last executing test programs: 8m53.956163496s ago: executing program 3 (id=153): socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) (async) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) 8m53.790815618s ago: executing program 3 (id=155): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x100000000000025b, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400)=r3, 0x12) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000d0a0101000000f0241270007c00000a0900020073797a30000000000900010073797a30000000000900020073797a30af0000000000000073797a30000000000900010073797a310000000008000440000000020800044000000001"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) close(r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000", @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0xa0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x3a}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$802154_raw(r7, &(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x100}) 8m53.614635988s ago: executing program 3 (id=159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x772, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @multicast1}, &(0x7f0000000340)=0xc) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x91, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x9, 0x3, 0x9, 0x1000, 0xffffffffffffffff, 0x38, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x1, 0x3, 0x1, 0xf, 0x6, 0xfffffffffffffff0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x7, 0x1, 0x7, 0x7, 0x7, 0x1, 0xa}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0x6, 0x0, 0x18, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x26, &(0x7f00000002c0)=""/38, 0x41100, 0x2, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xc, 0x80, 0xffff7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000740)=[{0x2, 0x5, 0x8, 0x6}, {0x5, 0x2, 0x7, 0x1}, {0x0, 0x3, 0x3, 0xa}, {0x1, 0x4, 0x8}], 0x10, 0xfffffff9}, 0x94) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') (async) r14 = getpid() sendmmsg$unix(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) 8m53.557205751s ago: executing program 3 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x21, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x7, 0x660f537f, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xcd, 0x1}}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, 0x0, 0x28841) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4008000) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x270, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x82b5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6842}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xb0f4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x1c8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3cd746f5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff70}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x90}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}]}, 0x270}, 0x1, 0x0, 0x0, 0x80}, 0xc080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 8m53.394129632s ago: executing program 3 (id=164): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 8m53.238484718s ago: executing program 3 (id=167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 8m38.238961642s ago: executing program 32 (id=167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 1.892049798s ago: executing program 4 (id=5749): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) listen(r0, 0x6) listen(r0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x520000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x7]}, {0x0, 0x8, 0x9, 0x1c49}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x6, 0x40, 0xff01, 0x10, 0x5a, 0xfd, 0x80}, 0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r1, &(0x7f0000000300)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x3, 0x0, 0x4, 0x4}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="315e8756e6265fe2e7dc2e5fbd1f52ab4e9d3d215cf064a18fb17d65a1ceebd11aa6d044ad9b5b85e7ce530a780df8f36fe2c8b3dadb9958eb8f0230017e1262a583b064026d27e07c68461a8b0267371d997bbeeac72efc5a9fbf8897bfccea33315dce845897f388aa2bd10453bab8d1ad9b345842ea623a", 0x79}], 0x1}}], 0x1, 0x40) r3 = accept$alg(r1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000340)={0x1, 0x8}) getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000380)=""/128, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001180)={@loopback, 0x0}, &(0x7f00000011c0)=0x14) sendmmsg$inet(r2, &(0x7f0000001740)=[{{&(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000480)="7aea9b7234527b12d7c12ef594d28471df626a4d2df575af562ed69ed3ef887fb98ff75dd50f0db0dafbfe94c3ef6d2590223a596b8cd06f76cd1da59a59d7fc392d1a363feddb94943aa826452cbba4f194f2ebb8d8e333ff0c56ecfd54cd1cf13361c8f1f3a3d6492a110f39066d2757037090eee3c24d00ba5c08e7f6e0e3a9a6ce3aba0edf11b0cf708b635792586d9e336be801afb2322f3cc78a9a54b4ca89ddd3baaa45cdbac03c63cd8ff1e0b6635b86c0", 0xb5}, {&(0x7f0000000540)="aae219984b2887d441e9360a21197ae68847c79aed8281b11edc460c13cfc58d028ffad26add5254f77762696be30dc3833b688a9777a68a7279a42e3301f2509be2f15773aea830a79534ca636f7235b66869d184174cbe7902271cdf4a2b31d7fdff79ed6f942cc80d0cde2b27b8377c03756e192ec7f854202c8a069c6012c91ba8bb6c1566674596a8433f1a4a2746626ea0a512e7056288ffd336e213739251b891b691cc9a1e3789516ed7108d3e95bec06e85e27413ad41378f", 0xbd}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="153492b0f7049b030b0b17469c65d7f94250bcc5525a36406e8afd1927c1758d34c73c95ad1964535559171a9da4884119b9fc7a756705469c04a4a98c3e5eac6dc0bd42130d2d560164967748d5a10b3a4fe11124ff6002493bc12111c1335ab30ab59f7b60d3adb5de49c79a97ccb77ef4278774607b214dc1e2e23684ecbcf9c67434e6a83f9afeb5663f0c07222798da91a3a749335ca0b10bab8c2604175397691da587b0800040f8f9a9bc5a1af45a2aa6c18ab8d1aa91484a", 0xbc}], 0x4, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_tos_int={{0x14}}], 0x50}}, {{&(0x7f0000000900)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000940)="9cc6a8e54264171ad97f51e4cce8343a34bbf766cbb90967b0ddff1a036a32834dc078f059bc309611b3a7af2ff3a2fdbdd22cb99fcce8b1ca18644e07d8fbd56d4f7db27bec532890fa2e1137daf9aa6f8d4610863dcfed727cb91a7df36b2e2f43248821db9838f44b7446195e04103416b742329195d6921320d0d856fcf0e0d1cba29af785e2a05abba1095f6eccaeea9c260a940e1e6aed40d79bc07ce60b64700948db3f82596497ed2f62d0a39169aba623dd2fde017fde2b7d07e5fc32e547ab6e540fb9fb7d1691cac4dd243c32b344a40ecc8a191a04bee683d1e94a2bff46d797b88072c2733163bd7a006bdd416f8613aef9", 0xf8}, {&(0x7f0000000a40)="e1a57e797a261cf7c42466bded8b1cdd7f7032e7f23875609d49c79993867602aa39b2b6e21e97798df00dd73124f4a17a9f2e477f54053662f28d60a54f2c982043e1e87c83e85b7d9231af85ecd8d4a5b32eefab319417dfa279e7884e43ef1846f821460eaa90f20d0fc28634560320d79228fdde2748c08b2ce6af7f91b14b405caec0d68670ee83a11b93f0b9d5965d0d1e38868dea30f6ef519dfd3efe44e222186b462452a26ca699b2c8f72b9e8308813a291f719e604940d5f9a13a39f869b2b1b5b5680ca96c18f1001240", 0xd0}], 0x2, &(0x7f0000000c00)=[@ip_retopts={{0xf0, 0x0, 0x7, {[@rr={0x7, 0x23, 0x2a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @lsrr={0x83, 0x17, 0x13, [@broadcast, @private=0xa010101, @remote, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x1c, 0xb8, 0x1, 0x5, [{@private=0xa010102, 0x2}, {@multicast2, 0x6702}, {@empty, 0x7}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x3, 0x1, 0x5, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xab}, {@private=0xa010101, 0x9}, {@private=0xa010102, 0x4}, {@multicast1, 0x1}, {@multicast1, 0xa}]}, @timestamp_addr={0x44, 0x34, 0xf2, 0x1, 0x3, [{@multicast1, 0x949e}, {@multicast2, 0x200}, {@rand_addr=0x64010102, 0x1}, {@local, 0x8}, {@loopback, 0x4}, {@remote, 0x44620f4f}]}, @timestamp_prespec={0x44, 0x1c, 0xb6, 0x3, 0xd, [{@multicast2, 0x5f4}, {@empty, 0x6}, {@broadcast, 0x3}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff50}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x190}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x1, [0x3, 0xfff]}, @timestamp_addr={0x44, 0x34, 0x97, 0x1, 0xb, [{@broadcast, 0x7}, {@local, 0xe6}, {@remote, 0x330580}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x6e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0xf, 0x7c, [@multicast2, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xab, 0x1, 0x9, [{@remote, 0x9}, {@rand_addr=0x64010100, 0x6b}, {@private=0xa010102, 0x8}]}, @timestamp={0x44, 0xc, 0x26, 0x0, 0xf, [0x9, 0x7ff]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xa0}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000f40)="63b66aed05d879956913ee7992f50efad03530ad5f3948e011edb57d357ad67ba596f6ebebc39bd3f26656aa8fe7eeac7cfa13721da9ec46795c3cb73061c0fa06f5f72e37d2dec2d635add7d9dc10a4bb8d98d67450eca8b3f207", 0x5b}, {&(0x7f0000000fc0)="02eae7b67abf2bd3d792dce9d9a6cba53bab2dde21e4858964ecdf9b188dce34c2137ea41e157e0eba13c44bac7763909879e372d06084d8dac74a3d32ea77ee99f8289d73c5d9054c434510619523e243e52b585e1427fdd2", 0x59}, {&(0x7f0000001040)="512faa6bef678cef82580a2806b3f70a0ab25053ad4916e78f9e7d876cb7259a091441aac0bdb591e846132e63e89ef50fe21de8c019ca80d768565a446fdd9979e3ae3e1cafa793e78f17be2f112862dd93a3c1d679f8a2f915f326bb93ffeb34e0e6fa46ef0daf3b05609b706722c9021d6c7e50733f19a7328798ead685e92dac551e220ac79d52b9f57416e640a3fc642c7f1b0a4c02fabd67bab6c19eb42bf59fb85322a1106b3b0a721790a42b7bd18d5897a7112335ecbb0e4b5e9e405b8fc1383f6071803b4b0736aac4918a286726546e9145f337398d6becf7aaba8ebce45f07006a0400eb72f4f1674182b192ec", 0xf3}], 0x3, &(0x7f0000001200)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x7, [{@local, 0x3}]}, @cipso={0x86, 0x29, 0x2, [{0x7, 0xf, "966951957c057089751e68e807"}, {0x2, 0x3, '\\'}, {0x7, 0xe, "34e18da39db9634f6b9a72f9"}, {0x7, 0x3, "02"}]}, @timestamp={0x44, 0x10, 0x27, 0x0, 0xd, [0x0, 0xd0a1af44, 0x7]}, @generic={0x86, 0x4, "3e18"}, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x2, [{@multicast2, 0x80000000}, {@private=0xa010102, 0x1}, {@empty, 0x6}]}, @rr={0x7, 0x7, 0xec, [@dev={0xac, 0x14, 0x14, 0xd}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe472}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5e4e}}], 0xf0}}, {{&(0x7f0000001300)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001340)="762b968ba43958bd4aa3226f942782e0198a7e878c4af06db2a29eb47ed0a3371935d52295cc78a0b7b5f25be15da637c4cc65f56d160cced9b540117e3d54b7ddb80978733cce578c935b5f816b9d9dc32a21fcc72ff9abdbd940f16046115b9d6f61cc217181ae253439454ff2b3e5850297c49be78520fb461ea8b83f6d7bfbba80b8600b466ac633148e0598dba9bfc22f929cca5c3e21f25157b1ab6330c52dde278021121984d321b9cce42652744f0a096d14b7309dc1d494d71e66e5ba76f2807714309bd81457e53a96b99a2d6727", 0xd3}, {&(0x7f0000001440)="0999bbac59ad3ee8cd0cdabdc71d326ed8e5f09b7780fa8929c12ccb77574c3220ed17a5d2f93fe4e752ee41cfd61a59168395457148808024ad32156cf11b65", 0x40}, {&(0x7f0000001480)="bc245ebb9b5d2da5ab15a6efb39e5ffef795d5ed0b3b902ec3ef63df792b", 0x1e}, {&(0x7f00000014c0)="baf2465351979f064e16875960722bf4bb2b9f7b21a4648fb5772bf6db449cda43fc", 0x22}], 0x4, &(0x7f0000001540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x521}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xff, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @multicast1, @local, @loopback, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x5b, 0x0, [{0x5, 0xf, "6dc89f572fd022d8d86959b420"}, {0x7, 0x6, "410795da"}, {0x0, 0x6, "306b3a84"}, {0x6, 0xb, "d6b0e4cd5249be5c33"}, {0x1, 0x4, "f3e0"}, {0x1, 0xa, "98669fe69d2f461f"}, {0x2, 0xf, "ceed523f9cd38824aa456f7579"}, {0x2, 0x12, "6a79e10158a51537e0d411707790c4b4"}]}, @cipso={0x86, 0x61, 0xffffffffffffffff, [{0x1, 0x7, "806830d806"}, {0x4, 0x9, "da52c67957ffb8"}, {0x1, 0x10, "f97769525b1b81cb786e2f422f26"}, {0x5, 0x10, "41004f97cffb1b5ab183b426e7be"}, {0x1, 0x9, "feb9b6e8a9e080"}, {0x7, 0x5, "64b7ba"}, {0x7, 0xf, "aa7ebf4cdab8987e8a0cd472cc"}, {0x1, 0x3, 'm'}, {0x2, 0xb, "031a82cf825bd25362"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x90d}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x1000}, {@multicast1, 0x5}]}, @ssrr={0x89, 0x27, 0xfe, [@loopback, @remote, @private=0xa010101, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x33}, @local]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}], 0x1d8}}], 0x5, 0x40002) r7 = accept4$alg(r1, 0x0, 0x0, 0x180800) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000001880)={r7, 0x0, 0x200000000000000, 0x7f, 0x3, 0x0, [0x7fffffffffffffff, 0x2, 0x6, 0x2, 0x97e]}) read(r0, &(0x7f0000001900)=""/83, 0x53) r8 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000001980)={0xe5, 0xb080, 0x1}) readv(r3, &(0x7f0000001c00)=[{&(0x7f00000019c0)=""/30, 0x1e}, {&(0x7f0000001a00)=""/54, 0x36}, {&(0x7f0000001a40)=""/197, 0xc5}, {&(0x7f0000001b40)=""/57, 0x39}, {&(0x7f0000001b80)=""/72, 0x48}], 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000001c80), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001cc0)='nv', 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000001d00)=0x300, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d80), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, r9, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c084) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001e80)) 1.889817912s ago: executing program 2 (id=5750): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000400)=""/255, &(0x7f0000000500)=0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) socket$isdn(0x22, 0x3, 0x22) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010103, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff69}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80200000}, 0x9d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x44, r6, 0x8, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x44}}, 0x80) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x1, [@default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r10 = socket$phonet(0x23, 0x2, 0x1) close(r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "bc164555a8fdbc30", "5e3ffa2eb88f1acca20cff8d621165d1", "7fb68e25", "5924cf3b889fa39c"}, 0x28) 1.804565394s ago: executing program 5 (id=5751): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x61815) 1.802514625s ago: executing program 1 (id=5753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x81, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) 1.801226654s ago: executing program 4 (id=5754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)}], 0x1) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x7, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, 0x0, 0x0) syz_emit_ethernet(0x63, &(0x7f0000000200)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0xa, 0x4, 0x0, 0x0, 0x55, 0x22, 0x0, 0x0, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xd7, [@remote]}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0xf, [{@broadcast, 0x2}]}]}}, {{0x0, 0x0, r7, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f1d}, {"950f2d7f038c19764d10de2703f0d7a4f771b689563992547d"}}}}}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="700000f70000000000000000000001000000000049d2012700650000020690780a010101ac1414aa8907bbffffffff9404010094040000004e224e24", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="b102000a90780009221290e5d07bf73ff1c388201392421d740a0204ff03040c405b434e46d8f288197303036501131253cbf84752f9d02f675f8112b12c58c801080a000000027fffffff13120ab0d4371626570a4918ce2069cfdfad000000505870ac63ef6f95cbe05ed1c9eb7b9b5014f0df53f903416d0a4d3f7a466bddf3673c73b01690d14ca70ca38cee12d2986b74b9dbb79223b720c996c97c101410980465904711d7c06d240808d87304b827adc36733f098b17615c8e616e87d69fe21e5dd17bb86dc105052a9553ac7ecb9bc2cac2236efa759f4ca1d1276b67200"/236], 0x13b) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="700000f70000000000000000000001000000000049d2012700650000020690780a010101ac1414aa8907bbffffffff9404010094040000004e224e24", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="b102000a90780009221290e5d07bf73ff1c388201392421d740a0204ff03040c405b434e46d8f288197303036501131253cbf84752f9d02f675f8112b12c58c801080a000000027fffffff13120ab0d4371626570a4918ce2069cfdfad000000505870ac63ef6f95cbe05ed1c9eb7b9b5014f0df53f903416d0a4d3f7a466bddf3673c73b01690d14ca70ca38cee12d2986b74b9dbb79223b720c996c97c101410980465904711d7c06d240808d87304b827adc36733f098b17615c8e616e87d69fe21e5dd17bb86dc105052a9553ac7ecb9bc2cac2236efa759f4ca1d1276b67200"/236], 0x13b) 1.798672374s ago: executing program 5 (id=5755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, '\x00', "877dab43c700", '\x00', "0100"}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x800, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x11a, 0x4, &(0x7f0000000040), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001002dbd7000000000000a801040000000080000000014000200fe9d00000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket(0x1, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) 1.582652173s ago: executing program 0 (id=5757): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0xfd0d6000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="083b0000fdb29a09add7be2d19", 0xd}}, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000714000328bd7000fedbdf250500540001000000050054000100000008004400", @ANYRES32=r1, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="08be00001d81000008804400", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x40011) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000002c0)) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000880)=r14, 0x12) getpid() 1.581798674s ago: executing program 2 (id=5758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xdc}}, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x7) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x840000000002, 0x3, 0xff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x43e6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x99, 0x3, "61b05cc98dc8b317feaa8d78c682eeecd8e509389ebbb0011f84ceb1794594b2f0836101f604cff429ac989fad68228cbaf08b2ffed871109213a91db2fb84ae0ea18d983d5c3813b255458212513934a08f572f274222dce6d0835e0860bf2f59d023fe15ee9d622fa5ee9c21a747251782bb0dd0f247aedc02cc4e009d9797d589064b0e1651ebc16a9c1f3ce572a7826eabd21f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008885}, 0x80) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="fbffeeff", @ANYRES16=0x0, @ANYBLOB="000001010000fddbdf254f0000007c007a80140002005a74cd5ebeeb20b9f115db772886346b0800040009000000140001008d6d62931d0a9fe93054c9673f4174f30c000300be6c05f3ccf9480a0c000300dba6966c9cf1ecb514000200be6a47ab02d27a8c72002330462009fd08000400f9ffffff14000100ae706d9c0203afd8b4e3309ae29d526844007a800c000300b3f1101f1de39ab5140002003d2887d3e2df2bc570813099b9a427810c00030025cedb0809400d8f08000400050000000c000300c484ec4ba4ca64f6"], 0xd4}, 0x1, 0x0, 0x0, 0x4050884}, 0x4040) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000740)={{0x4b, @rand_addr=0x64010101, 0x4e23, 0x0, 'none\x00', 0x0, 0x907, 0x38}, {@multicast2, 0x4e24, 0x0, 0xfffffffe, 0x8, 0x5}}, 0x44) (async) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000600)=""/139, &(0x7f0000000700)=0x8b) 1.218730636s ago: executing program 4 (id=5759): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x40, 0x7800, 0x4, 0x7, {{0x6, 0x4, 0x2, 0x13, 0x18, 0x66, 0x0, 0xfc, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@end]}}}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001a00010029bd7000fedbdf251c1410abfc0286040032000008000400", @ANYRES32=r1, @ANYBLOB="84001300000000008fdc4686725ad900000000000000000000000000000000000000000000000000000000000f0f00000000000000000000000000000000000000000000000000000000000004000000000000000f0f000000000000000200000001000000000000060000004000f7ffff030000000000000e0a000000000000000000000000000000010005001a0007", @ANYRES32=r4, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x859}, 0x20040021) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028005001600010000000a837d39741542c85e95cb43436e8fc2de97f13aa2acd1e367fb2e336f7f8be0d5d95e8a1b77f6bff841aa1c4d2fa2281121c4445f141777cdba1a7c45fca31ddd9bbf696b8e1f7320c5b8c0a3e4b33c6c211dcd93f0970d6f65316d1f6dd0929831385cf29c30604a9f40838b5a72f0850d454fb13e15bef576c0d1135d5578ab4e63"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.218098166s ago: executing program 2 (id=5760): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ef4358187ea5c4cf9ca35a2102d2b8d6ac3ba4fd149b63cabfe86cd372f0faf8a2a6677f50fcedd974f0e5e31f260d82107e5048ffff45fd09068702a000e4b45018ce4bbae7c590a51afe3e70ef8c632bebea4e6284af9e13fa8caa4ba422edad881d793e37c78ac48432b778b56f865cd8abce3909d5dd1acce29036d342f1166319e269b399cfe91aa79f64633d4b7c374eb8c21d1ab7b1facfb8666bda6cdb2c26975f3f6d70cd89a36500"/183], 0x24}], 0x1}, 0x84) r6 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000001700), 0x0, 0x40012032, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) r10 = getgid() sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="6c8237521e893ab443d3602a0e955d44a3de8a6a25d769ab56069a2fc8cab31b002dedf1003221b37bf8079e305eacd3e2b35eeec81b22e66b4bb54b5575758c5bd13ac3a23f3ac1166c25fbadae92f0e5758b9e7b2a00ce0270fd42ff1b87063b9d071cf946", 