last executing test programs: 22.377201624s ago: executing program 4 (id=3001): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140), 0x10) sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="39b17f18", 0x4}], 0x1}}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000180)=0x7, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e02, 0x2, @local, 0xa7f}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000008d1afef2f149a6e74e1242ceb9d1fb4f300000000200000000000000000000060400000000000000010000050000000000000002030000000000"], &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20) listen(r7, 0x200204) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1c}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="4e3e15a1fdfca8e84821e1420862e5da141967dc1ee99e0423dbdac3135335b4445066d38c8e04fe7bbc03663ec4c6cbf646309a0ac60bf714a0580b10b5a8f63fc5eae233375b213fa00fc093d86f24131afb9fc00665dc8c94765c147f9d6d9fb68b3333f5", 0x66}, {&(0x7f00000005c0)="ec4ad75d39e20ec58b5b625bfacbd02bf8601fd90699dd934d33618ba7cec0dabe6650202eee1eec91a42a2cbd031b5d234a6cdd32e5cbf3b92574341ac6ffb71b89d87a3427423da7e9a39b39a988c37eff85c4ca6a840f759595e6cc7a9f9d569c16af65d9a46b59bc618850da", 0x6e}], 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x3f0}}], 0x1, 0x40000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000013c0)=0xc7f) 7.842979503s ago: executing program 3 (id=3104): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0x22, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000180)={0x4, @local, 0x4e24, 0x2, 'lblc\x00', 0x8, 0x8001, 0x36}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={r6, 0x2}, 0x8) ioctl$PPPIOCDISCONN(r4, 0x7439) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{r2}, 0x2, &(0x7f0000000240)=[0x9, 0x4], 0x0, 0xa}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x2}) r8 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xa0000000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30c) 6.887740537s ago: executing program 3 (id=3112): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f0000000000)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) 6.578019783s ago: executing program 3 (id=3115): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008", @ANYRES32], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000700)) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mkdirat$cgroup(r4, &(0x7f0000000140)='syz0\x00', 0x1ff) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.393226058s ago: executing program 2 (id=3116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095a42bc8c7c7390b5e080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="5c94c864d950c8cfe5dc20748c0f75e26ee16e63c721af60edd33b4ed7292b6f118262dacae71aedc54cc38ec5578f0b82c6921c0ad38f734bf170f3ab7885f1d6d10dd57940b0161379b216a9dd9ed91ea81ca5f600c19c1d5f6dbbf9f375f3ecac4f5604c610e690bcb22afe9edcb71905fd99088444e95c6d786e634057a7a6ea9850a399984eba77786ba1a21d3fdb668877bfe96b0f2962adf2fd37525c5e1a0d2ad27d", 0xa6}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="bb7b772f41b791bdc30f43f6d897cb47a080482b48441839cf036c50f6b9c32ba44bc5af0cffec486599d6e955cecd35bed5b9afb334590117a8764d7e6147fb304b8ec149cbabe416fe18bb799c486ad85961c4552e6002751b9f7e62fdbeb730c8afac13555f6e67ad2e81f4e320ff1dd453d8448e9c187209432c424281542f4f9d55c48b351b6ddfa70ddc08", 0x8e}, {&(0x7f00000005c0)="248c0c67965cba0bcc11cab43793fb7b4f3edb760cfc989ca5b32d06bc0936b046824970769868260ab076e6a8cb2b436291cf66d3d0d2e81c16fe68ed06f83c4ac1843e2ac8b2ce62972a62c7e0276c63fe65cec74f1a35b4072a5aa62050b1269e80f55f26f845b392474dbd27c19ece1b479f3439f0f8900026e27a548136fb30d6bb3d730e8de11685033f402c23e470cd34505dda5a54300d8a73bf271f2f018bea", 0xa4}, {&(0x7f00000006c0)="a1d3701899496478af0864a27859b46265b01b1b7869a02a7bb22e0348de14d033676fa07879eab38e2388bf03fc08c189e6de638a1655c7e4768d70602b7b5189e754b3c3935094533699553ec0f2fc1df85d2e778fc47f09bcccdb135bc35bc50ed8e029c63046c4c4cb7b8b54929108042228714f08be857ff69b703e70d6e96474990a263195462529f02bdeda608ad56a9e4921f7a2556ed1a351c9ae9aba0209dc4a2c7ccc50cb55444ad047d2865dd5e31cd3ba8b9ff155d437dc9dc85be5ca", 0xc3}, {&(0x7f00000007c0)="bdca2d5000bd2812051cf807", 0xc}], 0x6) 6.148746893s ago: executing program 2 (id=3118): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x9, 0x183}], 0x1) r1 = accept4$ax25(r0, &(0x7f0000000100)={{0x3, @default}, [@bcast, @null, @default, @bcast, @bcast, @default, @rose, @bcast]}, &(0x7f0000000180)=0x48, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000480)={{r0}, r2, 0x10, @inherit={0x90, &(0x7f00000003c0)={0x1, 0x9, 0x400, 0x1, {0x4, 0x5, 0x80000000000000, 0x6, 0x8000000000000000}, [0x7, 0x0, 0xb6b, 0x84d, 0x2, 0xffff, 0x5016e5c5, 0x7, 0x9]}}, @name="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"}) socket$netlink(0x10, 0x3, 0xe) (async) r3 = socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x5c11f000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000014c0), 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000001500)) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x104, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x86}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x898}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa58}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x190}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x958}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xabd}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4080}, 0x40885) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001740), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001740), 0x3) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x93ca72d8125a35db) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x93ca72d8125a35db) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001900)={0x2, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001b40)={'ip6gre0\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x6, 0x0, 0x48, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x6e, 0x9b}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001b40)={'ip6gre0\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x6, 0x0, 0x48, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x6e, 0x9b}}) sendmsg$inet6(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)="4ad785dba9e07788fc28482f1960f8543b5bcc9969f420110a9689c80bb977193e93a08221104d17ee39afeaea7404da8a49eed590849bae1b4b0a6b59db63d157a2c8d6047d1b0bd7a06e85c2c08a261fddb8a12d43946af6d545719b51bce3bc1939ce35bad6ed94baa1be45333bbf8830c22347748cd8d3abdc4af6c82fcfb333c87fe5e2b79ac8cf365d8c1428247f25e4a911dba0838132b0b418308c26e8e45ef4d0169f559ddd2f19662f2dfc3ea70b91761e591be9198301d0bb83b9b0fd26adea6f605ebf79c26d08301dae16341d9560ebf206a8936d78b4fb93", 0xdf}, {&(0x7f0000001a40)="d1a474464412297b7150ebeeb4f903834dd5d5db067cd7626b792e3c8f3020a5bd4ebb97b9d38b4f481ce2bd206f", 0x2e}], 0x2, &(0x7f0000001b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x899}}, @tclass={{0x14, 0x29, 0x43, 0x42}}, @hopopts={{0x68, 0x29, 0x36, {0x84, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x40, {0x3, 0xe, 0x3, 0x401, [0x9, 0x8001, 0x10000, 0x5, 0x7, 0xbc6, 0x5]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xe}, r7}}}], 0xd8}, 0x4000000) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000001d80)={&(0x7f0000001cc0)=[{0x3, 0x2, 0x10000, 0x7}, {0x5, 0x0, 0x3, 0x7}, {0x4, 0x80, 0x3, 0x9}, {0x2, 0xffff, 0xdbb, 0x380}, {0x5, 0x100000000, 0xfffffffffffffff9, 0x7}], 0x5, 0x20, 0x9}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001dc0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001dc0)) connect$inet(r4, &(0x7f0000001e00)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000001e40)) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f40)={0x2, 0x1, 0x40, 0x5ea4f85f2f1fc327, 0x26, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_key={0x13, 0x9, 0x458, 0x0, "ed6fd98c317dbc8291326ce692c5e4142d1f8d3759fb53fc1cf8d493df335b93197743486eb23c6605ce3d37962ccf6c647b89955df79060aad15e66e689114619300e70f21da22706ba7dd48e9a394f78ca274a712f0b214c1d5eed01cf768bbdacd8baeb17cc1980505117ad31ba1e57f90592fcfae9f884234a60e4f9890fa986dcc815a83d7cacab7f"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d4, 0xda, 0xcc, 0x5b, 0x0, 0xa0000000}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x89e4, @empty, 0x1}, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}}]}, 0x130}}, 0x840) syz_genetlink_get_family_id$tipc(&(0x7f0000002140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x30, r8, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'macsec0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000002240)={0x0, 0x7}) socket$netlink(0x10, 0x3, 0x5) (async) r9 = socket$netlink(0x10, 0x3, 0x5) tee(r9, r4, 0x6af3, 0x1) (async) tee(r9, r4, 0x6af3, 0x1) 5.832058828s ago: executing program 2 (id=3119): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000), 0xe) listen(r6, 0x0) close(0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xc, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffffffffffe43, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtclass={0x498, 0x28, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {0xffeb, 0xd}, {0x3, 0xd}}, [@c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0x8}, 0xfba, 0xfffffffd}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0x80, 0x8, 0x9, 0x7}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x33}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffd, 0x2, 0xc77, 0x4, 0x0, 0x1, 0x3, 0x4, 0xd, 0x400, 0x2, 0x8, 0x4, 0x5, 0x7ff, 0x1, 0x9, 0x77, 0x4, 0x3ff, 0x8, 0x9, 0xfffffff2, 0x1ff, 0x0, 0x8001, 0x8, 0x1b1e, 0x2, 0x0, 0x88e1, 0x29, 0x7fffffff, 0xa, 0x10001, 0x4, 0x38c, 0x10, 0x9, 0xfffffc01, 0x7, 0xa3b7, 0x4, 0x8, 0x9, 0x5, 0x7, 0xcbb, 0x9f2, 0x7, 0xf, 0x7cb2, 0x80, 0x8, 0x3, 0x5, 0xb, 0xfff, 0x232, 0xffff23e0, 0x8, 0xab6, 0x1ff, 0x10001, 0x5d63, 0x7, 0x4, 0x6ae, 0x7, 0x4, 0x4, 0x1b6, 0xfffffff2, 0xd, 0x7, 0x70d8, 0xfffffffe, 0x7, 0x8, 0x7f, 0x1, 0x6, 0x3, 0xe56a, 0x2, 0x5, 0x3, 0x717, 0xfffffff8, 0x8001, 0x800, 0x74d, 0x9, 0x1000, 0x1ff, 0x4, 0x3, 0x9, 0x7f, 0x71, 0x6, 0x2, 0x100, 0x2ab, 0x8, 0xb, 0xd9, 0x8, 0x7, 0xa, 0x8, 0x4, 0x4, 0x8, 0x9, 0x7, 0x4709, 0x7, 0x6, 0x4, 0x800, 0x1000, 0x8, 0xb0, 0x5, 0xc3, 0xc, 0xfedb, 0x3, 0x4, 0x4c, 0x5, 0x1, 0xbbd2, 0xfb1, 0x7, 0x41000753, 0x1, 0x9, 0x5, 0xa62, 0x5, 0xcce, 0x2, 0x4, 0x8, 0x7, 0x2, 0x6, 0x81, 0x7f, 0x2, 0x4, 0x2, 0x7f, 0x3, 0x3, 0x5, 0x7, 0x8, 0x6, 0x3, 0x5, 0x10000, 0x6ac, 0x4, 0x1, 0x5, 0x5869, 0x800, 0x9e, 0x868, 0x9, 0xa70f, 0x8, 0x2, 0x4, 0x5, 0x5, 0x8, 0x8000, 0xf, 0x7, 0xe, 0x6, 0x4, 0x6, 0xfffffff7, 0x80000000, 0x8, 0x1, 0x1, 0x0, 0x95, 0x2, 0x1, 0x7ff, 0x7fff, 0x2, 0x8, 0x6, 0x2, 0x40, 0x6c5, 0x1, 0x8, 0x4, 0x80000000, 0x2a, 0x6, 0x9, 0x1, 0x8, 0x26, 0x100, 0x5, 0x5, 0x0, 0x80000001, 0x3, 0x2, 0x0, 0x6, 0xfffff001, 0x0, 0x100, 0x1, 0x7, 0x5, 0x7e8, 0x401, 0x98e, 0x3, 0x7, 0x2, 0xf07, 0x6ba, 0x5, 0x81, 0x80000001, 0x10001, 0x101, 0x2, 0xe, 0xfff, 0x0, 0x101, 0x5, 0x0, 0x8, 0x8, 0x5, 0x3, 0x9ad, 0x2e2, 0x3]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xea, 0x1, 0x6, 0x7f, 0x10, 0xfff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x28, 0x1, 0xa, 0x2, 0xad5f, 0xfffffff8}}]}}]}, 0x498}}, 0x4008800) recvmsg$qrtr(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x40000040}, 0x38, 0x0) 5.679460563s ago: executing program 0 (id=3120): r0 = socket(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)={0x88}, 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)={0x88}, 0x8) sendmmsg$unix(r0, &(0x7f000000cc80)=[{{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}], 0x1, 0x4040000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xd29, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x4000004) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x47}, 0x94) 5.678574606s ago: executing program 3 (id=3121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x218, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090925bd7000ffdbdf251800000008000300", @ANYRES32=r8, @ANYBLOB="040030802000308014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x2840}, 0x40000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1}, 0x12142) 5.317097716s ago: executing program 2 (id=3122): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400018102000000ac14140f000000000000000014000200020000006401010000000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 3.096335248s ago: executing program 2 (id=3123): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.023858776s ago: executing program 3 (id=3124): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x5f, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/39, 0x2d, 0x27, 0x1, 0x362}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 2.923207224s ago: executing program 0 (id=3125): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0xfffffffc, 0x27, 0xffffffff}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="184a4ac117245c062300000000080003851000000600000018000000", @ANYRESOCT=0x0, @ANYBLOB="000000000000000066080000000000001800362935d2c71f550350a52c5ba85000008000030000000000000000009500000000000000360a020000000000180100402020782500000000002020207b1af8ff00000000bfa100000000acefb2d2850b06930b06714fa69a000007010000f8ffffffb702000008000000b50af9e25942b82e9b3700d1e67cca3448b4e37993036abe50d7481f157e819eddb1039d797b"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x64, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_ATM={0x68}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x87}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) 2.922247843s ago: executing program 1 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x40440c0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x8, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffbf, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10001, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0xffffffec, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = syz_init_net_socket$ax25(0x3, 0x7, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff9f, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYRES32=r6, @ANYRESOCT=r1, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESHEX=r6, @ANYRES8=r1, @ANYRESHEX=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x8080) accept4$ax25(r6, 0x0, &(0x7f0000000040), 0x800) 2.747687331s ago: executing program 1 (id=3127): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000040000000c000c8006000200d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000340)={0x14, r6, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) (async) unshare(0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x15, 0x0, 0x1, 0x8eb4}]}) 2.509258907s ago: executing program 2 (id=3128): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r4, &(0x7f00000044c0)=""/22, 0x16) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x8000, 0x4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xd, @loopback, 0x7}]}, &(0x7f0000000640)=0x10) (async) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001ee0e0000000000000000000000001000000000000000100100000e0000000000999862e7565a4784d0dd6922c1194b3167b8ad12000010000000000000000d00000009000000"], 0x38}, 0x0) (async) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8814}, 0x80) 2.403638692s ago: executing program 4 (id=3052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x43, 0x107, 0x70bd2a, 0x25dfdbfd, {0x3, 0x7c}, [@typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c800}, 0x40080) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0xfffffffe}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r8, 0x8b2c, &(0x7f0000000040)) 2.243298946s ago: executing program 1 (id=3130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7c5, 0x1, "e3"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x200}, 0x8) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a200fffffff5000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 2.096320094s ago: executing program 0 (id=3131): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6365, 0x5, 0xfffffffe, 0x400}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x4, 0x2, 0x2}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40480c5}, 0x40a4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_newnexthop={0x70, 0x68, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x6c}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x1ff}}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r9}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4009850}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c", 0xe, 0x1, &(0x7f0000000080)={0x11, 0x2, r10, 0x1, 0x10, 0x6, @random="c11a5a09484d"}, 0x14) close(0x3) 1.906039712s ago: executing program 1 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/123, 0x7b) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x8905, &(0x7f0000000000)) 1.395235694s ago: executing program 4 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480db0000000b000100746172676574000040000280290003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32000000001400ffff1000010000000000000000000100000afbc81c1deee0eab0979ab97e622d1c2bb35757521e3f3a9e4421520422844e88c84c174476fb017913cbab3b8ef079489d89"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) (async) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000740)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005000000020000000400000025d4f5a3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b702000001000000850000008600000018", @ANYRES32=r9, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 1.376821136s ago: executing program 0 (id=3134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xfff1, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffa4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x8, @void}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xc0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x51004}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}, @IFLA_VF_PORTS={0x8c, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f4d0dd77fcdbae7ba3e1f79772897054"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd000000000000c3e91acfe2186400"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9a09ac2bf8ccf1d356d60aba2e106ad9"}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f3b0c32c5b04dba61d7fca767ef765d9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e39ad797e930f37f2dbc25d2936346c9"}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90) (async) socket$igmp6(0xa, 0x3, 0x2) 782.926555ms ago: executing program 1 (id=3135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x60) sendto(r1, &(0x7f0000000180)="7ac0741f2b0f8b363471a79007728e7d326580639984c04713a893b92df88867dfaa8e6c87164bcead3a0e03cbc6d1903fd3ea7bd2817f179999567a71eaaadf646dfb3aa885a4d09e33defe5d225bc2178fe5b16bf03c93013980c7dd4e7975a191f92b3db72ad00a2258d70cdaa3d76bd848ef024a1eda259251067abaa6380b6e2cf7290c413ea5bd7a77e247ac66136564985c143607caba66430952280e33a343790d182213bb8afa3f51ab6b325973068ef3f9dafa549b96", 