last executing test programs: 6.82439038s ago: executing program 0 (id=2913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x6}]}}}]}, 0x40}}, 0x20048054) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002a980080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000003080c0900010073797a30000000000900020064797a320000000014ed58bc64a665ce899f7efcd80000001100010000000000000000000500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 6.63899577s ago: executing program 0 (id=2915): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0xb) setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) 6.393558671s ago: executing program 0 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d0000000000"], 0x1c}}, 0x800) socket$packet(0x11, 0x3, 0x300) unshare(0x20000400) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x11, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@generic={0x0, 0x1, 0x9, 0x1, 0x7f}, @printk={@ld}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x2, 0x3, 0x4000) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}}, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01"], 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x600) 5.784083518s ago: executing program 0 (id=2919): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x700, 0x80, 0x2, 0x1, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x3e, 0x3, [{0x6, 0xb, "a4195a286004ddbcc7"}, {0x0, 0xa, "f8ea90019cb202dd"}, {0x6, 0x12, "55e2fc67e283a9f9636572a6ce222c1d"}, {0x5, 0x11, "04e2bf8ed153b7f91e9703f66e4479"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000001380)={0x648, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "d973b90c511d6101ab77007fcc293fac7da7a03231dc402ff0de12bc61781777533268429b1f1d33d8e8b22a27d0f053a9ddba9d031006a9d83523b947a0a64c9a40763390255d30f4f70749f659538257f9cd5d4ab95590552f3a22aaacc7af9d"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "9a8eff609bb8f39ecc3b6ab6850f0b12c84a5ed1759c6ece4b5e2c498532682236038fd2e861a478252e6f27cd40e18c9344cadc95ef7dc576e51b12aa"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "7152fac647efbfef617374207849a8125e269da0b6cac2b132abb324faa133302685586ae8d78610b31c1dfbd434a105615c0301be90be9b762a31074e490f43115c24c674ca1669306206d1120fff49e24579178eb1166ac29943ac13d727a41fec0653ce5d499c37a6d642ba02a56733a760c14985"}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "7cb1284d675e47b78ad68ad4d55262bc70733594cd06c373e3629a74f0c3a1ed5dfa6305adb5d722172f3c51fe287a976f502f56b57334a10bfa0edd73269a4b6cc929f56572f6e69033d29da18db5301095ea365eb0e09805257c226d0dc2aca67efe6fd40bb2ca9567d29b8c1bea91685745c14aa585fee542bad0b0f445f409c317aad7af1bc3fa238f59"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x3c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#--#\'!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-:@.*-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*+{[*:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "0a20d86e5a7970282887381e8d2dc94bedc965c88f53775753ee620a77d7a57356b6e4ed43e9d5fc38f37d63400a59fde3516df274f88a45697b104d41329136efce1109ca0df97fadbf2034dc06813664345eb3fcb54685c92e6fc58853535df550732a766dde51eac1501665c124fdd588c8e0229e5a30c4982e787e32543fa0df296abf0db0cbc8df7e6e787fae5bdc0ddfee2818d5a74b72950d536d3d8e80"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "8c68fd49967dfe2ee3b44e06c24a5f85b4de6d2dd01baac9e86636ce4ebc12a43bcee0002da426843dc8989a54bb019776c1420b7a0429ca394ea1f25f20a55f1b17fd620411d8cc61f77c14850eba52192764e8dc67ad67d4e2566289b32a859e502caf28ca398c82bcb16a66eb175500c1baaf0f1fb155b668e38d0ab7343281b112a1c7c62c86ebd3156ba2430fa0c21f068c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "ef429de9348c863edabc1e906b15c25a1d7fe183d4328ed8a546337e59b667a733a495b180c54b59614a8e36835037c40ca05bdb71f3d06ab8fd675998cc7bba57807109c4f4d77dcaaac3f4aa6e097ba609b2c1d9040c329dcc0f71a554bf96f2edc1e7c9f187372ff759708986b2717b796517e26f6766dad72b311ef7580614b8f78f6ec3184b58571f87defc3466b6937efea98e1d341e39bef4b390212b0c0dbfa6adb023d86095e2fb60650e52bdff29afc6c11b71e8103f762c97f05b6ab1410cfb67336807becd"}]}]}, 0x648}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x700, 0x80, 0x2, 0x1, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x3e, 0x3, [{0x6, 0xb, "a4195a286004ddbcc7"}, {0x0, 0xa, "f8ea90019cb202dd"}, {0x6, 0x12, "55e2fc67e283a9f9636572a6ce222c1d"}, {0x5, 0x11, "04e2bf8ed153b7f91e9703f66e4479"}]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000001380)={0x648, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x65, 0x5, "d973b90c511d6101ab77007fcc293fac7da7a03231dc402ff0de12bc61781777533268429b1f1d33d8e8b22a27d0f053a9ddba9d031006a9d83523b947a0a64c9a40763390255d30f4f70749f659538257f9cd5d4ab95590552f3a22aaacc7af9d"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "9a8eff609bb8f39ecc3b6ab6850f0b12c84a5ed1759c6ece4b5e2c498532682236038fd2e861a478252e6f27cd40e18c9344cadc95ef7dc576e51b12aa"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "7152fac647efbfef617374207849a8125e269da0b6cac2b132abb324faa133302685586ae8d78610b31c1dfbd434a105615c0301be90be9b762a31074e490f43115c24c674ca1669306206d1120fff49e24579178eb1166ac29943ac13d727a41fec0653ce5d499c37a6d642ba02a56733a760c14985"}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "7cb1284d675e47b78ad68ad4d55262bc70733594cd06c373e3629a74f0c3a1ed5dfa6305adb5d722172f3c51fe287a976f502f56b57334a10bfa0edd73269a4b6cc929f56572f6e69033d29da18db5301095ea365eb0e09805257c226d0dc2aca67efe6fd40bb2ca9567d29b8c1bea91685745c14aa585fee542bad0b0f445f409c317aad7af1bc3fa238f59"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x3c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#--#\'!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-:@.*-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*+{[*:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x88H'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "0a20d86e5a7970282887381e8d2dc94bedc965c88f53775753ee620a77d7a57356b6e4ed43e9d5fc38f37d63400a59fde3516df274f88a45697b104d41329136efce1109ca0df97fadbf2034dc06813664345eb3fcb54685c92e6fc58853535df550732a766dde51eac1501665c124fdd588c8e0229e5a30c4982e787e32543fa0df296abf0db0cbc8df7e6e787fae5bdc0ddfee2818d5a74b72950d536d3d8e80"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "8c68fd49967dfe2ee3b44e06c24a5f85b4de6d2dd01baac9e86636ce4ebc12a43bcee0002da426843dc8989a54bb019776c1420b7a0429ca394ea1f25f20a55f1b17fd620411d8cc61f77c14850eba52192764e8dc67ad67d4e2566289b32a859e502caf28ca398c82bcb16a66eb175500c1baaf0f1fb155b668e38d0ab7343281b112a1c7c62c86ebd3156ba2430fa0c21f068c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "ef429de9348c863edabc1e906b15c25a1d7fe183d4328ed8a546337e59b667a733a495b180c54b59614a8e36835037c40ca05bdb71f3d06ab8fd675998cc7bba57807109c4f4d77dcaaac3f4aa6e097ba609b2c1d9040c329dcc0f71a554bf96f2edc1e7c9f187372ff759708986b2717b796517e26f6766dad72b311ef7580614b8f78f6ec3184b58571f87defc3466b6937efea98e1d341e39bef4b390212b0c0dbfa6adb023d86095e2fb60650e52bdff29afc6c11b71e8103f762c97f05b6ab1410cfb67336807becd"}]}]}, 0x648}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) (async) 5.516337597s ago: executing program 0 (id=2922): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0xb55f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x80, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xe38a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb25c}, @in6={0xa, 0x4e22, 0x180, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x800, @empty, 0xf0}, @in6={0xa, 0x4e22, 0x7, @private1, 0xfb3}]}, &(0x7f0000000180)=0x10) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@rose, @bcast, @remote, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000240)=0x48, 0xc0800) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000380)={0x3, 0x7, 0xf0, &(0x7f0000000280)=""/240}) r4 = socket(0x22, 0x80000, 0x3) ioctl$sock_netdev_private(r4, 0x89fc, &(0x7f00000003c0)="4a0944852a8e30a4873421ad1ccbea5e809649bc3fa07c9c97cc13d7bd4bcf77f58954fcf42fad597138e729144efd5b2368e75d61780213d533887a8fd7f30dda7e121538979446bb330e860f364f5010db81cb8843b21c3a33bad93f1f864e00bc0b263a9e260667975ee3cdb77f643c8632d8e6a7afc2d6891bce2169ffb66c319fc349276e0334fbfca920c5889fcae6287d0746436b40daed0e132bd1edac3b2c0e2dc39059df13358157db541fff6b79aee06241fc8db0a3e8d46e4296125b4cdc72c11a58c60e4017db6a607ce1ad855579") setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000004c0)=0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '8@.#:'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4000811) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000640)="3dbc85a696dab4baacf6a0be4e703f7fcc8c91cb0415cff01d6a86fd5639a18b71fa32b972ea353ac06df916fc95cb55ac93f4fba7e47383d8e589b2c8b882ad2d8db68e34f75ba297bf157e69cad60de83bcfc4fe4a61638efe9ec1b4083cb97286ddd89b8f94bd2cebd77c2a1b39b64187df9ca690ce6220d975deae4117c79e563a", 0x83) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r4, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="ea5fc88df7031c490b783c6f21a6440f454c44346f40a46efa6708f256307f33d9e6d8c91c7ace205338726fa205583042187b6b5deddda93576101714c1e557be97e25ff664d3745d0df32207a373a33be053", 0x53}], 0x1, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xb, [@empty, @rand_addr=0x64010100, @multicast2, @remote, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}], 0xa8}}], 0x1, 0x400b4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newtclass={0x44, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xe}, {0xffe0, 0x5}, {0xfff2, 0xffe0}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xfd, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x14) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000a80)=0x10, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000ac0)=0x800, 0x4) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000b00), 0x4) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000b40)={r2, 0x4}, &(0x7f0000000b80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000bc0)={0x48, 0x2, 0x2d7, 0x4f3, r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000c00)='wg0\x00', 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r12) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000c80)={r11, 0x7}, 0x8) r13 = socket(0x11, 0x6, 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000cc0)={r2, 0x33}, 0x8) 5.310808543s ago: executing program 0 (id=2928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xd}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.823403479s ago: executing program 4 (id=2942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x28, 0x80000, 0xfffffffc) ioctl$sock_ifreq(r2, 0x8995, &(0x7f00000000c0)={'vlan1\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, 0x0, &(0x7f00000005c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) bind$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x101, @mcast1, 0xd, 0x4}, 0x20) r10 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000000)={0xa0000001}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r13) sendmsg$NLBL_CALIPSO_C_LIST(r13, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0xffffffffffffff10, r14, 0x1, 0x70bd2a, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x2004}) epoll_wait(r12, &(0x7f00000000c0)=[{}, {}], 0x2, 0x1fffc002) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000380)='wg2\x00') 3.02831578s ago: executing program 1 (id=2947): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x3, 0x0, 0x4}, {0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x2b}, 0x0, @in=@private=0xa010101, 0x3500, 0x0, 0x0, 0x0, 0x8d}}, 0xe8) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60000090) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000108000b40000000000b000100657874686472000024000280080001400000000a0800034000000002080004400000002d0500020007000000240001800a0001007265646972000000140002800800034000000060080001400000000b090001007300010000000000000000000100000a000000000000fa5fd0a59900"], 0xf8}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5, 0x0, 0x9}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c000000100003050000", @ANYRES32=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmmsg$alg(r3, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e1", 0x3}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) 2.924011791s ago: executing program 2 (id=2948): epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES32=r3], 0xb8}}, 0x20040014) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x2e, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000012, 0xa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, r5) (async) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800070000000000000000950000000000000036300059e483ebeb0fd68b58183ff00c339b8b7038ca2b3ab0920d995c3c2dfbba9fbb2ab2895956c49f4311fd1a66f63723235c208df99e85b336a9710f49557fc5602520158c134b53851b12b7180f05a8120c2882778e462bb1afeed2ab55b33cd743e3b13beab039af11e0005760aed5863b21af104008a81ff6ac5d2c06b649446f6a3a1063f689699ed7c9a2a6040000001b4454e7ae029817c97413df9717b91d5e5f5d982ad0a7003d5491127f12"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x6, 0x80000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$6lowpan_control(r1, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) write$6lowpan_control(r1, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x5d07}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 1.675673475s ago: executing program 1 (id=2949): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x36, 0x4, 0x0, 0x0, 0xe8, 0x68, 0x2000, 0xfc, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@ssrr={0x89, 0x17, 0xe6, [@broadcast, @remote, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x9b, [@broadcast, @empty, @loopback, @remote, @local]}, @rr={0x7, 0x2b, 0x72, [@empty, @empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @loopback]}, @ssrr={0x89, 0xb, 0xf2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @noop, @cipso={0x86, 0x5c, 0x0, [{0x2, 0xc, "b524dfa8d18dd7a9d323"}, {0x2, 0x7, "82a969bcf1"}, {0x1, 0xe, "4a3bd709638e3f7aa617c047"}, {0x7, 0xa, "9d62bae6890a3c42"}, {0x5, 0x4, "cb99"}, {0x2, 0x11, "b06647e1d135498a4be350dce2afe4"}, {0x7, 0x12, "1f85fc5b6947426f1849d7a927f84c30"}, {0x2, 0x4, "c9be"}]}]}}, {0x8000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x102) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, 0x0, 0x0, 0x12, 0x0, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)=@newsa={0x164, 0x10, 0x800, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@loopback, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, r7}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x4}, {0x800000000000, 0x400000004, 0x40000000, 0x1}, {0xffffffff, 0x0, 0x6}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x0, 0xe1db, 0x6d8c, 0x96}}]}, 0x164}}, 0x4810) 1.580178811s ago: executing program 2 (id=2950): r0 = syz_open_procfs$namespace(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x2, @mcast1, 0x7}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e5ffffff00"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) syz_open_procfs$namespace(0x0, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x2, @mcast1, 0x7}, 0x1c) (async) write(r1, &(0x7f0000000200)="89", 0xffe3) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, r0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e5ffffff00"/28], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) (async) 1.330128097s ago: executing program 4 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.232501242s ago: executing program 2 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50) (async) socket$inet(0x2, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000008540000022000000850000008b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x22020600) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, 0x0, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.11556441s ago: executing program 1 (id=2956): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x324, r4, 0xc20, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x200000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x858}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb00}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x102}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x89}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x40000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x46}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x10}, {0x6, 0x11, 0xe4d}, {0x8, 0xb, 0x986}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x101}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x81}, {0x5}, {0x6}, {0x8, 0xb, 0x200}}]}, 0x324}, 0x1, 0x0, 0x0, 0x48841}, 0x48891) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000080), 0x0, 0xc8d0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000080)=0x200000, 0x4) bind$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x4000081) 1.104443799s ago: executing program 4 (id=2957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x60, r9, 0x9, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xff, 0x6a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "509f387ca5d996444901d37be42dc1a2111656e643f96cf0"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6erspan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 980.57988ms ago: executing program 3 (id=2958): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2004c090) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r3, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="34020000c859ff947e6429fee6fb0a8dcb9fea162f1197b1f72aa13a4e23bd92a2b4754d7327aa6a17042c137c908994bb86b255aa8d76b9d8da37baa285067d9df674102584f47631ea23c66eb0fe107a6a9745a475a736d42f837598d53f834739bb80d823cda2d0166d69f1e5b10a756d746190bbb589c3ab8d56cf7f2f849789d9501cd1144a18ee1499185e3ecf3b6169f1b6b2af9c26f6", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) 941.7337ms ago: executing program 3 (id=2959): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80) pselect6(0x40, &(0x7f0000000080)={0x9, 0x4bc9, 0x10000, 0x1, 0x1942, 0x6, 0xa8, 0xb427}, &(0x7f0000000180)={0x8000000000000000, 0x10, 0x1, 0x9, 0xe968, 0xfff, 0xfff, 0x5}, &(0x7f0000000200)={0x1, 0x1, 0x100000000, 0x10, 0x8, 0x6, 0x8, 0x81}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x14) 872.808565ms ago: executing program 3 (id=2960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 863.616654ms ago: executing program 1 (id=2961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000900000000000000110000bc520e4a588a9dfc31224ea84ee1ede35723e11e3c92b1d2", @ANYRES16=r1, @ANYRES8=0x0, @ANYRES64=r3, @ANYRES8, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113280000000000bf2000000000000007000000080000003d0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000400)=""/199, &(0x7f0000000500)=0xc7) 652.247483ms ago: executing program 1 (id=2962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x6, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f9030101000000000000009b689f0b2c000000000a14000000ec03010000000000000000"], 0x28}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fc", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5", 0x3e}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3df52177a7ca0e12f21a", 0x1d}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newlink={0xa8, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}, {0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'pim6reg\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0xa8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x6, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f9030101000000000000009b689f0b2c000000000a14000000ec03010000000000000000"], 0x28}}, 0x40000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$inet6(0xa, 0x3, 0x3c) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5", 0x3e}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3df52177a7ca0e12f21a", 0x1d}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newlink={0xa8, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}, {0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'pim6reg\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0xa8}}, 0x0) (async) 584.670176ms ago: executing program 3 (id=2963): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200"], 0x254}}, 0x0) poll(&(0x7f0000000240)=[{r2, 0x2200}], 0x1, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008", @ANYRES32], 0x1c}}, 0x4804) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000380), 0x7) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = epoll_create(0x3ff) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000240)={0x90000014}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000280)={0x2000000}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 501.08282ms ago: executing program 4 (id=2964): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 64) unshare(0x2040400) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 424.272064ms ago: executing program 3 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000105000e0000000000000002000000640001801400018008000100ac14142708000200e00000010c00028005000100000000001400018008000100ffffffff080002000000000006000340000000000c00028005000100110000000c00028005000100880000000c000280050001002f000000080003400000100e"], 0x80}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30cd09}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"/327], 0x168}, 0x1, 0x0, 0x0, 0x24040023}, 0x880) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1400000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000380)}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/78, 0x4e}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000a40)=""/102, 0x66}], 0x8, &(0x7f0000000c00)=""/243, 0xf3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYRESHEX=r6, @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0xffffffffffffff13, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffee, 0xffff}, {0x1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@deltaction={0x1b8, 0x31, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbe55}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000000}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2044}, 0x8040) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 379.664435ms ago: executing program 2 (id=2966): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) (async) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x20) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) (async) sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) (async, rerun: 32) recvfrom$packet(r2, &(0x7f0000000080)=""/167, 0xa7, 0x40000000, 0x0, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008477fbac141516e000000144080511b18000899404000f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) 325.990232ms ago: executing program 1 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendto$inet(r3, &(0x7f0000000000)='\x00', 0xffffff4a, 0x4004015, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000001}, 0x4000080) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x1) sendmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x401, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltaction={0x7c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x806, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 220.203568ms ago: executing program 4 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045", 0xbe}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4", 0x5}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfffffffffffffeeb}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000780)={'veth1_to_hsr\x00', 0x7f}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bd36fbab635f2e03ed9c5fbd7c440054fbff00f4cb33eb95a216bd97e5bb6d435e1843c58adf27d6ffa37a6a6e844ee16d9ec58730e17a915416ba1d0f7b839f828a1a110068a1971cc4d880b48308f1209acc9a958db9011afc99583fdf", @ANYRES16=r1, @ANYBLOB="110127bd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000180003000200000008000b000900000006001600020000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x3a962000) unshare(0x24020400) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xfc, 0x19, 0x2, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x0, 0x0, 0x800000001000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2e1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r11, 0x180ddff478779ebe, 0x70bd28, 0x0, {}, [{@nsim={{0xe}, {0x6b, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e, 0xfd}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4811}, 0x40c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 218.608195ms ago: executing program 2 (id=2969): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="faf7370fb5964bf15f634c952c5162da2f3fcd5cd54acb3a3616f21a4e56b896c3f73087cecc3cca94a5f932433241f0eef8691e7d03ba7325757a7ca946e8522c48e53453b48cc08401ca286917ba685bbdcad7da8f545788a8b491150fb39f97126cca0849ca5cb321928617e8a51b0b4f70b99c76f066547f2c541e8b9a0f9d84f1eaa29ef0824b886cf12c8350", 0x8f}, {&(0x7f0000000140)="43c874544d664965761caba28c979e3209a129a0d414808958ff5ad59ea7321041e757b277cbf2eff9763e6a92a8e2280c6cf881c342cbc3e74885dfeb893f71e617fbc752d569e6597c07eeffe6cf5d25bed36ab867a5ec62b7436cccfed417f045548bfecbe9a1817ab277bcad1188695e4e8b8eaf5b0eff0df85722fd90ee1b59d2ccaa8053d87080f32bd940a68afd49d468eaf3f11743a5258d34589ec33fe145ec73b26fa3c7c38eb7d6a161db6d2c06cae38c1fb8a7c967fc1e5825a636b80fa1089666871dafb5385e0738321e205563b805509b55e39e3913", 0xdd}, {&(0x7f0000000240)="b668bfc96b519ff36a80f2e83b50bab37325cea65ba8e60108ef7e698f46edbbfc37175998ed74cf41a4b0746dc88a119745d68c364382b18b6bd45533670d7b601f3e6c29ba3b69ceac2bcb0eacea94c800", 0x52}], 0x3, &(0x7f0000000300)="0938a15eb3d8536a55f1822740cf5382e96c22daf100a83c9608fee592380f9604fa9e97b75aa657e1b172aa0d98b9fadad6ea086e6cbdcb33387c3e33956025d8b5e8ef2917", 0x46, 0x80}, 0x2040040) (async) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="faf7370fb5964bf15f634c952c5162da2f3fcd5cd54acb3a3616f21a4e56b896c3f73087cecc3cca94a5f932433241f0eef8691e7d03ba7325757a7ca946e8522c48e53453b48cc08401ca286917ba685bbdcad7da8f545788a8b491150fb39f97126cca0849ca5cb321928617e8a51b0b4f70b99c76f066547f2c541e8b9a0f9d84f1eaa29ef0824b886cf12c8350", 0x8f}, {&(0x7f0000000140)="43c874544d664965761caba28c979e3209a129a0d414808958ff5ad59ea7321041e757b277cbf2eff9763e6a92a8e2280c6cf881c342cbc3e74885dfeb893f71e617fbc752d569e6597c07eeffe6cf5d25bed36ab867a5ec62b7436cccfed417f045548bfecbe9a1817ab277bcad1188695e4e8b8eaf5b0eff0df85722fd90ee1b59d2ccaa8053d87080f32bd940a68afd49d468eaf3f11743a5258d34589ec33fe145ec73b26fa3c7c38eb7d6a161db6d2c06cae38c1fb8a7c967fc1e5825a636b80fa1089666871dafb5385e0738321e205563b805509b55e39e3913", 0xdd}, {&(0x7f0000000240)="b668bfc96b519ff36a80f2e83b50bab37325cea65ba8e60108ef7e698f46edbbfc37175998ed74cf41a4b0746dc88a119745d68c364382b18b6bd45533670d7b601f3e6c29ba3b69ceac2bcb0eacea94c800", 0x52}], 0x3, &(0x7f0000000300)="0938a15eb3d8536a55f1822740cf5382e96c22daf100a83c9608fee592380f9604fa9e97b75aa657e1b172aa0d98b9fadad6ea086e6cbdcb33387c3e33956025d8b5e8ef2917", 0x46, 0x80}, 0x2040040) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpu.stat\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r0, 0x1, 0x6}, 0x10) bind$l2tp(r2, &(0x7f0000000440)={0x2, 0x0, @empty, 0x1}, 0x10) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)={0x401, {{0xa, 0x4e20, 0x6, @private0, 0x9}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa7b}}]}, 0x110) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000600)={'team0\x00', 0x2}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000640)=0x8000) (async) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000640)=0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'gretap0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x140, 0x308, 0x210, 0x140, 0x210, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f00000006c0), {[{{@ipv6={@private1, @private1, [0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'nr0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x7, 0x6, 0x4e}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@dst={{0x48}, {0x4, 0x6, 0x1, [0x7f, 0x7, 0xff, 0x2, 0x0, 0x0, 0x2b4, 0x7a, 0x4, 0x2, 0xfffb, 0x8, 0xf9, 0xc, 0x209, 0x5], 0x9}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xff], 'sit0\x00', 'netpci0\x00', {}, {}, 0xc, 0x9, 0x2, 0x24}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x3d3ca4bdf98738b0, 0xff000000, 0x7fffff00], [0x80ffffff, 0x0, 0xffff00, 0xffffffff], 'bridge_slave_0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x6, 0x7, 0x22}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x31}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x10001, @ipv6=@rand_addr=' \x01\x00', 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @loopback, [0x0, 0x0, 0xffffff00, 0x78a0257a319df962], [0xff000000, 0xffffff00, 0xff000000], 'wlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0xf7, 0x2, 0xa}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x27, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x140, 0x308, 0x210, 0x140, 0x210, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f00000006c0), {[{{@ipv6={@private1, @private1, [0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'nr0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x7, 0x6, 0x4e}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@dst={{0x48}, {0x4, 0x6, 0x1, [0x7f, 0x7, 0xff, 0x2, 0x0, 0x0, 0x2b4, 0x7a, 0x4, 0x2, 0xfffb, 0x8, 0xf9, 0xc, 0x209, 0x5], 0x9}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xff], 'sit0\x00', 'netpci0\x00', {}, {}, 0xc, 0x9, 0x2, 0x24}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x3d3ca4bdf98738b0, 0xff000000, 0x7fffff00], [0x80ffffff, 0x0, 0xffff00, 0xffffffff], 'bridge_slave_0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x6, 0x7, 0x22}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x31}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x10001, @ipv6=@rand_addr=' \x01\x00', 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @loopback, [0x0, 0x0, 0xffffff00, 0x78a0257a319df962], [0xff000000, 0xffffff00, 0xff000000], 'wlan1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0xf7, 0x2, 0xa}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x27, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) openat$cgroup_devices(r2, &(0x7f0000000dc0)='devices.deny\x00', 0x2, 0x0) (async) r4 = openat$cgroup_devices(r2, &(0x7f0000000dc0)='devices.deny\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000e00)={0x4, 0x401, "a25a99", 0x40, 0x6}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000e40)={0x8, {{0xa, 0x4e23, 0x5, @local, 0x1}}, {{0xa, 0x4e23, 0x7fff, @local, 0x9}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000f80)=""/191, &(0x7f0000001040)=0xbf) bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r2}, 0x8) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r2}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000014c0)={r6, 0x5, 0x8}) accept4$packet(r5, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001900)=0x14, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001940)={0x0, 0x5, 0x1}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x12112, r3, 0x4c1f8000) ioctl$sock_proto_private(r2, 0x89e6, &(0x7f0000001980)="b873a31b2cc8c58f73a61875b0f255d62999471c6b985e8ce2a868482786529ca9186e20dfcaf41c567be574b5a734a6bdccac4d08e8095ab2ee08a00d31293ad1b55357267edb637e4ef8ec963360a72005ebfaf0e3b577925f45cf917f284d225910debf9d95f6f93c99ec78994427e10b5ca1d36b1d4303b29910f3b3bd074bde72e4d9d57aa5d21ccbcfd66d00518f9939c765ad5714b54e0d710b4d19433b18b2088dae3e5e5c7385809438152e45d109229a86cbe668e53f458f98c53c49e975a0afc97618dee0361e109645fdbda78b81ec5bfbcca0e7dd773779ccd12a49f609") (async) ioctl$sock_proto_private(r2, 0x89e6, &(0x7f0000001980)="b873a31b2cc8c58f73a61875b0f255d62999471c6b985e8ce2a868482786529ca9186e20dfcaf41c567be574b5a734a6bdccac4d08e8095ab2ee08a00d31293ad1b55357267edb637e4ef8ec963360a72005ebfaf0e3b577925f45cf917f284d225910debf9d95f6f93c99ec78994427e10b5ca1d36b1d4303b29910f3b3bd074bde72e4d9d57aa5d21ccbcfd66d00518f9939c765ad5714b54e0d710b4d19433b18b2088dae3e5e5c7385809438152e45d109229a86cbe668e53f458f98c53c49e975a0afc97618dee0361e109645fdbda78b81ec5bfbcca0e7dd773779ccd12a49f609") ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001a80)={{r4}, {@void, @max}}) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000001ac0)) (async) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000001ac0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b80)={'veth1_to_bond\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000001c00)={0x6, 0x10, '\x00', 0x1, &(0x7f0000001bc0)=[0x0, 0x0]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001c40), 0x20c080, 0x0) 135.666799ms ago: executing program 2 (id=2970): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="38700600ab820800400012800e0001006970366772657461700000002c00028014000700ff1510000000000000000007000000011400060000000000a6"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 97.225479ms ago: executing program 3 (id=2971): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001000000000000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0xfffffff9, 0x24, 0x1}, 0x50) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x805a030}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x44010) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x8, 0xe35dfccf116fdcc4, 0xf) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000440)={0x9, {{0x2, 0x4e23, @local}}, 0x0, 0x1, [{{0x2, 0x4e23, @multicast1}}]}, 0x110) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x300, 0x70bd29, 0x25dfdbfd, {0xa, 0x20, 0xb4b07daed0461531, 0x4a, 0xcdfd68748a37b2f, 0x4, 0xc8, 0x0, 0x800}, [@RTA_PREF={0x5, 0x14, 0x3}, @RTA_MARK={0x8, 0x10, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x840) 0s ago: executing program 4 (id=2972): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000005b0008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c0016800800", @ANYRES64], 0x38}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000010000000000000003000000180000000300000000000000040000009500000000000000d2325cfc3a4ef5a98231c422dfa09f5ee8c9f09fd4365f04669722142b767ea0c2ee082a6d4a3add0387b2eab447be285cd5a51a46878267a461e4e9e87e2b94845832e5a520f18971ba646e1a849fd7ea6dd643446ed6d065a5e00329f13c8cf8d4e05f4cafe57092425297b465e7a304203e75ed4d69adea5eb51dc2c7"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) kernel console output (not intermixed with test programs): 5/0x100 [ 245.163003][T11603] do_syscall_64+0xfa/0x3b0 [ 245.163021][T11603] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.163049][T11603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.163067][T11603] ? clear_bhb_loop+0x60/0xb0 [ 245.163091][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.163109][T11603] RIP: 0033:0x7fe5b738eec9 [ 245.163125][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.163140][T11603] RSP: 002b:00007fe5b55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.163161][T11603] RAX: ffffffffffffffda RBX: 00007fe5b75e5fa0 RCX: 00007fe5b738eec9 [ 245.163175][T11603] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.163187][T11603] RBP: 00007fe5b55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.163198][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.163209][T11603] R13: 00007fe5b75e6038 R14: 00007fe5b75e5fa0 R15: 00007ffc3d8a2b28 [ 245.163241][T11603] [ 245.625161][T11619] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1373'. [ 245.672705][T11622] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 245.776317][T11630] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.801210][T11630] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 246.151540][T11646] netlink: 'syz.0.1378': attribute type 23 has an invalid length. [ 246.473914][T11652] vlan0: entered allmulticast mode [ 246.479229][T11652] bridge_slave_0: entered allmulticast mode [ 246.642420][T11658] netlink: 'syz.1.1380': attribute type 3 has an invalid length. [ 246.656456][T11658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.673040][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 246.772992][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 246.810935][T11667] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 246.871358][T11667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.966391][T11670] bond5: (slave veth7): Enslaving as an active interface with a down link [ 246.987760][T11673] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 247.010759][T11674] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 247.302246][T11694] vlan3: entered allmulticast mode [ 247.351102][T11694] bridge_slave_0: entered allmulticast mode [ 247.604255][T11707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 248.036923][T11724] validate_nla: 1 callbacks suppressed [ 248.036941][T11724] netlink: 'syz.4.1389': attribute type 6 