last executing test programs: 4m7.766003124s ago: executing program 4 (id=4212): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) (rerun: 32) 4m7.58453835s ago: executing program 4 (id=4216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x102) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x400}) close(r1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000c"], 0xffdd) 4m6.878329756s ago: executing program 4 (id=4229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x800) sendmsg$xdp(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, 0x2, 0x0, 0x24}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="e63397b2bbc7e71454a462195e3dea4358615935464bfad4bcbf96b08c54012629eeb201a7db5d7201271c4564893cf6f2e34dc5b56d969f4aa6544d5834ff4654ca00333102ab9fc811e81ba655c26e2fa8d080cd99d60705c937e63699b3e3e4c5a18021784295cac68380242cc8ca656fd63c9933b5a595a15d8ba0a2a6020ef5108db428278143d97c7543dc7d93efca829331481bedd0c29a6ba1bad3b258614993a8281fa8d8aab02d3687679a850f915014ac38298f02e7fffaa60bd521cbe9b06a25b533291327bf717e546da139d688", 0xd4}], 0x1, 0x0, 0x0, 0x20048804}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="e3b506d005e6bdf5455b580d8c4ead0e49b64f059264113a2b3497102f0d69814e63d9cb53926b598cbea5f6c70d6d6bbd327c2a0c8f5f7dd8c70a201a764cbd0445d723edabdfd1f0de597f73f6a36663a2ff3fae089fe8bff45b839dde4ddf1576d1bb0f03b0bf07aee14ebb110dc508ed249952b12637c90feaa6a7464627132c4b89ed98873a6be80f8e00630ce7962b8b6ce1972e6003717d9c6868740ee5da6256a2ea1bf5a4f7e10e8606ac9fdd537e8ff1aef62ec6bed7b17e9592b3b80b7d0c884ff063", 0xc8}, {&(0x7f00000004c0)="239c97cb31b6d4958ec5b0586bf6ffd3aab59852d5261cc2072625ebe01e174a248a10112738794802a3ee36c9f96bd021eeab5d5f8f193f1678114d40adf6036aa614a66e639eb33faea140150219e4de739802858a338f73aa070cab401d9cef5c510002bc8eed42d4d7bb2571137d00ca6efdb8a39f6ae113e07693148b83d2082ecbf1", 0x85}, {&(0x7f0000000580)="140d3104402a2524a47a48b262fc142f5341d4328d9bc09b37e00fdf74fc5bdb5af705f6930dcd634ee45a5cb31a554659999905f138fd40ed51460f58102fd3a04c5cc7300aebb5a8650868d51e7d622420c57bf4028493f6defd323b9165ff8f1f6d4f8acbe19014c42c9b4dfd68f32136f3bceb3e5473ffd9ffd86c302d4f5a891c3fbbe66219ce3f89678dcc21764f617708b9b48aa8fbca5d70fc855352496ec1", 0xa3}], 0x3}, 0x8010) 4m6.621109753s ago: executing program 4 (id=4231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888edf", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) 4m6.037972701s ago: executing program 4 (id=4236): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m5.694694754s ago: executing program 4 (id=4240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x40047459, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'bridge0\x00', 0x6}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) 3m30.80690477s ago: executing program 32 (id=4240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x40047459, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'bridge0\x00', 0x6}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) 2m36.052801405s ago: executing program 1 (id=4892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8000001d}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_TUPLE={0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x30}}, 0x0) 2m35.789400661s ago: executing program 1 (id=4895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008004}, 0x20008000) 2m35.138748128s ago: executing program 1 (id=4896): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000a3f4461b3e88d45cec3c797253ca00170a010300000000000000000a00000708000740000000010c00053fffffffffffe200016f4bb1e51dad027676fe42b75d8153ab36b7aae8014f2d93c8bb8db5bceafb3eee0ac11983b3340dd9534b1f97d1fa163c40eea77d5841692cf31809e1e39aee7a0b3d3662d4d2159e7629ea"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000540)) (async) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000540)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e23, 0x9, @remote, 0xd}, {0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0xffffffffffffffff, {[0x101, 0x400, 0x49, 0x9, 0x4972, 0x5, 0x5cde, 0x9]}}, 0x5c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x8, 0x3, 0x0) (async) socket(0x8, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3c, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) 2m34.694262297s ago: executing program 1 (id=4902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x2dae, 0xd, &(0x7f0000000080)="c50bbdf4c745e98f755d0e7efa", 0x1}, {0x5, 0x63, &(0x7f00000000c0)="7f988e237c3b51e098da2084f76363dac75e62b8a1d0671024c679d4f7788d5128925a43104263b2d1922f8e88c07e1662e87e7a6d9f94f980d8478434765764abd4b7839a32477c0305dec8887a17804bb854f2bbd00108daccc3123d4ee752cd6ea1", 0x1}]}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 2m34.397836242s ago: executing program 1 (id=4904): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8}}, 0xb8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in=@empty}}]}, 0x50}}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.086861785s ago: executing program 1 (id=4910): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0xc}}, 0x14}}, 0x4000080) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000000)={0x1, 0x10001, 0x4, 0xc, 0x9, 0x0, 0x6}) 2m18.998529624s ago: executing program 33 (id=4910): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0xc}}, 0x14}}, 0x4000080) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000000)={0x1, 0x10001, 0x4, 0xc, 0x9, 0x0, 0x6}) 36.189478358s ago: executing program 6 (id=5846): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) 35.88998678s ago: executing program 6 (id=5849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000240)={&(0x7f0000000200)=[{&(0x7f0000000100)="c2ae3568cd75729886d89a313930537774b90fd49d6cbad1fd17adfe87c2cff0b5b5ce7415ef45fab5346396971b57e97608d1e8943519a97cba50f880850feb94d87dc5dfd685e87b1f4035b3e52ce196ea7b67501ba3e6cf6aa3b6509e99900d59dd08e519a67e75c3c2360dfbeb4f0256431a1d45097bff7e6cbbcaa2016d8d41c62d562d8e37746c626ad4f37dba5db21259959848377dacf1d7aa580888d509f8321e596f25ed1a21da20e1eb5024935db8d112433f162e0d99a7c2251a8cecd3ab6d7721d42a49a79a3b59b23706497562dcb5bf204f", 0xd9}], 0x1, 0xfffffffffffffffd, 0x0, 0x486, 0x0, 0x6, 0x6, 0x7}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2d, 0x1, 0x6, 0x3ff, 0x2, @mcast2, @remote, 0x40, 0x40, 0x5, 0x8001}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x582cd293, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x7, 0x7, 0x0, 0x8, 0x8001, 0x9, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0xdc0, 0x8, 0xa3, 0x0, 0x8, 0x1, 0x0, 0xd1c8, 0x80, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0xc, 0x4, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0x80, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x4, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x804, 0x5, 0x10001, 0x7, 0x6, 0x1, 0x5, 0x2000081, 0x3b932d, 0x8000, 0x0, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x2, 0x3, 0x8001, 0x2, 0x40, 0x1, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0xc1dd, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x80000000, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0x1, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x80, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x4ab, 0x1000, 0x99, 0x6, 0x6, 0x17, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x96c, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x0, 0x4, 0x0, 0xd014, 0xffffff0b, 0x0, 0x1, 0x400, 0x8, 0x4, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0x80d, 0x9, 0x4000009, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x83, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x8, 0x7fff, 0x100, 0x0, 0x9, 0xc, 0x7, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0xc, 0xd, 0x6, 0x64, 0x7, 0x101, 0x8, 0x3, 0x7066611e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0xffffffff, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x10009, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x10000, 0x6, 0x10, 0x4, 0x80, 0xfffffffa, 0x1, 0xfffffffb, 0x8, 0x6, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x1ff, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0x7a, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x10000000, 0x1, 0x9, 0xef, {0x2, 0x0, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x2, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 32.658272245s ago: executing program 6 (id=5857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c00000000dfffffffffffffff0000000000e700", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c0002800600050000000000"], 0x3c}}, 0x404c840) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 32.418630362s ago: executing program 6 (id=5862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000004c0004800800024067b33f2808000140000000001400030076657468305f746f5f62617461647600080001400000000108000140000000031400030076657468315f746f496873720000000008000540fffffffc14"], 0xc8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 32.182954137s ago: executing program 6 (id=5867): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x80000000, 0x98a1, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x6d, 0x29, 0x0, @private=0xa010100, @empty}}}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 31.882107854s ago: executing program 6 (id=5871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x9c000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) shutdown(r3, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x12c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x67, 0xa8, @random="a5d8514e5c1091b7e5d8bc5df7695c75d25b2e99fe44a76a85e1a9dd929002f351ad119124a5b28546bf28b6f5081d31f150c91ea8941380e3ef430a6eae1d91df589b2094c26c125c76b7187aedadf00ca8b2727aa1c61e0b589b5df101e8de13afa1"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x66, 0xa8, @random="a0ac6e13e9fdea0c38a666c15bfa35fd545b5ff5ddb6eedcfdbf4bc796e11821b3f692cc75ffa3808f8481494ee19cf10f370c4abd199c3f29e94ad37207af4c7185afcf1a80bcfae66a3465e8393903b5ce92aaaad7b5d2f0eef2dd1d836a336e9c"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x404c040) 16.753445519s ago: executing program 34 (id=5871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x9c000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) shutdown(r3, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x12c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x67, 0xa8, @random="a5d8514e5c1091b7e5d8bc5df7695c75d25b2e99fe44a76a85e1a9dd929002f351ad119124a5b28546bf28b6f5081d31f150c91ea8941380e3ef430a6eae1d91df589b2094c26c125c76b7187aedadf00ca8b2727aa1c61e0b589b5df101e8de13afa1"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x66, 0xa8, @random="a0ac6e13e9fdea0c38a666c15bfa35fd545b5ff5ddb6eedcfdbf4bc796e11821b3f692cc75ffa3808f8481494ee19cf10f370c4abd199c3f29e94ad37207af4c7185afcf1a80bcfae66a3465e8393903b5ce92aaaad7b5d2f0eef2dd1d836a336e9c"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x404c040) 4.483033462s ago: executing program 0 (id=6135): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r1, &(0x7f0000000300)=@generic={0x1d, "89d079df2815ae43ccda410d348bbaf2c702c43620d58cdcb15013f741d03baaac7b8af347ca8ca97c8c3809f4ce980c1cc8c67d21e7f9df75174022adfe4be24c8bdd3404567381bdb993980ee0e2e9c718953d01b39522000cc983dffd0c0b4dd1d9a48151cb47dfb833b15605350d8a722fa9893e21643cd43ffd3fd8"}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) 4.14585955s ago: executing program 0 (id=6139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) listen(r0, 0x1) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) 3.881659016s ago: executing program 0 (id=6141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.522328783s ago: executing program 2 (id=6143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x2a4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3327edca05c9092ddb112bd7b1363691d40e3c039322caab"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "047be14d343969c9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db13b8a4660ff7bb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca4dfd6343a24eeb"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5e4b24f11bd1661cbc15c6fe98786d7df1ab9863551eff0f605031d07b1df464"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7e1068e697bbc7e6f84749af853fa2e0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a0c990b67844dc56b99bd144e6973a1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5cadc637ddbca8f1654ee50d1d8a7f2b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="59c593ffa92e5d85cbcad5906c84e8c33bdf128965f62601"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92d785b2aab12b2d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b83c4f1ed00d437dd67ac8eb417de5beb4f881c17769c9c132c070032f78d08e"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="35da0b2827af38b52be7a06d627fb3f3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="883f47b4c379745892bb8543a77781cc1391a6f723060238235a8d8e86738320"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffff80}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="166906d45adeb73766281574e1e06ee7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xdb}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca4d39b19da61a8e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="14e4d872e5f45684af90f81659b76182"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="df68d64b51a20ff6b2dee3c78408a15b3e4740c18daf5574"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6ecd3a53d36e4eed277bb796be205498"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c9796d31ad885d6be848309820081e8"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f877c4c590c37fec0ba35bb1c9c4a8dc92aeca1226716a1b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x336}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f974d7352d2b34d4c0e61567c8bf97366690dbb0eb95736e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x116c507b}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bc029d8242247ff9a4c2d0bf5fbac7d00f25a90535c96cb8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="db96e267eb5a1ebc879851a3743f367f4e3e9353ab85d68e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="eb731791d6830b48497584bff0494729"}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @void, {@ipv4={0x8864, @generic={{0x2d, 0x4, 0x1, 0x2, 0xb4, 0x66, 0x57, 0x6, 0x4, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x27, 0x3a, [@remote, @loopback, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x5, [{@rand_addr=0x64010101, 0x1}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0xa}, {@broadcast, 0xffff55ea}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}]}, @cipso={0x86, 0x2e, 0x0, [{0x6, 0x9, "027cf1c5181868"}, {0x6, 0x12, "d1df17e89b33ec43297c0a41e92a5ae8"}, {0x5, 0xd, "1ea46d5b8c9bd4c612251a"}]}, @cipso={0x86, 0x1b, 0x3, [{0x0, 0x3, "ba"}, {0x0, 0x2}, {0x1, 0x10, "07a3785cbbf7cfd28341410e4977"}]}, @noop, @noop]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000001500070000000c00078008000840000000080500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000300)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4c881) 3.011010518s ago: executing program 2 (id=6146): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x8ae3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000e08000000000000cc554e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x5) 2.825716125s ago: executing program 3 (id=6147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000600)=0x9, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async, rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) unshare(0x22020600) (async, rerun: 32) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6103027b02010800028cef6a047659f686958813b4597f73fce3296f868fd5d3500a8d5303"], 0x9) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280), 0x0) (async, rerun: 64) listen(r7, 0x7) (async, rerun: 64) r8 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r2, 0x7) (async) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) (async) r9 = socket$packet(0x11, 0x1, 0x300) (async) r10 = socket(0x1, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r11, @ANYBLOB="0b1b0500001c0012800b00010062726964676500000c0002800500070040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r9, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x18, r11, 0x1, 0xe9, 0x6, @local}, 0x14) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (rerun: 32) 2.765658422s ago: executing program 2 (id=6148): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000044000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="800066180a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) r3 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x600) 2.629474276s ago: executing program 3 (id=6149): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000004500)=""/4093, 0xffd}, {&(0x7f0000000700)=""/60, 0x3c}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000102, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x655c603d3802df7b}, 0x4000041) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.490105468s ago: executing program 0 (id=6151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0xd6, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="15687efec3d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0xa0, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c, 0x0, 0x0, 0x1}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, @fragment={0x1d, 0x0, 0x2, 0x0, 0x0, 0x5, 0x68}, @srh={0x2c, 0xa, 0x4, 0x5, 0x2, 0x68, 0x6, [@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @loopback]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000030c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000100000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001467656e65766500000400028008001f0000000a000200c6b8755b8439000008001f0105000000793e079960e884ed8306c1bae5c0051724c884c2ff0afc2a6704bb79ae05d5724354061acefae071af5134e234d5478d3b9dc1b29b00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.101553676s ago: executing program 2 (id=6153): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="262f3343ce190e8b757dd699c5a8d244021820870aa3104accac790005d0a2fbaee034eb7aac63b449461190b15d6d81bdd32e53f9b32b8c72faa520f8b5464ff84b506c2448036ed5cf48f8f16407ebb9c7dc22d939f3306097c799eefd6702129ba15213e46e715fa6f8b62ef06a7c12bf497eee11659a7077e686f11ea1aa1b64183d794eb41d1084ddbcd199ae0ad8a221e05c6f2fb4d3f8af5547f42b929e108dab64b968a99880fb63e495c9db55a8bdd82696b2297a70fa212f1307c2d56165675663f15f5122269f358d86b2825a318fb15895b75f82e63756f816e3cad90745ac8ac719833a4e3aec3d7d6f9e4c", @ANYRES64=r1, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4010) 2.101152054s ago: executing program 3 (id=6154): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440cf313ac1414aa80000009000000002400000000000000000000000700000044106300000007ff0000000000007fff94040000000000001400000000000000000000000200000004"], 0x60}}], 0x1, 