last executing test programs: 3m30.6336896s ago: executing program 4 (id=9250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0xb, 0x6, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x478, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x130, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x33, 0x3, "d06c452770c80fff11fea52eeaaca970c3e73feb6fe8fba4d489e041afc05f9685be85ea0f49da5952f71de926769a"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xe7, 0x3, "c384c39331c93ea75468ec78ce80c6dc2d0dc65b404561a2dd355ce3381cb8b07f52ded14272fabbec107eddd2bb800c835b3118861c5ec8f99aab2ad4f311f710bcd1683fdf92a3224175d758451dc80ac91977043d882d3b8e4b934442991be62609241b78f4890b32231c8cd7c0655d00bf48582ca2e3addee6e44284c6ee6117ccaf8ef2cfd10256d93d085277dc7ad399889f854f79026cbfe8d9674ea7eb5d2223e0098200220fe306af90b6b05f2589d21bf22b87e77238dad042a0af11c2c6e5f3888fc664c003a40fe00d40f85880da6c16353e30378ac1a2b7abe2afa469"}]}, @NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x9, 0x6c, 0x4, 0x30, 0x6c, 0xb, 0x12, 0x12, 0x6, 0x4, 0x60, 0x18, 0x48, 0x60, 0xb, 0x60, 0x6c, 0x30, 0x18, 0x12, 0x9, 0x18, 0xb, 0xb, 0x2, 0x48]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x18, 0x18, 0x6, 0x5, 0x6c, 0xfa, 0xd, 0x2, 0x30, 0x0, 0x6c, 0x0, 0x3, 0x4, 0x24, 0x1b, 0x16, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x4, 0x1}, {0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x5}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x80, 0x9, 0xe11, 0x0, 0xff68, 0x0, 0x53e]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x2, 0xb, 0xb, 0x18, 0x12, 0xb, 0xb, 0xb, 0x6, 0x60, 0x0, 0x9, 0x65, 0x3c, 0x48, 0x1b, 0x1, 0x1, 0x60, 0xc, 0x48, 0x60, 0x9, 0xc5c3b1ffcb3b4dad, 0x1, 0x24, 0x0, 0x5, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfeec, 0xfff, 0x1, 0x5, 0x0, 0x0, 0x4, 0x1b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xabcd, 0x4, 0x8, 0x80, 0x3, 0x2, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a88, 0x0, 0xfff, 0x0, 0x7, 0x0, 0x7, 0x100]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x18, 0xc, 0xb, 0xc, 0x1, 0x6, 0x6, 0x4, 0x60, 0x30, 0x6c, 0x1, 0x12, 0x1, 0x16, 0x1b, 0x5, 0x27, 0xe, 0x5, 0x1a, 0x18, 0x4, 0x12, 0x6c, 0x6c, 0x24, 0x4, 0x6c]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf6bb, 0x6, 0x5, 0x2, 0x9, 0x7, 0x3486]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0xa}, {0x5, 0x9}, {0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x3}, {0x1, 0x3}, {0x3, 0x4}, {0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x7}, {0x6, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xcafa, 0x9f76, 0x7, 0xe000, 0x4, 0xf, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb6e, 0xe, 0x7, 0x8, 0x0, 0x200, 0x75a1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf884, 0x7f, 0x0, 0x19a0, 0x6, 0xfff, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x4, 0x48, 0x48, 0x30, 0x1b, 0x0, 0x2, 0xb, 0x18, 0x1, 0x12, 0x6, 0x60, 0x24, 0xc, 0x18, 0x36, 0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0x6, 0x0, 0xcd, 0x9, 0x16, 0x10]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xffff, 0x7, 0x2, 0xae, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0xdb, 0x7, 0x2, 0x6, 0x100]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x30, 0x12, 0xc, 0x60, 0x2, 0x12, 0xb, 0x24, 0x2, 0x9, 0x3, 0x22, 0x48, 0x12, 0x30, 0x7e, 0x6, 0x4, 0x9, 0x48, 0x48, 0xb, 0x30, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1, 0x3, 0x1, 0x80, 0xd3b, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab19, 0x800, 0x30, 0x0, 0x3ff, 0x800, 0x2, 0x8904]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x6}, {0x2, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x12}, {0x1, 0x9}, {0x4}, {}, {0x1, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x3}, {0x7, 0x7}, {0x1}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x6, 0x2}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0xa}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x3, 0x6}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x4}, {0x0, 0x6}, {0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x6}]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x478}, 0x1, 0x0, 0x0, 0x40000004}, 0x8c0) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000001}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400) 3m30.355267152s ago: executing program 4 (id=9254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x400, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (async, rerun: 64) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x401) (async, rerun: 32) listen(r4, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000f480e7b220615be61f9799390000"], 0x1c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) socket$igmp(0x2, 0x3, 0x2) (async) shutdown(r4, 0x0) 3m30.256265438s ago: executing program 4 (id=9256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) r4 = accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb}, 0x48) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delnexthop={0x20, 0x69, 0x5, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4006}, 0x8000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r10, 0x530, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x34}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xfffffffffffffe7a, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x402}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000300000000e0001006e656d64657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x48800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0x6e, 0x41, &(0x7f0000000280)="40648f9df73058090309ccac556d6579f8c7d1184761af4be6ddf094182ade5fea7a58557f6b32ff0a0239e3c41d2e868714a12ace4426864fb75795376568962951cf9dfe1755e5efea5be8c522e99182e91fb8234e0157af160df902e479d608c76464c1bba10cb7448f0914d5", &(0x7f0000000600)=""/65, 0x4, 0x0, 0xa7, 0xc8, &(0x7f0000000680)="d231be97c53ee4cbdf8cb00c7e6e40346901fede22523c512f6cb92d7744bc2fe9f2056cc105dca2803f50f3f1ff92c55dc82b158164e18fcdd42075ea42809724d6aa66a7f6977d943eda65901d63c0d0d343b4bea85d1224c74add3ab4290d5aafff152ab258db5c45d5c00677c584c75b2081500027dea1d72acc244cb589c06ed29110dfeae01e2b6d7c216bf0a75d29eb62a7fc12d5de438a8867bdda0d471d1ba71eeb1d", &(0x7f0000000740)="be181d4d198f241a6812aa263af0f2836929588d7f709848786f6f0ebffa7d057b8fb706194be7e962bd4eaeb89e145bcab663c372b93b6f5aa1a9b270709ba192eae2b21e11dac571a6ace6756175922b2b298193911fb4153fe3c877a67feba41b3e51bf4627846a8c038a2516722cc626c1b186302c12b19acfda8876b77ceeb18e0365cae9d6c4ea22d6ff1b38d5f653399f6a700216118afd560c4be5dabd47e475c8ead167d0f294b824603afbc728e2bc90bd86b6ee3bb3344c428f08163872e834a145e3", 0x1, 0x0, 0x4}, 0x50) 3m29.633030061s ago: executing program 4 (id=9260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendto$inet6(r3, &(0x7f0000000380)="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", 0x160, 0x4004, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @mcast1, 0x1}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) 3m29.317530488s ago: executing program 4 (id=9264): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='-4'], 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="59c350cadbb94ce8e4adeb96b5b35180954d6aad0ee418dce648a1c28fd7391159823c9aa104", 0x26}, {&(0x7f00000003c0)="1b9b32baaaa86cdc29d8e5b9b008c321ac47676be83ee4d52060113ebf9ae67ff4aa368c0624f8f2c9fd71d9a257ef054da9c134396c01009cc80bcb7fddf19607f0cd70bba57a1c75c221ad85f9702f0bdb9420c48aac0da96dab2dc544587c7608354b7d1b55e5667293c69895492d7d3311a77f972c1a3abc6ddd1d105dc9ccf97eb59a574c388eed0f84c9a262ec878e110315a11963657e58f620011be0d61492d8737474e46e87ed899c7de1309c2044083a64f4611db39b4235b0ecb363b97109404b7dcbc95630048e90c43586f1126b7192b9", 0xd7}, {&(0x7f0000000980)="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", 0x1b7}, {&(0x7f00000005c0)="1bbf43f83fa4b8c92d9836e3315e3bdd1022a4bfc9b66399e0031abea3c85693aefda43d5cf248239dbbeab1fcdb82d922fb95ec0e266da2318abd4d7a38882d94612196d6e4c3edff7ed0de02a21ce92d4f0f69939ae64c263f5bd851090d46a639b59efe7d000240dd8967f7661ca3eeef65b78ccadf367ad06191dcce84fc4d6c4af22e33938ae32e3bd68006edd47d357ff88c180010", 0x98}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x1) 3m29.038168191s ago: executing program 4 (id=9269): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x800, 0x0, [0x5, 0x400, 0x31, 0x9], &(0x7f00000001c0)}) 3m13.898180663s ago: executing program 32 (id=9269): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x800, 0x0, [0x5, 0x400, 0x31, 0x9], &(0x7f00000001c0)}) 2m49.273976374s ago: executing program 3 (id=9737): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x8dbf1216cb388b43) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x40000000) bind$inet6(r5, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m44.748524122s ago: executing program 3 (id=9765): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3ff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r3, 0x2, 0xac, "41a091135f4767b3b0fdcd63062fcebb0d300f958877a710e3941fcd0fcfa33b1a68d26ba6c9b0320868729933cf7bcb581485c923367041ff37f46ec99ccc3cbe11ecc33c033217b95ce3e2c34adcb56fbceed2bac8255213e8181609d9af0e89332945f657d46c789d1edc2764b9e6a6a4eae899b9a5cfbaeab8f0cecac52771187934df3bd5e17e638649377af0b6fbd281f816106a0ff908d08304a794444cc896939961bc8d85c382e7"}, 0xb4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r3, 0x1}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m44.566958308s ago: executing program 3 (id=9767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) socketpair(0x1f, 0x1, 0x6, &(0x7f0000001b40)={0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x8c, 0x13, 0x908, 0x70bd28, 0x25dfdbfd, {0x2, 0x9, 0x2, 0x6, {0x4e23, 0x4e22, [0xff, 0x9, 0x10, 0x100], [0x66e, 0x2, 0x6, 0x2], 0x0, [0x7fff, 0x1]}, 0x7, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "9b0fb8e3dec9d302ed5b85a78e1589875a4f9aeb5bc84b0421b14c80b20dadb088db000880b020d451b2829fd734d2cca79eb752e6f458b0711a958f"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40804}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000300)=""/76, 0x4c}], 0x4, &(0x7f0000000380)=""/111, 0x6f}, 0x7}, {{&(0x7f0000000400)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/191, 0xbf}], 0x5, &(0x7f00000007c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000017c0), 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/202, 0xca}], 0x1, &(0x7f0000001980)=""/177, 0xb1}, 0x9b8}], 0x3, 0x40010000, &(0x7f0000001b00)) 2m44.37367511s ago: executing program 3 (id=9769): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000009000000001010001f0000ee00"}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2m44.17353593s ago: executing program 3 (id=9772): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004) unshare(0x22020400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r4 = socket$inet(0x2, 0x4, 0xf) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000040)={0x7, 0x81, 0x2}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2404808c}, 0x8004) 2m43.757435374s ago: executing program 3 (id=9777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, r6, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m28.698339983s ago: executing program 33 (id=9777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, r6, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.262621998s ago: executing program 0 (id=11407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 4.161947347s ago: executing program 6 (id=11408): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@empty, 0x14, r1}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x35, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x200005}, @call={0x85, 0x0, 0x0, 0x82}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ea}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @generic={0x3, 0x6, 0x5, 0x4, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.979733067s ago: executing program 0 (id=11410): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x2, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x0, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x3, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 3.963425958s ago: executing program 6 (id=11411): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r0, 0x13, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f00000000c0)=0xffffffdf) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback=r4, r1, 0x14, 0x10, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.70562131s ago: executing program 2 (id=11413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) 3.628060446s ago: executing program 0 (id=11415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6(0xa, 0x5, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}]}, 0x70}}, 0x0) (async, rerun: 64) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r11) sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r11) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 3.615567796s ago: executing program 2 (id=11416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000000095e9600500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0xffffffff, @loopback, 0xffffffff}, 0x1c) listen(r7, 0x5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4000004}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) accept(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="210011b51d92e9d914580000", @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00001c003300080100000802110000010802110000010802110000001000"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfd, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.553258099s ago: executing program 6 (id=11417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0xfffffffc, 0x2, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) close(r6) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="21a800"}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x700, 0x8000, 0xb406, 0x2, {{0x13, 0x4, 0x2, 0x13, 0x4c, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x89, 0x4, "ddfe"}, @lsrr={0x83, 0xb, 0x80, [@multicast1, @multicast2]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0x10, "817d8967e92a7a88ff3c7bb40e78"}, {0x0, 0x10, "885829b22301eb464a7ad5a000df"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x7, 0x20, 0xd, 0x929, {{0x2c, 0x4, 0x0, 0x6, 0xb0, 0x68, 0x0, 0x7f, 0x2f, 0x0, @remote, @multicast1, {[@end, @noop, @cipso={0x86, 0x9, 0x3, [{0x2, 0x3, 'x'}]}, @lsrr={0x83, 0x27, 0xb4, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x42, 0x0, 0x4, [0x9, 0x1ff, 0x8, 0xdc, 0x5, 0x8]}, @cipso={0x86, 0x28, 0x2, [{0x7, 0x12, "1d2f4f7dcea4df858d58643d87a1a885"}, {0x1, 0x10, "bae1baf3aca026ddec1d6862937e"}]}, @lsrr={0x83, 0xb, 0x89, [@broadcast, @remote]}, @generic={0x86, 0xa, "74d74a441f3214d0"}, @timestamp={0x44, 0xc, 0x20, 0x0, 0x4, [0xffffffff, 0x9]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x258, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) 2.186874146s ago: executing program 5 (id=11428): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @local}, &(0x7f00000001c0)=0xc) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r3) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 1.905340295s ago: executing program 5 (id=11430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) close(r1) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x10c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0xf0, 0x1f, "f5025cf1b609af30f30390cb2c5b02c7fd61875a7c65de2f999ca6c91dada39828353816c9356d124abb55b0f281546994067030610e5a989d337234a5abebf02ebb8fd7b4fbd10d03d9cf966b79d6592fce98008c6a5da7def378339d2f26b84ff4aa9ed505eb4ece2e0f4f038fb5984c093bf8a29cd1adaa19183290e269f5f73985ab5bfac5502aa91d37be7af5113a3f46de588f01854d4a83f94f66a70dbd77d26e1b1c5d9b689083c12beca4e0f929e2070fd082bf4403c9c74fbadf6566295aa82afeda4ef9a2c1a9af0c585a0a01bdfbcf173a28613746ea58be379156dfa24de73ee561d2f25c8e"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2004801d}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="a6aaaaaace33ebca1293dcc81b78e4"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.619660347s ago: executing program 1 (id=11431): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.447425563s ago: executing program 1 (id=11432): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket(0x1d, 0x4, 0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2) 1.388682018s ago: executing program 0 (id=11433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000800)={{r5, 0x62, 0xaa, 0x7fff, 0x5, 0xe6, 0x3, 0x3, 0x7, 0x7f, 0xb274, 0x2, 0x0, 0x5, 0x1}, 0x10, [0x0, 0x0]}) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000000)="32c301707e35c617c12a44c78218139f19a905edcdcd0a4c038e87bbe3eac480585626174c2ec38e4a96bca0464623", 0x2f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000380)="0188a4c1255594f47d03361ac955aed21c555831e4e001f07db6721cccaee94095d2f08f9bd53ecfa47800cada2e1b6d23e2b06775bedbdfd86a1bfb8155acaec5c25dc8cb9e5090cd81270a76f2d408b09106b371826232124a5a9ac536170bf7d0b2d7f1b09d034c5fa7cfdcf82269b9967aafeb1e106299344dd55a5a9dd4e738c33fd3da1bc48b", 0x89}, {&(0x7f00000000c0)="d9c94ee7ee14ec4efb623dc2ff64ad811611b18d18291b0a98ad553ffa935bfbc2fe9ae856f9f48491c8e471f1a0fcf543a925a6c343e71e", 0x38}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000580)="424a23b97d1019b835f9de5f3948eadda199065a9291d27ba011449e951bed007ffb73197140c9149a49d594d36f590749cea48033daad39694c14ee9c9e28f4203faa243f9168d868ca6784299bd7cd483b0a21ef75957686a4b472e8abbdd06fa132e2607031611b8284f0b7276c89df093b4ef481df932c7ec628ddef", 0x7e}], 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x10e8}, 0x40) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xe}, {0x3}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x840) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x800) r8 = socket$netlink(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={r10, 0xb}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r9}}}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004300000000000000330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.384199789s ago: executing program 5 (id=11434): close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x24, 0x0, 0x10) 1.3740756s ago: executing program 6 (id=11435): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @local, 0x1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f00"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x1212, &(0x7f0000001e80)=ANY=[], 