last executing test programs: 1.880034516s ago: executing program 1 (id=2492): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000004dc1000000000000000040000000000000040000000000"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r9, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f00000001c0)=""/176) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 1.414357737s ago: executing program 2 (id=2499): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000000000008c4a34a54cfd86a900", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00'], 0x20}}, 0x0) poll(&(0x7f0000000000)=[{r2, 0x2250}], 0x1, 0x6) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000000000008c4a34a54cfd86a900", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) poll(&(0x7f0000000000)=[{r2, 0x2250}], 0x1, 0x6) (async) 1.36507753s ago: executing program 0 (id=2500): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(r0, 0xd1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x0, 0x6, 0x9}) 1.27608646s ago: executing program 3 (id=2501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x60}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.274625903s ago: executing program 0 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e20, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.260588822s ago: executing program 4 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x74}}, 0x0) 1.245506201s ago: executing program 1 (id=2504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe07) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0xcc, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbc72}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xba16}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7f}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x5c, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e21, 0x6600, 0x800, 0x0, 0x2}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {0x2, 0x1, 0x3, 0x7f}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e20, 0xd, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a33180000481100fc010000000000000000000000000001ff0200000000000000000000000000014e204e20004890"], 0x0) 1.104259153s ago: executing program 3 (id=2505): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xa004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x100}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) (async) listen(r5, 0x0) (async) listen(r4, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 1.10347633s ago: executing program 4 (id=2506): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg(r0, &(0x7f00000012c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="f00b35d2351b745d69a13f244281175c2ab69efaf834fce5afc99a7ae0b06c9baa0df9dc9d4f0ee49be329fcfe9b7f19821f96bbbaead0f39be99141c01df9bd7d56f3626b60214a715bcd5296f710605f0ece99ba78538c76cbb0337cca332102a02f01eacc215a28f30cc262f7aeba475b3ae3de2811d0e0ed34593ab6d00cc518509d21ce214a6c0769bfe196cd9bb8c82e966880acea6e811cf04995ba73bb87c95ec8fe2e3127a384c18cc2112db6ee7402d7a726632e", 0xb9}], 0x1, &(0x7f0000000180)=[{0x1010, 0x10b, 0x6c, "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"}, {0x110, 0x100, 0x400000, "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"}], 0x1120}, 0x4008000) openat$ppp(0xffffffffffffff9c, &(0x7f0000001300), 0x141042, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001300), 0x141042, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001340)=0x2db, 0x4) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001340)=0x2db, 0x4) r2 = accept(r1, &(0x7f0000001380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001400)=0x80) bind$rose(r2, &(0x7f0000001440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) read(r4, &(0x7f0000001480)=""/232, 0xe8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001580)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001640)={0x0, @nfc={0x27, r5, 0xffffffffffffffff, 0x2}, @nfc={0x27, r6, 0xffffffffffffffff, 0x3}, @sco={0x1f, @none}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001600)='vlan0\x00', 0x0, 0x6, 0x9}) writev(r0, &(0x7f0000001780)=[{&(0x7f00000016c0)="b3906e35ab7427916a2115ccaa967bf3819249185840a6bd02a9592cceaa6ce27dff94b0c2bd0cb096e647944a6c702f5db37bbcbef8bf8debbb548d2a03ec4701bb08b4eb31404fdf478f3d6642b54d8fe4a35b40c0309b56267fca6a1da00675bb28b200726876a952b5c54f1432f1833dc725c70e0c498be823656848d35ba116f8e733e2bf65b4314f5c1c434e134c7edbf208fe13d1e71cb0165c21790f82960d134a", 0xa5}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r7) syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), r7) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001880)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x58, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000019c0), r7) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001a00)={0x4, "456584"}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001a00)={0x4, "456584"}, 0x6) syz_genetlink_get_family_id$nfc(&(0x7f0000001a40), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001bc0)={0x0, 0x8, 0xfffb, 0x3, 0x6, 0x1000}, &(0x7f0000001c00)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001c40)={0x7, 0xff, 0x0, 0x101, 0xbd, 0x7, 0x0, 0x9, r11}, &(0x7f0000001c80)=0x20) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan1\x00'}) getsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000001d00)=""/4096, &(0x7f0000002d00)=0x1000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000002d40)=0x4) connect$netlink(r2, &(0x7f0000002d80)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8004}, 0xc) (async) connect$netlink(r2, &(0x7f0000002d80)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8004}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002dc0)={r12, @in={{0x2, 0x4e22, @loopback}}}, 0x84) 1.015720021s ago: executing program 0 (id=2507): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x0, {0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}}, 0x32) 959.540347ms ago: executing program 3 (id=2508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r6 = socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x80, 0x70, 0x100, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xff}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 900.72559ms ago: executing program 4 (id=2509): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (rerun: 32) 892.436387ms ago: executing program 2 (id=2510): syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000007c0)="27031c00df0e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}, {&(0x7f00000016c0)="071cd289a39a3f01ed2affd0895bd7609db5749c6eeb091e8dc49819bd1cc6dc180463d6c1f4001a76121387fddfcf97887edfbd82f8f0406b131f694209901e95ab186efe41ffd0d0dfa9e30e2c4afde5b05c05c71d5e50b318db75", 0x5c}, {&(0x7f0000001840)="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", 0xe4c}], 0x3}, 0xc008) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0)={r2, r3/1000+60000}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x4c0b, 0x0, {{0x15, 0x4, 0x3, 0x35, 0x54, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xd8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @remote, @loopback]}, @timestamp={0x44, 0x28, 0xfe, 0x0, 0x7, [0x6, 0x3, 0x9, 0x7, 0x4f, 0x0, 0x2f6, 0x1f1, 0x2]}]}}}}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 885.935425ms ago: executing program 1 (id=2511): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000041800001000000012"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095", @ANYBLOB="b311673c6208324fa935343cf80b2ef1f2bdc61b750495f4f06a5ac6be5530d3e24433cb95829a438d1b0c", @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="100000001914019e", @ANYRES16=0x0, @ANYRES64=r0, @ANYRES8=r2, @ANYBLOB="e851bd80091e603b6ca7f0851d12b8a6923d2898b44ea1a3c2184cb35c9e8e080f3a44b25e"], 0x10}}, 0x0) 780.542453ms ago: executing program 0 (id=2512): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) (async, rerun: 64) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 756.689524ms ago: executing program 1 (id=2513): r0 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0xc10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 754.689095ms ago: executing program 4 (id=2514): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0xc040480) unshare(0x4c020480) 733.254035ms ago: executing program 3 (id=2515): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000340)="b71970047d2a28d884be43a2ec0518a94392589407fa20ef6df1832a3f89d3b4ccd0b84ac144c45e0eb4aa639ca22e3d38728918cc4a950d82d16715f93ab217b49887c66e277b682ce55e09eab6629ab91dcbf699dbd6865e5a", &(0x7f00000003c0)=""/224, &(0x7f00000004c0)="9e11e0b2cdff06916282c2f8aa63d6786ddd2f833fb2905ad0376651f36d7fe64f07bf3e63a438df2da4566096f1bfbcc100f8919324db295a3b174bac74821338d094ab60cd763b3296ee6dc8467544da64829727888c529eb13180ba7195f44ea490551a3b772a9d0c2506ffa4c739aabafb380a4161ff8c", &(0x7f00000005c0)="c21ab79f18194886bcf1c16fe9ae7f88cb03aa5691fb891b12b8f0eb44f3167e5436d3b9b43711fe31312f4790e23dd4c4d51c9d45015a054e71922c3b7fb6571adfcb6cc86ebd44710c8b4e391d3b013ae827780ffb184856079386d1284e69638dc549399be2255faedc7c9a589f2ceb543da78333aec779fad1cb00c151b6def02ec30b64609903ddbf4123e1c91b1032dd756f8e47116fd9664f08d650ead8c992039f374e78eb5c0b63bc4ea51fb4fdf6de12672b91f1975e000228b082dc738aefe901f057189212d17e", 0x3, r0, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x9, 0x101, 0x1, 0x25}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="7b13000102000000200012800b0001006272696467650000100002800c0020000000000000000000"], 0x40}}, 0x0) 556.036219ms ago: executing program 3 (id=2516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'veth1_to_bond\x00', {0xffe}, 0x2b1}) 521.768527ms ago: executing program 2 (id=2517): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3800000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000001800128008000100687372000c00028008000100bfce32d9e2dd40d16417aad117dfbd307e00e996c436f17c368d51c6758cf19d1f0f0dc860020d02d2e6d26107dc82d06f59d6675fdf41e98d9f88737f7bf01571718c12fd0455d274f69d7e33751915a52c278ea65a710821bb8198f558985ed81a29a7d9350189cd7037399c69aabde8842ad5a84660646194127abf9a342b5029ec68a231f563acc07c5400d1d86aceac4b34bb2f8adb1d60187049dc7de02d520bffbe70af400c65b92d0b85ebb23486ffb6b4f77b85f3be9b93c3048c5431d45876ab61335d09ae2513", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x44) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3802000043000701fefffffffcdbdf25027c0000040045801e0201"], 0x238}}, 0xc000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x800, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0x4863dbfa}, 0x28) recvmsg$can_bcm(r0, &(0x7f0000000f40)={&(0x7f0000000e00)=@ethernet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000e80)=""/91, 0x5b}, {&(0x7f0000001000)=""/143, 0x8f}, {&(0x7f00000010c0)=""/138, 0x8a}, {&(0x7f00000011c0)=""/206, 0xce}], 0x4, &(0x7f00000012c0)=""/248, 0xf8}, 0x100) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x68}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r10, 0x8937, &(0x7f0000000f00)={'team0\x00', @ifru_ivalue=0x6}) sendto$packet(r7, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r11 = accept$alg(r9, 0x0, 0x0) bind(r11, &(0x7f0000000ac0)=@llc={0x1a, 0x302, 0x80, 0xbd, 0x8, 0x8, @remote}, 0x80) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x88}, @alu={0xa, 0x1, 0xa, 0x5, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4556c76d, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0xc, &(0x7f0000000440)=""/12, 0x0, 0x20, '\x00', 0x0, 0x17, r4, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0x6, 0xffff73e8}, 0x10, 0x6366, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r5, r5, r5, r5, r5, r5, r6], &(0x7f00000006c0)=[{0x5, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x2, 0x6}, {0x3, 0x5, 0xc, 0x6}, {0x0, 0x1, 0x9, 0x1}, {0x0, 0x3, 0x10, 0x2}, {0x0, 0x1, 0x6}], 0x10, 0xa1e4}, 0x94) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x8, '\x00', 0x0, r4, 0x3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000006000000000000008b5d000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008583993b589f935b7600000000000000"], &(0x7f0000000240)='GPL\x00', 0x77, 0xf8, &(0x7f0000000340)=""/248, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xc, 0xb, 0x4}, 0x10, 0x0, r12, 0x8, &(0x7f0000000900)=[r13, r14], &(0x7f0000000940)=[{0x0, 0x1, 0x1}, {0x4, 0x1, 0x10, 0x3}, {0x6, 0x4, 0xd}, {0x5, 0x4, 0xd, 0xa}, {0x1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0xc}, {0x2, 0x3, 0xc, 0x1}, {0x5, 0x3, 0x7, 0x2}], 0x10, 0x80000000}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCRSSCAUSE(r9, 0x89e1, &(0x7f0000000a80)=0x5) ioctl$sock_FIOGETOWN(r15, 0x8903, &(0x7f0000000040)) sendmsg$nl_generic(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c00000003e00230c2abd70008000000018000000a900018004003a800600450028000000c92b90920cb6100c8a3823b1e4bf7e5b96c06a62b79101b6cb25454b6c922703f5bc49f805bddca2e2b6c371ea8788ebaee0507fa641434309a6134dc320e6e98eca782bba034c4434ec49fa83ea08000000ad1b59a5160a4410399946bbfe8ab756639d585dabddf7ef1bfea3c5948ff5db5f7ba4b111deff30a5c3d658798bfbe53a3bbfba4d13f36e0800360073c1e3c559a7c0f038c0df4a250365d0ec344695c49030c6aa32b583929413c35b7fe081bf1b56297d54170a3075a9595eedf1e3c149f60d710506bb46873bd52c6dce4fb226007e391ee77c8f3827b106360968816f8e61d14b4ad2c3ee051096bc39921629b8b8723939398f375e12b6ed477996a5807d6af988a54cdbd00152235d082b31460171522efcb6d33fac9939e6", @ANYRES32=r15, @ANYBLOB="0400370004003700000000"], 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x2) 488.431239ms ago: executing program 1 (id=2518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x60, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000002c0)=0x10, 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) 404.493793ms ago: executing program 0 (id=2519): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0xf8, 0x81, 0xf009, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa0, 0x7800, 0x8, 0xa}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0xcc, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9e}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008094}, 0x800) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)=0x51) 404.048411ms ago: executing program 3 (id=2520): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@rose, @bcast, @rose, @rose, @bcast, @rose, @remote, @netrom]}, &(0x7f0000000100)=0x48) bind$ax25(r0, &(0x7f0000000340)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 64) unshare(0x68040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0xff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendto$netrom(r5, 0x0, 0xfffffffffffffead, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x48010) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x9a, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='wlan0\x00', 0x0, 0x8, 0x400}) 365.408464ms ago: executing program 2 (id=2521): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x214}], 0x1, 0x0, 0x0, 0x48804}, 0x40) 237.154781ms ago: executing program 4 (id=2522): syz_emit_ethernet(0x59b, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "38136c", 0x565, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}, @local, {[@srh={0x67, 0x4, 0x4, 0x2, 0x5, 0x0, 0x0, [@local, @remote]}, @routing={0x84, 0x8, 0x1, 0xd8, 0x0, [@local, @rand_addr=' \x01\x00', @empty, @mcast2]}, @hopopts={0x32, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}, @srh={0x21, 0x14, 0x4, 0xa, 0x0, 0x0, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x38}]}, @routing={0x2c, 0xe, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private1, @dev={0xfe, 0x80, '\x00', 0x6}]}, @dstopts={0x2c, 0xf, '\x00', [@generic={0x7, 0x26, "60a2a3d9b96c871bf37ee6130687ea325ca58da5acd61d84fb9b58c984e60c36ae7e15b28e0f"}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xe}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x41, [0x0, 0x7fffffff]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x81, [0x8, 0x375]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x5c, 0x0, 0x6, 0x1, 0x0, 0x7, 0x67}, @fragment={0x5c, 0x0, 0x60, 0x1, 0x0, 0x1f, 0x67}, @dstopts={0x3c, 0x20, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x4, [0x10, 0x2, 0xda]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x2, [0x9, 0x7, 0x1, 0x9, 0x6]}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @generic={0x8, 0x86, "9de6ba61fd7215920865478a16cca8645182fbfa5125c484278e518a4817cce9ac9777dd34b2fb291400b829b31b8fdb1c95cb9b14e8183abb1e5fb3effe196465c3e3a5d516967bff6bfa5e4e64a8bf8bfd54931a66f6ae68aaebaab94470defa9c1377c88b8a0f6856eb9f2704f12642ff671242aef34675e95677311790dab07d66aaa7e5"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xaa, 0xa, "26c90eb8e20e901ce3d9"}, @enc_lim={0x4, 0x1, 0x6e}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x66, 0x3, [], "c01c558f78071465243f40741ba50ccb23da566d929da6d9fea2d3df6204e8f4977411723bc4802fe3be9f2ef5288004da758d557ae6f2d55e42026a89dbc45cfc551248d376b38af40fc4191ea8d2bf3ea87de843ed3b5acd347fac313edef283d7f23b0f4f"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "93f5bbcdb9b9057e27ffeaaa7044ac1fe1242e3e9b5ec2386c5b853458e3a9f7ab5d01c8d8a4f89f0b25822dbb26561d1701722c5ce6c09d39c8075facfe72d6a8c048257fa690bfc57f2740021955933857b14f6ca85c967ce3927c3d293b165f30124491377ff4109143e6d488ef2284b776489172c3fe9324e070910719b67870f4c8e06fd06878e9bf70b517a91b78b10a4e53db5bc949bfb84dc072838f35b51ba4351c74f0c30f03911c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xf9], "8dcdd2bbeb6c8809803ba01b8b6663048d58e65de85538c5e52a5c791bbea789cc4066092a01e22a96225d810543874748d857e404af61b2492839f63ce40a2bfbc69a51b5d45d90bac4026d77043ee21df5e36142a5b7f8da7bd46a0fa3730c43"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x8, 0x1, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x7ff, 0x2, 0x2, 0x9, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "8de0da9a68cb261d2b7535ab9d81b03366e88ac4b0f181b8dc68ba0a64e51e46eaed74507cb09605db0f31934b40036333d209aea7776ffd3efaf5f44e4e6cc9c4a9ad75d5ef699dea256ad195c0ca72ada696"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) syz_emit_ethernet(0x59b, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "38136c", 0x565, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}, @local, {[@srh={0x67, 0x4, 0x4, 0x2, 0x5, 0x0, 0x0, [@local, @remote]}, @routing={0x84, 0x8, 0x1, 0xd8, 0x0, [@local, @rand_addr=' \x01\x00', @empty, @mcast2]}, @hopopts={0x32, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}, @srh={0x21, 0x14, 0x4, 0xa, 0x0, 0x0, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x38}]}, @routing={0x2c, 0xe, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private1, @dev={0xfe, 0x80, '\x00', 0x6}]}, @dstopts={0x2c, 0xf, '\x00', [@generic={0x7, 0x26, "60a2a3d9b96c871bf37ee6130687ea325ca58da5acd61d84fb9b58c984e60c36ae7e15b28e0f"}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xe}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x41, [0x0, 0x7fffffff]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x81, [0x8, 0x375]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x5c, 0x0, 0x6, 0x1, 0x0, 0x7, 0x67}, @fragment={0x5c, 0x0, 0x60, 0x1, 0x0, 0x1f, 0x67}, @dstopts={0x3c, 0x20, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x4, [0x10, 0x2, 0xda]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x2, [0x9, 0x7, 0x1, 0x9, 0x6]}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @generic={0x8, 0x86, "9de6ba61fd7215920865478a16cca8645182fbfa5125c484278e518a4817cce9ac9777dd34b2fb291400b829b31b8fdb1c95cb9b14e8183abb1e5fb3effe196465c3e3a5d516967bff6bfa5e4e64a8bf8bfd54931a66f6ae68aaebaab94470defa9c1377c88b8a0f6856eb9f2704f12642ff671242aef34675e95677311790dab07d66aaa7e5"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xaa, 