last executing test programs: 1m37.204409621s ago: executing program 2 (id=1857): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) (async) socketpair(0x10, 0xa, 0x2000010, &(0x7f0000000100)={0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x1}, 0x8) r4 = socket(0x2b, 0xa, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@initdev, @local}, &(0x7f00000000c0)=0xc) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x96f73d4026be5e74, &(0x7f0000000200)=0x4801, 0x4) 1m37.169880677s ago: executing program 2 (id=1858): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'syz_tun\x00', 0x2}) 1m37.02384083s ago: executing program 2 (id=1861): socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%ps \x00'}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) accept$ax25(r2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x7a7e0000) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000780)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000780)=0x10) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffef3, &(0x7f0000000200), 0x1}, 0x0) sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) 1m36.042155064s ago: executing program 2 (id=1874): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000006401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009aebd4b939d22597945226e11d60e4749bf4f591b85a18431b86826e4f45e4e7d4ee1e0a22df764687469f9fd78c936bbb8fe1608e6be4c2bcd44fd7e5485a100ed5a87df7c7ac050cda343788c816932d1779a7b3c28d779babf5806a212a3fb2bbb5db4d69696fff52c4cbf8abd13a0a5ff5a40237acb1c9c800389317e58fb92a299e46df93911cd0dae60ac357f87a6b1d65eaed354e1777102c8544cd33a4d46735aac7c9877a167329a47e23b201c6f1de486cbb2da7ede1b40c0ebb293c8b52b7ba026a5b093f7434f8fcb7ed0909cac165"], 0x190) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) (async) close(r0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) 1m35.806276692s ago: executing program 2 (id=1878): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x5f2bc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x6, [0xfaeb, 0x0, 0x2b29]}}, @pad1]}, 0x30) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="2409d70128bf03cccdaa211c2d5599444c22db27597f62038c978a7242ff05752698cb0ef9bf8af9a4529e161f", 0x2d) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x5, 0x0, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async, rerun: 32) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async, rerun: 32) recvmsg$qrtr(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x38, 0x40010001) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r11, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) 1m35.496378817s ago: executing program 2 (id=1881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x20, 0x80, 0x6, 0x7, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@generic={0x89, 0x6, 'z}ck'}, @lsrr={0x83, 0xb, 0x12, [@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) (rerun: 64) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000000580)=""/194, 0xc2, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r7, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0xffffffffffffffff, 0x1}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x10, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5c9, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000380)=""/137, 0x41100, 0x1, '\x00', r4, @sk_msg, r5, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x8, 0xd, 0x10000}, 0x10, r6, r0, 0x3, &(0x7f00000017c0)=[0x1, r7, r8, r9, r10], &(0x7f0000001800)=[{0x5, 0x1}, {0x4, 0x1, 0x3, 0x7}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x80000000}, 0x94) 1m20.335212445s ago: executing program 32 (id=1881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x20, 0x80, 0x6, 0x7, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@generic={0x89, 0x6, 'z}ck'}, @lsrr={0x83, 0xb, 0x12, [@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) (rerun: 64) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f0000000580)=""/194, 0xc2, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r7, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001700)={0xffffffffffffffff, 0x1}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x10, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5c9, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000380)=""/137, 0x41100, 0x1, '\x00', r4, @sk_msg, r5, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x8, 0xd, 0x10000}, 0x10, r6, r0, 0x3, &(0x7f00000017c0)=[0x1, r7, r8, r9, r10], &(0x7f0000001800)=[{0x5, 0x1}, {0x4, 0x1, 0x3, 0x7}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x80000000}, 0x94) 39.857955692s ago: executing program 1 (id=2558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60865160af36514000cc008002c0004000200060019c00600bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 39.692483462s ago: executing program 1 (id=2560): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x90}]}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 38.747508367s ago: executing program 1 (id=2572): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0xe000, 0x1000, 0x6, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2, 0x600}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x3a) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@mcast1, 0x4e20, 0x400, 0x4e20, 0x1, 0x2, 0x0, 0x80, 0x6c, r2, r7}, {0x200, 0x7ff0000, 0x3, 0x10001, 0x8, 0xc0, 0x1, 0x44}, {0xff, 0x9, 0x9, 0x7fff}, 0x0, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3502, 0x2, 0x2, 0xdd, 0xd, 0x7, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@mcast1, 0x4e20, 0x400, 0x4e20, 0x1, 0x2, 0x0, 0x80, 0x6c, r2, r7}, {0x200, 0x7ff0000, 0x3, 0x10001, 0x8, 0xc0, 0x1, 0x44}, {0xff, 0x9, 0x9, 0x7fff}, 0x0, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3502, 0x2, 0x2, 0xdd, 0xd, 0x7, 0x4}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x59, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x45, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff"}}}}, 0x67) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) (async) r10 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000214000326bd7400fbdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000000900020073797a310000000008004400", @ANYRES32=r10, @ANYBLOB="0500540000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) 38.328048246s ago: executing program 1 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000000400000085200000010000000f210500ffffffff1856000003000000000000000000000085000000d2000000c7a2feff08000000498907000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000185300000d00000000000000000000009500"/88], &(0x7f0000000180)='GPL\x00', 0x10001, 0xad, &(0x7f0000000300)=""/173, 0x41100, 0x9, '\x00', 0x0, @fallback=0x5126544bc996d4a4, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x7, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x1, 0xf}, {0x5, 0x2, 0xa, 0x9}, {0x1, 0x5, 0x2, 0x8}, {0x3, 0x5, 0xb, 0xb}, {0x4, 0x5, 0x4, 0x3}, {0x3, 0x5, 0x3}, {0x0, 0x3, 0x6, 0xf}, {0x3, 0x3, 0xb, 0x7}, {0x3, 0x2, 0x5, 0x1}], 0x10, 0xc412}, 0x94) recvmsg(r0, &(0x7f0000000800)={&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, &(0x7f0000000740)=""/144, 0x90}, 