0x50008000) sendmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000001640)="b5807bc0b3c1bb844284179186593e377255c0e23007e3c48a131c0be7aa529dd88393016e6e6ed4bd24099a2520bcbf309b4dbfd52dd8992e6fcec01fe365cf5c6ea471e47c745aad368891c9183771eed5d00586fff9a404dc6713f6452a96a49b0203b1d5cd929fe0ae3f5ee303aa1d8ce9f6df1783b1078c264070a0546bf94ed1e8895b8ea7c409435effa3fccbe4d3d9b4cb706b050a32ba5ec36602904f3eeadbcc4ee02f1536a77c17316ba9c2d9da36e4922064a1a74a2c3ee571017ae4a99f06a3a309800d9df260eb12595438ad7b918aa1cf6580c8afb71129652b9c52bf3ffa1d50f1117ae345cd723b2e5fc59e4c6762fa1ba9287280c780c2d38b80e88d1dc4d6ae4a92449b0040dfde63828a34574f854e286fdbcda037a4247f2a847b28e62b8145a0026d248e46b8e31e3a0591f86d8b8072bfd2ddc11b84e4bf8b2d7ea800d8dd95ca1dbc77992dbf4360d0ae77b6d48eb926bba6fd582eaf281eba4813b5dcb44e53dec381274c7f1233134159109a99822a2dcaa11a36161d0df00333764f29872f5df95ed0c0885f269ddceb78ba58078887f2f548df38d2e4aad1cfc7ed80d7d6a7ca4fdb0daff49415e266da8bef48c14fbe90af0c86eb4ba3c25c99e7544224fd8f46681287583c678d995314f645add8c71575130d110f5933d360942e8f5616056a4444d3112d27497031c2307f35b571bb2474cff7a508ea5ad9456286ea2560a54c4c00dcb8e935ad0e8df288328ea2d22b3e6dbb9b6ce657e17cf7988be3a9f268c10153dda392c07c4e538f4b576b622886e6e82fa3574b3cb86bc5fa1f714455a044cb00969d503d2cfdaace87e8ee2d1aa97ff7228c33b93bec1f3f80f9de6fadef9159259e0d9ec9f9c036fd306159aadf8181a281161734a333a84bea8ad2b684d5f33ac99c61e61eeaa612c3c8ba3e65f943a2123799af42e9d0a1bf64e31eb03d58e4a475d3a45594ce1bd261f4760fb3a569e27405ba392fa6a45268ad3cf67cca63277363250e94b2c552fb3fb6e36fe298f5345d5c58544451d592fa48ecc2dd80c539dd924e8d52bc1996ba822eafdd7b087886676aad9666201b7efd4e05dc38294efc818f8ec4d096612030f5a0e35c8d3e2d1b2be4e81ea0fc2763ebe84d250eb6bc6144a6509d0d0f1e0414c193d7c1e2b28dc937d519c9a690874c853497055166e6e1de46c19f3418e0202c581e5b74ff87bf4146cfc7c7cd909c34b44e711281e1abc7ece0b79d02eed7740d820bca8fe369fb2d5a8b761a3dc81987129aefa298a66306850d060eb6750f0371e2c9753f7be807628a5df67982c5caf219c80b276869a4779e17939347cef8a1f75a5288f3a872929df9ad738943c6e7c3f20f9e3d645c71456d9fc459036dcd979dc38dac3df2ac2322bcc716090dbe846eeeb564e1dc37461e71321ad16cae4f8c275e6a24341c0bf4a46977c2c4c0e2e20476af2bfc55f6cf2804e89aa89e94c23650c3b48c5416ff73a789320770f6e1532361d8bdaf34150f3474fb4280f96e4beaf19abd55075153f11541e9dd48f2a5e30dfeec46d4ee1a607ff28e1ef2df97c96ccc03a667eb8019bcd9168dcb6902f10ff2d0e8a1f3053b4c37a09ba6538e787a37ab96d2205f0442b5189f438819e272b45298bdb4fd0026f8bddf5ed7a70e5ea08277ca62a7538176a6a1c220f673e94a6fef51b8779ff979e75625d204f846a8e99d550ec58325a0f397af96234b4829a6a2f4f7a48cf50ae548feda26b3d2e6af47fb1723239a4d3d366af884e1775350b674de6121c159ab20f51d1d319f35839b9c2a3c227073b5102422317cf33840077d006bb41d1d2ca735e89d3da556cf4ebda40c1e80b3fed011f8e745e57679de5056b656176bcafda4533eab78a52993422e5efcf6517c07bad6009a774357d6ecc1d481a1f3bdf156cf591090a4650c6153eb69655b2ab76dee612758319c9a08881b76b99f36a4ccf9852dd6f81071e5c956f1249a5dae5162b4d31fcad4b8a5f12474c5d68dd982f515e31947ce1c3f4e3c49865a8fc331c4bd89eca46222abe242c77fda940115c1a7b5b52f1937b61e4813d3adc85968a7b4afbf3388a13b58fd9cf73223ff613e798c46758432190e356da67d1d8037a072cd17d86cbd4d0acd99339dbe2000e038ffca7eb6db136a58e3e78b4bc4e90144869a43ac21b330bd83f06915ad6a76aa252465cadd002b73f4f7e404f0994486dba101c715bb5d686521ee80956dd5859483d8229d010c1dcc6025294e6b9309a28c54dd70b1b46178cd6300cb94e1356abfac6063cb902b4c4365b3a0d45a45093b8df95bdc8a57d4040efabf79a33f24dbe485b3997c2fa4a8c1102c861f1ce60694a84487f5fdcbed671b561d9d4ca66edc20db0af8e239b5aeb3d5cc28d923e2068ea30a59aebc3c147981a3c88e2a55ef4bca0d2cfbffa19668606b18b3b7a78618bb2abc5a954b74486eacf71f2ee66bc95bc19b5c40520fd266877a21ec41990e42e6160f5b65635c7b58dfafd06d9950361ff45d4f10d93e8040f654224a3a6e07938b0a515ccee27197edf98a2f83e1023078b3e324e400c4438ec2f34eca08bed5a4b769ffdd2c02cac0f759c25148c22cdf8102b35f25eb8ef1b7fce7d38f967c622edf260b451f6c89c4a9d70fef799beed6d1ec837425eec65d28a300b3de6336444869700ce8887297ea5f0bdcb700e8a8d78702de0cb761e9259b55c3d50a50d3471073beb480c4ca958b2f27ea73e5f2f41d696ed52d1e37c4e9c5b20c9cdf79842d73a00aa526386ac74713f0f6f6c3141766cbe67004efe65bf28a535229a2b59ed73b3459f04589afb7f7fe8480ad7e2fa9239ad061cb3ff8ba236e4ce50f2216dfe9545c9d5e3a3410b64d90226095b6f5278d4015699b74d0bcfc1961bcdd29a5db5442e8ab095264712426dc9fdeff24284b184b9cb9beb7241d5b2d15aa1547e36102bd1b0868d3fd21cc0a125de61c5e64a33d8d0e312e0e96cdfa78b49f718025ccc7f1817b9eaea201d445156b71cf2e21b0105eed8431a2a95872c63a0131df9c99eb828e6eddb409d72b3c2c6d60a62d0e4d39ec27209715694ecac608984ce13cf56cfdbdf3c4e2281c336c3ac22a478a6657e969a0d99ed45ec0581d3503b66389f7704a287d9dc72bbde9e0137464ea2f74f8c1a3ef7a4dcac7231226448aaf29cbcbe0a524cf81ce4b77ae04c15376d74b1e57fc7ef3824c9be54bff41381c07391b19952e672f1fc5d1cab5b57d35c04041c2b3c0a73fde9ca92f77ca55cf3fbe8bbf9ac92815605e749105476cf59f53906a209ce18071ea524792d443387a82248713e5b8b76d67bae8ad6bdc23a95ca1778eb837a60e4c10a0ab91a815e337dc6578c14298b644530efba881652d8a2a49888edef2c01c20e93cbce9a5412e0c26a2e44de3671b1b3b3fe1ce87611b5c3b97aa3bc6746d5e8c3a4c962cb359c1402a1a59702b662467108a35ea4d77966b0229ebf4263e9839dd3f8c5470271007423eb1592eb30c333e67d9e23bc775a54a43cc4323c9148c2cf724298bb4e210942df6c99be6fcd58f7fd478a3d8232552ca021edda673d4c4218fb6b074a2c8debe366385861e0b637b45426f64e677690454202d5f6fe1f1fece26320de0b34c3871d45adbb5a0878754b3a9b76a54f6037516e7ce45b69bb01513ecf3cacaff36afc55e38b17f4f0a8769a51c8fffa19376e262360e77733d48f65fcbc8da8447a43c09083b5edd6c58c4a60697711b6de8d0d8ccadef82cb647d7e8f4708732d6a3234a9c82a3ba02d0ecb1ecdea25c60c99fbb2b8d5f9f706ece28f300751de8e9dc8328867f50d4ab7f9bd6b1e274778be1468f433993e98ccb748ef4b0b73aa11c0ee301ab47bee2f56446c2572b40ee07bdfc36a21c2997c8c933a3ce04c74acdfbdb4961a9ad5d83262df1f3d018e9df6aa3435c2b6a06c8e0d27edeb5a624fff1a9bdfd282145398d891d535188160ab0fed76f4cc1b1fe143c2a6cf873958d790e867513c274cc4fa399e9d2d4be539450b2998482b432ef68232780829baa197f811817b563ae26ec11542ae3a7119d40ffd9ea707065d27692ae5ed93b71a7f3d48938cd3775d8fea8dab4efc59ba3fc87b9fa020186be6e5341b4be5b326a70c6c7a42662ea593f0a57c0533b19e2a481bbaa6c1caef4c8fb73d6d59e0dc342d3bf9810aeca49afd97c2398cf97aecdbe5096c232defd522e3e06ae02f026776f0db1ba3c656e29278d9ea666a2ee0d76cd69d20305d636b0f09c09875fb96", 0xbf1}, {&(0x7f0000000180)="60d07740619d90c31a49f92327cad3a61d675886092b2635", 0x18}], 0x4}}, {{&(0x7f00000001c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000240)="fbc8272095533d22fcea2e8186a9ac6ead9cea44b5764d18aa7031a2350376cd21c669930577f0a5d380e3b1c62e58e8e49e408f8a2d", 0x36}, {&(0x7f0000002bc0)="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", 0xd00}, {&(0x7f0000000280)="a95e745e74a6e2d5fff6d17e75b9197d953d5e432038b33af51bc67cc703f715ec0a80a6fcab019317da7ff91c3ca1d91bf4c81dca7a74e5e5bc3289410a91661252c4e2474a1c69b484728a8057292d62bd5a3c29956b74fb1e923e161df65d95f4c21c5f8be9ee282cffe259a14b6d19ac4a6cde76155a718cabe3d643e657a5c3e0894bf348e54edd55f3ed34e2", 0x8f}, {&(0x7f0000003c80)="67212ebc144123a61d197373f7acbd13de75ab2a69b6", 0x16}], 0x4}}], 0x2, 0x0) 1.81040022s ago: executing program 0 (id=6155): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @remote, 0xffffffff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b70300000d000000850000006b"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x83, &(0x7f0000000140)="e705724057fc16f1e7cd9098f600", &(0x7f0000000740)=""/131, 0x7fffffff, 0x0, 0x1f, 0xd5, &(0x7f0000000800)="e9f29fc11e58638318dca2a28093059ee25d2f4415ef0ad3bf71765366d933", &(0x7f0000000840)="1d15f0e6b36d0763b911206ccfc06353ed6148fd7ecf785e8eacdea1f2d4aaf3bd03794ed96654b9ad7a3b26bca4d5d69cdac58a24282492575f80f9b7782e012955b0a8ee998a85512d5063e6fb2edd6ffde46bddc35cad56d01fa9499ff3e28003ef6e2aca34c72dc80b2b13691b2b3c797aaa94b1a221d3abef350c5048152a1c06d8ab4845a4a2b6a780306a0ff75b2950089c7e232edf9670f78b46a87b9601eea2fb2a783703b2bb7affa1fb8a9a420c134ab276f08dbac5ce9c9d1f20ad0be63a5fb52e4b52fff43babcaec69ae80aa0710", 0x2, 0x0, 0x8}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r4}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000640)="0250d7a63a53526f6fc280d39c99c39d8baafa7cbc8364441c9f2c6db3d7a64ca68ea903225a730e3b32167d005ad5eb38d83d3a8e292f243db56c84e0c496ada0d74d50a7f4ceb70e246a2a2913aeefec2f9993cf2766e77e9638cd39e3135d93aac2abbe2378edfaaf2f909704c312e9b355bbc4fb433355cc57507dbd44ea40a6bcbf59803fb5757ccf51f734f7d3617d24c77cae42b10d87896c268ebb98b86016ccd98c63c555d1210c4410eba1a73116585018d2dcd93bc4c4c197d6a0ff835db687f6fe00ccbd1a48e41e2b20cf72d95c8def783da0fd1ac4b0510f091a", 0xe1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c65723000000000000094501975fcd170bb1ebcc88cedc39a3b6290d2b363b1e05c54a2ff89f6b952a8ff1e99cd786415fb6fef39a874ffffff2828267e82a6027481beadfaa5ccd6188af26eb9757b823a68a80abbca57a21eda8d675f5ea7a6bd55d7c46d1c2376c9f2cedd934e3b88e8117ec40c440589a93a822e4d08"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 1.75040196s ago: executing program 5 (id=6156): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xc2, 0x9d, &(0x7f00000001c0)="ae87a5e7639171270cbe1d117d8103942f31375298bdb64562e16481e52b5bc77fa6c9dd70f3ff57285685f1a86b68ddeab53cb3af114448c702a7bbd877ce0cb50ec3df6f1881f5a416d2fe465384355bb697e22571eaf0de7c5d16c70a666dc71f966b72294d47bae30e8632becc1302944ff09c70154a10e8c590d7ab2a5ac97eff5cc8eedf7a89736f726f7d85762de03cc21a461dd817363114e486147cb8dfbc4855f19390f53359bccd1a41d0d7d40b3cb5ab4f635be0444e9f127e2d586a", &(0x7f0000000480)=""/157, 0x8, 0x0, 0x89, 0xce, &(0x7f0000000540)="23da182190d020cf5b2a98a8405fb2c99bbcd5ca6619f1d99353c4620d6e1b96ea438506740c17014402feba925b525867a9e15744af04bf2f117e165d64503d7b163ae07976a9f1736f7536d2389e8d1d105f7bca39ae89d8fbee6322340fa677aaee9f28b46f1f72998410d218d16580947f34938bce94b097c09cf8f1d71aad4dd14b5768f6591d", &(0x7f0000000600)="b190c13ad8c2f0b852f6a50e28b5c70290e89b71c6e5fce0fa9257cddc5e7acfc039027ed600f37607c4e89b1601dab345a400e04c65992caa30579f2f03fb6cb755feb1b577446a2f0acadc3ace7da6839d64a663e7581cb4217308e7bde4b1da6b4777d4dc4d916aae892669a2a869bc6c62175f660dbb2947cabd4416d0464e808dcde5712272631c9a0d9ee932b06e81db776231f271babeb8de9f639c31e317d9c6d6cdbfd9c5e6ed82ef1cdaad9021e0538ccc334d3075b3bbecd8ae07968a6b2c0cfa344f2e2543f07bfa", 0x3, 0x0, 0x8}, 0x50) (async) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="071f080a400000e8c93bf564bcee54be0e1c2074ed277c6454816781a8", 0x1d) (async) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) (async) syz_emit_ethernet(0x18c, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x156, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x9a, 0x2, [], "6ea79c1410a9467725f6c28808ed742696e9d0394aa9dc3e324603dd1f241112ca3e77c17d6b505a88b1273d6c42fb60e2d35142a0b1a74efa644598ff8320ec9a4c2b163eb578c7fce6f763e572401358198034470196538c6fffd0ae0ce3ae39794de32d7bd9e2a3e072030171f96b28e4a24c7f59263e89ec3c5fec22f478562c02ff8fb249b02e645eaad2c6ca3cdf2d28ce5c42a6f1aa9aaf218464b6b26ee4c65fda8c8f7aee8689ff4ba0b4ff"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e2f3"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x0, 0x3, 0xa, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1, "21a092b508089037f1d3299f7027d6bd05689819b3fd97748b3fa2391251426a9e282e80b67e8a6786034e8e4b0b0029c3759ecbd1a23eedb659d11a689ae79a73c73aa0255e693361b4a31ae878e48b4075b26c3fe700"/96}}}}}}}, 0x0) 1.677510265s ago: executing program 3 (id=6157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8863821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b82ff01000099cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5020061aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91f677c102b6ab330efa4b617fc9642623476671e332bccb7af3ae56edba7789adbdc03a91576e70b02d3e79c6e54de9d7dfd813c1015070b634a9c1abf9"], 0x0) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e24, 0x4e24, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) syz_emit_ethernet(0xad, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8863821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b82ff01000099cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5020061aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91f677c102b6ab330efa4b617fc9642623476671e332bccb7af3ae56edba7789adbdc03a91576e70b02d3e79c6e54de9d7dfd813c1015070b634a9c1abf9"], 0x0) (async) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e24, 0x4e24, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) 1.584520275s ago: executing program 5 (id=6158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x7}, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000000)=[{0x5, 0x2, 0x0, {0xffff, 0x7ff, 0x2}}, {0x4, 0x2, 0x0, {0x10, 0x4, 0x1}}], 0x2, 0x20, 0x6, 0x80000000}) 1.495640591s ago: executing program 5 (id=6159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000ae6000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0xf8704000) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6gre0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x1}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r7, &(0x7f0000000240)='\x00', 0x1a400, &(0x7f0000000280)={@_ha_fsid={[0x8, 0x6]}, {0x3ff, 0x2, 0x3, 0x6}}, 0x3, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x9}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r7, 0x400454ce, 0xffffffffffffffff) sendmsg$xdp(r8, &(0x7f0000000d80)={&(0x7f00000003c0)={0x2c, 0x0, r5, 0x12}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000500)="837fc041cb349a6c4e44c8c4d9028c21f788ef698783501a22cb7462ea37fc5d23a39ab57f0c4cd9dc66575564b3a07b5c0bb30b0bd4bd1601b50b4639749ff6d12f8fd2b264ce3023721a45a0872a9e1e1fa5797ead18a634805081126af8c1dd12afb127cb9cf93579bd717ec1ed42212f745e6dcb5e30e8785cf615a3d633f5ed03b79cb92e2514bb352b92a51b21e3279a66fbad38a3ffe82081115081ea3b28ba63ca38b92a23b137a1f01093943b4bdc2f32f43e9de992134c0135c2db9e8d58282efbea944a7858313fef", 0xce}, {&(0x7f00000006c0)="072f304102e2b91944e70336564f472d5f43e72ce456bfd2fd7cde3fb1adabc9bec1eb8bb1d72cd9e13b42c4a03933639ed9ab6fa73d635820c8a06af9742abf96430c2a2c0ae73c969f5126bbe2e5b52492ddcb61773d7dba65cc8a3d009c83520f039743d1c48df6b001456c778f00105987bb85debc704f7a3a2d3251d2eac74c9f1f85dca21e0adb99", 0x8b}, {&(0x7f0000000780)="061fcddba33cd5e816fa91bc", 0xc}, {&(0x7f00000007c0)="4a1f074f64457f7895e6d07282d82d1a6ab36bf4a1fb6a874c24c08e43f98ce0420a746a7e907b8823dc8e16667f90ac127306aaa6949ed8c76977f420b627cc7f8b893474d67b81bee016a012bd7bcd3459b5080da880d0bcbe0cd114cd69577b5434b515e7994ac0755699271a96e00ebd533544c035e796d17a0be2a6b91d2c3f1b1121ffec8197afbfd3b83a80c958195ee4f119867a76b42e718c8d408fca5ec9fd84062532ca0676c7bc41c047698e1f2c462f143b73e59741b9d0624afc7491a633d09f03a225382ffdee1c660b794f03fe8d0d509cf15abdcf4184f6a38978336067f0148449", 0xea}, {&(0x7f00000008c0)="afdaee00d552aa0918d4b9f22ae6e7ceb59b00f1048f0f3662268cef0be16ff3a6a7bb486ec3a104e351cc52724d27c8e78cce95c7bf1fffacd0279e4ddaccd57c6e2bd6143a043d31f449b8464ea95b0606bb4b3193ab232441b67efbe9c7753221208e5d9d38e59ba1187bf35ad311907e690f55892a667a74de01a53669c729713f8b7142386cb1a1c770d5308bc4bac0b101f1e4ed9b406d6e8a95ba9a8df3f63a076867d575ec37a5acba60f675a94b135e94653b14240ec418604742bd8ec3036b69eb2125b20110c6157ecef8fb30c262f4954e5d8832f6f48d297f45ef26b2912ad4d58d60b4f5c37523b4", 0xef}, {&(0x7f00000009c0)="ca11d53710ef8a3ee57d75d2950093e1bd29062851dfcf0e2e77dd697ed759a94e19c06c95b63344dea02ec18539f5717de5a72822ec02c39eca6dc5473b7ee3a858cbc0d2a59b262290df68fd280e53045d96d818a6ba32afe30e9d540603aebffec0db87a45cb7d1ebd7502a42cfd713c26afe6e4f60fa29cc798ca637351d6c4096ac017d651436fe4b66dcac3fabe91d7b4a2a26d102c003c2347a6254", 0x9f}, {&(0x7f0000000a80)="00dbc0c8e839c4a3feeb970b5566d325089c8a823a1835d8018adb51b5c075c6919cdbabf16df586c25b73b4f1767f6d139c72e395f4cb8325325b1026e63f58a01e0109bffdc2861cae", 0x4a}, {&(0x7f0000000b00)="dc3f7fb529da0f936fc8c86f990b25fe0d53f1ad3cf6d479e24ca58248dcef8e07f7e370ba292a7604b599ace65f234023ac1cf303ad570502d934eda426c098a113dd38ecb2c5cb6fb8c338707b559b3f6ef2774d5cf28b0666c4029cc23557e4ef21a7cfbf5fb2ecc214ea9c383ead05f68ed5ca388097cfb7f899458d04e0f1af95516ae4a07815a9fcd2bf1f", 0x8e}, {&(0x7f0000000bc0)="c917517a34d176ede934aee8804cdff065da0437b1e5cf3166a84b722fc3380d40b1dc9a4ad7f6f8a00ede8e09f6d180e0c7840419f2bd31f20af2a8479e1111b204b8b4c0afc3f19730c2c9ff0e72d54ed363c982774d09e8e9e0966d03325a86d5f73e02ed5874f670b98efa84816671b09ad88bb2aa866d97b7a87260a93fdd3164a3c51a7d01f95e830926fe1b3914bb5983b2e20c1f8e060678bd853aa2658b49abcf4d383b1c15e0efa4ede7438f15081529605916c8eeb3bb9c22f15a030773874a3af7c26345ecb7b56a7c", 0xcf}], 0x9, 0x0, 0x0, 0x4004000}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003940)={0x14, 0x2d, 0x107, 0xfffffffe, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="afec0710", @ANYRES16=r13, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x44}}, 0x0) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0981000000150500040002000000060001084e200000"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="10002cbd7000f345312503000800060201004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 1.109778122s ago: executing program 0 (id=6160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.008838399s ago: executing program 3 (id=6161): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000200000800010001000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x200480c0}, 0x4040090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 949.634302ms ago: executing program 2 (id=6162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0xf6, 0x7fff, 0x80100, 0xa, 0x3, 0xffffffff, 0x0, 0x5}}) 777.476346ms ago: executing program 3 (id=6163): r0 = socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r5 = syz_open_procfs$namespace(r2, &(0x7f0000001780)='ns/ipc\x00') r6 = getpid() sendmmsg$unix(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r3}}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r8, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001200)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000001300)=0xe8) r10 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r13}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r18 = syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') r19 = getpid() sendmmsg$unix(r14, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, r17}}}, @cred={{0x1c, 0x1, 0x2, {r19, r16}}}, @rights={{0x18, 0x1, 0x1, [r18, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r20 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r25 = syz_open_procfs$namespace(r22, &(0x7f0000001780)='ns/ipc\x00') r26 = getpid() sendmmsg$unix(r21, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r22, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r22, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r23}}}, @rights={{0x18, 0x1, 0x1, [r25, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000001500)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc, &(0x7f0000001080)=[{&(0x7f0000001c40)={0x368, 0x30, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x81, 0x15c, 0x0, 0x0, @binary="7e0ff8615cb1e9d4c49e699fee4e85b51a9a7a463b4940676039c58b662bb05ce793acbb849cc64f48ed8bd9d5a150f4c0856b4a963f9b0a14b9ffc39b6fbf703387028e50bb7da3d5786464e4b0e4c69849248808a84f1234ac9eb008cd7b394e98b5b659ed4570aad953527d7fa207d58e3d83a64eaf4648b83b67f9"}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x7b}, @typed={0x8, 0x14d, 0x0, 0x0, @pid=r8}, @nested={0x165, 0xa5, 0x0, 0x1, [@generic="62226bb840ed53030c5fe4ed284f8a291165a8c92d114b47dd9ed8fe5b71d4e018e26fb134df284e3a15c270830380e2519554310cd55a9e3dc349c0e0908a712dc8ddd2", @generic="a748c618da9493bd0c535bffaf13a32bb898d571e2189ef332c1d01e0fd0ca12269ce00d1802d821a771d233dec6c718a806", @generic="d216d03eb1f3ccdae8f792d4b0c55c3e4f21a589f2db9cb1be562fa2ed6848a8a3bd69c73e0cab302adf28dd9ec05207b93ba5482ed51b950b6539193472eb2e925a6d8df1a6dbc2d8f6613cfe1dbe3fc8300b9453843086e5d9c65c4376f5f7ca7c978777b83a6ff00b7a9ff42aaf99a5342b580e5e7b80b681c045ea4154a197a3e70346942a06f2bf520d41c3496a28753e4ef508bee4b3da8ebc8e", @generic="8b8ca9a2e5a8ae8d069fcb0863c6c55f88912005c31f9f6390ba15bedba6820001db978519ede8a0bc43d009e7940835abf9c752ed80f3213bf5fd10b8249d3302f3c4b1e6df8310e79f", @typed={0x4, 0x75}]}, @generic="e7838f937a144bd9e653bdec27099fe15b1138771bf6ddc3ac3182971e27c52b2ecc9fb48154374e9b931ace0b8d57972e59d703418447f571914062a22a267db8152239f5ea5ab85c5aad27a40d488d7f861bf2f83b3c1a5e", @generic, @generic="2efe39639396e2d4ec0389ae3fc1a75aa6db9115e0ab00c1e2be0240263ea5337c14de83c40ec5b868c5262c9a993cbfd4439e787640c93b79b638070b48a8bceab7714d78f9d86646af5fd5edf50ae61dd9488c7d38400df93e70faaa2a41cffd274533becc507040bdd15d23d5133b906ff0305c5a3433eaaaa86d8773e32067e8863e29755839330f8ef90a6f9c11c5838c1cd6168ea8b12233e62b223794388d011804593f1cb25a35054b36bdd15a5c6866e028ce45", @generic="f1faaf70c98072e5836540f9c8ed43ded9cb5e360159beecd8f21081044bf1c64cb2a37d6f6f35228c99d45f9418bf83b8dd43b0422956d9bc940c28c8207f74", @generic="2eaa1aa450c4cde6c51525"]}, 0x368}, {&(0x7f0000000700)={0x5c8, 0x1f, 0x2, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x143, 0x0, 0x0, @u32=0x80000000}, @nested={0x52, 0x15a, 0x0, 0x1, [@generic="75052907e7851bc305a1fd2a5e4b2076bb1863ea01b19a70", @generic="72affd05b910efd5d9db7532529d411d47d026c27d1747642ab4d33357f376f0853b25a9fdb6ae4bbc4d48dc27d43332333dec0d9d4b"]}, @nested={0x202, 0x8b, 0x0, 0x1, [@typed={0x5, 0x40, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xa3}, @typed={0x14, 0x152, 0x0, 0x0, @ipv6=@local}, @generic="b8a574793a3870e6331b04e341ee92effb6a044c839dbed19492ebea3f4aac4880999ca721995c0552daa1cecfa5b23d1a092aade66c37a85702af743d612abdaa10062cddc7dfc3c388c1579588d5e3a6c32ed4ee5943aba5812f275d013729ffa07f583b4999d8344ca17c024a83090d0e6402daf31c9df4e2b71e7b27e46e5412ead749a224a55936ebf67b33", @typed={0x8, 0x10, 0x0, 0x0, @pid}, @generic="04f7556eff46e04e940956f054b616ab06d6b0964cee17b08423fef872accd34402cfef25eb109ff5607a705ba2aa0ce0b987aec4be38b4092f68bc0e6deaa67428cbf5b1e4b98668cc1e5be62fd6dd22c933a607eca92c9f32d4a2dc3665048b502fa19aa0807bdbcaf1f8efbb763aec81f662a93dc4c5e2f01", @generic="685ab44d7a45b41fd16b6de3ddb8279dbf26f29b210434d6d31adb700f75669214c69405edaeb1f06637109a862a83ecaf4207d88cb0cca03160e70be5ff821bade169c5aff172f57310a5b5996ed5a1e4d51df96c4d0b2534e08d334c36653dbf6fff456614622c212f3212186fb63a9b1688e9bb7f49dcad371448c7e9858a80d5c4cf16655995016a5d8610bdf523", @generic="d135e21756df25c7df41f60eaa7b69b0d5619a7e958c4f2435ef742da89e15ea50cc406e0ad3b732073e8dc2c8c0cb9df869e49a6307fcef2b94a72531b5"]}, @generic="142e3b6d4068361711003e8a1afcb9fcde9612f7f3a8007d85b7dd40cef127a41761b6527a09f8fcb5cfeb96e1060c74c8de645bcc169f131bbf6ad97a692896a25b1c5c557bfa82d6a39b4aec3fce71a3cab40b942fe1ab5a809495a574ef49313a3fc6c940fba4bd251f293af490930d8ec34fe276e94b05b96cb3fd579adbb2402059264f3516f73a40da70d30d1bdacae71ea83d77e44baaf617564715899f8d4beddd231f9b93027ada4c727dd7de65821aba0cf6be73e3c4816a50458cb79739945c", @typed={0x66, 0x13b, 0x0, 0x0, @binary="2fd4eea5f9e99e9806a4b818b8fabc71bd7947da4b774bc2bb4487b836ea3e847e143d244b421e5c4e6f0fcbb9691985bcadbc72ead58330e7d72f60880bf57dd07796588ace28ab4561ca9206ebf646961af2a0732a52eb1d6dcde4865620610d5a"}, @nested={0x46, 