0x66}, {&(0x7f0000000200)="2025d0c7837fb3cc115b1f35df209a5e381671627f90c11ec1f1f5310d7c225a1460ecc77fa3acd0c454ff80e9f27e9f03b8cbe38deaf4a913b12cd83760b007c636c916e94dce", 0x47}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="00332fa1d9f6214325afa85c561e372f838a831630a8b22d55d45a0c0bd188ea071824e8bf0a", 0x26}, {&(0x7f0000000300)="938dc60ad1d71bd5f2bb83f20bb6c77374dcf88f462e0bd41d2d274446678078fc6e8647e7b944afd9c6ca373b4126e545a9be95026b57b1d3d817937f2f990c6cb3a4aa8f65805db15aaa91451413625ee8fab1126516f53702bebaff6cb21f2971ca5dba5d13620ca3a0f829af89877a5b97294ddde104adf9ce39af9585fe43ec6ea09d82689c77353cba", 0x8c}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c00a0d9e9cc5fbf46886a000000000000011a3b33610c04c0dce56b12a02800000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40040c0}, 0x24040000) 1.190270674s ago: executing program 4 (id=5761): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2e4e}, {0x0, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x10, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0xad, 0x8}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}]}, 0x4c}}, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000001e40)=@get={0x1, 0x0, 0x7fffffffffffffff}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.169215825s ago: executing program 2 (id=5762): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdb8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = socket$kcm(0x10, 0xd, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x9, 0x0, 0x0, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0xe9c}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x260, 0x278, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x31, 0xb, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xff000000], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x34, r5, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20004094) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a0004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 946.787293ms ago: executing program 1 (id=5763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001080ab00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000b4000004f3e"], 0x3c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000007f00000000000000000000000000000000000000000000007fde130cbec69591ab0fee83da74d8f537013b883448af22da5c8f1680ab41332ac39f77a3c82924450c8ac9112e9b45e34acdaebe4560d478902e378df18493fb47640feea30afa4be924c060f97e6e41fec81f0be93a89"], 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x30042, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x800}) 932.018861ms ago: executing program 0 (id=5764): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x4a3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) vmsplice(r0, &(0x7f0000002c00)=[{&(0x7f0000000480)="fb05c776fc296f3137ddbbfd630a54aa360f43907e8cdc92cb3909e32ed45c2fce50830205564cc0a1baf8a34160e5664302ef671af6660a3cff356bac4d75b421059e8b3eceb55b0917181c47f5ba8de5d8675be969d51b9820c253f351f9ca5c7039e14eac4aaafadf9ccecd4eb136a3d281e5741f09f386e0dbca0b14548e433d71f331b98f9d2b4d169b2649fd07a5b15becedd996a12a1266bbcc8d18eba3099997cd95625ea389c135232382d46e11b63980224034064164a69af69c34910229", 0xc3}, {&(0x7f00000015c0)="9c24cba97576e7dff7568026d987767db3b715eeacaecfa007cb6362d5b66d6c0485714baf1f9178b465481d5f", 0x2d}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000002b00)="acac8defe2091e97bf47ba8980d68c59c3244fb4061589a2e5b3ac070bfcd63262aef5d5a3b7e8b51707bfae23594b271245ddf0da07f3ef95b74b43beefff69ae208acb90cc89d42cc08d710046c9367899588a3470ff41f44f8f82e7f22956fc1eb38a16384634f89c0b347656425eba46d3b090e9c77377c3131202394a133256ea1fcb62cd10e9a077f8790bca1767b8e15079cf7a99551cd4b6e0977b463cc6d1953a352f0d1883df2053b1bad5f69d7c6e60478b0000e383f8cc32a15228388f8867a0d2349bbf1e87379ee700ca", 0xd1}, {&(0x7f0000001680)="6c08e2aa52a31c92a4d60428c6a28bee9151a35b3edc3f361cb1f8a95746c86ca437e00bca175dde839e6d03381568fdbcd56ecb5ee4a27613b40386c0739317835d8392ac33064c8004f46ab8afb2b044fff93bdd3357c35ef5478959ac6e83a1d09d16d176bce8c58382879d2db88f7342db9c20c3867bb7edc66cf7a0cc4bbc1d7f500d7d2b112a667d8814210969025f85e706a3d46f540602648797947cecb095a0e7420259eb1de3754d5fe3df0fd3d7f93d816fde7031c785e3a1b1e4e7260b67fb3767d3fe1bb9660ea513d0f7b59ab0947ad7c6cb44a876fc14e710d32f2b2721c242a3823e193208d42b", 0xef}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="72107bc1d2d9a5efae5df9c8ac81d143", 0x10}, {&(0x7f00000027c0)="45d7ba3dee9cc73a9869b1bdd8a93227a001275a287833fd39839bca42ef5901143450c976be2fb79265bc2d03e3b4172ae35a3d489285dc8e0c776483a40ca9e9fed83d88ff63d5b56790e1bfc0e5477b2fd81c64cca8b35ae4ac2da985574f5f9bc1968fb097e9789ceba101906b7600abd0ae26dc0628c39d758ad91ce744516f30ba1b35c0d9a74063", 0x8b}, {&(0x7f0000002880)="ff0285980a3dbce46df9ebb2aeca0431a70eff3f670ef933e8127ba3ad07ecb8138951f200f4849b028aa19dd15d414bf6bc74c407843859ce390babc94c85d4c7060260cd5444346d1109576f26f6171b6e3d4bbb09a95810eaba5ecd427f6284fc5207a48c9245e820d5df5cc6f6c2206f45b722693c9c4001b8293545a626c3b1d12f5e92fa0cce9ad71bc0eb9d5a82c853cadf", 0x95}, {&(0x7f0000002940)="dc85de7a9c60b8770b8b806f4fe45bb01629eda46a2644a012e406f18b98dfcc08e8b864eb1d4ef79a49fa384ad48eb092a465e0e84e89ff8ace2c57915dc29f43eac47d49d25d3fd2e3c8e43d5839e4d10a07c3fd02f48a3dff29bb849f1b75992b1724e3fcc58ab1c0464aae9f832a145ae31ee4f8bea7a463cab3fe080dba2b8be8d2e95ceb1083dd97178b4af6a7b78af76acaab93eb1886bc6b79ebb7b89d68970382762e73e3aa648389623841a5c09508f0ef15262413a857f05f815d3475c692014e3fb77d6fc6154f1f18ace88888fae771e8218e83cd96adf96086cbbd11b1b7ee3317227bcb60ac6e086a536fa2", 0xf3}], 0xa, 0x5) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYBLOB="4f67bcd2fef3", @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) 930.975917ms ago: executing program 4 (id=5765): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44094}, 0x20040804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd26, 0xb32, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4008000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x1, 'virt_wifi0\x00', {}, 0x998}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r3, 0x210, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80b1}, 0x4048005) tee(r0, r0, 0xd, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x0, 0x0, 0x4, 0x9, 0x80, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x78}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x0, 0x9, 0x4, 0x10, 0xfffffffffffffffc}]}, &(0x7f00000005c0)='GPL\x00', 0x684e, 0x55, &(0x7f0000000600)=""/85, 0x1f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xb16c, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000006c0)=[{0x3, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x4, 0x3}, {0x1, 0x4, 0x4}, {0x0, 0x4, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r4, 0x0, 0x8f, 0x28, &(0x7f00000007c0)="35aa85c43457170d0b6ec1216ad55aac4eddb3223758d04b692714e6da66a1fd9344b6a6b002a295084707d3e1c38668a0210e6b7d05e58a086bc490e7f77d287c44b5906827dfbc130f3bdd178ceb7611c1aa964e48263d006b7e1c415c72d9bc357bc7d33781bbd8096a30952572176b461b02dcdf6918d4c38ca2bf258d11753676369f202cde29a591affb9e31", &(0x7f0000000880)=""/40, 0x1, 0x0, 0x1000, 0xe, &(0x7f00000008c0)="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", &(0x7f00000018c0)="6dd81c3fe233cdac1353acd05bbc", 0x4, 0x0, 0x6b80}, 0x50) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000019c0)=0xa, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40448d1}, 0x4000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001d80)={&(0x7f0000001c80), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r8, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000400) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001dc0)=0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000001f40)={r0, &(0x7f0000001e40)='virt_wifi0\x00', 0x43, &(0x7f0000001e80)={@_ha_fsid={[0x3, 0x7]}, {0x401, 0x8, 0x43}}, 0xd9d, &(0x7f0000001ec0)={@_ha_fsid}, &(0x7f0000001f00)=0xfffffff8}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f80)={0x0, 0x7fffffff, 0x5, 0x3ff}, &(0x7f0000001fc0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000002000)={r11, 0x35, "25f86683d0f1a66497a78c0e6770a7b6969d9a307e910fcf70b896a77547e4bf93887f8c4d70a1d86174cc39b6f00b35bc3418d01c"}, &(0x7f0000002040)=0x3d) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}}, 0x84) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f00000021c0)={0x130, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x73, 0x2a, [@random={0x3, 0x6d, "78327693dfec73438aceff8a2f76fef15cad077cdefa75895d7c12f6bc1a387d07eae3faca6e1a2deac37c32502a4e249501115154e8441adb9433cb615049a589d56bd1e65d424140dbdd5e6112f60f23afcb83da8c58ce5c5a1f055fe273868a5f9dd10c2a961a22f256ede9"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x62, 0x2a, [@ssid={0x0, 0x9, @random="63a28d13170ea0cd53"}, @preq={0x82, 0x51, {{}, 0x7, 0x5, 0x10, @broadcast, 0x0, @void, 0xff, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @broadcast, 0xad}, {{}, @device_b, 0xfffff800}, {{0x1}, @device_a, 0x3}, {{}, @device_b, 0x2}, {{0x1}, @broadcast, 0x1}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="e1c15efa63ec"}, @NL80211_ATTR_IE={0x12, 0x2a, [@chsw_timing={0x68, 0x4, {0x1}}, @channel_switch={0x25, 0x3, {0x1, 0x8c, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x130}, 0x1, 0x0, 0x0, 0x44894}, 0x404c011) r13 = accept(r10, &(0x7f0000002380)=@rc, &(0x7f0000002400)=0x80) sendto$isdn(r13, &(0x7f0000002440)={0x9, 0x2111, "b1dbd4c1c99486c9c93a554cfd466e41d3fc5e3b55e349ef346a7f6193f789fea76d7c26faa02621ff68e748e8f21b170caca69b62dbb9a04ee2f84179044f615afdb50c1ebd7aee0ef21d8f2a5299a9452281d1a245"}, 0x5e, 0x4000000, &(0x7f00000024c0)={0x22, 0x8a, 0xfb, 0x5, 0x6}, 0x6) 851.313081ms ago: executing program 5 (id=5766): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0xab8, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa9c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xa90, 0x1c, 0x0, 0x0, @binary="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"}]}, @nested={0x4, 0x2}]}, 0xab8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e2400000aca0b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r8, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x88, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x88}}, 0x40081) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000400)) readv(r10, &(0x7f0000000040)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000001580)=""/4088, 0xff8}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_generic(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYRESOCT=r4], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}], 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getpeername$packet(r7, &(0x7f00000011c0)={0x11, 0x0, 0x0}, &(0x7f0000001200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'ip6tnl0\x00', r12, 0x2f, 0x0, 0xe8, 0xadb, 0x10, @private1, @private2, 0x80, 0x40, 0x4, 0x1a}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000002580)={0x10c, r13, 0x100, 0x70bd2a, 0x255fdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 742.968728ms ago: executing program 4 (id=5767): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0xd0f, 0x200001, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xff, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xe, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 640.63395ms ago: executing program 1 (id=5768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x4, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x10, 0x1}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0xf, 0x2}, {0x9, 0x8000}, {0x3, 0x1}, {0x7, 0x9}, {0x9}, {0x8, 0x6}, {0x7, 0x9}, {0x4, 0x7}]}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x8}, {0xd, 0xde7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x100}}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @enum64={0xf, 0x8, 0x0, 0x13, 0x1, 0x3, [{0xa, 0x1, 0x1ff}, {0x8, 0x8, 0x8}, {0x7, 0x81, 0x200}, {0x4, 0x9, 0x4}, {0x10, 0x1, 0x7fffffff}, {0xb, 0x8, 0x2}, {0xe, 0x60, 0x19600000}, {0x2, 0x5}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000c40)=""/146, 0x124, 0x92, 0x1, 0x0, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r4], 0x48) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0}], 0x2) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@syms={0x0, 0xa, &(0x7f0000000900)=[&(0x7f00000001c0)='\x00', &(0x7f00000006c0)='GPL\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='GPL\x00', &(0x7f0000000800)='GPL\x00', &(0x7f0000000840)='GPL\x00', &(0x7f0000000880)='$\x00', &(0x7f00000008c0)='GPL\x00'], 0x0, 0x5}}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r7, 0x8, 0x0, 0x1, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2b000000000000099b0b7300", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r8], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000f40000000497b3c", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000184200000300000000000000000000000fc83000000000008520000003000000b7080000000000007b8af8ff00000000b7080000b70000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000e000000000000000700000018300000050000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183000000500000000000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x5, 0xfffffffb}, 0x10, 0x189b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r9, 0x4) close(r7) 637.184114ms ago: executing program 5 (id=5769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8954, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 617.392279ms ago: executing program 0 (id=5770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_emit_ethernet(0x17c, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@mpls_uc={0x8847, {[{0xffffe, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x8}, {0xffff}, {0x6, 0x0, 0x1}, {0x2}], @ipv6=@dccp_packet={0x0, 0x6, "4a90b7", 0x12a, 0x21, 0x0, @loopback, @empty, {[@srh={0x3c, 0xa, 0x4, 0x5, 0x2, 0x0, 0xe0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @local]}, @routing={0x33, 0x2, 0x2, 0x9, 0x0, [@mcast2]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x6, "13c21a", 0x1, "ce41c9"}, "d4c6d47c491926bc655398f3423bc5d319c6d46e4ec11e60df5f8bdbcb9fe6ab5ab2a4d5a2be5933ff517ab8647db30eed0cb01bf4231aa368ff6b4ccc4cf04241528d54e16e9e64321d899e4358a9eecf72d9f389217ade302c70f61721d9e3a5b321a4a031fd42e8cedc67e0f43341a51170c293ed7b2746f560f7ed625f60bbf18240679946beee9b1c82248dec8cb62e094a0ded3c59b4ea77fe99dacf67af5ed350072c5c9c6215"}}}}}}}, 0x0) 458.941425ms ago: executing program 0 (id=5771): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000006c0)={0x9, &(0x7f0000000180)=[{}, {@fixed}, {}, {@none}, {}, {@none}, {@none}, {@fixed}, {}]}) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 442.351527ms ago: executing program 1 (id=5772): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000000000004f6d6f8d25000045190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000000000004f6d6f8d25000045190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) 375.817323ms ago: executing program 5 (id=5773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@caif=@rfm={0x25, 0x7, "970784f9c9cd9ea5a1a400"}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000003c0)="1281c8639bf004bd604f523ea41775a51f7f6dece53dbf4eb360d58133daf4b1056a3b913d0775a6f4002fc7d29645afc31868994dc39da5b7062d81b922ef167a2bca06fc9c25fcfa258a3fc4a19e964a9be08e77fac4adbba5f2aedb2f635b5e222121d8eb5c8c500d1ad27f12c2e64c664692c38cb4beae5466032b36a2316e87a004b6ecc2d1b4d079fdb94a2eba29007a7372fd31345b3b7f2f9171475523c49e994ca6d1f32ee928685805d8f6d0b9de3ad398fd7f2037381da888848321997faca2af87b43717f124725ca492e6bd4a", 0xd3}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="59e3f0417c069dcda1f6e5b2d573c6d763", 0x11}, {&(0x7f0000000600)="54f4411fe6b990594198732840ec938d373ff30447258970444e9f534a39c97cc4aeeac1059d2780dc6c530e2b1e74be444ee9964137b0be8913b72173568fc00c4a286e0419d839192423fa5b5f1b10536ef0d156297777bad719e35b73d5d1149fdaa1d0062838bbdb06b6313fbb7d6e4f6df3706e15ddb303755cbfa557fbca9844d6ff922e9564672b3df060a23b9cd9e2e83cab1d586d30c2382e9633ead3a5cf1a61882ade4869408815c6a41a899da8e3f34efc4f4f572e52cd98cbb468f5b3f2b4ddabfdabce0254e95b7c1f234f051069cda240ce46bb720793e932f194", 0xe2}, {&(0x7f00000013c0)="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", 0x1000}], 0x5}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x7800, 0x8000, 0x84, 0x2, {{0x6, 0x4, 0x3, 0x36, 0x18, 0x64, 0x0, 0xf9, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@noop]}}}}}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r6, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r7, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a0000000500010007009db7a09e0f000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@caif=@rfm={0x25, 0x7, "970784f9c9cd9ea5a1a400"}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000003c0)="1281c8639bf004bd604f523ea41775a51f7f6dece53dbf4eb360d58133daf4b1056a3b913d0775a6f4002fc7d29645afc31868994dc39da5b7062d81b922ef167a2bca06fc9c25fcfa258a3fc4a19e964a9be08e77fac4adbba5f2aedb2f635b5e222121d8eb5c8c500d1ad27f12c2e64c664692c38cb4beae5466032b36a2316e87a004b6ecc2d1b4d079fdb94a2eba29007a7372fd31345b3b7f2f9171475523c49e994ca6d1f32ee928685805d8f6d0b9de3ad398fd7f2037381da888848321997faca2af87b43717f124725ca492e6bd4a", 0xd3}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="59e3f0417c069dcda1f6e5b2d573c6d763", 0x11}, {&(0x7f0000000600)="54f4411fe6b990594198732840ec938d373ff30447258970444e9f534a39c97cc4aeeac1059d2780dc6c530e2b1e74be444ee9964137b0be8913b72173568fc00c4a286e0419d839192423fa5b5f1b10536ef0d156297777bad719e35b73d5d1149fdaa1d0062838bbdb06b6313fbb7d6e4f6df3706e15ddb303755cbfa557fbca9844d6ff922e9564672b3df060a23b9cd9e2e83cab1d586d30c2382e9633ead3a5cf1a61882ade4869408815c6a41a899da8e3f34efc4f4f572e52cd98cbb468f5b3f2b4ddabfdabce0254e95b7c1f234f051069cda240ce46bb720793e932f194", 0xe2}, {&(0x7f00000013c0)="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", 0x1000}], 0x5}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x7800, 0x8000, 0x84, 0x2, {{0x6, 0x4, 0x3, 0x36, 0x18, 0x64, 0x0, 0xf9, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@noop]}}}}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r6, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r7, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a0000000500010007009db7a09e0f000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) (async) 306.793078ms ago: executing program 0 (id=5774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x472bd28, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e10, 0x36a81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'ovf\x00', 0x9, 0xc, 0x400059}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r6, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 306.184791ms ago: executing program 1 (id=5775): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x4be, 0x7a2]}, {0x885, 0x200, 0x0, 0xff0000000}}, 0xfffffff9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xa0e}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f7, &(0x7f0000003200)={'ip6_vti0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000340)=0x101, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x21e, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 199.616776ms ago: executing program 2 (id=5776): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r2}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x3, 0x4, 0x3}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x0, 0x8006, 0x2, 0x6, 0x2dc, 0x7fff, 0x9, r6}, &(0x7f00000000c0)=0x20) 170.835682ms ago: executing program 1 (id=5777): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = getpid() sendmsg$unix(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="00f4ff965084836300f70200000000000001ffff"], 0x30}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000540)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = accept(r6, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x480, 0x24, 0x4ee4e6a52ff56541, 0x470bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xefaa045b00dca3cd}, @TCA_TBF_RTAB={0x404, 0x2, [0x7fffffff, 0x4, 0x7, 0x5, 0x4, 0x39e7, 0xce, 0x9, 0xfffffff9, 0x9b, 0xff, 0x8, 0x9, 0xfd6a, 0x8, 0x175c, 0x800, 0x2, 0x40, 0x700, 0x7fff, 0x400, 0x6, 0x1000, 0x8000, 0x7, 0x9, 0x70000000, 0x5, 0x7c9a3f4d, 0x10, 0xfffffffe, 0x5, 0x653, 0x0, 0x57, 0xfffff866, 0x7, 0x7fff, 0xa, 0x5, 0x80000001, 0xdd1, 0x7, 0x1, 0x3, 0x8000, 0xd, 0x6, 0x343, 0x1, 0x7, 0x7, 0x100fff, 0xbf, 0x845, 0x6, 0x401, 0x7f, 0xe07, 0x9, 0x9, 0x2, 0xfffffd4c, 0x0, 0x9, 0x80000001, 0x2, 0x5, 0x4, 0xf1e4, 0xc68, 0x3ff, 0x5, 0x7, 0x1000, 0x9, 0x5, 0x0, 0x9, 0x8, 0x5c27, 0x8, 0x4, 0x4, 0x0, 0xcd, 0x9, 0x2, 0x6, 0x1ff, 0x2, 0x0, 0x4, 0xb0c, 0x7fff, 0x0, 0x49, 0x9, 0xa4000000, 0x8001, 0x4, 0x3, 0xec89, 0xe, 0x2, 0x7, 0x6, 0xae8, 0x4bf3, 0x0, 0x3, 0x97, 0x5, 0x3, 0x9, 0x9, 0x5, 0x7, 0x5, 0x4, 0x8, 0x590, 0x2b9, 0x5, 0x9, 0x80000000, 0x9, 0x7, 0x8, 0x0, 0x3a2d5e93, 0xe, 0x6, 0x8, 0x336, 0x4, 0x8, 0x756, 0x1, 0xffffffff, 0x2, 0x1, 0x1, 0x5c, 0x9, 0x6, 0x1b8cab4, 0x7, 0x7, 0x0, 0x2, 0xffffffff, 0x9, 0x278c, 0x2, 0x7, 0x2, 0x10001, 0x8, 0xa4, 0x3, 