0x40002060) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6c5}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="ade5de517907578fffac7c65423ef12013cfa061f6c66d7b", @ANYRES16=r2, @ANYBLOB="570100000000000000000000000008000700", @ANYRES32, @ANYBLOB="0800080000000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x3c}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x10000000}) (async) r8 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) r9 = socket(0x40000000015, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) (async) ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f0000000900)) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) (async) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r10) (async) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f0000000840)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) 38.034165534s ago: executing program 1 (id=2581): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000c00)="84e6b2f4000900062b3325fe80000000000000dc8b850f23848f7e5cc0a57f8caf80ff007a393ce32a000086a6a8c114025706fd6c2f8df15f031b", 0x3b}], 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000480)={@empty, r5}, 0x14) recvmmsg(r2, &(0x7f0000000900)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000880)=""/112, 0x70}], 0x9, &(0x7f0000000b40)=""/125, 0x7d}, 0x2}], 0x1, 0x40000121, &(0x7f0000000bc0)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250b000000080039005c040001"], 0x1c}, 0x1, 0x0, 0x0, 0x6090}, 0x4004804) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) read(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000001bc0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001340)={0x0, 0x40, "4a4460cf681fd8deb2aa90c9bfdd62219d79c8665a2f44df25d0ecb7c38024c0ff130886e401a5de94a5cfe2d3102446920cc44c2c08516cad8037e97bca3983"}, &(0x7f00000013c0)=0x48) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001980)={0x0, 0xff, 0x1ff, 0x9, 0xf, 0x5}, &(0x7f00000019c0)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001a00)={0x0, 0x8000}, &(0x7f0000001a40)=0x8) sendmmsg$inet_sctp(r10, &(0x7f0000001b00)=[{&(0x7f0000000c40)=@in6={0xa, 0x4e22, 0x47, @remote, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000d40)="8f38453ef9bac2462af9a7ab7abcbb3fdd0bc15b4d05afac9ad021cf23579bf6186138c6e66b0e130b728c0150da70fe0f78a3cf2e977b7f1de709f15926cba142e1602ac920fc96ccffd5eef761a12429dff9e87af1bed9bba223dfe216ede53403bb", 0x63}, {&(0x7f0000000c80)="383480b99bcca00f6dc2e923dc4a97fc68b907688ce7581bb9dec1dcaee994b5a3ea2100a072176a", 0x28}, {&(0x7f0000000dc0)="eb2fa41ab1af5f375f3dae1b4143aa25908e308540c3b8749a74ecf8d582e674d8d4adad42ddd96dfff322e09388baa7687a33871edba733eb42cabde8f97d0e005a4fad45cca27f03ea", 0x4a}, {&(0x7f0000000e40)="532ba45d0d687e5a5e4f724ccfc36f7f44dd2d9ab793f4edc528d72c227404ed0b087e22ffb73400b256969580738044b6a5ed7afb4b81c670f7c3c1599acf3295781f4d611b02526c8aa534326a3843aec1a2d2b46a5d99bb698baac58989b9af9749356b25e38d2ec2910bde14f940f9a162468e8378bc458c2d9e23d7b2c4f8d0aaead03f07fb83", 0x89}, {&(0x7f0000000f00)="c192b3005a49cde3edd2d1499ba07c870fcd29034a3058a7f9e6ad4a7d49382d65354ff9c2e9b1329a708375108aecf9913d5e44dc1bfd231cf15aa19bd12ad3d7feea99985b8ca48e9ac8ef11375225c1b1e70ab97468dd02e7cbc3018cbf69b992cd3753d1a112834b804d32a38b4a93f58cf60e9a6656b60fa9722e50ffc28baed61dc7a335f71d924d216edc2c556522cd88d71adc494a40f18f1b3815c49734c2899cdf540fee5b125ae76bea90deddced5c545c0fe8fe3069a0930f448e126758868d3", 0xc6}, {&(0x7f0000001000)="a09e3d3a8f09f70dc3bc50af45a2104a694ed6f5285490768ec81c2b88f3855da2a0266f1412b861768de7a488d9a884883d3a036f86d4499e946e03d5dc6b461d44b7a71dda4196e4ea4ef773ab05aad43ee05da71208885fa8990259a9fc76277d29ca9b30421fbf5b1a9b04cb125d64917f0bdd8ac1e8889e006905fbf70c96e2187a57734db2ba15d77fcd", 0x8d}, {&(0x7f00000010c0)="a6c3012491f0edf261c055cda2974528", 