0x39, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x6}, @generic="3a5c7f4476c7dd269f4d3b3594a738df5da412aac94a97a08e9a5138f7fb76e9cff65c21d3e848a11f237059ecf251a46479b45f6db92d430cba"]}, @generic="77d2d51e2ddcfc7408e4eff5a6582d1da309f8113ffc0404f905efd79de67408a60b4ad6095366fd3e1d083e4c8effba8e116b554c8a305bc33b00c83dee2dcbfd31fa078a2f49c028fc94fa2e967b0b53e2b8589ddd6cb91a44da2aef84d6e8fe15e78ed4ac77c4d094e42153cd46fdc2aecc18e32c65d46861bbd4760bcc6ab19585d9c1011cba46b66831bc5d116da4030637d981a6fb4928923b1a7b858f1f49113f3d3ceaad3cee5a0d53684ce7e4d772f1f3966012f7565f5442498bf97d083ad4a6029feefed9761da8021155524b5cbece90c497237de34e2c87", @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @generic="5416e701d4b5b808f0b87f391f39e72356d9af15c97a027f30614d757068191bcae6abafa3003b870ec9fe8a8da7e470f34d2a3f2f9e67276fac63306a004447f7904baccc8e2f05e80593cad7084ae1cb37767b2021633d62e1f56c3be1fa0356dc03c77c18d6d3f2f09e8daf6ff4258143b9d12517cca7f58491176268201ef49baff9673b0ed93cbb369291994e7dab6120f8f468d3335c80e302bab6341ff4196057cb60914cb6668ea19e3d7d39beb443e504f894c360db9694d4fb81c3a2e3262dde8c67a5703326f6cf4063a52ccc616fe410f005fde3538b6bbc7d31ff770acef3ed1f9869df21740803"]}, 0x5c8}, {&(0x7f0000000d40)={0x304, 0x3c, 0x2, 0x70bd25, 0x25dfdbfe, "", [@generic="ac6e3b1fca0710df76aa4461cc9e21e79dbae9d772983dba8de191eb384640bb1722e1434b391ae5b3dba854d83e84fe8d9f62372a1450f6660984035348e6661a01a599bfe0d36962baf33891358dee85e49329245841b434b7139918dd6f0b3bcbf86ed445f377fce8b0ccab73f81e8733916f0c8bd44d01cf6821b5cf1d5c12a4ee46f63ac8674e278bde1bc9a941e761e836e2969f308d7bea8ce9fff548f1ad5a8561db9d9f991fe63f7ca93754038e6dd488ce7cc175c224698072469436c84780acd265681f003edafca6370e8d8736e6f0dd5ab792692d4d6dd83778b6", @generic="51fe8d3d6de6584d8aa92ba47f304a8ea56ad79839bec77283f605a20f9fa818c561cc78ec94fdcefb9ef808370cc37e6955008ee8b17feb636b8d20c113d792d983ed9005e99f607cfcde6439fb700eca9b7377c70fca94ec14fdc9a389a7eda93083357b2d503bb8419dfd4e1cd55b52c8d08be89bd92c20b48c669d9aae0d2ba489a302a9287cb333a8", @nested={0x18, 0x92, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x3}]}, @generic="20f88125f9b6cc87ed56d14bb829735b35ce8d3e26ce5633a22b7a0dd5b484a12fc401538d248d8a9e67e1443030838e850f219eb191d8287952992e867c9eb92439db9b9424e4828ccc51d90dab9b1c9db5f4cc0e8495cbc368dfe76534432268cab22fce92c2f44798e9c83c7e34806ad2009ee3643e31a0cac469a6f1d36e6f52e3e1731c3b68956b052a8f07c5b272edcdb179f2a290d7", @nested={0xbd, 0x8f, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x12}, @generic="cb419c2921877221a6695e1684939560c2f4efc078982dba33c34107981edb4d96361af5e6acfe8d432729618a34368cb14c64e0af4d582f5c48648588ef5190c9b7eb1ac64b8ca762dbd42c393993ceaaf7f8919d4426feb84fadca76eff379ca2cc1b2ad9e45c00f757dc5d0bbaeda5ca8fb7a85327626bd57ed5d482990aca1d2ba39fb16bc5e355955c75685200ee377d5befe34930d77ba3c4f13b24d013f02186c6d", @nested={0x4, 0x8f}]}, @nested={0xc, 0x9a, 0x0, 0x1, [@typed={0x4, 0xd1}, @nested={0x4, 0xea}]}, @generic="c77c4cbc7cd3adbd3bca"]}, 0x304}], 0x3, &(0x7f00000013c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r22, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r17}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r23, 0xee00}}}], 0x118, 0x20040085}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback={0xfe80000000000000}, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0xfe00, 0x8000, 0x8, 0x6}}], 0x20, 0x4855}, 0x24000052) 767.097254ms ago: executing program 7 (id=6042): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 591.385811ms ago: executing program 7 (id=6164): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r2, 0x1}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x1}]}, 0x10) 515.957164ms ago: executing program 5 (id=6165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000100)={@random="8cf45b9b5865", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[], @generic="20338cfcef"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 288.180584ms ago: executing program 5 (id=6167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c00028008000100", @ANYRES32], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800800114000000034050005000a000000050001060000000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000100), 0x10) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r6, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 277.815658ms ago: executing program 2 (id=6168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x9, 0x69, 0x10, 0x7d}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe65}, 0x80) 263.332072ms ago: executing program 7 (id=6169): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x26}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 0s ago: executing program 5 (id=6170): r0 = socket$inet6(0xa, 0xa, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty, [0x0, 0xff]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x8c, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): rror -2 [ 543.036179][T20729] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 543.496753][T20746] pim6reg: entered allmulticast mode [ 543.633183][T20754] bond0: ARP target 8.4.0.0 is already present [ 543.658603][T20754] bond0: option arp_ip_target: invalid value (1032) [ 543.675560][T20748] xt_CT: No such helper "pptp" [ 543.918965][T20766] __nla_validate_parse: 7 callbacks suppressed [ 543.918982][T20766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'. [ 544.322119][T20779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 544.736073][T20815] xt_cgroup: invalid path, errno=-2 [ 544.800757][T20822] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:21 [ 544.850913][T20821] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 544.891941][T20824] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 544.927770][T20824] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 544.995259][T20830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4016'. [ 545.245285][T20821] bond2 (unregistering): Released all slaves [ 545.869355][T20844] netlink: 'syz.3.4024': attribute type 9 has an invalid length. [ 545.926923][T20841] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 545.952708][T20841] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4023'. [ 545.974775][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 546.002560][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 546.060976][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 546.128337][T20849] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 546.188042][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4029'. [ 546.201489][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'. [ 546.262556][T20804] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.285240][T20863] netlink: 'syz.3.4027': attribute type 2 has an invalid length. [ 546.300369][T20863] netlink: 'syz.3.4027': attribute type 8 has an invalid length. [ 546.309204][T20804] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.328296][T20863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4027'. [ 546.366708][T20804] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.405489][T20804] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.865514][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'. [ 546.888121][T20888] netlink: 'syz.2.4037': attribute type 10 has an invalid length. [ 546.922986][T20890] netlink: 'syz.1.4038': attribute type 1 has an invalid length. [ 546.992065][T20888] geneve3: entered promiscuous mode [ 546.997411][T20895] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 547.011272][T20888] geneve3: entered allmulticast mode [ 547.412178][T20891] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 547.875555][T20933] netlink: 'syz.0.4051': attribute type 13 has an invalid length. [ 547.907679][T20933] veth1_macvtap: left promiscuous mode [ 547.942314][T20933] macsec0: entered allmulticast mode [ 548.029627][T20940] netlink: 'syz.0.4051': attribute type 12 has an invalid length. [ 548.659104][T20949] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 548.687651][T20949] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 548.865744][T20949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.885592][T20949] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 548.934848][T20973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.062326][T20978] __nla_validate_parse: 5 callbacks suppressed [ 549.062346][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 549.226034][T20949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.261937][T20949] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 549.272765][T20975] can: request_module (can-proto-4) failed. [ 549.534303][T20949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.535691][T20991] tipc: Enabling of bearer rejected, media not registered [ 549.549313][T20949] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 549.807746][T20998] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4068'. [ 549.901029][T20949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.901862][T20998] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4068'. [ 549.920900][T20949] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 549.943520][T21002] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4068'. [ 549.958522][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 549.977282][T21002] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4068'. [ 550.465474][T21019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.573332][T21030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4078'. [ 550.586899][T21020] bond2: (slave veth3): Enslaving as an active interface with a down link [ 550.799652][ T29] audit: type=1800 audit(1786477603.114:5): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4082" name="memory.events" dev="tmpfs" ino=1243 res=0 errno=0 [ 550.912657][T21050] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4082'. [ 551.172826][T21058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 551.843306][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4089'. [ 552.760713][T21094] validate_nla: 7 callbacks suppressed [ 552.760731][T21094] netlink: 'syz.2.4094': attribute type 15 has an invalid length. [ 552.777065][T21096] netlink: 'syz.1.4096': attribute type 3 has an invalid length. [ 552.864903][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4098'. [ 553.248277][T21126] Cannot find set identified by id 4 to match [ 554.352846][T21158] __nla_validate_parse: 1 callbacks suppressed [ 554.352868][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4117'. [ 554.416543][T21158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4117'. [ 554.437775][T21164] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 554.471682][T21164] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 554.515628][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4117'. [ 554.560372][T21158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4117'. [ 554.756232][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 555.206959][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'. [ 555.226668][T21196] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 555.237927][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4127'. [ 555.315619][T21203] netlink: 'syz.1.4129': attribute type 23 has an invalid length. [ 555.532453][T21196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.891903][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4137'. [ 556.100475][T15404] IPVS: starting estimator thread 0... [ 556.159141][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4140'. [ 556.192926][T21236] x_tables: duplicate underflow at hook 2 [ 556.201706][T21245] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4141'. [ 556.232301][T21237] IPVS: using max 29 ests per chain, 69600 per kthread [ 556.361155][T21258] netlink: 'syz.2.4138': attribute type 1 has an invalid length. [ 556.834830][T21272] netlink: 'syz.2.4143': attribute type 2 has an invalid length. [ 556.901937][T21264] wg1 speed is unknown, defaulting to 1000 [ 557.434158][T21290] netlink: 'syz.0.4151': attribute type 5 has an invalid length. [ 557.471570][T21290] netlink: 'syz.0.4151': attribute type 9 has an invalid length. [ 557.738665][T21301] netlink: 'syz.4.4155': attribute type 3 has an invalid length. [ 558.462182][T21328] netlink: 'syz.1.4164': attribute type 10 has an invalid length. [ 558.569715][T21328] team0: entered allmulticast mode [ 558.636908][T21328] team_slave_0: entered allmulticast mode [ 558.652542][T21328] team_slave_1: entered allmulticast mode [ 558.694093][T21328] bridge0: port 1(team0) entered blocking state [ 558.715184][T21328] bridge0: port 1(team0) entered disabled state [ 558.726396][T21328] team0: entered promiscuous mode [ 558.766351][T21328] team_slave_0: entered promiscuous mode [ 558.779393][T21328] team_slave_1: entered promiscuous mode [ 558.788397][T21328] bridge0: port 1(team0) entered blocking state [ 558.794845][T21328] bridge0: port 1(team0) entered forwarding state [ 558.967279][T21346] netlink: 'syz.4.4170': attribute type 1 has an invalid length. [ 559.163260][T21346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.242576][T21354] sctp: [Deprecated]: syz.0.4172 (pid 21354) Use of int in max_burst socket option. [ 559.242576][T21354] Use struct sctp_assoc_value instead [ 559.306450][T21353] bond2: (slave gretap1): making interface the new active one [ 559.318664][T21353] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 559.581252][T21358] __nla_validate_parse: 7 callbacks suppressed [ 559.581270][T21358] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4173'. [ 559.824239][T21366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4175'. [ 559.864622][T21371] pim6reg: entered allmulticast mode [ 559.898416][T21378] pim6reg: left allmulticast mode [ 559.972632][T21380] xt_hashlimit: size too large, truncated to 1048576 [ 559.999729][T21379] bridge0: port 1(syz_tun) entered blocking state [ 560.018540][T21379] bridge0: port 1(syz_tun) entered disabled state [ 560.052782][T21379] syz_tun: entered promiscuous mode [ 560.534918][T21408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4186'. [ 560.597745][T21405] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4186'. [ 560.638784][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4186'. [ 560.767176][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4187'. [ 560.808921][T21411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4187'. [ 561.409787][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 561.434842][T21452] netlink: 'syz.0.4200': attribute type 10 has an invalid length. [ 561.449596][T21449] ip_tables: iptables: counters copy to user failed while replacing table [ 561.466146][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 561.482153][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4201'. [ 562.101122][T21479] bond0: (slave bond_slave_1): Releasing backup interface [ 562.670040][T21514] syzkaller0: entered promiscuous mode [ 562.700708][T21514] syzkaller0: entered allmulticast mode [ 562.757552][T21502] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 562.904057][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.186162][T21530] tipc: Started in network mode [ 563.198738][T21527] xt_hashlimit: size too large, truncated to 1048576 [ 563.209980][T21530] tipc: Node identity ac141441, cluster identity 4711 [ 563.249985][T21530] tipc: Enabled bearer , priority 10 [ 563.556806][T21550] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 564.017914][T21564] netlink: 'syz.4.4236': attribute type 1 has an invalid length. [ 564.919983][T15408] tipc: Node number set to 2886997057 [ 565.592680][T21618] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.486871][T21641] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 566.625234][T21641] veth3: entered promiscuous mode [ 566.667422][T21652] __nla_validate_parse: 5 callbacks suppressed [ 566.667439][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4258'. [ 567.358242][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4264'. [ 567.528399][T21678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4267'. [ 568.038694][T21693] netlink: 'syz.1.4272': attribute type 1 has an invalid length. [ 568.063250][T21693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4272'. [ 569.181952][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 569.321144][T21720] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 569.412820][T21725] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4280'. [ 569.929208][T21747] netlink: 'syz.1.4287': attribute type 30 has an invalid length. [ 570.125246][T21747] bond5: option arp_missed_max: invalid value (0) [ 570.149935][T21747] bond5: option arp_missed_max: allowed values 1 - 255 [ 570.224037][T21747] bond5 (unregistering): Released all slaves [ 570.473026][T21762] x_tables: duplicate underflow at hook 1 [ 571.185978][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 571.296587][T21783] bond4: Unable to set down delay as MII monitoring is disabled [ 571.333147][T21783] bond4 (unregistering): Released all slaves [ 571.577710][T21794] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4301'. [ 571.627642][T21798] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 572.058062][T21816] IPVS: ip_vs_add_dest(): server weight less than zero [ 572.074911][T21816] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 572.087971][T21817] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 572.188596][T21823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4309'. [ 572.220985][T21824] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 572.239367][T21824] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 573.314941][T21871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4320'. [ 573.366692][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4320'. [ 573.521328][T21876] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 573.539422][T21876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4322'. [ 573.872276][T21889] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 573.937388][T21889] bond5 (unregistering): Released all slaves [ 574.100990][T21894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.182404][T21892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.275234][T21904] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4330'. [ 574.556957][T21919] netlink: 193 bytes leftover after parsing attributes in process `syz.1.4334'. [ 574.568431][T21919] netlink: 'syz.1.4334': attribute type 3 has an invalid length. [ 574.582013][T21919] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 574.871332][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 574.897840][T21929] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.158349][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4340'. [ 575.245780][T21943] Unsupported ieee802154 address type: 0 [ 575.344003][T21944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.360945][T21950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4343'. [ 575.516155][T21957] openvswitch: netlink: Flow key attribute not present in set flow. [ 575.526352][T21957] netlink: 'syz.2.4346': attribute type 12 has an invalid length. [ 575.540699][T21957] netlink: 'syz.2.4346': attribute type 29 has an invalid length. [ 575.551941][T21957] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4346'. [ 599.323351][T21970] __nla_validate_parse: 1 callbacks suppressed [ 599.323371][T21970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4347'. [ 599.471318][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.498482][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.513723][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.526446][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.544150][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.673209][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 600.692660][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.709419][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.723303][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.818358][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.827565][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.197979][T22012] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 601.229658][T22012] bond4 (unregistering): Released all slaves [ 601.573524][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4363'. [ 601.704892][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4362'. [ 602.025262][T21977] wg1 speed is unknown, defaulting to 1000 [ 602.608737][T22064] netlink: 'syz.2.4370': attribute type 3 has an invalid length. [ 602.659472][T22066] syzkaller1: entered promiscuous mode [ 602.672794][T22064] netlink: 'syz.2.4370': attribute type 1 has an invalid length. [ 602.680283][T22066] syzkaller1: entered allmulticast mode [ 602.740696][T22063] netlink: 'syz.2.4370': attribute type 1 has an invalid length. [ 602.767768][T22063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4370'. [ 602.891439][ T50] Bluetooth: hci3: command tx timeout [ 604.122634][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 604.372520][T21977] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.413606][T21977] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.468188][T21977] bridge_slave_0: entered allmulticast mode [ 604.529077][T21977] bridge_slave_0: entered promiscuous mode [ 604.688425][T21977] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.727989][T21977] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.765500][T21977] bridge_slave_1: entered allmulticast mode [ 604.786507][T21977] bridge_slave_1: entered promiscuous mode [ 604.915331][T21977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.968845][T21977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.982140][ T50] Bluetooth: hci3: command tx timeout [ 604.987272][T22138] Cannot find add_set index 0 as target [ 605.142236][T22155] netlink: 'syz.0.4393': attribute type 8 has an invalid length. [ 605.197253][T22147] pim6reg: entered allmulticast mode [ 605.483434][T22162] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 605.497434][T21977] team0: Port device team_slave_0 added [ 605.528149][T21977] team0: Port device team_slave_1 added [ 605.589701][T22164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'. [ 605.698664][T21977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.726402][T21977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.803243][T21977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.826629][T21977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.841220][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'. [ 605.847639][T21977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.927082][T21977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.987921][T22179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.995251][T22179] IPv6: NLM_F_CREATE should be set when creating new route [ 606.072505][T22180] geneve2: entered promiscuous mode [ 606.165038][T21977] hsr_slave_0: entered promiscuous mode [ 606.193990][T21977] hsr_slave_1: entered promiscuous mode [ 606.385159][T22193] tunl0: entered promiscuous mode [ 606.446614][T22193] netlink: 'syz.2.4406': attribute type 3 has an invalid length. [ 606.476813][T22193] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4406'. [ 606.564323][T22199] netlink: 'syz.0.4408': attribute type 2 has an invalid length. [ 606.949847][T22215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'. [ 607.050748][ T50] Bluetooth: hci3: command tx timeout [ 607.573429][T21977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.654378][T21977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.677541][T21977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.714234][T21977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.738491][T21977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.778958][T21977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.937674][T21977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.999088][T21977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.625459][T21977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.743597][T21977] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.804114][T22288] lo: entered promiscuous mode [ 608.819158][T22289] x_tables: duplicate entry at hook 3 [ 608.868502][T22288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.916816][T20804] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.924089][T20804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.995382][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.002674][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.131438][ T50] Bluetooth: hci3: command tx timeout [ 609.236601][T22298] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 609.250816][T22298] bond5 (unregistering): Released all slaves [ 609.373197][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4435'. [ 609.563115][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 609.819767][T22332] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4444'. [ 609.862642][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4444'. [ 609.906134][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4444'. [ 610.174559][T22342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4446'. [ 610.287772][T22351] netlink: zone id is out of range [ 610.319176][T22351] netlink: del zone limit has 8 unknown bytes [ 610.472383][T21977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.668087][T22360] batman_adv: batadv0: Adding interface: veth0 [ 610.694468][T22360] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.732066][T22360] batman_adv: batadv0: Interface activated: veth0 [ 611.056318][T22380] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4455'. [ 611.464747][T21977] veth0_vlan: entered promiscuous mode [ 611.552478][T21977] veth1_vlan: entered promiscuous mode [ 611.573569][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 611.687522][T21977] veth0_macvtap: entered promiscuous mode [ 611.755796][T21977] veth1_macvtap: entered promiscuous mode [ 611.988555][T21977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.017325][T22417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4465'. [ 612.031736][T21977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.076376][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.235679][T22419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4466'. [ 612.291070][ T473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.302943][T22423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4466'. [ 612.348476][ T473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.373525][T22428] IPVS: dh: FWM 3 0x00000003 - no destination available [ 612.390981][T20804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.621199][ T473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.664666][ T473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.866281][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.878274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.288635][T22463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 613.345899][T22463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4351'. [ 613.366144][T22466] netlink: 'syz.3.4479': attribute type 7 has an invalid length. [ 613.393533][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'. [ 613.393955][T22469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4481'. [ 613.442406][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 613.476370][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4481'. [ 613.525447][T22469] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 613.618499][T22469] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.649117][T22469] gretap1: entered promiscuous mode [ 613.669556][T22469] gretap1: entered allmulticast mode [ 613.983627][T22466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.167852][T22485] IPv6: NLM_F_CREATE should be specified when creating new route [ 614.477988][T22466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.884703][T22505] netlink: 'syz.5.4490': attribute type 26 has an invalid length. [ 614.913262][T22466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.965915][T22505] netlink: 'syz.5.4490': attribute type 26 has an invalid length. [ 615.498740][T22466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.984168][T22540] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 616.076529][T20803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.350803][T20804] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.397578][T20804] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.410786][T22554] __nla_validate_parse: 5 callbacks suppressed [ 616.410806][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 616.449734][T20804] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.562931][T22555] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4501'. [ 616.815541][T22561] netlink: 'syz.3.4503': attribute type 2 has an invalid length. [ 616.925836][T22558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4502'. [ 617.173802][T22570] tipc: Enabling of bearer rejected, failed to enable media [ 617.337388][T22573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4505'. [ 617.451979][T22573] bond0: entered promiscuous mode [ 617.480051][T22573] bond_slave_0: entered promiscuous mode [ 617.501576][T22573] bond_slave_1: entered promiscuous mode [ 617.524388][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4509'. [ 617.546839][T22573] bond0: left promiscuous mode [ 617.564687][T22573] bond_slave_0: left promiscuous mode [ 617.582784][T22573] bond_slave_1: left promiscuous mode [ 618.023013][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'. [ 618.043160][T22601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4513'. [ 618.057061][T22596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4511'. [ 618.071497][T22596] openvswitch: netlink: IPv4 frag type 145 is out of range max 2 [ 618.117465][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4513'. [ 618.151147][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4513'. [ 618.488216][T22621] Bluetooth: MGMT ver 1.23 [ 619.415288][T22652] netlink: 'syz.5.4527': attribute type 64 has an invalid length. [ 619.688653][T22668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.716789][T22668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.734091][T22671] netlink: 'syz.1.4531': attribute type 32 has an invalid length. [ 619.771624][T22668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.168584][T22572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.976441][T22701] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 620.998112][T22705] netlink: 'syz.3.4541': attribute type 1 has an invalid length. [ 621.025686][T22705] netlink: 'syz.3.4541': attribute type 3 has an invalid length. [ 621.522809][T22725] netlink: 'syz.5.4547': attribute type 2 has an invalid length. [ 621.895238][T22740] __nla_validate_parse: 6 callbacks suppressed [ 621.895259][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4551'. [ 621.895527][T22744] netlink: 'syz.2.4552': attribute type 1 has an invalid length. [ 621.941555][T22740] veth0_macvtap: left promiscuous mode [ 621.956238][T22744] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4552'. [ 622.251668][T22758] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 622.541367][T22777] netlink: 'syz.3.4560': attribute type 18 has an invalid length. [ 622.601258][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4560'. [ 622.701571][ T473] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.742007][ T473] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.832856][ T9713] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.856623][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4565'. [ 622.880192][T22791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.883534][T22795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4566'. [ 623.093190][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4570'. [ 623.111188][T22806] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4569'. [ 623.141141][ T9713] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.173957][T22806] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4569'. [ 623.518417][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4573'. [ 623.545268][T22831] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 623.681026][ T473] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.726901][T22825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4573'. [ 623.790848][T20805] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.842081][T20805] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.547940][T22870] netlink: zone id is out of range [ 624.554800][T22870] netlink: zone id is out of range [ 624.582005][T22870] netlink: zone id is out of range [ 624.595948][T22870] netlink: zone id is out of range [ 624.616907][T22870] netlink: zone id is out of range [ 624.643662][T22870] netlink: zone id is out of range [ 624.675141][T22870] netlink: zone id is out of range [ 624.690518][T22870] netlink: zone id is out of range [ 624.707612][T22870] netlink: zone id is out of range [ 624.735576][T22873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.571771][T22915] x_tables: duplicate underflow at hook 1 [ 625.764919][T22920] ip6erspan0: entered allmulticast mode [ 627.023384][T22966] bond1: option fail_over_mac: invalid value (16) [ 627.057164][T22966] bond1 (unregistering): Released all slaves [ 628.179648][T22993] syzkaller0: entered promiscuous mode [ 628.200277][T22993] syzkaller0: entered allmulticast mode [ 628.247674][T22997] __nla_validate_parse: 6 callbacks suppressed [ 628.247691][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4628'. [ 629.673199][T22955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.714380][T22988] netlink: 'syz.3.4625': attribute type 2 has an invalid length. [ 629.734759][T22988] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4625'. [ 629.971479][T23029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4637'. [ 629.997549][ T29] audit: type=1804 audit(1786477682.314:6): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4636" name="/newroot/366/cgroup.controllers" dev="tmpfs" ino=1889 res=1 errno=0 [ 630.080557][ T29] audit: type=1800 audit(1786477682.314:7): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4636" name="cgroup.controllers" dev="tmpfs" ino=1889 res=0 errno=0 [ 630.110535][T23036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4637'. [ 630.786989][T23062] netlink: 'syz.1.4644': attribute type 2 has an invalid length. [ 631.192034][T23080] x_tables: duplicate underflow at hook 4 [ 631.239407][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4652'. [ 631.280612][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4652'. [ 631.308976][T23090] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 631.776994][T23106] net_ratelimit: 497 callbacks suppressed [ 631.777011][T23106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.306848][T23130] syzkaller1: entered promiscuous mode [ 632.329926][T23130] syzkaller1: entered allmulticast mode [ 632.555888][T23099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.584217][T23099] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 633.073203][T23159] openvswitch: netlink: Message has 8 unknown bytes. [ 633.092321][T23160] netlink: 'syz.0.4667': attribute type 21 has an invalid length. [ 633.845191][T23190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4675'. [ 633.893660][T23190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4675'. [ 633.955714][T23192] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4674'. [ 634.286790][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 634.478979][T23207] geneve3: entered promiscuous mode [ 634.511004][T14584] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41216 - 0 [ 634.533471][T14584] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41216 - 0 [ 634.562227][T14584] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41216 - 0 [ 634.632127][T23220] bond0: Error: CAN devices cannot be enslaved [ 634.673345][T14584] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41216 - 0 [ 634.799337][T23223] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 634.834472][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'. [ 635.338468][T23244] netlink: 'syz.0.4690': attribute type 12 has an invalid length. [ 635.392112][T23244] netlink: 'syz.0.4690': attribute type 29 has an invalid length. [ 635.447857][T23244] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4690'. [ 635.518373][T23244] netlink: 'syz.0.4690': attribute type 3 has an invalid length. [ 635.570148][T23244] netlink: 'syz.0.4690': attribute type 2 has an invalid length. [ 635.610612][T23244] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4690'. [ 635.908152][T23259] wg1 speed is unknown, defaulting to 1000 [ 635.918949][T23266] syzkaller0: entered promiscuous mode [ 635.951381][T23266] syzkaller0: entered allmulticast mode [ 635.967969][T23271] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4696'. [ 636.313066][T23287] sctp: [Deprecated]: syz.3.4701 (pid 23287) Use of int in max_burst socket option. [ 636.313066][T23287] Use struct sctp_assoc_value instead [ 636.678719][T23294] IPVS: Scheduler module ip_vs_sip not found [ 636.691291][T23302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.854432][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4706'. [ 636.976961][T23313] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4708'. [ 637.029048][T23312] x_tables: unsorted underflow at hook 3 [ 637.523814][T23330] openvswitch: netlink: Flow actions attr not present in new flow. [ 637.552137][T23338] syz_tun: refused to change device tx_queue_len [ 637.660249][T23343] sctp: [Deprecated]: syz.5.4715 (pid 23343) Use of int in maxseg socket option. [ 637.660249][T23343] Use struct sctp_assoc_value instead [ 637.893083][T23352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.657188][T23373] netlink: 'syz.5.4722': attribute type 2 has an invalid length. [ 638.916794][T23373] : entered promiscuous mode [ 639.571032][T23421] __nla_validate_parse: 4 callbacks suppressed [ 639.571052][T23421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4732'. [ 639.922343][T23421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4732'. [ 640.223651][T23439] netlink: 'syz.5.4736': attribute type 1 has an invalid length. [ 640.335274][T23439] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 640.345067][T23443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.360656][T23443] IPv6: NLM_F_CREATE should be set when creating new route [ 640.367920][T23443] IPv6: NLM_F_CREATE should be set when creating new route [ 640.375229][T23443] IPv6: NLM_F_CREATE should be set when creating new route [ 640.567666][T23451] ip6tnl2: entered allmulticast mode [ 640.666914][T23455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4742'. [ 641.006838][T23465] bridge4: entered promiscuous mode [ 641.453430][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a05000: rx timeout, send abort [ 641.953487][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a04c00: rx timeout, send abort [ 641.962382][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a05000: abort rx timeout. Force session deactivation [ 642.461813][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a04c00: abort rx timeout. Force session deactivation [ 642.636288][T23541] IPv6: sit1: Disabled Multicast RS [ 642.829191][T20805] bond0: (slave bond_slave_0): interface is now down [ 642.844979][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 642.863110][T23554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.871548][T20805] bond0: (slave bond_slave_1): interface is now down [ 642.912006][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4770'. [ 642.916238][T20805] bond0: (slave batadv0): interface is now down [ 642.944395][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 642.991612][T23562] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4767'. [ 643.036181][T20805] bond0: now running without any active interface! [ 643.054756][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 643.071363][T23562] netlink: 'syz.1.4767': attribute type 9 has an invalid length. [ 643.598290][T23590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.884574][T23595] netlink: 'syz.2.4781': attribute type 21 has an invalid length. [ 643.947179][T23595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4781'. [ 644.024175][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'. [ 644.716849][T23621] tunl0: entered promiscuous mode [ 644.824082][T23621] netlink: 'syz.1.4789': attribute type 4 has an invalid length. [ 644.840677][T23621] __nla_validate_parse: 2 callbacks suppressed [ 644.840696][T23621] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4789'. [ 645.046031][T23597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4782'. [ 645.207493][T23645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4794'. [ 645.274340][T23645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4794'. [ 645.588260][T23653] netlink: 'syz.2.4797': attribute type 4 has an invalid length. [ 645.681695][T23656] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 645.725618][T23656] bond1 (unregistering): Released all slaves [ 645.786437][T23668] sock: sock_timestamping_bind_phc: sock not bind to device [ 645.833161][T23668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4800'. [ 645.876857][T23668] netlink: 'syz.1.4800': attribute type 1 has an invalid length. [ 646.532557][T23692] ip_tables: iptables: counters copy to user failed while replacing table [ 646.607689][T23696] xt_hashlimit: size too large, truncated to 1048576 [ 646.872974][T23705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4812'. [ 647.578659][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 647.590821][T23736] geneve3: entered promiscuous mode [ 647.675860][T23735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 647.688379][T23735] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 647.699004][T23735] gretap1: entered promiscuous mode [ 647.708251][T23735] gretap1: entered allmulticast mode [ 647.717545][T23740] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 647.948037][T23749] netlink: 'syz.0.4828': attribute type 12 has an invalid length. [ 647.973760][T23757] netlink: 'syz.3.4830': attribute type 8 has an invalid length. [ 647.983045][T23749] netlink: 'syz.0.4828': attribute type 29 has an invalid length. [ 648.007076][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4830'. [ 648.028961][T23749] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4828'. [ 648.053623][T23749] netlink: 'syz.0.4828': attribute type 3 has an invalid length. [ 648.074525][T23749] netlink: 'syz.0.4828': attribute type 2 has an