 'syz.2.1588': attribute type 7 has an invalid length. [ 187.125082][T11644] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.202441][T11644] team0: No ports can be present during mode change [ 187.832065][T11693] netlink: zone id is out of range [ 187.844053][T11693] netlink: zone id is out of range [ 187.860395][T11693] netlink: zone id is out of range [ 187.881071][T11693] netlink: zone id is out of range [ 187.899986][T11693] netlink: zone id is out of range [ 187.912749][T11693] netlink: zone id is out of range [ 187.919281][T11693] netlink: zone id is out of range [ 187.928133][T11693] netlink: zone id is out of range [ 187.976644][T11700] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 187.988887][T11700] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 188.089437][T11713] __nla_validate_parse: 110 callbacks suppressed [ 188.089458][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 188.131000][T11713] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 188.142045][T11713] netlink: 'syz.3.1621': attribute type 4 has an invalid length. [ 188.155299][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1621'. [ 188.165645][T11713] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 188.174055][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1621'. [ 188.183437][T11713] batadv0: entered promiscuous mode [ 188.188876][T11713] batadv0: entered allmulticast mode [ 188.195300][T11713] bridge0: port 3(batadv0) entered blocking state [ 188.202090][T11713] bridge0: port 3(batadv0) entered disabled state [ 188.263614][ T3531] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 188.273961][ T3531] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 188.297400][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 188.310832][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 188.431551][T11726] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1627'. [ 188.489050][T11733] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1627'. [ 188.562536][T11735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1628'. [ 188.842708][T11752] netlink: 'syz.1.1632': attribute type 39 has an invalid length. [ 188.969970][T11763] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1637'. [ 189.129122][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 189.212777][T11780] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.261551][T11780] syzkaller0: entered promiscuous mode [ 189.287606][T11780] syzkaller0: entered allmulticast mode [ 190.154168][T11835] tipc: Enabled bearer , priority 0 [ 190.228138][T11844] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 190.588687][T11865] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 190.600649][T11870] net_ratelimit: 55 callbacks suppressed [ 190.600667][T11870] openvswitch: netlink: IP tunnel dst address not specified [ 190.619814][T11865] netlink: 'syz.0.1666': attribute type 11 has an invalid length. [ 190.866708][T11879] gtp0: entered promiscuous mode [ 190.885083][T11879] gtp0: entered allmulticast mode [ 191.245561][T11905] geneve2: entered allmulticast mode [ 191.287783][T11905] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 191.310828][T11920] syzkaller0: entered promiscuous mode [ 191.355243][T11920] syzkaller0: entered allmulticast mode [ 191.566822][T11933] netlink: 'syz.3.1687': attribute type 3 has an invalid length. [ 191.593526][T11938] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 191.594682][T11933] netlink: 'syz.3.1687': attribute type 5 has an invalid length. [ 191.695244][T11938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.739808][T11944] vlan1: entered allmulticast mode [ 191.773425][T11944] bond4: entered allmulticast mode [ 192.436524][T11994] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 192.466546][T11994] netlink: 'syz.4.1696': attribute type 2 has an invalid length. [ 192.481344][T11994] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 192.535069][T11998] tipc: Enabled bearer , priority 0 [ 192.635925][T11998] syzkaller0: entered promiscuous mode [ 192.653908][T11998] syzkaller0: entered allmulticast mode [ 192.665454][T11998] tipc: Resetting bearer [ 192.674164][T11997] tipc: Resetting bearer [ 192.889116][T12009] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 193.182117][T12016] __nla_validate_parse: 16 callbacks suppressed [ 193.182138][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1708'. [ 193.199561][T12016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1708'. [ 193.254725][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 194.305945][T11997] tipc: Disabling bearer [ 194.319361][T12009] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 194.390123][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.425681][T12018] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 194.434367][T12020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.579269][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 194.606781][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 194.628677][T12033] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.638527][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 194.653173][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 194.801613][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 194.810932][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 194.829753][T12040] bridge11: entered promiscuous mode [ 194.858533][T12040] bridge11: entered allmulticast mode [ 195.166338][T12073] syzkaller1: entered promiscuous mode [ 195.171955][T12073] syzkaller1: entered allmulticast mode [ 195.429461][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 195.577642][T12104] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 195.586337][T12104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.662745][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.225271][T12137] block nbd2: Unsupported socket: should be TCP or UNIX. [ 196.435787][T12149] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.597500][T12153] bridge0: entered allmulticast mode [ 196.652272][T12153] bond6: entered promiscuous mode [ 196.696839][T12159] tipc: Started in network mode [ 