0xbb, 0x40000, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 656.024368ms ago: executing program 4 (id=3136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x50) (async) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206050000001400000000030100fffd0e0104000000000000703a697000000005000400000000000900020073797a310000000020140780050003001f00001009b73da9de9df440ffffffff0800064000006d2305000100020000000500010006000000"], 0x68}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0xb4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd}, {0x8, 0xb, 0x7}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40440c4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a030000000000000000000100000a0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100effe08000b40000000003400048052fe018008040100636d70002400028010000380090001002a8e27e2fa00000008000240000000000800014000000004090001007379"], 0xd0}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x0, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4091}, 0x24040084) (async) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000000680)={0x2a, 0x4, 0x4000}, 0xc) (async) r11 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1a, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x5, 0x8, 0x3, 0xfffffffffffffff0, 0x1}, @call={0x85, 0x0, 0x0, 0x90}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) sendto$l2tp6(r11, 0x0, 0x2c, 0x40000, &(0x7f00000008c0)={0xa, 0x0, 0xe9d5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x4}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 548.323667ms ago: executing program 1 (id=3137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@call={0x85, 0x0, 0x0, 0x89}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0xcc, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_tunnel_key={0xb4, 0x1, 0x0, 0x0, {{0x5}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x53, 0x6, "b95a87269e74a71b97db465193f0b5000779e7f833ca11367abd61f077c3f7543dbfcbe07081b2dd8ea7ff2a8f37e904b07c37009ee6509db695dde342162c1eea7d63321a2c5f00f253e7962e852e"}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000a40)=""/188, &(0x7f0000000b00)=0xbc) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/19, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) syz_extract_tcp_res(&(0x7f0000000400)={0x41424344, 0x41424344}, 0xc, 0x10) syz_emit_ethernet(0x1d9, &(0x7f0000000700)={@local, @local, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xe, 0x6, "a3dbc8", 0x19b, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, {[@routing={0x33, 0x8, 0x2, 0x0, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, @loopback]}, @hopopts={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x3b, 0x17, '\x00', [@pad1, @calipso={0x7, 0x50, {0x1, 0x12, 0x0, 0x8, [0x5, 0x8, 0xfffffffffffffffe, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x9]}}, @calipso={0x7, 0x50, {0x1, 0x12, 0xc, 0xf165, [0x1, 0x8, 0x2000000000000000, 0xee, 0x1, 0x4, 0x1, 0xea05, 0x40]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x33, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x64}], {{0x4e22, 0x4e24, r14, 0x41424344, 0x1, 0x0, 0x9, 0x40, 0x5, 0x0, 0xe, {[@window={0x3, 0x3, 0x10}, @timestamp={0x8, 0xa, 0x5eac, 0x5}, @sack_perm={0x4, 0x2}]}}, {"d9675fda3b9b02cce23795a0125f8b4b930e169f8d3a0e4c68c658d4820e373f85f514719999916b22eb09cadf946b7232ed2be5a7a435d2981895bc00347f4a60b8173af6c3ca"}}}}}}}, &(0x7f0000000900)={0x0, 0x1, [0xb16, 0xb0d, 0x477, 0xd6]}) sendmsg$nl_route_sched_retired(r12, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@newqdisc={0x160, 0x24, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xf, 0x2}, {0xeeb36f8bd5b83921, 0xffe0}, {0x7ff5, 0x4}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x77ea}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb457}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x8880}, 0x1) 423.586707ms ago: executing program 3 (id=3138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) (async) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000003500)=[{0x0}, {&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67dc8caaaac0d995fde8723ec54021840fe07d7cdb5cf9cc0e1e7081366deff4c2347554fb2bdd5a5f04b9a42fbf8fb3a1f4a95692dc658f5c8ba3d2660538462b78bbf67870cfea19ba5d3ac585c20e16c64d44e929375705272072f3914ac5427e8f527b3f5e60440cdf319947f3620c53df87ffad5bdcc97d1ad678958a18653be882e6ff1ce896f29fab9f934ad1d8db2bb7f35a14180e31ea843b0ca26855d81278848e66006c77d10a4298d55d3c872b27feef422fc3556396d61baa441e87aa036fe5215eae3716b51171984e0f72e0a9a54980167dc47d247e832d76fdd0717a87c5d30f675e97b187eb8d8a7b4094ddfeaf887227e43c803352373206d9bd83457f1c0abaf3e412802ca4192748b48947ce07e86db6826b8cd46fcaacd80b52f8669d1605eeabdab5a8c2aa4bd60e5838e021d041930525401c04304194f9b6309c2b10903ff4a22794c35485f5000a7365a62208ae85d29d8ad3e070670aabba3c86afced2fcdd93bf7c3170af1616b88f528aecd89ca0348d310dd281b5fb04169091221d7903afc4b741da130bc3d388e3fb35ad6e4574d4ea9ac012047fd5a52651fb642ced81284a2ba034cd963c8e9cc7b3b3fc5f9629c478aa7844c55feb692aeed5b97f638e7e2822907f7bd8a1729e30819bc53c4d497ac1a6dda76e13864e5f8b4ce0e34ed267870bd217035a28fec5a28fc8566f629cbd489171a29224637dc37fefb007481b4fa81c5dd39a4bc47c8cafe29ff949a8f613a4ddfdaafd6793ea7b9bf355d8471ae3e093f708957e9a9d5a7466854728ea82e0bb7ae6dae852b5090843d76d986dd005d495aa8bc209b20de8f45dd42a31129fabcb4cfaa30a7aed4b12be0fe2c0ede3e608b30895cd3e54324b83b43f66e504124195e9b18fa57ccb60c341d2017bd847d869a5ec1cc5efe008e70be2ba95098334a372fcb593e833ca36e301610e56eea80dfc2b781bd7207fcbee8da9308648d59befe0d493e495a78a8cd1cc8aff4472bbc833a708ab3115eda7e3640a12667bf58a0990cf2c3a59871e2155ed5dd101822b94804a0f87ed86b72840998356a66a5a947596acd2602ccc9f24e9709060e4c1e7b8e159560b5b4c66a3f9ac8b43f4f8fafc9342c0533747581ad7bd49277dc07b2c110ff91f21cbd6188c5d6759ca18fcdd314ee25ff410c3687e60df6a025901cc8e353c5b7b0974722a544b53b1b446b6edc48d149877fb72e59be779d33467598de6791f8188bbbbcb3fdb4ca5c90e8379180adb0d2dff15743d3cf263652b4495cbbce864f38267fb3108e40379362c10681774cc3c90d8bba07de8dbc67aab3b6585be9e1753686cba112a2ebccafe74f96be0fcfd5f3cc0463ed72726dbb970331823d8985e528286035a024cea50210b5bf6cc2f81f76fcee5ee5ef0c0b6ff14a10f4321df335a6c337628d426f9ad3890b037b1575c0d30c0e542310d4871f543fb25a5761769afcf7bca0fb0bc7160bde589846ff62375852db693297b97587e0d9db109fff87e2b5cadcc200678f2f348f18852e1eaa361c182c8dd9e6dfaa551c291cd0cfaef02718e66d6c44c7ee644a397591c8e8828e59f7631d265cf64875d416d0f17c39892773bc752d529dacef7c9a39e9b5f36e4e22464acdeed7f8f23361782f62fb822cd4cb7e04e9e0e9455fd61526dcfc7b270c682e839f85c7549f66da377666cc9e27ed1f598867844ce80d8404c53c2c433c38a0952a745ee943b634541d288d4c1d8b581353c93dc64ab9ad92bca5e6d00ef69b04001144301aee91700f20289615ba6539e33dfd8f24483ed8a48144073534c42d1cdb75c9ec45b88e355055bd52305a12c079ccd88f7710117ae218b43fdb6b868a375ab8c6de8790989f07ab8bf24f8a7d2b1052cbe07f65dc980ae88424c6a16ffdf79ff1ac8ec64414acc1c173e734b3f5bd11d61b5b77c8a50e733761eb81ea38942910a3a53c91acb1cde9973c41426239bcfb65c45cc61ea1553f267d861ce48fb9acde12ffc03b900fcdf0295fac14c739fe79f96e2d69abb7bce1946168bf98a9ec96f8ba7b8237967b67c70adc70cf5ec4569533e5fdf3ffe4ad85fdc11a5f9cd893ca47f279f688e414703215c83521b9451d8837dc5ec3aec1d4a4cf224f8d0e612950b33af62e6361b79185876e1809287a5b87edadd4fdc07e2b924f27def45adefa89b7343fc3e52c13c3caeb35afe011bcf212d2d82b0dc76d4452a7465e649f4871b0824d72e4ed8c4c39941da0d645748ee784f6b7875240d49e1f4270bf162629140a882af3bf9a3a6b0172b5777d61c24268cfd295fb0698e3b817694791f664c061bf6e4329018dc8812c600015ec84f4881b008140a1c9233c14dd8b654c4f8be97e173f9dfca54173a84edafccd35dc53bc9d97d70909f130e046df39986e5472921529366c4fdcf9d21f7e6fd13cf9ec2ef9888e240114f6a375a548016d6f1577bc69cad88b6e09dc37028d803b50b828df2ed26f1a1eca689331747083ba09239f2cd6be85b867af531398065d2e61f28691f557275cdbfd7ed35ff0b2548bd5c20d19f693168c0fec785f9436b5fa6068647a569812a42efbe4342ed58f6ee05373112b368218f20ffc074bee688091440de8fd9d9079af0c425654a4a78d9ab11cc1457ed21d439abf97baa77d1b4fccff20cc75a034edc86df5a2c2280fcb003ca8bb7055bc378e89691cd88d74919ad9c9b338d87157fae7a0ae7b9c90041d501bcddcd98607f54ce141d44a646d92ede0fdfaace16554dd9130d1d2ae152084dc9b0eb713170ba247024d7cc7b9f3f0bb10a4d3f61a85b4ab018dfec7d5c625d9d0864ad1e21939f21e200ec4449e29ffe7cd1b27a6ba5a025dcbdb608619088e8e73d148b8d28caf91da3f71c605238e3f6e2e5254465bde138884b4ed6a5d9cc1c7f6bba054141735eeb654608357faeb10e2b354a3b6b0421e2d3ede84e8a6902ecd446d74097c6c0b34430db23827e05d861f2763295cba86d486f402fbaf6e750ba872d7769dee32528c7b5b2f486384a6b1119e79aa1171dbacef24f902e49750e5e4cdea1af7c594f02ac8c7a9fd0e27ac1aac2dc1eadd6adaf776885615fcdcf6123e406c2f95f093479b7f90e05bfc2c06b71b631a55eed29f6152781b68fc1f96ecc23f63834aa270bb1b8b657ec6ce7c5e9da8bbc2af3c25fd2d0238e92600561a9b913ff60619d85706d79303c25faf7d7e8631aa098ceb842c16a52930b36681a727383a2f880e2df001888fb4c19f981c250de65cc186ff4b8fde1c67f061c2b63d1b0d74b3be65f871ade6beaa21459c2574a5042e00da4e2086492acefa572136fba2d6561e0d6747b0bee935d7aee889f0260457d23a98e6bd98c525724afb2fa9d8f8d71d85f852d6cb5109275627675032be285e887525db7a00a69d89ee0dd0c76c4c1553af4faaf74b8fe1c90208f07724855", 0xbf9}, {0x0}, {0x0}], 0x4) (async) writev(r1, &(0x7f0000003500)=[{0x0}, {&(0x7f0000000300)="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", 0xbf9}, {0x0}, {0x0}], 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x44014) r3 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9, 0xc}, {0x3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x5}, 0x22) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x5}, 0x22) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00", @ANYRESOCT=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x9}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000026c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000811) (async) sendmmsg$inet6(r6, &(0x7f00000026c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 422.474352ms ago: executing program 4 (id=3139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@private=0xa010101}]}, @lsrr={0x83, 0x3, 0x40}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 235.254578ms ago: executing program 0 (id=3140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000004000000000000000000000181100", @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bind(r2, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async) socket$inet6(0xa, 0x3, 0x1) (async) socket(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e30, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x64004000) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000440)={0x10, 0x26, 0x8, 0x70bd25, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x40}, 0x4000) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r7, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d04000b000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f00000000c0)) (rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) 105.104307ms ago: executing program 4 (id=3141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x51) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) write$tun(r3, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080005000200b6e71400020045b00fc000680000030690780a010100e00000014e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) sendto$inet(r7, &(0x7f00000002c0)="2a4ea70cdca2afac1433e5b9669c54e597093a9c1508826e9e5f677de7b2c2563be05ba6a6539eb2a1b3768683c6546b866d1e3d72b6302f9853a823b3aba73027ce63f817855590d0973ec54b8e3a48ca19f655246043632a0f0899bae925b687951bf8b8d2d148a10407aeff", 0x6d, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r8], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x105, 0x80000000, 0x4, 0x4, 0x3}, 0x1, 0x7}, [{0x5b, 0x8, 0x40, 0x98e2, 0x9, 0x6}, {0x7, 0xc11d, 0x8000006, 0x0, 0x54c83b4b, 0x2}, {0x4, 0x8, 0xd10, 0x8, 0x6, 0x40}, {0x6, 0x7ff, 0x10001, 0x6, 0x8000, 0x3}, {0x17, 0x1, 0xb, 0x4, 0x0, 0x3}, {0x0, 0x7, 0x10001, 0x2, 0x6, 0x81}, {0x0, 0x48c081f1, 0x3, 0x0, 0x0, 0x6}, {0x2, 0xfff, 0x2, 0x0, 0x3, 0x7f}, {0x0, 0x9e, 0x3, 0x7, 0x8, 0x1}, {0xaa, 0x6, 0x8, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x7, 0xec9, 0xaa12, 0x4}, {0xff, 0x5, 0x4, 0x10, 0xfff, 0x80000001}, {0x0, 0x9, 0x10000, 0x0, 0x6487875c, 0xc}, {0x6, 0xd, 0x8, 0xea, 0x2, 0x9}, {0xfffffffc, 0x0, 0x7, 0x6, 0x7fff, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x0, 0x8}, {0x2, 0x4689, 0x4, 0xca6, 0x7c2, 0x5}, {0x0, 0x81, 0x8, 0x10000, 0x7, 0x8001}, {0x4, 0x3, 0x7, 0xafb9, 0x8000, 0x10000}, {0x1000, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x6, 0x6}, {0x8, 0x9, 0x81, 0x1, 0x7, 0xbb9}, {0x9, 0x6, 0x1000, 0x8, 0x2, 0x1}, {0x2, 0x3, 0x70, 0x4, 0x4, 0x3}, {0x3, 0x8, 0x6, 0x7, 0x3a555fb9, 0x101}, {0x101, 0x20000000, 0x2, 0x5, 0x9, 0x10}, {0x5, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x7fffffff, 0x1000, 0x1, 0x81, 0x1ff4}, {0x58ab449b, 0x7, 0x9, 0x80000001, 0xff, 0xa697}, {0xfffffffb, 0x8f, 0x6941, 0x6, 0x6, 0x7}, {0x4d2, 0x26, 0xe8c, 0xffff, 0x3391, 0x10001}, {0xfbde, 0x80000001, 0x9, 0x101, 0x2, 0x7fff}, {0x7fffffff, 0x8, 0x8, 0x2, 0x1, 0x9}, {0x90f1, 0x3, 0x7, 0x6, 0x8, 0x1ff}, {0x5, 0x10, 0x8, 0x6, 0x6, 0x2}, {0x8, 0x5, 0x1c05, 0x986a, 0xd, 0x8}, {0x8000, 0x5, 0x5, 0x2, 0x1, 0x7}, {0x3ff, 0x2, 0x6a, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0xc72}, {0x3b5f774a, 0x1, 0x0, 0x10001, 0x77, 0x2}, {0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x8}, {0x6, 0x7b4, 0x6, 0x4, 0xe, 0x4}, {0x6, 0x6, 0xcc5f, 0x3c88, 0x1000, 0xce}, {0x6, 0x1ff, 0x8, 0x200000, 0x2, 0x2}, {0x2, 0x1, 0x3fc, 0x0, 0x7, 0x8001}, {0x1fc, 0x2, 0x5, 0x4, 0xf, 0xa}, {0x7f, 0x200, 0x9000, 0x9, 0x2, 0x81}, {0xb12, 0x8, 0x9, 0x8, 0x5, 0x2}, {0x8, 0x7, 0x2, 0x7, 0x2, 0x5}, {0x6, 0x5, 0xffff, 0x5b46, 0x0, 0x5}, {0x401, 0x1, 0xe, 0x1205478f, 0x9, 0x6}, {0x10001, 0x7fff, 0x1, 0x3, 0x7ff, 0xc}, {0xb304, 0x0, 0x8, 0x400, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x9, 0x3ff, 0x83}, {0x1ff, 0x4, 0x5, 0x80000000, 0x81, 0x6}, {0x9, 0x0, 0x5caa, 0x7fff, 0x1, 0x7fffffff}, {0xf, 0x10000, 0xffff, 0x100, 0x80, 0x3e}, {0x2, 0x8, 0x6, 0x81, 0x7, 0x8}, {0x7, 0x3, 0x10000, 0xd, 0x5, 0x6}, {0x816, 0x7fffffff, 0x10000, 0x3, 0x3, 0x1fc28}, {0x53a, 0xffffffff, 0x4, 0x408, 0xe, 0x7fff}, {0xffff, 0x8, 0x5, 0x2, 0x0, 0xe00}, {0x2, 0x0, 0x4, 0xd, 0x9, 0x3}, {0x4, 0x0, 0x81, 0x0, 0x7, 0x3}, {0x3, 0x9b1f, 0x3, 0xdc5e, 0x4, 0x6}, {0x58, 0x7, 0x1, 0xffffff00, 0x3, 0x6}, {0x7fff, 0x0, 0xff, 0x7, 0xf2, 0x2}, {0x96f2, 0x2, 0x5, 0x8, 0x9b, 0x1}, {0x9, 0x143, 0x0, 0xd, 0x6, 0x7}, {0x2, 0x380, 0x8353, 0xa3, 0x1}, {0x80, 0x8, 0x2, 0x8, 0xe8b, 0x6}, {0x1, 0x4, 0x3, 0x67b2, 0x9, 0x7}, {0x777e, 0x4, 0x1, 0xfffffff7, 0x8, 0x9}, {0x10, 0xf76, 0xfffffff9, 0x2, 0x4, 0x4}, {0x0, 0x0, 0x9, 0x6, 0x8000, 0x9}, {0x3, 0x4, 0x8001, 0x4, 0x0, 0x1}, {0x0, 0x3caf, 0xfe, 0x101, 0x3, 0x6}, {0x4, 0xfffffff9, 0x0, 0x7, 0x9, 0xfffffff7}, {0x2, 0xffffffff, 0x75, 0x7, 0x0, 0x7}, {0xfffffff8, 0x7, 0x4, 0x81, 0x7, 0x81cd}, {0x76c0, 0x8, 0x80000000, 0x8a2, 0x7, 0x3}, {0x1ff, 0x2, 0x9, 0xc, 0xa, 0x8}, {0xf558, 0x2, 0x415, 0x6, 0x2, 0x2}, {0x0, 0x8, 0x3, 0x8, 0x5, 0x2}, {0x7, 0x4, 0x3, 0xfffffb37, 0x0, 0x4}, {0x70, 0xffffffff, 0x4, 0x9, 0x200, 0x4}, {0x1, 0x6, 0x2, 0x3, 0x7, 0x80000000}, {0xea, 0xb1, 0x0, 0xc, 0x6, 0x6}, {0x130cf172, 0x0, 0x8, 0x0, 0x7, 0xb}, {0x9, 0x7, 0x7fffffff, 0x6, 0x200, 0x7}, {0xa3, 0xffffffff, 0x3ff, 0x4, 0x8, 0xe}, {0x7, 0x5, 0x3f5, 0x1, 0x6, 0x3}, {0x200, 0x0, 0x144d, 0x100, 0x6, 0x7}, {0x10000, 0x3ff, 0x0, 0x8b0d, 0x2, 0x3}, {0x3, 0x8, 0x3ff, 0xffffff83, 0xa0bb}, {0x5, 0x2, 0x9, 0x1, 0x8000, 0x18000000}, {0x1, 0xb1, 0x78d, 0x9, 0xe2e}, {0xe121, 0x800, 0xffff2014, 0x100, 0x200, 0x2}, {0x609, 0x7, 0x7, 0xff7ffbff, 0x6, 0x6f}, {0x3, 0x0, 0x7ff, 0x0, 0x7, 0x10001}, {0x10000, 0x401, 0x6, 0x2, 0x8, 0x5}, {0x8000, 0xe, 0x9, 0x3, 0xc5f, 0x8}, {0x3, 0x30000000, 0x9, 0x9, 0x8}, {0x62872137, 0xc24, 0x101, 0xffffff12, 0x1000, 0x100}, {0xfffffffb, 0xf, 0x10, 0x1, 0x0, 0x4}, {0x2, 0x0, 0xb, 0x306c, 0xff, 0x10000}, {0x10000, 0x3, 0x5, 0x8a, 0x3, 0xa}, {0x3, 0x300000, 0x6, 0xd28b, 0x8, 0x1000}, {0x59, 0x3, 0x5, 0x3, 0x80000001, 0x7}, {0x7ceb, 0x9, 0x7, 0x261, 0x8, 0x7fe}, {0x40, 0x4, 0x6, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x9, 0x1000, 0x4, 0xd}, {0x4c, 0x1, 0x3, 0x2, 0x2, 0x7}, {0x2f, 0x1, 0x6, 0x80000000, 0xffffffff, 0xfffff954}, {0x3, 0x6, 0x0, 0x5, 0x7, 0x4}, {0x8001, 0x4, 0xffffffff, 0xa2b, 0x5d, 0x8}, {0x40, 0xe, 0xe, 0x1, 0x97f, 0x2d00}, {0x3e3, 0x6, 0x1, 0x7, 0xfffffffa, 0xa0}, {0x5, 0x9, 0x3aa, 0xd, 0x7ffff7ff, 0xa}, {0x7ff, 0x3, 0x4, 0x5, 0x80, 0x7}, {0xb51, 0x7, 0xffff, 0x9, 0xffff, 0x2}, {0x10001, 0x6, 0x7, 0x1, 0x5, 0x6}, {0x0, 0x1, 0x0, 0x4, 0x40, 0x1}, {0x800000, 0x7, 0x0, 0x8, 0x6, 0x8}, {0xcb, 0x7, 0x7, 0x0, 0xfffffffc, 0x1}, {0x7, 0xc, 0x9, 0x2, 0x40, 0x1}, {0xccb7, 0x1, 0x800, 0x0, 0x6, 0x229c}, {0x4, 0x5, 0x6, 0x8, 0x2, 0xdf1}], [{0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xb}, {0x8dfb4a42dae2f56d}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5c96fd0c102cb707}, {0x3, 0x1}, {0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x861c20290662cc64}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r11, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xff80, 0x10, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r12, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014) 0s ago: executing program 0 (id=3142): socket$inet6(0xa, 0x3, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xb, &(0x7f0000005000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="a1e2158af48797666f79ea3fe29d7becea15eb36a1e6120fadf00717c11d0bd7d55e25b6a7c8386c28f501b0473183a9b03db2af8a9e45f62c86722c5838ae463ee6e948d79919db6c60d26de3331dea136fff29201924dff5fec21b39600d79b937c6fd0eb466888952f0c7311c1ddaf7b566aaf62b27cf9d6e5409303c7602f10d85794d77e2c80c6b902be7a36223bf4db271bcd1ed26dd371b88acd972aefc82847305e3dcf6bd39c746c22b07d6ace2394d794a426cb9037597bd9f2f22f314fdbe29cbbaef43", @ANYRES64=0x0], 0x20) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x1000, [{0x200000, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x4e}, 0x28) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000005000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.4.1478'. [ 241.336819][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 241.356985][T11812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1481'. [ 241.374190][T11803] syzkaller0: entered promiscuous mode [ 241.383300][T11803] syzkaller0: entered allmulticast mode [ 241.401500][T11812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1481'. [ 241.419784][T11815] syzkaller0: entered promiscuous mode [ 241.431444][T11815] syzkaller0: entered allmulticast mode [ 241.559927][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 241.634041][T11830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.109306][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1488'. [ 243.566786][T11887] validate_nla: 1 callbacks suppressed [ 243.566808][T11887] netlink: 'syz.2.1499': attribute type 83 has an invalid length. [ 244.063966][T11922] netlink: 'syz.0.1505': attribute type 2 has an invalid length. [ 244.091893][T11922] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 244.515578][T11945] gtp1: entered promiscuous mode [ 244.533859][T11945] gtp1: entered allmulticast mode [ 244.951049][ T1104] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.971587][ T1104] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.988968][ T1104] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.009077][ T1104] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.066955][T11978] macsec1: entered promiscuous mode [ 245.072548][T11978] bridge0: entered promiscuous mode [ 245.804621][T12001] __nla_validate_parse: 11 callbacks suppressed [ 245.804655][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 246.107503][T12008] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1529'. [ 246.306042][T12006] gre0 speed is unknown, defaulting to 1000 [ 246.946472][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 246.972507][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.002531][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.032137][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.062658][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.093693][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.122511][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.152893][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.204990][T12015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.973974][T12061] x_tables: duplicate underflow at hook 3 [ 248.034730][T12063] vxcan5: entered promiscuous mode [ 248.208635][T12078] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 248.242160][T12074] netlink: 'syz.4.1547': attribute type 3 has an invalid length. [ 248.448832][T12089] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 248.836146][T12112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.491932][T12142] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 250.156444][T12166] gre0 speed is unknown, defaulting to 1000 [ 250.709319][T12197] netlink: 'syz.0.1574': attribute type 3 has an invalid length. [ 250.721505][T12197] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 250.732549][T12197] NCSI netlink: No device for ifindex 813332851 [ 251.124276][T12213] __nla_validate_parse: 20 callbacks suppressed [ 251.124297][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 251.712877][T12232] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1581'. [ 251.790124][T12239] tap0: tun_chr_ioctl cmd 1074812118 [ 252.016893][T12251] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€Ôxµ…üô–)%ë ]ÓÙ.