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200040d1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x0, 0x18, 0x4}, @tail_call, @ldst={0x3, 0x1, 0x4, 0x6, 0x4, 0x40, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], &(0x7f0000000040)='syzkaller\x00', 0x400, 0xe8, &(0x7f0000000200)=""/232, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x4, 0x5, 0xb, 0x3}, {0x5, 0x5, 0xb, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xb0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 1.293543552s ago: executing program 2 (id=11436): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB="05"], 0x20}}, 0x20000) 1.245757622s ago: executing program 1 (id=11437): unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x1, 0x0, &(0x7f0000000380)=0xffffffffffffff40) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x240, 0x128, 0x128, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0x21fe0d9ed8893e3b, 0xff], 'ip6gretap0\x00', 'lo\x00', {0xff}, {}, 0x2b, 0x7, 0x1, 0x8}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x50, 0xc], 0x7, 0x22, 0x3}}, @common=@icmp6={{0x28}, {0x0, '\\[', 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff], 'pim6reg0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x51, 0x4, 0x11}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x200, 0x4], 0xfffffffb, 0x30, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x24, "1315a83fbd20eb21b6cc387d48677d291c5aba3d3d0fb1ff6edc442d71b8"}}}, {{@uncond, 0x0, 0x120, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x3, 0x0, 0x7, 0x4, 0x0, 0x40, 0x5, 0x2, 0x8, 0x9b, 0x0, 0x7, 0x1, 0x5, 0xe, 0xb4], 0xc}}, @common=@frag={{0x30}, {[0x7fffffff, 0x1ff], 0x0, 0x0, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x1, 0x1, 0x2}, {0x1, 0x4, 0x2}, 0x6, 0x4b4d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r2, 0x0, 0xe25) 1.142914115s ago: executing program 5 (id=11438): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x24010084) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x24010084) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) (async) 1.04628991s ago: executing program 0 (id=11439): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x8, 0x1, 0x20, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x4, 0x80}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f00000012c0)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f00000012c0)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 997.323044ms ago: executing program 6 (id=11440): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x94) 958.309015ms ago: executing program 1 (id=11441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f00000021c0), 0x0}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x100, 0xfffffffc, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c00ff7f060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a05000000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00000a"], 0x8c}}, 0x0) 761.624681ms ago: executing program 2 (id=11442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="d6f2840f1861dfe9b034c5f3e09d4be7d81abfd0cc3399a31e3d52354d60d02e34badfa9ae3feb74e5fd64439e6d4115", @ANYRES8=r0], 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044004) 653.082795ms ago: executing program 5 (id=11443): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) 554.848898ms ago: executing program 0 (id=11444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="a6aaaaaace33ebca1293dcc81b78e4"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 501.601364ms ago: executing program 1 (id=11445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x200, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x4004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r4, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) 400.518312ms ago: executing program 2 (id=11446): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) 265.105563ms ago: executing program 2 (id=11447): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socket(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000351000010409d4f338ca8e18bf00000000", @ANYRES32=0x0, @ANYRES8=r0], 0x3c}}, 0x0) 63.32119ms ago: executing program 5 (id=11448): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8000, 0x101, 0x6, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x64, 0x0, 0xb, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x15, [@local, @multicast1, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001900000625bd7000fbdbdf251c048003fe04fe060008000008000400", @ANYRES32=r4, @ANYBLOB="1400120006006b2d516aab248e3a5c3ae93e24ee05001a0008000000"], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x6) (async) r5 = socket$netlink(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) shutdown(r5, 0x0) 62.683026ms ago: executing program 6 (id=11449): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$kcm(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r11 = accept4(r8, &(0x7f0000000440)=@l2, &(0x7f00000004c0)=0x80, 0x800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r8) sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000022c0)={0x130c, r12, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x116c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x30, 0x3, "d4dd2a98291cfbc54efb43d5be3450aae0584b9d8ee1e0e3a72c0a212d51bdeb9d3e1d362b403cbf4303019d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7c393626a322d92a535a9fd4c5b9be234a7280ae676ce8025db0"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "62605dd9c952aa8a4d121035f52343457b8d42daf0cab082de1058de37e26e6cea"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fbbd7f79c4e09b374db609e753980eb0f40c1e6a27"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f8bdfa486e9d9b97d893558896eb0d7d55b456254b266a16bb0ed2367741d877"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd574}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5fb2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbfa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9db6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x130c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000130a0500000000000000000001000003040008000900010073797a30000000000900020073797a310000000008000340"], 0x38}}, 0x4) 0s ago: executing program 1 (id=11450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f00000003c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x5, [@default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001150000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x20, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x1, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) kernel console output (not intermixed with test programs): e [ 923.208633][ T8233] veth1_vlan: entered promiscuous mode [ 923.331130][ T8233] veth0_macvtap: entered promiscuous mode [ 923.352865][ T8233] veth1_macvtap: entered promiscuous mode [ 923.382772][ T8372] lo speed is unknown, defaulting to 1000 [ 923.391701][ T8372] ip6_vti0 speed is unknown, defaulting to 1000 [ 923.394151][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.420212][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.453901][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.503464][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.544849][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.570589][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.733238][T14106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.770129][T14106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.831229][T14106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.847173][T14106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.052048][ T8392] syzkaller0: entered promiscuous mode [ 924.061732][ T8392] syzkaller0: entered allmulticast mode [ 924.094166][ T8392] tipc: Started in network mode [ 924.103724][ T8392] tipc: Node identity 3a60fd70e8ee, cluster identity 4711 [ 924.121973][ T8392] tipc: Enabled bearer , priority 0 [ 924.140409][ T8390] tipc: Resetting bearer [ 924.178352][ T8390] tipc: Disabling bearer [ 924.378113][ T5830] Bluetooth: hci0: command tx timeout [ 924.684001][ T8417] __nla_validate_parse: 4 callbacks suppressed [ 924.684032][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9327'. [ 924.863942][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9328'. [ 924.883824][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9328'. [ 925.051783][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9329'. [ 925.258794][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9335'. [ 925.312132][ T8445] Bluetooth: MGMT ver 1.23 [ 925.315978][ T8447] syzkaller0: entered promiscuous mode [ 925.324328][ T8447] syzkaller0: entered allmulticast mode [ 925.413549][ T8449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9338'. [ 925.423646][ T8449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9338'. [ 925.564756][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9340'. [ 925.589783][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9340'. [ 925.827104][ T8473] validate_nla: 2 callbacks suppressed [ 925.827129][ T8473] netlink: 'syz.2.9344': attribute type 1 has an invalid length. [ 925.884318][ T8473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.916945][ T8477] bond1: (slave ip6gretap1): making interface the new active one [ 925.929700][ T8477] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 925.944686][ T8479] netlink: 696 bytes leftover after parsing attributes in process `syz.1.9346'. [ 925.967001][ T8473] veth3: entered promiscuous mode [ 925.979709][ T8473] bond1: (slave veth3): Enslaving as an active interface with a down link [ 926.009387][ T8473] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 926.101210][ T8483] openvswitch: netlink: IP tunnel dst address not specified [ 926.458198][ T5830] Bluetooth: hci0: command tx timeout [ 926.467856][ T8505] geneve2: entered promiscuous mode [ 926.487542][T14096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.523556][T14096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.560382][T14096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.580697][T14096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.616913][ T8511] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 927.096185][ T8534] veth0: entered promiscuous mode [ 927.142243][ T8536] veth0: left promiscuous mode [ 927.248574][ T8541] netlink: 'syz.2.9367': attribute type 83 has an invalid length. [ 927.466577][ T8561] netlink: 'syz.3.9374': attribute type 4 has an invalid length. [ 928.119853][ T8596] syzkaller0: entered promiscuous mode [ 928.148156][ T8596] syzkaller0: entered allmulticast mode [ 928.456212][ T8611] bond1: entered promiscuous mode [ 928.474010][ T8611] bond1: entered allmulticast mode [ 928.489490][ T8611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.411784][ T8638] syzkaller0: entered promiscuous mode [ 929.420799][ T8638] syzkaller0: entered allmulticast mode [ 929.700979][ T8653] __nla_validate_parse: 6 callbacks suppressed [ 929.701033][ T8653] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9403'. [ 929.736097][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9402'. [ 929.751347][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9402'. [ 929.847048][ T8656] netlink: 'syz.0.9404': attribute type 1 has an invalid length. [ 929.962899][ T8656] bond1: entered promiscuous mode [ 929.969660][ T8656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.035888][ T8656] bond1: (slave bridge1): making interface the new active one [ 930.051148][ T8656] bridge1: entered promiscuous mode [ 930.068724][ T8656] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 930.174343][ T8672] pim6reg: entered allmulticast mode [ 930.280118][ T8678] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 930.295466][ T8678] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 930.311727][ T8678] gretap1: entered promiscuous mode [ 930.317072][ T8678] gretap1: entered allmulticast mode [ 930.330631][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9412'. [ 930.360053][ T8683] : renamed from hsr0 (while UP) [ 930.698637][ T8700] Cannot find set identified by id 0 to match [ 930.958537][ T8717] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.9422'. [ 930.970773][ T8721] xt_connbytes: Forcing CT accounting to be enabled [ 930.987605][ T8717] openvswitch: netlink: Message has 6 unknown bytes. [ 931.478285][T30200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 931.490996][T30200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 931.501950][T30200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 931.513905][T30200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 931.523240][T30200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 931.672792][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.835481][ T8740] lo speed is unknown, defaulting to 1000 [ 931.856371][ T8740] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.036174][ T8758] netlink: 'syz.1.9432': attribute type 29 has an invalid length. [ 932.056522][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9431'. [ 932.410128][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 932.711254][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9441'. [ 932.720802][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9441'. [ 932.924147][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9444'. [ 932.963491][ T8796] syzkaller0: entered promiscuous mode [ 932.970112][ T8796] syzkaller0: entered allmulticast mode [ 933.120139][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 933.210706][ T8811] bond2: (slave veth3): Enslaving as an active interface with a down link [ 933.362326][ T8824] "syz.0.9451" (8824) uses obsolete ecb(arc4) skcipher [ 933.384565][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.392655][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.400997][ T8740] bridge_slave_0: entered allmulticast mode [ 933.410081][ T8740] bridge_slave_0: entered promiscuous mode [ 933.421100][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.430556][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.438712][ T8740] bridge_slave_1: entered allmulticast mode [ 933.453759][ T8740] bridge_slave_1: entered promiscuous mode [ 933.580550][ T5830] Bluetooth: hci1: command tx timeout [ 933.649089][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.718934][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.864384][ T8845] bond2: (slave gretap0): Device is not bonding slave [ 933.904335][ T8845] bond2: option active_slave: invalid value (gretap0) [ 933.916986][ T8845] bond2 (unregistering): Released all slaves [ 933.922491][ T8855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.025988][ T8851] mac80211_hwsim hwsim131 wlan0: entered promiscuous mode [ 934.060454][ T8740] team0: Port device team_slave_0 added [ 934.085829][ T8740] team0: Port device team_slave_1 added [ 934.243580][ T8870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 934.261825][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.287688][ T8871] x_tables: duplicate underflow at hook 1 [ 934.289233][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.324292][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.356400][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.376697][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.416581][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.555176][ T8740] hsr_slave_0: entered promiscuous mode [ 934.598021][ T8740] hsr_slave_1: entered promiscuous mode [ 934.605293][ T8740] debugfs: 'hsr0' already exists in 'hsr' [ 934.632149][ T8740] Cannot create hsr debugfs directory [ 934.807124][ T8904] x_tables: duplicate underflow at hook 3 [ 935.039391][ T8911] netlink: 'syz.0.9475': attribute type 1 has an invalid length. [ 935.051431][ T8911] __nla_validate_parse: 3 callbacks suppressed [ 935.051451][ T8911] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9475'. [ 935.071266][ T8911] netlink: 658 bytes leftover after parsing attributes in process `syz.0.9475'. [ 935.081979][ T8911] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9475'. [ 935.300979][ T8740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 935.320981][ T8740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 935.350257][ T8740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 935.360724][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9479'. [ 935.376362][ T8924] netlink: 'syz.0.9477': attribute type 8 has an invalid length. [ 935.376537][ T8927] netlink: 'syz.2.9478': attribute type 4 has an invalid length. [ 935.427278][ T8740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 935.657747][ T5830] Bluetooth: hci1: command tx timeout [ 935.700179][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.731607][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.753366][T25688] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.760611][T25688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.809181][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.816579][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.924508][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.974107][ T8950] netlink: 'syz.3.9485': attribute type 1 has an invalid length. [ 936.043650][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9486'. [ 936.073959][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9486'. [ 936.075600][ T8953] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 936.102866][ T8953] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 936.113486][ T8953] gretap2: entered promiscuous mode [ 936.119386][ T8953] gretap2: entered allmulticast mode [ 936.154778][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9485'. [ 936.211097][ T8950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.239638][ T8950] bond2: (slave bond3): making interface the new active one [ 936.249168][ T8950] bond2: (slave bond3): Enslaving as an active interface with an up link [ 936.312454][ T8962] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 936.394799][ T8960] gretap0: entered promiscuous mode [ 936.425561][ T8960] gretap0: left promiscuous mode [ 936.442250][ T8965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.530474][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9492'. [ 936.576975][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.585401][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9492'. [ 