0x10}, {&(0x7f0000001100)="7c08f44b5011ae871614ae50fc1700233853a42bbdaa604ab5588696fbd0c158d166af3d70a7ef19c8ec34c328a3d210d9e277", 0x33}, {&(0x7f0000001140)="f74f6e4cf3b1f7f883ce68883808e777c74a434447ce42757aed011b562d5b9bc5c852d3451b4d3c28d33c8834dfbc3aafc8b40c31564a0bfafd8cacdbd8ba7d42012ddde059a43e5714fecd5576057a7cd325a9abf33c92a2537d06aa92", 0x5e}, {&(0x7f00000011c0)="438d9203d4f3054ead31c631e06e18d029e622233d874870b1414d520cabce28980f99455f70076df949e952d792121957314b8e15225ab5acec5ba60f57190055bbfd4a5a95d521d60b387bae989a4d96d014f0cb36139165219b1d35e065bb70214db14d1be2ef5ea1a019ffbb1b650b85254a912cd6e3617cb5365a80a00b7071c84749c17f8d11ae244d35681cef3c65b27ca28755715c29fc39873b5b4188755591c25ef093e3472c0838522869b1c3d729f598c2bb845b", 0xba}], 0xa, &(0x7f0000001400)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xfff7, 0x8, 0x8200, 0x7, 0x91, 0xb, 0x1243, 0xba2, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}}, @authinfo={0x18, 0x84, 0x6, {0x61}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0xd0, 0x800}, {&(0x7f0000001500)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001640)="38e535be061c584260aa88386a6decb49d4aec415033c055d49da16821f2b7753819fa9a137d36545b1d528e7cf6388d4f734302493cc62fca3653e31be6fcff35b823938232472ce85024ccec4f81bdd379bb677dac2064a0ad2cf3bba8064b515a429ff2d775660fbc1e231d6336fb851d79647212475dfa48fc0ec93deea51595f32435c20a53cf6adecfe0cddce01305cb4db6ac55452f844fbcd82312571c23ffdd12694cb6be0b4fcf20d3dc3076137e43e22e54ee8a180d7e5a16fd2b6b923eea40288e37e16999d5308042ea78727bdd1d56ef748feb077f592d0c87d60888834363c44c292bc2628e52", 0xee}, {&(0x7f0000001540)="8c3cb478bae6b3f344441b6d56ec08a3bd4f6f1a3175a4c0976f7ace290ad169e77ed00b9ded6d322ce19ccad08f87d2d22a52fcc1540d0722b884588093588f38d416001e035c9eec492872de72eec4aaf4e30eb9ad8e", 0x57}, {&(0x7f0000001740)="d3702c95204d6b204083bf98faa88ad77a3e49797df75bb417a8052175f5630c1d869ff032548aad6b08a39a4c900454e1dea2be5eed76b82f148d2e2cb4c562bfd275cf7b0bfeb8dbb60824c37ccb95d57e38f1192bd3935ea52d193f4a7f6de6e941fdcc585d1e87e42d8557dde9a6e49d9220f0c263be4647fae1cea724685d6be4d465c2f40239a1c0b2ddc774229375885f68f98b795f7e56541d783fc92d05046e57cc36d8f0a21b4276f7b9f58240f173a9af20f297e3bd9a0b84dffc079b9216eb1cac433470bf0f0a498f7a428bf2709ddd2e33abd95c099aee69155c6604548b6386ecf506afa4216062431147a586480131", 0xf7}], 0x3, 0x0, 0x0, 0x4000000}, {&(0x7f0000001840)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001880)="d1091ace06822a275cdb01f9a431c342e72afd16c7e39d054a695bf61296cb2d0f3d15284c4e25c0e93ff8f669e393d1d7172f0ed13179016bdabcf86208a97ea6ce7504332f923b0efe", 0x4a}, {&(0x7f0000001900)="a1988124fff6c492e73b100ac591baec777229", 0x13}], 0x2, &(0x7f0000001a80)=[@sndinfo={0x20, 0x84, 0x2, {0x100, 0xd, 0xc257, 0xb, r12}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}, @sndinfo={0x20, 0x84, 0x2, {0x4000, 0x8, 0xffff, 0x100000, r13}}, @init={0x18, 0x84, 0x0, {0x5, 0xa6, 0xfffa, 0x8}}], 0x70, 0x10000000}], 0x3, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) 37.668445854s ago: executing program 1 (id=2583): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x3000) 29.243914997s ago: executing program 0 (id=2677): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x8, 0x2}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) 29.103317735s ago: executing program 0 (id=2679): socket(0x1f, 0x3, 0x0) (async) r0 = socket(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000008480)={0x0, 0x0, &(0x7f0000008440)={&(0x7f0000008400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010027bd7900fddbdf251c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0xd0, 0x1, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x75, 