0x2, 0x5, 0x400, 0x1, 0x7, 0x3, 0x2, 0x3, 0x8, 0x4, 0x884, 0x1, 0x9, 0xc, 0x0, 0x7fff, 0x40, 0x8, 0x8, 0xb8fa, 0x6, 0x7, 0x3, 0x1000, 0xb, 0x101, 0x3, 0x7760, 0x1, 0x4, 0x3ff, 0xa, 0x8001, 0x4, 0x5, 0x6, 0x27a2, 0x0, 0xe267, 0x9, 0x9, 0x5, 0x5, 0x6, 0x80000001, 0xe, 0x6, 0x7, 0x10000, 0x4, 0x0, 0xffffffff, 0xffffffff, 0x8001, 0xfffffffe, 0x7f, 0x96, 0x2, 0x800, 0x60000, 0xffffffff, 0x7, 0x2, 0x6c, 0x3, 0xb0, 0xfffffffe, 0x0, 0x40, 0x0, 0x1, 0x6, 0xfffffff9, 0x4, 0x1, 0x684f, 0x6, 0x940, 0x8, 0x2, 0x10, 0x7ff, 0xfb, 0xffffffff, 0xe3000000, 0x1, 0x55, 0x52a2, 0x0, 0x7, 0xfc4, 0x8, 0x1000, 0x451]}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xaff1a486e76902b8}, @TCA_TBF_PBURST={0x8, 0x7, 0x1bfa}]}}]}, 0x480}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c0000001300290a00000000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0000000000000700000000000000058004000580f533892173515c2e7a6f74780cc3314f7e7fe75b0fdecabe572924117fcf91f6277affffffffd57cff13b172747f6ebf80f58d2d865082394609f7869ef49dd76c1389787b342471e3e6fa034a3787896ef6ca08d9bf2f9419dc9a98992584745a42f30e05cf3c1fdbc780d33721152027b1ea56a34a36467826397cc10d6d1a08e88d1b0cb0d96749a3a72d9d960611fe1d8fdeded6af0f28b66adbdba9f3f6a2a9cd3c3fe87c03aba1be4d69907908553bad067a686c067b8a76cbb12e041609a1cce3"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r11, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, ' '}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000129bd7000fedbdf256c00000008002600081600000800a00005000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x21) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast1, @in=@empty}}, {{@in6=@mcast2}}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x40800}, 0x0) 55.410988ms ago: executing program 0 (id=5778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020800001c0004800500030001000000050003000100000005000300020000000800020003000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000200081dc000000000000000002000000000000031f0000000500160004000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100039041c0000e00000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 54.038566ms ago: executing program 2 (id=5779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000056c0)=@newtaction={0x1000, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x170, 0x1, [@m_ipt={0x16c, 0x6, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xb5, 0x6, "205c8883dc9c07ef246113fe39496e7dc1516dd1fb3f984692315359e777cabc9c2ae58becc6773242fd76006a5ecf4371133c8c64eeabf8dba315ebb2da60e606aeed56638db6cf39ce0d1fe6ecdce231e0b8098e7db26002d8a2b228f0cab4dc0154ae1488c04ede939125b9929de843e5a1e4d178de1ecbcd3d8d3ab21dbfe16003e95429a4c1e3d21709643855dc43fdf886ade6badb047f133d5ed7fe83c2e25b3cb9d9ddee3f4c4f9856136029a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xe7c, 0x1, [@m_ipt={0x268, 0x13, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x95, 0x6, {0xd, 'security\x00', 0x6, 0x7f, "de822b6f7708e451972022ce52ed7664c9f0967bc21250627d2575de6e5cfa24ce1e6040279970947063abf0a99e192a7d36b458b3c9a5716c62a9d0505da0b68f711a37bfd475c83603856b1134ecffc5496f615ea239f620fb4a8c9ec5b5693e54cfd4c49ccd419fe71b"}}, @TCA_IPT_TARG={0xe5, 0x6, {0xc, 'raw\x00', 0x0, 0x7f, "5bc9dd1f04e53bf27e3e69603bbadc5f6f909790805f554f1f24c05b12275eaff6d2ef52fb13faf4469ae27550cbb5ccaa037e18bce0bf4a142fff1025ece340da8091d8538fdd4680e89f0d814d7dfd9372e010c39b2ed5e2a1d0427cbab6fbed8ee5411e3ef29f9b3e3c159b0526d2712c628c71f7f183ca68f441def53750e36778b9389e22c24fbe239043ec4b609ce108bff8657e8b0c6208b2a758a6aac7e489753f94b7e3404d60911da47994999321253d8c1b5ce1becb"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x81, 0x6, "b907cf430c7132cd2bb94dab1bb2ebb4b351e2844ba30d1b7a524d7864fa18af96c421a0bf007d2b6c6a08d13535c97a1439ff76f54616feec91c88a27f4ad94d4414ac4d9e6305858b4dd430dd76a24dead1031e859eb616ece8e54387fa372589b7ed0e2a1d199b1deb405f471fbd90e4d914653c845a357403c2852"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xc10, 0x11, 0x0, 0x0, {{0x8}, {0xb2c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0xb0d, 0x6, {0x6, 'security\x00', 0xff, 0x12, "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"}}]}, {0xbd, 0x6, "7aeb72fb05aed2b7250b4e304761d0d8e0dca642281104a39a3370a7cc751a130c57fcc80332f5013b30e682e632fafe646688ce1796cfa067f5174aad5efeb0e3ab81a13099335f4f32fa866fc03779764441b6007d60d0304beeb9dfa5dc91952d53c1422d84b1620f10fd46b0bfd944b02cbeafc8b8e37f2ff5dcc0989dfbe4d4269bff2552e4b5cf263711a36a0f296a16201a20e869b6bd4755ad90db11050b9e134331471f44b44ed24f655e919a1f964d6118cf1429"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1000}}, 0x4008800) (async, rerun: 64) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (rerun: 64) close(0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x15, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x89, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xd}, @lsrr={0x83, 0x3, 0x71}]}}}}}}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 64) 0s ago: executing program 5 (id=5780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000d80)=""/151, 0x0, 0x97, 0x0, 0x5}, 0x20) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r10, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8000, 0x50}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20048050) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, r8, 0x3, '\x00', r6, r2, 0x5, 0x2, 0x2}, 0x50) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000002640)={0x0, @multicast2, @empty}, &(0x7f0000002680)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x3, 0x30, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x1, 0x6, 0x7, 0x1ea, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb34c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6487}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001640)=""/4096, 0x41000, 0x50, '\x00', r12, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x5, 0xb, 0xfffffffe, 0x10}, 0x10, 0xffffffffffffffff, r9, 0x1, &(0x7f0000002700)=[r8, r8], &(0x7f0000002740)=[{0x1, 0x5, 0x10, 0x4}], 0x10, 0xc1}, 0x94) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): d length. [ 444.714771][T19795] netlink: 'syz.5.3871': attribute type 13 has an invalid length. [ 444.967578][T19809] syzkaller1: entered promiscuous mode [ 444.990058][T19809] syzkaller1: entered allmulticast mode [ 445.218017][T19825] syzkaller0: entered promiscuous mode [ 445.232146][T19825] syzkaller0: entered allmulticast mode [ 445.414613][T19804] netlink: 'syz.1.3874': attribute type 2 has an invalid length. [ 445.446431][T19842] syzkaller0: entered promiscuous mode [ 445.456182][T19842] syzkaller0: entered allmulticast mode [ 445.468362][T19804] netlink: 'syz.1.3874': attribute type 2 has an invalid length. [ 445.488819][T19836] syzkaller0: entered promiscuous mode [ 445.494323][T19836] syzkaller0: entered allmulticast mode [ 445.520570][ T9648] TC_ACT_REPEAT abuse ? [ 445.524435][T19847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.537525][T19848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.935045][T19868] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 445.992298][T19868] netlink: 'syz.0.3891': attribute type 83 has an invalid length. [ 446.122104][T19875] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 446.145174][T19881] netlink: 'syz.2.3895': attribute type 10 has an invalid length. [ 446.205566][T19881] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 446.416370][T19901] mac80211_hwsim hwsim32 ÿ: renamed from wlan1 [ 446.429395][T19906] netlink: 'syz.1.3900': attribute type 11 has an invalid length. [ 446.526776][ T9636] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.566353][ T9636] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.579906][ T9636] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.612691][ T9636] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.686988][T19913] ipvlan3: entered allmulticast mode [ 446.709390][T19913] veth0: entered allmulticast mode [ 446.813735][T19926] bond1: option miimon: invalid value (18446744073709551585) [ 446.821433][T19926] bond1: option miimon: allowed values 0 - 2147483647 [ 446.831336][T19926] bond1 (unregistering): Released all slaves [ 447.008741][T19951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.021928][T19950] netlink: 'syz.1.3910': attribute type 2 has an invalid length. [ 447.308004][T19982] batadv1: entered allmulticast mode [ 447.333970][T19975] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20003 [ 447.583377][T20002] bond4: entered promiscuous mode [ 447.599981][T20002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.610359][T20011] __nla_validate_parse: 85 callbacks suppressed [ 447.610376][T20011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3928'. [ 447.693475][T20009] wg1 speed is unknown, defaulting to 1000 [ 448.021563][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 448.034154][T20024] bond0: entered promiscuous mode [ 448.042987][T20024] bond0: entered allmulticast mode [ 448.049187][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'. [ 448.060420][T20024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.133884][T20035] veth5: entered promiscuous mode [ 448.149313][T20035] veth5: entered allmulticast mode [ 448.182413][T20035] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 448.196716][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3940'. [ 448.287207][T20048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3940'. [ 448.636567][T20073] syzkaller0: entered promiscuous mode [ 448.643519][T20073] syzkaller0: entered allmulticast mode [ 450.575844][T20116] validate_nla: 36 callbacks suppressed [ 450.575862][T20116] netlink: 'syz.4.3962': attribute type 10 has an invalid length. [ 450.625351][T20115] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3959'. [ 450.754572][T20116] bridge_slave_1: left allmulticast mode [ 450.763426][T20116] bridge_slave_1: left promiscuous mode [ 450.776090][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.795129][T20126] sctp: Trying to GSO but underlying device doesn't support it. [ 450.850518][T20116] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 450.884399][T20134] x_tables: unsorted underflow at hook 4 [ 450.895310][T20138] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 450.916176][T20139] netlink: 'syz.0.3967': attribute type 2 has an invalid length. [ 450.952846][T20139] vþ: entered promiscuous mode [ 450.960035][T20135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3967'. [ 450.972253][T20135] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3967'. [ 451.053670][T20145] openvswitch: netlink: EtherType 0 is less than min 600 [ 451.126416][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 451.495560][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 90 seconds [ 451.506735][T20176] syzkaller1: entered promiscuous mode [ 451.506756][T20176] syzkaller1: entered allmulticast mode [ 451.522130][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 90 seconds [ 451.533212][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 90 seconds [ 451.544605][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 90 seconds [ 451.710630][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3984'. [ 451.807588][T20193] Cannot find add_set index 2 as target [ 451.837168][T20198] tipc: Enabling of bearer rejected, failed to enable media [ 452.063994][T20213] wg1 speed is unknown, defaulting to 1000 [ 452.149525][ T5159] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 90 seconds [ 452.160636][ T5159] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 90 seconds [ 452.172048][ T5159] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 90 seconds [ 452.183317][ T5159] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 90 seconds [ 452.206039][T20220] syz_tun: entered allmulticast mode [ 452.309602][T20220] syz_tun: left allmulticast mode [ 452.690651][T20250] batadv1: entered allmulticast mode [ 452.863343][T20264] sctp: [Deprecated]: syz.2.4010 (pid 20264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.863343][T20264] Use struct sctp_sack_info instead [ 453.105066][T20276] __nla_validate_parse: 1 callbacks suppressed [ 453.105083][T20276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4011'. [ 453.280378][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4021'. [ 453.291721][T20292] tipc: Invalid UDP bearer configuration [ 453.291772][T20292] tipc: Enabling of bearer rejected, failed to enable media [ 453.384779][T20302] bond4: entered allmulticast mode [ 453.546788][T20312] syzkaller0: entered promiscuous mode [ 453.560307][T20312] syzkaller0: entered allmulticast mode [ 453.573810][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.580468][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.586773][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.593090][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.599484][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.605753][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.612068][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.618466][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.618691][T20318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4029'. [ 453.624729][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.640028][T20312] tc action pedit 'at' offset 257 out of bounds [ 453.646297][T20312] 0: reclassify loop, rule prio 0, protocol 800 [ 453.850446][T20322] nbd1: detected capacity change from 0 to 63 [ 453.875746][T20312] block nbd1: NBD_DISCONNECT [ 453.883202][T20312] block nbd1: Disconnected due to user request. [ 453.890766][T20312] block nbd1: shutting down sockets [ 453.902801][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.912697][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.928327][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.937880][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.944461][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 453.947173][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.964040][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 453.971959][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.981490][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 453.991959][T15320] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.003104][T15320] Buffer I/O error on dev nbd1, logical block 0, async page read [ 454.011417][T15320] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.019359][T20347] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.021023][T15320] Buffer I/O error on dev nbd1, logical block 1, async page read [ 454.039922][T15320] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.053736][T15320] Buffer I/O error on dev nbd1, logical block 2, async page read [ 454.062326][T15320] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.080605][T15320] Buffer I/O error on dev nbd1, logical block 3, async page read [ 454.091738][T15320] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.119061][T15320] Buffer I/O error on dev nbd1, logical block 0, async page read [ 454.128080][T20353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4038'. [ 454.154548][T15320] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.164944][T15320] Buffer I/O error on dev nbd1, logical block 1, async page read [ 454.175700][T15320] ldm_validate_partition_table(): Disk read failed. [ 454.184991][T15320] Dev nbd1: unable to read RDB block 0 [ 454.190358][T20356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4040'. [ 454.191991][T15320] nbd1: unable to read partition table [ 454.213331][T15320] ldm_validate_partition_table(): Disk read failed. [ 454.226734][T20350] syzkaller1: entered promiscuous mode [ 454.240856][T20350] syzkaller1: entered allmulticast mode [ 454.242001][T20360] netlink: 'syz.5.4040': attribute type 1 has an invalid length. [ 454.255685][T15320] Dev nbd1: unable to read RDB block 0 [ 454.262349][T15320] nbd1: unable to read partition table [ 454.384362][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4041'. [ 454.560470][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4047'. [ 454.583669][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4046'. [ 454.596199][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 455.043608][T20410] veth1_macvtap: left promiscuous mode [ 455.052429][T20410] macsec0: entered promiscuous mode [ 455.057758][T20410] macsec0: entered allmulticast mode [ 455.084931][T20410] veth1_macvtap: entered promiscuous mode [ 455.093114][T20410] veth1_macvtap: entered allmulticast mode [ 455.099531][T20410] macsec0: left promiscuous mode [ 455.104748][T20410] macsec0: left allmulticast mode [ 455.111401][T20410] veth1_macvtap: left allmulticast mode [ 455.328354][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.750205][T20427] tipc: Resetting bearer [ 455.812164][T20432] netlink: 'syz.2.4061': attribute type 20 has an invalid length. [ 455.892368][T20434] veth5: entered allmulticast mode [ 455.937311][ T9648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.952654][ T9648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.988281][ T9648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.022630][ T9648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.401183][T20473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.795828][T20489] syzkaller0: entered promiscuous mode [ 456.811632][T20489] syzkaller0: entered allmulticast mode [ 456.988079][T20497] bond3 (unregistering): Released all slaves [ 457.184473][T20512] netlink: 'syz.5.4081': attribute type 1 has an invalid length. [ 457.211923][T20512] netlink: 'syz.5.4081': attribute type 1 has an invalid length. [ 457.247953][T20512] netlink: 'syz.5.4081': attribute type 8 has an invalid length. [ 457.580963][ T798] IPVS: starting estimator thread 0... [ 457.661455][T20544] sch_fq: defrate 0 ignored. [ 457.690140][T20538] IPVS: using max 34 ests per chain, 81600 per kthread [ 458.221238][T20580] netlink: 'syz.5.4104': attribute type 10 has an invalid length. [ 458.272121][T20580] veth0_vlan: left promiscuous mode [ 458.280157][T20580] veth0_vlan: entered promiscuous mode [ 458.290548][T20580] team0: Device veth0_vlan failed to register rx_handler [ 458.314679][T20579] wg1 speed is unknown, defaulting to 1000 [ 458.789951][T20594] __nla_validate_parse: 11 callbacks suppressed [ 458.789969][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 458.972282][T20605] netlink: 'syz.1.4113': attribute type 9 has an invalid length. [ 459.346764][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 459.375326][T20616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.634067][T20645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4130'. [ 459.656308][T20645] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 459.666934][T20647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4129'. [ 459.738631][T20654] netlink: 'syz.1.4132': attribute type 1 has an invalid length. [ 459.851464][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 120 seconds [ 459.854014][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4132'. [ 459.868251][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 120 seconds [ 459.883914][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 120 seconds [ 459.895443][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 120 seconds [ 459.924874][T20659] bond5: (slave veth5): Enslaving as an active interface with a down link [ 459.990342][T20654] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.224319][T20677] wg1 speed is unknown, defaulting to 1000 [ 460.257656][T20676] wg1 speed is unknown, defaulting to 1000 [ 460.304555][T20687] wg1 speed is unknown, defaulting to 1000 [ 460.789939][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4145'. [ 461.288568][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4155'. [ 461.293193][T20745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4157'. [ 461.309850][T20737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.461487][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'. [ 461.602829][T20770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4163'. [ 461.650274][T20772] netlink: 'syz.0.4166': attribute type 29 has an invalid length. [ 461.677297][T20772] netlink: 'syz.0.4166': attribute type 29 has an invalid length. [ 461.689740][T20774] netlink: 'syz.1.4165': attribute type 1 has an invalid length. [ 461.730146][T20774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.751121][ T29] audit: type=1800 audit(1776187818.758:4): pid=20779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4168" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1521 res=0 errno=0 [ 461.790062][T20774] bond6: (slave bridge4): making interface the new active one [ 461.808073][T20774] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 461.827998][T20772] wg1 speed is unknown, defaulting to 1000 [ 462.474624][T20821] : entered promiscuous mode [ 462.530485][T20825] vlan2: entered allmulticast mode [ 462.546355][T20825] gretap0: entered