936.632821][ T8980] vlan0: entered allmulticast mode [ 936.645601][ T8980] geneve1: entered allmulticast mode [ 936.682788][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9495'. [ 936.871834][ T8996] tipc: Invalid UDP bearer configuration [ 936.871895][ T8996] tipc: Enabling of bearer rejected, failed to enable media [ 937.422138][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.474130][ T9029] syzkaller1: entered promiscuous mode [ 937.491556][ T9029] syzkaller1: entered allmulticast mode [ 937.681468][ T8740] veth0_vlan: entered promiscuous mode [ 937.725721][ T9045] syzkaller0: entered allmulticast mode [ 937.740344][ T5830] Bluetooth: hci1: command tx timeout [ 937.761687][ T8740] veth1_vlan: entered promiscuous mode [ 937.884746][ T8740] veth0_macvtap: entered promiscuous mode [ 937.922655][ T8740] veth1_macvtap: entered promiscuous mode [ 937.998367][ T9052] erspan0: entered promiscuous mode [ 938.027977][ T9052] erspan0: left promiscuous mode [ 938.058124][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.164938][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.193562][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.205527][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.238242][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.246990][ T9062] netlink: 'syz.3.9513': attribute type 1 has an invalid length. [ 938.349959][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.400089][ T9064] bond4: (slave ip6gretap1): making interface the new active one [ 938.409131][ T9064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 938.417120][ T9064] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 938.426122][ T9064] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 938.611983][T25688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.642999][T25688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.714916][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.726123][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.074575][ T9087] syzkaller1: entered promiscuous mode [ 939.080373][ T9087] syzkaller1: entered allmulticast mode [ 939.104823][ T9090] vlan2: entered promiscuous mode [ 939.111000][ T9090] geneve1: entered promiscuous mode [ 939.118523][ T9090] vlan2: entered allmulticast mode [ 939.123892][ T9090] geneve1: entered allmulticast mode [ 939.533793][ T9106] netlink: 'syz.3.9526': attribute type 1 has an invalid length. [ 939.679351][ T9106] bond5: entered promiscuous mode [ 939.685193][ T9106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 939.716648][ T9125] block nbd0: not configured, cannot reconfigure [ 939.818412][ T5830] Bluetooth: hci1: command tx timeout [ 939.853337][ T9130] netlink: 'syz.2.9534': attribute type 1 has an invalid length. [ 939.869573][ T9130] netlink: 'syz.2.9534': attribute type 2 has an invalid length. [ 939.883815][ T9133] tipc: Started in network mode [ 939.890098][ T9133] tipc: Node identity ac1414aa, cluster identity 4711 [ 939.900153][ T9133] tipc: Enabled bearer , priority 10 [ 940.104913][ T9144] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 940.123898][ T9146] bridge0: port 3(syz_tun) entered blocking state [ 940.132910][ T9146] bridge0: port 3(syz_tun) entered disabled state [ 940.152207][ T9146] syz_tun: entered allmulticast mode [ 940.161862][ T9146] syz_tun: entered promiscuous mode [ 940.169698][ T9146] bridge0: port 3(syz_tun) entered blocking state [ 940.176324][ T9146] bridge0: port 3(syz_tun) entered forwarding state [ 940.197239][ T9154] __nla_validate_parse: 13 callbacks suppressed [ 940.197262][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9540'. [ 940.486283][ T9154] hsr_slave_0 (unregistering): left promiscuous mode [ 940.575571][ T9164] netlink: 'syz.3.9544': attribute type 3 has an invalid length. [ 940.641745][ T9171] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 940.750362][ T9178] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 940.779981][ T9180] sctp: [Deprecated]: syz.2.9549 (pid 9180) Use of int in max_burst socket option deprecated. [ 940.779981][ T9180] Use struct sctp_assoc_value instead [ 941.019534][T14687] tipc: Node number set to 2886997162 [ 941.953291][ T9250] tipc: Started in network mode [ 942.004437][ T9250] tipc: Node identity 0ae5f7bf915c, cluster identity 4711 [ 942.059869][ T9250] tipc: Enabled bearer , priority 0 [ 942.092009][ T9259] syzkaller0: MTU too low for tipc bearer [ 942.110400][ T9254] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 942.118883][ T5456] IPVS: starting estimator thread 0... [ 942.131792][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9570'. [ 942.141612][ T9259] tipc: Disabling bearer [ 942.198440][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9570'. [ 942.217960][ T9268] IPVS: using max 27 ests per chain, 64800 per kthread [ 942.242023][ T9259] netlink: 'syz.3.9570': attribute type 6 has an invalid length. [ 942.603632][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9581'. [ 943.097204][ T9311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9586'. [ 943.583315][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9593'. [ 943.696740][ T9344] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9595'. [ 943.812845][ T9352] xt_TCPMSS: Only works on TCP SYN packets [ 943.850661][ T9352] netlink: 'syz.0.9598': attribute type 35 has an invalid length. [ 944.352186][ T9377] x_tables: duplicate underflow at hook 1 [ 944.528467][ T9387] ipt_REJECT: TCP_RESET invalid for non-tcp [ 944.559354][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9614'. [ 944.686670][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9616'. [ 944.735921][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9616'. [ 944.853322][ T9408] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 944.911724][ T9408] gretap2: entered promiscuous mode [ 945.241252][ T9429] netlink: 'syz.5.9625': attribute type 12 has an invalid length. [ 945.291277][ T9429] bond1: option primary_reselect: invalid value (255) [ 945.320660][ T9429] bond1 (unregistering): Released all slaves [ 945.363138][ T9440] veth1_macvtap: left promiscuous mode [ 945.369135][ T9440] macsec0: entered promiscuous mode [ 945.374623][ T9440] macsec0: entered allmulticast mode [ 945.379110][ T9438] netlink: 'syz.1.9630': attribute type 1 has an invalid length. [ 945.395664][ T9442] veth1_macvtap: entered promiscuous mode [ 945.404840][ T9429] netlink: 'syz.5.9625': attribute type 12 has an invalid length. [ 945.442020][ T9442] veth1_macvtap: entered allmulticast mode [ 945.458133][ T9442] macsec0: left promiscuous mode [ 945.472964][ T9442] macsec0: left allmulticast mode [ 945.479074][ T9442] veth1_macvtap: left allmulticast mode [ 945.544817][ T9429] bond1: option primary_reselect: invalid value (255) [ 945.555791][ T9429] bond1 (unregistering): Released all slaves [ 945.601698][ T9447] bond1: (slave gretap3): making interface the new active one [ 945.627039][ T9447] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 945.642405][ T9429] netlink: 'syz.5.9625': attribute type 12 has an invalid length. [ 945.741362][ T9429] bond1: option primary_reselect: invalid value (255) [ 945.765493][ T9429] bond1 (unregistering): Released all slaves [ 945.815763][ T9459] netlink: 'syz.3.9632': attribute type 3 has an invalid length. [ 945.834388][ T9459] netlink: 'syz.3.9632': attribute type 1 has an invalid length. [ 945.838324][ T9429] netlink: 'syz.5.9625': attribute type 12 has an invalid length. [ 945.901042][ T9429] bond1: option primary_reselect: invalid value (255) [ 945.929577][ T9429] bond1 (unregistering): Released all slaves [ 946.024508][ T9429] netlink: 'syz.5.9625': attribute type 12 has an invalid length. [ 946.065780][ T9429] bond1: option primary_reselect: invalid value (255) [ 946.142326][ T9429] bond1 (unregistering): Released all slaves [ 946.258743][ T9483] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 946.558833][ T9498] xt_cluster: node mask cannot exceed total number of nodes [ 946.796582][ T9510] netlink: 'syz.2.9646': attribute type 30 has an invalid length. [ 946.919201][ T9524] __nla_validate_parse: 2 callbacks suppressed [ 946.919223][ T9524] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9649'. [ 947.169517][ T9531] netlink: 744 bytes leftover after parsing attributes in process `syz.5.9650'. [ 947.420600][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9655'. [ 947.472371][ T9549] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 947.714614][ T9554] netlink: 'syz.2.9657': attribute type 11 has an invalid length. [ 947.759240][ T9554] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.9657'. [ 947.987002][ T9534] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 948.183646][ T9567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.361759][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9662'. [ 948.748981][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9670'. [ 948.847101][ T9609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 949.152377][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9676'. [ 949.201735][ T9623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 949.265358][ T9629] lo speed is unknown, defaulting to 1000 [ 949.275316][ T9629] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.337755][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 949.574953][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9681'. [ 949.721011][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9683'. [ 949.825071][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9685'. [ 950.484514][ T9679] .: renamed from bridge_slave_1 [ 950.507228][ T9679] syzkaller0: entered promiscuous mode [ 950.515366][ T9679] syzkaller0: entered allmulticast mode [ 950.690694][ T9685] validate_nla: 4 callbacks suppressed [ 950.690718][ T9685] netlink: 'syz.3.9691': attribute type 11 has an invalid length. [ 950.691666][ T9687] x_tables: duplicate entry at hook 1 [ 950.825078][ T9695] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 951.566230][ T9736] syzkaller0: entered promiscuous mode [ 951.596617][ T9739] xt_hashlimit: size too large, truncated to 1048576 [ 951.606540][ T9736] syzkaller0: entered allmulticast mode [ 951.644698][ T9743] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 952.272327][ T9766] __nla_validate_parse: 8 callbacks suppressed [ 952.272349][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9711'. [ 954.473146][ T9769] veth0_to_hsr: default FDB implementation only supports local addresses [ 954.641632][ T9771] IPv6: sit1: Disabled Multicast RS [ 955.185064][ T9811] netlink: 'syz.1.9723': attribute type 75 has an invalid length. [ 955.433209][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9729'. [ 955.524924][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9732'. [ 955.541503][ T9832] Bluetooth: MGMT ver 1.23 [ 955.543565][ T9822] syzkaller0: entered promiscuous mode [ 955.552701][ T9822] syzkaller0: entered allmulticast mode [ 955.584649][ T9829] pimreg3: entered allmulticast mode [ 955.746484][ T9840] ipt_REJECT: TCP_RESET invalid for non-tcp [ 955.975659][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9735'. [ 958.195677][ T9842] tipc: New replicast peer: 255.255.255.255 [ 958.203057][ T9842] tipc: Enabled bearer , priority 10 [ 958.229399][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9736'. [ 958.306036][ T9844] lo speed is unknown, defaulting to 1000 [ 958.340406][ T9844] ip6_vti0 speed is unknown, defaulting to 1000 [ 958.525152][ T9873] x_tables: duplicate underflow at hook 2 [ 958.782453][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9746'. [ 958.825179][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9746'. [ 958.878545][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.879101][ T9890] netlink: 'syz.1.9748': attribute type 4 has an invalid length. [ 958.889011][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9746'. [ 958.906369][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.924807][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9746'. [ 958.934609][T14096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.941773][ T9890] tipc: Trying to set illegal importance in message [ 958.949779][T14096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.359584][ T5451] tipc: Node number set to 3532586352 [ 959.811012][ T9932] tipc: Started in network mode [ 959.825102][ T9932] tipc: Node identity 068a3f73c484, cluster identity 4711 [ 959.851458][ T9932] tipc: Enabled bearer , priority 0 [ 959.914433][ T9935] syzkaller0: entered promiscuous mode [ 959.923099][ T9935] syzkaller0: entered allmulticast mode [ 959.940269][ T9932] tipc: Resetting bearer [ 959.976988][ T9931] tipc: Resetting bearer [ 960.000972][ T9944] openvswitch: netlink: IPv4 tun info is not correct [ 960.037075][ T9931] tipc: Disabling bearer [ 960.335613][ T9958] netlink: 'syz.3.9765': attribute type 21 has an invalid length. [ 960.398311][ T9958] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9765'. [ 961.180125][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9776'. [ 961.209368][ T9999] netlink: 13 bytes leftover after parsing attributes in process `syz.1.9776'. [ 961.273461][T10006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.377115][ T9999] veth3: entered promiscuous mode [ 961.491787][T10019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9779'. [ 961.744675][T10025] IPv6: Can't replace route, no match found [ 961.926714][T10029] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9782'. [ 964.115611][T10045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 964.461884][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9794'. [ 964.475216][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9793'. [ 965.089011][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.124294][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.153533][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.189491][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.211522][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.536008][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.566112][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9800'. [ 965.595855][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9800'. [ 967.802908][T10107] geneve2: entered promiscuous mode [ 967.829175][T10107] geneve2: entered allmulticast mode [ 967.966753][T10123] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 968.726533][T10159] syzkaller0: entered promiscuous mode [ 968.735041][T10159] syzkaller0: entered allmulticast mode [ 969.371640][T10196] gretap0: entered promiscuous mode [ 969.380585][T10196] gretap0: left promiscuous mode [ 969.447071][T10201] syzkaller0: entered promiscuous mode [ 969.454063][T10201] syzkaller0: entered allmulticast mode [ 969.464879][T10195] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 969.580987][T10208] __nla_validate_parse: 12 callbacks suppressed [ 969.581011][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9835'. [ 969.585062][T10210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9837'. [ 969.713398][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9839'. [ 969.735772][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9839'. [ 969.751624][T10219] bridge2: entered promiscuous mode [ 969.756952][T10219] bridge2: entered allmulticast mode [ 970.193858][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9845'. [ 970.212890][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9845'. [ 970.245702][T10243] team0: Device gtp1 is up. Set it down before adding it as a team port [ 970.412081][T10251] lo speed is unknown, defaulting to 1000 [ 970.442147][T10251] ip6_vti0 speed is unknown, defaulting to 1000 [ 970.651271][T10266] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9853'. [ 970.820492][T10270] erspan0: entered promiscuous mode [ 971.106037][T10278] syzkaller1: entered promiscuous mode [ 971.114632][T10278] syzkaller1: entered allmulticast mode [ 971.828880][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9869'. [ 971.859254][T10309] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 971.875351][T10309] netlink: 'syz.2.9870': attribute type 2 has an invalid length. [ 971.930413][T10307] bond2: option miimon: invalid value (18446744073709551585) [ 971.960459][T10307] bond2: option miimon: allowed values 0 - 2147483647 [ 971.973192][T10307] bond2 (unregistering): Released all slaves [ 972.585974][T10345] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9882'. [ 972.593492][T10347] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.611048][T10346] xt_nat: multiple ranges no longer supported [ 972.815615][T10358] ipt_REJECT: TCP_RESET invalid for non-tcp [ 972.834755][T10356] netlink: 'syz.0.9886': attribute type 1 has an invalid length. [ 972.845446][T10356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9886'. [ 972.929475][T10367] openvswitch: netlink: Missing key (keys=40, expected=100) [ 973.389416][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.578327][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.794657][T10390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.905843][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.608402][T10422] __nla_validate_parse: 6 callbacks suppressed [ 974.608423][T10422] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.9907'. [ 974.625622][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.667991][T10422] openvswitch: netlink: Missing key (keys=40, expected=100) [ 974.792676][T10428] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9910'. [ 974.949330][T10433] netlink: 'syz.2.9912': attribute type 29 has an invalid length. [ 974.988768][T10433] xt_hashlimit: size too large, truncated to 1048576 [ 975.039321][T10433] xt_hashlimit: size too large, truncated to 1048576 [ 975.068596][T10434] netlink: 'syz.2.9912': attribute type 29 has an invalid length. [ 975.117076][T10434] netlink: 'syz.2.9912': attribute type 6 has an invalid length. [ 975.138562][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9913'. [ 975.165556][T10434] netlink: 'syz.2.9912': attribute type 6 has an invalid length. [ 975.503385][T10443] syzkaller1: entered promiscuous mode [ 975.517747][T10443] syzkaller1: entered allmulticast mode [ 975.659816][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.947124][T10470] netlink: 