invalid length. [ 648.085286][T23749] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4828'. [ 648.137123][T23763] syzkaller0: mtu less than device minimum [ 648.647448][T23787] SET target dimension over the limit! [ 648.676367][T23787] sctp: [Deprecated]: syz.0.4840 (pid 23787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.676367][T23787] Use struct sctp_sack_info instead [ 648.786055][T23791] lo: left promiscuous mode [ 649.648293][T23791] veth1_macvtap: entered promiscuous mode [ 649.674452][T23791] veth1_macvtap: entered allmulticast mode [ 649.773847][T23791] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 650.075776][T23820] __nla_validate_parse: 2 callbacks suppressed [ 650.075795][T23820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4848'. [ 650.197436][T23816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.211281][T23816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.242340][T23816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41216 - 0 [ 650.566070][T23816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.613240][T23816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.701004][T23816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41216 - 0 [ 650.925201][T23816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.941014][T23850] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 650.962538][T23816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.980344][T23816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41216 - 0 [ 651.118604][T23845] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 651.275578][T23816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.301064][T23816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.336834][T23816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41216 - 0 [ 651.427125][T23862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4858'. [ 651.882320][T20804] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.907072][T20804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 41216 - 0 [ 651.927927][T20804] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.041683][T20804] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.094705][T20804] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 41216 - 0 [ 652.125009][T20804] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.160679][T23897] netlink: 'syz.1.4867': attribute type 10 has an invalid length. [ 652.181798][T23899] ip_tables: iptables: counters copy to user failed while replacing table [ 652.198922][T23897] 0·: left allmulticast mode [ 652.208994][T23897] hsr_slave_0: left allmulticast mode [ 652.227900][T23897] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 652.271469][T20804] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.295943][T20804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 41216 - 0 [ 652.316900][T20804] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.448669][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4868'. [ 652.460641][T20803] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.476398][T23908] netlink: 'syz.3.4871': attribute type 1 has an invalid length. [ 652.479574][T20803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 41216 - 0 [ 652.487683][T23902] netlink: 'syz.5.4868': attribute type 7 has an invalid length. [ 652.507835][T20803] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.512783][T23908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4871'. [ 652.541835][T23902] netlink: 'syz.5.4868': attribute type 8 has an invalid length. [ 652.580543][T23899] syzkaller0: entered promiscuous mode [ 652.580919][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4868'. [ 652.651385][T23899] syzkaller0: entered allmulticast mode [ 652.824343][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4875'. [ 653.138760][T23931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4878'. [ 653.448002][T23949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4885'. [ 653.490744][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4882'. [ 653.751581][T23957] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 654.019921][T23974] netlink: 'syz.1.4892': attribute type 2 has an invalid length. [ 654.022471][T23971] syzkaller0: entered promiscuous mode [ 654.035107][T23974] netlink: 'syz.1.4892': attribute type 2 has an invalid length. [ 654.048365][T23971] syzkaller0: entered allmulticast mode [ 654.056192][T23974] netlink: 'syz.1.4892': attribute type 2 has an invalid length. [ 654.069378][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4894'. [ 654.122474][T23977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.157965][T23978] mac80211_hwsim hwsim42 ÿ: renamed from wlan1 [ 655.266854][T24004] __nla_validate_parse: 2 callbacks suppressed [ 655.266895][T24004] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4899'. [ 655.629381][T24020] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4904'. [ 655.726294][T24022] veth1_to_bond: entered allmulticast mode [ 655.735847][T24024] netlink: 'syz.3.4906': attribute type 9 has an invalid length. [ 655.751637][T24027] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4907'. [ 655.770098][T24022] veth1_to_bond: entered promiscuous mode [ 655.798054][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4906'. [ 655.811306][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4905'. [ 655.884933][T24022] veth1_to_bond (unregistering): left allmulticast mode [ 655.937250][T24022] veth1_to_bond (unregistering): left promiscuous mode [ 655.976235][T24022] bond0: (slave bond_slave_1): Releasing backup interface [ 656.017324][T24039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4910'. [ 656.488318][T24051] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4913'. [ 656.534859][T24051] netlink: 'syz.3.4913': attribute type 1 has an invalid length. [ 656.731716][T24051] bond6: entered promiscuous mode [ 656.776106][T24051] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.806801][T24053] macvtap1: entered allmulticast mode [ 656.843450][T24055] macvtap2: entered allmulticast mode [ 656.877350][T24058] bond6: (slave bridge5): making interface the new active one [ 656.901738][T24058] bridge5: entered promiscuous mode [ 656.929834][T24058] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 657.314386][T24072] Cannot find del_set index 0 as target [ 657.358201][T24074] xt_ecn: cannot match TCP bits for non-tcp packets [ 657.484984][T24077] netlink: 'syz.3.4920': attribute type 15 has an invalid length. [ 657.545498][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4920'. [ 657.594641][T24077] netlink: 'syz.3.4920': attribute type 15 has an invalid length. [ 657.638664][T24082] No such timeout policy "s" [ 657.649179][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4920'. [ 657.674857][T24082] netlink: Failed to associated timeout policy 's' [ 658.133125][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 658.500911][T24114] openvswitch: netlink: Flow key attr not present in new flow. [ 658.604520][T24115] team0: Device gtp0 is of different type [ 658.945390][T24130] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 659.073593][T24140] veth1: entered allmulticast mode [ 659.937920][ T29] audit: type=1804 audit(1786477712.254:8): pid=24178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4950" name="/newroot/317/cgroup.controllers" dev="tmpfs" ino=1635 res=1 errno=0 [ 660.005476][ T29] audit: type=1800 audit(1786477712.284:9): pid=24178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4950" name="cgroup.controllers" dev="tmpfs" ino=1635 res=0 errno=0 [ 660.170541][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 660.479063][T24201] h: entered promiscuous mode [ 660.504579][T24205] netlink: 'syz.2.4958': attribute type 3 has an invalid length. [ 660.582239][T24205] Cannot find add_set index 2 as target [ 661.187335][T24235] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.287639][T24235] bridge_slave_1 (unregistering): left allmulticast mode [ 661.303389][T24235] bridge_slave_1 (unregistering): left promiscuous mode [ 661.343697][T24235] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.822148][T24255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.938531][T24255] __nla_validate_parse: 10 callbacks suppressed [ 661.938551][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4970'. [ 662.024330][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4970'. [ 663.261978][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4980'. [ 663.306372][T24286] netlink: 552 bytes leftover after parsing attributes in process `syz.2.4980'. [ 663.352422][T24286] tun0: tun_chr_ioctl cmd 1074025675 [ 663.367404][T24286] tun0: persist disabled [ 664.039318][T24304] netlink: 'syz.2.4984': attribute type 11 has an invalid length. [ 664.077229][T24304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4984'. [ 664.164145][T24305] netlink: 'syz.2.4984': attribute type 11 has an invalid length. [ 664.184922][T24305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4984'. [ 664.578152][T24316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4986'. [ 664.877390][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4989'. [ 665.081673][T24332] tipc: Started in network mode [ 665.103319][T24332] tipc: Node identity ac141441, cluster identity 4711 [ 665.138517][T24339] netlink: 'syz.2.4992': attribute type 1 has an invalid length. [ 665.170503][T24332] tipc: Enabled bearer , priority 10 [ 665.179590][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4992'. [ 665.483121][T24346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4995'. [ 666.074542][T24364] xt_cluster: node mask cannot exceed total number of nodes [ 666.294369][T22254] tipc: Node number set to 2886997057 [ 666.350647][T24379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 666.638112][T24399] netlink: 'syz.0.5011': attribute type 12 has an invalid length. [ 666.738880][T24399] bond2: option primary_reselect: invalid value (255) [ 666.805108][T24399] bond2 (unregistering): Released all slaves [ 667.248672][T24422] netlink: 'syz.2.5016': attribute type 1 has an invalid length. [ 667.678350][T24443] netlink: 'syz.2.5021': attribute type 29 has an invalid length. [ 667.960513][T24457] __nla_validate_parse: 5 callbacks suppressed [ 667.960532][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5026'. [ 668.206536][T24471] openvswitch: netlink: IP tunnel dst address not specified [ 668.218928][T24472] openvswitch: netlink: IP tunnel dst address not specified [ 668.235672][T24472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.235771][T24471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.456335][T24483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.679234][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5034'. [ 669.246677][T24520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5044'. [ 669.357206][T24524] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 669.978331][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'. [ 670.225469][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 670.269158][T24561] netlink: 'syz.0.5056': attribute type 8 has an invalid length. [ 670.315109][T24566] netlink: ct_mark mask cannot be 0 [ 670.360995][T24566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.552151][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5059'. [ 670.587853][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5058'. [ 670.739569][T24579] ip6gre1: entered allmulticast mode [ 670.757578][T24581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5059'. [ 670.789160][T24573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5059'. [ 671.391282][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.410699][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.422781][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.437770][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.452953][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.459781][T24607] netlink: 'syz.0.5069': attribute type 10 has an invalid length. [ 671.508969][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.519843][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.528064][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.545958][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.548904][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5068'. [ 671.569612][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.661811][T24607] team0: No ports can be present during mode change [ 672.142178][T24630] openvswitch: netlink: Multiple metadata blocks provided [ 672.243155][T24630] syzkaller0: entered promiscuous mode [ 672.279751][T24630] syzkaller0: entered allmulticast mode [ 672.653646][T24652] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 673.508801][T24608] wg1 speed is unknown, defaulting to 1000 [ 673.616091][ T5618] Bluetooth: hci6: command tx timeout [ 673.734206][T24685] ip6t_srh: unknown srh match flags 5F28 [ 674.082339][T24700] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.317157][T24700] bridge_slave_1 (unregistering): left allmulticast mode [ 674.400571][T24700] bridge_slave_1 (unregistering): left promiscuous mode [ 674.437082][T24700] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.618607][T24717] __nla_validate_parse: 2 callbacks suppressed [ 674.618626][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5096'. [ 674.829775][T24723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5097'. [ 674.860467][T24722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5097'. [ 675.205857][T24740] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5100'. [ 675.690529][ T5618] Bluetooth: hci6: command tx timeout [ 675.969052][T24769] veth1_to_bond: entered allmulticast mode [ 676.174711][T24777] netlink: 'syz.3.5110': attribute type 1 has an invalid length. [ 676.244678][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.293920][T24608] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.348614][T24608] bridge_slave_0: entered allmulticast mode [ 676.372495][T24786] x_tables: duplicate underflow at hook 2 [ 676.396385][T24608] bridge_slave_0: entered promiscuous mode [ 676.565764][T24785] macvtap3: entered allmulticast mode [ 676.646488][T24789] macvtap4: entered allmulticast mode [ 676.689040][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.707566][T24608] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.723832][T24608] bridge_slave_1: entered allmulticast mode [ 676.742847][T24608] bridge_slave_1: entered promiscuous mode [ 676.762590][T24768] veth1_to_bond: left allmulticast mode [ 676.917834][T24608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.964414][T24608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.142530][T24608] team0: Port device team_slave_0 added [ 677.182422][T24608] team0: Port device team_slave_1 added [ 677.198752][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5120'. [ 677.355668][T24608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.386491][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.471843][T24608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.544918][T24608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.577828][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.644803][T24608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.771392][ T5618] Bluetooth: hci6: command tx timeout [ 677.938569][T24854] netlink: 'syz.5.5129': attribute type 21 has an invalid length. [ 677.983022][T24854] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5129'. [ 678.043411][T24860] netlink: 'syz.5.5129': attribute type 21 has an invalid length. [ 678.083922][T24861] netlink: 'syz.5.5129': attribute type 21 has an invalid length. [ 678.129094][T24861] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5129'. [ 678.172201][T24860] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5129'. [ 678.263075][T24854] netlink: 'syz.5.5129': attribute type 4 has an invalid length. [ 678.281852][T24854] netlink: 'syz.5.5129': attribute type 5 has an invalid length. [ 678.308171][T24854] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5129'. [ 678.334837][T24608] hsr_slave_0: entered promiscuous mode [ 678.342269][T24608] hsr_slave_1: entered promiscuous mode [ 678.348859][T24608] debugfs: 'hsr0' already exists in 'hsr' [ 678.355739][T24608] Cannot create hsr debugfs directory [ 678.361759][T24861] netlink: 'syz.5.5129': attribute type 4 has an invalid length. [ 678.370760][T24861] netlink: 'syz.5.5129': attribute type 5 has an invalid length. [ 678.379274][T24861] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5129'. [ 678.402533][T24860] netlink: 'syz.5.5129': attribute type 4 has an invalid length. [ 678.422986][T24860] netlink: 'syz.5.5129': attribute type 5 has an invalid length. [ 678.438686][T24869] batadv0: entered promiscuous mode [ 679.854116][ T5618] Bluetooth: hci6: command tx timeout [ 682.181268][T24868] batadv0: left promiscuous mode [ 682.188303][T24881] veth1_to_bond: entered allmulticast mode [ 682.195304][T24882] veth1_to_bond: left allmulticast mode [ 682.411406][T24893] __nla_validate_parse: 1 callbacks suppressed [ 682.411424][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5135'. [ 682.469292][T24894] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5138'. [ 682.501664][T24894] netlink: 844 bytes leftover after parsing attributes in process `syz.3.5138'. [ 682.504177][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5135'. [ 682.607237][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5135'. [ 682.721905][T24905] netlink: 'syz.0.5139': attribute type 11 has an invalid length. [ 682.873430][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5141'. [ 683.253247][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'. [ 683.295251][T24930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'. [ 683.305117][T24929] netlink: 'syz.0.5146': attribute type 1 has an invalid length. [ 683.435698][T24934] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5147'. [ 683.450599][T24934] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5147'. [ 683.638025][T24608] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.706768][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.732851][T24608] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.781656][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.845710][T24608] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.902531][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.939556][T24608] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.966079][T24608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.371856][T24608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.523326][T24608] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.552396][T24975] netlink: 'syz.2.5155': attribute type 10 has an invalid length. [ 684.692548][T24975] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 684.783797][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.791068][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.917864][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.925142][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.229313][T24997] netlink: 'syz.2.5160': attribute type 1 has an invalid length. [ 685.413749][T25006] netlink: 'syz.0.5163': attribute type 5 has an invalid length. [ 685.573307][T25014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.464252][T25036] ip_tables: iptables: counters copy to user failed while replacing table [ 686.749364][T24608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.644694][T25086] __nla_validate_parse: 7 callbacks suppressed [ 687.644714][T25086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5179'. [ 687.881730][T25095] Cannot find add_set index 0 as target [ 687.973538][T25098] xt_policy: output policy not valid in PREROUTING and INPUT [ 688.087627][T24608] veth0_vlan: entered promiscuous mode [ 688.147007][T24608] veth1_vlan: entered promiscuous mode [ 688.284097][T25107] netlink: Setting conntrack mark requires 'commit' flag. [ 688.301681][T24608] veth0_macvtap: entered promiscuous mode [ 688.312553][T25107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.339570][T24608] veth1_macvtap: entered promiscuous mode [ 688.426007][T24608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.493562][T24608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.582485][T20802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.632764][T25115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5188'. [ 688.656500][T20805] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.700942][T20805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.739594][T20805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.914209][T20797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.957441][T20797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.019215][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.028576][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.199005][T25132] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5193'. [ 689.237904][T25136] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5193'. [ 690.218637][T25169] netlink: 'syz.2.5204': attribute type 11 has an invalid length. [ 690.290552][T25169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5204'. [ 690.622130][T25180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 690.640492][T25180] syzkaller1: linktype set to 823 [ 690.674879][T25180] netlink: 'syz.5.5207': attribute type 1 has an invalid length. [ 690.714838][T25191] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5210'. [ 690.734001][T25191] set match dimension is over the limit! [ 690.825517][T25206] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5207'. [ 690.839287][T25180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 690.919074][T25209] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5213'. [ 691.145966][T25187] bond1: (slave veth3): Enslaving as an active interface with a down link [ 691.188425][T25195] syzkaller1: entered promiscuous mode [ 691.210212][T25195] syzkaller1: entered allmulticast mode [ 691.286076][T25217] bond1: (slave veth5): Enslaving as an active interface with a down link [ 691.715272][T25229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5217'. [ 692.223641][T25242] netlink: 400 bytes leftover after parsing attributes in process `syz.2.5222'. [ 692.271325][T17190] hid-generic 0005:0C45:0008.