0xa, "26c90eb8e20e901ce3d9"}, @enc_lim={0x4, 0x1, 0x6e}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x66, 0x3, [], "c01c558f78071465243f40741ba50ccb23da566d929da6d9fea2d3df6204e8f4977411723bc4802fe3be9f2ef5288004da758d557ae6f2d55e42026a89dbc45cfc551248d376b38af40fc4191ea8d2bf3ea87de843ed3b5acd347fac313edef283d7f23b0f4f"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "93f5bbcdb9b9057e27ffeaaa7044ac1fe1242e3e9b5ec2386c5b853458e3a9f7ab5d01c8d8a4f89f0b25822dbb26561d1701722c5ce6c09d39c8075facfe72d6a8c048257fa690bfc57f2740021955933857b14f6ca85c967ce3927c3d293b165f30124491377ff4109143e6d488ef2284b776489172c3fe9324e070910719b67870f4c8e06fd06878e9bf70b517a91b78b10a4e53db5bc949bfb84dc072838f35b51ba4351c74f0c30f03911c"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xf9], "8dcdd2bbeb6c8809803ba01b8b6663048d58e65de85538c5e52a5c791bbea789cc4066092a01e22a96225d810543874748d857e404af61b2492839f63ce40a2bfbc69a51b5d45d90bac4026d77043ee21df5e36142a5b7f8da7bd46a0fa3730c43"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x8, 0x1, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x7ff, 0x2, 0x2, 0x9, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "8de0da9a68cb261d2b7535ab9d81b03366e88ac4b0f181b8dc68ba0a64e51e46eaed74507cb09605db0f31934b40036333d209aea7776ffd3efaf5f44e4e6cc9c4a9ad75d5ef699dea256ad195c0ca72ada696"}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) (async) 164.332895ms ago: executing program 2 (id=2523): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={0xffffffffffffffff, 0x3}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000011c0)={&(0x7f0000000000)="fa206a25574069d684e7acee615eaf6a393cea22edb3e018c091ab5e5eddb9caca939f7cd2927ae84a31cb762ad06e6c0b92b917a918ad026c90742aa60c24d5", &(0x7f0000000040)=""/58, &(0x7f0000000080)="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", &(0x7f0000001080)="a19c70a00a4bd1ffe0903444537e2b26de97f2cd923ad7202e1330a152ac005ae158ee1538cfc02b8346b062b3fb312d8e0827d6d1f5da0c3115e4fcff14c94231fbe11330752e8fbc3ffa8525f51385f406a38cbd095ef3733a78308f29dc95260a7a02ea78b8003738bfa2d15edf95cf4995a0122f8cb46eef8dcb83db7dbf6728820eed90b06dc38e3df58d145bd73361c68dbc954fddee89ea4eb6af0ee24f1a431c5710e3c90704d362d0bc507debab68cda95ea10b76c70bb775a5a1e35ce18882fc12251e6db5dd83ca7485eafc6fdf7b834e26fca29317c70f", 0x3ff, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001280)={{0x1}, &(0x7f0000001200), &(0x7f0000001240)='%pi6 \x00'}, 0x20) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_tracing={0x1a, 0x1, &(0x7f00000012c0)=@raw=[@generic={0xeb, 0x5, 0x5, 0x1}], &(0x7f0000001300)='syzkaller\x00', 0x5967418d, 0x63, &(0x7f0000001340)=""/99, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0x2, 0x9, 0xde2a}, 0x10, 0x2df91, 0xffffffffffffffff, 0x0, &(0x7f0000001440)=[r0]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0x91, 0xf8, &(0x7f0000001540)="5902b1832f22bb147bb92720f5dffae6d066b13a185a1adc7f316907eb7142977e62af758561d335092b1d4fe38b771c0b901943855bf6ea064e9754fc25749e4418945f6330c42eacd112ff5863aee20142025727011fdbf527915f29a38586f4f527bb05e8337f481250b9c9665bbba4f38804e794695da284d00e34b11f0e74d542f728d64e643b063453b726070826", &(0x7f0000001600)=""/248, 0x4, 0x0, 0x77, 0xf6, &(0x7f0000001700)="f92c0c14eb0c5c5ea27a9cfabe18972a630b0e10c3e47b84fd3c4c6b01fbbb89bc3a452ce5e110e232c720cc6d564795ea394ccf269f6e7869a9b133af6c487beeccede2e1ae79753145e4d7f8f64bc18529ddf15a83b03c17f17ebc65a6363d253e697dffca330b54867090a1ea3e2aebc30023eb4e62", &(0x7f0000001780)="699beba3a496bd46ff59fdd1491fb271501abcaede10ffd63406e2aaadee64e374ee9eb8e4a9ddb60c0d850a9c4186071398ec771aa96e875deb025ada68714dec1b13e45be0f44f72a6cb3a1225cb5e2bd581acb2780f4bd40c522f53963232cdf3ebf4eeb33315abeeddb8b718a6729c71ec281709bb0ba3909b91c2fc3f99bcee1574427585ba989aa6292579112c37254638d7b302d57055a164154ca0ed9d8f253fba7a417aa373e9348493e3c712e32581123931e956e014dcd9a35042dd4e02f339b0acfed6a066cbc193f1735206a380f7703841474b95ad8a4dd90d56cc52ca3f6484ce306d849f3b64859dcd5ab12485cf", 0x5, 0x0, 0x6}, 0x50) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001900)='ns/time\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, &(0x7f0000001940)=0x73d, r3, &(0x7f0000001980)=0x8, 0x7e88, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000019c0), &(0x7f0000001a00)=0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={&(0x7f0000001a40)="050b5d9794080197cd0c7bd5d349597731ec4c3d25780754b215b963808e6c8bb4dfc91b940502fc16123d97be8dc8fa6ed1fb9d026887783abf6b06e07f42d5b325215f70", &(0x7f0000001ac0)=""/154, &(0x7f0000001b80)="cde8687b9be82b7ca0134c121b6dca37dca65af749968cd05189201cd837907344a7d65f18dcbc897a77307086a951206de2096554ea1fd0cc2690428a08288d68d2", &(0x7f0000001c00)="fb80b91296a48a4c95f8f19c44563258f10c2cc8750814e5eaf5a36f93dff352002439a1d108ce556cae420a2c0d692252f42ee1bcb91dc8a0a199d22c9844abc5040287b0dcb4ee80e2265b1893f5237d280750a0b20089b60e8da2c3b9b36b7080cc5fd5f7b2c1474fc02f80f6a270fe6e23ede2acc5c31f2ec9aea412d33da765b053002ff4a43c63c9c2d52d462ac0509ebe8e3f35b633c3158f9786701639a343ac8f83a3bae0c0eff3a3cc12d297af5802b19a55ff92e42df363cc829caf1c976f4c8c", 0xf, r0}, 0x38) socketpair(0xb, 0x2, 0x354, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x101}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xd}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7cd4f72d}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044080}, 0x40080) close(r0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000001f00)={'dummy0\x00', {0x2, 0x0, @private}}) r9 = accept4$inet(r5, &(0x7f0000001f40)={0x2, 0x0, @remote}, &(0x7f0000001f80)=0x10, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000002080)={'sit0\x00', &(0x7f0000001fc0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x0, 0xffff, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x67, 0x0, 0x7f, 0x2f, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0xc, [{@remote, 0x361}, {@loopback, 0x16f8}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x8}, {@private=0xa010102, 0x7}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x5, 0xf, "3b2a0f5d3064d80c14350c71e6"}, {0x1, 0x3, "af"}, {0x0, 0x5, "60914a"}, {0x2, 0x7, "9805d076ac"}, {0x6, 0x3, '9'}]}]}}}}}) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000020c0)={@remote, @private=0xa010101, r10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x13c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e241adb34793"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0xe, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x1, 0xe}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xbb, 0x2a, [@ibss={0x6, 0x2, 0x9}, @chsw_timing={0x68, 0x4, {0xff80, 0x9}}, @ssid={0x0, 0x5, @random="ef928d3c02"}, @random_vendor={0xdd, 0x9b, "b4f23ab8b31797ed27aeedd5895a26bcc1559538f7de9a0e673e51b1b937c1c7ce2c311f0abdae1bc594c3b97ffc070b471cecc7ff602738fe1dffc80d826a61312bb97b8e70e69e2e27f5b7f4d07d127b71c5a2d86fccb4980627e020df7f791f18f0077c252e49d3b1f04896b3cd7fee2b88c2f0f3913030e7023549ce2c6ab7a7d32ab35306cb75bc2eaec1c4cba614e2429b5f797d31dbb039"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x41}}]}, @NL80211_ATTR_SSID={0x11, 0x34, @random="c8a945580fb8664806b0b0e042"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x884}, 0x800) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r6) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, r12, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r13, &(0x7f0000002480)="cba51f3d3ec2d84169a2722608357afad90cf5aa864cca9ffa79dcdf2f9eb88a73af7b62c0e39adf5f568c6a76a69058cbef3904d888ad1419a76a674d86f02b6657402cc59e1e61581f8fca5efd73ac9346770eff029ca2984a279b3d441a170669610ba1009b2af65b", 0x6a, 0x20008000, &(0x7f0000002500)={0xa, 0x4e21, 0x338514c3, @remote, 0x8}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r13, 0xc0c89425, &(0x7f0000002540)={"15d88d260654cd8f31319a08017f5b3b", 0x0, 0x0, {0x4, 0x40}, {0x86, 0x5}, 0x2, [0x7fffffffffffffff, 0x8000, 0x684f, 0x6, 0x2944670c, 0x1, 0xcec, 0x10001, 0x5, 0x8, 0x8, 0x46de, 0x5, 0xfffffffffffffffd, 0x1ff, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000002640)={{r0}, r14, 0x0, @unused=[0x9, 0x6, 0x4f70, 0x7000000000000], @name="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"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), r5) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x48894) 101.116275ms ago: executing program 2 (id=2524): r0 = socket(0x29, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) 82.59689ms ago: executing program 1 (id=2525): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xfffc, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0xe5, 0x5}, {0x0, 0x0, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x800}}, 0xe8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x20, 0xc, 0x4, {{0x7, 0x4, 0x3, 0x26, 0x1c, 0x68, 0x0, 0x4, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x7, 0x60, [@local]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7800, 0x20, 0x73, 0x4, {{0x1a, 0x4, 0x0, 0x1c, 0x68, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @generic={0x89, 0xd, "61efd50808cbf1a311ea93"}, @timestamp_addr={0x44, 0x14, 0x28, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xed, 0x1, 0x0, [{@multicast2, 0x3}, {@empty, 0x7ff}, {@remote, 0x3}, {@loopback, 0x9}, {@multicast1, 0x8}]}, @ra={0x94, 0x4}]}}}}}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000074c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x98, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async) sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000005000080"], 0x14}], 0x1}, 0x0) (async) r15 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x3ffd, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000840) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r16 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r16, 0xc0046686, &(0x7f0000001380)={0x1, 0x1000, "ed373efc89b5b6d3735b885419f2cdcf4db7053c5211ba9b1cc9d3bcae5835626ca700b161fe04e1ac04d6143351771f1ff10322bd6ed264b85002719bd904e41d571641f07f5168bd8ecefe22b6c30b7c51a9f96178cb46c012fa4bfcebb32dd88810d5ee16b3e6b2a7c6b1780a8c5d4bae9ff96d6af410dafffcf8a505c253ebed52d327faa5a36014e5e0f7bda84132a819a7c550dfb6cb78f8f8929513a6c0a323f83e3679c13c58d260d54dab37206e43fbec1eb24f733cee3e7034f6e1c526ed00ea8af9cc8e028424e922754ff5017a09bf3b2cc245c52be1232735b08081e616c35c9a7c43d266778f73ea4ecc7e36ec4515bd7cb2ec2948da27149028d7e0e799cb35fbe00dd5cd7f4deccc60511f26d2164af41380f6a78670211b46a3958e7d0c1b238af578430319fa096d6f2403ae2458099707f50a19d251359394f459b4acbcbde123b6b7e62cf76148801122283778911d4e0532fa402fcb83f30eadc4d9ba449a42bbd877e5565b20cec2b9bfc0b98319312b0069da82a046d3785dc62f929daff4673dc5fac043ef82981c6b19d8325cf0d9886a1983b60d88b739f96c25aac7832d74519aa489b6ee07789dedc2a6ac3f5f19dcca9a16f58d0cb369ef5ed0b70de6a27a3248fcb6b0d80879c1385c351dc19798b66aab38be21a57406f29b6806fa1798ce259708b77d5d56fca6fdeb7ad58a8a376a2969347ed74be508411deeafaa0b4e82f4e21413c75af2df0c35d0ebbc645d1d3e90e7f4d5b31a3b954806d331bb96c1cbfb3822274668ebd92b1a410a693174867f4ed4d9494dccaeb19290007dc98757dc15c466cdbe1fe6a9a4a90f886103e599877d9bd8df0bebeda6a31f25c80f7c83882f61bf7e75d70e6dff6931ac47c302218024b8c4a16588ef455e51e1faa1914af535cc99934aeeb1660217cadedd9b06c4899cbc8195c12aeffc3e2e24ff07b78219b2c5b3e5bcc1ce2a5f04c87d12c6c3f68e51d4744d73f0d8236827e5c49487791d5dff38cfb3058ba83c8633e90983ff031f6599711bfeb85540f89d535266e7f554bdbd1361ff8dadab74e53a2bb0bc94d0bde356bedaaad8356e8b97ac306af5fe347b7d0c2d1fde012f471ad014fe5154bf6e0fb9f4d5ded9ac123f0af0b311e0dd805b74e8f758f047414de24fe583e0e42fac9292d17d537f4105b53b19ee07ca7e9bdbdb6b27915aaf2fbcfd5e3203b900f47f71295d752e6337b8ad4fb122d31e6ce44d299046e355201817ad6ddba100cd87b103832bb6b53326252e4810ce396c7df95f30a2168e3685a3aae28857746da5694c2f0f2b275eac28ecc1144e9fe4c75dea3c6ef9a8f3166546f36c094d2878994510b660e94cd47f83b647d4eda5787359b3a5086eb93cf24ea9b0fbae2c37f1cb85688075b68226ee19db52c18a4ba368d1d8f605260b8b60541afe844141d5502752342ad341a34da956766a22b6d7b775724c6419a35f9a5953cfec8864afa75126fde6f8f3d98ebf8ab1f48bd0518c8c4985e5d061af65ba037b4586558c80c57d884ff9ca40a5e229ded0a9811d1c08e87de876838d86fef648e86d4a85e6b9aa853dc3428458501210eed1df3cd5877ab4be4b2b8d616aedb81c25401508c05112de8e42405e1559b4cd1b0e911a35f7b1350307006f7c14bf7fcbfd7e7729b8f9f2a3faec7168016f001817b5f2ae33f4c4aedc4700cccdff3b4588e682b24cea7c30227724c4694418ba28e1cbf2577a620accf9374858ad5cddead7c43bae479ab8ae72bfe73dfbea60923a089564461b7b7a0cc2ab9b7113ec7947e297f6d8febca8243d250700bb460f6c3555efd046f19637329e7ecbc4dd128efa209d5810f8a01d7df7598c9fa08eef57e4d85ae6ef7bf3dcad2424220f8a88a6cd84e7d8383748a5b977c18ea686e2392b3a63c27ba986d4769f0c348e842cf55277731595a6ed83853372c6f49a6963e7e9f2a00ed840d6ad10801fa8c6b51aaf338cf4c83cdf9e41476d13910d376ef907925fc1dd28c43ffa896060ade00f6eb438b6eb3e20ee7747935a5ba669a608836729afa0591f75210263808a401267dc962c7c5c2bf9239fec6c2092b176c995a20a9548d0e4ff6669119f6b2b65f6a90cad8930fb414816911adad74a0866513c7d1f5c5854473eb26990c9df6a18c18ba5c8a467cdd6fa3a55db49648450909ecb1421ee18aa2f542934df557cebb5d81c1b711aee7a736b703d516c42a0280b114debeec62ef307b8d6915a75bf654e1068156a0cb8ffe6ae6eb3f3597fc4890de4c4979dc0b8fc02d07bd60a8c606536041ff7302bed0a2feb653ba2689edb8db8f44047d65420fa2aa442bb8ae4cfea94e76600605e040ceff953416434195d5678a199a2bd8cf4691d8dfdec81578b2901830aee1dca32e27dcae8f7eb9dae3a79c51fe5c02f01a4e08d22508ec12b6b33f9aa31850fd343bc5fc78c1c9ae2570abe96e6dcbc11ac359a72c8db74304dd5a6e53eb334851f3185615ca8df10b489a0775607965d17584e73c06044df780bcec055b63fcb8045bb8d9d0c853a810fa5339bd5367fddc1cb16d03b0dcfee8b46b381ee480e5216ab48d36518e3e915a9624627d0495b1415a8f0e7c2c4c0bfaad60329de674b119aefda0680c98b74d716a82913d228b5958a5057c246b60901bda4c17342123cb02cfa5ca756cd3c5195aef6b1e84279605b3fc1afd42dd67238a062f4c0891afb2793e5cbbf6687c414258581139677a020c54b0d51959f1d5b11634c327a4c57b8384f43d235b0d5f9aafb5259b70f731c5f6b00325527fc4a535787249b0d44740b422fcf03ac09a6bab2a4b899f8d70ffb1910621e37a800dd54f04d1ee3a393795a3a350e7699e5e0c71494330040f415955fcb4ed57817beea62f10480fe56f62789f380d12b43e25819bf55c058236a34380296ad09c9d3874156118f3895ac7246a217be70451aebffe87a7e7ba1f2e013a214e457f178d841aa20a51c7cf92d65e2201913f214b6936f312b7bb3b165ab486ef242ad10e37fef1b8c39e61aef23d668a421acedf8eaa82268b89ce1d379c3c8e82acc091a66ef39aebc00844bd3fcc01c9da02ca81bcb52e390bb8ce1f534d4d1947c140b33efc789d11fe44f59f1152d3cdd130d661cae5157e3199d8648f12ce100e6b52a3dbff3b1dcbb3bf9b927966fd39f7452b1c8dec9ce59db2dc3b769ad6a04bebe94b2ec393b43147667dac0d14bbd6a485a6bace18f14d0e6643791808803abfaf712fde938dfb344994414f55ed7eeeb06d191a34fe5b853f5277a7b5dc8f22b5d7bb587e43f0416900c5543f0a68f98ee8bac01007020a39378bda4aef94e701f1900dfd84ad1f0c72bb45cadf90e3659036e18dddd3e0ddeeeefda69a9538113b5ecb918bf379f2d581425dd8346625db1e7a3092227be1261ae58a29a35073cbecdb18c02fab762d8714a71f3d963c2044f56ade8470f93bc6af2a1ca0b1067dcedd36ac20dab81a8ace73ca528de5ca45c132277a6960ffa17eae09e874f78585f7d5140c0f4548443c28ff7989d6cb71f4ff19d6a0f26909ace0f369435dbccc4055db4249a944a7b7ed2ef85d2550b520dff8750660b06f81be2ae099dc2a6c26519de58a31c150d8b2b835604b106851a48a3e0e69ac1415f49b55e1287141506af91148756a23020360f6daac55552c482fd506735c7b555204496ddb7d12e3f7b5bab56b10912a384760de3a31f59f4f56da99d3f9da4cb1b985bff3bda01c50f0467318db01932bcc1c212d6d30d0f234cf83936da62ddf865c59d74ede97c4f7c68cad6d0d2f3738e9a1d81ba396fa36c159ccb462f63c34a3583836820cc50da4e2a30add05d07575d7a419258a084d06d561a73eb5af81f2517fae8de432e119b7dfeb41bc4d7d9892f71e111fc5f25b983bc3caf10cbaa5d87d71b7420d33c7067cf432d3bfbb8515f88bf5d7f923faa586f65def892de237599dfdd72f14fe1417c3842d62fef15254b14fea67eb664a09448f60e71e0ad93c4a5b861d5849c990e303014febd0810db65dde45f8abfd73fc04f9b24f4ce015cb18f8d079774b742f59801128a8df04963b3bd544b420f8d438a9aa6307005f5a10891d3a8b242e1539202a3098462d1cd7e50aac8575c58082c76fbafed208d8b5bf24f286389468b1d538388feb32820efeaed701ffc43947580ecc1feba36819a11b9755dddc87fa3dd5cd1818f86f180fda98ee72c181f8739065ad870302e4b7060bb709bae2e98c9de3f8282c8e18be86556d0addfac0dbe5f0ce0c6ed3e929dfe59dc1b5c2d862004a40d208b267221081b4c04233a35ce0506c8b83c7592c8419fea2b011c4d1b9ebabc7f1af6f300ea98e5f03c93232374b63f8d7eab914fe73faab825d80a8605097e1a4be4f4aaff3f93c329a8fe404a93f2e4dd9f6b3a9883255322ba3e218aaac7230dafbf8f1557fd7fbd3b117baf1c2750970cc9cc9cadef5e249bcfb61dfc35220c7bbb5135b48f4c0423b2dcb8021c0b76e7d32de2be50aefe892862866959b275e050deef9f909851fce03e981a66b58557606a4598c6d1065537faf7faa5a2da90758f7f62129c7a6c4bbe75b8d1bc6988b6900211c075dc325244fbc96dae443d3e6ebd59f5a675110c902ea3dcf76fb25edb64ce21a67eb1a0804cf92a618127ad350a14f6a7628b90496b39289188acf2c2fb56457cb1f3973d2563810a4a94161699aff5059eec76463bc3d2b668f83a21118516e3a55858fbfcfee6b06f90a8f175a0c266f5d4e8d53063915535c004c7e66fa7630757e4faf89cf27ba33b1ffe7943dc94b801b2d1ffad206003eb22b1def69979b80011406ac442736495b24783014e83a61ba94096cb90f9c7c4dd90d6d24e9e7c3437b199c012f77154cc32b8a1968f6e4e244d57546bb664046e57766357d28de9fdf3c9250baf193814b5b688a8541591f0de2a68009a44e221493831a5f4ef0d6feec8f91aa28ae7d961585a6e187d08a84ef3e8e9fb3aa02f8d9620e23b32936490182c5705175e9c4c4c84ca643bf3328d424bb360e31b3867aa67f1be270568ed1becc8ae8309aa9c51e3835e9c392d9e97fdd4b138960477d2094aa43436b65585be469a98f4e1a078e232f590b216b708dcc4d4ef012da64b51bc1f947bf5ed793e831c7ba7e10de33373ca9d3d25e900c1552ef13503609e646eddb0061c518cbc2d3a57f6eb0c49c3e7d50ddc2385f7aa52c01ff5e59a862eba735cb1a1ae4a14e5dcddbb6edcd0699678477b7482448ca4f097dc8f65b6ddf5b849ad70aef81e787866239383af73e3150d9f65ad0ff175a2bbe205b162a5e6ccefe4470ddb5f8b0c16ff3457fec77ea917a2e927f0e40591895d15bc20a8086da2a56b2eb74d9b5edb8a7f1f2d27b8333813d2fcaa7ee2dc5c78c9e2e41355d1b972ee2988e8ee8df059aab7cabd036b2b72c4dea5eca932373a99acad12586090ee7d286704ac19ee7704c1d1c7b0c0b640c7e5f862b5b64cf7cf456e9988b1a6313363b0323e45fb9d3738bb41f91eaa24c56026a1cf0cc86e6add6429af25be357a4a4c81cba0c2084c9c10946a0cca274c58145e7295339118fd915fa78c2d65d72084de5bc151c7e75b3a4995af484586d111db691a9ce183554c77cd9dcf2b756c1e3607482bb6db08a89272adbafc7e6f5c187f7b6488d4727a49ed9c151fe0d0725265d9386e2a89b2b0298de89924ded86c5953d0f3900a2a4c66fade"}) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000cc600080000000200010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r17, @ANYBLOB="00000000000300000000000000000000f8fffffffc1d79077776bc04cb7841795382a8de2be86ba8f3f63aa8ead1a2cf337f8439b8627813e987c9becdf2a28922c50dcc560f1f51a7d5ca10b7b57b58080f760f2d6455a4af8b2ceb0207467bf54c6abd6d9d7000"/124, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 544.456µs ago: executing program 0 (id=2526): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001", @ANYRESHEX=r1], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x134, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "127e5e29fb06782006bc772d8407590bf8bbc9a03ea4c182dc424fc609c807ae9b5e524359b9dc730765e5e290410c96c92f4dbcb9c76fbd5d8e0bbff36c8a342f"}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "80b11dfc86e6b840382a9d624374689d8c5c931975d52abdc7676104767ce304bb7888eb8ed3f87e21a8ad2997134586a55fc238716b9b41555add396d9eb3d329bab975428caed80108"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "abd58c2bbf8a40393ec7dec1a65fe8aad6dc6993f1cf98f7dd5673631977a0cf44362a98e75e9a27370257825007a9c08df45a72ddfcb6e930fc65e8f319bddf8a0d3f228e10e0729ad6a2badfa3162e07c55cbfa76579ffa5fb8a707037d5eed669dbdc904bcd9f7573332716f8870c116390f1bbe28d4f96d66e0845eb19"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) 0s ago: executing program 4 (id=2527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = epoll_create1(0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x60, 