'syz.2.9922': attribute type 10 has an invalid length. [ 976.016317][T10472] netlink: 'syz.2.9922': attribute type 10 has an invalid length. [ 976.143343][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9922'. [ 976.154562][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9924'. [ 976.170194][T10470] syz_tun: entered promiscuous mode [ 976.192563][T10472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.203021][T10472] team0: Port device bond0 added [ 976.421388][T10483] team0: Port device team_slave_0 removed [ 976.523096][T10490] netlink: 'syz.0.9927': attribute type 1 has an invalid length. [ 976.551580][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9929'. [ 976.700908][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.730999][T30200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 976.748003][T30200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 976.763962][T30200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 976.782749][T30200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 976.791193][T30200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 976.850932][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9931'. [ 976.944278][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.958631][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9931'. [ 976.976585][T10505] lo speed is unknown, defaulting to 1000 [ 976.997543][T10505] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.104972][T10519] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 977.313065][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9937'. [ 977.496500][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9940'. [ 977.819808][T10505] chnl_net:caif_netlink_parms(): no params data found [ 977.864847][T10552] netlink: 'syz.5.9944': attribute type 11 has an invalid length. [ 978.110525][T10554] syzkaller0: entered promiscuous mode [ 978.116082][T10554] syzkaller0: entered allmulticast mode [ 978.182419][T10574] netlink: 'syz.1.9948': attribute type 1 has an invalid length. [ 978.254572][T10574] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 978.322057][T10505] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.362215][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.379796][T10505] bridge_slave_0: entered allmulticast mode [ 978.398390][T10505] bridge_slave_0: entered promiscuous mode [ 978.444074][T10505] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.454520][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.470811][T10505] bridge_slave_1: entered allmulticast mode [ 978.481583][T10505] bridge_slave_1: entered promiscuous mode [ 978.715209][T10505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.742738][T10505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.778367][ T5452] net_ratelimit: 5 callbacks suppressed [ 978.778385][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.858753][T30200] Bluetooth: hci6: command tx timeout [ 978.863477][T10505] team0: Port device team_slave_0 added [ 978.884617][T10505] team0: Port device team_slave_1 added [ 978.910321][T10607] bond0: (slave gre0): Error: Device type is different from other slaves [ 978.951053][T10607] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 979.000173][T10505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.007178][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.044442][T10505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.058997][T10505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.065990][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.093686][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.218872][T10619] netlink: 'syz.5.9959': attribute type 1 has an invalid length. [ 979.248918][T10619] netlink: 'syz.5.9959': attribute type 1 has an invalid length. [ 979.256894][T10619] netlink: 'syz.5.9959': attribute type 2 has an invalid length. [ 979.388407][T10505] hsr_slave_0: entered promiscuous mode [ 979.442513][T10505] hsr_slave_1: entered promiscuous mode [ 979.469667][T10505] debugfs: 'hsr0' already exists in 'hsr' [ 979.475525][T10505] Cannot create hsr debugfs directory [ 979.820996][T30200] Bluetooth: hci3: command 0x0406 tx timeout [ 979.833104][ T5451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.986073][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.170321][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.179680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.281278][T10505] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 980.326941][T10666] __nla_validate_parse: 4 callbacks suppressed [ 980.326961][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9968'. [ 980.380289][T10505] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 980.408148][T10505] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 980.428937][T10505] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 980.479450][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9972'. [ 980.499146][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9971'. [ 980.666753][T10689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.676271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.709917][T10689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.745994][T10505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.750602][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9975'. [ 980.797106][T10505] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.806115][T10689] netlink: zone id is out of range [ 980.818839][T10689] netlink: zone id is out of range [ 980.834104][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.841778][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.939799][ T5830] Bluetooth: hci6: command tx timeout [ 980.951526][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.958810][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.984346][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9976'. [ 981.199825][T10703] lo: entered promiscuous mode [ 981.407141][T10714] sctp: [Deprecated]: syz.5.9981 (pid 10714) Use of int in maxseg socket option. [ 981.407141][T10714] Use struct sctp_assoc_value instead [ 981.492236][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9983'. [ 981.526638][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9983'. [ 981.554158][T10505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.584360][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9984'. [ 981.615058][T10716] netlink: 'syz.2.9983': attribute type 6 has an invalid length. [ 981.668218][T10725] netlink: 'syz.5.9985': attribute type 1 has an invalid length. [ 981.669950][T10718] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.9982'. [ 981.734371][T10718] netlink: 'syz.0.9982': attribute type 1 has an invalid length. [ 981.748440][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9985'. [ 981.794010][T10725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.826190][T10725] bond2: entered promiscuous mode [ 981.835447][T10725] bond2: entered allmulticast mode [ 981.944024][T10727] hsr_slave_0 (unregistering): left promiscuous mode [ 982.251758][T10757] nbd: must specify a device to reconfigure [ 982.372659][T10505] veth0_vlan: entered promiscuous mode [ 982.413759][T10765] siw: device registration error -23 [ 982.421581][T10505] veth1_vlan: entered promiscuous mode [ 982.514932][T10505] veth0_macvtap: entered promiscuous mode [ 982.571937][T10505] veth1_macvtap: entered promiscuous mode [ 982.629750][T10505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.664766][T10505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.724096][T25682] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.733491][T25682] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.745920][T25682] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.762001][T25682] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.794684][T10779] syzkaller0: entered promiscuous mode [ 982.800764][T10779] syzkaller0: entered allmulticast mode [ 982.874671][T10779] tipc: Enabling of bearer rejected, media not registered [ 982.896153][T14107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.909884][T14107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.971222][T14107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.981954][T14107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.017744][ T5830] Bluetooth: hci6: command tx timeout [ 983.253443][T10795] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 983.817624][T10819] x_tables: duplicate underflow at hook 2 [ 983.845159][T10820] x_tables: duplicate underflow at hook 2 [ 983.882018][T10824] syzkaller1: entered promiscuous mode [ 983.899287][T10824] syzkaller1: entered allmulticast mode [ 983.980217][T20881] net_ratelimit: 17 callbacks suppressed [ 983.980239][T20881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.388429][T10855] 8021q: VLANs not supported on lo [ 984.632805][T10876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 985.022297][ T5456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.097898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.108098][ T5830] Bluetooth: hci6: command tx timeout [ 985.428524][T14687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.058614][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.549479][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.099952][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.536327][T10867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 988.079875][T10916] netlink: 'syz.1.10031': attribute type 29 has an invalid length. [ 988.096170][T10916] __nla_validate_parse: 5 callbacks suppressed [ 988.096189][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10031'. [ 988.141969][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.529130][T10933] tipc: Started in network mode [ 988.534481][T10933] tipc: Node identity 6e2bf61c3013, cluster identity 4711 [ 988.568903][T10933] tipc: Enabled bearer , priority 0 [ 988.576990][T10933] syzkaller0: entered promiscuous mode [ 988.585947][T10933] syzkaller0: entered allmulticast mode [ 988.595023][T10939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.774076][T10933] tipc: Resetting bearer [ 988.801733][T10932] tipc: Resetting bearer [ 988.858865][T10932] tipc: Disabling bearer [ 989.178698][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.184661][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10047'. [ 989.231452][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10050'. [ 989.260718][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10050'. [ 989.434014][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10053'. [ 989.485743][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10053'. [ 989.569705][T10984] netlink: 'syz.2.10053': attribute type 1 has an invalid length. [ 989.578079][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.591801][T10984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10053'. [ 989.654416][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10053'. [ 989.808384][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10057'. [ 990.051049][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10062'. [ 990.160201][T11017] sch_tbf: peakrate 17603 is lower than or equals to rate 11690963321791697126 ! [ 990.220022][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.352158][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802de5b400: rx timeout, send abort [ 990.513098][T11036] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 990.523874][T11036] bond2: option packets_per_slave: allowed values 0 - 65535 [ 990.545748][T11036] bond2 (unregistering): Released all slaves [ 990.770789][T11036] tipc: Enabling of bearer rejected, failed to enable media [ 990.861460][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802de5b400: abort rx timeout. Force session deactivation [ 991.097771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.262461][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.492307][T11082] netlink: 'syz.2.10082': attribute type 11 has an invalid length. [ 992.298742][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.319554][T11120] netlink: 'syz.5.10092': attribute type 1 has an invalid length. [ 992.434118][T11120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 992.479399][T11131] bond3: (slave veth0_to_bond): making interface the new active one [ 992.512844][T11131] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 992.628511][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.993464][T11164] syzkaller0: entered promiscuous mode [ 993.007345][T11164] syzkaller0: entered allmulticast mode [ 993.054907][T11168] pim6reg1: entered promiscuous mode [ 993.071129][T11165] xt_CT: No such helper "snmp_trap" [ 993.091925][T11168] pim6reg1: entered allmulticast mode [ 993.106425][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.140839][T11170] tipc: Enabled bearer , priority 0 [ 993.152678][T11168] netlink: 'syz.1.10103': attribute type 1 has an invalid length. [ 993.165476][T11170] tipc: Resetting bearer [ 993.267089][T11163] tipc: Resetting bearer [ 993.276068][T11176] __nla_validate_parse: 13 callbacks suppressed [ 993.276083][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10106'. [ 993.322663][T11163] tipc: Disabling bearer [ 993.341476][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.405310][T11180] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10108'. [ 993.523804][T11184] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10110'. [ 993.739525][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.783162][T11198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.830290][T11204] syzkaller1: entered promiscuous mode [ 993.839429][T11204] syzkaller1: entered allmulticast mode [ 993.895917][T11204] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 993.972377][T11211] netlink: 'syz.0.10119': attribute type 1 has an invalid length. [ 993.994836][T11211] netlink: 'syz.0.10119': attribute type 2 has an invalid length. [ 994.004429][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10119'. [ 994.051401][T11205] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 994.256041][T11224] xt_HMARK: proto mask must be zero with L3 mode [ 994.301749][T11224] xt_HMARK: proto mask must be zero with L3 mode [ 994.380840][ T5452] net_ratelimit: 1 callbacks suppressed [ 994.380893][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.513619][T11236] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 994.637112][ T5452] IPVS: starting estimator thread 0... [ 994.751745][T11246] IPVS: using max 36 ests per chain, 86400 per kthread [ 994.803980][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10130'. [ 994.939400][T11252] netlink: 'syz.6.10130': attribute type 5 has an invalid length. [ 994.962994][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10130'. [ 995.019921][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.243104][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10134'. [ 995.365562][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10139'. [ 995.418394][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.543782][T11287] bond2: option all_slaves_active: invalid value (222) [ 995.562377][T11295] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.572881][T11287] bond2 (unregistering): Released all slaves [ 995.668850][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.880784][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10145'. [ 995.890193][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10145'. [ 996.050836][T11322] erspan0: entered promiscuous mode [ 996.066592][T11318] syzkaller0: entered promiscuous mode [ 996.072384][T11318] syzkaller0: entered allmulticast mode [ 996.462397][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.543964][T11347] tipc: Enabling of bearer rejected, media not registered [ 996.690839][T11355] tipc: Invalid UDP bearer configuration [ 996.690902][T11355] tipc: Enabling of bearer rejected, failed to enable media [ 996.795278][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.946595][T11362] netlink: 'syz.1.10163': attribute type 1 has an invalid length. [ 997.088384][T11371] xt_bpf: check failed: parse error [ 997.281461][T11379] netlink: 'syz.1.10170': attribute type 10 has an invalid length. [ 997.300702][T11379] team0: Device ipvlan1 failed to register rx_handler [ 997.503910][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.915308][T11404] netlink: 'syz.5.10179': attribute type 1 has an invalid length. [ 997.937253][T11404] netlink: 'syz.5.10179': attribute type 1 has an invalid length. [ 997.972948][T11404] netlink: 'syz.5.10179': attribute type 1 has an invalid length. [ 997.982550][T11404] netlink: 'syz.5.10179': attribute type 2 has an invalid length. [ 998.434116][T11429] x_tables: duplicate underflow at hook 1 [ 998.454284][T11437] netlink: 'syz.0.10188': attribute type 1 has an invalid length. [ 998.507211][T11437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 998.521525][T11436] syzkaller0: entered promiscuous mode [ 998.529605][T11437] __nla_validate_parse: 7 callbacks suppressed [ 998.529628][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10188'. [ 998.539118][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.559489][T11436] syzkaller0: entered allmulticast mode [ 998.615438][T11445] IPVS: set_ctl: invalid protocol: 59 172.30.0.7:20000 [ 998.670297][T11443] bond3: (slave gretap1): making interface the new active one [ 998.727260][T11443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.785566][T11443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.795550][T11443] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 998.986088][T11458] netem: change failed [ 999.045406][T11462] netlink: 'syz.1.10196': attribute type 1 has an invalid length. [ 999.236312][T11470] IPv6: sit1: Disabled Multicast RS [ 999.452149][T11481] bond0: (slave gre0): Error: Device type is different from other slaves [ 999.580038][ T5452] net_ratelimit: 4 callbacks suppressed [ 999.580058][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.703653][T11493] openvswitch: netlink: Flow actions attr not present in new flow. [ 999.738295][T25682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.760620][T25682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.818709][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.903077][T11506] netlink: 