0x6, "fdbf6085133a0d43d8a47ba51bf1a66ae9a37b87b6acc7d63f0c123484c6b522ffc9e75c31f28305ce151af0c42be751b533cdeb6c41ac24a48ced5e5e476eb0e9eef543f90495c12e309c9b96ae8680ebd96ec5264cf9381b4541aee9efa50c63657534c220ce289389ce01e2fd17e823"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0xd0, 0x1, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x75, 0x6, "fdbf6085133a0d43d8a47ba51bf1a66ae9a37b87b6acc7d63f0c123484c6b522ffc9e75c31f28305ce151af0c42be751b533cdeb6c41ac24a48ced5e5e476eb0e9eef543f90495c12e309c9b96ae8680ebd96ec5264cf9381b4541aee9efa50c63657534c220ce289389ce01e2fd17e823"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000180)=0x3) 28.909029766s ago: executing program 0 (id=2682): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) 28.823728348s ago: executing program 0 (id=2683): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@remote, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x4, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 28.711262565s ago: executing program 0 (id=2684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000300100001000000000000009c15a62f04d57728fe00000500000a28002f0000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000000000000000ff0000070900010073797a31000000000900030073e1a40000000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r1, 0x0, 0x0, 0xc891, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x17, 0x4) 28.44264519s ago: executing program 0 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x1d) close(r2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 22.607902577s ago: executing program 33 (id=2583): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x3000) 13.371896402s ago: executing program 34 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x1d) close(r2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 5.636661815s ago: executing program 3 (id=2900): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c0016000aac0f00000000005a00010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076ebf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd100"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.210020278s ago: executing program 3 (id=2906): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000e7ffffffffff0948000000060a0b040000000000000000020000001c0004801800018008000100666962000c00028008000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) 4.916429801s ago: executing program 3 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xaf2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x1, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 4.669568294s ago: executing program 3 (id=2914): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xcf, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002cc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff390000000c009900012000005600000018000d80140001802733c36a240d00012688001b5c450b164804186c000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0xed}) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x1000, 0x3db3, 0x3, 0x333c}, 0x8) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="a00b2eddbf15735f30ee3287b2e738abba4db9344c758fad63afc2fef8c884dd32e8ea285e99a16587ca1603306d2103a92ab2e57fd065f6a7409992cfef54517a1ec40a42476ef42aecd72588bc32d8b352feae4531514007092c9902df9f20c17a5e9e883bd0960a3f4ba51a298848c172bb7a4ce9d47c872f377f32e9d591f3d44bbdd9f9a1b647aa8a9739e7a19474089fd45604cffc294d3ed7ecc22f01da84e849465dc3fa26fded14eecf56eed69eb8f542cf50cddc844881450cab2e8503a313079623aeaef761c1ede7d2a443d7c0aec7b9e81309d6efa0ef37178f", 