0x0, 0x1, 0xfff, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x12) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="cc1a33cb28b6400057a44fc773817541dcd0c51a989bf6b30c928d26c4ee166c7020384ba7ffd05f575b7eabd3f37e323434fd76", 0x34}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) epoll_create1(0x80000) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x60, 0x0, 0x1, 0xfff, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x12) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="cc1a33cb28b6400057a44fc773817541dcd0c51a989bf6b30c928d26c4ee166c7020384ba7ffd05f575b7eabd3f37e323434fd76", 0x34}], 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) (async) kernel console output (not intermixed with test programs): netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171879][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.189020][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.199253][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.210190][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.235491][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.272913][ T5837] veth0_macvtap: entered promiscuous mode [ 76.281609][ T3873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291785][ T3873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303123][ T3873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.331229][ T3873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348088][ T5837] veth1_macvtap: entered promiscuous mode [ 76.367620][ T5834] veth0_vlan: entered promiscuous mode [ 76.414803][ T5844] veth0_vlan: entered promiscuous mode [ 76.444335][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.452002][ T5834] veth1_vlan: entered promiscuous mode [ 76.458216][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.490847][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.508556][ T5844] veth1_vlan: entered promiscuous mode [ 76.542089][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.564700][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.575493][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.583677][ T74] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609643][ T74] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639410][ T5844] veth0_macvtap: entered promiscuous mode [ 76.653546][ T3873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670280][ T3873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.689097][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.702796][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.714382][ T5844] veth1_macvtap: entered promiscuous mode [ 76.732024][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.773398][ T5834] veth0_macvtap: entered promiscuous mode [ 76.802976][ T5834] veth1_macvtap: entered promiscuous mode [ 76.828365][ T3873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.837109][ T3873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.866870][ T5848] Bluetooth: hci1: command tx timeout [ 76.866942][ T5839] Bluetooth: hci4: command tx timeout [ 76.872734][ T5847] Bluetooth: hci0: command tx timeout [ 76.928925][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.937137][ T5839] Bluetooth: hci3: command tx timeout [ 76.937169][ T5839] Bluetooth: hci2: command tx timeout [ 76.948926][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.965287][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.020955][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.107994][ T3873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.140968][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.167442][ T3873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.182959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.191572][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.199598][ T3873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.221234][ T3873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.266738][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.311495][ T3447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330087][ T3447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.384707][ T3447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418131][ T3447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649945][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.679758][ T5964] Zero length message leads to an empty skb [ 77.695571][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.753658][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.822225][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.875200][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.901518][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 77.907394][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.932812][ T5976] tc_dump_action: action bad kind [ 77.936761][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.170160][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.206364][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.420207][ T5990] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 78.752449][ T6008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.936323][ T5847] Bluetooth: hci0: command tx timeout [ 78.938296][ T5839] Bluetooth: hci1: command tx timeout [ 78.943982][ T5848] Bluetooth: hci4: command tx timeout [ 78.993375][ T6008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 79.016624][ T5847] Bluetooth: hci3: command tx timeout [ 79.022753][ T5848] Bluetooth: hci2: command tx timeout [ 80.251361][ T6080] netlink: 'syz.4.36': attribute type 9 has an invalid length. [ 80.344279][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 80.355184][ T6086] netlink: 'syz.4.36': attribute type 9 has an invalid length. [ 80.385099][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 80.531354][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.539272][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.549005][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.558938][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.795716][ T6100] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 80.892138][ T6105] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.948800][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 81.048354][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 81.333065][ T6128] tipc: Started in network mode [ 81.351981][ T6128] tipc: Node identity 7adf6eb1b3b4, cluster identity 4711 [ 81.383435][ T6128] tipc: Enabled bearer , priority 0 [ 81.421059][ T6133] syzkaller0: entered promiscuous mode [ 81.437812][ T6133] syzkaller0: entered allmulticast mode [ 81.466792][ T6136] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 81.467538][ T6128] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 81.572048][ T6128] tipc: Resetting bearer [ 81.588734][ T6128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.638691][ T6125] tipc: Resetting bearer [ 81.705600][ T6125] tipc: Disabling bearer [ 81.760401][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 81.963525][ T6154] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 82.140538][ T6170] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 82.453714][ T6181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.519737][ T6184] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.68'. [ 82.555836][ T6181] : entered promiscuous mode [ 82.835573][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 83.051063][ T6212] Bluetooth: MGMT ver 1.23 [ 83.071022][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 83.091232][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.108999][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.131502][ T6215] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.134734][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.182603][ T6218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.279089][ T6218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.306731][ T6234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.385062][ T6239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.85'. [ 83.454164][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.501409][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.518952][ T6243] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 83.530048][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.580988][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.612521][ T6218] wg1 speed is unknown, defaulting to 1000 [ 83.639159][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 83.718534][ T6255] netlink: 212 bytes leftover after parsing attributes in process `syz.2.91'. [ 84.058275][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 84.172065][ T6284] syz.1.100: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.191306][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 84.191330][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.191348][ T6284] Call Trace: [ 84.191360][ T6284] [ 84.191368][ T6284] dump_stack_lvl+0x189/0x250 [ 84.191403][ T6284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.191422][ T6284] ? __pfx__printk+0x10/0x10 [ 84.191445][ T6284] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.191471][ T6284] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.191497][ T6284] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 84.191524][ T6284] warn_alloc+0x214/0x310 [ 84.191545][ T6284] ? stack_depot_save_flags+0x40/0x850 [ 84.191570][ T6284] ? __pfx_warn_alloc+0x10/0x10 [ 84.191593][ T6284] ? kasan_save_track+0x3e/0x80 [ 84.191617][ T6284] ? __kasan_kmalloc+0x93/0xb0 [ 84.191639][ T6284] ? xsk_setsockopt+0x4dc/0x8d0 [ 84.191656][ T6284] ? do_sock_setsockopt+0x17c/0x1b0 [ 84.191677][ T6284] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 84.191697][ T6284] ? do_syscall_64+0xfa/0xf80 [ 84.191717][ T6284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.191744][ T6284] __vmalloc_node_range_noprof+0x125/0x12d0 [ 84.191794][ T6284] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.191820][ T6284] ? __kasan_kmalloc+0x93/0xb0 [ 84.191847][ T6284] vmalloc_user_noprof+0xad/0xf0 [ 84.191868][ T6284] ? xskq_create+0xbf/0x170 [ 84.191887][ T6284] xskq_create+0xbf/0x170 [ 84.191909][ T6284] xsk_init_queue+0xb0/0x110 [ 84.191931][ T6284] xsk_setsockopt+0x4dc/0x8d0 [ 84.191951][ T6284] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.191971][ T6284] ? __pfx_aa_sk_perm+0x10/0x10 [ 84.191997][ T6284] ? aa_sock_opt_perm+0xff/0x1a0 [ 84.192018][ T6284] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 84.192039][ T6284] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.192059][ T6284] do_sock_setsockopt+0x17c/0x1b0 [ 84.192087][ T6284] __x64_sys_setsockopt+0x13f/0x1b0 [ 84.192116][ T6284] do_syscall_64+0xfa/0xf80 [ 84.192139][ T6284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.192154][ T6284] ? clear_bhb_loop+0x60/0xb0 [ 84.192186][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.192202][ T6284] RIP: 0033:0x7f480378f749 [ 84.192226][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.192241][ T6284] RSP: 002b:00007f4804690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.192260][ T6284] RAX: ffffffffffffffda RBX: 00007f48039e5fa0 RCX: 00007f480378f749 [ 84.192272][ T6284] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 84.192282][ T6284] RBP: 00007f4803813f91 R08: 0000000000000004 R09: 0000000000000000 [ 84.192293][ T6284] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.192304][ T6284] R13: 00007f48039e6038 R14: 00007f48039e5fa0 R15: 00007ffef721fe88 [ 84.192332][ T6284] [ 84.192348][ T6284] Mem-Info: [ 84.498340][ T6284] active_anon:5665 inactive_anon:0 isolated_anon:0 [ 84.498340][ T6284] active_file:2504 inactive_file:39878 isolated_file:0 [ 84.498340][ T6284] unevictable:768 dirty:1472 writeback:0 [ 84.498340][ T6284] slab_reclaimable:10433 slab_unreclaimable:96220 [ 84.498340][ T6284] mapped:31139 shmem:1357 pagetables:1183 [ 84.498340][ T6284] sec_pagetables:0 bounce:0 [ 84.498340][ T6284] kernel_misc_reclaimable:0 [ 84.498340][ T6284] free:1323822 free_pcp:22897 free_cma:0 [ 84.544487][ T6284] Node 0 active_anon:22660kB inactive_anon:0kB active_file:10016kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124556kB dirty:5876kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12428kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.579164][ T6284] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.623818][ T6284] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.660802][ T6284] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 84.674365][ T6284] Node 0 DMA32 free:1383212kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22560kB inactive_anon:0kB active_file:10016kB inactive_file:159316kB unevictable:1536kB writepending:5876kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:74744kB local_pcp:28252kB free_cma:0kB [ 84.735497][ T6300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.102'. [ 84.744888][ T6284] lowmem_reserve[]: 0 0 0 0 0 [ 84.749898][ T6284] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.793969][ T6304] netlink: 116 bytes leftover after parsing attributes in process `syz.0.103'. [ 84.806284][ T6284] lowmem_reserve[]: 0 0 0 0 0 [ 84.807663][ T6304] netlink: 116 bytes leftover after parsing attributes in process `syz.0.103'. [ 84.823441][ T6284] Node 1 Normal free:3896716kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:7648kB free_cma:0kB [ 84.863604][ T6284] lowmem_reserve[]: 0 0 0 0 0 [ 84.872113][ T6284] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.885111][ T6284] Node 0 DMA32: 294*4kB (UME) 48*8kB (U) 10*16kB (UME) 7*32kB (UM) 4*64kB (UME) 3*128kB (UE) 4*256kB (UM) 3*512kB (UM) 3*1024kB (ME) 2*2048kB (M) 336*4096kB (M) = 1388568kB [ 84.932148][ T6284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 84.977154][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'. [ 84.986787][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 84.987251][ T6311] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 85.043779][ T6284] Node 1 Normal: 173*4kB (UME) 61*8kB (UME) 39*16kB (UME) 60*32kB (UME) 22*64kB (UME) 9*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896716kB [ 85.048266][ T6311] `: renamed from bond0 (while UP) [ 85.106383][ T6284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.116357][ T6284] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.131550][ T6284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.142121][ T6284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.153510][ T6284] 43734 total pagecache pages [ 85.158310][ T6284] 0 pages in swap cache [ 85.165670][ T6284] Free swap = 124996kB [ 85.202789][ T6284] Total swap = 124996kB [ 85.208804][ T6284] 2097051 pages RAM [ 85.212646][ T6284] 0 pages HighMem/MovableOnly [ 85.259225][ T6284] 424280 pages reserved [ 85.264572][ T6284] 0 pages cma reserved [ 85.531586][ T6335] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.667303][ T6337] wg1 speed is unknown, defaulting to 1000 [ 85.970891][ T6351] tipc: Started in network mode [ 85.981012][ T6351] tipc: Node identity 1220b750a4ee, cluster identity 4711 [ 86.000372][ T6351] tipc: Enabled bearer , priority 11 [ 86.847741][ T6398] netlink: 'syz.2.131': attribute type 29 has an invalid length. [ 86.917627][ T6401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.930856][ T9] cfg80211: failed to load regulatory.db [ 86.997631][ T5947] tipc: Node number set to 3067000656 [ 87.302501][ T6419] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 87.808622][ T6450] netlink: 'syz.0.143': attribute type 3 has an invalid length. [ 87.810634][ T30] audit: type=1107 audit(1764948717.433:2): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='~kADnyP%7(Gy_4خ&miƝ/z|R:ސUB|yd#' [ 87.822162][ T6450] netlink: 'syz.0.143': attribute type 3 has an invalid length. [ 87.993076][ T6456] bridge0: port 3(ipvlan6) entered blocking state [ 88.028713][ T6456] bridge0: port 3(ipvlan6) entered disabled state [ 88.050282][ T6456] ipvlan6: entered allmulticast mode [ 88.067246][ T6462] block nbd0: not configured, cannot reconfigure [ 88.071313][ T6456] bridge0: entered allmulticast mode [ 88.111694][ T6456] ipvlan6: left allmulticast mode [ 88.128222][ T6456] bridge0: left allmulticast mode [ 88.331018][ T6485] sctp: [Deprecated]: syz.1.153 (pid 6485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.331018][ T6485] Use struct sctp_sack_info instead [ 88.728975][ T6502] rdma_rxe: rxe_newlink: failed to add lo [ 88.964903][ T6529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.001563][ T6534] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 89.107675][ T6538] netlink: 'syz.0.167': attribute type 21 has an invalid length. [ 89.755851][ T6578] __nla_validate_parse: 19 callbacks suppressed [ 89.755869][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 89.784957][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.177'. [ 90.349511][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 90.365306][ T6609] Cannot find add_set index 0 as target [ 90.700730][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 90.763993][ T6630] netlink: 'syz.1.190': attribute type 30 has an invalid length. [ 90.782241][ T6629] netlink: 248 bytes leftover after parsing attributes in process `syz.3.193'. [ 90.798637][ T6626] netlink: 156 bytes leftover after parsing attributes in process `syz.4.192'. [ 90.929843][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 90.952761][ T6630] bond1: option arp_missed_max: invalid value (0) [ 91.013995][ T6630] bond1: option arp_missed_max: allowed values 1 - 255 [ 91.869634][ T6630] bond1 (unregistering): Released all slaves [ 92.071698][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 92.226724][ T6669] bridge_slave_0: invalid flags given to default FDB implementation [ 92.340295][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 92.353283][ T6675] netlink: 'syz.4.205': attribute type 3 has an invalid length. [ 92.594459][ T6693] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 92.618372][ T6698] netlink: 'syz.0.212': attribute type 8 has an invalid length. [ 92.629049][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.813609][ T6702] netlink: 'syz.4.214': attribute type 5 has an invalid length. [ 93.280127][ T6724] netlink: 'syz.4.220': attribute type 29 has an invalid length. [ 93.297791][ T6724] netlink: 'syz.4.220': attribute type 29 has an invalid length. [ 93.319573][ T6724] netlink: 500 bytes leftover after parsing attributes in process `syz.4.220'. [ 93.497068][ T6738] netlink: 'syz.1.224': attribute type 24 has an invalid length. [ 93.688368][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.698177][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.717667][ T134] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.756672][ T134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.073942][ T6776] tipc: Enabled bearer , priority 13 [ 94.180255][ T6786] tipc: Enabling of bearer rejected, already enabled [ 94.811405][ T6825] __nla_validate_parse: 8 callbacks suppressed [ 94.811422][ T6825] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.249'. [ 94.873138][ T6825] openvswitch: netlink: Message has 6 unknown bytes. [ 95.176883][ T6839] netlink: 5 bytes leftover after parsing attributes in process `syz.2.253'. [ 95.187503][ T5947] tipc: Node number set to 3379261105 [ 95.195278][ T6839] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 95.227469][ T6839] netlink: 64 bytes leftover after parsing attributes in process `syz.2.253'. [ 