allmulticast mode [ 462.699313][T20831] can: request_module (can-proto-0) failed. [ 462.845450][T20847] IPv6: NLM_F_REPLACE set, but no existing node found! [ 463.033284][T20862] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 463.192362][T20866] batadv1: entered allmulticast mode [ 463.293634][T20869] syzkaller0: entered allmulticast mode [ 463.337943][T20864] syzkaller0 (unregistering): left allmulticast mode [ 463.463020][T20876] bond1: entered promiscuous mode [ 463.469243][T20876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.508880][T20881] bridge1: entered promiscuous mode [ 463.523013][T20881] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 463.869352][T20905] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 463.890748][T20907] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 463.977017][T20909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.992430][T20914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.995811][T20909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.017362][T20909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.026739][T20909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.121312][T20920] sock: sock_set_timeout: `syz.4.4208' (pid 20920) tries to set negative timeout [ 464.148729][T20924] __nla_validate_parse: 9 callbacks suppressed [ 464.148747][T20924] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4210'. [ 464.181379][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4209'. [ 464.290345][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4213'. [ 464.437810][T20947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4217'. [ 464.441938][T20948] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4217'. [ 464.491483][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 464.557183][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4219'. [ 464.557502][T20957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4219'. [ 464.645838][T20963] netlink: 'syz.4.4221': attribute type 21 has an invalid length. [ 464.657685][T20963] netlink: 'syz.4.4221': attribute type 22 has an invalid length. [ 464.671526][T20963] netlink: 'syz.4.4221': attribute type 23 has an invalid length. [ 464.684323][T20963] netlink: 'syz.4.4221': attribute type 25 has an invalid length. [ 464.695563][T20963] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4221'. [ 464.709349][T20963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.847833][T20976] netlink: 'syz.0.4227': attribute type 10 has an invalid length. [ 464.868759][T20974] syzkaller0: entered promiscuous mode [ 464.874309][T20974] syzkaller0: entered allmulticast mode [ 464.887231][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4226'. [ 464.910483][T20974] 0: reclassify loop, rule prio 0, protocol 800 [ 464.940475][ T5159] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 60 seconds [ 464.951446][ T5159] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 60 seconds [ 464.963957][ T5159] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 60 seconds [ 464.975559][ T5159] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 60 seconds [ 465.026708][T20988] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 465.060047][T20989] netlink: 'syz.2.4229': attribute type 2 has an invalid length. [ 465.142209][T20995] bond3: (slave gretap2): making interface the new active one [ 465.154248][T20995] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 465.177519][T20988] macvlan2: entered promiscuous mode [ 465.183484][T20988] macvlan2: entered allmulticast mode [ 465.190830][T20988] bond3: entered promiscuous mode [ 465.195890][T20988] gretap2: entered promiscuous mode [ 465.202514][T20988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.213669][T20988] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 465.230510][T20988] bond3: left promiscuous mode [ 465.235417][T20988] gretap2: left promiscuous mode [ 465.881072][T21060] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 465.942415][T21062] nbd: couldn't find a device at index 0 [ 466.575735][T21108] wg1 speed is unknown, defaulting to 1000 [ 466.720769][T21119] syzkaller0: entered promiscuous mode [ 466.726405][T21119] syzkaller0: entered allmulticast mode [ 467.310551][T21155] validate_nla: 5 callbacks suppressed [ 467.310570][T21155] netlink: 'syz.5.4284': attribute type 1 has an invalid length. [ 467.423000][T21155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.428713][T21159] openvswitch: netlink: Message has 1 unknown bytes. [ 467.451955][T21159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.475905][T21160] bond2: (slave ip6gretap1): making interface the new active one [ 467.485656][T21160] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 468.236741][T21217] netlink: 'syz.5.4303': attribute type 10 has an invalid length. [ 468.453996][T21230] nbd: couldn't find device at index 2 [ 468.463520][T21230] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 468.736266][T21246] netlink: 'syz.1.4311': attribute type 20 has an invalid length. [ 468.771983][T21246] netlink: 'syz.1.4311': attribute type 20 has an invalid length. [ 468.772023][ T9637] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.793627][ T9637] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.823884][ T9637] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.843491][ T9637] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.943745][T21249] syzkaller0: entered promiscuous mode [ 468.949817][T21249] syzkaller0: entered allmulticast mode [ 469.186214][T21264] netlink: 'syz.4.4317': attribute type 11 has an invalid length. [ 469.194705][T21262] __nla_validate_parse: 23 callbacks suppressed [ 469.194722][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.200727][T21264] netlink: 'syz.4.4317': attribute type 11 has an invalid length. [ 469.210260][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.210412][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.210557][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.210712][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.210860][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.211012][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.213608][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.230116][T21264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4317'. [ 469.277068][T21262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4317'. [ 470.891314][ T9648] bridge_slave_1: left allmulticast mode [ 470.897317][ T9648] bridge_slave_1: left promiscuous mode [ 470.939013][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.011325][T21288] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 471.020081][T21293] netlink: 'syz.5.4326': attribute type 1 has an invalid length. [ 471.029929][ T9648] ¾x9ÿ: left allmulticast mode [ 471.034726][ T9648] ¾x9ÿ: left promiscuous mode [ 471.047100][ T9648] bridge0: port 1(0¾x9ÿ) entered disabled state [ 471.275171][T21313] netlink: 'syz.0.4327': attribute type 1 has an invalid length. [ 471.307029][ T9648] erspan0 (unregistering): left promiscuous mode [ 471.336373][ T9648] gretap0 (unregistering): left promiscuous mode [ 471.400786][ T9648] dvmrp8 (unregistering): left allmulticast mode [ 471.903364][ T9648] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.912807][ T9648] bond_slave_0: left promiscuous mode [ 471.920529][ T9648] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.930879][ T9648] bond_slave_1: left promiscuous mode [ 471.937107][ T9648] .` (unregistering): Released all slaves [ 471.946606][ T9648] bond1 (unregistering): Released all slaves [ 471.960225][ T9648] bond2 (unregistering): (slave veth3): Releasing active interface [ 471.972316][ T9648] bond2 (unregistering): (slave veth5): Releasing active interface [ 471.985198][ T9648] bond2 (unregistering): Released all slaves [ 471.998736][ T9648] bond3 (unregistering): Released all slaves [ 472.011235][ T9648]  (unregistering): Released all slaves [ 472.023757][ T9648] bond0 (unregistering): Released all slaves [ 472.038791][ T9648] bond4 (unregistering): Released all slaves [ 472.062610][ T9648] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 472.071482][ T9648] veth0_to_bond: left promiscuous mode [ 472.077101][ T9648] veth0_to_bond: left allmulticast mode [ 472.088451][ T9648] bond5 (unregistering): Released all slaves [ 472.107175][ T9648] bond6 (unregistering): Released all slaves [ 472.123920][ T9648] bond7 (unregistering): Released all slaves [ 472.145025][T21293] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 472.146385][T21298] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 472.316595][ T9648] 9: left promiscuous mode [ 472.324360][T21323] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 472.622494][T21337] team0: Device gtp4 is up. Set it down before adding it as a team port [ 472.649771][T21342] nbd: must specify an index to disconnect [ 472.698815][ T9648] tipc: Left network mode [ 472.941302][T21363] netlink: 'syz.1.4341': attribute type 2 has an invalid length. [ 472.988693][T21359] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 473.030415][T21359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.114718][T21367] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.162777][T21367] bond5: (slave lo): Enslaving as an active interface with an up link [ 473.210969][T21367] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 473.221970][T21380] netlink: 'syz.0.4346': attribute type 1 has an invalid length. [ 473.477075][T21400] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 474.110710][T21443] netlink: 'syz.2.4363': attribute type 39 has an invalid length. [ 474.428271][T21452] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 474.524422][ T9648] hsr_slave_0: left promiscuous mode [ 474.541189][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.559627][ T9648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.589866][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.597298][ T9648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.655102][ T9648] veth1_macvtap: left promiscuous mode [ 474.668675][ T9648] veth1_vlan: left promiscuous mode [ 474.679048][T21480] __nla_validate_parse: 67 callbacks suppressed [ 474.679065][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 474.882745][ T9648] pimreg (unregistering): left allmulticast mode [ 475.012759][ T9648] team0 (unregistering): Port device team_slave_1 removed [ 475.036455][ T9648] team0 (unregistering): Port device team_slave_0 removed [ 475.165522][T21476] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 475.187218][T21476] bond2 (unregistering): Released all slaves [ 475.443155][T21502] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 475.525984][T21514] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4381'. [ 475.574142][T21514] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 475.611023][T21514] netlink: 476 bytes leftover after parsing attributes in process `syz.4.4381'. [ 475.631325][T21514] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4381'. [ 475.643923][T21513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4383'. [ 475.722915][T21522] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4382'. [ 475.778958][T21524] syzkaller1: entered promiscuous mode [ 475.793438][T21524] syzkaller1: entered allmulticast mode [ 475.801831][ T9648] IPVS: stop unused estimator thread 0... [ 475.822293][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'. [ 475.832149][T21510] nbd0: detected capacity change from 0 to 63 [ 475.848752][T21519] block nbd0: NBD_DISCONNECT [ 475.858810][T21519] block nbd0: Disconnected due to user request. [ 475.865230][T21519] block nbd0: shutting down sockets [ 475.898143][ C1] blk_print_req_error: 138 callbacks suppressed [ 475.898162][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.914032][ C1] buffer_io_error: 138 callbacks suppressed [ 475.914049][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.927806][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.937362][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 475.945208][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.954737][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 475.962663][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.972202][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 475.982477][T15320] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.992549][T15320] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.002206][T15320] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.011888][T15320] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.022544][T15320] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.035683][T15320] Buffer I/O error on dev nbd0, logical block 2, async page read [ 476.050571][T15320] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.088335][T15320] Buffer I/O error on dev nbd0, logical block 3, async page read [ 476.118826][T15320] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.130783][T15320] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.149140][T15320] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.171756][T15320] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.191557][T15320] ldm_validate_partition_table(): Disk read failed. [ 476.201481][T15320] Dev nbd0: unable to read RDB block 0 [ 476.211830][T15320] nbd0: unable to read partition table [ 476.244351][T15320] ldm_validate_partition_table(): Disk read failed. [ 476.258939][T15320] Dev nbd0: unable to read RDB block 0 [ 476.265601][T15320] nbd0: unable to read partition table [ 476.404966][T21555] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4392'. [ 476.427336][T21555] netlink: Unknown conntrack attr (0) [ 476.523111][T21558] syzkaller0: entered promiscuous mode [ 476.540042][T21558] syzkaller0: entered allmulticast mode [ 476.631979][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4397'. [ 476.660065][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4397'. [ 476.718761][T21570] netlink: 'syz.2.4398': attribute type 11 has an invalid length. [ 476.735396][T21573] netlink: 'syz.4.4399': attribute type 33 has an invalid length. [ 476.775455][T21579] netlink: 'syz.4.4399': attribute type 33 has an invalid length. [ 476.990422][T21595] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 477.034924][T21595] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 477.116835][T21612] ip6erspan0: entered allmulticast mode [ 477.125330][T21615] netlink: 'syz.4.4412': attribute type 8 has an invalid length. [ 477.306639][T21626] netlink: 'syz.0.4414': attribute type 10 has an invalid length. [ 477.771361][T21664] syz_tun: entered allmulticast mode [ 478.471691][T21706] syzkaller1: entered promiscuous mode [ 478.487610][ T47] IPVS: starting estimator thread 0... [ 478.491643][T21706] syzkaller1: entered allmulticast mode [ 478.522025][T21657] syz_tun: left allmulticast mode [ 478.537765][T21706] syzkaller0: entered promiscuous mode [ 478.543861][T21706] syzkaller0: entered allmulticast mode [ 478.589533][T21714] IPVS: using max 35 ests per chain, 84000 per kthread [ 479.291540][T21751] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.306493][T21751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 479.323972][T21751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.337876][T21769] validate_nla: 1 callbacks suppressed [ 479.337894][T21769] netlink: 'syz.5.4451': attribute type 1 has an invalid length. [ 479.414945][T21769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.501122][T21775] bond3: (slave gretap2): making interface the new active one [ 479.529769][T21775] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 479.566522][T21751] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.585019][T21751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 479.626760][T21751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.713934][T21751] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.728496][T21751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 479.751085][T21751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.863331][T21751] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.875283][T21751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 479.931839][T21751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 479.981612][T21801] netlink: 'syz.2.4457': attribute type 1 has an invalid length. [ 480.038629][T21801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 480.065160][T21801] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 480.113851][T21810] __nla_validate_parse: 11 callbacks suppressed [ 480.113867][T21810] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4460'. [ 480.146058][T21801] bond7: entered promiscuous mode [ 480.151961][T21801] bond7: entered allmulticast mode [ 480.237286][ T9648] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.258028][ T9648] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 480.269499][ T9648] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 480.307832][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4466'. [ 480.529526][ T9637] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.541550][ T9637] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 480.558872][ T9637] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 480.599356][ T9636] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.619970][ T9636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 480.635513][ T9636] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 480.667634][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4469'. [ 480.685446][ T9631] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.700139][ T9631] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 480.714052][ T9631] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 480.908478][T21857] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.916182][T21857] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.953448][T21868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4472'. [ 480.984715][T21868] syz_tun: entered promiscuous mode [ 481.001036][T21868] syz_tun: entered allmulticast mode [ 481.012657][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4475'. [ 481.087475][ T5194] udevd[5194]: worker [14564] /devices/virtual/block/nbd7 is taking a long time [ 481.115426][T21880] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4477'. [ 481.333767][T21898] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4481'. [ 481.576517][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 120 seconds [ 481.587911][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 120 seconds [ 481.600165][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 120 seconds [ 481.612223][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 120 seconds [ 481.805023][T21931] lo: Caught tx_queue_len zero misconfig [ 481.849789][T21934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4491'. [ 482.076195][T21946] netlink: 'syz.2.4495': attribute type 21 has an invalid length. [ 482.094874][T21948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4496'. [ 482.104995][T21946] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4495'. [ 482.114563][T21946] netlink: 'syz.2.4495': attribute type 5 has an invalid length. [ 482.133310][T21952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.212802][ T5159] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 120 seconds [ 482.223942][ T5159] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 120 seconds [ 482.235442][ T5159] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 120 seconds [ 482.247580][ T5159] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 120 seconds [ 482.583015][T21973] netlink: 'syz.1.4501': attribute type 1 has an invalid length. [ 482.593429][T21974] netlink: 'syz.1.4501': attribute type 1 has an invalid length. [ 482.663153][T21973] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 482.664258][T21974] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 482.873967][T21990] pim6reg: entered allmulticast mode [ 482.883854][T21990] netlink: Conntrack attr has 4 unknown bytes [ 482.921774][T21975] wg1 speed is unknown, defaulting to 1000 [ 483.268028][T22009] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 483.543875][T22027] vlan2: entered promiscuous mode [ 483.552812][T22027] gretap0: entered promiscuous mode [ 484.297277][T22089] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 484.370689][T22089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.406338][T22089] vlan3: entered promiscuous mode [ 484.413613][T22089] bond2: entered promiscuous mode [ 484.441861][T22089] vlan3: entered allmulticast mode [ 484.451494][T22089] bond2: entered allmulticast mode [ 485.002059][T22137] veth0_to_team: Caught tx_queue_len zero misconfig [ 485.026756][T22137] netlink: 'syz.2.4546': attribute type 25 has an invalid length. [ 485.042566][T22137] netlink: 'syz.2.4546': attribute type 25 has an invalid length. [ 485.054283][T22141] netlink: 'syz.4.4547': attribute