196.722566][T12159] tipc: Node identity a6ccf293a11c, cluster identity 4711 [ 196.730467][T12159] tipc: Enabled bearer , priority 0 [ 196.908830][T12156] tipc: Disabling bearer [ 196.959047][T12183] syzkaller1: entered promiscuous mode [ 196.965811][T12183] syzkaller1: entered allmulticast mode [ 197.062778][T12190] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 197.098354][T12190] bond5: entered promiscuous mode [ 197.116582][T12190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.199577][ T1030] tipc: Subscription rejected, illegal request [ 197.217386][T12198] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.239537][T12198] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 197.267823][T12198] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 197.674273][T12237] syzkaller0: entered promiscuous mode [ 197.679801][T12237] syzkaller0: entered allmulticast mode [ 197.799915][T12243] netlink: 'syz.1.1778': attribute type 2 has an invalid length. [ 197.810075][T12243] netlink: 'syz.1.1778': attribute type 2 has an invalid length. [ 197.893807][T12247] netlink: 'syz.1.1780': attribute type 4 has an invalid length. [ 198.179251][T12259] bond7: entered promiscuous mode [ 198.188665][T12270] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 198.197234][T12270] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 198.214944][T12270] __nla_validate_parse: 34 callbacks suppressed [ 198.214966][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 198.240454][T12266] bond8: option mode: invalid value (133) [ 198.254462][T12266] bond8 (unregistering): Released all slaves [ 198.310991][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 198.329338][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 198.389008][T12281] vlan2: entered allmulticast mode [ 198.413226][T12281] bridge3: entered allmulticast mode [ 198.464999][T12270] bridge3: port 1(bond5) entered blocking state [ 198.471703][T12270] bridge3: port 1(bond5) entered disabled state [ 198.479118][T12270] bond5: entered allmulticast mode [ 198.487551][T12270] bond5: entered promiscuous mode [ 198.644821][T12295] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1796'. [ 198.882858][T12311] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 198.890921][T12311] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1802'. [ 198.897526][T12310] ip6tnl3: entered allmulticast mode [ 198.914257][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 198.960554][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 199.153548][T12327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.209887][T12327] bond9 (unregistering): Released all slaves [ 199.267514][T12335] x_tables: duplicate underflow at hook 1 [ 199.583976][T12349] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1812'. [ 199.641473][T12354] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1815'. [ 199.688626][T12359] bond9: option min_links: invalid value (18446744073709551614) [ 199.696496][T12359] bond9: option min_links: allowed values 0 - 2147483647 [ 199.730044][T12359] bond9 (unregistering): Released all slaves [ 199.790461][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 199.854939][T12369] xt_hashlimit: size too large, truncated to 1048576 [ 199.906516][T12372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.966179][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.201745][T12390] SET target dimension over the limit! [ 200.599181][T12411] netlink: 'syz.1.1834': attribute type 16 has an invalid length. [ 201.494011][ T30] audit: type=1107 audit(1776191771.133:2): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 201.495665][T12460] netlink: 'syz.3.1848': attribute type 4 has an invalid length. [ 202.068719][T12494] x_tables: duplicate underflow at hook 3 [ 202.380879][T12509] sctp: [Deprecated]: syz.0.1858 (pid 12509) Use of int in max_burst socket option. [ 202.380879][T12509] Use struct sctp_assoc_value instead [ 202.644437][T12522] netlink: 'syz.2.1861': attribute type 2 has an invalid length. [ 202.645278][T12523] netlink: 'syz.2.1861': attribute type 2 has an invalid length. [ 203.122989][T12552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.309669][T12564] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 203.476238][T12574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.775199][T12593] __nla_validate_parse: 15 callbacks suppressed [ 203.775218][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 203.793645][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 203.797591][T12594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1884'. [ 204.098014][T12614] syzkaller0: entered promiscuous mode [ 204.112644][T12614] syzkaller0: entered allmulticast mode [ 204.413332][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 204.423972][T12618] tc_dump_action: action bad kind [ 204.640124][T12644] netlink: 'syz.2.1895': attribute type 16 has an invalid length. [ 204.675701][T12644] netlink: 'syz.2.1895': attribute type 17 has an invalid length. [ 204.688124][T12644] gre0: left promiscuous mode [ 204.694581][T12644] gre0: left allmulticast mode [ 204.721208][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.728455][T12644] bridge0: port 2(bridge_slave_1) entered listening state [ 204.735894][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.743113][T12644] bridge0: port 1(bridge_slave_0) entered listening state [ 204.777467][T12644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.960707][T12646] netlink: 'syz.0.1896': attribute type 3 has an invalid length. [ 204.994948][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1899'. [ 205.008963][T12646] netlink: 'syz.0.1896': attribute type 3 has an invalid length. [ 205.014766][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 205.093404][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 205.349783][T12676] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 205.432840][T12676] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 205.440632][T12676] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1904'. [ 205.484769][T12684] netlink: 'syz.3.1906': attribute type 7 has an invalid length. [ 