95.238511][ T6839] block nbd0: not configured, cannot reconfigure [ 95.384565][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 95.540327][ T6857] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 95.558216][ T6857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.568793][ T6853] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 95.596682][ T6853] netlink: 228 bytes leftover after parsing attributes in process `syz.3.259'. [ 95.922760][ T6876] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 95.967504][ T6873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.038121][ T6878] bond1: (slave geneve2): making interface the new active one [ 96.047761][ T6878] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.111769][ T6873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.147804][ T3013] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.165851][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.186860][ T6885] tipc: Started in network mode [ 96.191820][ T6885] tipc: Node identity ac14140f, cluster identity 4711 [ 96.200445][ T6885] tipc: New replicast peer: 255.255.255.255 [ 96.209017][ T6885] tipc: Enabled bearer , priority 10 [ 96.215594][ T3013] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.227985][ T3013] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.260412][ T6873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.459376][ T6873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.615699][ T3447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686542][ T156] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.750583][ T4561] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.802481][ T6926] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 96.829108][ T4561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.961883][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 96.995300][ T6933] bridge_slave_1: left allmulticast mode [ 97.010241][ T6933] bridge_slave_1: left promiscuous mode [ 97.018275][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.050441][ T6933] bridge_slave_0: left allmulticast mode [ 97.067442][ T6933] bridge_slave_0: left promiscuous mode [ 97.076824][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.119580][ T6948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.287'. [ 97.326459][ T5890] tipc: Node number set to 2886997007 [ 97.391233][ T6965] pimreg: entered allmulticast mode [ 97.475448][ T6961] pimreg: left allmulticast mode [ 97.504271][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 97.641914][ T6983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.671314][ T6986] netlink: 'syz.0.302': attribute type 32 has an invalid length. [ 97.680105][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 97.775550][ T6986] bond2: Setting coupled_control to off (0) [ 98.034503][ T7019] netlink: 'syz.1.309': attribute type 32 has an invalid length. [ 98.042915][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 98.096984][ T7019] bond2: Setting coupled_control to off (0) [ 98.371874][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.379808][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.501633][ T7034] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.112511][ T7082] dvmrp0: entered allmulticast mode [ 99.718576][ T7126] wg1 speed is unknown, defaulting to 1000 [ 99.780141][ T7137] erspan0: entered promiscuous mode [ 99.785718][ T7137] vlan2: entered promiscuous mode [ 99.841293][ T7134] dvmrp0: entered allmulticast mode [ 99.850461][ T7134] __nla_validate_parse: 7 callbacks suppressed [ 99.850480][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 99.966077][ T7142] gre0: entered promiscuous mode [ 99.982108][ T7142] gre0: entered allmulticast mode [ 100.125759][ T7159] syzkaller0: entered promiscuous mode [ 100.165040][ T7159] syzkaller0: entered allmulticast mode [ 100.180691][ T7158] tipc: Started in network mode [ 100.186085][ T7158] tipc: Node identity 5e2181f9688d, cluster identity 4711 [ 100.193811][ T7158] tipc: Enabled bearer , priority 0 [ 100.291160][ T7158] tipc: Resetting bearer [ 100.321376][ T7158] tipc: Disabling bearer [ 100.359242][ T7162] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 100.373140][ T7162] bond3 (unregistering): Released all slaves [ 101.773015][ T7175] tipc: Enabled bearer , priority 0 [ 101.786610][ T7178] syzkaller0: entered promiscuous mode [ 101.794894][ T7178] syzkaller0: entered allmulticast mode [ 101.804419][ T7193] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.854628][ T7197] tipc: Resetting bearer [ 101.882133][ T7174] tipc: Resetting bearer [ 101.925932][ T7174] tipc: Disabling bearer [ 101.982766][ T7225] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 101.988441][ T7223] syzkaller0: entered promiscuous mode [ 101.996064][ T7223] syzkaller0: entered allmulticast mode [ 102.014851][ T7185] wg1 speed is unknown, defaulting to 1000 [ 102.042461][ T7218] syzkaller0: entered promiscuous mode [ 102.048443][ T7218] syzkaller0: entered allmulticast mode [ 102.096043][ T7227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.105852][ T7227] bond1: (slave bond2): making interface the new active one [ 102.115463][ T7227] bond1: (slave bond2): Enslaving as an active interface with an up link [ 102.159874][ T7225] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.173314][ T7225] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 102.209635][ T7232] tipc: Started in network mode [ 102.214829][ T7232] tipc: Node identity 56fb7bc528c, cluster identity 4711 [ 102.225251][ T7232] tipc: Enabled bearer , priority 0 [ 102.296052][ T7221] tipc: Resetting bearer [ 102.347862][ T7221] tipc: Disabling bearer [ 102.434838][ T7237] netlink: 'syz.4.369': attribute type 10 has an invalid length. [ 102.463380][ T7237] veth0_virt_wifi: entered allmulticast mode [ 102.507310][ T7237] team0: Port device veth0_virt_wifi added [ 102.523276][ T7251] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 103.708318][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 103.717592][ T7260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.375'. [ 103.737401][ T7260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.375'. [ 103.849229][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 103.904174][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 103.911657][ T7271] netlink: 'syz.0.379': attribute type 9 has an invalid length. [ 103.928584][ T7269] syzkaller0: entered promiscuous mode [ 103.936594][ T7269] syzkaller0: entered allmulticast mode [ 103.944722][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 104.029457][ T7269] tipc: Enabled bearer , priority 0 [ 104.050807][ T7268] tipc: Resetting bearer [ 104.105663][ T7268] tipc: Disabling bearer [ 104.300230][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 104.324510][ T7289] Illegal XDP return value 16128 on prog (id 59) dev syz_tun, expect packet loss! [ 104.360686][ T7288] netlink: 'syz.3.384': attribute type 11 has an invalid length. [ 104.369139][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 104.423336][ T3013] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.445449][ T3013] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.470192][ T3013] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.518675][ T3013] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.575040][ T7305] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 104.598320][ T7305] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.389'. [ 104.641839][ T7309] team0: No ports can be present during mode change [ 105.071977][ T7311] team0 (unregistering): Port device team_slave_0 removed [ 105.112867][ T7311] team0 (unregistering): Port device team_slave_1 removed [ 105.388530][ T7354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.471102][ T7358] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 105.564391][ T7365] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 105.757664][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 105.840138][ T7385] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 105.873089][ T7385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 106.027269][ T7398] vlan1: entered allmulticast mode [ 106.059972][ T7402] siw: device registration error -23 [ 106.078832][ T7398] veth0_vlan: entered allmulticast mode [ 106.229480][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 106.369071][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 106.428995][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.425'. [ 106.506717][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 106.729850][ T7448] tipc: Enabled bearer , priority 0 [ 106.737876][ T7448] syzkaller0: entered promiscuous mode [ 106.743368][ T7448] syzkaller0: entered allmulticast mode [ 106.763936][ T7448] tipc: Resetting bearer [ 106.823567][ T7447] tipc: Resetting bearer [ 106.882453][ T7447] tipc: Disabling bearer [ 107.009127][ T7457] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 107.105264][ T7464] bond3: Unable to set up delay as MII monitoring is disabled [ 107.124489][ T7464] bond3 (unregistering): Released all slaves [ 107.493364][ T7490] tipc: Enabled bearer , priority 0 [ 107.530440][ T7490] syzkaller0: entered promiscuous mode [ 107.536228][ T7490] syzkaller0: entered allmulticast mode [ 107.549919][ T7490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.595339][ T7490] tipc: Resetting bearer [ 107.617754][ T7490] tipc: Resetting bearer [ 107.674357][ T7490] tipc: Disabling bearer [ 107.704263][ T7504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'. [ 107.714319][ T7504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'. [ 107.841322][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 107.852053][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.450'. [ 107.866874][ T7511] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 107.889549][ T7512] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 108.065623][ T7521] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 108.093729][ T7521] bond1 (unregistering): Released all slaves [ 108.448253][ T7544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.462'. [ 108.505684][ T7544] block nbd0: not configured, cannot reconfigure [ 108.511704][ T7546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.755147][ T7559] x_tables: duplicate entry at hook 3 [ 108.851259][ T7566] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 108.870055][ T7566] block nbd0: not configured, cannot reconfigure [ 108.879368][ T7566] netlink: 'syz.4.469': attribute type 3 has an invalid length. [ 109.293685][ T7591] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.330971][ T7591] bond3: (slave lo): Enslaving as a backup interface with an up link [ 109.349886][ T7591] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 109.617704][ T7617] bond3 (unregistering): Released all slaves [ 110.059544][ T7650] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 110.090011][ T7652] netlink: 'syz.0.493': attribute type 5 has an invalid length. [ 110.204959][ T7663] netlink: 'syz.4.497': attribute type 8 has an invalid length. [ 110.468630][ T7683] veth1_macvtap: left promiscuous mode [ 110.677168][ T7690] tipc: Enabled bearer , priority 0 [ 110.684943][ T7690] syzkaller0: entered promiscuous mode [ 110.690668][ T7690] syzkaller0: entered allmulticast mode [ 110.826943][ T7690] tipc: Resetting bearer [ 110.913493][ T7711] xt_limit: Overflow, try lower: 271964/0 [ 111.011486][ T7689] tipc: Resetting bearer [ 111.063058][ T7689] tipc: Disabling bearer [ 111.223416][ T7725] __nla_validate_parse: 10 callbacks suppressed [ 111.223435][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 111.240112][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 111.265175][ T1323] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.267874][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 111.293243][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 111.295655][ T1323] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.311855][ T7731] netlink: 'syz.4.516': attribute type 64 has an invalid length. [ 111.325550][ T1323] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.342707][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 111.356861][ T1323] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.586307][ T7744] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 111.602309][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 111.771487][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 112.493762][ T7809] syzkaller0: entered promiscuous mode [ 112.506996][ T7809] syzkaller0: entered allmulticast mode [ 112.547993][ T7809] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 112.558779][ T7808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.535'. [ 113.109874][ T7852] netlink: 'syz.0.544': attribute type 26 has an invalid length. [ 113.142520][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 113.215464][ T7859] netlink: 100 bytes leftover after parsing attributes in process `syz.1.548'. [ 113.415567][ T7868] netlink: 'syz.1.551': attribute type 83 has an invalid length. [ 113.818976][ T7889] x_tables: duplicate underflow at hook 1 [ 113.840700][ T7894] geneve2: entered promiscuous mode [ 113.846851][ T7894] geneve2: entered allmulticast mode [ 113.854395][ T7897] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 113.868525][ T3511] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.888963][ T3511] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.955584][ T3511] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.977534][ T3511] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.016793][ T7899] Bluetooth: MGMT ver 1.23 [ 114.037808][ T7903] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 114.103953][ T7903] team1: entered promiscuous mode [ 114.109437][ T7903] team1: entered allmulticast mode [ 114.255631][ T7916] bond0: entered promiscuous mode [ 114.358767][ T7916] bond_slave_0: entered promiscuous mode [ 114.365446][ T7916] bond_slave_1: entered promiscuous mode [ 114.891668][ T7960] trusted_key: syz.0.578 sent an empty control message without MSG_MORE. [ 115.015815][ T7966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 115.263723][ T7985] xt_cgroup: xt_cgroup: no path or classid specified [ 115.471565][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.502730][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.514200][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.523553][ T7999] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 115.573693][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.604033][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.619293][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.633943][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.675180][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.681211][ T8012] vxcan1: tx address claim with dest, not broadcast [ 115.699181][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.710051][ T8002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.746344][ T8015] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 116.075950][ T8047] bridge_slave_0: left allmulticast mode [ 116.089064][ T8047] bridge_slave_0: left promiscuous mode [ 116.095007][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.137822][ T8047] bridge_slave_1: left allmulticast mode [ 116.149102][ T8047] bridge_slave_1: left promiscuous mode [ 116.155011][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.175879][ T8047] `: (slave bond_slave_0): Releasing backup interface [ 116.193935][ T8047] `: (slave bond_slave_1): Releasing backup interface [ 116.211711][ T8047] team0: Port device team_slave_0 removed [ 116.223692][ T8047] team0: Port device team_slave_1 removed [ 116.247566][ T8047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.265054][ T8050] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 116.480809][ T8075] __nla_validate_parse: 14 callbacks suppressed [ 116.480829][ T8075] netlink: 348 bytes leftover after parsing attributes in process `syz.4.611'. [ 116.539396][ T8077] netlink: 'syz.1.612': attribute type 2 has an invalid length. [ 116.547706][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 116.562533][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 116.727170][ T8090] pim6reg527: entered allmulticast mode [ 116.741832][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 116.771820][ T8096] ip6t_rpfilter: unknown options [ 116.803151][ T8096] block nbd4: not configured, cannot reconfigure [ 116.833003][ T8099] netlink: 23 bytes leftover after parsing attributes in process `syz.3.621'. [ 116.842665][ T8101] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 116.861479][ T8101] batman_adv: batadv0: Adding interface: netdevsim0 [ 116.869560][ T8101] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.899098][ T8101] batman_adv: batadv0: Interface activated: netdevsim0 [ 116.950363][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 117.024766][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 117.038563][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 117.064592][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'. [ 117.092166][ T8117] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.626'. [ 117.195950][ T8117] bond3: option xmit_hash_policy: invalid value (64) [ 117.236072][ T8117] bond3 (unregistering): Released all slaves [ 117.953359][ T8176] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 118.029084][ T8176] bond2: entered promiscuous mode [ 118.035004][ T8176] bond2: entered allmulticast mode [ 118.040803][ T8176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.097818][ T8183] veth1_macvtap: left promiscuous mode [ 118.244777][ T8185] netlink: 'syz.2.641': attribute type 5 has an invalid length. [ 118.392676][ T8186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.409911][ T8186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 118.438115][ T8185] geneve3: entered promiscuous mode [ 118.451123][ T8185] geneve3: entered allmulticast mode [ 118.458466][ T8209] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 118.517818][ T60] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 4352 - 0 [ 118.529265][ T60] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 4352 - 0 [ 118.544129][ T8206] bond3 (unregistering): Released all slaves [ 118.584633][ T60] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 4352 - 0 [ 118.700731][ T8186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.713906][ T8186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 118.728888][ T8186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 4352 - 0 [ 118.741098][ T8217] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 118.750210][ T8217] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 118.841598][ T8186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.858218][ T8186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 118.892744][ T8186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 4352 - 0 [ 119.010795][ T8186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.049084][ T8238] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 119.062249][ T8186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 119.104117][ T8186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 4352 - 0 [ 119.359475][ T8251] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 119.453505][ T156] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 4352 - 0 [ 119.485596][ T156] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 119.513053][ T156] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 119.533301][ T8253] delete_channel: no stack [ 119.550600][ T156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 4352 - 0 [ 119.571381][ T8264] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 119.584339][ T156] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 119.600051][ T156] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 119.645870][ T156] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 4352 - 0 [ 119.667658][ T156] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 119.691595][ T156] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 119.709316][ T8263] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 119.721080][ T8263] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 119.730075][ T8263] gretap1: entered promiscuous mode [ 119.735284][ T8263] gretap1: entered allmulticast mode [ 119.755148][ T3447] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 4352 - 0 [ 119.776013][ T3447] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 119.799575][ T3447] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 120.075387][ T8285] netlink: 'syz.4.671': attribute type 15 has an invalid length. [ 120.201665][ T8299] : entered promiscuous mode [ 120.250167][ T8301] syzkaller0: entered promiscuous mode [ 120.266625][ T8303] delete_channel: no stack [ 120.275694][ T8301] syzkaller0: entered allmulticast mode [ 120.409685][ T8311] syzkaller1: entered promiscuous mode [ 120.415464][ T8311] syzkaller1: entered allmulticast mode [ 120.426537][ T8313] syzkaller0: entered promiscuous mode [ 120.432228][ T8313] syzkaller0: entered allmulticast mode [ 120.884420][ T8330] Cannot find add_set index 65532 as target [ 120.959913][ T8334] validate_nla: 4 callbacks suppressed [ 120.959932][ T8334] netlink: 'syz.4.687': attribute type 10 has an invalid length. [ 121.256860][ T8351] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 121.269543][ T8351] bond4 (unregistering): Released all slaves [ 121.508433][ T8370] __nla_validate_parse: 88 callbacks suppressed [ 121.508450][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.698'. [ 121.528576][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.698'. [ 121.817424][ T60] wlan0: Trigger new scan to find an IBSS to join [ 122.074426][ T8354] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 122.202369][ T8402] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 122.322274][ T8415] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.713'. [ 122.409855][ T8422] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.488500][ T8426] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 122.530179][ T8428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.550601][ T8428] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.567266][ T8428] gretap1: entered promiscuous mode [ 122.572676][ T8428] gretap1: entered allmulticast mode [ 122.584806][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 122.678943][ T8437] veth0: entered promiscuous mode [ 122.688192][ T8435] veth0: left promiscuous mode [ 122.780476][ T8446] netlink: 'syz.3.724': attribute type 3 has an invalid length. [ 122.788325][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 122.873689][ T8444] netlink: 'syz.0.725': attribute type 13 has an invalid length. [ 122.906722][ T8444] netlink: 'syz.0.725': attribute type 58 has an invalid length. [ 122.924836][ T8444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.725'. [ 122.960620][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 122.968390][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 123.257201][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 123.528687][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 124.061069][ T8520] SET target dimension over the limit! [ 124.640647][ T8546] netlink: 'syz.3.757': attribute type 29 has an invalid length. [ 124.654590][ T8547] netlink: 'syz.3.757': attribute type 29 has an invalid length. [ 124.718170][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'. [ 124.779449][ T4561] wlan0: Trigger new scan to find an IBSS to join [ 125.000265][ T8567] syz.2.763 (8567) used obsolete PPPIOCDETACH ioctl [ 125.048980][ T8567] vlan1: entered allmulticast mode [ 125.073069][ T8567] veth0_vlan: entered allmulticast mode [ 125.576271][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 125.694688][ T8603] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 125.955503][ T8616] x_tables: duplicate underflow at hook 2 [ 126.000944][ T8622] geneve2: entered promiscuous mode [ 126.063923][ T8619] netlink: 'syz.4.779': attribute type 29 has an invalid length. [ 126.073668][ T8616] netlink: 'syz.4.779': attribute type 29 has an invalid length. [ 126.384667][ T8646] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 126.867559][ T8676] __nla_validate_parse: 10 callbacks suppressed [ 126.867577][ T8676] netlink: 256 bytes leftover after parsing attributes in process `syz.0.794'. [ 126.888864][ T8676] netlink: 'syz.0.794': attribute type 58 has an invalid length. [ 126.897541][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 127.010689][ T8683] TCP: TCP_TX_DELAY enabled [ 127.279237][ T8698] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 127.292553][ T8698] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 127.318999][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 127.361882][ T8698] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 127.367794][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 127.370653][ T8698] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 127.499002][ T8711] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.808'. [ 127.818246][ T134] wlan0: Trigger new scan to find an IBSS to join [ 127.874305][ T8728] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 128.126680][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 128.261166][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'. [ 128.363677][ T8752] v: renamed from veth0_vlan (while UP) [ 128.502582][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 128.511981][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 128.521849][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 128.637865][ T8770] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.724677][ T134] wlan0: Creating new IBSS network, BSSID a2:bc:af:ab:7e:cb [ 128.828852][ T8780] syzkaller0: entered promiscuous mode [ 128.840979][ T8780] syzkaller0: entered allmulticast mode [ 128.911598][ T8784] netlink: 'syz.2.835': attribute type 12 has an invalid length. [ 128.946918][ T8784] 8021q: VLANs not supported on ip6gre0 [ 129.024961][ T8798] veth0_to_bridge: entered promiscuous mode [ 129.050624][ T8797] veth0_to_bridge: left promiscuous mode [ 129.387786][ T8827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 129.397813][ T8827] syzkaller0: entered promiscuous mode [ 129.408140][ T8827] syzkaller0: entered allmulticast mode [ 129.553462][ T8835] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 129.866918][ T8856] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 129.884653][ T8858] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 130.006537][ T8868] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 130.094567][ T8864] bond3: (slave ip6gretap1): making interface the new active one [ 130.103239][ T8864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.111659][ T8864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.123461][ T8864] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.203620][ T8881] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 130.422945][ T8903] veth0_macvtap: left promiscuous mode [ 130.430906][ T8903] macvtap0: entered allmulticast mode [ 130.461660][ T8903] macvtap0: refused to change device tx_queue_len [ 131.227939][ T8924] validate_nla: 5 callbacks suppressed [ 131.227956][ T8924] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 131.377658][ T8937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.412986][ T8937] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.564045][ T8942] ipvlan3: entered promiscuous mode [ 131.598955][ T8948] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 131.633150][ T8956] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 131.772479][ T8959] x_tables: duplicate underflow at hook 3 [ 132.004602][ T8975] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 132.014725][ T8975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.381094][ T9004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.388673][ T9004] IPv6: NLM_F_CREATE should be set when creating new route [ 132.396025][ T9004] IPv6: NLM_F_CREATE should be set when creating new route [ 132.779875][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912955][ T9047] __nla_validate_parse: 15 callbacks suppressed [ 132.912974][ T9047] netlink: 332 bytes leftover after parsing attributes in process `syz.2.918'. [ 133.011837][ T9058] netlink: 80 bytes leftover after parsing attributes in process `syz.1.920'. [ 133.027229][ T9043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.036488][ T9058] netlink: 80 bytes leftover after parsing attributes in process `syz.1.920'. [ 133.147503][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 133.773901][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.933'. [ 134.229006][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 134.473912][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.499254][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 134.500991][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.522606][ T9150] tipc: Resetting bearer [ 134.664445][ T9150] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 134.815359][ T134] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.847063][ T134] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.859363][ T134] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.872023][ T134] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.890314][ T134] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.908870][ T134] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.933096][ T134] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.954342][ T134] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.972842][ T134] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.989724][ T134] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.999065][ T134] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.009974][ T134] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.068898][ T9182] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 135.114075][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'. [ 135.129652][ T9186] netlink: 5 bytes leftover after parsing attributes in process `syz.4.955'. [ 135.140804][ T9186] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 136.240552][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 136.379645][ T9268] syzkaller0: entered promiscuous mode [ 136.385165][ T9268] syzkaller0: entered allmulticast mode [ 136.513880][ T9279] xt_policy: too many policy elements [ 137.151520][ T9314] ipt_ECN: cannot use operation on non-tcp rule [ 137.230679][ T9320] nbd: socks must be embedded in a SOCK_ITEM attr [ 137.241216][ T9320] netlink: 'syz.1.1000': attribute type 3 has an invalid length. [ 137.323281][ T9317] netlink: 'syz.3.999': attribute type 29 has an invalid length. [ 137.332492][ T9317] block nbd0: Unsupported socket: should be TCP or UNIX. [ 137.344154][ T9327] netlink: 'syz.1.1002': attribute type 8 has an invalid length. [ 138.032519][ T9367] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 138.047458][ T9369] sit0: entered promiscuous mode [ 138.073242][ T9369] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 138.084840][ T9369] __nla_validate_parse: 8 callbacks suppressed [ 138.084858][ T9369] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1015'. [ 138.105028][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 138.205189][ T9367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.315469][ T9376] bond5: entered allmulticast mode [ 138.371021][ T9380] bond0: option miimon: invalid value (18446744073709551585) [ 138.380055][ T9380] bond0: option miimon: allowed values 0 - 2147483647 [ 138.388353][ T9380] bond0 (unregistering): Released all slaves [ 138.641886][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'. [ 138.904732][ T9434] tap0: tun_chr_ioctl cmd 1074025676 [ 138.913934][ T9434] tap0: owner set to 0 [ 139.111965][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 139.135277][ T9461] netlink: 'syz.4.1037': attribute type 21 has an invalid length. [ 139.143938][ T9461] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.279698][ T9457] hsr_slave_1 (unregistering): left promiscuous mode [ 139.300199][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 139.327544][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 139.574832][ T9485] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 139.603586][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'. [ 139.613451][ T9487] block nbd0: not configured, cannot reconfigure [ 139.671855][ T9489] bond0: entered promiscuous mode [ 139.677909][ T9492] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.689319][ T9492] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 139.796571][ T9499] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 139.804508][ T9499] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1049'. [ 139.875383][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 140.653904][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 141.208195][ T9508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.222089][ T9508] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.500254][ T9545] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.527435][ T9545] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.990915][ T9581] openvswitch: netlink: Flow key attr not present in new flow. [ 142.127359][ T9592] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.157525][ T9592] bond4: (slave lo): Enslaving as a backup interface with an up link [ 142.174555][ T9592] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 142.343779][ T9605] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 142.385130][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.420005][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.455777][ T9618] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.583736][ T9621] netlink: 'syz.3.1077': attribute type 33 has an invalid length. [ 142.960716][ T9651] 8021q: VLANs not supported on ipvlan1 [ 142.994781][ T9651] sit1: entered promiscuous mode [ 143.026171][ T9651] sit1: entered allmulticast mode [ 143.117553][ T9666] netlink: 'syz.0.1089': attribute type 13 has an invalid length. [ 143.356377][ T9679] __nla_validate_parse: 9 callbacks suppressed [ 143.356396][ T9679] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1093'. [ 143.566761][ T9688] netlink: 'syz.4.1097': attribute type 39 has an invalid length. [ 143.798840][ T9694] syzkaller1: entered promiscuous mode [ 143.826550][ T9694] syzkaller1: entered allmulticast mode [ 143.888267][ T9712] syzkaller1: entered promiscuous mode [ 143.928285][ T9712] syzkaller1: entered allmulticast mode [ 144.210440][ T9729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.293830][ T9734] ip6gre1: entered allmulticast mode [ 144.313588][ T9725] netlink: 'syz.4.1103': attribute type 2 has an invalid length. [ 144.366904][ T9738] openvswitch: netlink: Message has 592 unknown bytes. [ 144.384477][ T9738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.424544][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 144.485296][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 144.504951][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 144.534400][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 144.577164][ T9752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1108'. [ 144.768953][ T9769] netlink: 'syz.2.1115': attribute type 24 has an invalid length. [ 144.873295][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 144.888401][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 144.935967][ T9780] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.986589][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 145.212785][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 145.650102][ T9816] Cannot find add_set index 1 as target [ 145.719277][ T9824] netlink: 'syz.3.1132': attribute type 21 has an invalid length. [ 145.765955][ T9827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.052754][ T9842] sctp: [Deprecated]: syz.4.1138 (pid 9842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.052754][ T9842] Use struct sctp_sack_info instead [ 146.180454][ T9855] netlink: 'syz.0.1143': attribute type 7 has an invalid length. [ 146.590806][ T9888] netlink: 'syz.1.1151': attribute type 4 has an invalid length. [ 146.649145][ T9887] netlink: 'syz.3.1150': attribute type 13 has an invalid length. [ 146.657161][ T9887] netlink: 'syz.3.1150': attribute type 58 has an invalid length. [ 146.760557][ T9904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.883474][ T9987] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 148.017897][ T9989] vlan1: left allmulticast mode [ 148.022809][ T9989] veth0_vlan: left allmulticast mode [ 148.129718][T10001] netlink: 'syz.3.1185': attribute type 2 has an invalid length. [ 148.394358][T10025] x_tables: unsorted entry at hook 1 [ 148.467933][T10026] wg1 speed is unknown, defaulting to 1000 [ 148.709670][T10045] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000 [ 148.764169][T10017] xt_socket: unknown flags 0xe4 [ 148.803262][T10053] syzkaller1: entered promiscuous mode [ 148.809711][T10053] syzkaller1: entered allmulticast mode [ 148.828515][T10053] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.915254][T10059] syzkaller0: entered promiscuous mode [ 148.937066][T10059] syzkaller0: entered allmulticast mode [ 148.961766][T10048] __nla_validate_parse: 20 callbacks suppressed [ 148.961785][T10048] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1197'. [ 148.967413][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'. [ 149.108258][T10064] lo: entered promiscuous mode [ 149.114933][T10064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.125234][T10070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1204'. [ 149.471847][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 149.495633][T10092] netlink: 'syz.4.1210': attribute type 10 has an invalid length. [ 149.551010][T10092] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 149.798422][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 149.953738][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 149.975959][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1220'. [ 150.118510][T10139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1224'. [ 150.280200][T10161] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 150.318697][T10161] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1228'. [ 150.351405][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 150.643995][T10180] tap0: tun_chr_ioctl cmd 2148553947 [ 150.915726][T10199] netlink: 'syz.0.1243': attribute type 64 has an invalid length. [ 150.923899][T10197] netlink: 'syz.1.1244': attribute type 8 has an invalid length. [ 150.933439][T10201] veth0: entered promiscuous mode [ 150.953658][T10200] veth0: left promiscuous mode [ 150.981409][T10204] IPv6: Can't replace route, no match found [ 151.248231][T10224] x_tables: duplicate entry at hook 2 [ 151.268840][T10219] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 151.286906][T10219] bond5 (unregistering): Released all slaves [ 151.645796][T10250] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 151.671870][T10250] bond5 (unregistering): Released all slaves [ 151.923433][T10277] netlink: 'syz.4.1265': attribute type 2 has an invalid length. [ 152.105392][T10268] vlan1 (unregistering): left allmulticast mode [ 152.115014][T10268] v (unregistering): left allmulticast mode [ 152.520557][T10303] bond1: entered promiscuous mode [ 152.534449][T10303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.573169][T10321] IPVS: Unknown mcast interface: syzkaller1 [ 152.711391][T10330] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 152.725803][T10330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.749911][T10330] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.627581][T10405] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 153.794388][T10409] tipc: Enabling of bearer rejected, failed to enable media [ 154.250981][T10445] wg1 speed is unknown, defaulting to 1000 [ 154.343992][T10452] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 154.606599][T10462] wlan0: mtu greater than device maximum [ 154.980321][T10490] __nla_validate_parse: 12 callbacks suppressed [ 154.980340][T10490] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1322'. [ 155.036619][T10495] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1322'. [ 155.196977][T10507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.309980][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1329'. [ 155.410973][T10527] Unsupported ieee802154 address type: 0 [ 155.474771][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 155.494223][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 155.526197][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 155.535300][T10534] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1334'. [ 155.546036][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 155.557718][T10534] veth0: entered promiscuous mode [ 155.565829][T10533] veth0: left promiscuous mode [ 155.750243][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 155.750253][T10546] wg1 speed is unknown, defaulting to 1000 [ 156.058390][T10573] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1343'. [ 156.862878][T10602] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 157.088274][T10616] Unknown options in mask b7f2 [ 157.379969][T10635] 8021q: VLANs not supported on ipvlan1 [ 157.640158][T10646] nft_compat: unsupported protocol 0 [ 158.790383][ T1323] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.878060][T10719] bond3: option resend_igmp: invalid value (32767) [ 158.905781][T10719] bond3: option resend_igmp: allowed values 0 - 255 [ 158.950711][T10719] bond3 (unregistering): Released all slaves [ 159.394519][T10755] xt_hashlimit: overflow, try lower: 3/0 [ 159.481053][T10769] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 159.601406][T10774] netlink: 'syz.3.1399': attribute type 27 has an invalid length. [ 160.009287][T10796] veth0: entered promiscuous mode [ 160.026194][T10796] veth0: left promiscuous mode [ 160.176913][T10805] __nla_validate_parse: 9 callbacks suppressed [ 160.176929][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 160.591393][T10824] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 160.625595][T10824] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1413'. [ 160.799296][T10830] macvlan0: entered promiscuous mode [ 160.822229][T10836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.321705][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.357715][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.383231][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.476041][T10863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 161.539029][T10871] ip6gre1: entered allmulticast mode [ 161.571571][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.583276][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.604110][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.628698][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.665646][T10863] wlan0 speed is unknown, defaulting to 1000 [ 161.765531][ T5947] IPVS: starting estimator thread 0... [ 161.835774][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 161.859697][T10879] IPVS: using max 35 ests per chain, 84000 per kthread [ 162.143162][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 162.166064][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 162.263774][T10905] dvmrp0: entered allmulticast mode [ 162.859316][T10945] veth0: entered promiscuous mode [ 162.883870][T10944] veth0: left promiscuous mode [ 162.953426][T10928] batman_adv: batadv0: Removing interface: netdevsim0 [ 163.065010][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 163.194932][T10960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1455'. [ 163.233304][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 181.745243][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1458'. [ 181.765859][T10980] netlink: 'syz.4.1461': attribute type 4 has an invalid length. [ 181.778802][T10975] syzkaller0: entered promiscuous mode [ 181.784390][T10975] syzkaller0: entered allmulticast mode [ 182.064912][T10999] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 182.140554][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 182.520924][T11036] netlink: 'syz.2.1478': attribute type 3 has an invalid length. [ 182.673413][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 182.860731][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'. [ 183.035837][T11073] tipc: Enabled bearer , priority 0 [ 183.060051][T11073] syzkaller0: entered promiscuous mode [ 183.065853][T11073] syzkaller0: entered allmulticast mode [ 183.111075][T11084] netlink: 'syz.3.1493': attribute type 3 has an invalid length. [ 183.124547][T11084] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1493'. [ 183.160635][T11073] tipc: Resetting bearer [ 183.232529][T11092] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 183.247860][T11094] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 183.725301][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1500'. [ 183.818144][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 183.857693][T11072] tipc: Resetting bearer [ 183.930920][T11072] tipc: Disabling bearer [ 184.088584][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 184.141895][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 184.167964][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 184.185255][T11152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.268153][T11152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.331606][T11161] netlink: 'syz.3.1513': attribute type 21 has an invalid length. [ 184.364008][T11161] block nbd0: Unsupported socket: should be TCP or UNIX. [ 184.475904][T11174] syzkaller0: entered promiscuous mode [ 184.496202][T11174] syzkaller0: entered allmulticast mode [ 184.503884][T11178] netlink: 'syz.4.1521': attribute type 2 has an invalid length. [ 184.625116][T11186] netlink: 'syz.3.1523': attribute type 3 has an invalid length. [ 184.811160][T11200] ip6gretap0: entered allmulticast mode [ 184.826348][T11198] ip6gretap0: left allmulticast mode [ 184.843855][T11203] xt_hashlimit: invalid interval [ 184.869473][T11207] tipc: Enabling of bearer rejected, media not registered [ 185.058344][T11218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.136500][T11218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.220900][T11218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.290732][T11218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.336945][T11238] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 185.456688][ T3447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.512243][ T3447] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.556574][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.564856][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.660866][ T3447] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.707962][ T3447] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.456359][ T5848] Bluetooth: hci1: command tx timeout [ 186.793091][T11336] __nla_validate_parse: 16 callbacks suppressed [ 186.793118][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 186.811996][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 187.105920][T11353] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 187.601331][T11387] validate_nla: 3 callbacks suppressed [ 187.601350][T11387] netlink: 'syz.0.1584': attribute type 4 has an invalid length. [ 187.620417][T11387] netlink: 'syz.0.1584': attribute type 4 has an invalid length. [ 187.640203][T11388] vlan1: entered allmulticast mode [ 187.648373][T11388] veth0_vlan: entered allmulticast mode [ 187.685193][T11390] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1585'. [ 187.698126][T11390] netlink: 'syz.0.1585': attribute type 21 has an invalid length. [ 187.926506][T11402] vlan2: entered allmulticast mode [ 188.476948][T11428] syzkaller1: entered promiscuous mode [ 188.483213][T11428] syzkaller1: entered allmulticast mode [ 188.627070][T11436] pimreg3: entered allmulticast mode [ 188.710450][T11440] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1599'. [ 188.723125][T11442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 188.886989][T11454] bridge0: entered promiscuous mode [ 188.899707][T11454] bridge0: entered allmulticast mode [ 188.945500][T11454] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 189.180362][T11471] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1608'. [ 189.688727][T11486] "syz.2.1613" (11486) uses obsolete ecb(arc4) skcipher [ 189.865436][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 189.887369][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 189.910290][T11521] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.925114][ T3013] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 189.956880][T11523] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 189.974403][T11525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1622'. [ 190.324497][T11495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 190.389756][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 190.435859][T11554] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 190.453829][T11554] bond4 (unregistering): Released all slaves [ 190.480067][T11560] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 190.536284][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 190.619598][T11570] bond7: (slave gretap2): making interface the new active one [ 190.633248][T11570] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 190.673614][T11560] bond7 (unregistering): (slave gretap2): Releasing active interface [ 190.696802][T11560] bond7 (unregistering): Released all slaves [ 191.090112][T11608] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 191.094878][T11610] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 191.174340][T11608] bond4: entered promiscuous mode [ 191.193581][T11618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.200911][T11618] IPv6: NLM_F_CREATE should be set when creating new route [ 191.201714][T11608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.208212][T11618] IPv6: NLM_F_CREATE should be set when creating new route [ 191.208293][T11618] IPv6: NLM_F_CREATE should be set when creating new route [ 191.231961][T11618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.279260][T11618] tipc: Trying to set illegal importance in message [ 191.504596][T11648] xt_TCPMSS: Only works on TCP SYN packets [ 191.994822][T11684] sctp: [Deprecated]: syz.1.1667 (pid 11684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.994822][T11684] Use struct sctp_sack_info instead [ 192.063067][T11689] bridge6: entered promiscuous mode [ 192.070881][T11689] bridge6: entered allmulticast mode [ 192.080770][T11692] __nla_validate_parse: 5 callbacks suppressed [ 192.092739][T11692] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1669'. [ 192.109088][T11689] team0: Port device bridge6 added [ 192.161739][T11689] bridge0: port 3(team0) entered blocking state [ 192.175913][T11689] bridge0: port 3(team0) entered disabled state [ 192.187075][T11689] team0: entered allmulticast mode [ 192.197690][T11689] team_slave_0: entered allmulticast mode [ 192.204484][T11689] team_slave_1: entered allmulticast mode [ 192.213708][T11689] team0: entered promiscuous mode [ 192.219705][T11689] team_slave_0: entered promiscuous mode [ 192.225921][T11689] team_slave_1: entered promiscuous mode [ 192.236736][T11689] bridge0: port 3(team0) entered blocking state [ 192.243544][T11689] bridge0: port 3(team0) entered forwarding state [ 192.672631][T11721] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 192.906576][T11734] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 192.914997][T11734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1677'. [ 192.920548][T11732] vlan0: entered promiscuous mode [ 192.963229][T11732] vlan0: entered allmulticast mode [ 192.984845][T11740] veth1_to_bond: entered allmulticast mode [ 192.997939][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 193.059818][T11740] bond0: (slave bond_slave_1): Releasing backup interface [ 193.104783][T11740] veth1_to_bond (unregistering): left allmulticast mode [ 193.231703][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 193.240855][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 193.455746][T11762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.537227][T11771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.553656][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 193.816486][ T4561] wlan1: Trigger new scan to find an IBSS to join [ 193.845150][T11793] netlink: 'syz.4.1695': attribute type 8 has an invalid length. [ 193.870004][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1695'. [ 194.049973][T11811] tipc: Enabling of bearer rejected, failed to enable media [ 194.211278][T11817] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1702'. [ 194.237381][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.661761][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 194.779713][T11852] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1713'. [ 195.012027][T11872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.082713][T11883] netlink: 'syz.3.1722': attribute type 21 has an invalid length. [ 196.181998][T11921] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 196.195434][T11924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.209266][T11927] Bluetooth: MGMT ver 1.23 [ 196.231528][T11924] syzkaller0: entered promiscuous mode [ 196.242943][T11924] syzkaller0: entered allmulticast mode [ 196.279438][T11932] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 196.298777][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 196.304858][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.310932][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.424531][T11939] bond5: (slave gretap1): making interface the new active one [ 196.436978][T11939] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 196.470476][T11932] bond5 (unregistering): (slave gretap1): Releasing active interface [ 196.505864][T11932] bond5 (unregistering): Released all slaves [ 196.527166][T11948] netlink: 'syz.3.1741': attribute type 17 has an invalid length. [ 196.553054][T11948] bridge0: left promiscuous mode [ 196.558545][T11948] bridge0: left allmulticast mode [ 196.585522][T11948] 8021q: adding VLAN 0 to HW filter on device ` [ 196.627070][T11948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.779556][ T3447] wlan1: Trigger new scan to find an IBSS to join [ 196.811952][T11961] vxcan2: entered allmulticast mode [ 197.009859][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.104101][T11985] bond5: entered allmulticast mode [ 197.138819][T11986] ip6gretap1: entered allmulticast mode [ 197.159914][T11986] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.180340][T11985] netlink: 'syz.3.1753': attribute type 11 has an invalid length. [ 197.189529][T11985] netlink: 'syz.3.1753': attribute type 11 has an invalid length. [ 197.197473][T11985] __nla_validate_parse: 9 callbacks suppressed [ 197.197490][T11985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1753'. [ 197.404405][T12013] netlink: 'syz.2.1761': attribute type 32 has an invalid length. [ 197.413124][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 197.427629][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 197.461260][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 197.466454][T12013] bond5: Setting coupled_control to off (0) [ 197.478172][T12015] netlink: 'syz.1.1763': attribute type 4 has an invalid length. [ 197.493505][T12014] GUP no longer grows the stack in syz.4.1762 (12014): 200000003000-20000000a000 (200000001000) [ 197.520426][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 197.529662][T12014] CPU: 0 UID: 0 PID: 12014 Comm: syz.4.1762 Not tainted syzkaller #0 PREEMPT(full) [ 197.529687][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.529698][T12014] Call Trace: [ 197.529705][T12014] [ 197.529713][T12014] dump_stack_lvl+0x189/0x250 [ 197.529742][T12014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.529767][T12014] ? __pfx__printk+0x10/0x10 [ 197.529788][T12014] ? find_vma+0xe7/0x160 [ 197.529817][T12014] __get_user_pages+0x2470/0x2a00 [ 197.529844][T12014] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 197.529892][T12014] ? rcu_is_watching+0x15/0xb0 [ 197.529916][T12014] __gup_longterm_locked+0xde4/0x1660 [ 197.529938][T12014] ? try_grab_folio_fast+0x1bf/0x6a0 [ 197.529964][T12014] ? gup_fast_fallback+0x1b86/0x22d0 [ 197.529986][T12014] gup_fast_fallback+0x1d65/0x22d0 [ 197.530036][T12014] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.530051][T12014] ? __mutex_lock+0x335/0x1350 [ 197.530082][T12014] ? is_valid_gup_args+0x11f/0x200 [ 197.530103][T12014] ? get_user_pages_fast+0x4d/0xb0 [ 197.530126][T12014] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 197.530156][T12014] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 197.530173][T12014] ? wait_for_space+0x248/0x2d0 [ 197.530190][T12014] iov_iter_get_pages2+0x5e/0xa0 [ 197.530216][T12014] __se_sys_vmsplice+0x548/0x10d0 [ 197.530251][T12014] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 197.530271][T12014] ? __pfx_futex_wake+0x10/0x10 [ 197.530355][T12014] ? do_syscall_64+0xbe/0xf80 [ 197.530381][T12014] do_syscall_64+0xfa/0xf80 [ 197.530403][T12014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.530420][T12014] ? clear_bhb_loop+0x60/0xb0 [ 197.530442][T12014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.530458][T12014] RIP: 0033:0x7fee4478f749 [ 197.530483][T12014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.530498][T12014] RSP: 002b:00007fee456b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 197.530528][T12014] RAX: ffffffffffffffda RBX: 00007fee449e5fa0 RCX: 00007fee4478f749 [ 197.530541][T12014] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 197.530552][T12014] RBP: 00007fee44813f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.530563][T12014] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 197.530573][T12014] R13: 00007fee449e6038 R14: 00007fee449e5fa0 R15: 00007fff79dca198 [ 197.530606][T12014] [ 197.549118][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 197.792121][ T6344] wlan1: Creating new IBSS