type 5 has an invalid length. [ 485.490635][T22159] __nla_validate_parse: 17 callbacks suppressed [ 485.490656][T22159] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4550'. [ 485.641527][T22179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.711852][T22184] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4558'. [ 485.817108][T22159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4550'. [ 485.843157][T22189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4559'. [ 485.847035][T22191] netlink: 'syz.0.4560': attribute type 4 has an invalid length. [ 486.378013][T22227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 486.550419][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4571'. [ 486.614189][T22240] gtp0: entered promiscuous mode [ 486.632656][T22240] gtp0: entered allmulticast mode [ 486.674409][T22248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4573'. [ 486.699221][T22248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4573'. [ 486.771802][T22257] xt_hashlimit: size too large, truncated to 1048576 [ 486.779768][T22255] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 487.039906][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 487.083470][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 487.088481][T22273] netlink: 'syz.4.4579': attribute type 10 has an invalid length. [ 487.092886][T22274] netlink: 'syz.4.4579': attribute type 10 has an invalid length. [ 487.296077][T22280] tipc: Started in network mode [ 487.303512][T22280] tipc: Node identity d23d6d17f9, cluster identity 4711 [ 487.311786][T22280] tipc: Enabled bearer , priority 0 [ 487.319321][T22279] wg1 speed is unknown, defaulting to 1000 [ 487.407875][T22283] syzkaller0: entered promiscuous mode [ 487.414550][T22283] syzkaller0: entered allmulticast mode [ 487.430348][T22283] tipc: Resetting bearer [ 487.552314][T22278] tipc: Resetting bearer [ 487.720905][T22303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.748401][T22307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.316262][T22278] tipc: Disabling bearer [ 489.371676][ T47] tipc: Node number set to 725445911 [ 489.559796][T22335] netlink: 'syz.4.4591': attribute type 7 has an invalid length. [ 489.588626][T22335] netlink: 'syz.4.4591': attribute type 8 has an invalid length. [ 489.647845][T22335] pim6reg527: entered allmulticast mode [ 489.894492][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 150 seconds [ 489.906406][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 150 seconds [ 489.918328][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 150 seconds [ 489.934469][T22348] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 489.948441][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 150 seconds [ 490.002946][T22355] netlink: 'syz.1.4595': attribute type 75 has an invalid length. [ 490.171273][T22357] syzkaller0: entered promiscuous mode [ 490.180684][T22357] syzkaller0: entered allmulticast mode [ 491.956985][T22370] __nla_validate_parse: 35 callbacks suppressed [ 491.957005][T22370] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4598'. [ 492.050645][T22394] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 492.072957][T22397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4603'. [ 492.095230][T22399] openvswitch: netlink: IP tunnel dst address not specified [ 492.461301][T22409] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20003 [ 492.543703][T22415] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.4608'. [ 492.586440][T22419] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 492.620906][T22420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4608'. [ 492.661255][T22420] openvswitch: netlink: Flow key attr not present in new flow. [ 492.957483][T22406] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 492.965746][T22406] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4605'. [ 493.241543][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4619'. [ 493.325564][T22462] netlink: 208504 bytes leftover after parsing attributes in process `syz.2.4620'. [ 493.355753][T22464] x_tables: duplicate underflow at hook 1 [ 493.368615][T22464] Cannot find add_set index 2 as target [ 493.375007][T22464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4621'. [ 493.389742][T22464] netlink: 'syz.5.4621': attribute type 4 has an invalid length. [ 493.693167][T22487] Bluetooth: MGMT ver 1.23 [ 493.713912][T22490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4631'. [ 493.945145][T22497] netlink: 'syz.2.4635': attribute type 39 has an invalid length. [ 494.192809][T22518] bond3: entered promiscuous mode [ 494.229740][T22522] macvlan3: entered promiscuous mode [ 494.235082][T22522] macvlan3: entered allmulticast mode [ 494.270061][T22522] bond3: (slave macvlan3): Opening slave failed [ 494.328570][T22524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4644'. [ 494.453677][T22529] syzkaller0: entered promiscuous mode [ 494.463499][T22529] syzkaller0: entered allmulticast mode [ 495.011313][ T5159] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 90 seconds [ 495.025093][ T5159] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 90 seconds [ 495.036455][ T5159] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 90 seconds [ 495.047727][ T5159] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 90 seconds [ 495.508963][T22611] netlink: 'syz.1.4675': attribute type 1 has an invalid length. [ 495.601096][T22612] wg1 speed is unknown, defaulting to 1000 [ 495.645249][T22620] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 495.827146][T22633] xt_hashlimit: size too large, truncated to 1048576 [ 495.893308][T22634] –: renamed from vxcan1 (while UP) [ 496.357047][T22656] netlink: 'syz.4.4683': attribute type 1 has an invalid length. [ 496.435904][T22669] netlink: 'syz.0.4685': attribute type 1 has an invalid length. [ 496.558028][T22656] macvlan3: entered promiscuous mode [ 496.577252][T22656] macvlan3: entered allmulticast mode [ 496.585885][T22656] bond4: entered promiscuous mode [ 496.630366][T22656] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 496.643575][T22656] bond4: left promiscuous mode [ 496.699578][T22660] netlink: 'syz.0.4685': attribute type 5 has an invalid length. [ 496.819540][T22694] netlink: 'syz.2.4691': attribute type 2 has an invalid length. [ 497.019469][T22705] netlink: 'syz.4.4696': attribute type 12 has an invalid length. [ 497.055390][T22705] bond5: option primary_reselect: invalid value (255) [ 497.070291][T22705] bond5 (unregistering): Released all slaves [ 497.394592][T22732] bond8: Unable to set down delay as MII monitoring is disabled [ 497.437063][T22732] bond8 (unregistering): Released all slaves [ 497.476137][T22735] netlink: 'syz.0.4703': attribute type 2 has an invalid length. [ 497.562648][T22742] bond8: Unable to set down delay as MII monitoring is disabled [ 497.575217][T22742] bond8 (unregistering): Released all slaves [ 497.601465][T22764] __nla_validate_parse: 9 callbacks suppressed [ 497.601483][T22764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4705'. [ 497.887619][ T9628] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.910886][ T9628] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 497.922147][ T9628] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 497.948462][ T9628] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.956837][ T9628] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 497.979090][ T9628] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 498.003115][ T9628] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.022820][ T9628] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 498.024346][T22751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.040944][ T9628] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 498.058477][ T9636] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.067865][ T9636] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 498.078401][ T9636] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 498.314821][T22792] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 498.652258][T22815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4720'. [ 498.825946][T22830] syzkaller0: entered promiscuous mode [ 498.842110][T22830] syzkaller0: entered allmulticast mode [ 498.984607][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4728'. [ 499.212309][T22857] netlink: 'syz.2.4735': attribute type 1 has an invalid length. [ 499.251239][T22863] sit0: entered promiscuous mode [ 499.256459][T22863] netlink: 'syz.0.4737': attribute type 1 has an invalid length. [ 499.305028][T22863] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4737'. [ 499.320744][T22866] tunl0: entered promiscuous mode [ 499.328165][T22866] netlink: 'syz.5.4738': attribute type 3 has an invalid length. [ 499.336100][T22866] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4738'. [ 499.354727][T22868] tipc: Enabling of bearer rejected, failed to enable media [ 499.427956][T22873] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4740'. [ 499.457287][T22876] bridge0: Caught tx_queue_len zero misconfig [ 499.675816][T22900] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4748'. [ 499.685810][T22900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4748'. [ 499.695242][T22900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4748'. [ 499.704923][T22900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4748'. [ 500.671532][T22962] netlink: 'syz.1.4766': attribute type 2 has an invalid length. [ 500.727351][T22962] wg1 speed is unknown, defaulting to 1000 [ 500.828960][T22972] can: request_module (can-proto-4) failed. [ 500.867143][T22983] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 500.966162][T22983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.041007][T22983] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 501.059717][T22983] netlink: 'syz.4.4770': attribute type 2 has an invalid length. [ 501.113384][T22990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.126974][T22990] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 501.141436][T22990] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 501.178599][T22994] bond0: (slave veth0_to_bond): Releasing active interface [ 501.187187][T22994] veth0_to_bond: left promiscuous mode [ 501.194265][T22994] veth0_to_bond: left allmulticast mode [ 501.210494][T23007] netlink: 'syz.1.4774': attribute type 1 has an invalid length. [ 501.213341][T22994] bond5: (slave veth0_to_bond): making interface the new active one [ 501.227081][T22994] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 501.327420][T23004] syzkaller0: entered promiscuous mode [ 501.347666][T23004] syzkaller0: entered allmulticast mode [ 501.413842][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.426198][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 502.888373][T23020] tipc: Started in network mode [ 502.893289][T23020] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 502.924716][T23020] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 502.933884][T23020] tipc: Enabled bearer , priority 10 [ 503.169870][T23034] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.186242][T23034] bond8 (unregistering): Released all slaves [ 503.219439][T23045] __nla_validate_parse: 6 callbacks suppressed [ 503.219457][T23045] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4787'. [ 503.334838][T23034] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.354492][T23034] bond8 (unregistering): Released all slaves [ 503.414609][T23053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4790'. [ 503.486246][T23053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4790'. [ 503.505686][T23060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4793'. [ 503.583693][T23069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4795'. [ 503.624811][T23034] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.707773][T23034] bond8 (unregistering): Released all slaves [ 503.862534][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4800'. [ 503.914275][T23034] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.969747][T23034] bond8 (unregistering): Released all slaves [ 504.068167][ T47] tipc: Node number set to 1 [ 504.123082][T23105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4805'. [ 504.148881][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 504.176561][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 504.287962][T23118] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 504.439482][T23127] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4809'. [ 504.456568][T23130] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 504.460304][T23129] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 504.480422][T23128] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 504.492660][T23130] netlink: 'syz.5.4810': attribute type 1 has an invalid length. [ 504.620280][T23130] bond4: entered promiscuous mode [ 504.630582][T23130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.795282][T23143] smc: net device team0 applied user defined pnetid SYZ2 [ 504.812607][T23147] netlink: 'syz.5.4815': attribute type 1 has an invalid length. [ 505.064746][T23168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.092826][T23168] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 505.119661][T23168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.780039][T23202] FAULT_INJECTION: forcing a failure. [ 505.780039][T23202] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 505.813944][T23202] CPU: 0 UID: 0 PID: 23202 Comm: syz.4.4831 Not tainted syzkaller #0 PREEMPT(full) [ 505.813971][T23202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 505.813988][T23202] Call Trace: [ 505.813995][T23202] [ 505.814003][T23202] dump_stack_lvl+0xe8/0x150 [ 505.814033][T23202] should_fail_ex+0x412/0x560 [ 505.814062][T23202] _copy_from_user+0x2d/0xb0 [ 505.814082][T23202] __sys_sendto+0x2b0/0x710 [ 505.814105][T23202] ? __pfx___sys_sendto+0x10/0x10 [ 505.814122][T23202] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 505.814157][T23202] ? __fget_files+0x3a0/0x420 [ 505.814190][T23202] ? ksys_write+0x242/0x270 [ 505.814212][T23202] ? __pfx_ksys_write+0x10/0x10 [ 505.814234][T23202] __x64_sys_sendto+0xde/0x100 [ 505.814258][T23202] do_syscall_64+0x14d/0xf80 [ 505.814285][T23202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.814302][T23202] ? clear_bhb_loop+0x40/0x90 [ 505.814324][T23202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.814346][T23202] RIP: 0033:0x7fbdc959c819 [ 505.814363][T23202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.814378][T23202] RSP: 002b:00007fbdca3fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.814404][T23202] RAX: ffffffffffffffda RBX: 00007fbdc9815fa0 RCX: 00007fbdc959c819 [ 505.814417][T23202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 505.814427][T23202] RBP: 00007fbdca3fa090 R08: 0000200000000200 R09: 0000000000000014 [ 505.814439][T23202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.814449][T23202] R13: 00007fbdc9816038 R14: 00007fbdc9815fa0 R15: 00007ffc7ad0e0e8 [ 505.814473][T23202] [ 506.044585][T23211] netlink: 'syz.4.4834': attribute type 12 has an invalid length. [ 506.057110][T23211] netlink: 'syz.4.4834': attribute type 11 has an invalid length. [ 506.141980][T23215] team0: Port device vxcan1 removed [ 506.154273][T23215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 506.451227][T23240] FAULT_INJECTION: forcing a failure. [ 506.451227][T23240] name failslab, interval 1, probability 0, space 0, times 1 [ 506.470062][T23240] CPU: 1 UID: 0 PID: 23240 Comm: syz.1.4844 Not tainted syzkaller #0 PREEMPT(full) [ 506.470083][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 506.470093][T23240] Call Trace: [ 506.470100][T23240] [ 506.470106][T23240] dump_stack_lvl+0xe8/0x150 [ 506.470134][T23240] should_fail_ex+0x412/0x560 [ 506.470164][T23240] should_failslab+0xa8/0x100 [ 506.470198][T23240] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 506.470218][T23240] ? __alloc_skb+0x186/0x7d0 [ 506.470237][T23240] ? __alloc_skb+0x1d0/0x7d0 [ 506.470253][T23240] ? __local_bh_enable_ip+0xd0/0x130 [ 506.470279][T23240] __alloc_skb+0x1d0/0x7d0 [ 506.470303][T23240] alloc_skb_with_frags+0xca/0x890 [ 506.470324][T23240] ? __lock_acquire+0x6b5/0x2cf0 [ 506.470348][T23240] ? __lock_acquire+0x6b5/0x2cf0 [ 506.470373][T23240] sock_alloc_send_pskb+0x878/0x990 [ 506.470400][T23240] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 506.470426][T23240] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 506.470452][T23240] ? dev_get_by_index+0x22/0x2e0 [ 506.470475][T23240] ? dev_get_by_index+0x22/0x2e0 [ 506.470503][T23240] packet_sendmsg+0x33e5/0x50f0 [ 506.470528][T23240] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 506.470554][T23240] ? __lock_acquire+0x6b5/0x2cf0 [ 506.470585][T23240] ? __lock_acquire+0x6b5/0x2cf0 [ 506.470620][T23240] ? aa_sk_perm+0x6d5/0x900 [ 506.470641][T23240] ? __pfx_packet_sendmsg+0x10/0x10 [ 506.470667][T23240] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 506.470691][T23240] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.470717][T23240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.470739][T23242] netlink: 'syz.0.4845': attribute type 12 has an invalid length. [ 506.470736][T23240] ? __pfx_packet_sendmsg+0x10/0x10 [ 506.470757][T23240] __sys_sendto+0x672/0x710 [ 506.470778][T23240] ? __pfx___sys_sendto+0x10/0x10 [ 506.470792][T23240] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 506.470823][T23240] ? __fget_files+0x3a0/0x420 [ 506.470847][T23240] ? ksys_write+0x242/0x270 [ 506.470868][T23240] ? __pfx_ksys_write+0x10/0x10 [ 506.470891][T23240] __x64_sys_sendto+0xde/0x100 [ 506.470913][T23240] do_syscall_64+0x14d/0xf80 [ 506.470933][T23240] ? trace_irq_disable+0x3b/0x150 [ 506.470948][T23240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.470965][T23240] ? clear_bhb_loop+0x40/0x90 [ 506.470984][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.471000][T23240] RIP: 0033:0x7f1abdf9c819 [ 506.471016][T23240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.471031][T23240] RSP: 002b:00007f1abedf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.471049][T23240] RAX: ffffffffffffffda RBX: 00007f1abe215fa0 RCX: 00007f1abdf9c819 [ 506.471062][T23240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 506.471072][T23240] RBP: 00007f1abedf5090 R08: 0000200000000200 R09: 0000000000000014 [ 506.471082][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.471091][T23240] R13: 00007f1abe216038 R14: 00007f1abe215fa0 R15: 00007ffd65421568 [ 506.471117][T23240] [ 506.494690][T23245] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 507.458514][T23289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.681600][T23303] sctp: [Deprecated]: syz.1.4865 (pid 23303) Use of int in max_burst socket option. [ 507.681600][T23303] Use struct sctp_assoc_value instead [ 507.837978][T23311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.993048][T23328] netlink: 'syz.5.4872': attribute type 12 has an invalid length. [ 508.830944][T23387] __nla_validate_parse: 13 callbacks suppressed [ 508.830963][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4885'. [ 508.896787][T23377] netlink: 'syz.5.4883': attribute type 9 has an invalid length. [ 508.905710][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4883'. [ 508.919318][T23377] netlink: 'syz.5.4883': attribute type 9 has an invalid length. [ 508.927175][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4883'. [ 508.956423][T23394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.044025][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4890'. [ 509.426855][T23437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4898'. [ 509.478239][T23436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4898'. [ 509.921196][T23472] x_tables: duplicate entry at hook 2 [ 509.936958][T23475] netlink: 'syz.5.4908': attribute type 2 has an invalid length. [ 509.945308][T23475] netlink: 'syz.5.4908': attribute type 5 has an invalid length. [ 509.995744][T23480] netem: incorrect ge model size [ 510.012080][T23480] netem: change failed [ 510.041787][T23480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'. [ 510.074388][T23486] netlink: 'syz.1.4911': attribute type 1 has an invalid length. [ 510.635211][T23525] netlink: 'syz.2.4920': attribute type 21 has an invalid length. [ 510.650285][T23530] netlink: 'syz.1.4918': attribute type 16 has an invalid length. [ 510.651934][T23525] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.691572][T23530] netlink: 'syz.1.4918': attribute type 17 has an invalid length. [ 510.698225][T23525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.706714][T23525] IPv6: NLM_F_CREATE should be set when creating new route [ 510.714009][T23525] IPv6: NLM_F_CREATE should be set when creating new route [ 510.721267][T23525] IPv6: NLM_F_CREATE should be set when creating new route [ 510.771479][T23530] ip6_vti0: left