205.494416][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1904'. [ 205.504021][T12681] openvswitch: netlink: Flow key attr not present in new flow. [ 205.643926][T12690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 205.916350][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 205.959905][T12715] lo: entered allmulticast mode [ 205.974436][T12715] lo: left allmulticast mode [ 206.130334][T12722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.147089][T12724] openvswitch: netlink: IP tunnel TTL not specified. [ 206.472064][T12734] syzkaller0: entered promiscuous mode [ 206.477803][T12734] syzkaller0: entered allmulticast mode [ 207.038317][T12750] syzkaller0: entered promiscuous mode [ 207.047718][T12750] syzkaller0: entered allmulticast mode [ 207.201578][T12775] netlink: 'syz.4.1931': attribute type 12 has an invalid length. [ 207.758394][T12810] validate_nla: 3 callbacks suppressed [ 207.758411][T12810] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 207.787182][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.866033][T12810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.867422][T12824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.880013][T12816] IPVS: Unknown mcast interface: vcan0 [ 207.882063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.893078][T12825] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 207.897295][T12824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.921865][T12824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.930794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.944164][T12824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.144931][T12830] bond3: (slave erspan0): Device is not bonding slave [ 208.155489][T12830] bond3: option active_slave: invalid value (erspan0) [ 208.175175][T12830] bond3 (unregistering): Released all slaves [ 208.887158][T12887] __nla_validate_parse: 10 callbacks suppressed [ 208.887188][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 209.297962][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 209.439686][T12911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.901611][T12952] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 210.192282][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 210.221083][T12961] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.256288][T12961] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 210.263466][ T10] IPVS: starting estimator thread 0... [ 210.304615][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 210.375097][T12977] IPVS: using max 35 ests per chain, 84000 per kthread [ 210.664610][T13002] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1995'. [ 210.789936][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 210.813038][T13013] netlink: 'syz.0.1997': attribute type 2 has an invalid length. [ 210.879843][T13017] net_ratelimit: 13 callbacks suppressed [ 210.879865][T13017] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.899066][T13021] IPVS: length: 226 != 8 [ 211.197098][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 211.389435][T13046] netem: change failed [ 211.439483][T13022] infiniband sy1: set active [ 211.444459][T13022] infiniband sy1: added bond0 [ 211.472981][T13053] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 211.483403][T13022] RDS/IB: sy1: added [ 211.487485][T13022] smc: adding ib device sy1 with port count 1 [ 211.497144][T13022] smc: ib device sy1 port 1 has no pnetid [ 211.542170][T13053] bond7: entered promiscuous mode [ 211.547338][T13053] bond7: entered allmulticast mode [ 211.553466][T13053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 211.628585][T13053] veth3: entered promiscuous mode [ 211.634202][T13053] veth3: entered allmulticast mode [ 211.640018][T13053] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 211.670524][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 211.837124][T13069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2011'. [ 212.293897][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 212.437681][T13096] netlink: 'syz.2.2020': attribute type 21 has an invalid length. [ 212.451848][T13098] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 212.483014][T13096] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 212.496471][T13103] netlink: 'syz.2.2020': attribute type 21 has an invalid length. [ 212.506974][T13096] bond7 (unregistering): Released all slaves [ 212.575876][T13103] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 212.590409][T13106] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 212.630967][T13103] bond7 (unregistering): Released all slaves [ 212.654839][T13106] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 212.819250][T13117] netlink: 'syz.3.2025': attribute type 9 has an invalid length. [ 212.853097][T13117] netlink: 'syz.3.2025': attribute type 11 has an invalid length. [ 212.862091][T13117] netlink: 'syz.3.2025': attribute type 12 has an invalid length. [ 213.143893][T13135] veth0: entered promiscuous mode [ 213.170545][T13135] veth0: left promiscuous mode [ 213.375570][T13154] vlan1: entered allmulticast mode [ 213.380744][T13154] bond0: entered allmulticast mode [ 213.411457][T13154] bond_slave_0: entered allmulticast mode [ 213.418153][T13154] bond_slave_1: entered allmulticast mode [ 213.426212][T13154] batadv0: entered allmulticast mode [ 213.483923][T13156] bond0 (unregistering): left promiscuous mode [ 213.490317][T13156] bond_slave_0: left promiscuous mode [ 213.496282][T13156] bond_slave_1: left promiscuous mode [ 213.502074][T13156] batadv0: left promiscuous mode [ 213.510511][T13156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.520857][T13156] bond_slave_0: left allmulticast mode [ 213.535042][T13156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.544221][T13156] bond_slave_1: left allmulticast mode [ 213.561406][T13156] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 213.581252][T13156] batadv0: left allmulticast mode [ 213.594100][T13156] bond0 (unregistering): Released all slaves [ 213.993594][T13183] __nla_validate_parse: 6 callbacks suppressed [ 213.993617][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 