network, BSSID 9e:28:b5:37:8c:48 [ 197.845420][T12031] netlink: 'syz.1.1766': attribute type 39 has an invalid length. [ 197.866453][T12028] netlink: 'syz.1.1766': attribute type 39 has an invalid length. [ 197.927075][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 197.967092][T12043] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 198.012923][T12051] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1768'. [ 198.033214][T12050] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 198.042944][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 198.113388][T12054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.144151][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 198.157477][T12058] netlink: 'syz.0.1772': attribute type 5 has an invalid length. [ 198.180996][T12062] openvswitch: netlink: Message has 8 unknown bytes. [ 198.185877][T12058] geneve3: entered promiscuous mode [ 198.194925][T12058] geneve3: entered allmulticast mode [ 198.202483][ T134] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 37667 - 0 [ 198.203093][T12062] IPv6: Can't replace route, no match found [ 198.220312][ T134] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 37667 - 0 [ 198.260158][ T134] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 37667 - 0 [ 198.277918][T12054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.289417][T12054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37667 - 0 [ 198.370341][T12054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.380406][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 198.386257][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 198.393631][T12054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37667 - 0 [ 198.457548][T12054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.486266][T12054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37667 - 0 [ 198.653705][ T3447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 37667 - 0 [ 198.685447][ T3447] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.724939][ T3447] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 37667 - 0 [ 198.737938][ T3447] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.810800][ T3013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 37667 - 0 [ 198.830686][ T3013] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.874261][ T3013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 37667 - 0 [ 198.892845][ T3013] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.008602][T12098] bond4: Removing last ns target with arp_interval on [ 199.061196][T12103] openvswitch: netlink: Flow actions attr not present in new flow. [ 199.118648][T12107] sctp: [Deprecated]: syz.0.1791 (pid 12107) Use of int in maxseg socket option. [ 199.118648][T12107] Use struct sctp_assoc_value instead [ 199.301321][T12119] netlink: 'syz.0.1794': attribute type 8 has an invalid length. [ 199.321475][T12124] macsec0: entered allmulticast mode [ 199.330570][T12124] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 199.631285][T12145] netlink: 'syz.2.1798': attribute type 24 has an invalid length. [ 199.797494][T12156] netlink: 'syz.4.1803': attribute type 33 has an invalid length. [ 200.590221][T12201] sctp: [Deprecated]: syz.0.1815 (pid 12201) Use of int in maxseg socket option. [ 200.590221][T12201] Use struct sctp_assoc_value instead [ 202.460796][T12240] netlink: 'syz.3.1824': attribute type 3 has an invalid length. [ 202.828994][T12261] netlink: 'syz.1.1831': attribute type 24 has an invalid length. [ 202.864468][T12261] __nla_validate_parse: 14 callbacks suppressed [ 202.864485][T12261] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1831'. [ 202.883936][T12261] netlink: 'syz.1.1831': attribute type 2 has an invalid length. [ 202.891956][T12261] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1831'. [ 202.922732][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 203.311949][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 203.445527][T12282] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 203.528232][T12288] syzkaller0: entered promiscuous mode [ 203.530593][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 203.533904][T12288] syzkaller0: entered allmulticast mode [ 203.887781][T12312] xt_l2tp: v2 tid > 0xffff: 1114244 [ 203.939220][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 203.948865][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1846'. [ 203.977279][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 203.996549][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1846'. [ 203.997601][T12321] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1847'. [ 204.174121][T12337] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 204.251344][T12344] netlink: 'syz.4.1853': attribute type 10 has an invalid length. [ 204.266848][T12344] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 204.274179][T12338] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 204.286991][T12338] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 204.289656][T12344] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 204.459114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.837943][T12386] netlink: 'syz.3.1865': attribute type 11 has an invalid length. [ 204.856643][T12386] netlink: 'syz.3.1865': attribute type 4 has an invalid length. [ 205.201728][T12405] tipc: Enabled bearer , priority 2 [ 205.491482][T12422] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.522118][T12427] netlink: 'syz.2.1874': attribute type 5 has an invalid length. [ 205.720193][T12430] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 205.732335][T12439] nbd: illegal input index -8454144 [ 205.741316][T12430] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 205.767904][T12439] nbd: illegal input index -8454144 [ 205.925938][T12457] block nbd0: Unsupported socket: should be TCP or UNIX. [ 206.156747][ T5940] IPVS: starting estimator thread 0... [ 206.162780][T12472] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 206.171611][T12473] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 206.206333][ T9] tipc: Node number set to 917275129 [ 206.256189][T12474] IPVS: using max 30 ests per chain, 72000 per kthread [ 206.405127][T12494] tipc: Enabled bearer , priority 0 [ 206.413441][T12494] syzkaller0: entered promiscuous mode [ 206.422475][T12494] syzkaller0: entered allmulticast mode [ 206.433185][T12497] tipc: Resetting bearer [ 206.457011][T12496] bridge7: entered promiscuous mode [ 206.462882][T12496] bridge7: entered allmulticast mode [ 206.611846][T12511] xt_l2tp: v2 sid > 0xffff: 1114112 [ 206.923794][ T5940] wlan0 speed is unknown, defaulting to 1000 [ 206.931990][ T5940] syz0: Port: 1 Link DOWN [ 207.093452][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.114525][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.230771][T12492] tipc: Resetting bearer [ 207.248350][T12492] tipc: Disabling bearer [ 207.528688][T12569] netlink: 'syz.2.1921': attribute type 22 has an invalid length. [ 207.547764][ T6344] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.547964][T12569] netlink: 'syz.2.1921': attribute type 22 has an invalid length. [ 207.567227][ T6344] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.586418][ T6344] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.625471][ T6344] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.945485][T12577] __nla_validate_parse: 38 callbacks suppressed [ 207.945504][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 207.974020][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 207.996136][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 208.072322][T12598] tipc: Enabled bearer , priority 0 [ 208.087926][T12598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1927'. [ 208.148663][T12602] syzkaller0: entered promiscuous mode [ 208.154185][T12602] syzkaller0: entered allmulticast mode [ 208.224466][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 208.244363][T12602] tipc: Resetting bearer [ 208.299331][T12602] tipc: Disabling bearer [ 208.338690][T12605] syzkaller1: entered promiscuous mode [ 208.344916][T12605] syzkaller1: entered allmulticast mode [ 208.583548][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 208.613075][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1934'. [ 208.801062][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 208.905865][T12650] SET target dimension over the limit! [ 208.973800][T12652] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1939'. [ 208.973846][T12655] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1939'. [ 209.118848][T12661] validate_nla: 3 callbacks suppressed [ 209.118867][T12661] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 209.185950][T12660] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 209.310590][T12677] sctp: [Deprecated]: syz.3.1945 (pid 12677) Use of int in max_burst socket option deprecated. [ 209.310590][T12677] Use struct sctp_assoc_value instead [ 209.360172][T12677] sctp: [Deprecated]: syz.3.1945 (pid 12677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.360172][T12677] Use struct sctp_sack_info instead [ 209.496571][T12692] nft_compat: unsupported protocol 0 [ 209.520243][T12696] x_tables: duplicate underflow at hook 4 [ 209.588089][T12698] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 209.604036][T12698] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 209.632712][T12705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.838226][T12720] nbd: must specify a size in bytes for the device [ 209.852997][T12718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.129254][T12733] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 210.156918][T12733] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 210.375606][T12764] netlink: 'syz.0.1973': attribute type 7 has an invalid length. [ 210.477115][T12773] openvswitch: netlink: Message has -2 unknown bytes. [ 210.602012][T12784] syzkaller0: entered promiscuous mode [ 210.607905][T12784] syzkaller0: entered allmulticast mode [ 210.722087][T12795] netlink: 'syz.0.1985': attribute type 21 has an invalid length. [ 210.736268][T12793] netlink: 'syz.1.1984': attribute type 3 has an invalid length. [ 210.925523][T12803] syzkaller1: entered promiscuous mode [ 210.931296][T12803] syzkaller1: entered allmulticast mode [ 210.954682][T12806] netlink: 'syz.2.1986': attribute type 12 has an invalid length. [ 211.116329][T12810] bridge0: port 1(batadv0) entered blocking state [ 211.130881][T12810] bridge0: port 1(batadv0) entered disabled state [ 211.142598][T12810] batadv0: entered allmulticast mode [ 211.148256][T12814] xt_bpf: check failed: parse error [ 211.148333][T12815] xt_bpf: check failed: parse error [ 211.167383][T12810] batadv0: entered promiscuous mode [ 211.619314][ T134] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 211.630080][ T134] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 211.929257][T12862] syzkaller1: entered promiscuous mode [ 211.959127][T12862] syzkaller1: entered allmulticast mode [ 212.150274][T12886] xt_connbytes: Forcing CT accounting to be enabled [ 212.498013][T12908] gre0: entered promiscuous mode [ 213.024215][T12939] erspan0: entered promiscuous mode [ 213.036783][T12939] __nla_validate_parse: 17 callbacks suppressed [ 213.036802][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 213.259675][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.276913][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.292739][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.328802][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.356591][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.381757][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.406054][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.432495][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.447447][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 213.772691][T12998] netlink: 'syz.2.2036': attribute type 5 has an invalid length. [ 214.105260][T13013] tipc: Resetting bearer [ 214.109400][T13027] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.215346][T13013] tipc: Disabling bearer [ 214.882441][T13081] netlink: 'syz.2.2053': attribute type 4 has an invalid length. [ 215.008921][T13087] Bluetooth: MGMT ver 1.23 [ 215.154265][T13091] netlink: 'syz.0.2057': attribute type 5 has an invalid length. [ 215.444301][T13112] veth0: entered promiscuous mode [ 215.470174][T13115] netlink: 'syz.3.2067': attribute type 3 has an invalid length. [ 215.489614][T13112] veth0: left promiscuous mode [ 215.567947][T13123] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 215.594964][T13123] netlink: 'syz.0.2068': attribute type 2 has an invalid length. [ 215.869063][T13145] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 215.891590][T13144] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 215.978342][T13147] veth0_virt_wifi: renamed from veth1_vlan [ 215.992494][T13143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.121745][T13166] netlink: 'syz.2.2082': attribute type 21 has an invalid length. [ 216.151188][T13166] netlink: 'syz.2.2082': attribute type 5 has an invalid length. [ 216.372816][T13187] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 216.394133][T13187] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 216.406459][T13187] gretap3: entered promiscuous mode [ 216.411714][T13187] gretap3: entered allmulticast mode [ 216.546292][T13195] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 216.791430][T13215] xt_hashlimit: max too large, truncated to 1048576 [ 218.735491][T13239] gre0: left promiscuous mode [ 218.741878][T13239] erspan0: left promiscuous mode [ 218.764206][T13239] geneve2: left promiscuous mode [ 218.779686][T13239] geneve3: left promiscuous mode [ 218.801984][T13239] bond4: left promiscuous mode [ 218.883663][T13256] __nla_validate_parse: 68 callbacks suppressed [ 218.883684][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 218.923041][T13259] netlink: 'syz.4.2102': attribute type 29 has an invalid length. [ 218.944843][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 219.046242][T13273] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 219.135336][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 219.415755][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 219.965840][T13321] syzkaller0: entered promiscuous mode [ 219.972101][T13321] syzkaller0: entered allmulticast mode [ 220.047786][T13331] wg1 speed is unknown, defaulting to 1000 [ 220.085635][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2122'. [ 220.271333][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 221.555253][T13340] pim6reg1: entered promiscuous mode [ 221.561447][T13340] pim6reg1: entered allmulticast mode [ 221.721092][T13374] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 222.058648][T13384] 8021q: VLANs not supported on gre0 [ 222.205952][T13397] bond4: option mode: unable to set because the bond device has slaves [ 222.249315][T13399] x_tables: duplicate entry at hook 2 [ 222.374230][T13405] validate_nla: 1 callbacks suppressed [ 222.374247][T13405] netlink: 'syz.1.2140': attribute type 2 has an invalid length. [ 222.431063][T13413] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 222.464848][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 222.487208][T13414] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 222.517738][T13413] bond0: (slave netdevsim0): Releasing backup interface [ 222.540154][T13413] batman_adv: batadv0: Adding interface: netdevsim0 [ 222.547141][T13413] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.578316][T13413] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 222.711308][T13436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2148'. [ 222.988245][T13449] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2154'. [ 223.054285][T13459] x_tables: duplicate underflow at hook 1 [ 223.185563][T13468] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 223.214000][T13468] team0: Failed to send options change via netlink (err -105) [ 223.222488][T13468] team0: Port device dummy0 added [ 223.229412][T13468] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 223.240795][T13468] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 223.258280][T13468] team0: Failed to send options change via netlink (err -105) [ 223.266403][T13468] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 223.275478][T13468] team0: Port device dummy0 removed [ 223.288138][T13468] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.312741][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.396242][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 223.584786][T13492] gre0: left allmulticast mode [ 223.682056][T13503] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 223.740592][T13505] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 223.781209][T13492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.800258][T13492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.923088][T13492] geneve2: left allmulticast mode [ 223.934125][T13492] geneve3: left allmulticast mode [ 223.942892][T13492] ip6gre1: left allmulticast mode [ 223.962783][T13505] netlink: 'syz.4.2170': attribute type 29 has an invalid length. [ 224.001551][ T134] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.044003][ T134] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 4352 - 0 [ 224.062695][ T134] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 224.075806][ T134] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 224.085455][T13506] netlink: 'syz.4.2170': attribute type 29 has an invalid length. [ 224.135581][ T6366] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.166892][ T6366] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 4352 - 0 [ 224.175392][ T6366] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 224.199592][ T6366] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 224.239937][ T6366] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.283860][ T6366] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 4352 - 0 [ 224.315975][ T6366] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 224.343742][ T6366] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 224.381086][ T6366] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.409585][ T6366] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 4352 - 0 [ 224.418860][ T6366] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 224.437931][ T6366] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 224.519115][T13541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.650482][T13551] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 224.747229][T13560] __nla_validate_parse: 2 callbacks suppressed [ 224.747246][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 224.838598][T13564] Cannot find add_set index 0 as target [ 225.156758][T13583] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2193'. [ 225.186883][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 225.189818][T13583] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2193'. [ 225.225445][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 225.455653][T13616] xt_policy: output policy not valid in PREROUTING and INPUT [ 225.537224][T13616] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 225.561651][T13621] IPv6: sit2: Disabled Multicast RS [ 225.585040][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 225.926908][T13645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2214'. [ 226.279816][T13662] netlink: 