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 692.543635][T25254] ip_tables: iptables: counters copy to user failed while replacing table [ 692.804956][T25262] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 692.850485][T25262] __nla_validate_parse: 1 callbacks suppressed [ 692.850503][T25262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5230'. [ 692.914439][T25268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5231'. [ 692.956796][T25275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 693.034652][T25270] syzkaller0: entered promiscuous mode [ 693.059568][T25270] syzkaller0: entered allmulticast mode [ 693.146686][T25283] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5235'. [ 693.234819][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 693.310770][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5237'. [ 693.429370][T25293] vlan2: entered promiscuous mode [ 693.445157][T25293] bridge0: entered promiscuous mode [ 693.482197][T25304] netlink: 284 bytes leftover after parsing attributes in process `syz.6.5239'. [ 693.716904][T25313] xt_hashlimit: size too large, truncated to 1048576 [ 693.805455][T25320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5246'. [ 694.295778][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5248'. [ 694.564781][T25343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5250'. [ 695.094449][T25369] x_tables: duplicate underflow at hook 2 [ 695.549077][T25385] netlink: 'syz.2.5262': attribute type 14 has an invalid length. [ 695.675178][T25385] netlink: 'syz.2.5262': attribute type 14 has an invalid length. [ 695.919628][T25393] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 696.003829][T25393] bond5 (unregistering): Released all slaves [ 696.278117][T25415] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 696.697835][T25430] vlan2: entered allmulticast mode [ 696.716773][T25430] bridge3: entered allmulticast mode [ 697.049450][T25445] netlink: 'syz.3.5281': attribute type 49 has an invalid length. [ 697.455186][T25470] wg1: Master is either lo or non-ether device [ 697.778707][T25480] x_tables: duplicate underflow at hook 2 [ 698.032618][T25491] __nla_validate_parse: 10 callbacks suppressed [ 698.032639][T25491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5290'. [ 698.186485][T25495] netlink: 'syz.3.5293': attribute type 75 has an invalid length. [ 698.267387][T14169] nci: nci_rsp_packet: unknown rsp opcode 0x303 [ 698.360784][T25505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5294'. [ 698.744799][T25516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5297'. [ 698.962622][T25496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.983717][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5299'. [ 699.474567][T25531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5300'. [ 699.919769][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'. [ 700.163469][T25567] netlink: 'syz.6.5310': attribute type 1 has an invalid length. [ 700.199154][T25567] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5310'. [ 700.244667][T25567] netlink: 'syz.6.5310': attribute type 1 has an invalid length. [ 700.262130][T25560] bond2 (unregistering): Released all slaves [ 700.586675][T25567] netlink: 'syz.6.5310': attribute type 16 has an invalid length. [ 700.625188][T25579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5312'. [ 700.630984][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5314'. [ 700.915660][T25599] 8021q: VLANs not supported on ip6_vti0 [ 701.262261][T25611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5320'. [ 701.565476][T25620] gre1: entered promiscuous mode [ 701.600719][T25620] gre1: entered allmulticast mode [ 702.647861][T25660] netlink: 'syz.3.5332': attribute type 7 has an invalid length. [ 704.345706][T25618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.699768][T25670] __nla_validate_parse: 3 callbacks suppressed [ 704.699790][T25670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5335'. [ 704.749701][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 704.779988][T25682] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5338'. [ 704.798484][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5335'. [ 704.965754][T25685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5340'. [ 705.004973][T25685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5340'. [ 705.016721][T25690] IPv6: addrconf: prefix option has invalid lifetime [ 705.092583][T25690] netlink: 'syz.0.5342': attribute type 2 has an invalid length. [ 705.831165][T25719] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5348'. [ 706.228385][T25726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5350'. [ 706.352504][T25730] bond1: option lp_interval: invalid value (0) [ 706.387476][T25730] bond1: option lp_interval: allowed values 1 - 2147483647 [ 706.429578][T25730] bond1 (unregistering): Released all slaves [ 706.516627][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5354'. [ 706.538946][T25737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5354'. [ 706.559263][T25733] tipc: MTU too low for tipc bearer [ 706.801721][T25744] netlink: 'syz.3.5358': attribute type 1 has an invalid length. [ 706.826712][T25750] macvlan0: entered promiscuous mode [ 706.918862][T25744] 8021q: adding VLAN 0 to HW filter on device bond9 [ 706.956552][T25751] bond9: (slave veth0_to_bond): making interface the new active one [ 706.969086][T25751] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 707.013709][T25744] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.024637][T25744] bond9: (slave bond10): Enslaving as an active interface with a down link [ 707.335343][T25772] netlink: 'syz.6.5367': attribute type 12 has an invalid length. [ 707.434512][T25777] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 708.115789][T25808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.123114][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 708.514604][T25820] netlink: 'syz.5.5384': attribute type 1 has an invalid length. [ 708.629335][T25820] bond2: entered promiscuous mode [ 708.635615][T25820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.239635][T25839] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 709.260247][T25839] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 709.383359][T25844] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 709.437851][T25844] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 709.759030][T25848] erspan0: entered allmulticast mode [ 710.106914][T25871] netlink: 'syz.2.5396': attribute type 2 has an invalid length. [ 710.554832][T25886] syzkaller1: entered promiscuous mode [ 710.564951][T25886] syzkaller1: entered allmulticast mode [ 713.248767][T25883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.568726][T25907] __nla_validate_parse: 8 callbacks suppressed [ 713.568746][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 714.739622][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5420'. [ 714.767465][T25957] xt_TCPMSS: Only works on TCP SYN packets [ 714.804585][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5421'. [ 714.826736][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5420'. [ 714.898938][T25958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5420'. [ 715.463939][T25994] netlink: 'syz.2.5432': attribute type 1 has an invalid length. [ 715.760759][T25994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 716.225973][T26023] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 716.306836][T26031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5441'. [ 716.334532][T26031] netlink: 'syz.2.5441': attribute type 1 has an invalid length. [ 716.355500][T26032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5442'. [ 716.379519][T26032] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5442'. [ 716.409142][T26031] netlink: 'syz.2.5441': attribute type 2 has an invalid length. [ 716.424328][T26032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5442'. [ 716.436365][T26031] netlink: 'syz.2.5441': attribute type 1 has an invalid length. [ 716.445545][T26031] netlink: 'syz.2.5441': attribute type 2 has an invalid length. [ 716.454586][T26031] netlink: 'syz.2.5441': attribute type 2 has an invalid length. [ 717.564992][T26086] netlink: 'syz.3.5459': attribute type 1 has an invalid length. [ 717.858961][T26094] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5462'. [ 718.136477][T26110] netlink: 'syz.0.5467': attribute type 1 has an invalid length. [ 718.182447][T26108] netlink: 'syz.0.5467': attribute type 1 has an invalid length. [ 718.267121][T26110] : renamed from bond_slave_1 (while UP) [ 718.682841][T26108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.794947][T26108] bond0: (slave bond2): Enslaving as an active interface with a down link [ 718.898308][T26129] wg1 speed is unknown, defaulting to 1000 [ 719.168215][T26148] IPv6: NLM_F_CREATE should be specified when creating new route [ 719.203728][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 719.852192][T20805] bond0: (slave bond2): link status definitely up [ 719.885674][T20805] bond0: active interface up! [ 719.896818][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5479'. [ 719.974340][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 720.165761][T26184] Cannot find set identified by id 0 to match [ 720.479017][T26190] netlink: 'syz.2.5485': attribute type 21 has an invalid length. [ 720.618230][T26203] nftables ruleset with unbound set [ 720.769512][T26212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5489'. [ 720.924959][T26190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5485'. [ 721.255636][T26223] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5490'. [ 721.327579][T26229] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5492'. [ 721.641233][T26237] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5495'. [ 721.682443][T26237] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5495'. [ 721.717636][T26237] netlink: 'syz.5.5495': attribute type 5 has an invalid length. [ 721.745695][T26237] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5495'. [ 724.976562][ T9713] bond0: (slave bond2): interface is now down [ 725.834361][T26244] tipc: Started in network mode [ 725.839322][T26244] tipc: Node identity 0ed7192f963c, cluster identity 4711 [ 725.854229][T26244] tipc: Enabled bearer , priority 11 [ 726.132058][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5499'. [ 726.521495][T26265] syzkaller0: entered promiscuous mode [ 726.559456][T26265] syzkaller0: entered allmulticast mode [ 726.899822][T26282] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 726.972589][ T5720] tipc: Node number set to 2565544239 [ 727.532044][ T473] bond0: (slave bond2): interface is now down [ 727.584996][ T473] bond0: now running without any active interface! [ 728.142633][T26322] netlink: 'syz.0.5515': attribute type 21 has an invalid length. [ 728.158791][T26322] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5515'. [ 728.178483][T26322] netlink: 'syz.0.5515': attribute type 5 has an invalid length. [ 728.200092][T26322] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5515'. [ 729.576637][T26268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.602071][T26273] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5504'. [ 730.151222][T26371] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5517'. [ 730.222502][T26379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5518'. [ 730.274309][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'. [ 730.518193][T26387] netlink: 'syz.3.5523': attribute type 10 has an invalid length. [ 730.851817][T26400] netlink: 'syz.5.5526': attribute type 1 has an invalid length. [ 730.909315][T26400] nbd: error processing sock list [ 730.989773][T26400] netlink: 'syz.5.5526': attribute type 2 has an invalid length. [ 731.012389][T26407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.037213][T26399] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 731.327692][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5532'. [ 731.372356][T26421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5531'. [ 731.599167][T26422] bond3: option xmit_hash_policy: invalid value (64) [ 731.706466][T26422] bond3 (unregistering): Released all slaves [ 732.062596][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5535'. [ 732.358718][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5538'. [ 732.975268][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5546'. [ 733.026342][T26487] netlink: 'syz.5.5548': attribute type 1 has an invalid length. [ 733.076999][T26494] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5546'. [ 733.709800][T26521] openvswitch: netlink: Actions may not be safe on all matching packets [ 734.220994][T26539] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5559'. [ 734.656465][T26558] Cannot find del_set index 4 as target [ 734.925124][T26572] netlink: 'syz.2.5568': attribute type 1 has an invalid length. [ 735.191612][T26566] netlink: 'syz.6.5562': attribute type 12 has an invalid length. [ 735.224953][T26566] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5562'. [ 735.263229][T26578] IPv6: sit1: Disabled Multicast RS [ 735.499735][T26591] ip6gre2: entered allmulticast mode [ 735.569489][T15408] IPVS: starting estimator thread 0... [ 735.593954][T26600] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 735.693783][T26601] IPVS: using max 32 ests per chain, 76800 per kthread [ 736.139534][T26623] netlink: 'syz.6.5580': attribute type 3 has an invalid length. [ 736.154818][T26623] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 738.096455][T26581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.474732][T26642] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 738.494564][T26640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 738.515925][T26640] bond0: (slave bond7): Enslaving as an active interface with an up link [ 738.688698][T26648] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5588'. [ 738.826594][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5589'. [ 739.661773][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5601'. [ 739.743462][T26692] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5601'. [ 739.817391][T26692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5601'. [ 739.866456][T26702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5605'. [ 739.934006][T26695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5601'. [ 739.973046][T26701] netlink: 'syz.5.5604': attribute type 2 has an invalid length. [ 740.010118][T26701] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5604'. [ 740.176365][T26696] wg1 speed is unknown, defaulting to 1000 [ 740.415033][T26710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5607'. [ 740.813007][T26718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5609'. [ 740.831604][T26721] atomic_op ffff8880544ea198 conn xmit_atomic 0000000000000000 [ 741.689049][T26743] Bluetooth: MGMT ver 1.23 [ 741.940011][T26747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.049137][T26747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.131077][T26747] bond0 (unregistering): Released all slaves [ 742.709613][T20798] pim6reg527: left allmulticast mode [ 742.746299][T20798] lo: left allmulticast mode [ 743.337579][T20798] batman_adv: batadv0: Removing interface: gretap1 [ 743.572583][T20798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.595618][T20798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.609831][T20798] bond0 (unregistering): Released all slaves [ 743.629797][T20798] bond1 (unregistering): Released all slaves [ 743.654637][T20798] bond2 (unregistering): Released all slaves [ 743.683582][T20798] bond3 (unregistering): Released all slaves [ 743.706776][T20798] bond4 (unregistering): Released all slaves [ 743.729396][T20798] bond5 (unregistering): Released all slaves [ 743.957732][ T92] bond9: (slave veth0_to_bond): link status definitely down, disabling slave [ 744.044680][ T92] bond9: now running without any active interface! [ 744.071635][T20798] tipc: Disabling bearer [ 744.100998][T20798] tipc: Left network mode [ 744.132783][T26778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5628'. [ 744.381693][T20798] IPVS: stopping master sync thread 12259 ... [ 744.518973][T26792] netlink: 'syz.6.5631': attribute type 10 has an invalid length. [ 744.533024][T26793] netlink: 'syz.6.5631': attribute type 10 has an invalid length. [ 745.087733][T26792] team0: Port device dummy0 added [ 745.337207][T26793] team0: Port device dummy0 removed [ 745.732933][ T29] audit: type=1804 audit(1786477798.044:10): pid=26823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5639" name="/newroot/229/cgroup.controllers" dev="tmpfs" ino=1192 res=1 errno=0 [ 745.874970][ T29] audit: type=1800 audit(1786477798.044:11): pid=26823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5639" name="cgroup.controllers" dev="tmpfs" ino=1192 res=0 errno=0 [ 745.929092][T26828] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5643'. [ 746.074093][T26832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.426532][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5647'. [ 746.541955][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5647'. [ 746.768551][T26859] syzkaller0: entered promiscuous mode [ 746.781279][T26859] syzkaller0: entered allmulticast mode [ 746.912318][T26863] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5651'. [ 747.148629][T26829] netlink: 'syz.2.5642': attribute type 4 has an invalid length. [ 747.166938][T26829] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5642'. [ 747.205270][T26879] netlink: 'syz.3.5654': attribute type 4 has an invalid length. [ 747.602577][T26882] netlink: 'syz.0.5656': attribute type 1 has an invalid length. [ 747.706554][T26882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5656'. [ 747.805393][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5656'. [ 748.118717][T26896] netlink: 'syz.5.5660': attribute type 49 has an invalid length. [ 748.203100][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 748.233340][T26897] netlink: 'syz.5.5660': attribute type 2 has an invalid length. [ 748.294961][T26897] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5660'. [ 748.312852][T26896] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 748.345115][T26896] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 748.394295][T20798] hsr_slave_0: left promiscuous mode [ 748.424849][T20798] hsr_slave_1: left promiscuous mode [ 748.449620][T20798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.479355][T20798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.504759][T20798] batman_adv: batadv0: Removing interface: veth0 [ 748.521136][T26914] netlink: 'syz.2.5665': attribute type 1 has an invalid length. [ 748.554427][T20798] veth1_macvtap: left promiscuous mode [ 748.574761][T26919] netlink: 'syz.3.5666': attribute type 21 has an invalid length. [ 748.597352][T20798] veth0_macvtap: left promiscuous mode [ 748.620725][T20798] veth1_vlan: left promiscuous mode [ 748.627641][T20798] veth0_vlan: left promiscuous mode [ 749.694115][T26914] bond8: entered promiscuous mode [ 749.702859][T26914] 8021q: adding VLAN 0 to HW filter on device bond8 [ 749.718659][T26919] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 749.757329][T26924] bond8: (slave bridge5): making interface the new active one [ 749.828385][T26924] bridge5: entered promiscuous mode [ 749.856294][T26924] bridge5: left promiscuous mode [ 749.879260][T26929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.730839][T26958] netlink: 'syz.3.5675': attribute type 1 has an invalid length. [ 750.873962][T26958] __nla_validate_parse: 2 callbacks suppressed [ 750.873982][T26958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5675'. [ 