214.047021][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 214.171911][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2045'. [ 214.185876][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 214.259245][T13192] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2047'. [ 214.295174][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 214.323577][T13194] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2047'. [ 214.342450][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 214.789808][T13226] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2055'. [ 214.826911][T13226] bridge_slave_1: default FDB implementation only supports local addresses [ 214.993300][T13237] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2058'. [ 215.154789][T13243] wg1: entered promiscuous mode [ 215.168619][T13245] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 215.177911][T13243] wg1: entered allmulticast mode [ 215.224769][T13245] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 215.317965][T13245] 8021q: adding VLAN 0 to HW filter on device bond9 [ 215.770508][T13197] syz.2.2049 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 215.842054][T13197] CPU: 1 UID: 0 PID: 13197 Comm: syz.2.2049 Not tainted syzkaller #0 PREEMPT(full) [ 215.842082][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.842094][T13197] Call Trace: [ 215.842100][T13197] [ 215.842109][T13197] dump_stack_lvl+0xe8/0x150 [ 215.842139][T13197] dump_header+0xd3/0x4c0 [ 215.842164][T13197] oom_kill_process+0x3ab/0x970 [ 215.842190][T13197] out_of_memory+0x106c/0x1410 [ 215.842210][T13197] ? percpu_ref_put+0x19/0x180 [ 215.842235][T13197] ? __pfx___mutex_lock+0x10/0x10 [ 215.842270][T13197] ? __pfx_out_of_memory+0x10/0x10 [ 215.842291][T13197] ? do_raw_spin_unlock+0xf5/0x210 [ 215.842318][T13197] try_charge_memcg+0xc53/0x1560 [ 215.842357][T13197] ? __pfx_try_charge_memcg+0x10/0x10 [ 215.842393][T13197] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 215.842420][T13197] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 215.842446][T13197] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 215.842474][T13197] __swap_cache_prepare_and_add+0xe8/0x760 [ 215.842512][T13197] ? page_rmappable_folio+0x9a/0x170 [ 215.842547][T13197] swap_cache_alloc_folio+0xf1/0x240 [ 215.842582][T13197] swap_cluster_readahead+0x369/0x690 [ 215.842609][T13197] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 215.842642][T13197] ? get_vma_policy+0x27b/0x3c0 [ 215.842671][T13197] swapin_readahead+0x196/0xc50 [ 215.842699][T13197] ? __pfx_swapin_readahead+0x10/0x10 [ 215.842720][T13197] ? swap_table_get+0x1e/0x260 [ 215.842748][T13197] ? swap_table_get+0x1e/0x260 [ 215.842774][T13197] ? swap_table_get+0x1e/0x260 [ 215.842803][T13197] ? swap_table_get+0x216/0x260 [ 215.842833][T13197] ? swap_cache_get_folio+0x513/0x520 [ 215.842886][T13197] do_swap_page+0x56f/0x5a20 [ 215.842937][T13197] ? do_swap_page+0x127/0x5a20 [ 215.842965][T13197] ? __pfx_do_swap_page+0x10/0x10 [ 215.842992][T13197] ? __pte_offset_map+0x1ae/0x240 [ 215.843016][T13197] ? pte_offset_map_rw_nolock+0xea/0x160 [ 215.843044][T13197] handle_mm_fault+0x12d2/0x3310 [ 215.843087][T13197] ? handle_mm_fault+0xee/0x3310 [ 215.843125][T13197] ? __pfx_handle_mm_fault+0x10/0x10 [ 215.843154][T13197] ? lock_vma_under_rcu+0x45a/0x500 [ 215.843177][T13197] ? __pfx___sys_bpf+0x10/0x10 [ 215.843220][T13197] do_user_addr_fault+0xa73/0x1340 [ 215.843254][T13197] ? rcu_is_watching+0x15/0xb0 [ 215.843282][T13197] ? trace_page_fault_user+0x84/0x210 [ 215.843311][T13197] exc_page_fault+0x6a/0xc0 [ 215.843341][T13197] asm_exc_page_fault+0x26/0x30 [ 215.843360][T13197] RIP: 0033:0x7f316e59c82b [ 215.843381][T13197] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 215.843400][T13197] RSP: 002b:00007f316f50c028 EFLAGS: 00010217 [ 215.843419][T13197] RAX: 000000000000000c RBX: 00007f316e815fa0 RCX: ffffffffffffffe8 [ 215.843434][T13197] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 215.843447][T13197] RBP: 00007f316e632c91 R08: 0000000000000000 R09: 0000000000000000 [ 215.843459][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.843471][T13197] R13: 00007f316e816038 R14: 00007f316e815fa0 R15: 00007fffad84a308 [ 215.843504][T13197] [ 216.233231][T13270] team0: Port device gretap2 added [ 216.370943][T13197] memory: usage 262220kB, limit 307200kB, failcnt 637 [ 216.377942][T13197] memory+swap: usage 261364kB, limit 9007199254740988kB, failcnt 0 [ 216.386219][T13197] kmem: usage 259732kB, limit 9007199254740988kB, failcnt 0 [ 216.393835][T13197] Memory cgroup stats for /syz2: [ 216.394300][T13197] cache 0 [ 216.402234][T13197] rss 0 [ 216.405314][T13197] rss_huge 0 [ 216.408522][T13197] shmem 0 [ 216.411475][T13197] mapped_file 0 [ 216.415279][T13197] dirty 0 [ 216.418235][T13197] writeback 0 [ 216.421626][T13197] workingset_refault_anon 4 [ 216.426486][T13197] workingset_refault_file 9 [ 216.431094][T13197] swap 188416 [ 216.443528][T13197] swapcached 217088 [ 216.447384][T13197] pgpgin 30480 [ 216.450914][T13197] pgpgout 30477 [ 216.455083][T13197] pgfault 63342 [ 216.459042][T13197] pgmajfault 8 [ 216.464066][T13197] inactive_anon 12288 [ 216.468091][T13197] active_anon 0 [ 216.487711][T13197] inactive_file 0 [ 216.507226][T13197] active_file 0 [ 216.524178][T13197] unevictable 0 [ 216.537940][T13197] hierarchical_memory_limit 314572800 [ 216.558751][T13197] hierarchical_memsw_limit 9223372036854771712 [ 216.615048][T13197] total_cache 0 [ 216.634207][T13197] total_rss 0 [ 216.658140][T13197] total_rss_huge 0 [ 216.670854][T13197] total_shmem 0 [ 216.739473][T13197] total_mapped_file 0 [ 216.748394][T13197] total_dirty 0 [ 216.767229][T13197] total_writeback 0 [ 216.781253][T13197] total_workingset_refault_anon 4 [ 216.791367][T13296] bridge_slave_1: left allmulticast mode [ 216.822492][T13296] bridge_slave_1: left promiscuous mode [ 216.822540][T13197] total_workingset_refault_file 9 [ 216.829062][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.840064][T13197] total_swap 188416 [ 216.851322][T13197] total_swapcached 217088 [ 216.869055][T13197] total_pgpgin 30480 [ 216.879394][T13197] total_pgpgout 30477 [ 216.888163][T13197] total_pgfault 