promiscuous mode [ 510.831587][T23540] netlink: 'syz.4.4922': attribute type 1 has an invalid length. [ 510.852749][T23530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.297199][T23568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4928'. [ 511.400924][T23577] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 511.494374][T23583] xt_connbytes: Forcing CT accounting to be enabled [ 511.503683][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4932'. [ 511.529137][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4932'. [ 511.561828][T23590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.652179][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 150 seconds [ 511.663472][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 150 seconds [ 511.675374][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 150 seconds [ 511.687208][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 150 seconds [ 511.790777][T23590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.988802][T23616] delete_channel: no stack [ 512.190808][T23626] netlink: 'syz.4.4944': attribute type 10 has an invalid length. [ 512.264545][T23626] team0: Device ipvlan1 failed to register rx_handler [ 512.302338][ T5159] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 150 seconds [ 512.315759][ T5159] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 150 seconds [ 512.319160][T23641] netlink: 'syz.1.4947': attribute type 11 has an invalid length. [ 512.327466][ T5159] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 150 seconds [ 512.347525][ T5159] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 150 seconds [ 512.622195][T23652] openvswitch: netlink: Unknown nsh attribute 0 [ 512.654273][T23652] netlink: 'syz.4.4949': attribute type 10 has an invalid length. [ 512.705121][T23652] dummy0: entered promiscuous mode [ 512.750023][T23652] bridge0: port 2(dummy0) entered blocking state [ 512.758789][T23652] bridge0: port 2(dummy0) entered disabled state [ 512.788432][T23652] dummy0: entered allmulticast mode [ 512.881609][T23656] geneve3: entered promiscuous mode [ 512.886872][T23656] geneve3: entered allmulticast mode [ 512.941371][T22071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.953707][T22071] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.982827][T22071] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.019635][T22071] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.142274][T23677] wg1 speed is unknown, defaulting to 1000 [ 513.151434][T23684] syzkaller0: entered promiscuous mode [ 513.171171][T23684] syzkaller0: entered allmulticast mode [ 513.354334][T23695] dvmrp0: entered allmulticast mode [ 513.724794][T23725] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 513.957886][T23741] __nla_validate_parse: 9 callbacks suppressed [ 513.957904][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4968'. [ 514.079572][T23743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4971'. [ 514.117887][T23750] netlink: 'syz.5.4973': attribute type 21 has an invalid length. [ 514.150695][T23746] dummy0: Caught tx_queue_len zero misconfig [ 514.242979][T23730] team0: Port device gretap1 added [ 514.530256][T23775] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4977'. [ 514.557424][T23776] macvtap1: entered promiscuous mode [ 514.584086][T23776] macvtap1: entered allmulticast mode [ 514.594806][T23784] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4981'. [ 514.607439][T23776] veth1_vlan: entered allmulticast mode [ 514.646740][T23785] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4981'. [ 514.664105][T23777] macvtap2: entered promiscuous mode [ 514.682596][T23784] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4981'. [ 514.705115][T23777] macvtap2: entered allmulticast mode [ 514.769237][T23798] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4983'. [ 515.154807][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'. [ 515.318629][T23842] batadv_slave_1: entered promiscuous mode [ 515.340092][T23842] validate_nla: 3 callbacks suppressed [ 515.340108][T23842] netlink: 'syz.0.4993': attribute type 1 has an invalid length. [ 515.477644][T23860] ip6tnl0: Caught tx_queue_len zero misconfig [ 515.596964][T23861] bond8: option miimon: invalid value (18446744073709551585) [ 515.631023][T23861] bond8: option miimon: allowed values 0 - 2147483647 [ 515.664396][T23861] bond8 (unregistering): Released all slaves [ 515.735135][T23880] netlink: 540 bytes leftover after parsing attributes in process `syz.4.5002'. [ 515.754435][T23847] batadv_slave_1: left promiscuous mode [ 515.835812][T23884] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5003'. [ 516.317725][T23913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.416954][T23913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.425831][T23913] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 516.460448][T23913] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 516.492674][T23913] bond5: (slave xfrm1): making interface the new active one [ 516.507744][T23913] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 516.612071][T23938] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 516.612820][T23942] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 516.635840][T23940] openvswitch: netlink: Flow actions attr not present in new flow. [ 516.862188][T23964] netlink: 'syz.2.5023': attribute type 1 has an invalid length. [ 517.167297][T23983] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.255521][T23983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.061254][T24035] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 518.285863][T24053] syzkaller0: entered promiscuous mode [ 518.327855][T24053] syzkaller0: entered allmulticast mode [ 518.616029][T24071] ipt_ECN: cannot use operation on non-tcp rule [ 519.329909][T24125] netlink: 'syz.1.5063': attribute type 4 has an invalid length. [ 519.414414][T24128] __nla_validate_parse: 12 callbacks suppressed [ 519.414496][T24128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5065'. [ 519.471668][T24128] netlink: 996 bytes leftover after parsing attributes in process `syz.2.5065'. [ 519.555958][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5066'. [ 519.928559][T24150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5075'. [ 519.973506][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 180 seconds [ 519.982663][T24150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.985174][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 180 seconds [ 519.991492][T24150] IPv6: NLM_F_CREATE should be set when creating new route [ 520.012042][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 180 seconds [ 520.023108][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 180 seconds [ 520.045276][T24150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5075'. [ 520.058980][T24160] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5076'. [ 520.080646][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5076'. [ 520.940698][T24207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5089'. [ 521.080954][T24214] netlink: 'syz.2.5093': attribute type 4 has an invalid length. [ 521.117170][T24214] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5093'. [ 521.157882][T24214] .`: renamed from  (while UP) [ 521.269707][ T5194] udevd[5194]: worker [14419] /devices/virtual/block/nbd4 timeout; kill it [ 521.288413][ T5194] udevd[5194]: seq 19428 '/devices/virtual/block/nbd4' killed [ 521.335430][T24229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5098'. [ 521.464185][T24233] bond8: entered promiscuous mode [ 521.470157][T24233] bond8: entered allmulticast mode [ 521.573427][T24239] dvmrp0: left allmulticast mode [ 522.727240][T24286] : entered promiscuous mode [ 522.864017][T24307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.244583][T24407] netlink: 'syz.2.5149': attribute type 4 has an invalid length. [ 524.302165][T24409] hsr_slave_0: left promiscuous mode [ 524.319284][T24409] hsr_slave_1: left promiscuous mode [ 524.499096][T24422] __nla_validate_parse: 32 callbacks suppressed [ 524.499115][T24422] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5152'. [ 524.573367][T24426] sctp: [Deprecated]: syz.0.5154 (pid 24426) Use of int in max_burst socket option. [ 524.573367][T24426] Use struct sctp_assoc_value instead [ 524.734540][T24431] pim6reg527: entered allmulticast mode [ 524.780789][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5156'. [ 524.827286][T24441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5160'. [ 524.936767][T24451] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5162'. [ 524.974088][T24455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5165'. [ 525.089933][ T5159] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 120 seconds [ 525.107448][ T5159] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 120 seconds [ 525.119756][ T5159] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 120 seconds [ 525.131599][ T5159] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 120 seconds [ 525.183608][T24461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5167'. [ 525.193211][T24461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5167'. [ 525.263224][T24461] gretap2: entered promiscuous mode [ 525.273754][T24461] gretap2: entered allmulticast mode [ 525.434856][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5175'. [ 525.505936][T24496] smc: net device team0 erased user defined pnetid SYZ2 [ 525.603866][T24502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5178'. [ 525.606113][T24500] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 525.686592][T24506] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 525.705402][T24502] macvlan2: entered promiscuous mode [ 525.715594][T24502] macvlan2: entered allmulticast mode [ 525.722293][T24502] bond9: entered promiscuous mode [ 525.727362][T24502] bridge8: entered promiscuous mode [ 525.733897][T24502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.741613][T24502] bond9: left promiscuous mode [ 525.746380][T24502] bridge8: left promiscuous mode [ 525.862887][T24517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5182'. [ 525.936926][T24525] netlink: 'syz.4.5185': attribute type 61 has an invalid length. [ 526.392347][T24547] syzkaller1: entered promiscuous mode [ 526.419841][T24547] syzkaller1: entered allmulticast mode [ 526.470272][T24542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.664819][T24554] tipc: Enabled bearer , priority 0 [ 526.770263][T24558] netlink: 'syz.5.5193': attribute type 8 has an invalid length. [ 526.776633][T24554] syzkaller0: entered promiscuous mode [ 526.783901][T24554] syzkaller0: entered allmulticast mode [ 526.794248][T24554] tipc: Resetting bearer [ 526.868734][T24553] tipc: Resetting bearer [ 527.020227][T24573] netlink: 'syz.2.5198': attribute type 1 has an invalid length. [ 527.030015][T24573] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 527.257902][T24579] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 529.068665][T24553] tipc: Disabling bearer [ 529.094227][T24577] bond0: entered promiscuous mode [ 529.102128][T24577] bond_slave_0: entered promiscuous mode [ 529.109072][T24577] bond_slave_1: entered promiscuous mode [ 529.117215][T24577] bond0: left promiscuous mode [ 529.123971][T24577] bond_slave_0: left promiscuous mode [ 529.130568][T24577] bond_slave_1: left promiscuous mode [ 529.202473][T24599] sit1: entered promiscuous mode [ 529.207566][T24599] sit1: entered allmulticast mode [ 529.377894][T24619] netlink: 'syz.0.5210': attribute type 1 has an invalid length. [ 529.449563][T24625] netlink: 'syz.2.5212': attribute type 4 has an invalid length. [ 529.564468][T24633] syzkaller1: entered promiscuous mode [ 529.586309][T24633] syzkaller1: entered allmulticast mode [ 529.644846][T24644] __nla_validate_parse: 7 callbacks suppressed [ 529.644864][T24644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5219'. [ 529.664090][T24646] netlink: 'syz.5.5220': attribute type 11 has an invalid length. [ 529.745023][T24653] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 530.154924][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5226'. [ 530.257767][T24682] netlink: 'syz.0.5228': attribute type 21 has an invalid length. [ 530.282356][T24682] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.287227][T24685] netlink: 'syz.2.5229': attribute type 1 has an invalid length. [ 530.300225][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5229'. [ 530.339835][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5230'. [ 530.349792][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5230'. [ 530.501122][T24694] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5232'. [ 530.571306][T24701] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5236'. [ 530.643243][T24699] netlink: 'syz.2.5234': attribute type 142 has an invalid length. [ 530.663474][T24711] x_tables: unsorted entry at hook 2 [ 530.673203][T24712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5235'. [ 530.740578][T24715] sctp: [Deprecated]: syz.0.5238 (pid 24715) Use of int in max_burst socket option. [ 530.740578][T24715] Use struct sctp_assoc_value instead [ 530.751224][T24717] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5240'. [ 530.982695][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5244'. [ 531.007170][T24725] syzkaller0: entered promiscuous mode [ 531.018360][T24725] syzkaller0: entered allmulticast mode [ 531.525777][ T9636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.538860][ T9636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.548427][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.567246][T24776] nbd: nbd5 already in use [ 531.575601][T24775] syzkaller0: entered promiscuous mode [ 531.581677][T24775] syzkaller0: entered allmulticast mode [ 531.591130][T24775] tc action pedit offset must be on 32 bit boundaries [ 531.664352][T24782] netlink: 'syz.2.5263': attribute type 1 has an invalid length. [ 531.680350][T24784] h: entered promiscuous mode [ 531.872454][T24803] openvswitch: netlink: IP tunnel dst address not specified [ 531.882483][T24794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.906342][T24804] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 531.915699][T24794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.985974][T24799] bond6 (unregistering): Released all slaves [ 532.000018][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.070551][T24794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.081907][T24794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.187478][T24794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.198788][T24794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.291433][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.323103][T24794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.339029][T24794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.393534][T24837] netlink: 'syz.1.5279': attribute type 11 has an invalid length. [ 532.572808][ T9631] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.581580][ T9631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.619292][ T9631] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.627815][ T9631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.667666][ T9648] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.679636][ T9648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.796144][ T9631] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.817247][ T9631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.826913][T24859] ±ÿet,net: renamed from team_slave_1 [ 532.838021][T24865] netlink: 'syz.0.5288': attribute type 10 has an invalid length. [ 532.857389][T24865] netlink: 'syz.0.5288': attribute type 10 has an invalid length. [ 533.212773][T24894] netlink: 'syz.4.5300': attribute type 10 has an invalid length. [ 533.276017][T24898] netlink: 'syz.1.5302': attribute type 13 has an invalid length. [ 534.666102][T15320] udevd[15320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 534.747120][T24945] netlink: 'syz.4.5312': attribute type 1 has an invalid length. [ 534.756337][T24945] __nla_validate_parse: 15 callbacks suppressed [ 534.756356][T24945] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5312'. [ 534.772621][T24945] netlink: 'syz.4.5312': attribute type 1 has an invalid length. [ 534.780754][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5312'. [ 535.622152][T24951] nbd: illegal input index 2958377 [ 535.785645][T24962] macvtap2: entered promiscuous mode [ 535.792163][T24962] macvtap2: entered allmulticast mode [ 535.808362][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 535.834175][T24964] netlink: 'syz.2.5318': attribute type 1 has an invalid length. [ 535.909849][T24973] netlink: 'syz.4.5321': attribute type 5 has an invalid length. [ 535.911158][T24964] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 535.929379][T24964] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 536.045015][T24964] macvlan2: entered promiscuous mode [ 536.057974][T24964] macvlan2: entered allmulticast mode [ 536.065937][T24964] bond10: entered promiscuous mode [ 536.075601][T24964] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.079324][T24983] netlink: 'syz.4.5325': attribute type 19 has an invalid length. [ 536.091098][T24964] bond10: left promiscuous mode [ 536.132150][T24983] xt_l2tp: unknown flags: 10 [ 536.221710][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'. [ 536.254506][T24992] netlink: 'syz.4.5329': attribute type 7 has an invalid length. [ 536.374574][T25001] bond5: option resend_igmp: invalid value (32767) [ 536.382375][T25001] bond5: option resend_igmp: allowed values 0 - 255 [ 536.393612][T25001] bond5 (unregistering): Released all slaves [ 536.750032][T25031] xt_cgroup: path and classid specified [ 536.880594][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5343'. [ 536.944488][T25044] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 536.963437][T25044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 536.972721][T25047] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 536.986213][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5346'. [ 537.780600][T25094] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5361'. [ 537.902921][T25104] validate_nla: 1 callbacks suppressed [ 537.902940][T25104] netlink: 'syz.2.5362': attribute type 1 has an invalid length. [ 538.051321][T25104] bond11: entered promiscuous mode [ 538.056838][T25104] 8021q: adding VLAN 0 to HW filter on device bond11 [ 538.141399][T25104] 8021q: adding VLAN 0 to HW filter on device bond11 [ 538.156224][T25104] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 538.192802][T25104] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 538.232377][T25104] bond11: (slave ip6gre2): making interface the new active one [ 538.260513][T25104] ip6gre2: entered promiscuous mode [ 538.271642][T25104] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 538.372995][T25135] netlink: 'syz.0.5368': attribute type 5 has an invalid length. [ 538.408569][T25131] nbd0: detected capacity change from 0 to 63 [ 538.419077][ T5828] block nbd0: Receive control failed (result -104) [ 538.426056][ T5831] block nbd0: Receive control failed (result -32) [ 538.477553][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 538.503196][T25137] syzkaller0: entered promiscuous mode [ 538.521127][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 538.537527][T25137] syzkaller0: entered allmulticast mode [ 538.551519][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 538.611116][T25137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5370'. [ 538.627004][T25137] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 538.666539][T25153] batadv_slave_0: Caught tx_queue_len zero misconfig [ 538.744553][T25159] netlink: 'syz.2.5375': attribute type 1 has an invalid length. [ 538.754666][T25159] netlink: 'syz.2.5375': attribute type 3 has an invalid length. [ 538.778944][T25159] netlink: 'syz.2.5375': attribute type 7 has an invalid length. [ 538.818464][T25159] netlink: 'syz.2.5375': attribute type 8 has an invalid length. [ 538.827757][T25159] NCSI netlink: No device for ifindex 131092 [ 538.892337][T25169] netlink: 'syz.0.5378': attribute type 11 has an invalid length. [ 539.151909][T25191] syzkaller0: entered promiscuous mode [ 539.220746][T25194] xt_hashlimit: size too large, truncated to 1048576 [ 539.221065][T25200] xt_hashlimit: size too large, truncated to 1048576 [ 539.964977][T25236] netlink: 'syz.4.5399': attribute type 21 has an invalid length. [ 540.016189][T25237] __nla_validate_parse: 7 callbacks suppressed [ 540.016244][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5399'. [ 541.071412][T25236] netlink: 'syz.4.5399': attribute type 1 has an invalid length. [ 541.309461][T25256] netlink: 'syz.1.5404': attribute type 16 has an invalid length. [ 541.317320][T25256] netlink: 'syz.1.5404': attribute type 17 