˜>„n÷6‡# [ 252.107183][T12253] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 252.124065][T12253] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1587'. [ 252.322437][T12263] ipip1: entered promiscuous mode [ 252.372712][T12267] x_tables: ip_tables: CT target: only valid in raw table, not  [ 252.435828][T12272] netlink: 'syz.2.1591': attribute type 8 has an invalid length. [ 252.461033][T12273] netlink: 'syz.2.1591': attribute type 8 has an invalid length. [ 252.498201][T12268] netlink: 'syz.1.1590': attribute type 11 has an invalid length. [ 252.578268][T12280] sctp: [Deprecated]: syz.4.1592 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.578268][T12280] Use struct sctp_sack_info instead [ 252.905161][T12298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1597'. [ 253.370433][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 254.195135][T12347] netlink: 'syz.3.1607': attribute type 13 has an invalid length. [ 254.216459][T12347] netlink: 'syz.3.1607': attribute type 17 has an invalid length. [ 254.455787][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.466552][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.486858][T12347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.748286][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 254.784057][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 254.999420][ T10] IPVS: starting estimator thread 0... [ 255.097926][T12389] IPVS: using max 25 ests per chain, 60000 per kthread [ 255.106601][T12391] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 255.135379][T12391] netlink: 'syz.3.1618': attribute type 2 has an invalid length. [ 255.152389][T12391] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 255.170925][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1618'. [ 255.360868][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 256.424378][T12433] tipc: Enabled bearer , priority 0 [ 256.442273][T12434] tipc: Enabling of bearer rejected, already enabled [ 256.482372][T12432] syzkaller0: entered promiscuous mode [ 256.491569][T12432] syzkaller0: entered allmulticast mode [ 256.535279][T12432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1632'. [ 256.574408][T12432] tipc: Resetting bearer [ 256.594109][T12431] tipc: Resetting bearer [ 256.613948][T12431] tipc: Disabling bearer [ 256.658483][T12426] netlink: 'syz.2.1630': attribute type 39 has an invalid length. [ 256.793611][T12426] netlink: 'syz.2.1630': attribute type 39 has an invalid length. [ 256.813653][T12426] netlink: 'syz.2.1630': attribute type 39 has an invalid length. [ 256.831603][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 256.850025][T12426] netlink: 'syz.2.1630': attribute type 39 has an invalid length. [ 257.728529][T12486] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 257.848409][T12486] bond6: entered promiscuous mode [ 257.858289][T12486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.264984][T12495] bond7 (unregistering): Released all slaves [ 258.353244][T12491] gre0 speed is unknown, defaulting to 1000 [ 258.392682][T12505] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 258.432377][T12505] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 258.643686][T12512] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 258.763965][T12512] bond7: entered promiscuous mode [ 258.771570][T12512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.838741][T12519] ipvlan2: entered allmulticast mode [ 258.911996][T12519] bond7: entered allmulticast mode [ 258.955051][T12525] bond7: (slave bridge2): making interface the new active one [ 258.982337][T12525] bridge2: entered promiscuous mode [ 258.988138][T12525] bridge2: entered allmulticast mode [ 259.011605][T12525] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 259.225195][T12532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.244621][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'. [ 259.559803][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 259.637188][T12547] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1657'. [ 259.813078][T12551] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 259.877523][T12551] bond7: entered promiscuous mode [ 259.884009][T12551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.896088][T12558] ipvlan2: entered allmulticast mode [ 259.907984][T12558] bond7: entered allmulticast mode [ 259.941591][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'. [ 259.950956][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'. [ 260.012015][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 260.257315][T12578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1665'. [ 260.446344][T12590] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1667'. [ 260.456898][T12590] 0ªX¹¦À: renamed from caif0 [ 260.664164][T12590] 0ªX¹¦À: entered allmulticast mode [ 260.681928][T12590] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 261.448091][T12632] sit2: entered allmulticast mode [ 261.822834][ T30] audit: type=1107 audit(1776157585.913:4): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaasyzkaller' [ 261.897164][T12642] __nla_validate_parse: 1 callbacks suppressed [ 261.897189][T12642] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1681'. [ 262.130418][T12650] bridge_slave_0: left allmulticast mode [ 262.136639][T12650] bridge_slave_0: left promiscuous mode [ 262.143251][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.428759][T12650] bridge_slave_1: left allmulticast mode [ 262.472161][T12650] bridge_slave_1: left promiscuous mode [ 262.485271][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.562673][T12650] bond0: (slave bond_slave_0): Releasing backup interface [ 262.620878][T12650] bond0: (slave bond_slave_1): Releasing backup interface [ 262.635513][T12650] team0: Port device team_slave_0 removed [ 262.644395][T12650] team0: Port device team_slave_1 removed [ 262.651361][T12650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.702612][T12650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.732855][T12650] bond1: (slave gretap1): Releasing active interface [ 262.772779][T12650] bond4: (slave bridge2): Releasing active interface [ 262.802435][T12650] bond5: (slave wireguard0): Releasing backup interface [ 262.809552][T12650] wireguard0: left promiscuous mode [ 263.180115][ T5836] Bluetooth: hci4: link tx timeout [ 263.185824][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 263.508286][T12685] netlink: 'syz.4.1691': attribute type 2 has an invalid length. [ 263.530755][T12685] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 263.538987][T12685] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 263.858533][T12699] netlink: 'syz.3.1696': attribute type 13 has an invalid length. [ 263.890006][T12699] netlink: 'syz.3.1696': attribute type 17 has an invalid length. [ 264.057688][T12699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.066736][T12699] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.079055][T12699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.108990][T12708] syzkaller0: entered promiscuous mode [ 264.124148][T12708] syzkaller0: entered allmulticast mode [ 264.654760][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 264.690770][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 264.998979][T12746] IPVS: Scheduler module ip_vs_sip not found [ 265.261885][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 265.373428][T12771] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1713'. [ 265.429864][T12769] xt_hashlimit: size too large, truncated to 1048576 [ 266.423788][T12804] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1719'. [ 266.453196][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 266.494524][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 266.510651][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 266.808116][T12824] gre0 speed is unknown, defaulting to 1000 [ 267.660393][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.685768][T12861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.022914][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1729'. [ 268.191701][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 268.240711][T12874] gre0 speed is unknown, defaulting to 1000 [ 268.249421][T12885] lo: entered allmulticast mode [ 268.444699][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1736'. [ 268.454142][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1736'. [ 268.727647][ T5828] gre0 speed is unknown, defaulting to 1000 [ 268.734414][ T5828] syz1: Port: 1 Link DOWN [ 268.754630][ T5828] gre0 speed is unknown, defaulting to 1000 [ 269.099267][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 269.454041][T12942] netlink: 'syz.4.1743': attribute type 4 has an invalid length. [ 269.480999][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.489335][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.846604][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 269.862725][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'. [ 270.778147][T13011] syzkaller0: entered promiscuous mode [ 270.804301][T13011] syzkaller0: entered allmulticast mode [ 271.175457][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1767'. [ 271.193244][T13037] openvswitch: netlink: IP tunnel dst address not specified [ 271.202354][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 271.227205][T13043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 271.240463][T13042] bridge_slave_1: left allmulticast mode [ 271.253013][T13042] bridge_slave_1: left promiscuous mode [ 271.272055][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.301464][T13042] bridge_slave_0: left allmulticast mode [ 271.317696][T13042] bridge_slave_0: left promiscuous mode [ 271.344883][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.551365][T13053] netlink: 'syz.2.1770': attribute type 8 has an invalid length. [ 271.869937][T13073] syzkaller0: entered promiscuous mode [ 271.895811][T13073] syzkaller0: entered allmulticast mode [ 272.465660][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 272.507261][ T30] audit: type=1804 audit(1776157596.583:5): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1780" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1678 res=1 errno=0 [ 272.543317][ T30] audit: type=1800 audit(1776157596.623:6): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1780" name="cgroup.controllers" dev="tmpfs" ino=1678 res=0 errno=0 [ 272.790324][T13116] tipc: Enabling of bearer rejected, failed to enable media [ 273.206974][T13145] __nla_validate_parse: 4 callbacks suppressed [ 273.206996][T13145] netlink: 712 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.232132][T13145] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.233346][T13139] gre0 speed is unknown, defaulting to 1000 [ 273.268462][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1785'. [ 273.320142][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 273.879052][T13167] syzkaller0: entered promiscuous mode [ 273.914261][T13167] syzkaller0: entered allmulticast mode [ 274.048266][T12770] udevd[12770]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.355913][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 275.398249][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 275.495256][T13246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1800'. [ 275.506944][T13246] openvswitch: netlink: Flow key attr not present in new flow. [ 275.596187][T13250] syzkaller0: entered promiscuous mode [ 275.638141][T13250] syzkaller0: entered allmulticast mode [ 275.702138][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 275.890700][T13260] xfrm1: entered allmulticast mode [ 275.928198][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 276.546559][T13283] netlink: 'syz.4.1812': attribute type 9 has an invalid length. [ 276.587598][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 276.815324][T13292] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 276.841854][T13292] bridge3: entered allmulticast mode [ 276.900745][T13292] IPv6: Can't replace route, no match found [ 276.907632][T13292] IPv6: Can't replace route, no match found [ 276.938780][T13301] syzkaller0: entered promiscuous mode [ 276.959114][T13301] syzkaller0: entered allmulticast mode [ 277.733475][T13342] gre0 speed is unknown, defaulting to 1000 [ 277.806137][T13335] can: request_module (can-proto-5) failed. [ 277.975549][T13343] gre0 speed is unknown, defaulting to 1000 [ 278.192335][T13351] syzkaller0: entered promiscuous mode [ 278.197855][T13351] syzkaller0: entered allmulticast mode [ 278.554911][T13354] IPVS: Scheduler module ip_vs_sip not found [ 279.614685][T13406] syz_tun: entered promiscuous mode [ 279.620458][T13406] vlan3: entered promiscuous mode [ 279.659756][T13414] __nla_validate_parse: 3 callbacks suppressed [ 279.659777][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1850'. [ 279.796031][T13416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1852'. [ 279.798128][T13418] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1852'. [ 280.538858][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 280.662952][T13446] bond10 (unregistering): Released all slaves [ 280.867371][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 281.158758][T13467] bond6: option ad_user_port_key: invalid value (65535) [ 281.170947][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 281.182204][T13472] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1866'. [ 281.191291][T13467] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 281.201139][T13467] bond6 (unregistering): Released all slaves [ 281.244354][T13472] vlan3: entered allmulticast mode [ 281.254562][T13472] macvtap0: entered allmulticast mode [ 281.421227][T13491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1870'. [ 281.425976][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 281.465905][T13498] netlink: 'syz.4.1872': attribute type 2 has an invalid length. [ 281.474341][T13498] netlink: 6287 bytes leftover after parsing attributes in process `syz.4.1872'. [ 281.484554][T13498] netlink: 'syz.4.1872': attribute type 2 has an invalid length. [ 281.745056][T13518] hsr_slave_0: left promiscuous mode [ 281.753079][T13518] hsr_slave_1: left promiscuous mode [ 281.936702][T13526] syzkaller1: entered promiscuous mode [ 281.942781][T13526] syzkaller1: entered allmulticast mode [ 281.956188][T13526] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 282.031081][T13526] gretap3: entered allmulticast mode [ 282.041144][T13526] bond7: (slave gretap3): making interface the new active one [ 282.050589][T13526] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 282.296807][T13539] openvswitch: netlink: Tunnel attr 117 out of range max 16 [ 282.454574][T13544] bond8: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 282.467472][T13544] bond8 (unregistering): Released all slaves [ 282.907963][T13569] syzkaller0: entered promiscuous mode [ 282.913940][T13569] syzkaller0: entered allmulticast mode [ 282.922874][T13568] syzkaller0: entered promiscuous mode [ 282.930252][T13568] syzkaller0: entered allmulticast mode [ 283.012791][T13574] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 283.099919][T13569] batman_adv: batadv0: Adding interface: macvtap1 [ 283.123775][T13569] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.150737][T13569] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 283.226902][T13584] syzkaller0: entered promiscuous mode [ 283.242273][T13584] syzkaller0: entered allmulticast mode [ 283.259723][T13584] x_tables: duplicate entry at hook 3 [ 283.317197][T13587] wg1: Master is either lo or non-ether device [ 283.932311][T13623] netlink: 'syz.3.1912': attribute type 11 has an invalid length. [ 284.793233][T13635] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.832972][T13635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.911945][T13643] netlink: 'syz.2.1917': attribute type 2 has an invalid length. [ 284.919943][T13643] __nla_validate_parse: 7 callbacks suppressed [ 