'syz.6.10211': attribute type 4 has an invalid length. [ 1000.185393][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.215427][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.308060][T30200] Bluetooth: hci4: command 0x0405 tx timeout [ 1000.521536][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10219'. [ 1000.565425][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10219'. [ 1000.595759][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1000.619802][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.854196][T11545] netlink: 'syz.1.10222': attribute type 1 has an invalid length. [ 1000.922703][T25682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.949743][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.982839][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10226'. [ 1001.014374][T11553] bond2: (slave gretap5): making interface the new active one [ 1001.045283][T11553] bond2: (slave gretap5): Enslaving as an active interface with an up link [ 1001.085894][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10226'. [ 1001.086188][T11557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1001.402754][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10233'. [ 1001.486371][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10234'. [ 1001.753592][T11595] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1001.764160][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10238'. [ 1001.870674][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1001.883520][T11606] x_tables: duplicate underflow at hook 3 [ 1002.331953][T11622] bond4: entered promiscuous mode [ 1002.337090][T11622] bond4: entered allmulticast mode [ 1002.348346][T11622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1002.412835][T11629] macvlan2: entered promiscuous mode [ 1002.441444][T11629] macvlan2: entered allmulticast mode [ 1002.473348][T11629] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1002.481200][T11628] xt_NFQUEUE: number of total queues is 0 [ 1002.797002][T11617] lo speed is unknown, defaulting to 1000 [ 1002.828861][T11617] ip6_vti0 speed is unknown, defaulting to 1000 [ 1002.904709][T11655] veth0: entered promiscuous mode [ 1002.920203][T11654] veth0: left promiscuous mode [ 1002.926502][T11657] netlink: 'syz.2.10254': attribute type 1 has an invalid length. [ 1002.966882][T11657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.113785][T11657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.129570][T11657] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1003.162946][T11657] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1003.190070][T11673] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1003.230980][T11676] netlink: 'syz.5.10257': attribute type 21 has an invalid length. [ 1003.304365][T11669] veth5: entered promiscuous mode [ 1003.330876][T11669] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1003.360375][T11672] vlan0: entered allmulticast mode [ 1003.365697][T11672] bond2: entered allmulticast mode [ 1003.641825][T11684] __nla_validate_parse: 9 callbacks suppressed [ 1003.641848][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1003.913813][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1003.935683][T11700] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1004.593093][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1004.625788][T11725] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1004.670657][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1004.680449][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1004.779837][ T5456] net_ratelimit: 14 callbacks suppressed [ 1004.779860][ T5456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.839736][T11733] veth3: entered promiscuous mode [ 1004.907017][T11738] netlink: 'syz.2.10272': attribute type 20 has an invalid length. [ 1004.928390][T11743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.936999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.946415][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10272'. [ 1004.997020][T14100] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.027189][T14100] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.088490][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10274'. [ 1005.133990][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1005.153639][T14100] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.218833][T14100] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.260226][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.275634][T11758] bond0: (slave gre0): Error: Device type is different from other slaves [ 1005.312088][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1005.326586][T11751] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1005.492113][T14100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.509183][T14100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.586516][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10282'. [ 1005.738860][T11785] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1005.818428][ T5452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.947878][T11776] xt_TCPMSS: Only works on TCP SYN packets [ 1005.956177][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.040277][ T30] audit: type=1800 audit(1770200791.264:21): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10286" name="cgroup.controllers" dev="tmpfs" ino=269 res=0 errno=0 [ 1006.661045][ T9988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.587779][T11865] netlink: 'syz.0.10305': attribute type 2 has an invalid length. [ 1007.710534][T11875] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1007.740353][T11874] netlink: 'syz.2.10307': attribute type 5 has an invalid length. [ 1008.580978][T11911] IPVS: Scheduler module ip_vs_sip not found [ 1008.587986][T11929] netlink: 'syz.1.10322': attribute type 11 has an invalid length. [ 1008.605723][T11929] netlink: 'syz.1.10322': attribute type 11 has an invalid length. [ 1008.649041][T11932] netlink: 'syz.5.10325': attribute type 12 has an invalid length. [ 1008.666248][T11932] __nla_validate_parse: 13 callbacks suppressed [ 1008.666268][T11932] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10325'. [ 1008.758084][T11938] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1009.101953][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10329'. [ 1009.235665][T11950] lo speed is unknown, defaulting to 1000 [ 1009.289308][T11950] ip6_vti0 speed is unknown, defaulting to 1000 [ 1009.562423][T11973] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10334'. [ 1009.604887][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10334'. [ 1009.628301][T11973] netlink: 'syz.5.10334': attribute type 4 has an invalid length. [ 1009.723731][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10336'. [ 1009.872886][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10337'. [ 1009.904452][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10338'. [ 1009.979513][ T5446] net_ratelimit: 12 callbacks suppressed [ 1009.979535][ T5446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.981594][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10336'. [ 1010.043003][ T9988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.056961][ T9988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.531425][T12008] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10344'. [ 1010.558803][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10343'. [ 1010.599615][T12011] netlink: 'syz.5.10347': attribute type 1 has an invalid length. [ 1010.754772][T12028] netlink: 'syz.0.10348': attribute type 1 has an invalid length. [ 1010.798656][T12029] tipc: Started in network mode [ 1010.816192][T12029] tipc: Node identity ac14140f, cluster identity 4711 [ 1010.843705][T12029] tipc: New replicast peer: 255.255.255.255 [ 1010.862852][T12029] tipc: Enabled bearer , priority 10 [ 1010.949080][T12023] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1010.963102][T12023] bond5 (unregistering): Released all slaves [ 1010.984000][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.020948][ T5447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.039041][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.068342][T12028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.080237][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.108269][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.130151][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.141413][T12040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.190619][T12033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.241707][T12033] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1011.283612][T12033] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1011.386641][T12017] veth5: entered promiscuous mode [ 1011.400779][T12017] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1011.429510][T12042] bond5: entered promiscuous mode [ 1011.435015][T12042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.484049][T12052] bridge0: entered allmulticast mode [ 1011.616507][T12058] syzkaller1: entered allmulticast mode [ 1011.775543][T12079] syzkaller0: entered promiscuous mode [ 1011.798237][T12079] syzkaller0: entered allmulticast mode [ 1011.980585][ T5447] tipc: Node number set to 2886997007 [ 1012.031579][T12094] netlink: 'syz.2.10365': attribute type 1 has an invalid length. [ 1012.193947][T12101] bond3: (slave gretap3): making interface the new active one [ 1012.214783][T12101] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 1012.265956][T12105] erspan0: entered allmulticast mode [ 1012.766744][T12137] tipc: Trying to set illegal importance in message [ 1012.774034][T12132] bond4: entered promiscuous mode [ 1012.774064][T12132] bond4: entered allmulticast mode [ 1012.774498][T12132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1013.183616][T12153] vlan2: entered allmulticast mode [ 1013.190541][T12153] geneve1: entered allmulticast mode [ 1013.214962][T12155] netlink: 'syz.6.10387': attribute type 3 has an invalid length. [ 1013.893231][T12188] tipc: Enabled bearer , priority 0 [ 1013.930366][T12188] syzkaller0: entered promiscuous mode [ 1013.948225][T12188] syzkaller0: entered allmulticast mode [ 1013.979261][T12192] __nla_validate_parse: 11 callbacks suppressed [ 1013.979284][T12192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10397'. [ 1014.031654][T12188] tipc: Resetting bearer [ 1014.047693][T12192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10397'. [ 1014.077211][T12192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10397'. [ 1014.098399][T12187] tipc: Resetting bearer [ 1014.171958][T12187] tipc: Disabling bearer [ 1014.602060][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10395'. [ 1014.689068][T12207] geneve0: entered promiscuous mode [ 1015.106844][T14696] net_ratelimit: 73 callbacks suppressed [ 1015.106869][T14696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.178420][ T5447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.259224][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10406'. [ 1015.611001][T12246] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1015.684423][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10410'. [ 1015.698736][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.707169][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.747733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.823165][T12257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.832667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.218395][ T5447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.334333][T12299] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10425'. [ 1016.476954][T12303] netlink: 'syz.0.10426': attribute type 1 has an invalid length. [ 1016.486110][T12303] netlink: 'syz.0.10426': attribute type 2 has an invalid length. [ 1016.545304][T12309] netlink: 'syz.5.10427': attribute type 13 has an invalid length. [ 1016.580318][T12309] netlink: 'syz.5.10427': attribute type 17 has an invalid length. [ 1016.591255][T12307] syzkaller0: entered promiscuous mode [ 1016.596870][T12307] syzkaller0: entered allmulticast mode [ 1016.776201][T12309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1016.818252][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10432'. [ 1016.860982][T25682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.236575][T12343] tipc: Enabled bearer , priority 0 [ 1017.241650][T12346] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10436'. [ 1017.269969][T12343] syzkaller0: entered promiscuous mode [ 1017.275632][T12343] syzkaller0: entered allmulticast mode [ 1017.293310][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10439'. [ 1017.562836][T12361] netlink: 'syz.6.10441': attribute type 1 has an invalid length. [ 1017.672771][T12361] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1017.791802][T12373] x_tables: unsorted underflow at hook 3 [ 1017.840527][T12373] netlink: 'syz.0.10445': attribute type 1 has an invalid length. [ 1018.118185][T12380] bond6: (slave ip6gretap1): making interface the new active one [ 1018.126875][T12380] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1018.155828][T12343] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1018.256122][T12399] netlink: 'syz.6.10449': attribute type 33 has an invalid length. [ 1018.298846][T12343] tipc: Resetting bearer [ 1018.327412][T12342] tipc: Resetting bearer [ 1018.370093][T12342] tipc: Disabling bearer [ 1018.435282][T12399] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1018.474759][T12399] bond1 (unregistering): Released all slaves [ 1018.541016][T12403] netlink: 'syz.1.10452': attribute type 4 has an invalid length. [ 1018.869632][T12434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.194247][T12455] __nla_validate_parse: 9 callbacks suppressed [ 1019.194267][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10467'. [ 1019.214328][T12457] ieee802154 phy1 wpan1: encryption failed: -22 [ 1019.219595][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10468'. [ 1019.285415][T12460] vlan3: entered promiscuous mode [ 1019.291064][T12460] vlan3: entered allmulticast mode [ 1019.296248][T12460] hsr_slave_1: entered allmulticast mode [ 1019.357813][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10469'. [ 1019.441404][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10471'. [ 1019.478250][T12458] xt_CT: No such helper "syz1" [ 1019.902079][T12492] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10475'. [ 1020.020528][T12501] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10475'. [ 1020.106575][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1020.163271][T12487] netlink: 'syz.2.10474': attribute type 14 has an invalid length. [ 1020.221341][T12487] netlink: 'syz.2.10474': attribute type 13 has an invalid length. [ 1020.271623][T14100] net_ratelimit: 11 callbacks suppressed [ 1020.271646][T14100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.309893][T14100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.400677][ T5447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.492840][T12516] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10480'. [ 1020.870584][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10487'. [ 1020.920744][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10487'. [ 1021.072230][T12549] syzkaller0: entered promiscuous mode [ 1021.089211][T12549] syzkaller0: entered allmulticast mode [ 1021.190485][T14688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.249538][T12561] gre0: entered promiscuous mode [ 1021.267067][T12561] gre0: entered allmulticast mode [ 1021.419986][ T5448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.468448][T14096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.495774][T14096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.643355][T12583] validate_nla: 1 callbacks suppressed [ 1021.643377][T12583] netlink: 'syz.2.10500': attribute type 1 has an invalid length. [ 1021.785846][T12583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1021.826315][T12592] vlan0: entered promiscuous mode [ 1021.832479][T12592] bond5: entered promiscuous mode [ 1021.846072][T12592] vlan0: entered allmulticast mode [ 1021.863172][T12592] bond5: entered allmulticast mode [ 1021.881686][T12604] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 1021.956945][T12592] netlink: 'syz.2.10500': attribute type 1 has an invalid length. [ 1022.002574][T12583] bond5: (slave bridge8): making interface the new active one [ 1022.050757][T12583] bridge8: entered promiscuous mode [ 1022.051300][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.056253][T12583] bridge8: entered allmulticast mode [ 1022.066272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.093609][T12583] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1022.122575][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.827239][T12656] gretap0: entered promiscuous mode [ 1022.974346][T12655] team0: Port device team_slave_0 removed [ 1023.206836][T12677] netlink: 'syz.1.10524': attribute type 2 has an invalid length. [ 1023.976889][T12722] netlink: 'syz.5.10540': attribute type 1 has an invalid length. [ 1024.036949][T12730] netlink: 'syz.6.10541': attribute type 21 has an invalid length. [ 1024.094526][T12730] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1024.108636][T12730] bond1 (unregistering): Released all slaves [ 1024.359185][T12747] netlink: 'syz.2.10548': attribute type 10 has an invalid length. [ 1024.441711][T12747] team0: Port device dummy0 added [ 1024.596935][T12760] __nla_validate_parse: 13 callbacks suppressed [ 1024.596956][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10550'. [ 1024.779220][T12768] syz_tun: entered allmulticast mode [ 1024.828620][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10553'. [ 1024.901847][T12777] netlink: 'syz.5.10556': attribute type 21 has an invalid length. [ 1024.923799][T12768] syz_tun (unregistering): left allmulticast mode [ 1025.069326][T12787] "syz.5.10556" (12787) uses obsolete ecb(arc4) skcipher [ 1025.155327][T12777] syzkaller0: entered promiscuous mode [ 1025.170020][T12777] syzkaller0: entered allmulticast mode [ 1025.396552][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10559'. [ 1025.579518][ T5448] net_ratelimit: 