has an invalid length. [ 248.468745][T11739] __nla_validate_parse: 7 callbacks suppressed [ 248.468762][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'. [ 248.481599][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 248.501440][T11714] lo speed is unknown, defaulting to 1000 [ 248.520878][T11740] netlink: 'syz.2.1399': attribute type 13 has an invalid length. [ 248.948435][T11714] lo speed is unknown, defaulting to 1000 [ 249.002469][T11751] vlan3: entered allmulticast mode [ 249.019269][T11751] bridge0: entered allmulticast mode [ 249.045097][T11751] bridge1: port 1(vlan3) entered blocking state [ 249.053050][T11758] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1402'. [ 249.064202][T11751] bridge1: port 1(vlan3) entered disabled state [ 249.119900][T11751] vlan3: entered promiscuous mode [ 249.130906][T11751] bridge0: entered promiscuous mode [ 249.309072][T11714] lo speed is unknown, defaulting to 1000 [ 249.334853][T11714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.416027][T11714] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.638070][T11762] lo speed is unknown, defaulting to 1000 [ 249.667905][T11714] lo speed is unknown, defaulting to 1000 [ 249.954958][T11714] lo speed is unknown, defaulting to 1000 [ 250.049255][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 250.143404][T11714] lo speed is unknown, defaulting to 1000 [ 250.290686][T11714] lo speed is unknown, defaulting to 1000 [ 250.299505][T11714] lo speed is unknown, defaulting to 1000 [ 250.583314][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 250.601891][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 250.655863][T11785] ip6gre1: entered allmulticast mode [ 250.825682][T11787] lo speed is unknown, defaulting to 1000 [ 250.888656][T11795] geneve3: entered promiscuous mode [ 250.896066][T11795] geneve3: entered allmulticast mode [ 251.008030][T11798] syzkaller1: entered promiscuous mode [ 251.013862][T11798] syzkaller1: entered allmulticast mode [ 251.029514][T11805] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1416'. [ 251.077079][T11802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1415'. [ 251.130939][T11808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1415'. [ 251.134925][T11798] lo speed is unknown, defaulting to 1000 [ 251.962429][T11838] lo speed is unknown, defaulting to 1000 [ 252.011385][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1425'. [ 252.134837][T11851] netlink: 'syz.4.1425': attribute type 2 has an invalid length. [ 252.169542][T11857] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 252.273341][T11862] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 252.646397][T11878] lo speed is unknown, defaulting to 1000 [ 253.101803][T11913] netlink: 'syz.4.1442': attribute type 2 has an invalid length. [ 253.121129][T11914] netlink: 'syz.1.1443': attribute type 4 has an invalid length. [ 253.185738][T11915] netlink: 'syz.1.1443': attribute type 4 has an invalid length. [ 253.708561][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 253.847671][T11938] lo speed is unknown, defaulting to 1000 [ 254.397315][T11971] __nla_validate_parse: 10 callbacks suppressed [ 254.397335][T11971] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1457'. [ 254.489892][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1459'. [ 255.245802][T11994] tipc: Enabled bearer , priority 0 [ 255.258413][T11994] syzkaller0: entered promiscuous mode [ 255.265237][T11994] syzkaller0: entered allmulticast mode [ 255.300969][T11994] tipc: Resetting bearer [ 255.352425][T11994] tipc: Resetting bearer [ 255.408937][T11994] tipc: Disabling bearer [ 255.447751][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 255.611755][T12021] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.645358][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 255.654844][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 255.701685][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 255.799083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.860843][T12031] lo speed is unknown, defaulting to 1000 [ 256.152873][T12046] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 256.259460][T12046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.292866][T12048] tipc: Enabled bearer , priority 0 [ 256.367340][T12066] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1483'. [ 256.409306][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 256.473945][T12047] tipc: Disabling bearer [ 256.573270][T12074] sctp: [Deprecated]: syz.0.1485 (pid 12074) Use of int in maxseg socket option. [ 256.573270][T12074] Use struct sctp_assoc_value instead [ 256.764729][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 256.819996][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 257.108653][T12105] netem: change failed [ 257.156894][T12105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.228435][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.249409][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.268600][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.303343][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.358730][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.363688][T12120] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 257.422900][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.463211][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.486454][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.507616][T12112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.710124][T12139] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.823705][T12141] nbd: device at index 64 is going down [ 258.013423][T12165] netlink: 'syz.4.1507': attribute type 10 has an invalid length. [ 258.205496][T12168] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 258.256635][T12169] vlan4: entered promiscuous mode [ 258.274705][T12169] bond0: entered promiscuous mode [ 258.288160][T12169] vlan4: entered allmulticast mode [ 258.293784][T12169] bond0: entered allmulticast mode [ 258.490841][T12185] tipc: Enabling of bearer rejected, failed to enable media [ 258.502448][T12182] netlink: 'syz.2.1514': attribute type 6 has an invalid length. [ 258.512321][T12182] netlink: 'syz.2.1514': attribute type 7 has an invalid length. [ 258.520071][T12182] netlink: 'syz.2.1514': attribute type 8 has an invalid length. [ 258.527983][T12182] netlink: 'syz.2.1514': attribute type 15 has an invalid length. [ 259.920648][T12235] sctp: [Deprecated]: syz.4.1526 (pid 12235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.920648][T12235] Use struct sctp_sack_info instead [ 260.042043][T12237] netlink: 'syz.0.1529': attribute type 322 has an invalid length. [ 260.117163][T12239] : entered promiscuous mode [ 260.238877][T12245] __nla_validate_parse: 113 callbacks suppressed [ 260.238897][T12245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1531'. [ 260.375985][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 260.387831][T12249] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 260.574859][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 260.597987][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 260.598144][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 260.620847][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 260.682265][T12259] bond0: (slave team0): Releasing backup interface [ 260.707594][T12259] bond0: (slave bond_slave_0): Releasing backup interface [ 260.723960][T12259] bond0: (slave bond_slave_1): Releasing backup interface [ 260.765498][T12259] team0: Port device team_slave_0 removed [ 260.799283][T12259] team0: Port device team_slave_1 removed [ 260.806460][T12259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.815179][T12259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.826163][ T5894] lo speed is unknown, defaulting to 1000 [ 260.959215][T12283] netlink: 'syz.0.1541': attribute type 1 has an invalid length. [ 260.967591][T12283] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 260.984120][T12283] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1541'. [ 261.052422][T12277] lo speed is unknown, defaulting to 1000 [ 261.508173][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 261.523783][T12308] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 261.887679][T12322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1552'. [ 262.203256][ T978] net_ratelimit: 37 callbacks suppressed [ 262.203275][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.335761][T12340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.397204][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 262.512349][T12354] netlink: 'syz.1.1558': attribute type 13 has an invalid length. [ 262.667979][T12354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.688650][T12354] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.701488][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.714407][T12354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.795952][ T200] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.846363][T12359] lo speed is unknown, defaulting to 1000 [ 262.863399][T12354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.960949][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.085649][T12374] lo speed is unknown, defaulting to 1000 [ 263.478860][T12399] ip6gre0: entered allmulticast mode [ 263.905117][T12427] bridge0: port 1(erspan0) entered blocking state [ 263.914807][T12427] bridge0: port 1(erspan0) entered disabled state [ 263.923117][T12427] erspan0: entered allmulticast mode [ 263.935565][T12427] erspan0: entered promiscuous mode [ 264.386052][T12456] IPv6: sit2: Disabled Multicast RS [ 264.398915][T12456] sit2: entered allmulticast mode [ 264.464781][T12462] validate_nla: 1 callbacks suppressed [ 264.464803][T12462] netlink: 'syz.3.1591': attribute type 2 has an invalid length. [ 264.526130][T12462] netlink: 'syz.3.1591': attribute type 2 has an invalid length. [ 264.559723][T12462] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 264.587332][T12462] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 264.648398][T12466] lo speed is unknown, defaulting to 1000 [ 265.604353][T12523] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 265.624092][T12523] __nla_validate_parse: 8 callbacks suppressed [ 265.624112][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1611'. [ 265.682893][T12523] team0: Port device geneve0 added [ 265.706093][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.730461][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.749628][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.769181][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.850494][T12533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1615'. [ 266.387384][T12547] Bluetooth: MGMT ver 1.23 [ 266.670746][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.928081][T12554] netlink: 'syz.2.1620': attribute type 2 has an invalid length. [ 266.938315][T12554] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1620'. [ 267.181211][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 267.362786][T12561] netlink: 'syz.1.1621': attribute type 3 has an invalid length. [ 267.412018][T12571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1623'. [ 267.432014][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 267.470461][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 267.484565][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 267.813221][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 267.847132][T12583] sctp: [Deprecated]: syz.2.1628 (pid 12583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.847132][T12583] Use struct sctp_sack_info instead [ 267.886838][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'. [ 268.158405][T12602] Bluetooth: MGMT ver 1.23 [ 268.325798][T12608] netlink: 'syz.1.1631': attribute type 6 has an invalid length. [ 268.429275][T12603] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 268.437236][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 268.439395][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 268.446340][T12603] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 268.503322][T12603] geneve2: left promiscuous mode [ 268.514397][T12603] gretap1: left promiscuous mode [ 268.791781][T12603] gtp0: left promiscuous mode [ 268.804427][T12603] gtp0: left allmulticast mode [ 268.825432][T12603] veth7: left promiscuous mode [ 268.846352][T12603] ipip0: left promiscuous mode [ 268.904730][T12603] vlan4: left promiscuous mode [ 268.943201][T12603] bond0: left promiscuous mode [ 268.972079][T12603] vlan4: left allmulticast mode [ 268.976979][T12603] bond0: left allmulticast mode [ 268.990366][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 269.141710][T12620] 8021q: VLANs not supported on ip6gre0 [ 269.438666][T12636] lo speed is unknown, defaulting to 1000 [ 269.779209][T12644] syzkaller1: entered promiscuous mode [ 269.785326][T12644] syzkaller1: entered allmulticast mode [ 270.156131][T12664] lo speed is unknown, defaulting to 1000 [ 270.204119][T12665] lo speed is unknown, defaulting to 1000 [ 270.991134][T12675] netlink: 'syz.4.1650': attribute type 11 has an invalid length. [ 271.019575][T12675] netlink: 'syz.4.1650': attribute type 11 has an invalid length. [ 271.055542][T12675] __nla_validate_parse: 6 callbacks suppressed [ 271.055561][T12675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1650'. [ 271.549293][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.564359][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.581757][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.659293][T12700] lo speed is unknown, defaulting to 1000 [ 271.679712][T12700] wg1 speed is unknown, defaulting to 1000 [ 271.705903][T12690] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 271.825600][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.833703][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.841900][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.850567][T12690] wg1 speed is unknown, defaulting to 1000 [ 271.859534][T12690] wg1 speed is unknown, defaulting to 1000 [ 272.107344][T12713] lo speed is unknown, defaulting to 1000 [ 272.115629][T12713] wg1 speed is unknown, defaulting to 1000 [ 272.189566][T12727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1662'. [ 272.312977][T12733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.323558][T12733] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.337073][T12733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.815535][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 272.961493][T12754] netlink: 'syz.4.1671': attribute type 9 has an invalid length. [ 272.985100][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 272.987328][T12752] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1671'. [ 273.026929][T12759] ieee802154 phy1 wpan1: encryption failed: -90 [ 273.081469][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1671'. [ 273.139145][T12764] netlink: 'syz.1.1672': attribute type 13 has an invalid length. [ 273.376827][T12774] veth0: entered promiscuous mode [ 273.411844][T12772] veth0: left promiscuous mode [ 273.513993][T12782] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 273.596490][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 273.864599][T12782] bond6: entered promiscuous mode [ 273.870272][T12782] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.986982][T12794] bridge4: port 1(veth7) entered blocking state [ 273.993750][T12794] bridge4: port 1(veth7) entered disabled state [ 274.005844][T12794] veth7: entered allmulticast mode [ 274.014655][T12794] veth7: entered promiscuous mode [ 274.052533][T12795] bond6: (slave bridge7): making interface the new active one [ 274.073676][T12795] bridge7: entered promiscuous mode [ 274.098918][T12795] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 274.124356][T12796] bridge4: port 2(veth0_to_bond) entered blocking state [ 274.150377][T12796] bridge4: port 2(veth0_to_bond) entered disabled state [ 274.170498][T12796] veth0_to_bond: entered allmulticast mode [ 274.178827][T12796] veth0_to_bond: entered promiscuous mode [ 274.292122][T12812] lo speed is unknown, defaulting to 1000 [ 274.318189][T12812] wg1 speed is unknown, defaulting to 1000 [ 274.486397][T12828] netlink: 'syz.0.1691': attribute type 2 has an invalid length. [ 274.530402][T12828] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 274.540296][T12828] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1691'. [ 275.688112][T12762] Set syz1 is full, maxelem 65536 reached [ 275.803570][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 275.889375][T12850] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1698'. [ 276.188471][ T30] audit: type=1800 audit(1759705395.736:4): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1699" name="memory.events" dev="tmpfs" ino=1880 res=0 errno=0 [ 276.303091][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1700'. [ 277.055787][T12898] netlink: 'syz.4.1709': attribute type 16 has an invalid length. [ 277.082846][T12898] netlink: 'syz.4.1709': attribute type 17 has an invalid length. [ 277.107382][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 278.295236][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.333066][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.421528][T12819] Set syz1 is full, maxelem 65536 reached [ 279.473390][T12907] netlink: 'syz.2.1711': attribute type 12 has an invalid length. [ 279.516561][ T200] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.534476][ T200] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.570697][ T200] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.579617][ T200] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.613288][T12906] lo speed is unknown, defaulting to 1000 [ 279.628543][ T200] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.639719][ T200] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.650857][T12906] wg1 speed is unknown, defaulting to 1000 [ 279.680977][ T200] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.692517][ T200] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.752095][T12921] lo speed is unknown, defaulting to 1000 [ 279.788899][T12921] wg1 speed is unknown, defaulting to 1000 [ 280.066039][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 280.238213][T12940] tipc: Enabled bearer , priority 0 [ 280.252857][T12942] syzkaller0: entered promiscuous mode [ 280.258512][T12942] syzkaller0: entered allmulticast mode [ 280.367956][T12944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.398555][T12951] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1722'. [ 280.409685][T12954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1721'. [ 280.445172][T12952] tipc: Resetting bearer [ 280.456067][T12951] hsr_slave_0: left promiscuous mode [ 280.472036][T12951] hsr_slave_1: left promiscuous mode [ 280.494153][T12947] lo speed is unknown, defaulting to 1000 [ 280.518433][T12944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.538386][T12938] tipc: Resetting bearer [ 280.556333][T12938] tipc: Disabling bearer [ 280.568282][T12947] wg1 speed is unknown, defaulting to 1000 [ 280.597662][T12944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 280.894018][T12944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 281.127016][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 281.145008][ T9591] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.197953][ T9591] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.276752][ T4395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.289349][ T4395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 281.420521][T13001] lo speed is unknown, defaulting to 1000 [ 281.502413][T13001] wg1 speed is unknown, defaulting to 1000 [ 281.546028][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 281.666137][T13022] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 281.674650][T13007] xfrm0: entered promiscuous mode [ 281.679710][T13007] xfrm0: entered allmulticast mode [ 281.695044][T13022] team0: Port device dummy0 added [ 281.704125][T13016] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 281.723601][T13016] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.749974][T13016] team0: Failed to send options change via netlink (err -105) [ 281.758790][T13016] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.768440][T13016] team0: Port device dummy0 removed [ 281.779405][T13016] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.788586][T13012] lo speed is unknown, defaulting to 1000 [ 281.810646][T13012] wg1 speed is unknown, defaulting to 1000 [ 281.827196][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'. [ 282.173978][T13035] lo speed is unknown, defaulting to 1000 [ 282.182262][T13035] wg1 speed is unknown, defaulting to 1000 [ 282.393354][T13046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1748'. [ 282.437543][T13046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 282.512803][T13052] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1750'. [ 282.585019][T13057] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1751'. [ 282.755708][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1755'. [ 282.854167][T13073] netlink: 'syz.2.1758': attribute type 4 has an invalid length. [ 283.090028][T13108] hsr0: entered allmulticast mode [ 283.101247][T13108] hsr_slave_0: entered allmulticast mode [ 283.112501][T13108] hsr_slave_1: entered allmulticast mode [ 283.153278][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 283.252324][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 283.261783][T13120] lo speed is unknown, defaulting to 1000 [ 283.269702][T13120] wg1 speed is unknown, defaulting to 1000 [ 283.515180][T13128] tipc: Enabled bearer , priority 0 [ 283.632511][T13140] syzkaller0: entered promiscuous mode [ 283.646310][T13140] syzkaller0: entered allmulticast mode [ 283.675374][T13140] tipc: Resetting bearer [ 284.143423][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1779'. [ 284.152189][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1780'. [ 284.167570][T13163] IPv6: sit1: Disabled Multicast RS [ 284.174845][T13163] sit1: entered allmulticast mode [ 284.293036][T13127] tipc: Resetting bearer [ 284.325575][T13127] tipc: Disabling bearer [ 284.646104][T13175] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 284.764864][T13183] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 284.909906][T13183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.930493][T13183] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 285.007228][T13199] tap0: tun_chr_ioctl cmd 1074025676 [ 285.014100][T13199] tap0: owner set to 0 [ 285.026730][T13203] tap0: tun_chr_ioctl cmd 1074025673 [ 285.349194][T13218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 285.356916][T13218] bridge0: port 2(bond9) entered blocking state [ 285.363603][T13218] bridge0: port 2(bond9) entered disabled state [ 285.371146][T13218] bond9: entered allmulticast mode [ 285.385345][T13218] bond9: entered promiscuous mode [ 285.524750][T13218] 8021q: adding VLAN 0 to HW filter on device bond10 [ 285.534112][T13218] bridge0: port 3(bond10) entered blocking state [ 285.541482][T13218] bridge0: port 3(bond10) entered disabled state [ 285.548827][T13218] bond10: entered allmulticast mode [ 285.557826][T13218] bond10: entered promiscuous mode [ 285.585154][T13218] 8021q: adding VLAN 0 to HW filter on device bond11 [ 285.592486][T13218] bridge0: port 4(bond11) entered blocking state [ 285.598964][T13218] bridge0: port 4(bond11) entered disabled state [ 285.606603][T13218] bond11: entered allmulticast mode [ 285.614442][T13218] bond11: entered promiscuous mode [ 285.655218][T13218] 8021q: adding VLAN 0 to HW filter on device bond12 [ 285.662790][T13218] bridge0: port 5(bond12) entered blocking state [ 285.669554][T13218] bridge0: port 5(bond12) entered disabled state [ 285.678088][T13218] bond12: entered allmulticast mode [ 285.686217][T13218] bond12: entered promiscuous mode [ 285.730761][T13218] 8021q: adding VLAN 0 to HW filter on device bond13 [ 285.738165][T13218] bridge0: port 6(bond13) entered blocking state [ 285.746201][T13218] bridge0: port 6(bond13) entered disabled state [ 285.753380][T13218] bond13: entered allmulticast mode [ 285.761543][T13218] bond13: entered promiscuous mode [ 285.848849][T13218] 8021q: adding VLAN 0 to HW filter on device bond14 [ 285.887747][T13218] bridge0: port 7(bond14) entered blocking state [ 285.911539][T13218] bridge0: port 7(bond14) entered disabled state [ 285.932361][T13218] bond14: entered allmulticast mode [ 285.946145][T13218] bond14: entered promiscuous mode [ 285.953096][T13223] lo speed is unknown, defaulting to 1000 [ 286.020913][T13218] 8021q: adding VLAN 0 to HW filter on device bond15 [ 286.028127][T13218] bridge0: port 8(bond15) entered blocking state [ 286.035532][T13218] bridge0: port 8(bond15) entered disabled state [ 286.042843][T13218] bond15: entered allmulticast mode [ 286.051772][T13218] bond15: entered promiscuous mode [ 286.057815][T13223] wg1 speed is unknown, defaulting to 1000 [ 286.064093][T13248] macsec0: entered allmulticast mode [ 286.143981][T13241] lo speed is unknown, defaulting to 1000 [ 286.189178][T13241] wg1 speed is unknown, defaulting to 1000 [ 286.362219][T13258] bridge: RTM_NEWNEIGH with invalid ether address [ 286.876316][T13294] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 286.898559][T13299] netlink: 'syz.3.1815': attribute type 3 has an invalid length. [ 286.910793][T13285] tipc: Enabling of bearer rejected, failed to enable media [ 286.968889][T13300] vti0: entered promiscuous mode [ 287.150271][ T30] audit: type=1804 audit(1759705406.696:5): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1822" name="/newroot/358/memory.events" dev="tmpfs" ino=1852 res=1 errno=0 [ 287.177706][T13312] __nla_validate_parse: 3 callbacks suppressed [ 287.177725][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 287.206931][ T30] audit: type=1800 audit(1759705406.696:6): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1822" name="memory.events" dev="tmpfs" ino=1852 res=0 errno=0 [ 287.247023][ T30] audit: type=1804 audit(1759705406.726:7): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1822" name="/newroot/358/memory.events" dev="tmpfs" ino=1852 res=1 errno=0 [ 287.428296][T13321] lo speed is unknown, defaulting to 1000 [ 287.466889][T13321] wg1 speed is unknown, defaulting to 1000 [ 287.702481][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 287.738478][T13347] bond0: entered promiscuous mode [ 287.743711][T13347] dummy0: entered promiscuous mode [ 287.750024][T13347] veth1_to_bridge: entered promiscuous mode [ 287.756871][T13347] debugfs: 'hsr1' already exists in 'hsr' [ 287.762860][T13347] Cannot create hsr debugfs directory [ 287.768331][T13347] hsr1: entered promiscuous mode [ 287.784038][T13351] tipc: Enabled bearer , priority 0 [ 287.811192][T13351] syzkaller0: entered promiscuous mode [ 287.816704][T13351] syzkaller0: entered allmulticast mode [ 287.899976][T13351] tipc: Resetting bearer [ 287.951218][T13348] tipc: Resetting bearer [ 287.977124][T13356] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1833'. [ 287.987066][T13348] tipc: Disabling bearer [ 288.059165][T13356] tipc: Failed to remove unknown binding: 66,1,1/4269801488:2422892515/2422892517 [ 288.068974][T13356] tipc: Failed to remove unknown binding: 66,1,1/4269801488:2422892515/2422892517 [ 288.290291][T13373] vlan0: entered allmulticast mode [ 288.295462][T13373] bridge_slave_0: entered allmulticast mode [ 288.327244][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1840'. [ 288.396918][T13382] netlink: 'syz.1.1842': attribute type 26 has an invalid length. [ 288.618094][T13402] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1843'. [ 288.637327][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1843'. [ 288.675254][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1843'. [ 288.704168][T13408] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 288.716650][T13408] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1848'. [ 288.735384][T13398] netlink: 'syz.0.1843': attribute type 4 has an invalid length. [ 288.744402][T13407] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 288.767607][T13407] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1848'. [ 289.032381][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 289.059148][T13419] netlink: 'syz.4.1850': attribute type 12 has an invalid length. [ 289.935310][T13448] lo speed is unknown, defaulting to 1000 [ 289.964302][T13448] wg1 speed is unknown, defaulting to 1000 [ 290.024452][T13451] bridge0: entered promiscuous mode [ 290.389969][T13469] lo speed is unknown, defaulting to 1000 [ 290.398249][T13469] wg1 speed is unknown, defaulting to 1000 [ 290.674718][T13482] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 290.730111][T13482] netlink: 'syz.1.1865': attribute type 4 has an invalid length. [ 290.778551][T13482] NCSI netlink: No device for ifindex 3321692160 [ 290.803686][T13489] tipc: Resetting bearer [ 291.049862][T13489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.067366][T13489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.145811][T13489] erspan0: left promiscuous mode [ 291.228914][ T9587] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.251131][ T9587] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.283784][T13505] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 291.311135][ T9587] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.325277][ T9587] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.335628][ T9587] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.344828][ T9587] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.406237][T13506] bond7: (slave bridge10): making interface the new active one [ 291.415867][T13506] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 291.424998][ T9587] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.436957][ T9587] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.500199][T13519] netlink: 'syz.2.1877': attribute type 3 has an invalid length. [ 291.591276][T13522] sch_tbf: burst 5 is lower than device lo mtu (1294) ! [ 291.816991][T13534] lo speed is unknown, defaulting to 1000 [ 291.843026][T13534] wg1 speed is unknown, defaulting to 1000 [ 292.097795][ T30] audit: type=1800 audit(1759705411.646:8): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1878" name="cgroup.controllers" dev="tmpfs" ino=2105 res=0 errno=0 [ 292.268389][T13543] lo speed is unknown, defaulting to 1000 [ 292.315968][T13552] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 292.454778][T13543] wg1 speed is unknown, defaulting to 1000 [ 292.799506][T13528] __nla_validate_parse: 9 callbacks suppressed [ 292.799528][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 292.865660][T13574] netlink: 'syz.1.1890': attribute type 15 has an invalid length. [ 292.938440][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1890'. [ 292.981736][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1890'. [ 293.100736][T13580] netlink: 'syz.0.1891': attribute type 21 has an invalid length. [ 293.139099][T13569] lo speed is unknown, defaulting to 1000 [ 293.147033][T13580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1891'. [ 293.183589][T13569] wg1 speed is unknown, defaulting to 1000 [ 293.649977][T13584] lo speed is unknown, defaulting to 1000 [ 293.719084][T13584] wg1 speed is unknown, defaulting to 1000 [ 294.036536][T13611] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1898'. [ 294.061101][T13611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1898'. [ 294.219785][T13618] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1900'. [ 294.262118][T13623] lo speed is unknown, defaulting to 1000 [ 294.363806][T13623] wg1 speed is unknown, defaulting to 1000 [ 294.364469][T13632] IPVS: Unknown mcast interface: vcan0 [ 294.396604][T13630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1904'. [ 294.411988][T13628] lo speed is unknown, defaulting to 1000 [ 294.412861][T13630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 294.438100][T13630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1904'. [ 294.499523][T13628] wg1 speed is unknown, defaulting to 1000 [ 294.666167][T13638] lo speed is unknown, defaulting to 1000 [ 294.677038][T13638] wg1 speed is unknown, defaulting to 1000 [ 294.876632][T13649] netlink: 'syz.2.1909': attribute type 7 has an invalid length. [ 294.895819][T13649] netlink: 'syz.2.1909': attribute type 8 has an invalid length. [ 294.947119][T13651] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 294.955470][T13651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.413727][T13676] netlink: 'syz.0.1916': attribute type 19 has an invalid length. [ 295.938439][T13705] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 295.993265][T13709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.061512][T13713] lo speed is unknown, defaulting to 1000 [ 296.098979][T13713] wg1 speed is unknown, defaulting to 1000 [ 296.256016][T13716] lo speed is unknown, defaulting to 1000 [ 296.272928][T13716] wg1 speed is unknown, defaulting to 1000 [ 296.516878][T13731] macvtap1: entered allmulticast mode [ 296.522670][T13731] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 296.546907][T13731] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 296.675936][T13722] lo speed is unknown, defaulting to 1000 [ 296.713391][T13730] lo speed is unknown, defaulting to 1000 [ 296.719195][T13722] wg1 speed is unknown, defaulting to 1000 [ 296.731800][T13730] wg1 speed is unknown, defaulting to 1000 [ 296.919888][T13738] bond0: (slave 0!): Releasing backup interface [ 296.927082][T13738] !: left promiscuous mode [ 296.932641][T13738] veth0_to_bond: left allmulticast mode [ 296.938296][T13738] veth0_to_bond: left promiscuous mode [ 296.944601][T13738] bridge4: port 2(veth0_to_bond) entered disabled state [ 296.956883][T13738] bond0: (slave bond_slave_0): Releasing backup interface [ 296.966009][T13738] bond_slave_0: left promiscuous mode [ 296.977261][T13738] bond0: (slave bond_slave_1): Releasing backup interface [ 297.009031][T13738] bond_slave_1: left promiscuous mode [ 297.034210][T13738] team0: Port device team_slave_0 removed [ 297.058984][T13738] team0: Port device team_slave_1 removed [ 297.073573][T13738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.124984][T13738] team0: Port device geneve0 removed [ 297.141519][T13738] veth7: left allmulticast mode [ 297.148820][T13738] veth7: left promiscuous mode [ 297.156983][T13738] bridge4: port 1(veth7) entered disabled state [ 297.168743][T13738] bond2: (slave bond3): Releasing backup interface [ 297.179992][T13742] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 297.190848][T13078] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.199790][T13078] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.236736][T13078] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.374981][T13078] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.516518][T13754] bond0: Device is already in use. [ 297.607219][T13758] 8021q: VLANs not supported on nlmon0 [ 297.652848][T13758] tipc: Enabled bearer , priority 0 [ 297.743811][T13758] syzkaller0: entered promiscuous mode [ 297.749970][T13758] syzkaller0: entered allmulticast mode [ 297.787830][T13770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 297.810040][T13767] validate_nla: 1 callbacks suppressed [ 297.810057][T13767] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 297.826056][T13751] tipc: Resetting bearer [ 297.856239][T13770] __nla_validate_parse: 13 callbacks suppressed [ 297.856260][T13770] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1940'. [ 297.894185][T13751] tipc: Disabling bearer [ 297.909336][T13771] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 298.118588][T13788] sch_fq: defrate 0 ignored. [ 298.176602][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 298.218823][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 298.320791][T13803] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1946'. [ 298.439197][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 298.460651][T13806] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1949'. [ 298.493982][T13811] openvswitch: netlink: Message has 4 unknown bytes. [ 298.652912][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1954'. [ 298.801054][T13827] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 298.898297][T13831] macsec1: entered allmulticast mode [ 298.904028][T13831] bridge0: entered allmulticast mode [ 298.912200][T13831] bridge0: port 1(macsec1) entered blocking state [ 298.919399][T13831] bridge0: port 1(macsec1) entered disabled state [ 298.951121][T13831] bridge0: left allmulticast mode [ 299.023311][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 299.034252][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 299.045307][T13838] netlink: 'syz.2.1960': attribute type 12 has an invalid length. [ 299.078521][T13078] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.078601][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 299.110941][T13078] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.130309][T13838] netlink: 'syz.2.1960': attribute type 12 has an invalid length. [ 299.146865][T13078] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.155789][T13078] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.412985][T13867] lo speed is unknown, defaulting to 1000 [ 299.425982][T13867] wg1 speed is unknown, defaulting to 1000 [ 300.496991][T13935] Bluetooth: MGMT ver 1.23 [ 300.575780][T13935] geneve2: entered promiscuous mode [ 300.612361][ T9587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.625292][ T9587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.689356][ T9587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.705013][ T9587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.028172][T13946] lo speed is unknown, defaulting to 1000 [ 301.042787][T13946] wg1 speed is unknown, defaulting to 1000 [ 301.199816][T13955] block nbd1: Unsupported socket: should be TCP or UNIX. [ 301.667870][T13970] lo speed is unknown, defaulting to 1000 [ 301.689165][T13978] lo speed is unknown, defaulting to 1000 [ 301.695017][T13970] wg1 speed is unknown, defaulting to 1000 [ 301.737782][T13978] wg1 speed is unknown, defaulting to 1000 [ 301.841607][T13990] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 303.185889][T14016] : entered promiscuous mode [ 303.257961][T14016] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 303.526639][T14031] __nla_validate_parse: 17 callbacks suppressed [ 303.526660][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 303.626641][T14044] lo: entered allmulticast mode [ 303.646705][T14044] lo: left allmulticast mode [ 303.800745][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2012'. [ 303.818584][T14058] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 303.942252][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 303.989355][T14065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'. [ 304.441750][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2018'. [ 304.450170][T14067] lo speed is unknown, defaulting to 1000 [ 304.461814][T14067] wg1 speed is unknown, defaulting to 1000 [ 304.530039][T14077] lo speed is unknown, defaulting to 1000 [ 304.543280][T14085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2018'. [ 304.554527][T14077] wg1 speed is unknown, defaulting to 1000 [ 304.554808][T14092] netlink: 'syz.3.2019': attribute type 39 has an invalid length. [ 304.662405][T14094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2019'. [ 304.671802][T14094] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2019'. [ 304.681922][T14094] netlink: 'syz.3.2019': attribute type 5 has an invalid length. [ 304.690776][T14094] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2019'. [ 304.977203][T14102] lo speed is unknown, defaulting to 1000 [ 304.989353][T14102] wg1 speed is unknown, defaulting to 1000 [ 305.264307][T14117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.328130][T14121] syzkaller1: entered promiscuous mode [ 305.336860][T14121] syzkaller1: entered allmulticast mode [ 305.351735][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 305.974206][T14172] lo speed is unknown, defaulting to 1000 [ 305.986338][T14172] wg1 speed is unknown, defaulting to 1000 [ 306.010306][ T5848] Bluetooth: hci3: link tx timeout [ 306.015586][ T5848] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.025021][ T5840] Bluetooth: hci3: link tx timeout [ 306.031179][ T5840] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.038980][ T5840] Bluetooth: hci3: link tx timeout [ 306.044343][ T5840] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.520050][T14211] netlink: 'syz.4.2052': attribute type 12 has an invalid length. [ 306.782170][T14229] netlink: 'syz.0.2060': attribute type 30 has an invalid length. [ 306.993787][T14242] syzkaller1: entered promiscuous mode [ 307.012342][T14242] syzkaller1: entered allmulticast mode [ 307.027127][T14234] syzkaller1: left promiscuous mode [ 307.034779][T14234] syzkaller1: left allmulticast mode [ 307.316757][T14258] 8021q: adding VLAN 0 to HW filter on device bond9 [ 307.325398][T14258] bond9: entered promiscuous mode [ 307.331126][T14258] bond9: entered allmulticast mode [ 307.337372][T14258] team0: Port device bond9 added [ 308.110346][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 308.358925][T14309] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 308.949780][T14335] __nla_validate_parse: 15 callbacks suppressed [ 308.949801][T14335] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2089'. [ 308.994632][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 309.006307][T14340] tipc: Enabled bearer , priority 0 [ 309.029524][T14340] syzkaller0: entered promiscuous mode [ 309.047374][T14340] syzkaller0: entered allmulticast mode [ 309.065686][T14345] netlink: 'syz.0.2094': attribute type 21 has an invalid length. [ 309.078744][T14345] netlink: 'syz.0.2094': attribute type 22 has an invalid length. [ 309.095598][T14345] netlink: 'syz.0.2094': attribute type 23 has an invalid length. [ 309.109058][T14345] netlink: 'syz.0.2094': attribute type 25 has an invalid length. [ 309.117489][T14340] tipc: Resetting bearer [ 309.130459][T14345] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2094'. [ 309.197417][T14347] tipc: Resetting bearer [ 309.234074][T14347] tipc: Disabling bearer [ 309.327596][T14362] netlink: 'syz.0.2096': attribute type 12 has an invalid length. [ 309.335824][T14362] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2096'. [ 309.465160][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2100'. [ 309.517748][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 309.595056][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 309.890447][T14395] netlink: 'syz.4.2108': attribute type 2 has an invalid length. [ 309.912841][T14395] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 309.932221][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 310.182046][T14415] lo speed is unknown, defaulting to 1000 [ 310.208057][T14415] wg1 speed is unknown, defaulting to 1000 [ 310.434340][T14435] lo speed is unknown, defaulting to 1000 [ 310.442188][T14435] wg1 speed is unknown, defaulting to 1000 [ 310.715627][T14444] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2121'. [ 310.954915][T14450] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2123'. [ 310.982435][T14454] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 310.987612][T14453] macsec1: entered allmulticast mode [ 310.996119][T14453] bridge0: entered allmulticast mode [ 311.003546][T14453] bridge0: port 1(macsec1) entered blocking state [ 311.010906][T14453] bridge0: port 1(macsec1) entered disabled state [ 311.225687][T14453] bridge0: left allmulticast mode [ 311.372229][T14463] netlink: 'syz.0.2130': attribute type 3 has an invalid length. [ 311.414151][T14463] syz_tun: entered allmulticast mode [ 311.432046][T14467] tipc: Enabled bearer , priority 0 [ 311.439596][T14463] hsr0: left allmulticast mode [ 311.444786][T14463] hsr_slave_0: left allmulticast mode [ 311.451655][T14463] hsr_slave_1: left allmulticast mode [ 311.458027][T14467] syzkaller0: entered promiscuous mode [ 311.459022][T14463] rdma_rxe: rxe_newlink: failed to add macvtap0 [ 311.468859][T14467] syzkaller0: entered allmulticast mode [ 311.528798][T14467] tipc: Resetting bearer [ 311.546274][T14462] syz_tun: left allmulticast mode [ 311.621521][T14470] lo speed is unknown, defaulting to 1000 [ 311.702001][T14470] wg1 speed is unknown, defaulting to 1000 [ 311.950392][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 311.950408][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 311.961029][T14486] netlink: 'syz.3.2137': attribute type 10 has an invalid length. [ 312.520808][ T6040] tipc: Node number set to 48535035 [ 312.668404][T14506] macsec1: entered promiscuous mode [ 312.674257][T14506] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 312.684979][T14506] macsec1: entered allmulticast mode [ 312.690398][T14506] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 313.124242][T14543] nbd: socks must be embedded in a SOCK_ITEM attr [ 313.151255][T14545] nbd: socks must be embedded in a SOCK_ITEM attr [ 313.330281][T14552] pim6reg1: entered promiscuous mode [ 313.335636][T14552] pim6reg1: entered allmulticast mode [ 313.845210][T14566] bond4 (unregistering): Released all slaves [ 313.894008][T14587] pimreg: entered allmulticast mode [ 313.905276][T14587] pimreg: left allmulticast mode [ 314.043179][T14597] __nla_validate_parse: 46 callbacks suppressed [ 314.043203][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 314.164312][T14604] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 314.216233][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'. [ 314.247559][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2169'. [ 314.271858][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 314.296150][T14615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2172'. [ 314.305384][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 314.417882][T14622] veth9: entered promiscuous mode [ 314.504079][T14636] netlink: 'syz.2.2178': attribute type 11 has an invalid length. [ 314.686257][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'. [ 314.899657][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 315.164526][T14669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.229485][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 317.233785][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.669341][T14689] syzkaller0: left promiscuous mode [ 374.675739][T14689] syzkaller0: left allmulticast mode [ 374.852558][T14704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2195'. [ 374.855999][T14703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2193'. [ 374.881625][T14705] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2194'. [ 375.287114][T14737] sctp: [Deprecated]: syz.1.2201 (pid 14737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.287114][T14737] Use struct sctp_sack_info instead [ 375.294236][T14739] lo speed is unknown, defaulting to 1000 [ 375.322508][T14739] wg1 speed is unknown, defaulting to 1000 [ 375.428912][T14749] tipc: Enabling of bearer rejected, already enabled [ 375.569802][T14757] netlink: 'syz.1.2206': attribute type 13 has an invalid length. [ 375.578051][T14758] netlink: 'syz.1.2206': attribute type 13 has an invalid length. [ 375.592578][T14758] netlink: 'syz.1.2206': attribute type 17 has an invalid length. [ 375.600667][T14757] netlink: 'syz.1.2206': attribute type 17 has an invalid length. [ 375.609917][T14758] netlink: 'syz.1.2206': attribute type 27 has an invalid length. [ 375.624684][T14757] netlink: 'syz.1.2206': attribute type 27 has an invalid length. [ 375.637532][T14757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2206'. [ 375.647316][T14758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2206'. [ 375.671851][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 375.709357][T14755] 8021q: VLANs not supported on caif0 [ 376.038088][T14775] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 376.056794][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 376.126523][T14786] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 376.642931][T14810] netlink: 'syz.0.2216': attribute type 4 has an invalid length. [ 376.671706][T14810] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2216'. [ 377.098249][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 377.122306][T14833] bridge6: entered allmulticast mode [ 377.133415][T14833] bond0: (slave rose0): Error: Device can not be enslaved while up [ 377.176115][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 377.262386][T14845] netlink: 'syz.2.2223': attribute type 16 has an invalid length. [ 377.270376][T14845] netlink: 'syz.2.2223': attribute type 17 has an invalid length. [ 377.333824][T13090] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.356698][T13090] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.424130][T13090] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.456025][T13090] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.644804][T14862] ipip1: entered promiscuous mode [ 377.666622][T14859] lo speed is unknown, defaulting to 1000 [ 377.728097][T14865] geneve2: entered promiscuous mode [ 377.737261][T14865] geneve2: entered allmulticast mode [ 377.783433][T14859] wg1 speed is unknown, defaulting to 1000 [ 377.945418][T14875] lo speed is unknown, defaulting to 1000 [ 377.985948][T14875] wg1 speed is unknown, defaulting to 1000 [ 378.676835][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.195138][T14964] netem: change failed [ 380.223000][T14965] lo speed is unknown, defaulting to 1000 [ 380.233038][T14965] wg1 speed is unknown, defaulting to 1000 [ 380.484967][T14978] __nla_validate_parse: 5 callbacks suppressed [ 380.484986][T14978] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2258'. [ 380.549959][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'. [ 380.591926][T14985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2258'. [ 380.782992][T14999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2261'. [ 380.839131][T14999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2261'. [ 380.931953][T15004] veth1_to_bond: entered allmulticast mode [ 380.965480][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 381.065548][T14999] veth1_to_bond (unregistering): left allmulticast mode [ 381.111694][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'. [ 381.126813][T15019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.135436][T15019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.246904][T15026] ipvlan0: entered promiscuous mode [ 381.394112][T15037] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2273'. [ 381.406918][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 382.102277][T15067] validate_nla: 4 callbacks suppressed [ 382.102297][T15067] netlink: 'syz.0.2283': attribute type 9 has an invalid length. [ 382.158189][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 382.172535][T15067] syzkaller1: entered promiscuous mode [ 382.178045][T15067] syzkaller1: entered allmulticast mode [ 382.240699][T15077] xt_socket: unknown flags 0xfc [ 382.622855][T15095] lo speed is unknown, defaulting to 1000 [ 382.629682][T15095] wg1 speed is unknown, defaulting to 1000 [ 382.921235][T15106] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 382.928928][T15106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.719769][T15135] netlink: 'syz.1.2303': attribute type 83 has an invalid length. [ 384.361233][T15168] netlink: 'syz.2.2311': attribute type 5 has an invalid length. [ 384.377215][T15170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.384544][T15170] IPv6: NLM_F_CREATE should be set when creating new route [ 384.389086][T15168] geneve2: entered promiscuous mode [ 384.397482][T15168] geneve2: entered allmulticast mode [ 384.404894][T13086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 384.418785][T13086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 384.434215][T13086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 384.466053][T13086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 384.539549][T15181] wg1 speed is unknown, defaulting to 1000 [ 385.047773][T15215] netlink: 'syz.1.2324': attribute type 8 has an invalid length. [ 385.199539][T15218] wg1 speed is unknown, defaulting to 1000 [ 385.455074][T15240] netlink: 'syz.0.2330': attribute type 1 has an invalid length. [ 385.561252][T15230] vlan5: entered promiscuous mode [ 385.566488][T15230] ip6gretap0: entered promiscuous mode [ 386.091744][T15286] __nla_validate_parse: 13 callbacks suppressed [ 386.091764][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 386.097468][T15287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2338'. [ 386.121263][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 386.303747][T15275] sit4: entered promiscuous mode [ 386.342486][T15280] wg1 speed is unknown, defaulting to 1000 [ 386.607368][T15314] wg1 speed is unknown, defaulting to 1000 [ 386.821280][T15327] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2347'. [ 386.852187][T15327] netlink: 'syz.3.2347': attribute type 3 has an invalid length. [ 386.892249][T15331] netlink: 'syz.2.2348': attribute type 12 has an invalid length. [ 386.916481][T15327] ip6gre0: left allmulticast mode [ 386.926003][T15327] gre0: left promiscuous mode [ 386.940253][T15327] gre0: left allmulticast mode [ 386.973795][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 386.985185][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 386.995764][T15337] netlink: 'syz.1.2350': attribute type 13 has an invalid length. [ 387.009295][T15327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.057343][T15331] wg1 speed is unknown, defaulting to 1000 [ 387.094045][T15334] wg1 speed is unknown, defaulting to 1000 [ 387.497930][T15365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2355'. [ 387.709056][T15374] pim6reg1: entered promiscuous mode [ 387.731084][T15374] pim6reg1: entered allmulticast mode [ 387.968204][T15387] netlink: 'syz.2.2360': attribute type 11 has an invalid length. [ 387.976164][T15387] netlink: 'syz.2.2360': attribute type 4 has an invalid length. [ 387.985229][T15387] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2360'. [ 388.118520][T15401] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.2363'. [ 388.152093][T15401] netlink: zone id is out of range [ 388.163749][T15400] syzkaller1: entered promiscuous mode [ 388.169352][T15400] syzkaller1: entered allmulticast mode [ 388.176350][T15404] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2366'. [ 388.187192][T15400] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 388.312252][T15411] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 388.443815][T15411] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.527665][T15420] veth11: entered promiscuous mode [ 388.563436][T15420] bond10: (slave veth11): Enslaving as an active interface with an up link [ 388.957396][T15453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.973635][T15457] tipc: Enabled bearer , priority 0 [ 388.994470][T15456] tipc: Enabling of bearer rejected, already enabled [ 389.031679][T15457] syzkaller0: entered promiscuous mode [ 389.045786][T15457] syzkaller0: entered allmulticast mode [ 389.218396][T15451] tipc: Resetting bearer [ 389.331725][T15451] tipc: Disabling bearer [ 389.663141][T15485] wg1 speed is unknown, defaulting to 1000 [ 389.740368][T15484] wg1 speed is unknown, defaulting to 1000 [ 389.832144][T15500] nbd: socks must be embedded in a SOCK_ITEM attr [ 389.846512][T15495] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 390.933753][T15559] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 391.041547][T15558] wg1 speed is unknown, defaulting to 1000 [ 391.057779][T15552] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 391.237906][T15575] __nla_validate_parse: 9 callbacks suppressed [ 391.237926][T15575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.536210][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.560444][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.590924][T15595] netlink: 'syz.4.2412': attribute type 5 has an invalid length. [ 391.592905][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.624241][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.649109][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.661493][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.671692][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.682059][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.691250][T15585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 391.739350][T15599] macsec0: entered promiscuous mode [ 391.746797][T15599] macsec0: entered allmulticast mode [ 391.928748][T15614] batman_adv: batadv0: Adding interface: ip6gretap1 [ 391.938526][T15614] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.965746][T15614] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 392.245053][T15638] netlink: 'syz.1.2427': attribute type 8 has an invalid length. [ 392.252937][T15640] netem: change failed [ 392.554885][T15658] netlink: 'syz.0.2432': attribute type 13 has an invalid length. [ 392.567971][T15658] netlink: 'syz.0.2432': attribute type 17 has an invalid length. [ 392.646744][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.660952][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.686383][T15658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.809275][T15663] wg1 speed is unknown, defaulting to 1000 [ 392.919235][T15676] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 394.147518][T15736] wg1 speed is unknown, defaulting to 1000 [ 394.496701][T15765] nbd: illegal input index 65508 [ 395.107692][T15798] wg1 speed is unknown, defaulting to 1000 [ 395.579834][T15815] gretap2: entered promiscuous mode [ 396.121116][T15834] delete_channel: no stack [ 396.219340][T15839] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 396.359438][T15849] __nla_validate_parse: 197 callbacks suppressed [ 396.359459][T15849] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2483'. [ 396.532281][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'. [ 396.557267][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'. [ 396.584589][T15867] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 396.622957][T15863] team1: entered promiscuous mode [ 396.628035][T15863] team1: entered allmulticast mode [ 396.634125][T15863] 8021q: adding VLAN 0 to HW filter on device team1 [ 396.669549][T15876] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 396.970578][T15895] nicvf0: entered promiscuous mode [ 397.051788][T15262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 397.070345][T15262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 397.139093][T15904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.158600][T15890] wg1 speed is unknown, defaulting to 1000 [ 397.211177][T15261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 397.220475][T15261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 397.936512][T15929] netlink: 'syz.4.2501': attribute type 13 has an invalid length. [ 397.953773][T15929] netlink: 'syz.4.2501': attribute type 17 has an invalid length. [ 397.980940][T15929] lo: left promiscuous mode [ 398.011717][T15929] lo: left allmulticast mode [ 398.082776][T15929] tunl0: left promiscuous mode [ 398.087719][T15929] tunl0: left allmulticast mode [ 398.105146][T15929] gre0: left promiscuous mode [ 398.113089][T15929] gre0: left allmulticast mode [ 398.135745][T15929] gretap0: left promiscuous mode [ 398.149078][T15929] gretap0: left allmulticast mode [ 398.158413][T15942] tipc: Failed to remove unknown binding: 66,1,1/1656338133:4059045145/4059045147 [ 398.171374][T15942] tipc: Failed to remove unknown binding: 66,1,1/1656338133:4059045145/4059045147 [ 398.181341][T15942] tipc: Failed to remove unknown binding: 66,1,1/1656338133:4059045145/4059045147 [ 398.207534][T15929] erspan0: left promiscuous mode [ 398.224073][T15929] erspan0: left allmulticast mode [ 398.256471][T15929] ip_vti0: left promiscuous mode [ 398.273700][T15929] ip_vti0: left allmulticast mode [ 398.284484][T15929] ip6_vti0: left promiscuous mode [ 398.289553][T15929] ip6_vti0: left allmulticast mode [ 398.295808][T15946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.308227][T15929] sit0: left promiscuous mode [ 398.318174][T15929] sit0: left allmulticast mode [ 398.334979][T15929] ip6tnl0: left promiscuous mode [ 398.340930][T15929] ip6tnl0: left allmulticast mode [ 398.349239][T15929] ip6gre0: left promiscuous mode [ 398.367229][T15929] ip6gre0: left allmulticast mode [ 398.378611][T15929] ip6gretap0: left promiscuous mode [ 398.387187][T15929] ip6gretap0: left allmulticast mode [ 398.397507][T15929] vcan0: left allmulticast mode [ 398.407217][T15929] bond0: left promiscuous mode [ 398.412495][T15929] bond_slave_0: left promiscuous mode [ 398.418389][T15929] bond_slave_1: left promiscuous mode [ 398.426116][T15929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.435374][T15929] team0: left promiscuous mode [ 398.440591][T15929] team_slave_0: left promiscuous mode [ 398.446298][T15929] team_slave_1: left promiscuous mode [ 398.452007][T15929] bond9: left promiscuous mode [ 398.457078][T15929] team0: left allmulticast mode [ 398.463914][T15929] team_slave_0: left allmulticast mode [ 398.469533][T15929] team_slave_1: left allmulticast mode [ 398.475151][T15929] bond9: left allmulticast mode [ 398.482198][T15929] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.553292][T15952] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 398.580266][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2505'. [ 398.595171][T15929] dummy0: left promiscuous mode [ 398.600057][T15929] dummy0: left allmulticast mode [ 398.608719][T15929] nlmon0: left promiscuous mode [ 398.613828][T15929] nlmon0: left allmulticast mode [ 398.620918][T15929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.711571][T15945] xfrm0: entered promiscuous mode [ 398.729207][T15945] xfrm0: entered allmulticast mode [ 398.780666][T15934] wg1 speed is unknown, defaulting to 1000 [ 398.804058][T15943] wg1 speed is unknown, defaulting to 1000 [ 398.934502][T15937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.416508][T15981] netlink: 'syz.4.2512': attribute type 13 has an invalid length. [ 399.553096][T15976] netlink: 'syz.3.2510': attribute type 6 has an invalid length. [ 399.638456][T15988] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 399.863917][T16002] netlink: 'syz.1.2520': attribute type 8 has an invalid length. [ 399.941860][T16007] openvswitch: netlink: Message has -2 unknown bytes. [ 399.965822][T16007] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 400.151716][T15981] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 400.159448][T15981] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 400.235207][T16003] netlink: 'syz.1.2520': attribute type 29 has an invalid length. [ 400.315354][T15262] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 400.329352][T15262] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 400.345175][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2525'. [ 400.362517][T16015] tipc: Enabled bearer , priority 0 [ 400.383815][T16013] syzkaller0: entered promiscuous mode [ 400.389332][T16013] syzkaller0: entered allmulticast mode [ 400.401305][T16021] tipc: Enabled bearer , priority 0 [ 400.410299][T15262] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 400.422565][T15262] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 400.434016][T16021] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 400.447249][T16021] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 400.456146][T16021] tipc: Resetting bearer [ 400.502338][T16013] tipc: Resetting bearer [ 400.508785][T16029] tipc: Enabled bearer , priority 0 [ 400.566388][T16012] tipc: Resetting bearer [ 400.599397][T16012] tipc: Disabling bearer [ 400.612740][T16023] syzkaller0: entered promiscuous mode [ 400.618366][T16023] syzkaller0: entered allmulticast mode [ 400.624077][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 400.644715][T16021] tipc: Resetting bearer [ 400.758959][T16029] tipc: Resetting bearer [ 400.780232][T16043] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2532'. [ 400.820460][T16022] tipc: Resetting bearer [ 400.904014][T16022] tipc: Disabling bearer [ 401.079134][T16063] netlink: 'syz.3.2537': attribute type 1 has an invalid length. [ 401.088280][T16063] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2537'. [ 401.109073][T16065] bond0: Unable to set up delay as MII monitoring is disabled [ 401.142647][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'. [ 401.178809][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 401.238286][T16075] syz_tun: entered allmulticast mode [ 401.270252][T16075] syz_tun: left allmulticast mode [ 401.314186][ T9591] tipc: Resetting bearer [ 401.396315][T16083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'. [ 401.405574][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'. [ 401.460288][ T6040] tipc: Node number set to 2508512456 [ 401.530980][T16090] veth11: entered promiscuous mode [ 401.558883][T16103] netlink: 'syz.0.2549': attribute type 10 has an invalid length. [ 401.598161][T16100] veth11: entered promiscuous mode [ 401.646941][T16106] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.738474][T16111] IPVS: set_ctl: invalid protocol: 44 172.20.20.35:20004 [ 401.805496][T16116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2551'. [ 401.835219][T16116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 401.898871][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 402.049970][T16123] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 402.387371][T16134] wg1 speed is unknown, defaulting to 1000 [ 402.412590][T16141] wg1 speed is unknown, defaulting to 1000 [ 402.465109][T16144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.485118][T16144] batadv0: entered promiscuous mode [ 402.505928][T16144] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 402.577685][T16142] wg1 speed is unknown, defaulting to 1000 [ 403.149427][T16175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2569'. [ 403.195527][T16175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2569'. [ 403.928717][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2580'. [ 404.093726][T16220] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 404.175414][T16229] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2583'. [ 404.419237][T16240] validate_nla: 2 callbacks suppressed [ 404.419260][T16240] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 404.464379][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 404.639268][T16253] netlink: 'syz.0.2592': attribute type 4 has an invalid length. [ 404.783902][T16258] netlink: 'syz.1.2595': attribute type 4 has an invalid length. [ 404.854319][T16258] wg1 speed is unknown, defaulting to 1000 [ 404.856234][T16266] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 404.868943][T16266] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 405.818077][T16292] wg1 speed is unknown, defaulting to 1000 [ 406.368513][T16333] tipc: Enabled bearer , priority 0 [ 406.402456][T16321] __nla_validate_parse: 23 callbacks suppressed [ 406.402477][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.422999][T16333] tipc: Resetting bearer [ 406.449883][T16332] tipc: Disabling bearer [ 406.487763][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.547658][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.576984][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.643938][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.688890][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.729445][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.762851][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.789560][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 406.806093][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 407.262182][T16361] wg1 speed is unknown, defaulting to 1000 [ 407.473978][T16370] tipc: Enabled bearer , priority 0 [ 407.493341][T16370] syzkaller0: entered promiscuous mode [ 407.540519][T16370] syzkaller0: entered allmulticast mode [ 407.572189][T16370] syzkaller0: mtu less than device minimum [ 407.642199][T16369] tipc: Resetting bearer [ 407.732108][T16369] tipc: Disabling bearer [ 409.052126][T16440] netlink: 'syz.2.2642': attribute type 12 has an invalid length. [ 409.982333][T16461] netlink: 'syz.4.2646': attribute type 16 has an invalid length. [ 411.372815][T16517] syzkaller1: entered promiscuous mode [ 411.379631][T16517] syzkaller1: entered allmulticast mode [ 411.532642][T16517] batadv0: left promiscuous mode [ 411.541191][T16517] veth1_to_bond: left promiscuous mode [ 411.546753][T16517] veth1_to_bond: left allmulticast mode [ 411.558633][T16517] gtp0: left promiscuous mode [ 411.564203][T16517] gtp0: left allmulticast mode [ 411.570498][ T5840] block nbd4: Receive control failed (result -32) [ 411.589955][T16517] veth3: left promiscuous mode [ 411.611399][T16517] geneve2: left promiscuous mode [ 411.622649][T16517] vlan2: left allmulticast mode [ 411.630442][T16517] bond0: left allmulticast mode [ 411.650168][T16517] bond_slave_0: left allmulticast mode [ 411.668701][T16517] bond_slave_1: left allmulticast mode [ 411.684794][T16517] bond3: left promiscuous mode [ 411.705566][T16517] bond3: left allmulticast mode [ 411.711962][T16517] ip6tnl1: left promiscuous mode [ 411.718291][T16517] bond6: left promiscuous mode [ 411.729803][T16517] bridge7: left promiscuous mode [ 411.738639][T16517] sit1: left allmulticast mode [ 411.745201][T16517] macsec1: left promiscuous mode [ 411.750709][T16517] macsec1: left allmulticast mode [ 411.756479][T16517] veth11: left promiscuous mode [ 411.761708][T16517] team1: left promiscuous mode [ 411.766653][T16517] team1: left allmulticast mode [ 411.771905][T16517] nicvf0: left promiscuous mode [ 411.778521][T16517] syzkaller1: left promiscuous mode [ 411.783971][T16517] syzkaller1: left allmulticast mode [ 412.109870][T16536] syzkaller0: entered promiscuous mode [ 412.121639][T16538] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 412.209131][T16536] syzkaller0: entered allmulticast mode [ 412.316720][T16548] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 412.347025][T16548] __nla_validate_parse: 20 callbacks suppressed [ 412.347048][T16548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2675'. [ 412.516692][T16555] !: renamed from dummy0 [ 412.614641][T16574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.644708][T16578] netlink: 'syz.3.2683': attribute type 1 has an invalid length. [ 412.694882][T16581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.698024][T16578] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 412.707654][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.718269][T15265] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 412.737341][T16578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 412.976010][T16578] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 412.988479][T16578] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 413.009680][T16578] bond6 (unregistering): Released all slaves [ 413.051805][T16592] veth0_to_bridge: entered promiscuous mode [ 413.063524][T16591] veth0_to_bridge: left promiscuous mode [ 413.435474][T16575] delete_channel: no stack [ 413.475340][T16619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2691'. [ 413.505825][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 413.562817][T16619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 413.684436][T16633] openvswitch: netlink: Key 12 has unexpected len 4258 expected 2 [ 413.776849][T15263] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.806470][T15263] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.831622][T15263] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.847784][T15263] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.007604][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 414.031584][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'. [ 414.117954][ T6040] IPVS: starting estimator thread 0... [ 414.136179][T16655] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 414.173864][T16655] bond11: entered promiscuous mode [ 414.179828][T16655] 8021q: adding VLAN 0 to HW filter on device bond11 [ 414.193416][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2703'. [ 414.202919][T16655] bond11: entered allmulticast mode [ 414.220478][T16656] IPVS: using max 32 ests per chain, 76800 per kthread [ 414.280653][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 414.361141][T16663] tipc: Enabling of bearer rejected, already enabled [ 414.507881][T16671] wg1 speed is unknown, defaulting to 1000 [ 414.977954][ T30] audit: type=1107 audit(1759705534.526:9): pid=16681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.012786][T16692] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 415.380662][T16714] tun0: tun_chr_ioctl cmd 1074025675 [ 415.399709][T16714] tun0: persist enabled [ 415.418996][T16714] tun0: tun_chr_ioctl cmd 1074025675 [ 415.437333][T16714] tun0: persist disabled [ 415.458590][T16714] tun0: tun_chr_ioctl cmd 1074025675 [ 415.478052][T16714] tun0: persist disabled [ 415.522585][T16714] tun0: tun_chr_ioctl cmd 1074025675 [ 415.538801][T16714] tun0: persist enabled [ 415.547611][T16727] tun0: tun_chr_ioctl cmd 1074025673 [ 416.103201][T16773] syz_tun: entered allmulticast mode [ 416.165866][T16773] wg1 speed is unknown, defaulting to 1000 [ 416.265331][T16795] netlink: 'syz.3.2740': attribute type 6 has an invalid length. [ 416.440339][T16804] batman_adv: batadv0: Adding interface: dummy0 [ 416.446636][T16804] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.499564][T16804] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 416.541894][T16767] syz_tun: left allmulticast mode [ 416.687650][T16820] netlink: 'syz.1.2746': attribute type 5 has an invalid length. [ 416.828694][T16832] netlink: zone id is out of range [ 416.863626][T16832] netlink: zone id is out of range [ 416.868974][T16832] netlink: get zone limit has 8 unknown bytes [ 416.924378][T16826] wg1 speed is unknown, defaulting to 1000 [ 416.978222][T16841] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 417.063674][T16840] wg1 speed is unknown, defaulting to 1000 [ 417.324547][T16855] netlink: 'syz.2.2757': attribute type 3 has an invalid length. [ 417.450867][T16865] sctp: [Deprecated]: syz.3.2758 (pid 16865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.450867][T16865] Use struct sctp_sack_info instead [ 417.771007][T16887] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 417.864942][T16887] __nla_validate_parse: 18 callbacks suppressed [ 417.864962][T16887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2753'. [ 418.160973][T16898] tipc: Enabled bearer , priority 0 [ 418.167828][T16906] syzkaller0: entered promiscuous mode [ 418.180982][T16906] syzkaller0: entered allmulticast mode [ 418.236195][T16898] tipc: Resetting bearer [ 418.269130][T16910] dvmrp12: entered allmulticast mode [ 418.285110][T16894] tipc: Resetting bearer [ 418.327351][T16894] tipc: Disabling bearer [ 418.338958][T16909] dvmrp12: left allmulticast mode [ 418.376063][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 418.567979][T16918] wg1: entered promiscuous mode [ 418.680133][T16918] wg1: entered allmulticast mode [ 418.820793][ T5974] wg1 speed is unknown, defaulting to 1000 [ 418.826676][ T5974] s: Port: 1 Link ACTIVE [ 419.998295][T16924] wg1 speed is unknown, defaulting to 1000 [ 420.010730][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2773'. [ 420.021103][T16923] wg1 speed is unknown, defaulting to 1000 [ 420.073875][T16927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2774'. [ 420.091838][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 420.258062][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 420.303039][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2776'. [ 420.321377][T16943] netlink: 'syz.3.2775': attribute type 13 has an invalid length. [ 420.339725][T16943] netlink: 'syz.3.2775': attribute type 17 has an invalid length. [ 420.384647][T16943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.440696][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 420.449712][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 420.527748][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 420.581376][T16940] wg1 speed is unknown, defaulting to 1000 [ 420.598734][T16943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.754114][T16958] veth1_virt_wifi: entered promiscuous mode [ 420.770355][T16958] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 421.114716][T16973] wg1 speed is unknown, defaulting to 1000 [ 421.630039][T16988] wg1 speed is unknown, defaulting to 1000 [ 421.747419][ T5974] IPVS: starting estimator thread 0... [ 421.840690][T17001] IPVS: using max 26 ests per chain, 62400 per kthread [ 422.416170][T15263] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.440287][T15263] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.468539][T15263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.487161][T15263] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.725533][T17052] bond11: left promiscuous mode [ 422.851732][T17057] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 423.060528][T17064] __nla_validate_parse: 14 callbacks suppressed [ 423.060546][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 423.105329][T17064] vlan0: entered promiscuous mode [ 423.116794][T17064] erspan0: entered promiscuous mode [ 423.156725][T17071] netlink: 'syz.4.2812': attribute type 1 has an invalid length. [ 423.172038][T17071] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2812'. [ 423.295344][T17073] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2813'. [ 423.321379][ T30] audit: type=1804 audit(1759705542.876:10): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2813" name="/newroot/574/cgroup.controllers" dev="tmpfs" ino=2951 res=1 errno=0 [ 423.381476][ T30] audit: type=1800 audit(1759705542.876:11): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2813" name="cgroup.controllers" dev="tmpfs" ino=2951 res=0 errno=0 [ 423.408200][ T30] audit: type=1800 audit(1759705542.896:12): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2813" name="cgroup.controllers" dev="tmpfs" ino=2951 res=0 errno=0 [ 423.517859][T17085] bond0: (slave syz_tun): Releasing backup interface [ 423.532712][T17082] can: request_module (can-proto-3) failed. [ 423.543553][T17085] syz_tun: left promiscuous mode [ 423.567567][T17085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.584793][T17082] can: request_module (can-proto-3) failed. [ 423.637200][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 423.837801][T17105] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 423.854893][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2821'. [ 425.580715][T17120] syz.0.2825: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.601268][T17120] CPU: 1 UID: 0 PID: 17120 Comm: syz.0.2825 Not tainted syzkaller #0 PREEMPT(full) [ 425.601295][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.601310][T17120] Call Trace: [ 425.601318][T17120] [ 425.601326][T17120] dump_stack_lvl+0x189/0x250 [ 425.601349][T17120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.601361][T17120] ? __pfx__printk+0x10/0x10 [ 425.601378][T17120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 425.601392][T17120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 425.601407][T17120] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 425.601422][T17120] warn_alloc+0x214/0x310 [ 425.601439][T17120] ? __pfx_warn_alloc+0x10/0x10 [ 425.601459][T17120] ? __get_vm_area_node+0x28f/0x300 [ 425.601473][T17120] ? veth_dev_init+0x363/0x570 [ 425.601487][T17120] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 425.601500][T17120] ? veth_newlink+0x5d4/0xa60 [ 425.601525][T17120] ? alloc_pages_mpol+0x3cd/0x4a0 [ 425.601539][T17120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.601552][T17120] ? __kasan_kmalloc_large+0x1c/0xa0 [ 425.601566][T17120] ? rcu_is_watching+0x15/0xb0 [ 425.601579][T17120] ? veth_dev_init+0x363/0x570 [ 425.601590][T17120] ? veth_dev_init+0x363/0x570 [ 425.601600][T17120] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 425.601613][T17120] ? veth_dev_init+0x363/0x570 [ 425.601629][T17120] veth_dev_init+0x363/0x570 [ 425.601645][T17120] register_netdevice+0x6bf/0x1ae0 [ 425.601666][T17120] ? snprintf+0xda/0x120 [ 425.601681][T17120] ? __pfx_register_netdevice+0x10/0x10 [ 425.601694][T17120] ? __pfx_snprintf+0x10/0x10 [ 425.601708][T17120] ? __asan_memset+0x22/0x50 [ 425.601720][T17120] ? dev_addr_mod+0x2ce/0x3d0 [ 425.601748][T17120] veth_newlink+0x5d4/0xa60 [ 425.601773][T17120] ? __pfx_veth_newlink+0x10/0x10 [ 425.601794][T17120] ? css_rstat_updated+0x23a/0x4f0 [ 425.601884][T17120] ? validate_linkmsg+0x765/0x950 [ 425.601922][T17120] ? __pfx_veth_newlink+0x10/0x10 [ 425.601946][T17120] rtnl_newlink_create+0x310/0xb00 [ 425.601974][T17120] ? __lock_acquire+0xab9/0xd20 [ 425.601987][T17120] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 425.602002][T17120] ? __pfx___mutex_lock+0x10/0x10 [ 425.602019][T17120] ? ns_capable+0x8a/0xf0 [ 425.602033][T17120] rtnl_newlink+0x16e4/0x1c80 [ 425.602053][T17120] ? __pfx_rtnl_newlink+0x10/0x10 [ 425.602065][T17120] ? __pfx___schedule+0x10/0x10 [ 425.602119][T17120] ? __dev_queue_xmit+0x1d79/0x3b50 [ 425.602136][T17120] ? __lock_acquire+0xab9/0xd20 [ 425.602160][T17120] ? __pfx_rtnl_newlink+0x10/0x10 [ 425.602170][T17120] rtnetlink_rcv_msg+0x7cc/0xb70 [ 425.602182][T17120] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 425.602192][T17120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.602206][T17120] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 425.602227][T17120] netlink_rcv_skb+0x208/0x470 [ 425.602237][T17120] ? rcu_is_watching+0x15/0xb0 [ 425.602249][T17120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.602260][T17120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.602278][T17120] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.602293][T17120] netlink_unicast+0x82c/0x9e0 [ 425.602314][T17120] ? __pfx_netlink_unicast+0x10/0x10 [ 425.602330][T17120] ? netlink_sendmsg+0x642/0xb30 [ 425.602339][T17120] ? skb_put+0x11b/0x210 [ 425.602353][T17120] netlink_sendmsg+0x805/0xb30 [ 425.602369][T17120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.602382][T17120] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.602398][T17120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.602414][T17120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.602425][T17120] __sock_sendmsg+0x21c/0x270 [ 425.602443][T17120] ____sys_sendmsg+0x505/0x830 [ 425.602458][T17120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.602476][T17120] ? import_iovec+0x74/0xa0 [ 425.602491][T17120] ___sys_sendmsg+0x21f/0x2a0 [ 425.602505][T17120] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.602539][T17120] ? __fget_files+0x2a/0x420 [ 425.602553][T17120] ? __fget_files+0x3a0/0x420 [ 425.602572][T17120] __x64_sys_sendmsg+0x19b/0x260 [ 425.602587][T17120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.602605][T17120] ? rcu_is_watching+0x15/0xb0 [ 425.602620][T17120] ? do_syscall_64+0xbe/0x3b0 [ 425.602633][T17120] do_syscall_64+0xfa/0x3b0 [ 425.602642][T17120] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.602657][T17120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.602668][T17120] ? clear_bhb_loop+0x60/0xb0 [ 425.602681][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.602691][T17120] RIP: 0033:0x7f61f0b8eec9 [ 425.602703][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.602713][T17120] RSP: 002b:00007f61f1a89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.602726][T17120] RAX: ffffffffffffffda RBX: 00007f61f0de6090 RCX: 00007f61f0b8eec9 [ 425.602734][T17120] RDX: 8ae257a062cc3564 RSI: 0000200000000200 RDI: 0000000000000009 [ 425.602741][T17120] RBP: 00007f61f0c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.602748][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.602754][T17120] R13: 00007f61f0de6128 R14: 00007f61f0de6090 R15: 00007ffcf52bf958 [ 425.602772][T17120] [ 425.602782][T17120] Mem-Info: [ 426.104418][T17120] active_anon:3950 inactive_anon:0 isolated_anon:0 [ 426.104418][T17120] active_file:3204 inactive_file:40011 isolated_file:0 [ 426.104418][T17120] unevictable:768 dirty:70 writeback:0 [ 426.104418][T17120] slab_reclaimable:12639 slab_unreclaimable:278325 [ 426.104418][T17120] mapped:37300 shmem:1365 pagetables:957 [ 426.104418][T17120] sec_pagetables:0 bounce:0 [ 426.104418][T17120] kernel_misc_reclaimable:0 [ 426.104418][T17120] free:1144590 free_pcp:13224 free_cma:0 [ 426.151467][T17120] Node 0 active_anon:15800kB inactive_anon:0kB active_file:12816kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149200kB dirty:280kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13808kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.183915][T17120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.214566][T17120] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.244104][T17120] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 426.249901][T17120] Node 0 DMA32 free:667380kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15760kB inactive_anon:0kB active_file:12816kB inactive_file:159516kB unevictable:1536kB writepending:280kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:36216kB local_pcp:20552kB free_cma:0kB [ 426.282372][T17120] lowmem_reserve[]: 0 0 0 0 0 [ 426.287149][T17120] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.315784][T17120] lowmem_reserve[]: 0 0 0 0 0 [ 426.320716][T17120] Node 1 Normal free:3895620kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16696kB local_pcp:9540kB free_cma:0kB [ 426.352070][T17120] lowmem_reserve[]: 0 0 0 0 0 [ 426.356825][T17120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.369686][T17120] Node 0 DMA32: 315*4kB (ME) 1427*8kB (UME) 327*16kB (M) 440*32kB (UM) 250*64kB (UME) 111*128kB (UME) 54*256kB (UM) 23*512kB (UME) 14*1024kB (UME) 2*2048kB (UE) 137*4096kB (UM) = 667380kB [ 426.388299][T17120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 426.399850][T17120] Node 1 Normal: 199*4kB (UME) 55*8kB (UME) 45*16kB (UME) 153*32kB (UME) 38*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895620kB [ 426.417822][T17120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.427440][T17120] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 426.436963][T17120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.446761][T17120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.456107][T17120] 44577 total pagecache pages [ 426.460901][T17120] 0 pages in swap cache [ 426.465056][T17120] Free swap = 124996kB [ 426.469208][T17120] Total swap = 124996kB [ 426.473432][T17120] 2097051 pages RAM [ 426.477224][T17120] 0 pages HighMem/MovableOnly [ 426.481937][T17120] 423781 pages reserved [ 426.486167][T17120] 0 pages cma reserved [ 427.476813][T17131] tipc: Resetting bearer [ 427.555687][T17144] IPv6: sit6: Disabled Multicast RS [ 427.564207][T17158] tipc: Enabling of bearer rejected, already enabled [ 427.573288][T17161] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 427.607231][T17161] netlink: 'syz.2.2832': attribute type 3 has an invalid length. [ 427.615447][T17161] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 427.624314][T17161] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2832'. [ 427.633733][T17161] NCSI netlink: No device for ifindex 0 [ 427.672954][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2833'. [ 427.725594][T17168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2834'. [ 427.730817][T17164] sctp: [Deprecated]: syz.1.2833 (pid 17164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.730817][T17164] Use struct sctp_sack_info instead [ 428.039416][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2836'. [ 428.098576][T13082] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20001 - 0 [ 428.129064][T17185] wg1 speed is unknown, defaulting to 1000 [ 428.235299][T17184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.252109][T17190] block nbd5: Unsupported socket: should be TCP or UNIX. [ 428.340982][T13082] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20001 - 0 [ 428.362700][T13082] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20001 - 0 [ 428.496743][T17184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.545726][T13082] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20001 - 0 [ 428.642642][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.652897][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.662477][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.676530][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.684606][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.749419][T17184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.773569][T17205] tipc: Enabling of bearer rejected, already enabled [ 428.783466][T17204] tipc: Enabling of bearer rejected, already enabled [ 428.794875][T17210] syzkaller0: entered promiscuous mode [ 428.801851][T17210] syzkaller0: entered allmulticast mode [ 428.867924][T17206] wg1 speed is unknown, defaulting to 1000 [ 428.916292][T17184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.049507][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 429.123937][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 429.133209][T17228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 429.183102][T17228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 429.218867][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2848'. [ 429.228878][T13082] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.312540][T17238] dvmrp0: entered allmulticast mode [ 429.330035][T13082] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.362058][T13078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.403855][T13078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.422204][T17246] netlink: 'syz.1.2854': attribute type 3 has an invalid length. [ 429.535553][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2855'. [ 429.545587][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2855'. [ 429.645681][T17253] erspan0: left allmulticast mode [ 429.658285][T17253] erspan0: left promiscuous mode [ 429.679028][T17253] bridge0: port 1(erspan0) entered disabled state [ 429.702377][T17253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 429.855066][T17262] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 430.216453][T13093] bond4 (unregistering): (slave gretap1): Releasing active interface [ 430.660569][T13093] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 430.750349][ T5840] Bluetooth: hci0: command tx timeout [ 430.802032][T13093] bond7 (unregistering): (slave bridge10): Releasing active interface [ 430.937375][T13093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.947426][T13093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.956894][T13093] bond0 (unregistering): Released all slaves [ 430.969757][T13093] bond1 (unregistering): Released all slaves [ 430.983289][T13093] bond2 (unregistering): Released all slaves [ 431.080226][T13093] bond3 (unregistering): Released all slaves [ 431.179839][T13093] bond4 (unregistering): Released all slaves [ 431.277378][T13093] bond5 (unregistering): Released all slaves [ 431.373675][T13093] bond6 (unregistering): Released all slaves [ 431.386410][T13093] bond7 (unregistering): Released all slaves [ 431.481673][T13093] bond8 (unregistering): Released all slaves [ 431.577538][T13093] team0: Port device bond9 removed [ 431.583939][T13093] bond9 (unregistering): Released all slaves [ 431.687848][T13093] bond10 (unregistering): (slave veth11): Releasing backup interface [ 431.696859][T13093] bond10 (unregistering): Released all slaves [ 431.790949][T13093] bond11 (unregistering): Released all slaves [ 431.835528][T17268] ip6tnl3: entered promiscuous mode [ 431.880139][T17268] ip6tnl3: entered allmulticast mode [ 431.946867][T17272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2860'. [ 431.981480][T17272] nbd: couldn't find a device at index 0 [ 431.982539][T17206] chnl_net:caif_netlink_parms(): no params data found [ 431.999730][T13093] : left promiscuous mode [ 432.057738][T17273] wg1 speed is unknown, defaulting to 1000 [ 432.157981][T13093] tipc: Disabling bearer [ 432.171884][T13093] tipc: Left network mode [ 432.181151][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 432.236450][T17288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2863'. [ 432.423713][T17290] tipc: Enabled bearer , priority 0 [ 432.485217][T17287] syzkaller0: entered promiscuous mode [ 432.497653][T17287] syzkaller0: entered allmulticast mode [ 432.614859][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.623180][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.634743][T17206] bridge_slave_0: entered allmulticast mode [ 432.643249][T17206] bridge_slave_0: entered promiscuous mode [ 432.697421][T17293] tipc: Resetting bearer [ 432.763495][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.780401][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.797424][T17206] bridge_slave_1: entered allmulticast mode [ 432.814430][T17206] bridge_slave_1: entered promiscuous mode [ 432.837605][ T5840] Bluetooth: hci0: command tx timeout [ 432.872783][T17286] tipc: Resetting bearer [ 432.897689][T17286] tipc: Disabling bearer [ 432.998943][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.031889][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.079622][T17316] vxcan1: entered allmulticast mode [ 433.112241][T17206] team0: Port device team_slave_0 added [ 433.118411][T17316] vxcan1: left allmulticast mode [ 433.141663][T17206] team0: Port device team_slave_1 added [ 433.217747][T17316] raw_sendmsg: syz.0.2868 forgot to set AF_INET. Fix it! [ 433.294475][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.316300][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.356162][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.385197][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.392471][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.434413][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.627635][T17206] hsr_slave_0: entered promiscuous mode [ 433.646099][T17206] hsr_slave_1: entered promiscuous mode [ 433.848394][T17353] netlink: 'syz.0.2879': attribute type 33 has an invalid length. [ 434.139343][T13093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.159145][T13093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.173296][T13093] batman_adv: batadv0: Removing interface: dummy0 [ 434.454442][T17379] __nla_validate_parse: 11 callbacks suppressed [ 434.454462][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 434.910752][ T5840] Bluetooth: hci0: command tx timeout [ 434.962705][T17406] netlink: 'syz.1.2888': attribute type 7 has an invalid length. [ 435.245233][T13093] team0 (unregistering): Port device team_slave_1 removed [ 435.286126][T13093] team0 (unregistering): Port device team_slave_0 removed [ 436.066186][T17412] mac80211_hwsim hwsim6 ªªªªª;: renamed from wlan0 [ 436.314490][T13093] IPVS: stop unused estimator thread 0... [ 436.362755][T17429] geneve2: entered promiscuous mode [ 436.536234][T17440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 436.628651][T17446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.699467][T17442] netlink: 'syz.0.2897': attribute type 10 has an invalid length. [ 436.707924][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'. [ 436.711770][T17451] sctp: [Deprecated]: syz.1.2901 (pid 17451) Use of int in maxseg socket option. [ 436.711770][T17451] Use struct sctp_assoc_value instead [ 436.849604][T17206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 436.891901][T17206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 436.933281][T17206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 436.956699][T17462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.973848][T17206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.992640][ T5840] Bluetooth: hci0: command tx timeout [ 437.128367][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.156385][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.172535][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.179775][T15263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.251729][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.259011][ T9597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.593012][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2909'. [ 437.624046][T17495] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2909'. [ 438.035888][T17511] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2912'. [ 438.073062][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.141291][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2913'. [ 438.362501][T17528] sctp: [Deprecated]: syz.1.2916 (pid 17528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.362501][T17528] Use struct sctp_sack_info instead [ 438.408669][T17528] netdevsim netdevsim1: Direct firmware load for ./bus failed with error -2 [ 438.423363][T17528] netdevsim netdevsim1: Falling back to sysfs fallback for: ./bus [ 438.476791][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'. [ 438.509237][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'. [ 438.776627][T17540] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 438.847130][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2917'. [ 438.871354][T17206] veth0_vlan: entered promiscuous mode [ 438.932562][T17206] veth1_vlan: entered promiscuous mode [ 439.011789][T17206] veth0_macvtap: entered promiscuous mode [ 439.033774][T17206] veth1_macvtap: entered promiscuous mode [ 439.108167][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.125111][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.153896][T17550] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 439.156152][ T9597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.204317][T17550] netlink: 'syz.0.2919': attribute type 10 has an invalid length. [ 439.225676][ T9597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.235899][ T9597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.247956][T13078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.386848][ T9597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.398197][ T9597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.517281][ T9597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.527026][ T9597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.561971][T17569] __nla_validate_parse: 4 callbacks suppressed [ 439.561990][T17569] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2923'. [ 439.593925][T17568] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 439.610779][T17568] netlink: 'syz.3.2926': attribute type 3 has an invalid length. [ 439.628090][T17569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.628896][T17568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2926'. [ 439.645705][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 439.683928][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 439.708648][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 439.722522][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 439.727221][T17578] syz.2.2927 uses old SIOCAX25GETINFO [ 439.752285][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 439.785646][T17576] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2927'. [ 440.115361][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.193018][T17596] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2933'. [ 440.235627][T17596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'. [ 440.424346][T17604] batman_adv: batadv0: Adding interface: ipvlan2 [ 440.466071][T17604] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.520252][T17604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.550984][T17604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.570406][T17604] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 440.621922][T17612] block nbd5: Unsupported socket: should be TCP or UNIX. [ 440.656787][T17607] bond1: option updelay: invalid value (18446744072065443590) [ 440.670460][T17607] bond1: option updelay: allowed values 0 - 2147483647 [ 440.682649][T17607] bond1 (unregistering): Released all slaves [ 440.716435][T17610] pim6reg: entered allmulticast mode [ 440.790438][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.802040][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.812488][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.831465][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.845482][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.913442][T17619] wg1 speed is unknown, defaulting to 1000 [ 440.961793][ T9597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.049705][ T9597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.137201][ T9597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.261774][T17631] syzkaller1: entered promiscuous mode [ 441.267293][T17631] syzkaller1: entered allmulticast mode [ 441.325388][T17636] netlink: 'syz.3.2944': attribute type 11 has an invalid length. [ 441.335636][T17636] netlink: 'syz.3.2944': attribute type 11 has an invalid length. [ 441.349958][ T9597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.521976][T17640] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 441.701243][T17619] chnl_net:caif_netlink_parms(): no params data found [ 441.897055][ T9597] tipc: Resetting bearer [ 442.025698][T17654] Bluetooth: MGMT ver 1.23 [ 442.043415][ T9597] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 442.060141][ T9597] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0a:9c:47:4e:93:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 442.274768][ T9597] bond2 (unregistering): (slave gretap1): Releasing active interface [ 442.283178][ T9597] gretap1 (unregistering): left allmulticast mode [ 442.325502][ T9597] tipc: Disabling bearer [ 442.535040][ T9597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.544127][ T9597] bond_slave_0: left promiscuous mode [ 442.551520][ T9597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.561902][ T9597] bond_slave_1: left promiscuous mode [ 442.567707][ T9597] bond0 (unregistering): Released all slaves [ 442.666817][ T9597] bond1 (unregistering): Released all slaves [ 442.772176][ T9597] bond2 (unregistering): Released all slaves [ 442.890782][ T9597] bond3 (unregistering): Released all slaves [ 442.903198][ T9597] bond4 (unregistering): Released all slaves [ 442.910353][ T5852] Bluetooth: hci1: command tx timeout [ 443.008713][ T9597] bond5 (unregistering): (slave veth3): Releasing active interface [ 443.017670][ T9597] bond5 (unregistering): Released all slaves [ 443.030630][ T9597] bond6 (unregistering): Released all slaves [ 443.043366][ T9597] bond7 (unregistering): Released all slaves [ 443.056177][ T9597] bond8 (unregistering): Released all slaves [ 443.163330][ T9597] bond9 (unregistering): Released all slaves [ 443.431693][ T9597] : left promiscuous mode [ 443.519387][T17619] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.537234][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.552413][T17619] bridge_slave_0: entered allmulticast mode [ 443.577226][T17619] bridge_slave_0: entered promiscuous mode [ 443.704058][ T9597] tipc: Left network mode [ 443.704222][T17619] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.719058][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.726476][T17619] bridge_slave_1: entered allmulticast mode [ 443.734640][T17619] bridge_slave_1: entered promiscuous mode [ 443.790870][ T9597] IPVS: stopping backup sync thread 9521 ... [ 443.832829][T17619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.844436][T17693] netlink: 'syz.1.2956': attribute type 83 has an invalid length. [ 443.857594][T17619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.920034][T17693] bond0: (slave 0!): Releasing backup interface [ 443.933648][T17693] ! (unregistering): left promiscuous mode [ 444.008306][T17696] tipc: Started in network mode [ 444.018770][T17696] tipc: Node identity b684e9e2c36c, cluster identity 4711 [ 444.027092][T17696] tipc: Enabled bearer , priority 0 [ 444.036509][T17619] team0: Port device team_slave_0 added [ 444.045772][T17702] syzkaller0: entered promiscuous mode [ 444.053302][T17702] syzkaller0: entered allmulticast mode [ 444.085425][T17619] team0: Port device team_slave_1 added [ 444.110904][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 444.118367][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.174586][T17696] tipc: Resetting bearer [ 444.198697][T17689] tipc: Resetting bearer [ 444.217950][T17689] tipc: Disabling bearer [ 444.227366][T17619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.234738][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.261920][T17619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.275987][T17619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.283086][T17619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.310617][T17619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.611800][T17619] hsr_slave_0: entered promiscuous mode [ 444.618635][T17619] hsr_slave_1: entered promiscuous mode [ 444.656579][T17619] debugfs: 'hsr0' already exists in 'hsr' [ 444.670253][T17619] Cannot create hsr debugfs directory [ 444.779855][T17737] __nla_validate_parse: 9 callbacks suppressed [ 444.779873][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'. [ 444.913355][ T978] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 444.925295][ T978] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 444.933724][ T978] CPU: 1 UID: 0 PID: 978 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 444.943037][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.953291][ T978] Workqueue: events l2cap_info_timeout [ 444.958775][ T978] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 444.964681][ T978] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e [ 444.984297][ T978] RSP: 0018:ffffc90003aaf7a8 EFLAGS: 00010206 [ 444.990375][ T978] RAX: dffffc0000000000 RBX: ffffffff8919b8b8 RCX: 62a5966865f05100 [ 444.998347][ T978] RDX: 0000000000000000 RSI: ffffffff8919b8b8 RDI: 000000000000004b [ 445.006312][ T978] RBP: ffffffff8a449805 R08: 0000000000000001 R09: 0000000000000000 [ 445.014272][ T978] R10: dffffc0000000000 R11: ffffffff8a4497c0 R12: 0000000000000000 [ 445.022238][ T978] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 445.030204][ T978] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 445.039128][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.045701][ T978] CR2: 000000110c38a09d CR3: 0000000050642000 CR4: 00000000003526f0 [ 445.053668][ T978] Call Trace: [ 445.056949][ T978] [ 445.059879][ T978] __kasan_check_byte+0x12/0x40 [ 445.064730][ T978] lock_acquire+0x8d/0x360 [ 445.069138][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.074337][ T978] ? __cancel_work+0x254/0x2e0 [ 445.079102][ T978] lock_sock_nested+0x48/0x100 [ 445.083862][ T978] ? l2cap_sock_ready_cb+0x45/0x140 [ 445.089067][ T978] l2cap_sock_ready_cb+0x45/0x140 [ 445.094094][ T978] l2cap_conn_start+0x76d/0xe50 [ 445.098946][ T978] ? __pfx_l2cap_conn_start+0x10/0x10 [ 445.104316][ T978] ? __lock_acquire+0xab9/0xd20 [ 445.109184][ T978] ? __pfx___mutex_lock+0x10/0x10 [ 445.114203][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 445.119931][ T978] l2cap_info_timeout+0x68/0xa0 [ 445.124804][ T978] ? process_scheduled_works+0x9ef/0x17b0 [ 445.130525][ T978] process_scheduled_works+0xade/0x17b0 [ 445.136086][ T978] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.142081][ T978] worker_thread+0x8a0/0xda0 [ 445.146675][ T978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 445.153007][ T978] ? __kthread_parkme+0x7b/0x200 [ 445.157943][ T978] kthread+0x711/0x8a0 [ 445.162016][ T978] ? __pfx_worker_thread+0x10/0x10 [ 445.167118][ T978] ? __pfx_kthread+0x10/0x10 [ 445.171713][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.176996][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.182196][ T978] ? __pfx_kthread+0x10/0x10 [ 445.186868][ T978] ret_from_fork+0x436/0x7d0 [ 445.191539][ T978] ? __pfx_ret_from_fork+0x10/0x10 [ 445.196760][ T978] ? __switch_to_asm+0x39/0x70 [ 445.201520][ T978] ? __switch_to_asm+0x33/0x70 [ 445.206281][ T978] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 445.210866][ T978] ret_from_fork_asm+0x1a/0x30 [ 445.215632][ T978] [ 445.218662][ T978] Modules linked in: [ 445.223116][ T978] ---[ end trace 0000000000000000 ]--- [ 445.232021][ T5848] Bluetooth: hci1: command 0x041b tx timeout [ 445.355631][ T978] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 445.362270][ T978] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e [ 445.388316][ T978] RSP: 0018:ffffc90003aaf7a8 EFLAGS: 00010206 [ 445.395718][ T978] RAX: dffffc0000000000 RBX: ffffffff8919b8b8 RCX: 62a5966865f05100 [ 445.409012][ T978] RDX: 0000000000000000 RSI: ffffffff8919b8b8 RDI: 000000000000004b [ 445.418309][ T978] RBP: ffffffff8a449805 R08: 0000000000000001 R09: 0000000000000000 [ 445.427318][ T978] R10: dffffc0000000000 R11: ffffffff8a4497c0 R12: 0000000000000000 [ 445.430231][T17747] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2972'. [ 445.470244][ T978] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 445.478267][ T978] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 445.522453][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.539518][ T978] CR2: 00007f3494590f98 CR3: 000000005064c000 CR4: 00000000003526f0 [ 445.561355][ T978] Kernel panic - not syncing: Fatal exception [ 445.567728][ T978] Kernel Offset: disabled [ 445.572051][ T978] Rebooting in 86400 seconds..