284.919963][T13643] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.1917'. [ 285.095920][T13658] netlink: 'syz.1.1920': attribute type 30 has an invalid length. [ 285.190545][T13658] bond8: option arp_missed_max: invalid value (0) [ 285.198786][T13658] bond8: option arp_missed_max: allowed values 1 - 255 [ 285.234724][T13658] bond8 (unregistering): Released all slaves [ 285.291406][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 285.313816][T13664] batadv_slave_1: entered promiscuous mode [ 285.360249][T13677] batman_adv: batadv0: Removing interface: ipvlan3 [ 285.381101][T13677] batadv_slave_1 (unregistering): left promiscuous mode [ 285.404195][T13677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.555245][T13664] syzkaller0: entered promiscuous mode [ 285.561143][T13664] syzkaller0: entered allmulticast mode [ 285.575306][T13660] gre0 speed is unknown, defaulting to 1000 [ 285.703382][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 285.972189][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'. [ 287.473575][T13701] vlan3: entered allmulticast mode [ 287.478836][T13701] bridge0: entered allmulticast mode [ 287.485493][T13702] bridge0: port 1(erspan0) entered blocking state [ 287.496473][T13702] bridge0: port 1(erspan0) entered disabled state [ 287.506682][T13702] erspan0: entered allmulticast mode [ 287.516388][T13702] erspan0: entered promiscuous mode [ 287.524152][T13702] bridge0: port 1(erspan0) entered blocking state [ 287.531735][T13702] bridge0: port 1(erspan0) entered forwarding state [ 287.554082][T13703] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 287.737395][T13660] tipc: can't start tipc receive workqueue [ 287.862157][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 287.985841][T13733] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1936'. [ 288.123807][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 288.139670][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'. [ 288.294535][T13746] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1943'. [ 288.320056][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1944'. [ 288.428301][T13756] tap0: tun_chr_ioctl cmd 2148553947 [ 288.520097][T13760] openvswitch: netlink: Invalid VLAN frame [ 288.568708][T13762] tap0: tun_chr_ioctl cmd 1074025673 [ 288.574980][T13756] tap0: tun_chr_ioctl cmd 2148553947 [ 288.654071][T13768] gre0 speed is unknown, defaulting to 1000 [ 289.275744][T13788] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 289.289468][T13788] bond8 (unregistering): Released all slaves [ 289.597759][T13805] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 290.219369][T13828] gre0 speed is unknown, defaulting to 1000 [ 290.230472][T13834] __nla_validate_parse: 9 callbacks suppressed [ 290.230494][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 290.292612][T13834] ip6erspan0: entered promiscuous mode [ 290.456658][T13839] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 290.702028][T13846] netlink: 'syz.0.1968': attribute type 2 has an invalid length. [ 290.741012][T13846] netlink: 'syz.0.1968': attribute type 2 has an invalid length. [ 290.844609][T13836] gre0 speed is unknown, defaulting to 1000 [ 290.893406][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 290.925103][T13852] bridge_slave_1: left allmulticast mode [ 290.931300][T13852] bridge_slave_1: left promiscuous mode [ 290.957930][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.983029][T13852] bridge_slave_0: left allmulticast mode [ 290.999416][T13852] bridge_slave_0: left promiscuous mode [ 291.006855][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.322420][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 291.659642][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 291.844162][T13873] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 292.159621][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 292.390935][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 292.584845][T13900] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 292.604028][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 292.634547][T13901] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 292.662217][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 292.884566][T13915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1988'. [ 293.069835][T13927] netlink: 'syz.2.1991': attribute type 4 has an invalid length. [ 293.089269][T13930] netlink: 'syz.2.1991': attribute type 4 has an invalid length. [ 293.089396][T13927] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1991'. [ 293.129769][T13927] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.188744][T13930] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.269646][T13938] netlink: 'syz.4.1995': attribute type 13 has an invalid length. [ 293.290090][T13938] gretap0: refused to change device tx_queue_len [ 293.309678][T13938] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.537901][T13948] gre0 speed is unknown, defaulting to 1000 [ 294.215142][T13960] gre0 speed is unknown, defaulting to 1000 [ 294.769868][T13992] Cannot find set identified by id 3 to match [ 295.560312][T14026] __nla_validate_parse: 6 callbacks suppressed [ 295.560331][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 295.778109][T14033] dvmrp6: entered allmulticast mode [ 296.033799][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2028'. [ 296.627784][T14061] IPVS: Scheduler module ip_vs_ not found [ 297.389170][T14087] gre0 speed is unknown, defaulting to 1000 [ 297.414620][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2035'. [ 297.840578][T14088] gre0 speed is unknown, defaulting to 1000 [ 298.306041][T14122] bond6: entered promiscuous mode [ 298.318323][T14122] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.548493][T14130] geneve3: entered promiscuous mode [ 298.566157][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.576976][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.651223][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.808078][T14151] netlink: 'syz.0.2050': attribute type 4 has an invalid length. [ 300.545778][T14098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.757296][T14188] syzkaller0: entered promiscuous mode [ 300.772123][T14188] syzkaller0: entered allmulticast mode [ 300.779182][T14189] xt_hashlimit: size too large, truncated to 1048576 [ 300.940823][T14204] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 300.959336][T14204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2065'. [ 300.980904][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2063'. [ 301.063370][T14210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2065'. [ 301.119859][T14214] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2065'. [ 301.133608][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 301.406570][T14228] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 65, id = 0 [ 301.601579][T14241] sctp: [Deprecated]: syz.0.2073 (pid 14241) Use of int in max_burst socket option. [ 301.601579][T14241] Use struct sctp_assoc_value instead [ 301.645570][T14246] netlink: 'syz.2.2072': attribute type 3 has an invalid length. [ 301.920495][T14255] syzkaller0: entered promiscuous mode [ 301.932027][T14255] syzkaller0: entered allmulticast mode [ 302.069185][T14268] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 302.667204][T14303] xt_hashlimit: invalid rate [ 302.709365][T14307] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 302.757401][T14307] openvswitch: netlink: Message has 16 unknown bytes. [ 302.759031][T14311] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 302.784018][T14311] openvswitch: netlink: Message has 16 unknown bytes. [ 302.805239][T14307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2086'. [ 302.829188][T14311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2086'. [ 302.841567][T14307] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 302.892650][T14311] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 302.906687][T14315] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 302.930607][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 302.977615][T14313] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 303.067030][T14320] syzkaller0: entered promiscuous mode [ 303.076522][T14320] syzkaller0: entered allmulticast mode [ 303.867718][T14372] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.185747][T14388] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 304.202626][T14388] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 304.238056][T14385] syzkaller0: entered promiscuous mode [ 304.264060][T14385] syzkaller0: entered allmulticast mode [ 304.696710][T14408] openvswitch: netlink: Unknown key attributes 2 [ 304.721203][T14423] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2111'. [ 305.898655][T14454] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2120'. [ 306.065420][T14462] syzkaller0: entered promiscuous mode [ 306.071151][T14462] syzkaller0: entered allmulticast mode [ 306.307065][T14465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.368551][T14480] nftables ruleset with unbound chain [ 306.386778][T14471] Unsupported ieee802154 address type: 0 [ 306.392830][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 306.732332][T14500] Unsupported ieee802154 address type: 0 [ 307.021435][T14518] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.2129'. [ 308.003821][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2129'. [ 308.043695][T14511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2129'. [ 308.072136][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2129'. [ 308.096581][T14511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2129'. [ 308.206204][T14518] gretap2: entered promiscuous mode [ 308.225908][T14518] batman_adv: batadv0: Adding interface: gretap2 [ 308.242535][T14518] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 308.319742][T14518] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 308.416825][T14542] macsec0: entered allmulticast mode [ 308.423181][T14547] veth1_macvtap: entered allmulticast mode [ 308.442201][T14547] macsec0: left allmulticast mode [ 308.468040][T14547] veth1_macvtap: left allmulticast mode [ 308.654924][T14575] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 308.907208][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2140'. [ 309.202905][T14602] netlink: 'syz.0.2145': attribute type 30 has an invalid length. [ 309.288617][T14612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2145'. [ 309.400152][T14609] gre0 speed is unknown, defaulting to 1000 [ 309.942664][T14603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.516276][T14651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2151'. [ 310.831305][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 311.379647][T14692] openvswitch: netlink: Missing valid actions attribute. [ 311.388468][T14692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.422329][T14694] netlink: 'syz.3.2161': attribute type 9 has an invalid length. [ 311.719095][T14708] tipc: Enabled bearer , priority 0 [ 311.780468][T14708] tipc: Disabling bearer [ 312.596699][T14745] netlink: 'syz.0.2170': attribute type 83 has an invalid length. [ 312.621284][T14748] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.2170'. [ 312.846316][T14762] openvswitch: netlink: IP tunnel TTL not specified. [ 313.040864][T14775] Unsupported ieee802154 address type: 0 [ 313.524797][T14796] netlink: 'syz.2.2184': attribute type 4 has an invalid length. [ 313.536250][T14796] netlink: 'syz.2.2184': attribute type 4 has an invalid length. [ 313.684301][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'. [ 313.702126][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'. [ 313.732281][T14807] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 313.803652][T14807] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.822460][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 314.103668][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2186'. [ 314.224955][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 314.311247][T14794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 314.332070][T14794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 314.638888][T14856] netlink: 'syz.3.2200': attribute type 8 has an invalid length. [ 314.802747][T14862] netlink: 'syz.3.2202': attribute type 25 has an invalid length. [ 314.970943][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 314.994952][T14874] syzkaller1: entered promiscuous mode [ 315.001003][T14874] syzkaller1: entered allmulticast mode [ 315.080027][T14873] bond8: Invalid ad_actor_system MAC address. [ 315.103528][T14873] bond8: option ad_actor_system: invalid value (7) [ 315.120817][T14873] bond8 (unregistering): Released all slaves [ 315.266566][T14887] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 315.276074][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2209'. [ 315.323824][T14846] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.436299][T14902] netlink: 'syz.1.2213': attribute type 21 has an invalid length. [ 315.445309][T14902] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2213'. [ 315.452209][T14904] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 315.457800][T14902] netlink: 'syz.1.2213': attribute type 4 has an invalid length. [ 315.462669][T14904] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2214'. [ 315.507389][T14902] netlink: 'syz.1.2213': attribute type 5 has an invalid length. [ 315.516703][T14907] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 315.538234][T14902] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2213'. [ 315.794912][T14919] gre0 speed is unknown, defaulting to 1000 [ 316.458524][T14957] geneve3: entered promiscuous mode [ 316.565625][T14957] netem: unknown loss type 11 [ 316.571166][T14957] netem: change failed [ 316.688830][T14969] sctp: [Deprecated]: syz.2.2231 (pid 14969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.688830][T14969] Use struct sctp_sack_info instead [ 316.723542][T14967] xt_time: unknown flags 0xf4 [ 316.734663][T14969] x_tables: duplicate underflow at hook 1 [ 316.764774][T14966] gre0 speed is unknown, defaulting to 1000 [ 317.124182][T14991] tipc: Enabling of bearer rejected, failed to enable media [ 317.783223][T15014] gre0 speed is unknown, defaulting to 1000 [ 317.814500][T15020] __nla_validate_parse: 7 callbacks suppressed [ 317.814523][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 317.877790][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 318.258323][T15037] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 318.318424][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 318.380794][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 318.834698][T15058] Set syz1 is full, maxelem 2 reached [ 319.028615][T15062] openvswitch: netlink: Message has 8 unknown bytes. [ 319.036098][T15062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.127980][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 319.179633][T15074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2258'. [ 319.189145][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.213243][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 319.222553][T15074] block nbd1: not configured, cannot reconfigure [ 319.244327][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.303537][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.313111][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.392918][T15067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.415310][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 319.416399][T15067] bond8: (slave bond9): Enslaving as an active interface with an up link [ 319.624111][T15087] geneve0: entered promiscuous mode [ 319.695297][T15092] gre0 speed is unknown, defaulting to 1000 [ 319.746618][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'. [ 319.854276][T15101] erspan0: entered promiscuous mode [ 319.893502][T15101] gretap0: entered promiscuous mode [ 319.921573][T15101] debugfs: 'hsr1' already exists in 'hsr' [ 319.947603][T15101] Cannot create hsr debugfs directory [ 319.963382][T15101] hsr1: entered promiscuous mode [ 320.163852][T15111] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 320.198315][T15117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2273'. [ 320.531840][T15111] block nbd1: server does not support multiple connections per device. [ 320.564498][T15111] block nbd1: shutting down sockets [ 321.906939][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.620543][T15245] syzkaller0: entered promiscuous mode [ 322.653641][T15245] syzkaller0: entered allmulticast mode [ 322.999347][T15273] netlink: 'syz.2.2311': attribute type 21 has an invalid length. [ 323.017497][T15273] __nla_validate_parse: 3 callbacks suppressed [ 323.017518][T15273] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2311'. [ 323.063259][T15273] netlink: 'syz.2.2311': attribute type 5 has an invalid length. [ 323.081113][T15273] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2311'. [ 323.164764][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2314'. [ 323.386174][T15296] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2318'. [ 323.525723][T15298] gre0 speed is unknown, defaulting to 1000 [ 323.602541][T15306] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 323.624706][T15307] x_tables: duplicate underflow at hook 2 [ 323.644364][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 324.105253][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 324.190101][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 324.753865][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'. [ 325.090409][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 325.316553][T15389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2338'. [ 325.394514][T15394] netlink: 'syz.4.2339': attribute type 1 has an invalid length. [ 325.908416][T15413] netlink: 'syz.1.2343': attribute type 13 has an invalid length. [ 326.601264][T15446] 0ªX¹¦À: left allmulticast mode [ 326.655641][T15446] bond3: left promiscuous mode [ 326.660894][T15446] bond3: left allmulticast mode [ 326.667626][T15446] bond5: left promiscuous mode [ 326.691694][T15446] vlan3: left allmulticast mode [ 326.697137][T15446] macvtap0: left allmulticast mode [ 326.704706][T15446] gretap3: left allmulticast mode [ 326.752611][T15455] veth1_to_team: entered allmulticast mode [ 327.118894][T15482] openvswitch: netlink: Key type 310 is out of range max 32 [ 327.196923][T15486] lo speed is unknown, defaulting to 1000 [ 327.205428][T15486] lo speed is unknown, defaulting to 1000 [ 327.233500][T15486] lo speed is unknown, defaulting to 1000 [ 327.299886][T15486] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 327.329117][T15496] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 