63342 [ 216.929751][T13197] total_pgmajfault 8 [ 216.935978][T13296] bridge_slave_0: left allmulticast mode [ 216.936473][T13197] total_inactive_anon 12288 [ 216.941738][T13296] bridge_slave_0: left promiscuous mode [ 216.955612][T13197] total_active_anon 0 [ 216.964782][T13197] total_inactive_file 0 [ 216.976556][T13197] total_active_file 0 [ 216.986098][T13304] netlink: 'syz.1.2081': attribute type 9 has an invalid length. [ 216.994632][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.994692][T13197] total_unevictable 0 [ 217.008434][T13304] netlink: 'syz.1.2081': attribute type 11 has an invalid length. [ 217.017003][T13197] anon_cost 0 [ 217.020822][T13197] file_cost 0 [ 217.041304][T13304] netlink: 'syz.1.2081': attribute type 12 has an invalid length. [ 217.054479][T13197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2049,pid=13196,uid=0 [ 217.072688][T13197] Memory cgroup out of memory: Killed process 13197 (syz.2.2049) total-vm:102288kB, anon-rss:1260kB, file-rss:22788kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 217.689469][T13330] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 217.829957][T13338] syzkaller0: entered promiscuous mode [ 217.862257][T13338] syzkaller0: entered allmulticast mode [ 218.728537][T13370] netlink: 'syz.4.2103': attribute type 14 has an invalid length. [ 218.766281][T13370] netlink: 'syz.4.2103': attribute type 13 has an invalid length. [ 219.064200][T13393] __nla_validate_parse: 13 callbacks suppressed [ 219.064220][T13393] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2109'. [ 219.144073][T13393] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 219.466859][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 219.477032][T13420] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2115'. [ 219.537066][T13419] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2116'. [ 219.609493][T13425] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 219.755817][T13433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.901806][T13446] delete_channel: no stack [ 219.920694][T13449] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 219.932712][T13446] atomic_op ffff888058e25198 conn xmit_atomic 0000000000000000 [ 219.940864][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2126'. [ 219.942265][T13449] netlink: 'syz.0.2125': attribute type 2 has an invalid length. [ 220.062970][T13454] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 220.084585][T13454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2128'. [ 220.118715][T13459] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 220.178758][T13459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.201004][T13459] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2130'. [ 220.516746][T13477] nbd2: detected capacity change from 0 to 63 [ 220.587887][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 220.605954][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 220.700223][T13496] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20000 [ 220.753279][T13499] netlink: 'syz.2.2140': attribute type 1 has an invalid length. [ 220.761228][T13499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2140'. [ 220.822564][ T5837] block nbd2: Receive control failed (result -104) [ 220.824001][ T5834] block nbd2: Receive control failed (result -32) [ 221.164378][T13516] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 221.301705][T13516] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 221.468608][T13546] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 221.634079][T13546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.797317][T13551] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 221.896469][T13556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.906971][T13556] bond0: (slave bond8): Enslaving as an active interface with a down link [ 221.990870][T13578] v: entered promiscuous mode [ 222.050305][T13580] team0: Device ipvlan1 failed to register rx_handler [ 222.259259][T13594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.321336][T13604] bond5: option mode: unable to set because the bond device is up [ 222.404941][T13611] bond0: (slave wlan1): Opening slave failed [ 222.421420][T13610] bond0: (slave wlan1): Opening slave failed [ 222.511252][T13613] bond10: entered promiscuous mode [ 222.521126][T13613] 8021q: adding VLAN 0 to HW filter on device bond10 [ 222.624479][T13613] ipvlan2: entered allmulticast mode [ 222.629866][T13613] bond10: entered allmulticast mode [ 222.714893][T13613] bond10: (slave bridge4): making interface the new active one [ 222.734558][T13613] bridge4: entered promiscuous mode [ 222.751443][T13613] bridge4: entered allmulticast mode [ 222.768891][T13613] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 222.835842][T13638] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 222.908619][T13638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.218564][T13664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.401839][T13677] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 223.416133][T13677] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 223.979711][T13714] bond7: (slave gre0): Device is not bonding slave [ 223.992728][T13714] bond7: option active_slave: invalid value (gre0) [ 224.003674][T13714] bond7 (unregistering): Released all slaves [ 224.033516][T13711] validate_nla: 12 callbacks suppressed [ 224.033538][T13711] netlink: 'syz.0.2204': attribute type 12 has an invalid length. [ 224.066895][T13718] sit1: entered promiscuous mode [ 224.072063][T13718] sit1: entered allmulticast mode [ 224.143446][T13728] __nla_validate_parse: 21 callbacks suppressed [ 224.143467][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 224.263961][T13735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2209'. [ 224.320073][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 224.369098][T13738] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 224.431664][T13738] bond7: entered promiscuous mode [ 224.443430][T13738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.709850][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 224.717848][ T30] audit: type=1800 audit(1776191794.353:3): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2217" name="memory.events" dev="tmpfs" ino=2347 res=0 errno=0 [ 224.731891][T13763] sctp: [Deprecated]: syz.2.2217 (pid 13763) Use of int in max_burst socket option. [ 224.731891][T13763] Use struct sctp_assoc_value instead [ 224.763114][ T30] audit: type=1804 audit(1776191794.363:4): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2217" name="/newroot/456/memory.events" dev="tmpfs" ino=2347 res=1 errno=0 [ 224.859857][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2219'. [ 224.978250][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 225.045457][T13780] can: request_module (can-proto-0) failed. [ 225.147975][T13780] "syz.4.2223" (13780) uses obsolete ecb(arc4) skcipher [ 225.193533][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 225.852925][T13807] tipc: Enabling of bearer rejected, failed to enable media [ 225.925385][T13808] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2230'. [ 225.944033][T13810] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2231'. [ 225.967835][T13810] bridge_slave_1: default FDB implementation only supports local addresses [ 226.003026][T13812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2232'. [ 226.068699][ T30] audit: type=1800 audit(1776191795.713:5): pid=13814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2231" name="memory.events" dev="tmpfs" ino=2131 res=0 errno=0 [ 226.216471][T13825] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 226.380580][T13825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.465000][T13851] netlink: 'syz.2.2240': attribute type 11 has an invalid length. [ 226.470131][T13847] bond5: (slave ip6gretap0): making interface the new active one [ 226.482160][T13847] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 226.494001][T13851] netlink: 'syz.2.2240': attribute type 11 has an invalid length. [ 226.649438][T13856] team0: Device gtp0 is up. Set it down before adding it as a team port [ 226.744021][T13866] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 227.438308][T13912] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 227.496515][T13918] openvswitch: netlink: IP tunnel dst address not specified [ 227.997100][T13948] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 228.556957][T13969] syz_tun: entered allmulticast mode [ 229.034500][T13992] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 229.047271][T13992] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 229.169809][T14009] __nla_validate_parse: 12 callbacks suppressed [ 229.169831][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 229.253107][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 229.274480][T14014] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 229.332711][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 229.467180][T14020] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 229.506727][T14020] bond9 (unregistering): Released all slaves [ 229.587721][T14022] bond8: (slave gretap1): making interface the new active one [ 229.613221][T14022] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 229.808988][T14047] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 229.817522][T14047] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 229.861545][T14049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2308'. [ 229.879053][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2310'. [ 229.890530][T14049] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2308'. [ 229.893611][T14046] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2305'. [ 229.930946][T14055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.068202][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2315'. [ 230.078145][T14063] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2315'. [ 230.098855][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 230.101738][T14066] netlink: 'syz.0.2312': attribute type 2 has an invalid length. [ 230.148804][T14066] 9: entered promiscuous mode [ 230.193716][T14072] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 230.548002][T14093] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 230.578834][T14094] macvlan2: entered promiscuous mode [ 230.589664][T14094] macvlan2: entered allmulticast mode [ 230.599306][T14094] bond9: entered promiscuous mode [ 230.617642][T14094] bridge12: entered promiscuous mode [ 230.624096][T14094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.635921][T14094] bond9: left promiscuous mode [ 230.640791][T14094] bridge12: left promiscuous mode [ 230.726046][T14107] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 230.841046][T14111] netlink: 'syz.2.2328': attribute type 3 has an invalid length. [ 231.459166][T14161] Unsupported ieee802154 address type: 0 [ 231.700926][T14180] gtp1: entered promiscuous mode [ 231.733677][T14180] gtp1: entered allmulticast mode [ 232.567630][T14251] policy can only be matched on NF_INET_PRE_ROUTING [ 232.567729][T14251] unable to load match [ 232.761324][T14258] openvswitch: netlink: IP tunnel dst address not specified [ 232.916813][T14265] netlink: 'syz.1.2374': attribute type 15 has an invalid length. [ 232.982873][T14267] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 232.990181][T14267] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 233.000798][T14267] mac80211_hwsim hwsim3 : renamed from wlan1 [ 233.382500][T14287] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 233.411998][T14284] IPVS: Unknown mcast interface: rose0 [ 233.644349][T14300] ipt_ECN: cannot use operation on non-tcp rule [ 233.736417][T14309] netlink: 'syz.2.2387': attribute type 1 has an invalid length. [ 234.174302][T14336] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 234.205947][T14336] x_tables: duplicate underflow at hook 2 [ 234.228737][T14343] __nla_validate_parse: 16 callbacks suppressed [ 234.228766][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 234.271008][T14346] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.271682][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2399'. [ 234.298852][T14348] netlink: 'syz.4.2399': attribute type 7 has an