751.017252][T26966] netlink: 'syz.5.5678': attribute type 2 has an invalid length. [ 751.418814][T26978] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5680'. [ 751.436826][T26981] veth0_to_bond: entered allmulticast mode [ 751.457206][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'. [ 751.625116][T20798] IPVS: stop unused estimator thread 0... [ 751.727386][T26992] vlan3: entered allmulticast mode [ 751.863216][T26996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5687'. [ 752.177717][T27010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5689'. [ 752.243295][T27014] netlink: 'syz.2.5690': attribute type 12 has an invalid length. [ 752.276122][T27014] netlink: 'syz.2.5690': attribute type 29 has an invalid length. [ 752.300282][T27014] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5690'. [ 752.374767][T27014] netlink: 'syz.2.5690': attribute type 2 has an invalid length. [ 752.583037][T27031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 752.624440][T27022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5691'. [ 752.652337][T27022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5691'. [ 752.671721][T27035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5693'. [ 752.812330][T27031] netlink: 'syz.3.5692': attribute type 1 has an invalid length. [ 752.844359][T27031] netlink: 'syz.3.5692': attribute type 2 has an invalid length. [ 753.038584][T27045] tls_set_device_offload_rx: netdev not found [ 753.075464][T27046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 753.133146][T27046] batman_adv: batadv0: Adding interface: gretap2 [ 753.166800][T27046] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.229061][T27046] batman_adv: batadv0: Interface activated: gretap2 [ 753.782611][T27060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.267402][T27085] macvtap0: entered promiscuous mode [ 754.273603][T27085] vlan0: entered promiscuous mode [ 754.287492][T27085] macvtap0: entered allmulticast mode [ 754.295376][T27085] vlan0: entered allmulticast mode [ 754.306989][T27085] veth0_vlan: entered allmulticast mode [ 755.072949][ T92] nci: nci_rx_work: unknown MT 0x1 [ 755.761958][T27156] netlink: 'syz.6.5725': attribute type 1 has an invalid length. [ 757.797792][T27122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.268635][T27171] __nla_validate_parse: 7 callbacks suppressed [ 758.268654][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5730'. [ 758.328977][T27174] netlink: 'syz.2.5731': attribute type 2 has an invalid length. [ 758.508254][T27174] : entered promiscuous mode [ 758.745082][T27195] netlink: 'syz.5.5734': attribute type 10 has an invalid length. [ 758.826927][T27195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.842724][T27202] sctp: [Deprecated]: syz.0.5738 (pid 27202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.842724][T27202] Use struct sctp_sack_info instead [ 758.919092][T27195] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 759.086017][T27208] netlink: 'syz.2.5741': attribute type 21 has an invalid length. [ 759.126747][T27208] netlink: 'syz.2.5741': attribute type 1 has an invalid length. [ 759.607932][T27223] netlink: 'syz.6.5748': attribute type 4 has an invalid length. [ 759.815708][T27229] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5749'. [ 760.138399][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'. [ 760.537716][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'. [ 761.064963][T27279] netlink: 'syz.6.5762': attribute type 1 has an invalid length. [ 761.278797][T27284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5762'. [ 761.301629][T27279] bond2: entered promiscuous mode [ 761.331589][T27279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.416961][T27293] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 761.636267][T27297] netlink: 'syz.2.5766': attribute type 21 has an invalid length. [ 761.735645][T27297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5766'. [ 762.043082][T27308] netlink: 'syz.5.5770': attribute type 4 has an invalid length. [ 762.069413][T27308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5770'. [ 763.045889][T27339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5779'. [ 763.343136][T27349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5782'. [ 763.421310][T27349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5782'. [ 763.546350][T27354] xt_bpf: check failed: parse error [ 763.626146][T27354] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5783'. [ 763.727374][T27363] ip_tables: iptables: counters copy to user failed while replacing table [ 764.148188][T27369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.198302][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 764.282756][T27375] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5786'. [ 764.406079][T27378] lo speed is unknown, defaulting to 1000 [ 764.452546][T27378] lo speed is unknown, defaulting to 1000 [ 764.484443][T27378] lo speed is unknown, defaulting to 1000 [ 764.554063][T27378] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 764.604724][T27388] syz_tun: entered allmulticast mode [ 764.623654][T27378] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 764.644483][T27385] syz_tun: left allmulticast mode [ 764.677978][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5791'. [ 764.718721][T27378] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 764.759464][T27387] nbd: nbd2 already in use [ 764.809313][T27393] netlink: 'syz.3.5794': attribute type 2 has an invalid length. [ 764.846997][T27378] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 764.878720][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5794'. [ 764.895318][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 764.942104][T27391] block nbd2: NBD_DISCONNECT [ 764.976934][T27391] block nbd2: Send disconnect failed -32 [ 765.037116][T27391] block nbd2: Send disconnect failed -32 [ 765.076014][T27378] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 765.114444][T27391] block nbd2: shutting down sockets [ 765.219380][T27400] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5796'. [ 765.300736][T27400] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5796'. [ 765.356162][ T9713] bridge_slave_1: left allmulticast mode [ 765.389645][ T9713] bridge_slave_1: left promiscuous mode [ 765.402448][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.426509][ T9713] bridge_slave_0: left allmulticast mode [ 765.434462][ T9713] bridge_slave_0: left promiscuous mode [ 765.448156][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.583336][ T9713] dvmrp0: left allmulticast mode [ 766.245121][ T9713] bond5 (unregistering): (slave geneve3): Releasing active interface [ 766.263408][ T9713] bond1 (unregistering): (slave geneve2): Releasing active interface [ 766.436902][ T9713] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 766.446225][ T9713] bridge8 (unregistering): left promiscuous mode [ 766.467163][ T9713] bridge8 (unregistering): left allmulticast mode [ 766.552216][ T9713] bond10 (unregistering): (slave bridge13): Releasing backup interface [ 766.566080][ T9713] bridge13 (unregistering): left promiscuous mode [ 766.594924][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.609462][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.626531][ T9713] bond0 (unregistering): Released all slaves [ 766.648674][ T9713] bond1 (unregistering): Released all slaves [ 766.671705][ T9713] bond2 (unregistering): Released all slaves [ 766.694193][ T9713] bond3 (unregistering): Released all slaves [ 766.716604][ T9713] bond4 (unregistering): Released all slaves [ 766.766232][ T9713] bond5 (unregistering): Released all slaves [ 766.802892][ T9713] bond6 (unregistering): (slave veth5): Releasing backup interface [ 766.818987][ T9713] bond6 (unregistering): Released all slaves [ 766.852038][ T9713] bond7 (unregistering): Released all slaves [ 766.875929][ T9713] bond8 (unregistering): (slave veth7): Releasing backup interface [ 766.887967][ T9713] bond8 (unregistering): Released all slaves [ 766.926795][ T9713] bond9 (unregistering): Released all slaves [ 766.949028][ T9713] bond10 (unregistering): Released all slaves [ 766.996215][T27378] lo speed is unknown, defaulting to 1000 [ 767.194624][T27378] lo speed is unknown, defaulting to 1000 [ 767.265171][T27378] lo speed is unknown, defaulting to 1000 [ 767.307550][T27378] lo speed is unknown, defaulting to 1000 [ 767.348804][T27378] lo speed is unknown, defaulting to 1000 [ 767.387684][T27378] lo speed is unknown, defaulting to 1000 [ 767.448234][T27378] lo speed is unknown, defaulting to 1000 [ 767.476800][T27423] tipc: Enabling of bearer rejected, failed to enable media [ 767.560858][T27378] lo speed is unknown, defaulting to 1000 [ 767.606136][T27378] lo speed is unknown, defaulting to 1000 [ 767.619702][ T9713] tipc: Disabling bearer [ 767.636053][ T9713] tipc: Left network mode [ 767.661100][T27378] lo speed is unknown, defaulting to 1000 [ 767.729540][T27378] lo speed is unknown, defaulting to 1000 [ 768.135614][T27444] netlink: 'syz.5.5808': attribute type 10 has an invalid length. [ 768.197833][T27443] bond0: entered allmulticast mode [ 768.308922][T27431] bridge11: entered promiscuous mode [ 768.356742][T27431] bridge11: entered allmulticast mode [ 768.388817][T27431] bond0: (slave bridge11): Enslaving as an active interface with an up link [ 768.507670][T27427] bridge12: entered promiscuous mode [ 768.556203][T27427] bridge12: entered allmulticast mode [ 768.566175][T27427] bond0: (slave bridge12): Enslaving as an active interface with an up link [ 769.284183][T27494] xt_hashlimit: size too large, truncated to 1048576 [ 769.609846][T27509] __nla_validate_parse: 3 callbacks suppressed [ 769.657801][T27509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5822'. [ 770.098056][T27525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5828'. [ 770.245041][ T9713] hsr_slave_0: left promiscuous mode [ 770.314423][ T9713] hsr_slave_1: left promiscuous mode [ 770.329440][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.350096][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.429679][ T9713] veth1_vlan: left promiscuous mode [ 771.917277][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 771.946444][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 772.238031][T27580] syzkaller0: entered allmulticast mode [ 772.426750][T27591] sctp: [Deprecated]: syz.2.5838 (pid 27591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.426750][T27591] Use struct sctp_sack_info instead [ 772.450649][T27587] syzkaller0: left promiscuous mode [ 772.463584][T27587] syzkaller0: left allmulticast mode [ 772.482420][T27591] netlink: 'syz.2.5838': attribute type 13 has an invalid length. [ 772.557272][T27591] gretap0: refused to change device tx_queue_len [ 772.594172][T27591] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 773.143600][T27529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.203971][T27573] netlink: 'syz.6.5836': attribute type 11 has an invalid length. [ 773.597582][T27596] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.5838'. [ 773.637838][ T9713] IPVS: stop unused estimator thread 0... [ 773.680777][T27596] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5838'. [ 774.215031][T27655] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5849'. [ 774.238897][T27653] xt_l2tp: invalid flags combination: 8 [ 774.269245][T27653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5847'. [ 774.333686][T27653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5847'. [ 774.785337][T27682] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 774.948343][T27686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 775.557933][T27703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5854'. [ 775.919198][T27712] bond3: invalid ARP target 0.0.0.0 specified for addition [ 775.941568][T27712] bond3: option arp_ip_target: invalid value (0) [ 775.955682][T27712] bond3 (unregistering): Released all slaves [ 776.262950][T27712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.019264][T27641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.202963][T27791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.233294][T27795] netlink: 'syz.5.5872': attribute type 4 has an invalid length. [ 778.269011][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5871'. [ 778.525488][T27804] rdma_op ffff88807def61f0 conn xmit_rdma 0000000000000000 [ 778.627635][T27808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5875'. [ 778.661243][T27789] syzkaller1: entered promiscuous mode [ 778.667729][T27789] syzkaller1: entered allmulticast mode [ 778.757597][T27812] xt_l2tp: missing protocol rule (udp|l2tpip) [ 779.131847][T27820] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 779.158245][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5877'. [ 779.178762][T27820] block nbd0: NBD_DISCONNECT [ 779.184713][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5877'. [ 779.194968][T27820] block nbd0: Send disconnect failed -32 [ 779.204284][T27820] block nbd0: shutting down sockets [ 779.456901][T27833] SET target dimension over the limit! [ 779.600340][T27840] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.652915][T27840] bridge_slave_0 (unregistering): left allmulticast mode [ 779.687496][T27840] bridge_slave_0 (unregistering): left promiscuous mode [ 779.709214][T27840] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.877989][T27851] veth1_to_bond: entered allmulticast mode [ 779.913658][T27851] sctp: [Deprecated]: syz.0.5887 (pid 27851) Use of int in max_burst socket option. [ 779.913658][T27851] Use struct sctp_assoc_value instead [ 779.996137][T27856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 780.193611][T27849] veth1_to_bond: left allmulticast mode [ 780.764183][T27892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5897'. [ 780.793645][T27892] netlink: 'syz.0.5897': attribute type 23 has an invalid length. [ 780.807425][T27896] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5898'. [ 780.835029][T27896] openvswitch: netlink: Flow key attr not present in new flow. [ 780.848736][T27896] netlink: 'syz.5.5898': attribute type 2 has an invalid length. [ 780.893478][T27896] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5898'. [ 780.954712][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 781.097858][T27904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.704348][T27934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5911'. [ 781.997241][T27950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.277589][T27962] netlink: 'syz.2.5920': attribute type 1 has an invalid length. [ 782.302733][T27960] netlink: 'syz.2.5920': attribute type 1 has an invalid length. [ 782.364916][T27962] 8021q: adding VLAN 0 to HW filter on device bond9 [ 782.529292][T27968] bond9: (slave gretap2): making interface the new active one [ 782.587585][T27968] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 782.715197][T27976] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 782.819147][T27979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5927'. [ 782.887509][T27985] netlink: 'syz.2.5928': attribute type 1 has an invalid length. [ 782.925837][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'. [ 783.063730][T27992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5930'. [ 783.393364][T27999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.796701][T28018] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 784.011899][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5939'. [ 784.218627][T28031] C: renamed from lo [ 784.228850][T28031] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 784.443187][T28040] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5942'. [ 785.276393][T28075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.307855][T28075] bond0: (slave bond3): Enslaving as an active interface with an up link [ 785.495351][T28092] netlink: 'syz.0.5958': attribute type 2 has an invalid length. [ 785.752451][T28097] syzkaller1: entered promiscuous mode [ 785.768330][T28097] syzkaller1: entered allmulticast mode [ 785.953075][T28101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.207523][T28105] ip6gre0: Master is either lo or non-ether device [ 787.247516][T28146] __nla_validate_parse: 6 callbacks suppressed [ 787.248787][T28146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5978'. [ 787.471190][T28149] vlan5: entered promiscuous mode [ 787.502545][T28149] geneve1: entered promiscuous mode [ 787.546710][T28149] vlan5: entered allmulticast mode [ 787.572748][T28149] geneve1: entered allmulticast mode [ 787.842695][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5981'. [ 788.541702][T28185] netlink: 'syz.2.5990': attribute type 5 has an invalid length. [ 788.675831][T28160] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 788.698986][T28160] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 789.034109][T28202] netlink: 'syz.5.5998': attribute type 2 has an invalid length. [ 789.071986][T28205] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 789.071986][T28205] Please contact the netfilter-devel mailing list or update your nftables rules. [ 789.182994][T28209] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 789.232197][T28209] bond4 (unregistering): Released all slaves [ 789.335606][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6005'. [ 789.356149][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6002'. [ 789.368775][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6005'. [ 789.451832][T28223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.462380][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6005'. [ 789.519369][T28223] tipc: Started in network mode [ 789.529985][T28223] tipc: Node identity ac14140f, cluster identity 4711 [ 789.554950][T28223] tipc: New replicast peer: 255.255.255.255 [ 789.570605][T28223] tipc: Enabled bearer , priority 10 [ 789.693553][T28228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.829587][T28228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.894837][T28233] erspan0: entered promiscuous mode [ 789.974670][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6007'. [ 790.215361][T28246] sch_fq: defrate 0 ignored. [ 790.251373][T28248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6011'. [ 790.476941][T28251] netlink: 'syz.5.6012': attribute type 1 has an invalid length. [ 790.508417][T28253] Cannot find del_set index 4 as target [ 790.634607][T28251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 790.690569][T15403] tipc: Node number set to 2886997007 [ 790.794439][T28256] bond4: (slave veth7): Enslaving as an active interface with a down link [ 790.830966][T28262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6013'. [ 790.848939][T28258] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 790.865742][T28258] bond4: (slave batadv1): making interface the new active one [ 790.923670][T28258] batadv1: entered promiscuous mode [ 790.938726][T28258] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 791.051721][T28251] bond4: (slave veth9): Enslaving as an active interface with a down link [ 791.082828][T28261] syzkaller0: entered promiscuous mode [ 791.099073][T28261] syzkaller0: entered allmulticast mode [ 791.246564][T28273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6017'. [ 791.464161][T28291] netlink: 'syz.0.6020': attribute type 33 has an invalid length. [ 791.591945][T28291] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 791.625480][T28291] bond4 (unregistering): Released all slaves [ 792.789605][T28338] wg1 speed is unknown, defaulting to 1000 [ 792.998243][T28347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.604847][T28338] lo speed is unknown, defaulting to 1000 [ 793.650874][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 793.666735][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 793.678672][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 793.701559][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 793.723486][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 793.819155][ T5618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 793.834139][ T5618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 793.846011][ T5618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 793.857404][T28368] __nla_validate_parse: 3 callbacks suppressed [ 793.857420][T28368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 793.883106][ T5618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 793.901025][ T5618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 793.922119][T28370] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6047'. [ 794.017138][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6047'. [ 794.382763][T28379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6049'. [ 794.688484][T28390] netlink: 'syz.0.6052': attribute type 4 has an invalid length. [ 794.715627][T28390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6052'. [ 794.792206][T28390] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 795.223391][T28403] syzkaller0: entered promiscuous mode [ 795.250237][T28403] syzkaller0: entered allmulticast mode [ 795.393954][T28362] wg1 speed is unknown, defaulting to 1000 [ 795.494191][T28411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6057'. [ 796.011699][T28371] Bluetooth: hci7: command tx timeout [ 796.228888][T28362] lo speed is unknown, defaulting to 1000 [ 796.576522][T28417] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 796.583607][T28417] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 797.146602][T28455] netlink: 'syz.5.6071': attribute type 2 has an invalid length. [ 797.182587][T28462] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 797.466626][T28473] netlink: 'syz.2.6074': attribute type 17 has an invalid length. [ 797.500137][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6074'. [ 797.522631][T28473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6074'. [ 797.628539][T28474] syzkaller0: entered promiscuous mode [ 797.661579][T28474] syzkaller0: entered allmulticast mode [ 798.088462][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6078'. [ 798.441342][T28362] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.448639][T28362] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.456308][T28362] bridge_slave_0: entered allmulticast mode [ 798.464671][T28362] bridge_slave_0: entered promiscuous mode [ 798.474692][T28362] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.482973][T28362] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.491068][T28362] bridge_slave_1: entered allmulticast mode [ 798.499139][T28362] bridge_slave_1: entered promiscuous mode [ 798.796051][T28362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.899766][T28362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.957718][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6085'. [ 799.139094][T28362] team0: Port device team_slave_0 added [ 799.167133][T28362] team0: Port device team_slave_1 added [ 799.176396][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6089'. [ 799.199538][T28525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6089'. [ 799.248464][T28525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6089'. [ 799.274126][T28362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.293250][T28362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.349499][T28362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.382223][T28362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.399396][T28362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.488755][T28362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.568607][ T29] audit: type=1800 audit(1786477851.884:12): pid=28536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6091" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2959 res=0 errno=0 [ 799.738226][T28362] hsr_slave_0: entered promiscuous mode [ 799.756524][T28362] hsr_slave_1: entered promiscuous mode [ 799.779448][T28362] debugfs: 'hsr0' already exists in 'hsr' [ 799.803142][T28362] Cannot create hsr debugfs directory [ 800.011992][T28543] syzkaller0: entered promiscuous mode [ 800.019095][T28543] syzkaller0: entered allmulticast mode [ 800.028827][T28533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.137240][T28553] openvswitch: netlink: Unknown key attributes 20 [ 800.158097][T28553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6096'. [ 800.442934][T28560] netlink: 400 bytes leftover after parsing attributes in process `syz.3.6099'. [ 800.506710][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6099'. [ 800.813902][T28569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6100'. [ 801.034664][T28576] netlink: 'syz.2.6103': attribute type 10 has an invalid length. [ 801.085797][T28579] netlink: 'syz.2.6103': attribute type 10 has an invalid length. [ 801.150102][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6103'. [ 801.191056][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6103'. [ 801.306468][T28576] team0: Port device dummy0 added [ 801.334713][T28579] team0: Port device dummy0 removed [ 801.564573][T28586] bond11: entered allmulticast mode [ 801.607925][T28586] 8021q: adding VLAN 0 to HW filter on device bond11 [ 801.654290][T28362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 801.687370][T28362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.715028][T28362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 801.755556][T28362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.806505][T28362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 801.846999][T28362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.909854][T28362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 801.962035][T28362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.984645][T28592] syzkaller0: entered promiscuous mode [ 801.999776][T28592] syzkaller0: entered allmulticast mode [ 802.501207][T28626] sctp: [Deprecated]: syz.3.6113 (pid 28626) Use of int in maxseg socket option. [ 802.501207][T28626] Use struct sctp_assoc_value instead [ 802.759184][T28362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.875909][T28630] sctp: [Deprecated]: syz.0.6114 (pid 28630) Use of int in max_burst socket option. [ 802.875909][T28630] Use struct sctp_assoc_value instead [ 802.906453][ T92] batadv1: left promiscuous mode [ 802.985783][T28362] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.029140][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.036409][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.109342][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.116609][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.262739][T28651] hsr_slave_0: left promiscuous mode [ 803.284339][T28651] hsr_slave_1: left promiscuous mode [ 803.560950][T28659] openvswitch: netlink: Missing valid actions attribute. [ 803.594389][T28659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.113176][T28669] Unsupported xt match [ 804.113196][T28669] unable to load match [ 805.282463][T28716] tipc: Enabling of bearer rejected, already enabled [ 805.412917][T28362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.649253][T28732] __nla_validate_parse: 3 callbacks suppressed [ 805.649271][T28732] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6138'. [ 805.674013][T28726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6135'. [ 805.713245][T28732] nbd: illegal input index -8454144 [ 805.828806][T28732] netlink: 'syz.2.6138': attribute type 3 has an invalid length. [ 805.941766][T28732] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 805.968823][T28732] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 806.626066][T28753] netlink: 'syz.2.6143': attribute type 11 has an invalid length. [ 806.647350][T28753] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6143'. [ 806.817517][T28362] veth0_vlan: entered promiscuous mode [ 806.886253][T28362] veth1_vlan: entered promiscuous mode [ 806.977476][T28759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6145'. [ 807.178233][T28362] veth0_macvtap: entered promiscuous mode [ 807.203530][T28765] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 807.246009][T28362] veth1_macvtap: entered promiscuous mode [ 807.380711][T28362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.488427][T28362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.567105][T28778] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6149'. [ 807.620789][T20803] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.666110][T20803] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.707433][T28782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6151'. [ 807.741035][T20803] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.001022][ T473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.148439][T28788] openvswitch: netlink: Message has 8 unknown bytes. [ 808.404772][T28791] syzkaller1: entered promiscuous mode [ 808.445170][T28791] syzkaller1: entered allmulticast mode [ 808.498213][T28803] xt_CT: No such helper "pptp" [ 808.504151][T28794] siw: device registration error -23 [ 808.552501][ T473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.612117][ T473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.885756][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.889194][T28807] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 808.898536][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.058683][T28807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6159'. [ 809.789627][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6167'. [ 809.847074][ T5742] hsr0: entered promiscuous mode [ 809.856518][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6169'. [ 809.900697][T28830] netlink: 'syz.7.6169': attribute type 3 has an invalid length. [ 809.927618][T19737] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 809.935764][ T30] INFO: task syz.1.4910:24038 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.950474][T19737] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 809.955629][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6169'. [ 809.973843][T19737] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 809.991348][ T30] Not tainted syzkaller #0 [ 809.999664][T19737] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 810.011089][T19737] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 810.022832][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.113580][ T30] task:syz.1.4910 state:D stack:26448 pid:24038 tgid:24037 ppid:16701 task_flags:0x400140 flags:0x00080002 [ 810.180508][T28839] block nbd0: Unsupported socket: should be TCP or UNIX. [ 810.231032][ T30] Call Trace: [ 810.273195][ T30] [ 810.293173][ T30] __schedule+0x17d9/0x56c0 [ 810.328033][ T30] ? __lock_acquire+0x683/0x2cf0 [ 810.381014][ T30] ? __pfx___schedule+0x10/0x10 [ 810.408481][ T30] ? schedule+0x90/0x2b0 [ 810.430602][ T30] schedule+0x164/0x2b0 [ 810.440953][ T30] schedule_preempt_disabled+0x13/0x30 [ 810.451783][ T30] __mutex_lock+0x7bf/0x1550 [ 810.465052][ T30] ? __mutex_lock+0x5d4/0x1550 [ 810.471977][ T30] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 810.478770][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 810.485019][ T30] ? net_generic+0x1e/0x240 [ 810.489709][ T30] ? net_generic+0x1e/0x240 [ 810.496921][ T30] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 810.506196][ T30] ? __kmalloc_noprof+0x375/0x720 [ 810.513043][ T30] ? __asan_memset+0x22/0x50 [ 810.517718][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 810.524370][ T30] ? do_syscall_64+0x174/0x580 [ 810.529220][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.538790][ T30] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 810.547536][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 810.553791][ T30] ? rcu_is_watching+0x15/0xb0 [ 810.558700][ T30] ? trace_kmalloc+0x2a/0xf0 [ 810.564610][ T30] ? __kmalloc_noprof+0x396/0x720 [ 810.569746][ T30] ? __nla_parse+0x40/0x60 [ 810.581456][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 810.588045][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 810.595554][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 810.602184][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.608378][ T30] ? bpf_lsm_capable+0x9/0x20 [ 810.616615][ T30] ? security_capable+0x7e/0x2c0 [ 810.623716][ T30] genl_rcv_msg+0x614/0x7a0 [ 810.628319][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.634345][ T30] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 810.645116][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 810.654422][ T30] netlink_rcv_skb+0x226/0x4a0 [ 810.659288][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.665518][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.671768][ T30] ? down_read+0x2be/0x330 [ 810.676280][ T30] genl_rcv+0x28/0x40 [ 810.684188][ T30] netlink_unicast+0x7bb/0x940 [ 810.689145][ T30] netlink_sendmsg+0x813/0xb40 [ 810.696090][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.702594][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.707656][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.714010][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 810.719125][ T30] ____sys_sendmsg+0x54e/0x850 [ 810.726503][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.737948][ T30] ? import_iovec+0x73/0xa0 [ 810.745094][ T30] ___sys_sendmsg+0x2a5/0x360 [ 810.753370][ T30] ? __lock_acquire+0x683/0x2cf0 [ 810.758415][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.765838][ T30] ? futex_wake+0x51b/0x5f0 [ 810.771446][ T30] ? __fget_files+0x2a/0x420 [ 810.776152][ T30] ? __fget_files+0x3a2/0x420 [ 810.782274][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 810.787313][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.796374][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.805076][ T30] do_syscall_64+0x174/0x580 [ 810.809755][ T30] ? trace_irq_disable+0x3b/0x140 [ 810.816029][ T30] ? clear_bhb_loop+0x70/0xc0 [ 810.821932][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.827937][ T30] RIP: 0033:0x7fb417b9e0d9 [ 810.833455][ T30] RSP: 002b:00007fb418ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.842458][ T30] RAX: ffffffffffffffda RBX: 00007fb417e25fa0 RCX: 00007fb417b9e0d9 [ 810.851448][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 810.859541][ T30] RBP: 00007fb417c35024 R08: 0000000000000000 R09: 0000000000000000 [ 810.868794][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.877749][ T30] R13: 00007fb417e26038 R14: 00007fb417e25fa0 R15: 00007ffed9287aa8 [ 810.886816][ T30] [ 810.963284][ T30] [ 810.963284][ T30] Showing all locks held in the system: [ 810.990664][ T30] 1 lock held by pool_workqueue_/3: [ 811.016733][ T30] 1 lock held by khungtaskd/30: [ 811.033698][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 811.100021][ T30] 2 locks held by getty/5368: [ 811.104888][ T30] #0: ffff8880361200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 811.145759][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 811.180687][ T30] 3 locks held by kworker/u8:18/14169: [ 811.214269][ T30] #0: ffff888032086940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 811.261529][ T30] #1: ffffc9000f787c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 811.310184][ T30] #2: ffffffff90026f00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 811.375548][ T30] 1 lock held by syz-executor/17251: [ 811.408460][ T30] #0: ffffffff90026f00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 811.472053][ T30] 1 lock held by syz-executor/17864: [ 811.500382][ T30] 1 lock held by syz-executor/18426: [ 811.529166][ T30] 2 locks held by kworker/u8:21/20798: [ 811.577958][ T30] 2 locks held by syz.4.4240/21580: [ 811.597538][ T30] #0: ffffffff900978e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 811.650516][ T30] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 811.686446][ T30] 2 locks held by syz.1.4910/24038: [ 811.740656][ T30] #0: ffffffff900978e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 811.775325][ T30] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 811.800139][ T30] 2 locks held by syz.6.5871/27794: [ 811.805450][ T30] #0: ffffffff900978e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 811.816190][ T30] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 811.828046][ T30] 2 locks held by syz.7.6169/28835: [ 811.835055][ T30] #0: ffffffff90026f00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 811.848829][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 811.866488][ T30] 1 lock held by syz-executor/28833: [ 811.873511][ T30] #0: ffff8880676d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 811.885498][ T30] 2 locks held by syz.5.6170/28842: [ 811.892383][ T30] #0: ffffffff8f7e3d20 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c20 [ 811.902179][ T30] #1: ffffffff90026f00 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaed/0x1c20 [ 811.911651][ T30] 1 lock held by syz.5.6170/28844: [ 811.916832][ T30] #0: ffffffff8f7e3d20 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c20 [ 811.927825][ T30] 1 lock held by dhcpcd/28845: [ 811.935029][ T30] #0: ffff888067d60260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 811.946627][ T30] [ 811.949194][ T30] ============================================= [ 811.949194][ T30] [ 811.978126][ T30] NMI backtrace for cpu 0 [ 811.978147][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 811.978166][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.978176][ T30] Call Trace: [ 811.978183][ T30] [ 811.978190][ T30] dump_stack_lvl+0xe8/0x150 [ 811.978219][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 811.978323][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 811.978361][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 811.978382][ T30] sys_info+0x135/0x170 [ 811.978405][ T30] watchdog+0xfd7/0x1030 [ 811.978446][ T30] ? watchdog+0x1c7/0x1030 [ 811.978471][ T30] kthread+0x388/0x470 [ 811.978494][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.978511][ T30] ? __pfx_kthread+0x10/0x10 [ 811.978535][ T30] ret_from_fork+0x514/0xb70 [ 811.978570][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 811.978592][ T30] ? __switch_to+0xc89/0x1420 [ 811.978615][ T30] ? __pfx_kthread+0x10/0x10 [ 811.978638][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.978676][ T30] [ 811.978683][ T30] Sending NMI from CPU 0 to CPUs 1: [ 812.099065][ C1] NMI backtrace for cpu 1 [ 812.099086][ C1] CPU: 1 UID: 0 PID: 473 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 812.099104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.099114][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 812.099215][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 812.099235][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 00 3a 5d 0a cc 89 f6 31 d2 e9 36 91 9a 03 66 0f 1f 44 00 [ 812.099248][ C1] RSP: 0018:ffffc90000a08e30 EFLAGS: 00000046 [ 812.099260][ C1] RAX: 000000000000000f RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 812.099270][ C1] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 812.099279][ C1] RBP: ffffc90000a08f00 R08: ffffffff81b3fb45 R09: 0000000000080000 [ 812.099290][ C1] R10: 0000000000000000 R11: ffffffff8174d530 R12: ffffffff8174d530 [ 812.099300][ C1] R13: 1ffff110170e4799 R14: 0000000000000000 R15: ffff8880b8723ccc [ 812.099310][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 812.099323][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.099333][ C1] CR2: 00007f533bf06e9c CR3: 000000000e946000 CR4: 00000000003526f0 [ 812.099346][ C1] Call Trace: [ 812.099353][ C1] [ 812.099358][ C1] lapic_next_event+0x11/0x20 [ 812.099378][ C1] clockevents_program_event+0x44e/0x630 [ 812.099406][ C1] ? __hrtimer_run_queues+0x9da/0xa10 [ 812.099423][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 812.099448][ C1] ? tick_program_event+0x8f/0x120 [ 812.099466][ C1] hrtimer_run_softirq+0x1ee/0x240 [ 812.099484][ C1] handle_softirqs+0x225/0x840 [ 812.099507][ C1] ? do_softirq+0x76/0xd0 [ 812.099523][ C1] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 812.099538][ C1] do_softirq+0x76/0xd0 [ 812.099552][ C1] [ 812.099557][ C1] [ 812.099563][ C1] __local_bh_enable_ip+0xf8/0x130 [ 812.099578][ C1] nsim_dev_trap_report_work+0x7a4/0xb40 [ 812.099601][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 812.099616][ C1] process_scheduled_works+0xa8e/0x14e0 [ 812.099646][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.099665][ C1] ? assign_work+0x3cf/0x5d0 [ 812.099682][ C1] worker_thread+0xa47/0xfb0 [ 812.099712][ C1] kthread+0x388/0x470 [ 812.099730][ C1] ? __pfx_worker_thread+0x10/0x10 [ 812.099745][ C1] ? __pfx_kthread+0x10/0x10 [ 812.099763][ C1] ret_from_fork+0x514/0xb70 [ 812.099784][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 812.099803][ C1] ? __switch_to+0xc89/0x1420 [ 812.099821][ C1] ? __pfx_kthread+0x10/0x10 [ 812.099840][ C1] ret_from_fork_asm+0x1a/0x30 [ 812.099868][ C1] [ 812.137570][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 812.137595][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 812.137614][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.137625][ T30] Call Trace: [ 812.137633][ T30] [ 812.137641][ T30] vpanic+0x56c/0xa60 [ 812.137671][ T30] ? __pfx___schedule+0x10/0x10 [ 812.137692][ T30] ? __pfx_vpanic+0x10/0x10 [ 812.137722][ T30] panic+0xc5/0xd0 [ 812.137744][ T30] ? __pfx_panic+0x10/0x10 [ 812.137764][ T30] ? preempt_schedule_common+0x82/0xd0 [ 812.137783][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 812.137803][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 812.137827][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 812.137848][ T30] watchdog+0x1030/0x1030 [ 812.137878][ T30] ? watchdog+0x1c7/0x1030 [ 812.137902][ T30] kthread+0x388/0x470 [ 812.137926][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.137949][ T30] ? __pfx_kthread+0x10/0x10 [ 812.137978][ T30] ret_from_fork+0x514/0xb70 [ 812.138004][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 812.138026][ T30] ? __switch_to+0xc89/0x1420 [ 812.138048][ T30] ? __pfx_kthread+0x10/0x10 [ 812.138070][ T30] ret_from_fork_asm+0x1a/0x30 [ 812.138107][ T30] [ 812.490747][ T30] Kernel Offset: disabled [ 812.495066][ T30] Rebooting in 86400 seconds..