327.375887][T15493] syzkaller0: entered promiscuous mode [ 327.381526][T15493] syzkaller0: entered allmulticast mode [ 327.449584][T15486] lo speed is unknown, defaulting to 1000 [ 327.521150][T15486] lo speed is unknown, defaulting to 1000 [ 327.523686][T15504] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 327.541947][T15504] syzkaller1: linktype set to 0 [ 327.547574][T15486] lo speed is unknown, defaulting to 1000 [ 327.565425][T15486] lo speed is unknown, defaulting to 1000 [ 327.602283][T15486] lo speed is unknown, defaulting to 1000 [ 327.914099][T15523] netlink: 'syz.4.2373': attribute type 11 has an invalid length. [ 328.058498][T15528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.125658][T15528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.136623][T15537] __nla_validate_parse: 8 callbacks suppressed [ 328.136648][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 328.275607][T15528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.304213][T15528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.339998][T15543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2376'. [ 328.374353][T15545] netlink: 'syz.0.2378': attribute type 2 has an invalid length. [ 328.385608][T15545] netlink: 'syz.0.2378': attribute type 8 has an invalid length. [ 328.396677][T15545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2378'. [ 328.447406][T15528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.461239][T15548] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 328.472130][T15528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.559087][T15548] bond9: entered promiscuous mode [ 328.571106][T15548] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.602938][T15550] gre0 speed is unknown, defaulting to 1000 [ 328.801718][T15528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.871153][T15528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.070664][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.080377][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.146471][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.160355][T15564] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 329.161674][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.216266][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2384'. [ 329.229329][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 329.232361][T15564] 8021q: adding VLAN 0 to HW filter on device bond11 [ 329.311045][T15576] bond11 (unregistering): Released all slaves [ 329.342334][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.361943][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.371413][T15571] gre0 speed is unknown, defaulting to 1000 [ 329.385678][T15550] lo speed is unknown, defaulting to 1000 [ 329.402360][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.434117][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.540661][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2385'. [ 329.595291][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2386'. [ 329.645890][T15583] team_slave_0: entered promiscuous mode [ 329.684630][T15583] team_slave_0: entered allmulticast mode [ 330.136125][T15571] lo speed is unknown, defaulting to 1000 [ 331.041571][T15635] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 331.114273][T15637] x_tables: duplicate underflow at hook 1 [ 331.327510][T15646] netlink: 'syz.0.2401': attribute type 30 has an invalid length. [ 331.337308][T15646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2401'. [ 331.517240][T15646] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 331.531418][T15646] bond9 (unregistering): Released all slaves [ 331.544910][T15662] x_tables: duplicate underflow at hook 2 [ 331.736998][T15671] batman_adv: batadv0: Adding interface: dummy0 [ 331.806658][T15671] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.906384][T15671] batman_adv: batadv0: Interface activated: dummy0 [ 331.935622][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 332.070491][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 332.105303][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 332.225650][T15698] IPVS: Scheduler module ip_vs_ not found [ 332.234425][T15699] IPVS: Scheduler module ip_vs_ not found [ 332.826163][T15687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.037967][T15772] __nla_validate_parse: 1 callbacks suppressed [ 334.037990][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 334.638527][T15799] x_tables: duplicate underflow at hook 1 [ 334.690287][T15799] x_tables: duplicate underflow at hook 1 [ 335.013982][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 335.056778][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'. [ 335.096396][T15810] netlink: 'syz.1.2428': attribute type 4 has an invalid length. [ 335.318090][T15822] syzkaller0: entered promiscuous mode [ 335.324620][T15822] syzkaller0: entered allmulticast mode [ 335.335489][T15822] FAULT_INJECTION: forcing a failure. [ 335.335489][T15822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 335.351311][T15822] CPU: 0 UID: 0 PID: 15822 Comm: syz.3.2432 Not tainted syzkaller #0 PREEMPT(full) [ 335.351340][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.351353][T15822] Call Trace: [ 335.351361][T15822] [ 335.351370][T15822] dump_stack_lvl+0xe8/0x150 [ 335.351406][T15822] should_fail_ex+0x412/0x560 [ 335.351442][T15822] _copy_from_user+0x2d/0xb0 [ 335.351467][T15822] __copy_msghdr+0x3c5/0x5b0 [ 335.351500][T15822] ___sys_sendmsg+0x213/0x360 [ 335.351536][T15822] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.351669][T15822] ? __fget_files+0x2a/0x420 [ 335.351697][T15822] ? __fget_files+0x3a0/0x420 [ 335.351751][T15822] __x64_sys_sendmsg+0x1bd/0x2a0 [ 335.351786][T15822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.351836][T15822] ? __pfx_ksys_write+0x10/0x10 [ 335.351877][T15822] do_syscall_64+0x14d/0xf80 [ 335.351918][T15822] ? trace_irq_disable+0x3b/0x150 [ 335.351936][T15822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.351957][T15822] ? clear_bhb_loop+0x40/0x90 [ 335.351981][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.352001][T15822] RIP: 0033:0x7faf9e39c819 [ 335.352021][T15822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.352038][T15822] RSP: 002b:00007faf9f290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.352059][T15822] RAX: ffffffffffffffda RBX: 00007faf9e615fa0 RCX: 00007faf9e39c819 [ 335.352074][T15822] RDX: 0000000000004011 RSI: 00002000000000c0 RDI: 000000000000000a [ 335.352086][T15822] RBP: 00007faf9f290090 R08: 0000000000000000 R09: 0000000000000000 [ 335.352115][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.352125][T15822] R13: 00007faf9e616038 R14: 00007faf9e615fa0 R15: 00007ffc7a5dab28 [ 335.352155][T15822] [ 335.586619][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 335.895003][T15848] xt_nat: multiple ranges no longer supported [ 335.908857][T15809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 336.108627][T15852] syzkaller1: entered promiscuous mode [ 336.116852][T15852] syzkaller1: entered allmulticast mode [ 336.366426][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 338.579003][T15829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.594015][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 338.706480][T15874] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 338.721998][T15874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2444'. [ 338.731182][T15874] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2444'. [ 338.835428][T15883] nbd: must specify at least one socket [ 338.963320][T15887] syzkaller0: entered promiscuous mode [ 338.980295][T15887] syzkaller0: entered allmulticast mode [ 339.064332][T15906] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 339.267938][T15911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2450'. [ 339.367496][T15906] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.503130][T15909] bond8: (slave veth11): Enslaving as an active interface with a down link [ 339.768602][T15914] bond11: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 339.785516][T15914] bond11: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 339.800381][T15931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 339.811842][T15931] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2455'. [ 339.824019][T15931] tipc: Invalid UDP bearer configuration [ 339.824079][T15931] tipc: Enabling of bearer rejected, failed to enable media [ 339.993395][ T5903] lo speed is unknown, defaulting to 1000 [ 340.040382][T15943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2456'. [ 340.099405][T15947] netlink: 'syz.3.2457': attribute type 4 has an invalid length. [ 340.430909][T15928] netlink: 'syz.0.2454': attribute type 13 has an invalid length. [ 340.441338][T15958] nbd: must specify at least one socket [ 340.923769][T15978] syzkaller0: entered promiscuous mode [ 340.929496][T15978] syzkaller0: entered allmulticast mode [ 341.043508][T15980] netlink: 'syz.4.2466': attribute type 2 has an invalid length. [ 341.058091][T15980] netlink: 'syz.4.2466': attribute type 8 has an invalid length. [ 341.131951][T15980] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2466'. [ 341.274334][T15991] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2471'. [ 341.429328][T15980] gre0 speed is unknown, defaulting to 1000 [ 341.666739][T16006] FAULT_INJECTION: forcing a failure. [ 341.666739][T16006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.701947][T16006] CPU: 0 UID: 0 PID: 16006 Comm: syz.3.2475 Not tainted syzkaller #0 PREEMPT(full) [ 341.701977][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 341.701989][T16006] Call Trace: [ 341.701998][T16006] [ 341.702007][T16006] dump_stack_lvl+0xe8/0x150 [ 341.702042][T16006] should_fail_ex+0x412/0x560 [ 341.702081][T16006] _copy_from_user+0x2d/0xb0 [ 341.702107][T16006] ___sys_sendmsg+0x1c6/0x360 [ 341.702142][T16006] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.702215][T16006] ? __fget_files+0x2a/0x420 [ 341.702234][T16006] ? __fget_files+0x3a0/0x420 [ 341.702261][T16006] __x64_sys_sendmsg+0x1bd/0x2a0 [ 341.702293][T16006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.702334][T16006] ? __pfx_ksys_write+0x10/0x10 [ 341.702370][T16006] do_syscall_64+0x14d/0xf80 [ 341.702393][T16006] ? trace_irq_disable+0x3b/0x150 [ 341.702413][T16006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.702433][T16006] ? clear_bhb_loop+0x40/0x90 [ 341.702458][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.702499][T16006] RIP: 0033:0x7faf9e39c819 [ 341.702520][T16006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.702538][T16006] RSP: 002b:00007faf9f290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.702561][T16006] RAX: ffffffffffffffda RBX: 00007faf9e615fa0 RCX: 00007faf9e39c819 [ 341.702577][T16006] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 341.702589][T16006] RBP: 00007faf9f290090 R08: 0000000000000000 R09: 0000000000000000 [ 341.702602][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.702614][T16006] R13: 00007faf9e616038 R14: 00007faf9e615fa0 R15: 00007ffc7a5dab28 [ 341.702649][T16006] [ 341.981332][T15980] lo speed is unknown, defaulting to 1000 [ 342.112533][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'. [ 342.282156][T16021] tunl0: Caught tx_queue_len zero misconfig [ 342.313281][T16026] sit0: entered promiscuous mode [ 342.341470][T16026] netlink: 'syz.4.2480': attribute type 1 has an invalid length. [ 342.353178][T16026] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2480'. [ 342.403175][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 342.519095][T16027] syzkaller0: entered promiscuous mode [ 342.528094][T16038] FAULT_INJECTION: forcing a failure. [ 342.528094][T16038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.544217][T16027] syzkaller0: entered allmulticast mode [ 342.552854][T16038] CPU: 0 UID: 0 PID: 16038 Comm: syz.0.2479 Not tainted syzkaller #0 PREEMPT(full) [ 342.552882][T16038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 342.552894][T16038] Call Trace: [ 342.552903][T16038] [ 342.552912][T16038] dump_stack_lvl+0xe8/0x150 [ 342.552947][T16038] should_fail_ex+0x412/0x560 [ 342.552985][T16038] _copy_to_user+0x31/0xb0 [ 342.553013][T16038] simple_read_from_buffer+0xe1/0x170 [ 342.553050][T16038] proc_fail_nth_read+0x1bb/0x230 [ 342.553084][T16038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.553119][T16038] ? rw_verify_area+0x2a6/0x4d0 [ 342.553142][T16038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.553180][T16038] vfs_read+0x20c/0xa70 [ 342.553202][T16038] ? fdget_pos+0x246/0x320 [ 342.553226][T16038] ? __pfx___mutex_lock+0x10/0x10 [ 342.553254][T16038] ? __pfx_vfs_read+0x10/0x10 [ 342.553279][T16038] ? __fget_files+0x2a/0x420 [ 342.553304][T16038] ? __fget_files+0x3a0/0x420 [ 342.553322][T16038] ? __fget_files+0x2a/0x420 [ 342.553351][T16038] ksys_read+0x150/0x270 [ 342.553377][T16038] ? __pfx_ksys_read+0x10/0x10 [ 342.553414][T16038] do_syscall_64+0x14d/0xf80 [ 342.553438][T16038] ? trace_irq_disable+0x3b/0x150 [ 342.553467][T16038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.553488][T16038] ? clear_bhb_loop+0x40/0x90 [ 342.553514][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.553534][T16038] RIP: 0033:0x7f8bb5f5d04e [ 342.553555][T16038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.553582][T16038] RSP: 002b:00007f8bb6dc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.553605][T16038] RAX: ffffffffffffffda RBX: 00007f8bb6dc26c0 RCX: 00007f8bb5f5d04e [ 342.553621][T16038] RDX: 000000000000000f RSI: 00007f8bb6dc20a0 RDI: 000000000000000b [ 342.553635][T16038] RBP: 00007f8bb6dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 342.553647][T16038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.553659][T16038] R13: 00007f8bb6216218 R14: 00007f8bb6216180 R15: 00007ffc56701e58 [ 342.553694][T16038] [ 343.056747][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 343.113681][T16050] Cannot find del_set index 4 as target [ 345.022744][T16070] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 345.041906][T16069] sctp: [Deprecated]: syz.2.2491 (pid 16069) Use of int in max_burst socket option. [ 345.041906][T16069] Use struct sctp_assoc_value instead [ 345.062633][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 345.074728][T16070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2490'. [ 345.094825][T16071] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2492'. [ 345.314339][T16085] bond10 (unregistering): Released all slaves [ 345.381558][T16095] 8021q: VLANs not supported on ip6_vti0 [ 345.464233][T16101] FAULT_INJECTION: forcing a failure. [ 345.464233][T16101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.494839][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.1.2499 Not tainted syzkaller #0 PREEMPT(full) [ 345.494869][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.494881][T16101] Call Trace: [ 345.494890][T16101] [ 345.494899][T16101] dump_stack_lvl+0xe8/0x150 [ 345.494936][T16101] should_fail_ex+0x412/0x560 [ 345.494974][T16101] _copy_from_iter+0x1d3/0x1670 [ 345.495001][T16101] ? rcu_is_watching+0x15/0xb0 [ 345.495036][T16101] ? __pfx__copy_from_iter+0x10/0x10 [ 345.495066][T16101] ? netlink_sendmsg+0x650/0xb40 [ 345.495094][T16101] ? skb_put+0x11b/0x210 [ 345.495126][T16101] netlink_sendmsg+0x6c0/0xb40 [ 345.495164][T16101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.495196][T16101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.495219][T16101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.495247][T16101] ____sys_sendmsg+0x972/0x9f0 [ 345.495287][T16101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.495327][T16101] ? import_iovec+0x73/0xa0 [ 345.495355][T16101] ___sys_sendmsg+0x2a5/0x360 [ 345.495391][T16101] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.495458][T16101] ? __fget_files+0x2a/0x420 [ 345.495478][T16101] ? __fget_files+0x3a0/0x420 [ 345.495508][T16101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.495541][T16101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.495582][T16101] ? __pfx_ksys_write+0x10/0x10 [ 345.495619][T16101] do_syscall_64+0x14d/0xf80 [ 345.495641][T16101] ? trace_irq_disable+0x3b/0x150 [ 345.495660][T16101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.495681][T16101] ? clear_bhb_loop+0x40/0x90 [ 345.495706][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.495726][T16101] RIP: 0033:0x7fad84f9c819 [ 345.495746][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.495764][T16101] RSP: 002b:00007fad85f08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.495796][T16101] RAX: ffffffffffffffda RBX: 00007fad85215fa0 RCX: 00007fad84f9c819 [ 345.495817][T16101] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 345.495831][T16101] RBP: 00007fad85f08090 R08: 0000000000000000 R09: 0000000000000000 [ 345.495844][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.495856][T16101] R13: 00007fad85216038 R14: 00007fad85215fa0 R15: 00007fffbcb0d3c8 [ 345.495889][T16101] [ 345.535848][T16106] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2501'. [ 345.746676][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 346.084714][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 346.251018][T16143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2512'. [ 346.261142][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 346.277416][T16143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2512'. [ 346.287569][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 346.436774][T16154] lo: Caught tx_queue_len zero misconfig [ 346.526951][T16156] syzkaller0: entered promiscuous mode [ 346.551574][T16156] syzkaller0: entered allmulticast mode [ 346.605370][T16164] xt_hashlimit: size too large, truncated to 1048576 [ 346.636115][T16159] gre0 speed is unknown, defaulting to 1000 [ 347.297077][T16193] syzkaller0: entered promiscuous mode [ 347.302987][T16193] syzkaller0: entered allmulticast mode [ 347.310957][T16159] lo speed is unknown, defaulting to 1000 [ 347.938282][T16227] sch_fq: defrate 0 ignored. [ 348.552872][T16249] gre0 speed is unknown, defaulting to 1000 [ 348.788893][T16266] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 348.790641][T16271] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 348.862356][T16269] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 349.226401][T16249] lo speed is unknown, defaulting to 1000 [ 349.380274][T16299] FAULT_INJECTION: forcing a failure. [ 349.380274][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.435711][T16300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.455940][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.1.2555 Not tainted syzkaller #0 PREEMPT(full) [ 349.455973][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.455985][T16299] Call