0xe0}, {&(0x7f0000000380)="6140a0e3e61579259a2dd303762b8759441907676f50582eb791032c5c0a320dd21f1a07b8cf4d7ba433b91efeab7d4448182522e734ebe2f81a82cf6b5466e3601827c28bd433470afb29cd51136fb67ba3a5e5050c9294f35b5587ce175795bba37f3a8c56eee21cff807088205adb029a20e72fd34eca3230dca6d26f27623586d8c8c1c6fca663d7215b90563fac9d3b0dc24a32", 0x96}, {&(0x7f0000000180)="6ecdd5ad32cc526ec54275f09ed0c80c6c298b41d39915e0bb0149b28d260ff23f3805ce146ab80a94e76cc21acc27e7e4fac0b2f9aea5cd63c75158370bc8e92a6a532774353ab0c14843857bd7e78e794bbde43760ed35fe15352fd08afe1efa1a2cc1", 0x64}, {&(0x7f0000000600)="2a03e999ad010a45", 0x8}, {&(0x7f0000000640)="8adc02048d606fdec2e83e8e618acfff00eb1c6cec446a401529ab37b442109618514389383ac4fcb58e008ca66ab10f3d473bd37545194e2b46a9d3a3a9f2f206eb69db7b817bb8f394d384929cbb4200235e0638ee2d573202208b6a7ec93251fb4c62fc0adad0ab4facca6481c8216111934e389b180d80171d06d67d1a6887601f295caeab15862b7189fb9e2b5cfe8e", 0x92}, {&(0x7f0000000700)="0b37dd734a14497b28d28fd07fd7e5b2d23e2a381d31386297fbc17b065f98a3582829f5739f644b97ae7111b8211219fd3be52774cc476529c6841b812c574c2e09345e5c9783b1e312b3b2149930b0879a96c4cab4b2571a774eddb1b8821ec62fa0cb7dda5b", 0x67}], 0x6}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0x1000}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000840)="e52ba34f5926eed68ad4622e13bb0ef2aef4b8f94fbcc49d55e69d3fd1e8aa6385624e935283b3811efc823cff0261351d997393e10981c577003dbc225f9f090ef81fbf6fbfb82baab74b51f594c6825b4f43fc81f58f5c2e59341c24e2897b9d276f983be6200d8ed79651c03bf5b403fffff0ffe9d4dcc6038a75d66da15a5eb993f6c7f9ad12fe2fbc0ab01ce27fdca93cd77e595de8d66da1555179b78f0b135462186c499b603a9b3d790f59c9c269967c74554481e083489fd603a7ee7172aa3c4a221572c0d9f5883bcb7e90d48fe81fb0e860e5e1eb9f76ca1086629a7dbfc344028fb1", 0xe8}, {&(0x7f0000000940)="dac8785258a3ea4d61700b6bc30c826553459c95008f2226c62c0e338c1306b8b19b108c10f4ad15cebaac4d620cc5842477574089ca968232450da0fbfe421b9c5507177bee848149ae7f456f6c2727852698b0623f6325c4256be683ca0461ac9ae5", 0x63}, {&(0x7f00000009c0)="7082eebf6fabd59897fbb5920bbe72ba0f9253929a47d2e56694f818d9708a08439121a7782d5ce1041db09feb819e88a7a9f1e206d43eb84285062dc90274dff1554f38c71d0c19361de962e21f030b46270609cf55a94ad3777b25fcc8645a70941d83797dddea99d5b44bf92776cf98e7b0e5fbb564aa3d32f4b55d2f19776c10d69949b18eb328e42d65ae1593d950b7baaf816737", 0x97}, {&(0x7f0000000a80)="dea1032eb89bfd15bb84bf08ee49ee268c03bdecf1bcef81fbd382c48cd62580a1396c116148f44ced4a48905fe46034c1e5f96d2394a69028816cc1e693bd4c1fba3c21f53c21b1f98122be597e1d094b3c2084f1d60fbc87e65d2010ca2b8556580c5caba221957345b9cf476e17d820e074cd2d093ac0dc15ad4635a9fac60f70a0fd6d667309e11057389cb982a666e1c33df6ec56d7e4a55bf94b5863411cb201219e38fc3a8afb64cc4c3ef5fea865cdd2116dfeb1c50ef1f3c7c3", 0xbe}, {&(0x7f0000000b40)="7e29657a534f43a9fb992b83037ef09b5eaf77", 0x13}, {&(0x7f0000000b80)="08cf03a3870cb581ea95ef40ae2b76cf89e79ab9d87c6834b2086256b88dd20b63d8d0475bafbd70329549482ef23c162736140d693da46be80f5758923acbf05f2d27ce5b6929e52c9f9c5c87ae5b536bf5501703a4101fc457a5e15b82d3f331961060ba5139dae8708d648a41b27cc64110e151a2d23233172f419fbc72fbe4f5fb10d30927e2f7d1c38f7928db23712d9251212c922f7fcaf3ed0debcec8e7c1827845e34e26c974316c84c2da1f087a88621052fa2e1e3d66b129c803e8a54feeb05336ded51efb", 0xca}, {&(0x7f0000000cc0)="2b7a6d9f8563eaca657380e967b5626461025dc160f6e2e89650a0a2998dadab6a81efed7034b9c78c5ebf191a1f3d9b1f8ae5a2d543436c10ea98770975", 0x3e}, {&(0x7f0000000d00)="a91debb04830006810d2318a8171df36d220c06ced6ef790bfed3ae0d164ca977f285a9ca0ed5375e6db5a9578694b3a39631c31056ab7b3101be70e0c20bcedaa600de3a7a5ac4603fe997799c3d35647430450f1067bade2421379b5d4fad2efe4c9cadfc1ee6e791e074d1ea3f763926a3675c277181c369010d41a5ef9", 0x7f}], 0x8, &(0x7f0000000e00)=[@dstopts={{0x60, 0x29, 0x37, {0x3c, 