invalid length. [ 234.307330][T14348] netlink: 'syz.4.2399': attribute type 8 has an invalid length. [ 234.317837][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 234.331124][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'. [ 234.368743][T14343] 8021q: VLANs not supported on ip_vti0 [ 234.525811][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 234.550168][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 234.735913][T14379] nbd: socks must be embedded in a SOCK_ITEM attr [ 235.071425][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 235.178734][T14411] netlink: 'syz.4.2420': attribute type 5 has an invalid length. [ 235.178766][T14412] netlink: 'syz.4.2420': attribute type 5 has an invalid length. [ 235.343494][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 235.352058][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 235.496487][ T5923] IPVS: starting estimator thread 0... [ 235.505224][T14433] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 235.508468][T14435] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2427'. [ 235.514271][T14433] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2426'. [ 235.594046][T14436] IPVS: using max 36 ests per chain, 86400 per kthread [ 235.621474][T14441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2427'. [ 235.660631][T14440] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.723754][T14445] sock: sock_timestamping_bind_phc: sock not bind to device [ 236.755413][T14498] xt_hashlimit: size too large, truncated to 1048576 [ 238.075056][T14583] netlink: 'syz.2.2463': attribute type 30 has an invalid length. [ 238.319327][T14603] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 238.341865][T14603] bridge0: port 2(wlan1) entered blocking state [ 238.352767][T14603] bridge0: port 2(wlan1) entered disabled state [ 238.365741][T14603] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 238.404664][T14605] openvswitch: netlink: Missing valid actions attribute. [ 238.411758][T14605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.426977][T14603] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 238.457655][T14611] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 238.492549][T14605] tipc: Started in network mode [ 238.497613][T14605] tipc: Node identity ac14140f, cluster identity 5 [ 238.534728][T14605] tipc: Enabled bearer , priority 10 [ 238.587454][T14611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.619647][T14612] vlan1: entered promiscuous mode [ 238.635517][T14612] bond10: entered promiscuous mode [ 238.640927][T14612] vlan1: entered allmulticast mode [ 238.676393][T14612] bond10: entered allmulticast mode [ 239.218595][T14669] ================================================================== [ 239.226722][T14669] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 239.234472][T14669] Read of size 8 at addr ffff88807a4ed1a0 by task syz.0.2485/14669 [ 239.242382][T14669] [ 239.244725][T14669] CPU: 1 UID: 0 PID: 14669 Comm: syz.0.2485 Not tainted syzkaller #0 PREEMPT(full) [ 239.244749][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.244761][T14669] Call Trace: [ 239.244767][T14669] [ 239.244774][T14669] dump_stack_lvl+0xe8/0x150 [ 239.244802][T14669] print_report+0xba/0x230 [ 239.244822][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.244847][T14669] kasan_report+0x117/0x150 [ 239.244871][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.244898][T14669] af_alg_pull_tsgl+0x1c6/0x740 [ 239.244930][T14669] skcipher_recvmsg+0x5df/0x1140 [ 239.244958][T14669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 239.244977][T14669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 239.245003][T14669] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 239.245023][T14669] ? security_socket_recvmsg+0x7e/0x2c0 [ 239.245044][T14669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 239.245063][T14669] sock_recvmsg+0x172/0x1b0 [ 239.245084][T14669] ____sys_recvmsg+0x1e6/0x4a0 [ 239.245111][T14669] ? __pfx_____sys_recvmsg+0x10/0x10 [ 239.245141][T14669] ? import_iovec+0x73/0xa0 [ 239.245162][T14669] ___sys_recvmsg+0x215/0x590 [ 239.245187][T14669] ? __pfx____sys_recvmsg+0x10/0x10 [ 239.245220][T14669] ? __fget_files+0x3a0/0x420 [ 239.245241][T14669] do_recvmmsg+0x334/0x800 [ 239.245267][T14669] ? __pfx_do_recvmmsg+0x10/0x10 [ 239.245295][T14669] ? __pfx_do_futex+0x10/0x10 [ 239.245324][T14669] __x64_sys_recvmmsg+0x198/0x250 [ 239.245348][T14669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 239.245374][T14669] do_syscall_64+0x14d/0xf80 [ 239.245396][T14669] ? trace_irq_disable+0x3b/0x150 [ 239.245411][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.245428][T14669] ? clear_bhb_loop+0x40/0x90 [ 239.245448][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.245466][T14669] RIP: 0033:0x7ff36639c819 [ 239.245483][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.245499][T14669] RSP: 002b:00007ff3671cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 239.245520][T14669] RAX: ffffffffffffffda RBX: 00007ff366615fa0 RCX: 00007ff36639c819 [ 239.245533][T14669] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000009 [ 239.245544][T14669] RBP: 00007ff366432c91 R08: 0000000000000000 R09: 0000000000000000 [ 239.245556][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.245567][T14669] R13: 00007ff366616038 R14: 00007ff366615fa0 R15: 00007ffcaa134ea8 [ 239.245587][T14669] [ 239.245593][T14669] [ 239.278914][T14678] __nla_validate_parse: 13 callbacks suppressed [ 239.278933][T14678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'. [ 239.280381][T14669] Allocated by task 14669: [ 239.280405][T14669] kasan_save_track+0x3e/0x80 [ 239.280429][T14669] __kasan_kmalloc+0x93/0xb0 [ 239.522572][T14669] __kmalloc_noprof+0x35c/0x760 [ 239.527513][T14669] sock_kmalloc+0xd6/0x160 [ 239.532011][T14669] skcipher_recvmsg+0x54d/0x1140 [ 239.536940][T14669] sock_recvmsg+0x172/0x1b0 [ 239.541432][T14669] ____sys_recvmsg+0x1e6/0x4a0 [ 239.546206][T14669] ___sys_recvmsg+0x215/0x590 [ 239.550879][T14669] do_recvmmsg+0x334/0x800 [ 239.555286][T14669] __x64_sys_recvmmsg+0x198/0x250 [ 239.560319][T14669] do_syscall_64+0x14d/0xf80 [ 