Trace: [ 349.455993][T16299] [ 349.456002][T16299] dump_stack_lvl+0xe8/0x150 [ 349.456044][T16299] should_fail_ex+0x412/0x560 [ 349.456083][T16299] _copy_from_user+0x2d/0xb0 [ 349.456108][T16299] kstrtouint_from_user+0xd6/0x180 [ 349.456140][T16299] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 349.456188][T16299] proc_fail_nth_write+0x8e/0x210 [ 349.456217][T16299] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 349.456252][T16299] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 349.456281][T16299] vfs_write+0x29a/0xb90 [ 349.456316][T16299] ? __pfx_vfs_write+0x10/0x10 [ 349.456340][T16299] ? __fget_files+0x2a/0x420 [ 349.456364][T16299] ? __fget_files+0x3a0/0x420 [ 349.456382][T16299] ? __fget_files+0x2a/0x420 [ 349.456426][T16299] ksys_write+0x150/0x270 [ 349.456454][T16299] ? __pfx_ksys_write+0x10/0x10 [ 349.456493][T16299] do_syscall_64+0x14d/0xf80 [ 349.456516][T16299] ? trace_irq_disable+0x3b/0x150 [ 349.456535][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.456556][T16299] ? clear_bhb_loop+0x40/0x90 [ 349.456582][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.456603][T16299] RIP: 0033:0x7fad84f5d04e [ 349.456624][T16299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.456643][T16299] RSP: 002b:00007fad85f07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.456665][T16299] RAX: ffffffffffffffda RBX: 00007fad85f086c0 RCX: 00007fad84f5d04e [ 349.456680][T16299] RDX: 0000000000000001 RSI: 00007fad85f080a0 RDI: 0000000000000004 [ 349.456693][T16299] RBP: 00007fad85f08090 R08: 0000000000000000 R09: 0000000000000000 [ 349.456706][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.456718][T16299] R13: 00007fad85216038 R14: 00007fad85215fa0 R15: 00007fffbcb0d3c8 [ 349.456752][T16299] [ 349.752615][ T10] IPVS: starting estimator thread 0... [ 349.852265][T16303] IPVS: using max 24 ests per chain, 57600 per kthread [ 350.265393][T16326] veth0: entered allmulticast mode [ 350.679494][T16341] __nla_validate_parse: 20 callbacks suppressed [ 350.679519][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2565'. [ 350.751423][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 350.763969][T16346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2566'. [ 350.774259][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 350.796716][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2566'. [ 351.166905][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2569'. [ 351.686672][T16398] geneve1: entered promiscuous mode [ 351.715592][T16398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.749492][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 351.773277][T16397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.082360][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 352.091487][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 352.154917][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 352.218743][T16422] xt_l2tp: v2 doesn't support IP mode [ 352.535047][T16431] gre2: entered allmulticast mode [ 352.598071][T16431] netlink: 'syz.0.2583': attribute type 5 has an invalid length. [ 352.736993][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.851114][T16453] sctp: [Deprecated]: syz.1.2589 (pid 16453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.851114][T16453] Use struct sctp_sack_info instead [ 352.903677][T16445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.904994][T16453] Unsupported ieee802154 address type: 0 [ 352.955339][T16439] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 353.054904][T16456] syz_tun: entered promiscuous mode [ 353.083631][T16465] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 353.323559][T16471] netlink: 'syz.4.2592': attribute type 1 has an invalid length. [ 353.359805][T16471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 353.550350][T16480] syzkaller0: entered promiscuous mode [ 353.568507][T16480] syzkaller0: entered allmulticast mode [ 354.581237][T16544] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 354.826096][T16535] wg1: entered promiscuous mode [ 354.835641][T16535] wg1: entered allmulticast mode [ 355.127993][T16544] gre0 speed is unknown, defaulting to 1000 [ 355.200481][T16545] syzkaller0: entered promiscuous mode [ 355.283475][T16545] syzkaller0: entered allmulticast mode [ 355.344786][T16567] sctp: [Deprecated]: syz.4.2613 (pid 16567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.344786][T16567] Use struct sctp_sack_info instead [ 355.731309][T16580] __nla_validate_parse: 71 callbacks suppressed [ 355.731333][T16580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'. [ 355.767195][T16580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'. [ 355.829264][T16587] netlink: 'syz.4.2619': attribute type 64 has an invalid length. [ 356.005053][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2622'. [ 356.103311][T16600] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.168760][T16600] bond10: (slave lo): Enslaving as an active interface with an up link [ 356.192090][T16600] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 356.219187][T16544] lo speed is unknown, defaulting to 1000 [ 356.244870][T16607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.269511][T16612] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 356.277773][T16612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2625'. [ 356.911993][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'. [ 356.913552][T16644] syzkaller0: entered promiscuous mode [ 356.933886][T16644] syzkaller0: entered allmulticast mode [ 356.945149][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'. [ 357.135805][T16654] netlink: 'syz.2.2637': attribute type 21 has an invalid length. [ 357.164834][T16654] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2637'. [ 357.183624][T16654] netlink: 'syz.2.2637': attribute type 4 has an invalid length. [ 357.212184][T16654] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2637'. [ 357.257008][T16657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2637'. [ 357.310184][T16654] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 357.351498][T16654] netlink: 'syz.2.2637': attribute type 2 has an invalid length. [ 357.458047][T16668] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2640'. [ 357.480618][T16668] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 357.665716][T16681] tipc: MTU too low for tipc bearer [ 357.986613][T16689] gre0 speed is unknown, defaulting to 1000 [ 358.191435][T16703] 8021q: adding VLAN 0 to HW filter on device bond10 [ 358.496290][T16689] lo speed is unknown, defaulting to 1000 [ 358.843105][T16725] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 359.041030][T16725] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.093475][T16744] netlink: 'syz.4.2660': attribute type 2 has an invalid length. [ 359.105166][T16744] netlink: 'syz.4.2660': attribute type 8 has an invalid length. [ 359.119857][T16732] bond9: (slave veth5): Enslaving as an active interface with a down link [ 359.155861][T16747] netlink: 'syz.4.2660': attribute type 2 has an invalid length. [ 359.188579][T16739] bond9: (slave veth7): Enslaving as an active interface with a down link [ 359.244397][T16725] bond9: entered allmulticast mode [ 359.367823][T16732] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 359.401445][T16732] bridge9: entered allmulticast mode [ 360.085222][T16764] sctp: [Deprecated]: syz.1.2665 (pid 16764) Use of int in maxseg socket option. [ 360.085222][T16764] Use struct sctp_assoc_value instead [ 360.142711][T16769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.181183][T16771] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.445793][T16780] xt_CT: No such helper "pptp" [ 360.460536][T16781] bond11: entered promiscuous mode [ 360.467226][T16781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.476934][T16782] smc: net device wlan0 applied user defined pnetid SYZ0 [ 360.487345][T16782] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 360.516506][T16781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.525240][T16781] bond11: (slave sit2): The slave device specified does not support setting the MAC address [ 360.538971][T16781] bond11: (slave sit2): Error -95 calling set_mac_address [ 360.808749][T16805] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 360.843971][T16805] bond11 (unregistering): Released all slaves [ 360.988886][T16815] syzkaller0: entered promiscuous mode [ 361.001780][T16815] syzkaller0: entered allmulticast mode [ 361.149559][T16815] __nla_validate_parse: 15 callbacks suppressed [ 361.149591][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 361.172368][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2680'. [ 361.255367][T16824] syzkaller0: entered promiscuous mode [ 361.274978][T16824] syzkaller0: entered allmulticast mode [ 361.303150][T16832] nbd2: detected capacity change from 0 to 63 [ 361.342145][T16832] block nbd2: NBD_DISCONNECT [ 361.355167][T16832] block nbd2: Disconnected due to user request. [ 361.368716][T16832] block nbd2: shutting down sockets [ 361.395329][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.406156][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 361.414160][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.423797][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 361.432435][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.442371][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 361.450325][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.459983][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 361.467932][T16307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.480202][T16307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 361.498442][T16307] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.519902][T16307] Buffer I/O error on dev nbd2, logical block 1, async page read [ 361.529085][T16307] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.552480][T16307] Buffer I/O error on dev nbd2, logical block 2, async page read [ 361.560548][T16307] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.570652][T16307] Buffer I/O error on dev nbd2, logical block 3, async page read [ 361.588547][T16307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.616590][T16307] Buffer I/O error on dev nbd2, logical block 0, async page read [ 361.626153][T16307] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.637495][T16307] Buffer I/O error on dev nbd2, logical block 1, async page read [ 361.650960][T16851] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2690'. [ 361.657519][T16307] ldm_validate_partition_table(): Disk read failed. [ 361.685355][T16307] Dev nbd2: unable to read RDB block 0 [ 361.700931][T16307] nbd2: unable to read partition table [ 361.736790][T16307] ldm_validate_partition_table(): Disk read failed. [ 361.746815][T16307] Dev nbd2: unable to read RDB block 0 [ 361.754596][T16307] nbd2: unable to read partition table [ 363.360604][T16850] validate_nla: 1 callbacks suppressed [ 363.360624][T16850] netlink: 'syz.2.2691': attribute type 3 has an invalid length. [ 363.382272][T16850] netlink: 'syz.2.2691': attribute type 3 has an invalid length. [ 363.390105][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 363.567926][T16861] syzkaller0: entered promiscuous mode [ 363.573667][T16861] syzkaller0: entered allmulticast mode [ 363.664438][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2696'. [ 386.242489][T16906] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2700'. [ 386.254445][T16906] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2700'. [ 386.467463][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 386.492467][T16926] netlink: 'syz.2.2706': attribute type 30 has an invalid length. [ 386.551917][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 386.552719][T15898] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.582772][T16926] netlink: 'syz.2.2706': attribute type 30 has an invalid length. [ 386.591238][T15898] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.612821][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.626758][T15898] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.636739][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.647568][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.655769][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.658437][T16930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2706'. [ 386.664608][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.683343][T16930] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2706'. [ 386.787819][T16932] gre0 speed is unknown, defaulting to 1000 [ 386.893184][T16936] syzkaller0: entered promiscuous mode [ 386.899755][T16936] syzkaller0: entered allmulticast mode [ 386.924131][T15890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 386.937317][T15890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.015964][T15890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.036942][T15890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.080284][T16907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.166997][T15890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.213496][T15890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.271910][T16932] lo speed is unknown, defaulting to 1000 [ 387.366587][T15890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.381946][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 387.389374][T15890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.432400][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 387.576978][T16940] syzkaller0: entered promiscuous mode [ 387.614737][T16940] syzkaller0: entered allmulticast mode [ 387.681411][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'. [ 387.772659][T16965] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 387.929912][T16973] netlink: 'syz.0.2715': attribute type 14 has an invalid length. [ 387.942000][T16973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2715'. [ 387.970305][T15898] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 387.998090][T16932] chnl_net:caif_netlink_parms(): no params data found [ 388.782335][ T5830] Bluetooth: hci5: command tx timeout [ 389.838571][T15898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 390.002925][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 390.147882][T15903] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 390.453597][T15890] dvmrp6: left allmulticast mode [ 390.461347][T15890] lo: left allmulticast mode [ 390.862279][ T5830] Bluetooth: hci5: command tx timeout [ 390.985660][T15890] bond4 (unregistering): (slave geneve3): Releasing active interface [ 391.008887][T15890] bond3 (unregistering): (slave geneve2): Releasing active interface [ 391.337244][T15890] bond1 (unregistering): (slave veth3): Releasing backup interface [ 391.347018][T15890] bond1 (unregistering): Released all slaves [ 391.364702][T15890] bond0 (unregistering): Released all slaves [ 391.379241][T15890] bond2 (unregistering): Released all slaves [ 391.395022][T15890] bond3 (unregistering): Released all slaves [ 391.411236][T15890] bond4 (unregistering): Released all slaves [ 391.434973][T15890] bond5 (unregistering): Released all slaves [ 391.449466][T15890] bond6 (unregistering): Released all slaves [ 391.466617][T15890] bond7 (unregistering): Released all slaves [ 391.480823][T15890] bond8 (unregistering): (slave bond9): Releasing backup interface [ 391.490287][T15890] bond8 (unregistering): Released all slaves [ 391.518879][T15890] bond9 (unregistering): Released all slaves [ 391.532390][T15890] bond10 (unregistering): Released all slaves [ 391.556165][T16932] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.563834][T16932] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.571026][T16932] bridge_slave_0: entered allmulticast mode [ 391.578869][T16932] bridge_slave_0: entered promiscuous mode [ 391.593275][T16932] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.600937][T16932] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.608511][T16932] bridge_slave_1: entered allmulticast mode [ 391.617856][T16932] bridge_slave_1: entered promiscuous mode [ 391.633801][T17028] sch_fq: defrate 53322 ignored. [ 391.735868][T17048] bond0: entered promiscuous mode [ 391.741065][T17048] bond_slave_0: entered promiscuous mode [ 391.749349][T17048] bond_slave_1: entered promiscuous mode [ 391.774241][T17048] batadv0: entered promiscuous mode [ 391.781209][T17048] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 391.819832][T17048] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 391.854969][T17048] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 391.874326][T17048] bond0: left promiscuous mode [ 391.891387][T17048] bond_slave_0: left promiscuous mode [ 391.902751][T17048] bond_slave_1: left promiscuous mode [ 391.909654][T17048] batadv0: left promiscuous mode [ 391.932537][T17057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.942917][T15890] tipc: Disabling bearer [ 391.951869][T15890] tipc: Left network mode [ 392.014979][T16932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.049318][T16932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.110253][T15890] IPVS: stopping backup sync thread 7745 ... [ 392.151989][T17057] __nla_validate_parse: 3 callbacks suppressed [ 392.152128][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 392.192320][T17063] tipc: Resetting bearer [ 392.201071][T17063] tipc: Resetting bearer [ 392.366892][T16932] team0: Port device team_slave_0 added [ 392.397171][T16932] team0: Port device team_slave_1 added [ 392.452963][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'. [ 392.513648][T16932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.537937][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.568704][T16932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.599684][T16932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.607151][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.639404][T16932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.756871][T17081] syzkaller0: entered promiscuous mode [ 392.762748][T17081] syzkaller0: entered allmulticast mode [ 392.955223][ T5830] Bluetooth: hci5: command tx timeout [ 394.839467][T16932] hsr_slave_0: entered promiscuous mode [ 394.865000][T16932] hsr_slave_1: entered promiscuous mode [ 395.026253][ T5830] Bluetooth: hci5: command tx timeout [ 395.169900][T17130] netlink: 'syz.0.2741': attribute type 2 has an invalid length. [ 395.307307][T17134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2742'. [ 395.352742][T17130] hmac(sha224: entered promiscuous mode [ 395.486660][T15890] batman_adv: batadv0: Interface deactivated: dummy0 [ 395.501245][T15890] batman_adv: batadv0: Removing interface: dummy0 [ 