0x9, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x6, [0x3, 0x3, 0x1, 0x6]}}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0xa8}}, {{&(0x7f0000000ec0)={0xa, 0x4e24, 0x6, @mcast1, 0x6}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000f00)="ae29c1820d5bdab4a441cc021e7bef708724ce89ba1daa019393c7b32d7bdf259290fe58ccb3c425d68001900b417c59cb51efe48ba21017320cabbcd0baba3685bd96a0ada476389630ed698e94b416d96defd9bedd", 0x56}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="ca31eeba3200b745bd848548b7b33010872eb161c7ee9488", 0x18}, {&(0x7f0000001000)="4926d02a9e0ac983e3e2944b75d06d62cdde53bc9a113b71abdeacb351954d953479b9a04b822cb5bd871f9f672dac98c52a19b5de38116e280223ee0b58165edc8a83536f5cb2fbef16176b759a9287224910b0c692c56411052cf37613f8e042952eac586a39ec1bd6435e7d1b18441962ceaadd3745b632b44cb9e4e9961ac638ad6487d704b08ec411c3ca2e81fcdccf6a59547f5fa9787d789ef2ef921eb5d4adbb54652eceea9ea662353ae4e5aee938e2b56380b2befbb18b6b510bdf3f937606657bd6a7efd9b5b9a547ef031275f36ca19eb8510bd72757244e590ef72884a12223552013d5f2870e1659", 0xef}, {&(0x7f0000001100)="2c52505b3742d853aa0a2d14f6042f65a36378418796c234f97815f9987ec169e73c180d025a42d11c751cda9b05e1f538ef5c8764b0578739412cbae187cf9796eba6b539e0c6d96e2eac88ea99422537fd5c83e55872279b9b88cf2b6da51f8ed44576d85fdd312a90204a9465770613db90878133dd300c7912190b5c72adcca46ed0", 0x84}, {&(0x7f00000011c0)="abe61878db1553fea1183860e23762ad80234748936acc322357f213deb5fb03a195ca", 0x23}, {&(0x7f0000001240)="d7dcf6859d63665889ecfb66270c907fab86201c37a39eaed2de31ec80dcbde14ace63ca5f54626e5206a61c0ba85d3b201a7588fbe9e8766a39e8b0f62db655f586a947fa8567c80fff3598aa657f290eb239f487bf9d12c5a738a37c422bc15a90014bdf7fcb3b5cd5695103d6e1d91cdaaf67336fbabde0621423dd", 0x7d}], 0x7, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000001640)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002700)="3cf61c0a5bcbcf30a0391e381070cc07152a5ecb19b771f6cb7c1acccc71558e12abff5d27e46310ad56fd9a3db09ce9234325bfc7bc3f600eb11268cc37e3672a54dd0cbc015b3697", 0x49}, {&(0x7f0000002780)="04ccdd6e327ef9a25fa686380fbd2480d6ca670df1c1dd802eb88bc51af2bd45e1db2f6297905a3a0886a7615f9d7809b3c92dfbb7b3cf7934a043a77dcf95bd8ecd3dfd162ad0dae58bdbe4dacb723a747165696cbeba696b99931e7be2b7c0d27c5159d7017487db92925ca3684a1f8c4f2bdfe640e533aa33acae33c7091aa52e4b639bdd334cb4a9136ce2763894610ed3fd0722cdb1b6c15af860f3505e1d3e3ea275db56168a60b9af5fa2ccd80feaf4a69a", 0xb5}, {&(0x7f0000001680)="d04543c1a388a8608758d62a51948227862a13ca51533ee30b21c01d", 0x1c}, {&(0x7f0000002840)="872520c47532697124b9e6ee9d4ce46ac7405c22fc05072487a65ea91603fb1443ab153c1edbc1134c49367371c612ee5808518fb2b352881507811d91b9fe8e119345255da426b2f1e15116815862b8b4b0ed6f8c7b30a5389bab9db76303885905d51e0e47e95ab630d881043962e12473276de9db4607686ee976d798a92bc621476e4bf13407b761a51fdaf9a6c7ff1ab39a2fe45051418fcf43728572ab08e7e63cb80d5d5539a876ecd2a3fb", 0xaf}, {&(0x7f0000002900)="30c3d4f8c02c0ced142c87573abd4e6558ce136a7b0e1e2f2258024ed599644a28a02d07892cb4106fc2df16077970a78e3c48e8ac4282ffbf868a11a8d5e697b987082e4349c66c5d7be0d303518e5c10ac94baf9c6e1baa4da48117ef25f71d9b7d3c54e86326803d5d4360e8c0a683f6b0ffd2dd1adcf93e1b5b4fad89e6b47138a11f981484f637fb068e21c4923d88130ecd18a9986d48932bc18caa8c9043cf0dabef37f6336e0292d58bfe09914fe1ce379cbe2e93795c0fa89c2501545352cc0595126ed1440ac58166f9e26ce5e0552bcfc", 0xd6}], 0x5, &(0x7f0000002a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@generic={0x4, 0x16, "bd074f0638707c8f0bf28d27ef8ea2e16adf30a820cb"}, @pad1]}}}, @dstopts={{0x120, 0x29, 0x37, {0x62, 0x20, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x3, [0x5]}}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0xa4, 