239.564901][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.570793][T14669] [ 239.573112][T14669] The buggy address belongs to the object at ffff88807a4ed180 [ 239.573112][T14669] which belongs to the cache kmalloc-32 of size 32 [ 239.587168][T14669] The buggy address is located 0 bytes to the right of [ 239.587168][T14669] allocated 32-byte region [ffff88807a4ed180, ffff88807a4ed1a0) [ 239.601756][T14669] [ 239.604077][T14669] The buggy address belongs to the physical page: [ 239.610496][T14669] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a4ed [ 239.619267][T14669] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 239.626450][T14669] page_type: f5(slab) [ 239.630426][T14669] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 239.639083][T14669] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 239.647762][T14669] page dumped because: kasan: bad access detected [ 239.654305][T14669] page_owner tracks the page as allocated [ 239.660639][T14669] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5274, tgid 5274 (udevd), ts 37638161633, free_ts 37577342613 [ 239.680042][T14669] post_alloc_hook+0x231/0x280 [ 239.684804][T14669] get_page_from_freelist+0x24dc/0x2580 [ 239.690471][T14669] __alloc_frozen_pages_noprof+0x18d/0x380 [ 239.696728][T14669] allocate_slab+0x77/0x660 [ 239.701323][T14669] refill_objects+0x331/0x3c0 [ 239.705999][T14669] __pcs_replace_empty_main+0x2e6/0x730 [ 239.711806][T14669] __kmalloc_cache_noprof+0x392/0x660 [ 239.717171][T14669] kmem_cache_free+0x15b/0x630 [ 239.722099][T14669] __put_anon_vma+0x12b/0x2d0 [ 239.726768][T14669] unlink_anon_vmas+0x58b/0x730 [ 239.731694][T14669] free_pgtables+0x836/0xb70 [ 239.736275][T14669] exit_mmap+0x490/0xa10 [ 239.740537][T14669] __mmput+0x118/0x430 [ 239.744601][T14669] exec_mmap+0x3b4/0x440 [ 239.748832][T14669] begin_new_exec+0x134a/0x24a0 [ 239.753758][T14669] load_elf_binary+0xa47/0x2980 [ 239.758603][T14669] page last free pid 23 tgid 23 stack trace: [ 239.764562][T14669] __free_frozen_pages+0xc2b/0xdb0 [ 239.770102][T14669] tlb_remove_table_rcu+0x85/0x100 [ 239.775293][T14669] rcu_core+0x7cd/0x1070 [ 239.779535][T14669] handle_softirqs+0x22a/0x870 [ 239.784374][T14669] run_ksoftirqd+0x36/0x60 [ 239.788781][T14669] smpboot_thread_fn+0x541/0xa50 [ 239.793708][T14669] kthread+0x388/0x470 [ 239.797760][T14669] ret_from_fork+0x51e/0xb90 [ 239.802346][T14669] ret_from_fork_asm+0x1a/0x30 [ 239.807107][T14669] [ 239.809417][T14669] Memory state around the buggy address: [ 239.815036][T14669] ffff88807a4ed080: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 239.823269][T14669] ffff88807a4ed100: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 239.831430][T14669] >ffff88807a4ed180: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 239.839527][T14669] ^ [ 239.844646][T14669] ffff88807a4ed200: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 239.852831][T14669] ffff88807a4ed280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 239.860884][T14669] ================================================================== [ 239.879422][ T5909] tipc: Node number set to 2886997007 [ 239.886194][T14669] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 239.893518][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.0.2485 Not tainted syzkaller #0 PREEMPT(full) [ 239.902899][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.913069][T14669] Call Trace: [ 239.916347][T14669] [ 239.919271][T14669] vpanic+0x56c/0xa60 [ 239.923254][T14669] ? __pfx_vpanic+0x10/0x10 [ 239.927753][T14669] ? __pfx___schedule+0x10/0x10 [ 239.932612][T14669] panic+0xc5/0xd0 [ 239.936330][T14669] ? __pfx_panic+0x10/0x10 [ 239.940760][T14669] ? preempt_schedule_common+0x82/0xd0 [ 239.946217][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.951240][T14669] check_panic_on_warn+0x89/0xb0 [ 239.956176][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.961260][T14669] end_report+0x73/0x180 [ 239.965519][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.970694][T14669] kasan_report+0x128/0x150 [ 239.975305][T14669] ? af_alg_pull_tsgl+0x1c6/0x740 [ 239.980699][T14669] af_alg_pull_tsgl+0x1c6/0x740 [ 239.985565][T14669] skcipher_recvmsg+0x5df/0x1140 [ 239.990678][T14669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 239.996130][T14669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.001086][T14669] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 240.006381][T14669] ? security_socket_recvmsg+0x7e/0x2c0 [ 240.012017][T14669] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 240.017497][T14669] sock_recvmsg+0x172/0x1b0 [ 240.022011][T14669] ____sys_recvmsg+0x1e6/0x4a0 [ 240.026882][T14669] ? __pfx_____sys_recvmsg+0x10/0x10 [ 240.032181][T14669] ? import_iovec+0x73/0xa0 [ 240.036703][T14669] ___sys_recvmsg+0x215/0x590 [ 240.041436][T14669] ? __pfx____sys_recvmsg+0x10/0x10 [ 240.046637][T14669] ? __fget_files+0x3a0/0x420 [ 240.051307][T14669] do_recvmmsg+0x334/0x800 [ 240.055731][T14669] ? __pfx_do_recvmmsg+0x10/0x10 [ 240.060686][T14669] ? __pfx_do_futex+0x10/0x10 [ 240.065367][T14669] __x64_sys_recvmmsg+0x198/0x250 [ 240.070390][T14669] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 240.075933][T14669] do_syscall_64+0x14d/0xf80 [ 240.080515][T14669] ? trace_irq_disable+0x3b/0x150 [ 240.085564][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.091636][T14669] ? clear_bhb_loop+0x40/0x90 [ 240.096466][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.102356][T14669] RIP: 0033:0x7ff36639c819 [ 240.106793][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.126758][T14669] RSP: 002b:00007ff3671cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 240.135179][T14669] RAX: ffffffffffffffda RBX: 00007ff366615fa0 RCX: 00007ff36639c819 [ 240.143163][T14669] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000009 [ 240.151155][T14669] RBP: 00007ff366432c91 R08: 0000000000000000 R09: 0000000000000000 [ 240.159142][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.167121][T14669] R13: 00007ff366616038 R14: 00007ff366615fa0 R15: 00007ffcaa134ea8 [ 240.175108][T14669] [ 240.178867][T14669] Kernel Offset: disabled [ 240.183214][T14669] Rebooting in 86400 seconds..