395.708481][T17155] netlink: 'syz.0.2748': attribute type 5 has an invalid length. [ 395.917104][T15890] pim6reg (unregistering): left allmulticast mode [ 396.160640][T17167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2749'. [ 396.368102][ T10] lo speed is unknown, defaulting to 1000 [ 396.375735][ T10] infiniband syz2: ib_query_port failed (-19) [ 396.607278][T17176] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2750'. [ 396.627936][T17176] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 396.760922][T17175] syzkaller0: entered promiscuous mode [ 396.772334][T17175] syzkaller0: entered allmulticast mode [ 396.861339][T16932] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 396.942414][T17196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2755'. [ 396.974292][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 396.983458][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'. [ 397.137008][T16932] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 397.212853][T15890] IPVS: stop unused estimator thread 0... [ 397.455843][T16932] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 397.595648][T17223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.640794][T17239] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2764'. [ 397.725531][T16932] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 397.948677][T17250] : renamed from veth0_to_bond [ 398.222616][T17264] macsec0: entered allmulticast mode [ 398.240439][T16932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 398.305581][T17264] veth1_macvtap: entered allmulticast mode [ 398.311561][T17264] macsec0: left allmulticast mode [ 398.365577][T17264] veth1_macvtap: left allmulticast mode [ 398.394193][T16932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 398.428177][T17276] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 398.439957][T16932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.529032][T17274] 8021q: adding VLAN 0 to HW filter on device bond10 [ 398.561434][T16932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.722361][T17292] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 398.777430][T17292] netlink: 'syz.4.2772': attribute type 2 has an invalid length. [ 398.815289][T17284] gtp0: entered promiscuous mode [ 398.849877][T17284] gtp0: entered allmulticast mode [ 398.964890][T17284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2772'. [ 399.114768][T16932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.228355][T16932] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.290094][ T565] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.297910][ T565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.333581][T17312] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2776'. [ 399.376914][ T565] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.384286][ T565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.516274][T16932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.627503][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 399.992312][T17349] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2782'. [ 400.288518][T16932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.454632][T16932] veth0_vlan: entered promiscuous mode [ 400.489961][T16932] veth1_vlan: entered promiscuous mode [ 400.525906][T17375] netlink: 'syz.3.2790': attribute type 9 has an invalid length. [ 400.528791][T17377] netlink: 876 bytes leftover after parsing attributes in process `syz.2.2789'. [ 400.543733][T17375] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2790'. [ 400.650299][T16932] veth0_macvtap: entered promiscuous mode [ 400.683192][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2791'. [ 400.686305][T16932] veth1_macvtap: entered promiscuous mode [ 400.800588][T16932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.826777][T16932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.828090][T17387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2793'. [ 400.854447][T15898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.893060][T15898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.926861][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 400.959278][T15898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.979186][T15898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.028892][T17387] veth0: left allmulticast mode [ 401.040400][T17387] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 401.241126][ T565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.265269][ T565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.366108][T15894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.382993][T15894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.885188][T17423] syzkaller0: entered promiscuous mode [ 401.901878][T17423] syzkaller0: entered allmulticast mode [ 402.348951][T17446] ipt_REJECT: ECHOREPLY no longer supported. [ 402.449615][T17446] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 402.672496][T17458] syz_tun: entered allmulticast mode [ 402.707762][T17464] __nla_validate_parse: 3 callbacks suppressed [ 402.707786][T17464] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2810'. [ 403.218791][T17492] netlink: 876 bytes leftover after parsing attributes in process `syz.2.2815'. [ 403.351985][T17503] netlink: 'syz.1.2818': attribute type 4 has an invalid length. [ 403.360159][T17503] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2818'. [ 403.409909][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2819'. [ 403.671301][T17520] syzkaller0: entered promiscuous mode [ 403.697284][T17520] syzkaller0: entered allmulticast mode [ 403.888944][T17538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2825'. [ 403.928773][T17538] nbd: couldn't find a device at index 0 [ 404.109713][T17534] bond11: option ad_actor_sys_prio: invalid value (0) [ 404.151255][T17534] bond11: option ad_actor_sys_prio: allowed values 1 - 65535 [ 404.190397][T17534] bond11 (unregistering): Released all slaves [ 404.239979][T17556] netlink: 876 bytes leftover after parsing attributes in process `syz.0.2830'. [ 404.327502][T17538] netlink: 'syz.3.2825': attribute type 40 has an invalid length. [ 404.432166][T17560] vxcan3: entered promiscuous mode [ 404.437359][T17560] vxcan3: entered allmulticast mode [ 405.870616][T17589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.264138][T17622] syzkaller0: entered promiscuous mode [ 406.286015][T17622] syzkaller0: entered allmulticast mode [ 406.848566][T17641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 407.424273][T17670] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 409.214833][T17670] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 409.469283][T17690] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2863'. [ 409.683704][T17705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'. [ 409.799518][T17709] gre0 speed is unknown, defaulting to 1000 [ 409.863367][T17718] syzkaller0: entered promiscuous mode [ 409.871733][T17718] syzkaller0: entered allmulticast mode [ 410.504955][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 410.559984][T17731] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2871'. [ 410.679370][T17727] gre0 speed is unknown, defaulting to 1000 [ 410.756979][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'. [ 410.803463][T17737] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 411.193444][T17758] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2877'. [ 411.236526][T17758] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2877'. [ 411.255106][T17759] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2877'. [ 412.150921][T17790] syzkaller0: entered promiscuous mode [ 412.157037][T17790] syzkaller0: entered allmulticast mode [ 415.297819][ T797] hid-generic 0005:0D36:0006.0001: item fetching failed at offset 0/1 [ 415.309895][ T797] hid-generic 0005:0D36:0006.0001: probe with driver hid-generic failed with error -22 [ 415.509716][T17840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2895'. [ 415.583701][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 416.149673][T17865] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2903'. [ 416.160147][T17870] netlink: 'syz.1.2904': attribute type 30 has an invalid length. [ 416.386811][T17878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2906'. [ 416.408259][T17874] netlink: 'syz.0.2905': attribute type 2 has an invalid length. [ 416.421773][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 416.438104][T17884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.458435][T17874] netlink: 'syz.0.2905': attribute type 2 has an invalid length. [ 416.476360][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 417.362437][T17921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.381777][T17910] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2913'. [ 417.461900][T17910] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 417.480401][T17910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2913'. [ 417.595334][T17934] syzkaller0: entered promiscuous mode [ 417.638104][T17934] syzkaller0: entered allmulticast mode [ 417.723649][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2918'. [ 417.761711][T17945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2918'. [ 418.291823][T17955] syzkaller0: entered promiscuous mode [ 418.298259][T17955] syzkaller0: entered allmulticast mode [ 418.604307][T17964] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 418.643716][T17965] netlink: 'syz.0.2923': attribute type 12 has an invalid length. [ 418.697066][T17968] sctp: [Deprecated]: syz.0.2923 (pid 17968) Use of int in max_burst socket option. [ 418.697066][T17968] Use struct sctp_assoc_value instead [ 419.147277][T17981] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.173750][T17981] syzkaller1: linktype set to 270 [ 419.577732][T18003] veth1: entered promiscuous mode [ 419.601763][T18003] veth1: entered allmulticast mode [ 419.604469][T18004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.738760][T18031] __nla_validate_parse: 6 callbacks suppressed [ 420.738800][T18031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2945'. [ 420.883008][T18031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2945'. [ 421.120110][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.132612][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.150482][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.167035][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.176347][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.443767][T18041] gre0 speed is unknown, defaulting to 1000 [ 421.708482][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 421.960946][T18063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.052783][T18069] bond1: entered promiscuous mode [ 422.058717][T18069] bond1: entered allmulticast mode [ 422.155735][T18072] vxcan3: entered promiscuous mode [ 422.172342][T18072] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 422.202719][T18072] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 422.756120][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 422.779322][T18087] gre0 speed is unknown, defaulting to 1000 [ 423.022138][T18090] xt_CT: No such helper "syz1" [ 423.116488][T18041] chnl_net:caif_netlink_parms(): no params data found [ 423.265597][ T5830] Bluetooth: hci1: command tx timeout [ 423.318037][T18106] bond11: option packets_per_slave: invalid value (1048582) [ 423.360176][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 423.381765][T18106] bond11: option packets_per_slave: allowed values 0 - 65535 [ 423.433363][T18106] bond11 (unregistering): Released all slaves [ 424.056492][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 424.143382][T18041] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.175919][T18041] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.204275][T18041] bridge_slave_0: entered allmulticast mode [ 424.233299][T18041] bridge_slave_0: entered promiscuous mode [ 424.237573][T18136] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2959'. [ 424.279914][T18041] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.309573][T18041] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.332574][T18041] bridge_slave_1: entered allmulticast mode [ 424.353126][T18041] bridge_slave_1: entered promiscuous mode [ 424.439136][T18147] veth1_macvtap: left promiscuous mode [ 424.532460][T18147] veth1_macvtap: renamed from macsec0 [ 424.638501][T18146] syzkaller0: entered promiscuous mode [ 424.646359][T18146] syzkaller0: entered allmulticast mode [ 425.291314][T18172] xt_CT: No such helper "snmp_trap" [ 425.351678][ T5830] Bluetooth: hci1: command tx timeout [ 425.517573][T18157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.616843][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 425.627133][T18175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2968'. [ 425.637959][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 425.811282][T18180] __nla_validate_parse: 1 callbacks suppressed [ 425.811303][T18180] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2970'. [ 427.429321][ T5830] Bluetooth: hci1: command tx timeout [ 427.823899][T18041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.845861][T18180] team0: Port device syz_tun added [ 427.988452][T18041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.209961][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'. [ 428.247931][T18041] team0: Port device team_slave_0 added [ 428.374086][T18041] team0: Port device team_slave_1 added [ 428.466059][T18198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.641022][T18198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.842390][T18041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.868946][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.927854][T18225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2978'. [ 428.967734][T18041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.051397][T18041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.064772][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.099331][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 429.109810][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 429.141094][T18230] netlink: 'syz.4.2978': attribute type 13 has an invalid length. [ 429.161683][T18041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.176439][T18230] netlink: 'syz.4.2978': attribute type 11 has an invalid length. [ 429.240875][T18198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.345054][T18221] gre0 speed is unknown, defaulting to 1000 [ 429.470557][T18198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.501898][ T5830] Bluetooth: hci1: command tx timeout [ 429.567373][T18241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.752974][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 429.782122][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 429.857034][T18041] hsr_slave_0: entered promiscuous mode [ 429.874666][T18041] hsr_slave_1: entered promiscuous mode [ 429.892191][T18041] debugfs: 'hsr0' already exists in 'hsr' [ 429.898200][T18041] Cannot create hsr debugfs directory [ 429.968242][T18239] syzkaller0: entered promiscuous mode [ 429.974463][T18239] syzkaller0: entered allmulticast mode [ 430.039695][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 432.751204][T18254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.769470][T15898] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.925507][T15891] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.031864][T18264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.120858][T15898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.142269][T15898] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.178764][T18268] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 433.278180][T18268] 8021q: adding VLAN 0 to HW filter on device bond11 [ 433.474152][T18277] syzkaller0: entered promiscuous mode [ 433.480038][T18277] syzkaller0: entered allmulticast mode [ 434.078660][T18293] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 434.093932][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'. [ 434.104320][T18293] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 434.593185][T18306] syzkaller0: entered promiscuous mode [ 434.607782][T18306] syzkaller0: entered allmulticast mode [ 434.827391][T18041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.891857][T18041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.972063][T18041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.004263][ T5487] veth1_macvtap: entered promiscuous mode [ 435.081353][T18325] x_tables: duplicate underflow at hook 2 [ 435.093930][T18041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.465979][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 435.504565][T18344] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3000'. [ 435.546180][T18041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.600663][T18041] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.684039][T18351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3000'. [ 435.832462][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.839849][T15894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.911390][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.918835][T15894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.579824][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 436.645303][T18376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.653372][T18376] IPv6: NLM_F_CREATE should be set when creating new route [ 436.686976][T18376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.694604][T18376] IPv6: NLM_F_CREATE should be set when creating new route [ 436.700101][T18041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.898579][T18041] veth0_vlan: entered promiscuous mode [ 436.950599][T18041] veth1_vlan: entered promiscuous mode [ 437.132894][T18041] veth0_macvtap: entered promiscuous mode [ 437.176420][T18041] veth1_macvtap: entered promiscuous mode [ 437.385110][T18041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.437076][T18041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.505684][ T565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.583385][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 437.597339][ T565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.623849][ T565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.694201][ T565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.893136][T15898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.916945][T15898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.938059][T18429] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3017'. [ 438.019943][ T565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.020645][T18428] gre0 