'syz.3.2219': attribute type 11 has an invalid length. [ 226.293059][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 226.329850][T13665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.350450][T13665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.856775][ T134] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.886784][T13704] veth1_to_bond: entered allmulticast mode [ 226.922151][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 226.932706][T13709] x_tables: duplicate underflow at hook 1 [ 226.985566][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2232'. [ 227.057442][T13717] sctp: [Deprecated]: syz.1.2234 (pid 13717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.057442][T13717] Use struct sctp_sack_info instead [ 227.119018][T13698] bond0: (slave bond_slave_1): Releasing backup interface [ 227.154874][T13698] veth1_to_bond (unregistering): left allmulticast mode [ 227.300125][T13722] syzkaller0: entered promiscuous mode [ 227.305801][T13722] syzkaller0: entered allmulticast mode [ 227.713828][T13745] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 227.740430][T13753] netlink: 'syz.1.2247': attribute type 11 has an invalid length. [ 227.887342][T13761] raw_sendmsg: syz.4.2251 forgot to set AF_INET. Fix it! [ 227.966560][T13759] tipc: Enabled bearer , priority 0 [ 228.001037][T13759] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.027854][T13759] tipc: Resetting bearer [ 228.071823][T13758] tipc: Disabling bearer [ 228.433401][T13801] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 228.753703][T13836] openvswitch: netlink: Actions may not be safe on all matching packets [ 228.963617][T13829] team0 (unregistering): Port device team_slave_0 removed [ 228.980893][T13829] team0 (unregistering): Port device team_slave_1 removed [ 229.000796][T13829] team0 (unregistering): Port device veth0_virt_wifi removed [ 229.133918][T13851] netlink: 'syz.1.2276': attribute type 9 has an invalid length. [ 229.143070][T13851] netlink: 'syz.1.2276': attribute type 11 has an invalid length. [ 229.156874][T13851] netlink: 'syz.1.2276': attribute type 12 has an invalid length. [ 229.183489][T13852] netlink: 'syz.1.2276': attribute type 16 has an invalid length. [ 229.192702][T13852] netlink: 'syz.1.2276': attribute type 3 has an invalid length. [ 229.595552][T13886] lo: entered promiscuous mode [ 229.645860][T13886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.827794][T13910] netlink: 'syz.1.2291': attribute type 3 has an invalid length. [ 229.845994][T13910] __nla_validate_parse: 44 callbacks suppressed [ 229.846013][T13910] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2291'. [ 229.893751][T13912] SET target dimension over the limit! [ 230.190280][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 230.245409][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 230.756391][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 230.770831][T13960] bridge_slave_0: entered promiscuous mode [ 230.795739][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 230.809498][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 230.836943][T13973] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2303'. [ 230.848419][T13973] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2303'. [ 231.027932][T13988] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2308'. [ 231.070032][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 231.161440][T13991] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 231.740559][T14005] netlink: 'syz.2.2313': attribute type 5 has an invalid length. [ 231.770210][T14010] syzkaller1: entered promiscuous mode [ 231.796398][T14010] syzkaller1: entered allmulticast mode [ 232.122311][T14033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.297586][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 232.333771][T14049] tipc: Enabled bearer , priority 0 [ 232.344163][T14049] syzkaller0: entered promiscuous mode [ 232.349782][T14049] syzkaller0: entered allmulticast mode [ 232.405781][T14052] wg1 speed is unknown, defaulting to 1000 [ 232.439268][T14049] tipc: Resetting bearer [ 232.539942][T14057] tipc: Resetting bearer [ 232.597342][T14057] tipc: Disabling bearer [ 232.623455][T14074] netlink: 'syz.2.2333': attribute type 1 has an invalid length. [ 232.639098][T14074] xt_cgroup: invalid path, errno=-2 [ 233.435375][T14129] netlink: 'syz.0.2350': attribute type 23 has an invalid length. [ 233.462880][T14132] netlink: 'syz.0.2350': attribute type 23 has an invalid length. [ 234.324884][T14177] netlink: 'syz.3.2365': attribute type 11 has an invalid length. [ 234.335784][T14177] netlink: 'syz.3.2365': attribute type 11 has an invalid length. [ 234.383953][T14181] sctp: [Deprecated]: syz.2.2367 (pid 14181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.383953][T14181] Use struct sctp_sack_info instead [ 234.405808][T14183] openvswitch: netlink: IP tunnel dst address not specified [ 234.455875][T14190] lok: renamed from lo [ 234.524989][T14197] netlink: 'syz.2.2373': attribute type 2 has an invalid length. [ 234.849557][T14221] __nla_validate_parse: 11 callbacks suppressed [ 234.849574][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 234.978402][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.998365][T14224] netlink: 'syz.0.2382': attribute type 83 has an invalid length. [ 235.158024][T14243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.317498][T14254] netlink: 'syz.4.2391': attribute type 83 has an invalid length. [ 235.370403][T14259] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2392'. [ 235.403795][T14256] macvtap1: entered allmulticast mode [ 235.418716][T14256] veth0_macvtap: entered allmulticast mode [ 235.451748][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2396'. [ 235.534906][T14270] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2397'. [ 235.557445][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 235.589812][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 235.600033][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 235.617641][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 235.634292][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 236.007611][T14292] delete_channel: no stack [ 236.032457][T14299] netlink: 'syz.1.2407': attribute type 3 has an invalid length. [ 236.192444][T14308] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 236.337303][T14317] dvmrp0: entered allmulticast mode [ 236.343344][T14317] dvmrp0: left allmulticast mode [ 236.599781][T14342] tipc: Enabled bearer , priority 10 [ 236.686204][T14347] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 236.750888][T14355] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 236.759091][T14352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.979352][T14367] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 237.261670][T14393] netlink: 'syz.1.2441': attribute type 8 has an invalid length. [ 237.382973][T14395] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 237.394701][T14395] bond5 (unregistering): Released all slaves [ 237.445116][ T9169] IPVS: starting estimator thread 0... [ 237.546388][T14409] IPVS: using max 28 ests per chain, 67200 per kthread [ 237.726224][ T9] tipc: Node number set to 2117827525 [ 237.795968][T14427] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 237.820356][T14427] bond6 (unregistering): Released all slaves [ 237.883998][T14436] tipc: Enabling of bearer rejected, failed to enable media [ 237.903666][T14442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.604015][T14500] sctp: [Deprecated]: syz.1.2471 (pid 14500) Use of int in maxseg socket option. [ 238.604015][T14500] Use struct sctp_assoc_value instead [ 238.619347][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 238.626913][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 238.662979][T14499] sctp: [Deprecated]: syz.1.2471 (pid 14499) Use of int in maxseg socket option. [ 238.662979][T14499] Use struct sctp_assoc_value instead [ 238.697955][T14509] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 239.007383][T14525] pim6reg527: entered allmulticast mode [ 239.147104][T14538] netlink: 'syz.3.2482': attribute type 10 has an invalid length. [ 239.155302][T14537] netlink: 'syz.3.2482': attribute type 10 has an invalid length. [ 239.163994][T14538] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 239.190255][T14538] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 239.399144][T14497] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 239.509237][T14552] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 239.537570][T14552] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 239.590268][T14558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.693029][T14565] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 239.729395][T14567] vlan2: entered allmulticast mode [ 239.754826][T14567] gretap0: entered allmulticast mode [ 240.200996][T14593] pim6reg1: entered promiscuous mode [ 240.220783][T14593] pim6reg1: entered allmulticast mode [ 240.243358][T14599] netlink: 'syz.0.2502': attribute type 4 has an invalid length. [ 240.395638][T14609] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 240.770475][T14642] __nla_validate_parse: 27 callbacks suppressed [ 240.770495][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 240.801994][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 240.819984][T14649] netlink: 'syz.1.2513': attribute type 1 has an invalid length. [ 240.839462][T14651] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 240.845477][T14649] netlink: 'syz.1.2513': attribute type 4 has an invalid length. [ 240.867776][T14649] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2513'. [ 240.873940][T14645] wg1 speed is unknown, defaulting to 1000 [ 241.014938][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2517'. [ 241.152995][T14667] wg1 speed is unknown, defaulting to 1000 [ 241.264617][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 241.273815][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 241.483914][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 241.578315][T14686] netlink: 'syz.1.2525': attribute type 4 has an invalid length. Connection to 10.128.0.161 closed by remote host. [ 241.950627][ T5837] bond9: (slave syz_tun): Releasing backup interface [ 242.459960][T14686] ------------[ cut here ]------------ [ 242.465651][T14686] refcount_t: underflow; use-after-free. [ 242.471412][T14686] WARNING: lib/refcount.c:28 at 0x0, CPU#1: syz.1.2525/14686 [ 242.478923][T14686] Modules linked in: [ 242.483220][T14686] CPU: 1 UID: 0 PID: 14686 Comm: syz.1.2525 Not tainted syzkaller #0 PREEMPT(full) [ 242.493046][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.503339][T14686] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 242.510731][T14686] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 242.530614][T14686] RSP: 0018:ffffc9001bbbf578 EFLAGS: 00010293 [ 242.537020][T14686] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: ffff88807e76bd00 [ 242.545195][T14686] RDX: 0000000000000000 RSI: ffffffff8e67b660 RDI: ffffffff8f8a9e10 [ 242.553433][T14686] RBP: 0000000000000000 R08: ffff88807e76bd00 R09: 0000000000000005 [ 242.561498][T14686] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807c7c2000 [ 242.569562][T14686] R13: ffff88807d59e860 R14: ffff88807d59e878 R15: dffffc0000000000 [ 242.577596][T14686] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 242.586760][T14686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.593358][T14686] CR2: 00007ffe814dff74 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 242.601390][T14686] Call Trace: [ 242.604693][T14686] [ 242.607811][T14686] klist_dec_and_del+0x3c7/0x3d0 [ 242.612781][T14686] klist_remove+0x1bd/0x340 [ 242.617529][T14686] ? __pfx_klist_children_put+0x10/0x10 [ 242.623099][T14686] ? __pfx_klist_remove+0x10/0x10 [ 242.628245][T14686] ? kobject_move+0x5a6/0x6e0 [ 242.632954][T14686] ? __pfx_kobject_move+0x10/0x10 [ 242.638055][T14686] ? do_raw_spin_unlock+0x122/0x240 [ 242.643257][T14686] ? get_device_parent+0x366/0x3a0 [ 242.648418][T14686] device_move+0x193/0x700 [ 242.652834][T14686] hci_conn_del_sysfs+0xb8/0x170 [ 242.657946][T14686] hci_conn_del+0xc36/0x11b0 [ 242.662536][T14686] hci_conn_hash_flush+0x191/0x230 [ 242.667722][T14686] hci_dev_close_sync+0x821/0xff0 [ 242.672849][T14686] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 242.678533][T14686] ? up_write+0x1ac/0x410 [ 242.682881][T14686] ? rcu_is_watching+0x15/0xb0 [ 242.687811][T14686] hci_unregister_dev+0x21a/0x510 [ 242.692868][T14686] vhci_release+0x152/0x1a0 [ 242.697477][T14686] ? __pfx_vhci_release+0x10/0x10 [ 242.702529][T14686] __fput+0x44c/0xa70 [ 242.706614][T14686] task_work_run+0x1d4/0x260 [ 242.711237][T14686] ? __pfx_task_work_run+0x10/0x10 [ 242.716461][T14686] ? kmem_cache_free+0x197/0x620 [ 242.721417][T14686] ? do_exit+0x6c0/0x2310 [ 242.725807][T14686] do_exit+0x6c5/0x2310 [ 242.730090][T14686] ? do_raw_spin_lock+0x121/0x290 [ 242.735430][T14686] ? __pfx_do_exit+0x10/0x10 [ 242.740142][T14686] do_group_exit+0x21c/0x2d0 [ 242.744765][T14686] ? lockdep_hardirqs_on+0x98/0x140 [ 242.750080][T14686] get_signal+0x1285/0x1340 [ 242.754632][T14686] arch_do_signal_or_restart+0x9a/0x7a0 [ 242.760397][T14686] ? fput+0xa0/0xd0 [ 242.764220][T14686] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 242.770462][T14686] ? __x64_sys_sendmsg+0x230/0x260 [ 242.775701][T14686] ? exit_to_user_mode_loop+0x55/0x4f0 [ 242.781292][T14686] exit_to_user_mode_loop+0x87/0x4f0 [ 242.786698][T14686] ? rcu_is_watching+0x15/0xb0 [ 242.791498][T14686] do_syscall_64+0x2e3/0xf80 [ 242.796185][T14686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.802355][T14686] ? clear_bhb_loop+0x60/0xb0 [ 242.807114][T14686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.813077][T14686] RIP: 0033:0x7f480378f749 [ 242.817629][T14686] Code: Unable to access opcode bytes at 0x7f480378f71f. [ 242.824637][T14686] RSP: 002b:00007f4804690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.833139][T14686] RAX: 00000000000000b0 RBX: 00007f48039e5fa0 RCX: 00007f480378f749 [ 242.841383][T14686] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000008a [ 242.849580][T14686] RBP: 00007f4803813f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.857858][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.866334][T14686] R13: 00007f48039e6038 R14: 00007f48039e5fa0 R15: 00007ffef721fe88 [ 242.874546][T14686] [ 242.877740][T14686] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.885056][T14686] CPU: 1 UID: 0 PID: 14686 Comm: syz.1.2525 Not tainted syzkaller #0 PREEMPT(full) [ 242.894785][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.904928][T14686] Call Trace: [ 242.908209][T14686] [ 242.911124][T14686] dump_stack_lvl+0x99/0x250 [ 242.915698][T14686] ? __asan_memcpy+0x40/0x70 [ 242.920296][T14686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.925475][T14686] ? __pfx__printk+0x10/0x10 [ 242.930063][T14686] vpanic+0x237/0x6d0 [ 242.934057][T14686] ? __pfx_vpanic+0x10/0x10 [ 242.938555][T14686] ? is_bpf_text_address+0x292/0x2b0 [ 242.943896][T14686] ? is_bpf_text_address+0x26/0x2b0 [ 242.949191][T14686] panic+0xb9/0xc0 [ 242.952904][T14686] ? __pfx_panic+0x10/0x10 [ 242.957319][T14686] __warn+0x317/0x4b0 [ 242.961333][T14686] __report_bug+0x288/0x500 [ 242.965826][T14686] ? __pfx_stack_trace_save+0x10/0x10 [ 242.971402][T14686] ? __pfx___report_bug+0x10/0x10 [ 242.976429][T14686] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 242.982657][T14686] ? __lock_acquire+0x146f/0x2cf0 [ 242.987778][T14686] report_bug_entry+0x16a/0x220 [ 242.992650][T14686] ? refcount_warn_saturate+0xb2/0x110 [ 242.998363][T14686] ? refcount_warn_saturate+0xb7/0x110 [ 243.003814][T14686] handle_bug+0xca/0x200 [ 243.008054][T14686] exc_invalid_op+0x1a/0x50 [ 243.012571][T14686] asm_exc_invalid_op+0x1a/0x20 [ 243.017412][T14686] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 243.023473][T14686] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 243.043158][T14686] RSP: 0018:ffffc9001bbbf578 EFLAGS: 00010293 [ 243.049218][T14686] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: ffff88807e76bd00 [ 243.057177][T14686] RDX: 0000000000000000 RSI: ffffffff8e67b660 RDI: ffffffff8f8a9e10 [ 243.065136][T14686] RBP: 0000000000000000 R08: ffff88807e76bd00 R09: 0000000000000005 [ 243.073184][T14686] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807c7c2000 [ 243.081152][T14686] R13: ffff88807d59e860 R14: ffff88807d59e878 R15: dffffc0000000000 [ 243.089124][T14686] ? refcount_warn_saturate+0xab/0x110 [ 243.094588][T14686] ? refcount_warn_saturate+0xab/0x110 [ 243.100042][T14686] klist_dec_and_del+0x3c7/0x3d0 [ 243.105000][T14686] klist_remove+0x1bd/0x340 [ 243.109495][T14686] ? __pfx_klist_children_put+0x10/0x10 [ 243.115028][T14686] ? __pfx_klist_remove+0x10/0x10 [ 243.120217][T14686] ? kobject_move+0x5a6/0x6e0 [ 243.124963][T14686] ? __pfx_kobject_move+0x10/0x10 [ 243.129986][T14686] ? do_raw_spin_unlock+0x122/0x240 [ 243.135178][T14686] ? get_device_parent+0x366/0x3a0 [ 243.140287][T14686] device_move+0x193/0x700 [ 243.144706][T14686] hci_conn_del_sysfs+0xb8/0x170 [ 243.149638][T14686] hci_conn_del+0xc36/0x11b0 [ 243.154251][T14686] hci_conn_hash_flush+0x191/0x230 [ 243.159375][T14686] hci_dev_close_sync+0x821/0xff0 [ 243.164399][T14686] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 243.169929][T14686] ? up_write+0x1ac/0x410 [ 243.174263][T14686] ? rcu_is_watching+0x15/0xb0 [ 243.179039][T14686] hci_unregister_dev+0x21a/0x510 [ 243.184081][T14686] vhci_release+0x152/0x1a0 [ 243.188606][T14686] ? __pfx_vhci_release+0x10/0x10 [ 243.193629][T14686] __fput+0x44c/0xa70 [ 243.197611][T14686] task_work_run+0x1d4/0x260 [ 243.202199][T14686] ? __pfx_task_work_run+0x10/0x10 [ 243.207299][T14686] ? kmem_cache_free+0x197/0x620 [ 243.212254][T14686] ? do_exit+0x6c0/0x2310 [ 243.216605][T14686] do_exit+0x6c5/0x2310 [ 243.220771][T14686] ? do_raw_spin_lock+0x121/0x290 [ 243.225878][T14686] ? __pfx_do_exit+0x10/0x10 [ 243.230472][T14686] do_group_exit+0x21c/0x2d0 [ 243.235147][T14686] ? lockdep_hardirqs_on+0x98/0x140 [ 243.240428][T14686] get_signal+0x1285/0x1340 [ 243.245093][T14686] arch_do_signal_or_restart+0x9a/0x7a0 [ 243.250781][T14686] ? fput+0xa0/0xd0 [ 243.254689][T14686] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.261116][T14686] ? __x64_sys_sendmsg+0x230/0x260 [ 243.266276][T14686] ? exit_to_user_mode_loop+0x55/0x4f0 [ 243.271751][T14686] exit_to_user_mode_loop+0x87/0x4f0 [ 243.277037][T14686] ? rcu_is_watching+0x15/0xb0 [ 243.281811][T14686] do_syscall_64+0x2e3/0xf80 [ 243.286882][T14686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.293051][T14686] ? clear_bhb_loop+0x60/0xb0 [ 243.298306][T14686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.304646][T14686] RIP: 0033:0x7f480378f749 [ 243.309067][T14686] Code: Unable to access opcode bytes at 0x7f480378f71f. [ 243.316156][T14686] RSP: 002b:00007f4804690038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.324560][T14686] RAX: 00000000000000b0 RBX: 00007f48039e5fa0 RCX: 00007f480378f749 [ 243.332524][T14686] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000008a [ 243.340487][T14686] RBP: 00007f4803813f91 R08: 0000000000000000 R09: 0000000000000000 [ 243.348450][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.356410][T14686] R13: 00007f48039e6038 R14: 00007f48039e5fa0 R15: 00007ffef721fe88 [ 243.364490][T14686] [ 243.367913][T14686] Kernel Offset: disabled [ 243.372234][T14686] Rebooting in 86400 seconds..