has an invalid length. [ 541.499614][T25256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.526157][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5411'. [ 541.540845][T25277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5411'. [ 541.556759][T25280] openvswitch: netlink: Invalid VLAN frame [ 541.728774][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 180 seconds [ 541.740498][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 180 seconds [ 541.751827][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 180 seconds [ 541.763741][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 180 seconds [ 541.884200][T25292] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 541.929739][T25292] bond12 (unregistering): Released all slaves [ 541.954101][T25299] vcan0: entered promiscuous mode [ 542.081407][T25308] tipc: Trying to set illegal importance in message [ 542.120572][T25313] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5422'. [ 542.136828][T25307] bond7: option miimon: invalid value (18446744073709551585) [ 542.149148][T25307] bond7: option miimon: allowed values 0 - 2147483647 [ 542.193698][T25307] bond7 (unregistering): Released all slaves [ 542.374089][ T5159] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 180 seconds [ 542.391151][ T5159] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 180 seconds [ 542.402533][ T5159] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 180 seconds [ 542.409891][T25334] ip6gre0: Caught tx_queue_len zero misconfig [ 542.413671][ T5159] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 180 seconds [ 542.501554][T25331] wg1 speed is unknown, defaulting to 1000 [ 542.571475][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5429'. [ 542.600748][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5429'. [ 542.665152][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5429'. [ 542.700149][T25350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5429'. [ 542.870045][T25364] syzkaller0: entered promiscuous mode [ 542.875596][T25364] syzkaller0: entered allmulticast mode [ 542.973689][T25371] validate_nla: 2 callbacks suppressed [ 542.973705][T25371] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 543.012417][T25371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 543.061586][T25372] vlan2: entered promiscuous mode [ 543.071867][T25372] bond6: entered promiscuous mode [ 543.077071][T25372] vlan2: entered allmulticast mode [ 543.082910][T25372] bond6: entered allmulticast mode [ 543.097682][T25381] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5441'. [ 543.140272][T25384] netlink: 'syz.0.5441': attribute type 21 has an invalid length. [ 543.198546][T25388] netlink: 'syz.4.5442': attribute type 2 has an invalid length. [ 543.216555][T25388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5442'. [ 543.274816][T25393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.306865][T25396] netlink: 'syz.1.5446': attribute type 29 has an invalid length. [ 543.543433][T25415] netlink: 'syz.4.5452': attribute type 1 has an invalid length. [ 543.807805][T25436] netlink: 'syz.0.5459': attribute type 13 has an invalid length. [ 543.908520][ T6033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.913212][T25447] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 544.009318][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.203616][T25467] netlink: 'syz.5.5470': attribute type 5 has an invalid length. [ 544.266269][T25466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.342073][T25467] geneve2: entered promiscuous mode [ 544.362822][T25467] geneve2: entered allmulticast mode [ 544.397723][ T9631] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 544.416388][ T9631] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 544.427395][T25473] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 544.482354][T25466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.578339][T25464] wireguard0: entered promiscuous mode [ 544.614763][T25464] macvtap1: entered promiscuous mode [ 544.625007][T25464] macvtap1: entered allmulticast mode [ 544.632458][T25464] veth1_vlan: entered allmulticast mode [ 544.649938][T25464] macvtap2: entered promiscuous mode [ 544.655364][T25464] macvtap2: entered allmulticast mode [ 544.928313][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.044988][T25466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.055558][T25466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.124258][T25466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.135372][T25466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.234759][ T9636] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 546.243123][ T9636] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.260112][ T9636] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 546.268387][ T9636] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.282988][ T9636] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 546.291823][ T9636] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.306896][ T9636] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 546.315755][ T9636] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 546.793108][ T5194] udevd[5194]: worker [15324] /devices/virtual/block/nbd5 timeout; kill it [ 546.802108][ T5194] udevd[5194]: seq 21056 '/devices/virtual/block/nbd5' killed [ 546.809877][ T5194] udevd[5194]: worker [15327] /devices/virtual/block/nbd6 timeout; kill it [ 546.818779][ T5194] udevd[5194]: seq 21057 '/devices/virtual/block/nbd6' killed [ 550.048825][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 210 seconds [ 550.061474][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 210 seconds [ 550.073400][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 210 seconds [ 550.084451][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 210 seconds [ 555.170180][ T5159] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 150 seconds [ 555.181466][ T5159] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 150 seconds [ 555.192722][ T5159] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 150 seconds [ 555.203884][ T5159] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 150 seconds [ 562.852057][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.859817][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.488329][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.609286][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 568.617124][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 568.625166][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 568.633037][ T25] block nbd0: Dead connection, failed to find a fallback [ 568.643328][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 568.650533][ T25] block nbd0: shutting down sockets [ 568.656362][ T25] blk_print_req_error: 138 callbacks suppressed [ 568.656377][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.674539][ T25] buffer_io_error: 138 callbacks suppressed [ 568.674554][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 568.689180][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.698979][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 568.706760][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.716491][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 568.724313][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.734148][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 568.743448][T15320] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.753862][T15320] Buffer I/O error on dev nbd0, logical block 0, async page read [ 568.761695][T15320] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.771634][T15320] Buffer I/O error on dev nbd0, logical block 1, async page read [ 568.779479][T15320] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.789236][T15320] Buffer I/O error on dev nbd0, logical block 2, async page read [ 568.797145][T15320] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.806762][T15320] Buffer I/O error on dev nbd0, logical block 3, async page read [ 568.814749][T15320] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.824286][T15320] Buffer I/O error on dev nbd0, logical block 0, async page read [ 568.832227][T15320] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.842021][T15320] Buffer I/O error on dev nbd0, logical block 1, async page read [ 568.850691][T15320] ldm_validate_partition_table(): Disk read failed. [ 568.857544][T15320] Dev nbd0: unable to read RDB block 0 [ 568.863574][T15320] nbd0: unable to read partition table [ 568.872102][T15320] ldm_validate_partition_table(): Disk read failed. [ 568.879242][T15320] Dev nbd0: unable to read RDB block 0 [ 568.885036][T15320] nbd0: unable to read partition table [ 571.808765][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 210 seconds [ 571.819825][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 210 seconds [ 571.831620][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 210 seconds [ 571.842857][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 210 seconds [ 572.448542][ T25] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 210 seconds [ 572.459512][ T25] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 210 seconds [ 572.470918][ T25] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 210 seconds [ 572.482539][ T25] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 210 seconds [ 580.128863][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 240 seconds [ 580.139840][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 240 seconds [ 580.152132][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 240 seconds [ 580.163636][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 240 seconds [ 585.252898][ T25] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 180 seconds [ 585.263774][ T25] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 180 seconds [ 585.275141][ T25] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 180 seconds [ 585.286455][ T25] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 180 seconds [ 586.916922][ T5194] udevd[5194]: worker [14564] /devices/virtual/block/nbd7 timeout; kill it [ 586.926124][ T5194] udevd[5194]: seq 23909 '/devices/virtual/block/nbd7' killed [ 598.048367][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.186909][T25496] __nla_validate_parse: 7 callbacks suppressed [ 600.186926][T25496] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.5477'. [ 600.313389][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5478'. [ 600.417476][T25504] netlink: 'syz.5.5478': attribute type 3 has an invalid length. [ 600.465573][T25523] netlink: 'syz.1.5482': attribute type 10 has an invalid length. [ 600.510269][T25523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.521315][T25523] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 600.535219][T25527] netlink: 'syz.1.5482': attribute type 10 has an invalid length. [ 600.556547][T25527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5482'. [ 600.591568][T25529] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.667422][T25527] batadv0: entered promiscuous mode [ 600.675683][T25527] batadv0: entered allmulticast mode [ 600.721912][T25527] bond0: (slave batadv0): Releasing backup interface [ 600.781263][T25527] bridge0: port 1(batadv0) entered blocking state [ 600.797786][T25527] bridge0: port 1(batadv0) entered disabled state [ 600.890791][T25553] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.970737][T25558] vlan3: entered promiscuous mode [ 601.038572][ T9637] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 601.049114][ T9637] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 601.112282][T25571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5498'. [ 601.170431][T25579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5498'. [ 601.265223][T25587] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5503'. [ 601.306635][T25589] netlink: 'syz.5.5502': attribute type 3 has an invalid length. [ 601.336271][T25591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5504'. [ 601.344997][T25589] netlink: 'syz.5.5502': attribute type 3 has an invalid length. [ 601.359745][T25591] bridge: RTM_NEWNEIGH with invalid ether address [ 601.399434][T25594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5504'. [ 601.415553][T25594] bridge: RTM_NEWNEIGH with invalid ether address [ 601.505623][T25594] syzkaller1: entered promiscuous mode [ 601.536445][T25594] syzkaller1: entered allmulticast mode [ 601.572434][T25591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5504'. [ 601.772186][T25624] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5512'. [ 601.889956][ T2258] block nbd5: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 240 seconds [ 601.901673][ T2258] block nbd5: Possible stuck request ffff888027440200: control (read@1024,1024B). Runtime 240 seconds [ 601.912905][ T2258] block nbd5: Possible stuck request ffff888027440400: control (read@2048,1024B). Runtime 240 seconds [ 601.926916][ T2258] block nbd5: Possible stuck request ffff888027440600: control (read@3072,1024B). Runtime 240 seconds [ 602.015352][T25643] H: renamed from dummy0 (while UP) [ 602.073350][T25647] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 602.085361][T25647] bond7 (unregistering): Released all slaves [ 602.445649][T25675] syzkaller1: entered promiscuous mode [ 602.451593][T25675] syzkaller1: entered allmulticast mode [ 602.460138][T25676] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 602.472496][T25676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.562111][ T25] block nbd6: Possible stuck request ffff8880274c8000: control (read@0,1024B). Runtime 240 seconds [ 602.573325][ T25] block nbd6: Possible stuck request ffff8880274c8200: control (read@1024,1024B). Runtime 240 seconds [ 602.584825][ T25] block nbd6: Possible stuck request ffff8880274c8400: control (read@2048,1024B). Runtime 240 seconds [ 602.599350][ T25] block nbd6: Possible stuck request ffff8880274c8600: control (read@3072,1024B). Runtime 240 seconds [ 602.731385][T25682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.086225][T25713] netlink: 'syz.4.5540': attribute type 5 has an invalid length. [ 603.118212][T25713] netlink: 'syz.4.5540': attribute type 6 has an invalid length. [ 603.823221][T25774] netlink: 'syz.5.5558': attribute type 9 has an invalid length. [ 603.827509][T25770] wg1 speed is unknown, defaulting to 1000 [ 603.951685][T25774] syzkaller0: entered promiscuous mode [ 603.965267][T25774] syzkaller0: entered allmulticast mode [ 604.797823][T25831] sctp: [Deprecated]: syz.4.5574 (pid 25831) Use of int in maxseg socket option. [ 604.797823][T25831] Use struct sctp_assoc_value instead [ 604.825761][T25830] netlink: 'syz.4.5574': attribute type 29 has an invalid length. [ 604.834316][T25830] netlink: 'syz.4.5574': attribute type 29 has an invalid length. [ 604.949464][T25847] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.743033][T25897] __nla_validate_parse: 19 callbacks suppressed [ 605.743051][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 605.760506][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5590'. [ 605.931814][T25913] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 605.941472][T25917] lo: Caught tx_queue_len zero misconfig [ 606.014929][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5597'. [ 606.146255][T25939] delete_channel: no stack [ 606.156820][T25939] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 606.205200][T25941] delete_channel: no stack [ 606.280887][T25950] netlink: 'syz.4.5605': attribute type 3 has an invalid length. [ 606.281021][T25954] netlink: 'syz.0.5604': attribute type 2 has an invalid length. [ 606.297286][T25948] netlink: 'syz.1.5603': attribute type 1 has an invalid length. [ 606.310614][T25954] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5604'. [ 606.321539][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5606'. [ 606.357205][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5607'. [ 606.674209][T25976] geneve0: entered promiscuous mode [ 606.909821][T25996] bond7: option lp_interval: invalid value (0) [ 606.916034][T25996] bond7: option lp_interval: allowed values 1 - 2147483647 [ 607.003931][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.020027][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.029100][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.038503][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.046297][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.065057][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5617'. [ 607.080547][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.084586][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5617'. [ 607.100291][T25996] bond7 (unregistering): Released all slaves [ 607.107623][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.117699][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.131612][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.145242][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.226757][T26002] wg1 speed is unknown, defaulting to 1000 [ 607.441218][T26011] sctp: [Deprecated]: syz.1.5619 (pid 26011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.441218][T26011] Use struct sctp_sack_info instead [ 607.497328][T26011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.564183][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5611'. [ 607.744172][T26034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5621'. [ 607.764856][T26023] bond10: entered allmulticast mode [ 607.796620][T26027] bridge9: entered promiscuous mode [ 607.802920][T26027] bridge9: entered allmulticast mode [ 607.814679][T26027] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 607.945490][T26019] wg1 speed is unknown, defaulting to 1000 [ 608.065082][T26046] --map-set only usable from mangle table [ 608.157217][T22071] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.195042][T22071] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.266637][T26002] chnl_net:caif_netlink_parms(): no params data found [ 608.321887][T22071] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.332273][T22071] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.359951][T26060] netlink: 'syz.5.5627': attribute type 11 has an invalid length. [ 608.367805][T26060] netlink: 'syz.5.5627': attribute type 11 has an invalid length. [ 608.459978][T26070] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 608.537550][T22071] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.568612][T22071] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.730108][T22071] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.744317][T22071] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.801298][T26091] can: request_module (can-proto-0) failed. [ 608.860813][T26091] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 [ 608.893795][T26002] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.901839][T26002] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.909967][T26002] bridge_slave_0: entered allmulticast mode [ 608.917648][T26002] bridge_slave_0: entered promiscuous mode [ 608.927236][T26002] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.936542][T26002] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.944071][T26002] bridge_slave_1: entered allmulticast mode [ 608.952139][T26002] bridge_slave_1: entered promiscuous mode [ 608.997225][T26002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.012522][T26002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.099866][ T9637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 45683 - 0 [ 609.134485][ T9637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 45683 - 0 [ 609.158944][T26002] team0: Port device team_slave_0 added [ 609.180826][T26002] team0: Port device team_slave_1 added [ 609.243484][ T9637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 45683 - 0 [ 609.252016][ T5828] Bluetooth: hci5: command tx timeout [ 609.280610][T26102] wg1 speed is unknown, defaulting to 1000 [ 609.329790][T26002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.339885][T26002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.367928][T26002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.411699][ T9648] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 45683 - 0 [ 609.423727][T26002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.433736][T26002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.462407][T26002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.777516][T26133] netlink: 'syz.4.5645': attribute type 10 has an invalid length. [ 609.781363][T26131] netlink: 'syz.4.5645': attribute type 10 has an invalid length. [ 609.876228][T22071] bond11 (unregistering): (slave ip6gre2): Releasing backup interface [ 609.885047][T22071] ip6gre2 (unregistering): left promiscuous mode [ 610.047560][T22071] bond3 (unregistering): (slave gretap2): Releasing active interface [ 610.209451][ T2258] block nbd4: Possible stuck request ffff888027418000: control (read@0,1024B). Runtime 270 seconds [ 610.220518][ T2258] block nbd4: Possible stuck request ffff888027418200: control (read@1024,1024B). Runtime 270 seconds [ 610.233534][ T2258] block nbd4: Possible stuck request ffff888027418400: control (read@2048,1024B). Runtime 270 seconds [ 610.245269][ T2258] block nbd4: Possible stuck request ffff888027418600: control (read@3072,1024B). Runtime 270 seconds [ 610.257152][T22071] bond1 (unregistering): (slave bridge1): Releasing active interface [ 610.301972][T22071] bond2 (unregistering): (slave bridge2): Releasing active interface [ 610.310378][T22071] bridge2 (unregistering): left promiscuous mode [ 610.316712][T22071] bridge2 (unregistering): left allmulticast mode [ 610.381861][T22071] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 610.390681][T22071] bridge4 (unregistering): left promiscuous mode [ 610.563221][T22071] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 610.573437][T22071] .