speed is unknown, defaulting to 1000 [ 438.040849][ T565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.212288][T18435] bond2: entered promiscuous mode [ 438.228698][T18435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.730250][T18444] bond3: entered allmulticast mode [ 438.851996][T18448] macvlan2: entered promiscuous mode [ 438.862172][T18448] macvlan2: entered allmulticast mode [ 438.877133][T18448] bond3: (slave macvlan2): Opening slave failed [ 439.167497][T18464] netlink: 'syz.2.3023': attribute type 61 has an invalid length. [ 439.221209][T18469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3024'. [ 439.292496][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'. [ 439.479386][T18479] xt_bpf: check failed: parse error [ 439.574732][T18476] ip6gretap1: entered promiscuous mode [ 439.583053][T18476] ip6gretap1: entered allmulticast mode [ 440.299861][T18501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3031'. [ 440.493595][T18512] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 440.507453][T18513] openvswitch: netlink: Missing valid actions attribute. [ 440.538448][T18513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.635978][T18500] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.002274][T18521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3033'. [ 441.327324][T18535] Cannot find del_set index 1 as target [ 441.381178][T18538] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 441.602033][T18548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3042'. [ 441.795075][T18555] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3043'. [ 442.215654][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 442.235173][T18562] dummy0: entered promiscuous mode [ 442.240944][T18562] macvtap1: entered promiscuous mode [ 442.267155][T18562] macvtap1: entered allmulticast mode [ 442.281689][T18562] dummy0: entered allmulticast mode [ 442.736307][T18575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.118935][T18584] netlink: 'syz.0.3051': attribute type 1 has an invalid length. [ 443.134159][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3053'. [ 443.142781][T18584] netlink: 'syz.0.3051': attribute type 2 has an invalid length. [ 443.311187][T18588] bond4: entered promiscuous mode [ 443.363329][T18588] bond4: entered allmulticast mode [ 443.369912][T18588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.547702][ T5822] team0: Port device syz_tun removed [ 443.568631][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.592862][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.611842][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.620435][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.632897][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.683367][T18595] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.732784][T18595] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.826374][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 443.851223][T18595] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.873251][T18595] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.966967][T18595] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.991791][T18595] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.028393][T18598] gre0 speed is unknown, defaulting to 1000 [ 444.074110][T18595] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.086461][T18595] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.262178][T18618] sit0: entered promiscuous mode [ 444.273876][T18618] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 444.310921][T18618] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3060'. [ 444.433543][T18622] sctp: [Deprecated]: syz.2.3061 (pid 18622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.433543][T18622] Use struct sctp_sack_info instead [ 444.568897][T15894] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.588229][T15894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.617624][T15894] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.645546][T15894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.750034][T15894] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.765485][T15894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.809531][T15894] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.819294][T15894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.035152][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.111977][T18636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.752268][ T5836] Bluetooth: hci0: command tx timeout [ 445.764486][T18676] netlink: 'syz.3.3072': attribute type 1 has an invalid length. [ 445.859345][T18676] vlan2: entered allmulticast mode [ 445.865497][T18676] virt_wifi0: entered allmulticast mode [ 445.872392][T18681] tipc: Started in network mode [ 445.881692][T18681] tipc: Node identity ac1414aa, cluster identity 4711 [ 445.889039][T18681] tipc: New replicast peer: 100.1.1.1 [ 445.958977][T18681] tipc: Enabled bearer , priority 10 [ 446.066339][T18598] chnl_net:caif_netlink_parms(): no params data found [ 446.306586][T18702] netlink: 'syz.2.3075': attribute type 2 has an invalid length. [ 446.402556][T18709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 446.441778][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 446.557266][T18710] bond12: option lacp_rate: invalid value (16) [ 446.656907][T18720] netlink: 185900 bytes leftover after parsing attributes in process `syz.3.3079'. [ 446.668603][T18710] bond12 (unregistering): Released all slaves [ 446.939639][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.972617][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.002453][T18598] bridge_slave_0: entered allmulticast mode [ 447.037955][T18598] bridge_slave_0: entered promiscuous mode [ 447.065721][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.102205][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.125772][T18598] bridge_slave_1: entered allmulticast mode [ 447.153037][T18598] bridge_slave_1: entered promiscuous mode [ 447.169464][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.187375][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.207321][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.225813][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.244726][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.293495][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 447.799998][ T796] tipc: Node number set to 2886997162 [ 447.823035][ T5836] Bluetooth: hci0: command tx timeout [ 447.912528][T15891] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.944101][T15891] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.992131][T15891] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.004271][T15891] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.087310][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.099677][T15891] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.114030][T15891] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.174883][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.366824][T18598] team0: Port device team_slave_0 added [ 448.395291][T18791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.403772][T18791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.430112][T18791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.458727][T18791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.565162][T18598] team0: Port device team_slave_1 added [ 448.682714][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.690434][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.743602][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.757243][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.765408][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.818202][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.973220][T18814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.131086][T18598] hsr_slave_0: entered promiscuous mode [ 449.162541][T18598] hsr_slave_1: entered promiscuous mode [ 449.194839][T18598] debugfs: 'hsr0' already exists in 'hsr' [ 449.211297][T18598] Cannot create hsr debugfs directory [ 449.375558][T18831] bond6: Unable to set up delay as MII monitoring is disabled [ 449.392886][T18831] bond6 (unregistering): Released all slaves [ 449.705849][T18849] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 449.728992][T18842] : entered promiscuous mode [ 449.901739][ T5836] Bluetooth: hci0: command tx timeout [ 450.037336][T18859] __nla_validate_parse: 244 callbacks suppressed [ 450.037361][T18859] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3106'. [ 450.104751][T18861] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.3107'. [ 450.152202][T18861] lo: Caught tx_queue_len zero misconfig [ 450.189228][T18863] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 450.512756][T18877] netlink: 'syz.1.3110': attribute type 21 has an invalid length. [ 450.534785][T18877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3110'. [ 450.581709][T18877] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3110'. [ 450.898456][T18598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.900105][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3114'. [ 450.936348][T18598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.067351][T18598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.130164][T18598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.195208][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 451.534010][T18927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3117'. [ 451.826361][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.848644][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 451.864310][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 451.890442][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.919567][T15903] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.927074][T15903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.975167][T15903] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.982620][T15903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.993799][ T5836] Bluetooth: hci0: command tx timeout [ 452.507051][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.971199][T18598] veth0_vlan: entered promiscuous mode [ 452.990800][T18598] veth1_vlan: entered promiscuous mode [ 453.047697][T18598] veth0_macvtap: entered promiscuous mode [ 453.060176][T18598] veth1_macvtap: entered promiscuous mode [ 453.086766][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.116175][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.136388][T15898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.160472][T15898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.170527][T15898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.191000][T15898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.309463][T18917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.467115][T15898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.502505][T15898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.535481][T18977] netlink: 'syz.2.3123': attribute type 1 has an invalid length. [ 454.722542][T18977] 8021q: adding VLAN 0 to HW filter on device bond12 [ 454.827915][T15889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.856619][T15889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.877105][T18990] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 455.309951][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 455.347983][T19004] netlink: 'syz.4.3052': attribute type 14 has an invalid length. [ 455.381975][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 455.422288][T19004] bond0: option xmit_hash_policy: invalid value (165) [ 455.549100][T19012] syzkaller0: entered promiscuous mode [ 455.625123][T19012] syzkaller0: entered allmulticast mode [ 455.797393][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3132'. [ 455.862737][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.893977][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.910426][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.930589][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.960398][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.088308][T19019] gre0 speed is unknown, defaulting to 1000 [ 456.508523][ T5835] syz_tun (unregistering): left allmulticast mode [ 457.174999][T19048] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3137'. [ 457.233472][T19055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3137'. [ 457.458385][T15890] ------------[ cut here ]------------ [ 457.464225][T15890] conntrack cleanup blocked for 60s [ 457.464244][T15890] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:11/15890 [ 457.483482][T15890] Modules linked in: [ 457.488255][T15890] CPU: 1 UID: 0 PID: 15890 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 457.498658][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.511256][T15890] Workqueue: netns cleanup_net [ 457.517428][T15890] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.525185][T15890] Code: 08 48 89 df e8 fd 0c 63 f8 4c 8b 3b 49 39 df 74 69 e8 a0 ba f8 f7 45 31 e4 e9 8e fe ff ff e8 93 ba f8 f7 48 8d 3d ec 0f 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 457.545877][T15890] RSP: 0018:ffffc9000592f8b0 EFLAGS: 00010293 [ 457.552600][T15890] RAX: ffffffff89ccf55d RBX: ffffc9000592fa50 RCX: ffff88802fa45b80 [ 457.562531][T15890] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff90210550 [ 457.570721][T15890] RBP: 0000000000000001 R08: ffff88802fd65c03 R09: 1ffff11005facb80 [ 457.579564][T15890] R10: dffffc0000000000 R11: ffffed1005facb81 R12: 0000000000000001 [ 457.588598][T15890] R13: dffffc0000000000 R14: 0000000100003cb8 R15: 0000000100003cbb [ 457.597183][T15890] FS: 0000000000000000(0000) GS:ffff888125547000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.606737][T15890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.613839][T15890] CR2: 00007f7b8a40a358 CR3: 0000000048dd4000 CR4: 00000000003526f0 [ 457.622776][T15890] Call Trace: [ 457.626205][T15890] [ 457.629379][T15890] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 457.636147][T15890] ops_undo_list+0x52b/0x940 [ 457.641035][T15890] ? __pfx_ops_undo_list+0x10/0x10 [ 457.646653][T15890] ? idr_destroy+0x218/0x290 [ 457.651655][T15890] ? do_raw_spin_unlock+0xf5/0x210 [ 457.657181][T15890] cleanup_net+0x56b/0x800 [ 457.664526][T15890] ? __pfx_cleanup_net+0x10/0x10 [ 457.669742][T15890] ? process_scheduled_works+0xa8d/0x18c0 [ 457.676046][T15890] ? process_scheduled_works+0xa8d/0x18c0 [ 457.681900][T15890] process_scheduled_works+0xb6e/0x18c0 [ 457.687892][T15890] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.694342][T15890] ? assign_work+0x3d5/0x5e0 [ 457.699303][T15890] worker_thread+0xa53/0xfc0 [ 457.704171][T15890] kthread+0x388/0x470 [ 457.708485][T15890] ? __pfx_worker_thread+0x10/0x10 [ 457.714632][T15890] ? __pfx_kthread+0x10/0x10 [ 457.719400][T15890] ret_from_fork+0x51e/0xb90 [ 457.725037][T15890] ? __pfx_ret_from_fork+0x10/0x10 [ 457.730392][T15890] ? __switch_to+0xc7d/0x1450 [ 457.735344][T15890] ? __pfx_kthread+0x10/0x10 [ 457.740026][T15890] ret_from_fork_asm+0x1a/0x30 [ 457.745554][T15890] [ 457.748817][T15890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.756315][T15890] CPU: 1 UID: 0 PID: 15890 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 457.766725][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.778159][T15890] Workqueue: netns cleanup_net [ 457.783383][T15890] Call Trace: [ 457.786721][T15890] [ 457.789786][T15890] vpanic+0x56c/0xa60 [ 457.793912][T15890] ? __pfx__printk+0x10/0x10 [ 457.799178][T15890] ? __pfx_vpanic+0x10/0x10 [ 457.803735][T15890] ? is_bpf_text_address+0x292/0x2b0 [ 457.809140][T15890] ? is_bpf_text_address+0x26/0x2b0 [ 457.815488][T15890] panic+0xc5/0xd0 [ 457.819650][T15890] ? __pfx_panic+0x10/0x10 [ 457.824961][T15890] ? ret_from_fork_asm+0x1a/0x30 [ 457.830386][T15890] __warn+0x315/0x4f0 [ 457.834694][T15890] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.841093][T15890] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.847966][T15890] __report_bug+0x29a/0x540 [ 457.852782][T15890] ? __lock_acquire+0x6b5/0x2cf0 [ 457.857773][T15890] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.864497][T15890] ? __pfx___report_bug+0x10/0x10 [ 457.870433][T15890] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 457.877096][T15890] report_bug_entry+0x19a/0x290 [ 457.882094][T15890] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.888361][T15890] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 457.894542][T15890] handle_bug+0xce/0x200 [ 457.898998][T15890] exc_invalid_op+0x1a/0x50 [ 457.903707][T15890] asm_exc_invalid_op+0x1a/0x20 [ 457.908860][T15890] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 457.915918][T15890] Code: 08 48 89 df e8 fd 0c 63 f8 4c 8b 3b 49 39 df 74 69 e8 a0 ba f8 f7 45 31 e4 e9 8e fe ff ff e8 93 ba f8 f7 48 8d 3d ec 0f 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 457.936157][T15890] RSP: 0018:ffffc9000592f8b0 EFLAGS: 00010293 [ 457.942531][T15890] RAX: ffffffff89ccf55d RBX: ffffc9000592fa50 RCX: ffff88802fa45b80 [ 457.950909][T15890] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff90210550 [ 457.959305][T15890] RBP: 0000000000000001 R08: ffff88802fd65c03 R09: 1ffff11005facb80 [ 457.967297][T15890] R10: dffffc0000000000 R11: ffffed1005facb81 R12: 0000000000000001 [ 457.975427][T15890] R13: dffffc0000000000 R14: 0000000100003cb8 R15: 0000000100003cbb [ 457.983596][T15890] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 457.990142][T15890] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 457.996771][T15890] ops_undo_list+0x52b/0x940 [ 458.001509][T15890] ? __pfx_ops_undo_list+0x10/0x10 [ 458.007189][T15890] ? idr_destroy+0x218/0x290 [ 458.012166][T15890] ? do_raw_spin_unlock+0xf5/0x210 [ 458.017436][T15890] cleanup_net+0x56b/0x800 [ 458.022090][T15890] ? __pfx_cleanup_net+0x10/0x10 [ 458.027223][T15890] ? process_scheduled_works+0xa8d/0x18c0 [ 458.033349][T15890] ? process_scheduled_works+0xa8d/0x18c0 [ 458.039412][T15890] process_scheduled_works+0xb6e/0x18c0 [ 458.045820][T15890] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.052446][T15890] ? assign_work+0x3d5/0x5e0 [ 458.057454][T15890] worker_thread+0xa53/0xfc0 [ 458.062376][T15890] kthread+0x388/0x470 [ 458.066741][T15890] ? __pfx_worker_thread+0x10/0x10 [ 458.072067][T15890] ? __pfx_kthread+0x10/0x10 [ 458.076683][T15890] ret_from_fork+0x51e/0xb90 [ 458.081565][T15890] ? __pfx_ret_from_fork+0x10/0x10 [ 458.086710][T15890] ? __switch_to+0xc7d/0x1450 [ 458.091405][T15890] ? __pfx_kthread+0x10/0x10 [ 458.096170][T15890] ret_from_fork_asm+0x1a/0x30 [ 458.101447][T15890] [ 458.104978][T15890] Kernel Offset: disabled [ 458.109758][T15890] Rebooting in 86400 seconds..