14 callbacks suppressed [ 1025.579540][ T5448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.626652][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10566'. [ 1025.662377][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10566'. [ 1025.900956][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 1025.932587][T12827] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10570'. [ 1025.952984][T12835] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10573'. [ 1025.958659][T12828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.991466][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.047905][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.210101][T12843] netlink: 'syz.2.10575': attribute type 3 has an invalid length. [ 1026.233092][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10575'. [ 1026.272232][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10577'. [ 1026.359282][T12857] openvswitch: netlink: IP tunnel dst address not specified [ 1026.377666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.618305][ T5447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.659475][T12871] bridge0: port 3(ipvlan2) entered blocking state [ 1026.666329][T12871] bridge0: port 3(ipvlan2) entered disabled state [ 1026.674834][T12871] ipvlan2: entered allmulticast mode [ 1026.681083][T12871] bridge0: entered allmulticast mode [ 1026.735165][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10588'. [ 1026.737256][T12871] ipvlan2: left allmulticast mode [ 1026.754505][T12871] bridge0: left allmulticast mode [ 1026.832256][T12885] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1027.030857][T12895] C: renamed from lo (while UP) [ 1027.054039][T12895] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1027.123740][T12895] netlink: 'syz.6.10591': attribute type 3 has an invalid length. [ 1027.220454][T14096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.230339][T14096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.285412][T12900] netlink: 'syz.1.10593': attribute type 1 has an invalid length. [ 1027.726910][T12927] lo: left promiscuous mode [ 1027.912647][T12927] geneve2: left promiscuous mode [ 1027.943841][T12927] gretap1: left promiscuous mode [ 1027.951473][T12927] gretap1: left allmulticast mode [ 1027.964510][T12927] gretap2: left promiscuous mode [ 1027.972375][T12927] gretap2: left allmulticast mode [ 1027.998017][T12927] veth3: left promiscuous mode [ 1028.043197][T14107] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.055488][T14107] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.069900][T12958] netlink: 'syz.0.10611': attribute type 6 has an invalid length. [ 1028.072901][T14107] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.089674][T14107] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.103094][T14107] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.115519][T14107] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.190708][T14107] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.194083][T12958] netlink: 'syz.0.10611': attribute type 6 has an invalid length. [ 1028.219990][T14107] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.316795][T12962] vlan2: entered allmulticast mode [ 1028.349244][T12962] mac80211_hwsim hwsim122 wlan0: entered allmulticast mode [ 1029.556872][T13029] tipc: Enabling of bearer rejected, failed to enable media [ 1029.865166][T13031] __nla_validate_parse: 5 callbacks suppressed [ 1029.865200][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1030.087896][T14696] IPVS: starting estimator thread 0... [ 1030.198762][T13056] IPVS: using max 24 ests per chain, 57600 per kthread [ 1030.341520][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10632'. [ 1030.464407][T13075] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10641'. [ 1030.534268][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10644'. [ 1030.826952][T13080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.870682][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1030.890741][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1030.919156][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1031.002653][T13099] netlink: 'syz.0.10650': attribute type 1 has an invalid length. [ 1031.026577][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10651'. [ 1031.037148][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10651'. [ 1031.050681][T13103] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10652'. [ 1031.104476][T13099] bond7: entered promiscuous mode [ 1031.115924][T13107] netlink: 'syz.5.10653': attribute type 5 has an invalid length. [ 1031.122666][T13099] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1031.156448][T13107] netlink: 'syz.5.10653': attribute type 5 has an invalid length. [ 1031.175951][T13106] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1031.233338][T13106] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1031.252718][T13106] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1031.647750][T13131] vlan1: entered promiscuous mode [ 1031.654973][T13131] bridge0: entered promiscuous mode [ 1031.866454][T13140] vcan0: tx address claim with dest, not broadcast [ 1031.880018][T13142] netlink: 'syz.6.10663': attribute type 1 has an invalid length. [ 1031.951257][T13142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1032.046150][T13149] vlan4: entered promiscuous mode [ 1032.064893][T13149] bond2: entered promiscuous mode [ 1032.077912][T13149] vlan4: entered allmulticast mode [ 1032.083089][T13149] bond2: entered allmulticast mode [ 1032.102811][T13155] netlink: 'syz.1.10666': attribute type 1 has an invalid length. [ 1032.171036][T13142] bond2: (slave bridge3): making interface the new active one [ 1032.197186][T13142] bridge3: entered promiscuous mode [ 1032.215091][T13142] bridge3: entered allmulticast mode [ 1032.242903][T13142] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1032.283447][T13163] net_ratelimit: 7 callbacks suppressed [ 1032.283469][T13163] openvswitch: netlink: Key type 15366 is out of range max 32 [ 1032.335052][T13161] sch_fq: defrate 0 ignored. [ 1032.418803][T13166] netlink: 'syz.6.10670': attribute type 1 has an invalid length. [ 1032.556281][T13166] bond3: (slave geneve3): making interface the new active one [ 1032.596404][T13166] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1032.612218][ T36] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1032.646237][ T36] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1032.691212][ T36] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1032.719272][ T36] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1032.956164][ T5447] IPVS: starting estimator thread 0... [ 1032.961493][T13192] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1033.079244][T13199] IPVS: using max 27 ests per chain, 64800 per kthread [ 1033.476400][T13222] netlink: 'syz.6.10686': attribute type 10 has an invalid length. [ 1033.523305][T13220] lo speed is unknown, defaulting to 1000 [ 1033.573049][T13222] team0: Port device dummy0 added [ 1033.590626][T13220] ip6_vti0 speed is unknown, defaulting to 1000 [ 1033.848457][T13232] lo speed is unknown, defaulting to 1000 [ 1034.452291][T13232] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.913940][T13266] netlink: 'syz.5.10701': attribute type 2 has an invalid length. [ 1034.935944][T13266] __nla_validate_parse: 10 callbacks suppressed [ 1034.935965][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10701'. [ 1034.945311][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10703'. [ 1034.959038][T13266] netlink: 'syz.5.10701': attribute type 2 has an invalid length. [ 1034.972158][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10701'. [ 1035.020531][T13266] netlink: 'syz.5.10701': attribute type 1 has an invalid length. [ 1035.080788][T13275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10704'. [ 1035.101996][T13266] IPv6: sit2: Disabled Multicast RS [ 1035.118637][T13266] sit2: entered allmulticast mode [ 1035.457650][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10707'. [ 1035.651038][T13294] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10709'. [ 1036.070565][T13308] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10713'. [ 1036.114412][T13304] bond3: entered promiscuous mode [ 1036.128723][T13304] bond3: entered allmulticast mode [ 1036.137249][T13304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1036.243839][T13315] netlink: 'syz.2.10716': attribute type 1 has an invalid length. [ 1036.316612][T13315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1036.417199][T13320] syzkaller1: entered promiscuous mode [ 1036.433442][T13320] syzkaller1: entered allmulticast mode [ 1036.460788][T13322] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10718'. [ 1036.473283][T13327] xt_policy: output policy not valid in PREROUTING and INPUT [ 1036.476405][T13322] netlink: Conntrack attr has 3 unknown bytes [ 1036.512802][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10718'. [ 1036.720078][T13334] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1036.735695][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10725'. [ 1036.760865][T13334] bond8: entered promiscuous mode [ 1036.766059][T13334] bond8: entered allmulticast mode [ 1036.800451][T13334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1036.802417][T13347] netlink: 'syz.6.10726': attribute type 2 has an invalid length. [ 1036.960820][T13343] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1037.086922][T13367] netlink: 'syz.1.10732': attribute type 1 has an invalid length. [ 1037.144594][T13369] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1037.498272][T13393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.522771][T13394] netlink: 'syz.1.10740': attribute type 1 has an invalid length. [ 1037.547873][T13401] netlink: 'syz.5.10739': attribute type 10 has an invalid length. [ 1037.685274][T13393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.874136][T13401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1037.942612][T13414] ieee802154 phy1 wpan1: encryption failed: -22 [ 1037.954520][T13414] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.356311][T13438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.795600][T13466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.881607][T13469] syzkaller0: entered promiscuous mode [ 1038.892649][T13469] syzkaller0: entered allmulticast mode [ 1038.919156][T13469] tipc: Enabled bearer , priority 0 [ 1039.623028][T13460] tipc: Resetting bearer [ 1039.746838][T13460] tipc: Disabling bearer [ 1039.826527][T13520] tipc: Enabling of bearer rejected, already enabled [ 1040.004741][T13536] __nla_validate_parse: 12 callbacks suppressed [ 1040.004761][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10784'. [ 1040.050262][T13537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10783'. [ 1040.063708][T13536] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10784'. [ 1040.107911][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1040.137225][T13543] netlink: 256 bytes leftover after parsing attributes in process `syz.6.10786'. [ 1040.286633][T13553] netlink: 'syz.0.10788': attribute type 29 has an invalid length. [ 1040.322722][T13558] sctp: [Deprecated]: syz.6.10791 (pid 13558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1040.322722][T13558] Use struct sctp_sack_info instead [ 1040.329204][T13553] netlink: 'syz.0.10788': attribute type 29 has an invalid length. [ 1040.365468][T13552] netlink: 'syz.5.10789': attribute type 1 has an invalid length. [ 1040.500709][T13568] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1040.541745][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1040.578576][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1040.624335][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1040.652772][T13576] erspan0: entered promiscuous mode [ 1040.689957][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1040.765604][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1040.802600][T13582] netlink: 'syz.0.10799': attribute type 2 has an invalid length. [ 1040.839878][T13582] netlink: 'syz.0.10799': attribute type 8 has an invalid length. [ 1040.898731][T13585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.018683][T13594] netlink: 'syz.2.10803': attribute type 2 has an invalid length. [ 1041.026847][T13594] netlink: 'syz.2.10803': attribute type 8 has an invalid length. [ 1041.070563][T13596] netlink: 'syz.2.10803': attribute type 2 has an invalid length. [ 1041.258708][T30200] Bluetooth: hci0: command 0x0401 tx timeout [ 1042.547816][T13670] validate_nla: 3 callbacks suppressed [ 1042.547840][T13670] netlink: 'syz.0.10826': attribute type 1 has an invalid length. [ 1042.567601][T13672] netlink: 'syz.1.10825': attribute type 4 has an invalid length. [ 1042.620168][T13676] netlink: 'syz.1.10825': attribute type 4 has an invalid length. [ 1042.640847][T13672] netlink: 'syz.1.10825': attribute type 4 has an invalid length. [ 1042.662755][T13677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.120868][T13700] IPv6: sit3: Disabled Multicast RS [ 1043.402367][T13715] IPv6: Can't replace route, no match found [ 1043.538630][T13720] syzkaller0: entered promiscuous mode [ 1043.544262][T13720] syzkaller0: entered allmulticast mode [ 1043.777201][T13733] netlink: 'syz.6.10844': attribute type 4 has an invalid length. [ 1044.078191][T13754] netlink: 'syz.0.10849': attribute type 1 has an invalid length. [ 1044.685366][T13791] netlink: 'syz.6.10858': attribute type 5 has an invalid length. [ 1044.725232][T13791] geneve4: entered promiscuous mode [ 1044.731149][T13791] geneve4: entered allmulticast mode [ 1044.750678][T14096] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1044.788412][ T49] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1044.827057][ T49] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1044.849854][ T49] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1044.881538][T13798] lo speed is unknown, defaulting to 1000 [ 1044.890094][T13798] ip6_vti0 speed is unknown, defaulting to 1000 [ 1045.142963][T13817] __nla_validate_parse: 34 callbacks suppressed [ 1045.142988][T13817] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.10864'. [ 1045.347559][T13826] netlink: 'syz.0.10867': attribute type 21 has an invalid length. [ 1045.407429][T13826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10867'. [ 1045.484559][T13832] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1045.534313][T13832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10869'. [ 1045.651552][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10873'. [ 1045.784693][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10873'. [ 1045.994487][T13859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10880'. [ 1046.303959][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10883'. [ 1046.533710][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1046.544719][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1046.570070][T13877] bridge11: entered promiscuous mode [ 1046.575433][T13877] bridge11: entered allmulticast mode [ 1046.585240][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1046.632436][T13878] bridge12: entered promiscuous mode [ 1046.639072][T13878] bridge12: entered allmulticast mode [ 1046.645467][T13881] xt_hashlimit: size too large, truncated to 1048576 [ 1047.403756][T13914] netlink: 'syz.0.10897': attribute type 1 has an invalid length. [ 1047.440572][T13913] openvswitch: netlink: IP tunnel TTL not specified. [ 1047.713243][T13933] tipc: Failed to remove unknown binding: 66,1,1/2886997162:58050705/58050707 [ 1047.735419][T13933] tipc: Failed to remove unknown binding: 66,1,1/2886997162:58050705/58050707 [ 1047.786913][T13933] bond5: Invalid ad_actor_system MAC address. [ 1047.795842][T13933] bond5: option ad_actor_system: invalid value (1) [ 1047.806945][T13933] bond5 (unregistering): Released all slaves [ 1048.016379][T13946] tipc: Enabling of bearer rejected, already enabled [ 1048.200599][T13956] bond5: option all_slaves_active: invalid value (222) [ 1048.211495][T13956] bond5 (unregistering): Released all slaves [ 1048.499659][T13975] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1048.540154][T13979] netlink: 'syz.5.10922': attribute type 12 has an invalid length. [ 1048.554779][T13979] netlink: 'syz.5.10922': attribute type 11 has an invalid length. [ 1048.826654][T13987] syzkaller0: entered promiscuous mode [ 1048.848740][T13987] syzkaller0: entered allmulticast mode [ 1048.876924][T13995] syzkaller0: entered promiscuous mode [ 1048.886690][T14003] siw: device registration error -23 [ 1048.906427][T13995] syzkaller0: entered allmulticast mode [ 1052.085148][T14037] __nla_validate_parse: 12 callbacks suppressed [ 1052.085164][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10939'. [ 1052.213537][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10944'. [ 1052.515088][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1052.543570][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1052.571563][T14061] netlink: 'syz.0.10947': attribute type 1 has an invalid length. [ 1052.581037][T14061] netlink: 'syz.0.10947': attribute type 2 has an invalid length. [ 1052.606454][T14061] netlink: 'syz.0.10947': attribute type 1 has an invalid length. [ 1052.626341][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1052.648243][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10951'. [ 1052.911011][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10953'. [ 1053.003544][T14090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10955'. [ 1053.066165][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10956'. [ 1053.075574][T14094] netlink: 'syz.1.10956': attribute type 7 has an invalid length. [ 1053.084573][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10956'. [ 1053.102786][T14094] erspan0: entered promiscuous mode [ 1053.112515][T14094] gretap0: entered promiscuous mode [ 1053.120897][T14094] debugfs: 'hsr1' already exists in 'hsr' [ 1053.126734][T14094] Cannot create hsr debugfs directory [ 