` (unregistering): Released all slaves [ 610.582777][T22071] bond1 (unregistering): Released all slaves [ 610.597933][T22071] bond2 (unregistering): Released all slaves [ 610.611998][T22071] bond3 (unregistering): Released all slaves [ 610.626493][T22071] bond4 (unregistering): Released all slaves [ 610.646436][T22071] bond0 (unregistering): (slave veth5): Releasing backup interface [ 610.657100][T22071] veth5: left promiscuous mode [ 610.662121][T22071] veth5: left allmulticast mode [ 610.668978][T22071] bond0 (unregistering): Released all slaves [ 610.683158][T22071] bond5 (unregistering): (slave lo): Releasing backup interface [ 610.691603][T22071] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 610.704091][T22071] bond5 (unregistering): Released all slaves [ 610.718627][T22071] bond6 (unregistering): Released all slaves [ 610.733353][T22071] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 610.744902][T22071] bond7 (unregistering): Released all slaves [ 610.757638][T22071] bond8 (unregistering): Released all slaves [ 610.770359][T22071] bond9 (unregistering): Released all slaves [ 610.783421][T22071] bond10 (unregistering): Released all slaves [ 610.795946][T22071] bond11 (unregistering): Released all slaves [ 610.815794][T22071] bond12 (unregistering): Released all slaves [ 610.905054][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 610.998226][T26002] hsr_slave_0: entered promiscuous mode [ 611.011623][T26002] hsr_slave_1: entered promiscuous mode [ 611.027531][T26002] debugfs: 'hsr0' already exists in 'hsr' [ 611.035687][T26002] Cannot create hsr debugfs directory [ 611.093638][T26155] ieee802154 phy1 wpan1: encryption failed: -22 [ 611.119181][T22071] tipc: Disabling bearer [ 611.133464][T22071] tipc: Left network mode [ 611.174759][T26157] __nla_validate_parse: 9 callbacks suppressed [ 611.174777][T26157] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5650'. [ 611.328348][ T5828] Bluetooth: hci5: command tx timeout [ 611.426423][T22071] IPVS: stopping master sync thread 20138 ... [ 611.572633][T26172] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5654'. [ 611.586465][T26172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5654'. [ 611.611643][T26172] netlink: 'syz.0.5654': attribute type 10 has an invalid length. [ 611.645088][T26172] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5654'. [ 611.662969][T26002] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 45683 - 0 [ 611.904647][T26002] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45683 - 0 [ 612.116608][T26002] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45683 - 0 [ 612.305746][T26002] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45683 - 0 [ 612.614923][T26217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5666'. [ 612.657623][T26217] openvswitch: netlink: IP tunnel TTL not specified. [ 612.773311][T26002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.792782][T26002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.829499][T26002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.856296][T26002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.927318][T26002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.953641][T26002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.992315][T26234] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5669'. [ 613.069576][T26002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.117721][T26002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.199220][T22071] hsr_slave_0: left promiscuous mode [ 613.218498][T22071] hsr_slave_1: left promiscuous mode [ 613.248005][T22071] veth1_macvtap: left promiscuous mode [ 613.269801][T22071] veth0_macvtap: left promiscuous mode [ 613.275524][T22071] veth1_vlan: left promiscuous mode [ 613.408775][ T5828] Bluetooth: hci5: command tx timeout [ 613.460003][T26272] netlink: 'syz.4.5676': attribute type 21 has an invalid length. [ 613.469106][T26272] IPv6: NLM_F_CREATE should be specified when creating new route [ 613.522085][T22071] pim6reg527 (unregistering): left allmulticast mode [ 614.085544][T26275] syzkaller1: entered promiscuous mode [ 614.092678][T26275] syzkaller1: entered allmulticast mode [ 614.238842][T26267] wg1 speed is unknown, defaulting to 1000 [ 614.283978][T26303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5678'. [ 614.361947][T26308] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5679'. [ 614.585214][T26325] netlink: 'syz.4.5683': attribute type 7 has an invalid length. [ 614.625008][T22071] IPVS: stop unused estimator thread 0... [ 614.692502][T26002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.744150][T26002] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.790932][ T9631] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.798159][ T9631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.871491][T26343] netlink: 'syz.5.5690': attribute type 1 has an invalid length. [ 614.890590][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.897753][ T9631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.006294][T26002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.018923][T24653] IPVS: ip_vs_send_async error -19 [ 615.066569][T26353] netlink: 'syz.5.5692': attribute type 10 has an invalid length. [ 615.096877][T26353] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5692'. [ 615.136289][T26347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5691'. [ 615.163305][T26347] netlink: 'syz.0.5691': attribute type 14 has an invalid length. [ 615.172864][T26347] netlink: 'syz.0.5691': attribute type 13 has an invalid length. [ 615.298406][T26363] openvswitch: netlink: Message has 28 unknown bytes. [ 615.332560][ T25] block nbd7: Possible stuck request ffff888027518000: control (read@0,1024B). Runtime 210 seconds [ 615.345315][ T25] block nbd7: Possible stuck request ffff888027518200: control (read@1024,1024B). Runtime 210 seconds [ 615.355267][T26366] xt_hashlimit: overflow, try lower: 0/0 [ 615.356784][ T25] block nbd7: Possible stuck request ffff888027518400: control (read@2048,1024B). Runtime 210 seconds [ 615.373359][ T25] block nbd7: Possible stuck request ffff888027518600: control (read@3072,1024B). Runtime 210 seconds [ 615.469240][T26002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.492625][ T5828] Bluetooth: hci5: command tx timeout [ 615.545520][T26002] veth0_vlan: entered promiscuous mode [ 615.563226][T26002] veth1_vlan: entered promiscuous mode [ 615.595409][T26002] veth0_macvtap: entered promiscuous mode [ 615.605665][T26002] veth1_macvtap: entered promiscuous mode [ 615.620806][T26378] nbd: nbd64 already in use [ 615.641610][T26002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.671086][T26002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.690870][ T9632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.709995][ T9632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.723542][T26386] netlink: 'syz.1.5700': attribute type 13 has an invalid length. [ 615.750167][ T9632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.788401][T26378] tipc: Enabling of bearer rejected, failed to enable media [ 615.819410][T26386] veth0_macvtap: left promiscuous mode [ 615.845194][T26386] macvtap0: entered allmulticast mode [ 615.884526][T26386] macvtap0: refused to change device tx_queue_len [ 615.941535][ T9632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.057625][T26402] x_tables: unsorted entry at hook 1 [ 616.147118][T26386] syzkaller0: entered promiscuous mode [ 616.177003][T26386] syzkaller0: entered allmulticast mode [ 616.225502][T26413] __nla_validate_parse: 8 callbacks suppressed [ 616.225520][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5707'. [ 616.242054][ T9637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.251110][ T9637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.267535][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5707'. [ 616.342950][T22071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.349712][T26417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5710'. [ 616.367312][T22071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.396422][T26420] macvlan1: entered allmulticast mode [ 616.454518][T26423] pim6reg1: entered promiscuous mode [ 616.468162][T26423] pim6reg1: entered allmulticast mode [ 616.484319][T26423] netlink: 'syz.5.5709': attribute type 29 has an invalid length. [ 616.519228][T26423] netlink: 'syz.5.5709': attribute type 29 has an invalid length. [ 616.536069][T26423] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5709'. [ 616.546385][T26423] unsupported nla_type 58 [ 618.372811][T26450] tipc: Enabling of bearer rejected, media not registered [ 618.401867][T26456] netlink: 'syz.1.5719': attribute type 21 has an invalid length. [ 618.521528][T26463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5720'. [ 618.534793][T26463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 618.569753][T26472] vcan0: tx address claim with dlc 0 [ 618.583674][T26465] netlink: 'syz.1.5722': attribute type 1 has an invalid length. [ 618.663240][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5722'. [ 618.692290][T26465] bond11 (unregistering): Released all slaves [ 618.963387][T26497] wg1 speed is unknown, defaulting to 1000 [ 618.978357][T26508] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 618.986238][T26503] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 619.111217][T26515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5736'. [ 619.121243][T26513] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5735'. [ 619.204980][T26520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.449196][T26541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5744'. [ 619.461764][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5742'. [ 620.173726][T26580] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.863237][T26618] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 621.113031][T26631] netlink: 'syz.1.5768': attribute type 7 has an invalid length. [ 621.114858][T26629] syzkaller1: entered promiscuous mode [ 621.145596][T26629] syzkaller1: entered allmulticast mode [ 621.221080][T26640] netlink: 'syz.1.5772': attribute type 4 has an invalid length. [ 621.229655][T26639] netlink: 'syz.1.5772': attribute type 4 has an invalid length. [ 621.237923][T26638] netlink: 'syz.1.5772': attribute type 4 has an invalid length. [ 621.436594][T26653] tipc: Enabled bearer , priority 10 [ 621.681931][T26671] ================================================================== [ 621.690070][T26671] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 621.697813][T26671] Read of size 8 at addr ffff888033365860 by task syz.2.5779/26671 [ 621.705708][T26671] [ 621.708038][T26671] CPU: 1 UID: 0 PID: 26671 Comm: syz.2.5779 Not tainted syzkaller #0 PREEMPT(full) [ 621.708059][T26671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 621.708069][T26671] Call Trace: [ 621.708076][T26671] [ 621.708082][T26671] dump_stack_lvl+0xe8/0x150 [ 621.708109][T26671] print_report+0xba/0x230 [ 621.708127][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 621.708148][T26671] kasan_report+0x117/0x150 [ 621.708167][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 621.708189][T26671] af_alg_pull_tsgl+0x1c6/0x740 [ 621.708219][T26671] skcipher_recvmsg+0x5df/0x1140 [ 621.708244][T26671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 621.708262][T26671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 621.708287][T26671] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 621.708304][T26671] ? security_socket_recvmsg+0x7e/0x2c0 [ 621.708319][T26671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 621.708333][T26671] sock_recvmsg+0x172/0x1b0 [ 621.708349][T26671] ____sys_recvmsg+0x1e6/0x4a0 [ 621.708370][T26671] ? __pfx_____sys_recvmsg+0x10/0x10 [ 621.708391][T26671] ? import_iovec+0x73/0xa0 [ 621.708408][T26671] ___sys_recvmsg+0x215/0x590 [ 621.708428][T26671] ? __pfx____sys_recvmsg+0x10/0x10 [ 621.708460][T26671] ? __fget_files+0x3a0/0x420 [ 621.708480][T26671] do_recvmmsg+0x334/0x800 [ 621.708505][T26671] ? __pfx_do_recvmmsg+0x10/0x10 [ 621.708528][T26671] ? __pfx_do_futex+0x10/0x10 [ 621.708583][T26671] __x64_sys_recvmmsg+0x198/0x250 [ 621.708606][T26671] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 621.708633][T26671] do_syscall_64+0x14d/0xf80 [ 621.708654][T26671] ? trace_irq_disable+0x3b/0x150 [ 621.708669][T26671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.708687][T26671] ? clear_bhb_loop+0x40/0x90 [ 621.708705][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.708723][T26671] RIP: 0033:0x7f7e5019c819 [ 621.708738][T26671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.708753][T26671] RSP: 002b:00007f7e50ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 621.708771][T26671] RAX: ffffffffffffffda RBX: 00007f7e50416090 RCX: 00007f7e5019c819 [ 621.708783][T26671] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000004 [ 621.708794][T26671] RBP: 00007f7e50232c91 R08: 0000000000000000 R09: 0000000000000000 [ 621.708804][T26671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.708814][T26671] R13: 00007f7e50416128 R14: 00007f7e50416090 R15: 00007ffdbbe263a8 [ 621.708833][T26671] [ 621.708839][T26671] [ 621.955797][T26671] Allocated by task 26671: [ 621.960209][T26671] kasan_save_track+0x3e/0x80 [ 621.964874][T26671] __kasan_kmalloc+0x93/0xb0 [ 621.969448][T26671] __kmalloc_noprof+0x35c/0x760 [ 621.974287][T26671] sock_kmalloc+0xd6/0x160 [ 621.978692][T26671] skcipher_recvmsg+0x54d/0x1140 [ 621.983614][T26671] sock_recvmsg+0x172/0x1b0 [ 621.988103][T26671] ____sys_recvmsg+0x1e6/0x4a0 [ 621.992865][T26671] ___sys_recvmsg+0x215/0x590 [ 621.997532][T26671] do_recvmmsg+0x334/0x800 [ 622.001936][T26671] __x64_sys_recvmmsg+0x198/0x250 [ 622.006950][T26671] do_syscall_64+0x14d/0xf80 [ 622.011534][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.017414][T26671] [ 622.019721][T26671] The buggy address belongs to the object at ffff888033365840 [ 622.019721][T26671] which belongs to the cache kmalloc-32 of size 32 [ 622.033601][T26671] The buggy address is located 0 bytes to the right of [ 622.033601][T26671] allocated 32-byte region [ffff888033365840, ffff888033365860) [ 622.047992][T26671] [ 622.050310][T26671] The buggy address belongs to the physical page: [ 622.056797][T26671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33365 [ 622.065556][T26671] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 622.072688][T26671] page_type: f5(slab) [ 622.076655][T26671] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 622.085217][T26671] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 622.093787][T26671] page dumped because: kasan: bad access detected [ 622.100194][T26671] page_owner tracks the page as allocated [ 622.105902][T26671] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5495, tgid 5495 (mkdir), ts 41284797560, free_ts 41283223730 [ 622.124916][T26671] post_alloc_hook+0x231/0x280 [ 622.130027][T26671] get_page_from_freelist+0x24dc/0x2580 [ 622.135582][T26671] __alloc_frozen_pages_noprof+0x18d/0x380 [ 622.141389][T26671] allocate_slab+0x77/0x660 [ 622.145890][T26671] refill_objects+0x331/0x3c0 [ 622.150558][T26671] __pcs_replace_empty_main+0x2e6/0x730 [ 622.156102][T26671] __kmalloc_cache_noprof+0x392/0x660 [ 622.161465][T26671] kmem_cache_free+0x15b/0x630 [ 622.166230][T26671] task_work_run+0x1d9/0x270 [ 622.170805][T26671] do_exit+0x70f/0x23c0 [ 622.174943][T26671] do_group_exit+0x21b/0x2d0 [ 622.179514][T26671] __x64_sys_exit_group+0x3f/0x40 [ 622.184519][T26671] x64_sys_call+0x221a/0x2240 [ 622.189186][T26671] do_syscall_64+0x14d/0xf80 [ 622.193784][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.199667][T26671] page last free pid 5495 tgid 5495 stack trace: [ 622.205975][T26671] __free_frozen_pages+0xc2b/0xdb0 [ 622.211070][T26671] tlb_finish_mmu+0x144/0x230 [ 622.215729][T26671] exit_mmap+0x498/0xa10 [ 622.219955][T26671] __mmput+0x118/0x430 [ 622.224005][T26671] exit_mm+0x168/0x220 [ 622.228060][T26671] do_exit+0x6a2/0x23c0 [ 622.232206][T26671] do_group_exit+0x21b/0x2d0 [ 622.236777][T26671] __x64_sys_exit_group+0x3f/0x40 [ 622.241785][T26671] x64_sys_call+0x221a/0x2240 [ 622.246463][T26671] do_syscall_64+0x14d/0xf80 [ 622.251055][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.256938][T26671] [ 622.259246][T26671] Memory state around the buggy address: [ 622.264866][T26671] ffff888033365700: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 622.272911][T26671] ffff888033365780: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 622.280971][T26671] >ffff888033365800: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 622.289014][T26671] ^ [ 622.296284][T26671] ffff888033365880: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 622.304329][T26671] ffff888033365900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 622.312369][T26671] ================================================================== [ 622.338911][T26671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 622.346289][T26671] CPU: 1 UID: 0 PID: 26671 Comm: syz.2.5779 Not tainted syzkaller #0 PREEMPT(full) [ 622.355668][T26671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 622.365721][T26671] Call Trace: [ 622.368988][T26671] [ 622.371907][T26671] vpanic+0x56c/0xa60 [ 622.375993][T26671] ? __pfx_vpanic+0x10/0x10 [ 622.380487][T26671] ? __pfx___schedule+0x10/0x10 [ 622.385328][T26671] panic+0xc5/0xd0 [ 622.389040][T26671] ? __pfx_panic+0x10/0x10 [ 622.393450][T26671] ? preempt_schedule_common+0x82/0xd0 [ 622.398901][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 622.403930][T26671] check_panic_on_warn+0x89/0xb0 [ 622.408864][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 622.413884][T26671] end_report+0x73/0x180 [ 622.418118][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 622.423174][T26671] kasan_report+0x128/0x150 [ 622.427666][T26671] ? af_alg_pull_tsgl+0x1c6/0x740 [ 622.432680][T26671] af_alg_pull_tsgl+0x1c6/0x740 [ 622.437527][T26671] skcipher_recvmsg+0x5df/0x1140 [ 622.442461][T26671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 622.447821][T26671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.452758][T26671] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 622.458037][T26671] ? security_socket_recvmsg+0x7e/0x2c0 [ 622.463580][T26671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 622.468958][T26671] sock_recvmsg+0x172/0x1b0 [ 622.473448][T26671] ____sys_recvmsg+0x1e6/0x4a0 [ 622.478204][T26671] ? __pfx_____sys_recvmsg+0x10/0x10 [ 622.483480][T26671] ? import_iovec+0x73/0xa0 [ 622.487969][T26671] ___sys_recvmsg+0x215/0x590 [ 622.492634][T26671] ? __pfx____sys_recvmsg+0x10/0x10 [ 622.497830][T26671] ? __fget_files+0x3a0/0x420 [ 622.502501][T26671] do_recvmmsg+0x334/0x800 [ 622.506914][T26671] ? __pfx_do_recvmmsg+0x10/0x10 [ 622.511850][T26671] ? __pfx_do_futex+0x10/0x10 [ 622.516522][T26671] __x64_sys_recvmmsg+0x198/0x250 [ 622.521538][T26671] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 622.527076][T26671] do_syscall_64+0x14d/0xf80 [ 622.531656][T26671] ? trace_irq_disable+0x3b/0x150 [ 622.536669][T26671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.542719][T26671] ? clear_bhb_loop+0x40/0x90 [ 622.547380][T26671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.553256][T26671] RIP: 0033:0x7f7e5019c819 [ 622.557663][T26671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.577255][T26671] RSP: 002b:00007f7e50ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 622.585663][T26671] RAX: ffffffffffffffda RBX: 00007f7e50416090 RCX: 00007f7e5019c819 [ 622.593622][T26671] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000004 [ 622.601582][T26671] RBP: 00007f7e50232c91 R08: 0000000000000000 R09: 0000000000000000 [ 622.609544][T26671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.617500][T26671] R13: 00007f7e50416128 R14: 00007f7e50416090 R15: 00007ffdbbe263a8 [ 622.625577][T26671] [ 622.628922][T26671] Kernel Offset: disabled [ 622.633239][T26671] Rebooting in 86400 seconds..