1053.132771][T14094] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1053.143491][T14094] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1054.543724][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.046680][T14031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1055.834692][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.864977][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.894905][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.920655][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.432917][T14187] openvswitch: netlink: IP tunnel dst address not specified [ 1057.146480][T14204] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1057.564763][T14233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1057.574641][T14233] syzkaller1: Linktype set failed because interface is up [ 1057.590108][T14696] syzkaller1: tun_net_xmit 90 [ 1057.886314][T14257] __nla_validate_parse: 17 callbacks suppressed [ 1057.886336][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1057.920339][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1057.930053][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1057.953326][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.000592][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.010988][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.022275][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.033915][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.046159][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1058.056549][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1059.560916][T14340] lo speed is unknown, defaulting to 1000 [ 1059.571506][T14353] SET target dimension over the limit! [ 1059.599136][T14340] ip6_vti0 speed is unknown, defaulting to 1000 [ 1060.263280][T14388] netlink: 'syz.0.11039': attribute type 7 has an invalid length. [ 1060.283948][T14388] netlink: 'syz.0.11039': attribute type 7 has an invalid length. [ 1060.772498][T14410] geneve2: entered promiscuous mode [ 1061.096854][T14424] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1061.315001][T14431] syzkaller0: entered promiscuous mode [ 1061.321037][T14431] syzkaller0: entered allmulticast mode [ 1062.149843][T14107] tipc: Subscription rejected, illegal request [ 1064.734973][T14489] netlink: set zone limit has 4 unknown bytes [ 1064.750326][T14497] __nla_validate_parse: 45 callbacks suppressed [ 1064.750350][T14497] netlink: 328 bytes leftover after parsing attributes in process `syz.2.11072'. [ 1064.789200][T14497] nbd: must specify at least one socket [ 1064.876622][T14503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11073'. [ 1064.944322][T14510] netlink: 'syz.2.11076': attribute type 26 has an invalid length. [ 1064.952982][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11076'. [ 1065.101998][T14518] syzkaller0: entered promiscuous mode [ 1065.110735][T14518] syzkaller0: entered allmulticast mode [ 1065.233187][T14528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.244813][T14528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.450415][T14534] netlink: 'syz.1.11084': attribute type 4 has an invalid length. [ 1065.478397][T14536] netlink: 'syz.1.11084': attribute type 4 has an invalid length. [ 1065.600625][T14545] netlink: 'syz.6.11086': attribute type 4 has an invalid length. [ 1065.632713][T14545] netlink: 'syz.6.11086': attribute type 4 has an invalid length. [ 1065.740241][T14554] netlink: 'syz.1.11090': attribute type 1 has an invalid length. [ 1065.794603][T14554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.822731][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11090'. [ 1065.971709][T14565] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11094'. [ 1066.166038][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11098'. [ 1066.178148][T14571] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11095'. [ 1066.326015][T14568] ip6gre1: entered allmulticast mode [ 1066.580453][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11103'. [ 1066.661863][T14603] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11104'. [ 1066.885664][T14618] netlink: 'syz.5.11108': attribute type 178 has an invalid length. [ 1066.904664][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11109'. [ 1067.129913][T14626] veth7: entered promiscuous mode [ 1067.155024][T14626] veth7: entered allmulticast mode [ 1067.370574][T14642] FAULT_INJECTION: forcing a failure. [ 1067.370574][T14642] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.385368][T14642] CPU: 0 UID: 0 PID: 14642 Comm: syz.2.11117 Not tainted syzkaller #0 PREEMPT(full) [ 1067.385397][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1067.385409][T14642] Call Trace: [ 1067.385418][T14642] [ 1067.385427][T14642] dump_stack_lvl+0xe8/0x150 [ 1067.385462][T14642] should_fail_ex+0x412/0x560 [ 1067.385493][T14642] should_failslab+0xa8/0x100 [ 1067.385518][T14642] __kmalloc_noprof+0xde/0x7e0 [ 1067.385538][T14642] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1067.385573][T14642] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1067.385608][T14642] genl_family_rcv_msg_doit+0xd9/0x330 [ 1067.385643][T14642] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1067.385678][T14642] ? apparmor_capable+0x137/0x1a0 [ 1067.385720][T14642] ? bpf_lsm_capable+0x9/0x20 [ 1067.385745][T14642] ? security_capable+0x7e/0x2c0 [ 1067.385775][T14642] genl_rcv_msg+0x61c/0x7a0 [ 1067.385806][T14642] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1067.385829][T14642] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1067.385854][T14642] ? __pfx_nl80211_get_key+0x10/0x10 [ 1067.385878][T14642] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1067.385908][T14642] ? __pfx_ref_tracker_free+0x10/0x10 [ 1067.385941][T14642] netlink_rcv_skb+0x232/0x4b0 [ 1067.385963][T14642] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1067.385990][T14642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1067.386007][T14642] ? genl_rcv+0x19/0x40 [ 1067.386051][T14642] ? down_read+0x272/0x2e0 [ 1067.386072][T14642] ? genl_rcv+0xd/0x40 [ 1067.386099][T14642] genl_rcv+0x28/0x40 [ 1067.386121][T14642] netlink_unicast+0x80f/0x9b0 [ 1067.386160][T14642] ? __pfx_netlink_unicast+0x10/0x10 [ 1067.386187][T14642] ? __alloc_skb+0x193/0x390 [ 1067.386211][T14642] ? netlink_sendmsg+0x650/0xb40 [ 1067.386230][T14642] ? skb_put+0x11b/0x210 [ 1067.386258][T14642] netlink_sendmsg+0x813/0xb40 [ 1067.386290][T14642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1067.386316][T14642] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1067.386341][T14642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1067.386364][T14642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1067.386384][T14642] ____sys_sendmsg+0xa68/0xad0 [ 1067.386410][T14642] ? __might_fault+0xaf/0x130 [ 1067.386446][T14642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1067.386483][T14642] ? import_iovec+0x73/0xa0 [ 1067.386516][T14642] ___sys_sendmsg+0x2a5/0x360 [ 1067.386540][T14642] ? __lock_acquire+0x6b5/0x2cf0 [ 1067.386572][T14642] ? __pfx____sys_sendmsg+0x10/0x10 [ 1067.386639][T14642] ? __fget_files+0x2a/0x420 [ 1067.386660][T14642] ? __fget_files+0x3a0/0x420 [ 1067.386702][T14642] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1067.386731][T14642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1067.386769][T14642] ? __pfx_ksys_write+0x10/0x10 [ 1067.386812][T14642] do_syscall_64+0xe2/0xf80 [ 1067.386833][T14642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.386851][T14642] ? trace_irq_disable+0x37/0x100 [ 1067.386869][T14642] ? clear_bhb_loop+0x60/0xb0 [ 1067.386893][T14642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.386911][T14642] RIP: 0033:0x7f42e3d9aeb9 [ 1067.386931][T14642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.386947][T14642] RSP: 002b:00007f42e4c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.386970][T14642] RAX: ffffffffffffffda RBX: 00007f42e4015fa0 RCX: 00007f42e3d9aeb9 [ 1067.386985][T14642] RDX: 0000000000008000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1067.386998][T14642] RBP: 00007f42e4c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.387011][T14642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.387023][T14642] R13: 00007f42e4016038 R14: 00007f42e4015fa0 R15: 00007ffc4543bce8 [ 1067.387058][T14642] [ 1067.432339][T14638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1068.839782][T14694] bond6 (unregistering): Released all slaves [ 1069.100827][T14712] tap0: tun_chr_ioctl cmd 2148553947 [ 1069.810855][T14761] __nla_validate_parse: 11 callbacks suppressed [ 1069.810879][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11156'. [ 1069.834737][T14759] netlink: 'syz.5.11155': attribute type 1 has an invalid length. [ 1069.845196][T14761] netlink: 'syz.1.11156': attribute type 1 has an invalid length. [ 1069.856447][T14761] netlink: 'syz.1.11156': attribute type 1 has an invalid length. [ 1069.865242][T14761] netlink: 'syz.1.11156': attribute type 2 has an invalid length. [ 1069.874092][T14761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11156'. [ 1069.903277][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11155'. [ 1069.990215][T14759] bond6: entered promiscuous mode [ 1070.039400][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11155'. [ 1070.077636][T14759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1070.268935][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11157'. [ 1070.284391][T14772] bond6: (slave bridge4): making interface the new active one [ 1070.318148][T14772] bridge4: entered promiscuous mode [ 1070.353346][T14772] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1070.461532][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11160'. [ 1070.515874][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11160'. [ 1070.606994][T14788] : entered promiscuous mode [ 1070.711040][T14774] syzkaller0: entered promiscuous mode [ 1070.726262][T14774] syzkaller0: entered allmulticast mode [ 1070.980752][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11164'. [ 1074.849290][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.960256][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11175'. [ 1074.972974][T14848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11176'. [ 1074.992628][T14842] netlink: 'syz.1.11175': attribute type 5 has an invalid length. [ 1075.011629][T14842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11175'. [ 1075.031978][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11177'. [ 1075.081542][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11178'. [ 1075.099530][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11177'. [ 1075.461740][T14871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1075.482687][T14871] team0: Device macvlan2 is already an upper device of the team interface [ 1075.674588][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11191'. [ 1075.717907][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11191'. [ 1075.897006][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11194'. [ 1075.967190][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11194'. [ 1076.127127][T14918] netlink: 'syz.0.11198': attribute type 1 has an invalid length. [ 1076.139508][T14917] netlink: 'syz.5.11201': attribute type 2 has an invalid length. [ 1076.371121][T14927] netlink: 'syz.5.11205': attribute type 1 has an invalid length. [ 1076.400077][T14927] netlink: 'syz.5.11205': attribute type 2 has an invalid length. [ 1077.173407][T14972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1077.226715][T14974] tipc: Enabled bearer , priority 0 [ 1077.234416][T14972] netlink: 'syz.6.11217': attribute type 10 has an invalid length. [ 1077.320820][T14974] syzkaller0: entered promiscuous mode [ 1077.326514][T14974] syzkaller0: entered allmulticast mode [ 1077.334218][T14974] tipc: Resetting bearer [ 1077.464003][T14990] netlink: 'syz.5.11223': attribute type 10 has an invalid length. [ 1077.521440][T14972] team0: Port device team_slave_0 removed [ 1077.536109][T14973] tipc: Resetting bearer [ 1077.595300][T14994] netlink: 'syz.1.11222': attribute type 64 has an invalid length. [ 1080.550868][T14973] tipc: Disabling bearer [ 1080.568110][T14990] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1080.647809][T15006] tipc: Enabled bearer , priority 0 [ 1080.681813][T15007] syzkaller0: entered promiscuous mode [ 1080.695166][T15007] syzkaller0: entered allmulticast mode [ 1080.710977][ T5448] tipc: Node number set to 3255713651 [ 1080.718072][T15017] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1080.845944][T15026] __nla_validate_parse: 10 callbacks suppressed [ 1080.845968][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11230'. [ 1080.894454][T15021] lo speed is unknown, defaulting to 1000 [ 1080.919436][T15015] tipc: Resetting bearer [ 1080.971998][T15015] tipc: Disabling bearer [ 1080.990193][T15021] ip6_vti0 speed is unknown, defaulting to 1000 [ 1081.043664][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11230'. [ 1082.012624][T15065] tipc: Enabled bearer , priority 0 [ 1082.181683][T15065] syzkaller0: entered promiscuous mode [ 1082.222619][T15065] syzkaller0: entered allmulticast mode [ 1082.258180][T15065] tipc: Resetting bearer [ 1082.398381][T15064] tipc: Resetting bearer [ 1085.688737][T15064] tipc: Disabling bearer [ 1085.803103][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11249'. [ 1085.839674][T15152] : entered promiscuous mode [ 1086.288454][T15174] IPv6: NLM_F_CREATE should be specified when creating new route [ 1086.999845][T15220] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1087.062438][T15222] x_tables: duplicate underflow at hook 1 [ 1087.174613][T15224] netlink: 'syz.1.11272': attribute type 1 has an invalid length. [ 1087.195962][T15224] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.11272'. [ 1087.355766][T15236] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1087.368832][T15236] bond7 (unregistering): Released all slaves [ 1087.826578][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11284'. [ 1087.843172][T15261] 8021q: VLANs not supported on wlan0 [ 1087.876103][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11285'. [ 1088.312365][T15285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1088.346190][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11290'. [ 1088.756591][T15302] netlink: 'syz.2.11297': attribute type 16 has an invalid length. [ 1088.766981][T15302] netlink: 'syz.2.11297': attribute type 3 has an invalid length. [ 1088.770693][T15306] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11299'. [ 1088.779386][T15302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11297'. [ 1088.894034][T15309] nbd: must specify an index to disconnect [ 1088.994304][T15312] pim6reg1: entered promiscuous mode [ 1089.021325][T15312] pim6reg1: entered allmulticast mode [ 1089.075309][T15322] netlink: 'syz.2.11305': attribute type 1 has an invalid length. [ 1089.101494][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11305'. [ 1089.114449][T15324] openvswitch: netlink: Multiple metadata blocks provided [ 1089.141393][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11303'. [ 1089.153350][T15316] syzkaller0: entered promiscuous mode [ 1089.169628][T15314] openvswitch: netlink: Flow actions attr not present in new flow. [ 1089.171040][T15316] syzkaller0: entered allmulticast mode [ 1089.282780][T15316] netlink: 'syz.6.11304': attribute type 13 has an invalid length. [ 1089.339416][T30200] Bluetooth: hci6: command 0x0405 tx timeout [ 1089.512706][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11311'. [ 1089.695558][T15347] syz.5.11312: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1089.726902][T15347] CPU: 1 UID: 0 PID: 15347 Comm: syz.5.11312 Not tainted syzkaller #0 PREEMPT(full) [ 1089.726936][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1089.726950][T15347] Call Trace: [ 1089.726958][T15347] [ 1089.726968][T15347] dump_stack_lvl+0xe8/0x150 [ 1089.727002][T15347] warn_alloc+0x249/0x340 [ 1089.727028][T15347] ? stack_trace_save+0xa9/0x100 [ 1089.727058][T15347] ? __pfx_warn_alloc+0x10/0x10 [ 1089.727088][T15347] ? kasan_save_track+0x4f/0x80 [ 1089.727107][T15347] ? kasan_save_track+0x3e/0x80 [ 1089.727124][T15347] ? __kasan_kmalloc+0x93/0xb0 [ 1089.727142][T15347] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1089.727160][T15347] ? xskq_create+0x56/0x170 [ 1089.727178][T15347] ? xsk_setsockopt+0x54c/0x990 [ 1089.727204][T15347] ? do_sock_setsockopt+0x17c/0x1b0 [ 1089.727228][T15347] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1089.727256][T15347] ? do_syscall_64+0xe2/0xf80 [ 1089.727279][T15347] __vmalloc_node_range_noprof+0x132/0x1730 [ 1089.727335][T15347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1089.727364][T15347] ? __kasan_kmalloc+0x93/0xb0 [ 1089.727391][T15347] vmalloc_user_noprof+0xad/0xe0 [ 1089.727411][T15347] ? xskq_create+0xbf/0x170 [ 1089.727455][T15347] xskq_create+0xbf/0x170 [ 1089.727477][T15347] xsk_init_queue+0xad/0x110 [ 1089.727518][T15347] xsk_setsockopt+0x54c/0x990 [ 1089.727550][T15347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1089.727579][T15347] ? __pfx_aa_sk_perm+0x10/0x10 [ 1089.727607][T15347] ? aa_sock_opt_perm+0xff/0x1a0 [ 1089.727635][T15347] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1089.727657][T15347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1089.727687][T15347] do_sock_setsockopt+0x17c/0x1b0 [ 1089.727719][T15347] __x64_sys_setsockopt+0x13d/0x1b0 [ 1089.727750][T15347] do_syscall_64+0xe2/0xf80 [ 1089.727770][T15347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.727789][T15347] ? trace_irq_disable+0x37/0x100 [ 1089.727808][T15347] ? clear_bhb_loop+0x60/0xb0 [ 1089.727831][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.727849][T15347] RIP: 0033:0x7fc52b59aeb9 [ 1089.727870][T15347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.727886][T15347] RSP: 002b:00007fc52c469028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1089.727909][T15347] RAX: ffffffffffffffda RBX: 00007fc52b815fa0 RCX: 00007fc52b59aeb9 [ 1089.727925][T15347] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000012 [ 1089.727938][T15347] RBP: 00007fc52b608c1f R08: 0000000000000004 R09: 0000000000000000 [ 1089.727952][T15347] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1089.727965][T15347] R13: 00007fc52b816038 R14: 00007fc52b815fa0 R15: 00007ffc5e87d258 [ 1089.728002][T15347] [ 1090.096989][T15347] Mem-Info: [ 1090.101362][T15347] active_anon:6620 inactive_anon:11 isolated_anon:0 [ 1090.101362][T15347] active_file:2188 inactive_file:41468 isolated_file:0 [ 1090.101362][T15347] unevictable:768 dirty:64 writeback:3 [ 1090.101362][T15347] slab_reclaimable:13832 slab_unreclaimable:160674 [ 1090.101362][T15347] mapped:39783 shmem:1372 pagetables:1309 [ 1090.101362][T15347] sec_pagetables:0 bounce:0 [ 1090.101362][T15347] kernel_misc_reclaimable:0 [ 1090.101362][T15347] free:1211262 free_pcp:25053 free_cma:0 [ 1090.148741][T15347] Node 0 active_anon:26480kB inactive_anon:44kB active_file:8752kB inactive_file:165676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159132kB dirty:256kB writeback:12kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18084kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1090.181875][T15347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1090.213254][T15347] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.244286][T15347] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1090.250253][T15347] Node 0 DMA32 free:1051620kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26580kB inactive_anon:44kB active_file:8752kB inactive_file:165676kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:38520kB local_pcp:17988kB free_cma:0kB [ 1090.285102][T15347] lowmem_reserve[]: 0 0 1 1 1 [ 1090.290946][T15347] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.322658][T15347] lowmem_reserve[]: 0 0 0 0 0 [ 1090.328292][T15347] Node 1 Normal free:3782164kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61492kB local_pcp:33324kB free_cma:0kB [ 1090.482717][T15347] lowmem_reserve[]: 0 0 0 0 0 [ 1090.493036][T15347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1090.537673][T15347] Node 0 DMA32: 11639*4kB (UME) 9728*8kB (UME) 5444*16kB (UM) 416*32kB (UME) 95*64kB (UM) 46*128kB (UME) 481*256kB (UM) 426*512kB (UM) 269*1024kB (U) 97*2048kB (UM) 0*4096kB = 1052124kB [ 1090.599876][T15347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1090.641869][T15347] Node 1 Normal: 165*4kB (UE) 60*8kB (UME) 48*16kB (UME) 91*32kB (UME) 43*64kB (UME) 9*128kB (UME) 4*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 919*4096kB (UM) = 3782164kB [ 1090.701116][T15347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1090.719035][T15347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1090.741528][T15347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1090.772388][T15347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1090.797485][T15347] 45074 total pagecache pages [ 1090.840758][T15347] 0 pages in swap cache [ 1090.856722][T15347] Free swap = 124996kB [ 1090.882631][T15347] Total swap = 124996kB [ 1090.906232][T15347] 2097051 pages RAM [ 1090.915570][T15347] 0 pages HighMem/MovableOnly [ 1090.950119][T15347] 426622 pages reserved [ 1090.966100][T15347] 0 pages cma reserved [ 1092.028247][T15477] netlink: 'syz.6.11346': attribute type 1 has an invalid length. [ 1092.641223][T15510] __nla_validate_parse: 7 callbacks suppressed [ 1092.641252][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11356'. [ 1092.665006][T15510] netlink: 'syz.1.11356': attribute type 1 has an invalid length. [ 1097.581853][T30200] Bluetooth: hci1: command 0x0406 tx timeout [ 1100.625019][ T8163] NFSD: Failed to start, no listeners configured. [ 1115.982726][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.156100][T15516] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11357'. [ 1118.183564][T15516] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11357'. [ 1118.198754][T15516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11357'. [ 1118.244612][T15521] veth7: entered promiscuous mode [ 1118.251583][T15521] veth7: entered allmulticast mode [ 1118.252420][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11362'. [ 1118.304264][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11362'. [ 1118.586978][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11368'. [ 1118.614954][T15547] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1118.626223][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11369'. [ 1118.851678][T15557] netlink: 'syz.5.11373': attribute type 4 has an invalid length. [ 1119.101606][T15575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11379'. [ 1119.142424][T15575] syzkaller1: entered promiscuous mode [ 1119.182525][T15575] syzkaller1: entered allmulticast mode [ 1119.239624][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11381'. [ 1119.460526][T15589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1119.520468][T15594] netlink: 'syz.2.11387': attribute type 11 has an invalid length. [ 1119.562978][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11388'. [ 1119.613638][T15600] netlink: 'syz.0.11389': attribute type 1 has an invalid length. [ 1119.843776][T15613] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000 [ 1120.259082][T15637] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1120.279798][T15637] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1120.526234][T15650] netlink: 'syz.6.11401': attribute type 9 has an invalid length. [ 1120.545361][T15650] netlink: 'syz.6.11401': attribute type 11 has an invalid length. [ 1120.560207][T15651] +: renamed from syzkaller0 [ 1120.565178][T15650] netlink: 'syz.6.11401': attribute type 12 has an invalid length. [ 1120.829049][T15661] syzkaller1: entered promiscuous mode [ 1120.850954][T15661] syzkaller1: entered allmulticast mode [ 1120.968853][T15666] netlink: 'syz.6.11408': attribute type 3 has an invalid length. [ 1121.115597][T15670] netlink: 'syz.5.11409': attribute type 2 has an invalid length. [ 1121.236968][T15670] syzkaller0: entered promiscuous mode [ 1121.248090][T15670] syzkaller0: entered allmulticast mode [ 1121.532181][T15689] x_tables: duplicate underflow at hook 1 [ 1122.368681][T15686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1122.405384][T15686] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1122.543624][T15686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1122.582644][T15686] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1122.630969][T15686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1122.657831][T15738] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 1122.673569][T15739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1122.677894][T15686] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1122.928707][T15686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1122.934694][T15686] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1123.148435][T15686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1123.154405][T15686] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1123.253382][T15686] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1123.278498][T15759] tipc: Enabling of bearer rejected, failed to enable media [ 1123.286922][T15686] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1123.724068][T15767] __nla_validate_parse: 11 callbacks suppressed [ 1123.724090][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11433'. [ 1123.829586][T15775] netlink: 'syz.2.11436': attribute type 1 has an invalid length. [ 1123.982380][T15778] x_tables: duplicate underflow at hook 2 [ 1124.078209][T15779] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1124.615321][T15808] bond8 (unregistering): Released all slaves [ 1124.849346][T15816] tipc: Enabled bearer , priority 0 [ 1124.868400][T15819] syzkaller0: entered promiscuous mode [ 1124.890729][T15819] syzkaller0: entered allmulticast mode [ 1124.979090][ T31] INFO: task syz.3.9777:10012 blocked for more than 143 seconds. [ 1124.986902][ T31] Not tainted syzkaller #0 [ 1125.031561][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1125.056846][ T31] task:syz.3.9777 state:D stack:27104 pid:10012 tgid:10011 ppid:7749 task_flags:0x400140 flags:0x00080002 [ 1125.091976][ T31] Call Trace: [ 1125.098763][ T31] [ 1125.105183][ T31] __schedule+0x14ea/0x5050 [ 1125.115984][ T31] ? __pfx___schedule+0x10/0x10 [ 1125.127700][ T31] ? schedule+0x90/0x360 [ 1125.146422][ T31] schedule+0x164/0x360 [ 1125.152694][T15830] syzkaller0: entered promiscuous mode [ 1125.160635][ T31] schedule_preempt_disabled+0x13/0x30 [ 1125.169865][T15830] syzkaller0: entered allmulticast mode [ 1125.173234][ T31] __mutex_lock+0x7fe/0x1300 [ 1125.195817][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1125.207033][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1125.216669][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1125.230098][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1125.240749][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1125.252684][ T31] ? rcu_is_watching+0x15/0xb0 [ 1125.263664][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1125.270643][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1125.277644][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1125.283251][ T31] ? __asan_memcpy+0x40/0x70 [ 1125.288671][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1125.294900][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1125.302739][ T31] ? security_capable+0x7e/0x2c0 [ 1125.308309][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1125.312885][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1125.318760][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1125.324894][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1125.331484][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1125.336393][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1125.345503][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1125.352242][ T31] ? genl_rcv+0x19/0x40 [ 1125.356473][ T31] ? down_read+0x272/0x2e0 [ 1125.365936][ T31] ? genl_rcv+0xd/0x40 [ 1125.375537][ T31] genl_rcv+0x28/0x40 [ 1125.380249][ T31] netlink_unicast+0x80f/0x9b0 [ 1125.385086][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1125.391843][ T31] ? __alloc_skb+0x193/0x390 [ 1125.396663][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1125.402106][ T31] ? skb_put+0x11b/0x210 [ 1125.406621][ T31] netlink_sendmsg+0x813/0xb40 [ 1125.414311][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.422508][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1125.428067][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1125.433503][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.439646][ T31] ____sys_sendmsg+0xa68/0xad0 [ 1125.444466][ T31] ? __might_fault+0xaf/0x130 [ 1125.449845][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1125.455811][ T31] ? import_iovec+0x73/0xa0 [ 1125.460869][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1125.465601][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1125.475483][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1125.486074][ T31] ? futex_wait+0x29a/0x380 [ 1125.491057][ T31] ? __fget_files+0x2a/0x420 [ 1125.495690][ T31] ? __fget_files+0x3a0/0x420 [ 1125.501769][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1125.506769][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1125.513114][ T31] do_syscall_64+0xe2/0xf80 [ 1125.519324][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.525545][ T31] ? trace_irq_disable+0x37/0x100 [ 1125.532343][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1125.537086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.544623][ T31] RIP: 0033:0x7f0e8839aeb9 [ 1125.549659][ T31] RSP: 002b:00007f0e8933a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.559568][ T31] RAX: ffffffffffffffda RBX: 00007f0e88615fa0 RCX: 00007f0e8839aeb9 [ 1125.568652][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 1125.576672][ T31] RBP: 00007f0e88408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1125.599418][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.608548][ T31] R13: 00007f0e88616038 R14: 00007f0e88615fa0 R15: 00007ffdf53ab898 [ 1125.616588][ T31] [ 1125.620444][ T31] [ 1125.620444][ T31] Showing all locks held in the system: [ 1125.630601][ T31] 3 locks held by kworker/u8:1/13: [ 1125.636027][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1125.650249][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1125.662200][ T31] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 1125.674731][ T31] 1 lock held by khungtaskd/31: [ 1125.680224][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1125.690688][ T31] 2 locks held by getty/5584: [ 1125.695404][ T31] #0: ffff88803051b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1125.712194][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1125.723420][ T31] 2 locks held by syz.4.9269/8163: [ 1125.729143][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1125.739373][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1125.750653][ T31] 2 locks held by syz.3.9777/10012: [ 1125.756240][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1125.765352][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1125.776104][ T31] 1 lock held by syz.5.11448/15827: [ 1125.782603][ T31] #0: ffff88803b82b8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1125.795071][ T31] 2 locks held by syz.6.11449/15829: [ 1125.801517][ T31] #0: ffff88804de72488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1125.812972][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1125.826456][ T31] 1 lock held by rm/15848: [ 1125.856599][ T31] [ 1125.868585][ T31] ============================================= [ 1125.868585][ T31] [ 1125.907902][ T31] NMI backtrace for cpu 0 [ 1125.907925][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1125.907947][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1125.907958][ T31] Call Trace: [ 1125.907967][ T31] [ 1125.907975][ T31] dump_stack_lvl+0xe8/0x150 [ 1125.908008][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1125.908036][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1125.908068][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1125.908098][ T31] sys_info+0x135/0x170 [ 1125.908121][ T31] watchdog+0xf90/0xfe0 [ 1125.908147][ T31] ? watchdog+0x209/0xfe0 [ 1125.908175][ T31] kthread+0x726/0x8b0 [ 1125.908311][ T31] ? __pfx_watchdog+0x10/0x10 [ 1125.908334][ T31] ? __pfx_kthread+0x10/0x10 [ 1125.908359][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1125.908387][ T31] ? __pfx_kthread+0x10/0x10 [ 1125.908409][ T31] ret_from_fork+0x51b/0xa40 [ 1125.908440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.908467][ T31] ? __switch_to+0xc82/0x1410 [ 1125.908496][ T31] ? __pfx_kthread+0x10/0x10 [ 1125.908517][ T31] ret_from_fork_asm+0x1a/0x30 [ 1125.908556][ T31] [ 1125.908565][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1126.038332][ C1] NMI backtrace for cpu 1 [ 1126.038353][ C1] CPU: 1 UID: 0 PID: 15103 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1126.038372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1126.038383][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1126.038413][ C1] RIP: 0010:mark_lock+0x3e/0x190 [ 1126.038438][ C1] Code: 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 74 e8 59 12 73 10 <48> 69 c0 c8 00 00 00 48 8d 88 b0 83 9b 93 eb 42 83 3d 3b 78 5d 18 [ 1126.038452][ C1] RSP: 0018:ffffc9000b1af8c8 EFLAGS: 00000007 [ 1126.038467][ C1] RAX: 0000000000000177 RBX: 0000000000000002 RCX: 0000000000000002 [ 1126.038478][ C1] RDX: 0000000000000002 RSI: ffff88802a1b29b0 RDI: ffff88802a1b1e80 [ 1126.038490][ C1] RBP: 0000000000000004 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 1126.038501][ C1] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: ffff88802a1b29b0 [ 1126.038519][ C1] R13: 0000000000000000 R14: ffff88802a1b29b0 R15: 0000000000000000 [ 1126.038530][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 1126.038544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.038555][ C1] CR2: 0000560d413e7048 CR3: 000000003544a000 CR4: 00000000003526f0 [ 1126.038572][ C1] Call Trace: [ 1126.038579][ C1] [ 1126.038588][ C1] lockdep_hardirqs_on_prepare+0x110/0x260 [ 1126.038609][ C1] ? __alloc_skb+0x193/0x390 [ 1126.038627][ C1] ? __alloc_skb+0x193/0x390 [ 1126.038643][ C1] trace_hardirqs_on+0x28/0x40 [ 1126.038660][ C1] __local_bh_enable_ip+0xd0/0x130 [ 1126.038676][ C1] __alloc_skb+0x1b7/0x390 [ 1126.038694][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 1126.038722][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1126.038744][ C1] process_scheduled_works+0xaec/0x17a0 [ 1126.038775][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1126.038795][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1126.038813][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1126.038829][ C1] ? schedule+0x90/0x360 [ 1126.038847][ C1] worker_thread+0xda6/0x1360 [ 1126.038878][ C1] kthread+0x726/0x8b0 [ 1126.038896][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1126.038917][ C1] ? __pfx_kthread+0x10/0x10 [ 1126.038934][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.038956][ C1] ? __pfx_kthread+0x10/0x10 [ 1126.038973][ C1] ret_from_fork+0x51b/0xa40 [ 1126.038996][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1126.039017][ C1] ? __switch_to+0xc82/0x1410 [ 1126.039038][ C1] ? __pfx_kthread+0x10/0x10 [ 1126.039055][ C1] ret_from_fork_asm+0x1a/0x30 [ 1126.039081][ C1] [ 1126.311911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1126.318903][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1126.328157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1126.338459][ T31] Call Trace: [ 1126.341877][ T31] [ 1126.344844][ T31] vpanic+0x1e0/0x670 [ 1126.348962][ T31] panic+0xc5/0xd0 [ 1126.352727][ T31] ? __pfx_panic+0x10/0x10 [ 1126.357189][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1126.363239][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1126.369455][ T31] watchdog+0xfda/0xfe0 [ 1126.373676][ T31] ? watchdog+0x209/0xfe0 [ 1126.378055][ T31] kthread+0x726/0x8b0 [ 1126.382257][ T31] ? __pfx_watchdog+0x10/0x10 [ 1126.386967][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.391694][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.397027][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.401843][ T31] ret_from_fork+0x51b/0xa40 [ 1126.406488][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1126.411729][ T31] ? __switch_to+0xc82/0x1410 [ 1126.416465][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.421105][ T31] ret_from_fork_asm+0x1a/0x30 [ 1126.426023][ T31] [ 1126.429563][ T31] Kernel Offset: disabled [ 1126.433891][ T31] Rebooting in 86400 seconds..