0xa2, "7336a3d3832bb596ba46f20e956b9ff0c88e7a6f594be2ad6651d32c0d971f003dbb11032308007240924e98bc0fcc6e65526310edd3a69b5c618607be466e78efb6811157dbd2048c52de11a8e4a3e0d0920523a4bb08962f98490c73548ad7e32732f4e5c7da31deba7595dd8b39b289ad9d9085af3c97e184dbab066797e8423e03b387abf6eda45001aaecddef36eb498c2edde6951728b06f856b870859b897"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xfffffffd}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0xe9, [0x0, 0x3, 0x8]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf}}], 0x1e8}}], 0x4, 0x40040) (async) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) recvmsg(r7, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f0000005140)=[0x4, 0x3], 0x2) (async) poll(&(0x7f0000000040)=[{r7, 0x10}], 0x1, 0x3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0xfe33) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000005040)=[{{&(0x7f0000001340), 0x6e, &(0x7f00000043c0)=[{&(0x7f00000013c0)=""/80, 0x50}, {&(0x7f0000001440)=""/109, 0x6d}, {&(0x7f00000014c0)=""/117, 0x75}, {0xfffffffffffffffc}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000001540)=""/140, 0x8c}, {&(0x7f0000000f80)=""/13, 0xd}, {&(0x7f0000004140)=""/226, 0xe2}, {&(0x7f0000004240)=""/107, 0x6b}, {&(0x7f00000042c0)=""/193, 0xc1}], 0xa, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004500)=""/169, 0xa9}, {&(0x7f00000045c0)=""/116, 0x74}, {&(0x7f0000004640)=""/30, 0x1e}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000004680)=""/214, 0xd6}, {&(0x7f0000004780)=""/171, 0xab}], 0x7}}, {{&(0x7f00000048c0)=@abs, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004940)=""/160, 0xa0}, {&(0x7f0000004a00)=""/112, 0x70}], 0x2, &(0x7f0000004ac0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004c40)=""/11, 0xb}, {&(0x7f0000004c80)=""/125, 0x7d}, {&(0x7f0000004d00)=""/50, 0x32}, {&(0x7f0000004d40)=""/205, 0xcd}, {&(0x7f0000004e40)=""/29, 0x1d}, {&(0x7f0000004e80)=""/78, 0x4e}, {&(0x7f0000004f00)=""/185, 0xb9}], 0x7}}], 0x4, 0x140, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) (async) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) 4.268424981s ago: executing program 7 (id=2920): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"59177dbab7b4225e89ad4a354a59ef85", 0x0, 0x0, {0x4, 0x9}, {0x0, 0x8}, 0xc, [0x4, 0x2, 0xd2, 0x22610e60, 0x8000000000000000, 0x8, 0x81, 0x8, 0x6, 0x1, 0x1, 0x50e, 0x6, 0x5, 0x0, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, r2, 0x8, @inherit={0x60, &(0x7f0000000280)={0x1, 0x3, 0x5, 0x9, {0x18, 0x7fffffffffffffff, 0x3a, 0x2, 0x8}, [0x1, 0x8, 0xfffffffffffffffe]}}, @name="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"}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="700701dd"], 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3.706852251s ago: executing program 3 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newtclass={0x58, 0x28, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0x2}, {0x7, 0x6}, {0x19, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x7f, 0x62}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xc2, 0x1a}}, @TCA_RATE={0x6, 0x5, {0x10, 0x1}}]}, 0x58}}, 0x20008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010100000000000008002b00000008000300", @ANYRES32=r11, @ANYBLOB="04004600050034006e000000080026006c090000200051"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async, rerun: 64) r12 = socket(0x10, 0x3, 0xffffffff) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="9e4e000072003303060000000400000007000000", @ANYRES32=0x0, @ANYRES64=r1], 0x20}}, 0x20000010) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r12, 0x84, 0x74, &(0x7f0000000480)=""/171, &(0x7f0000000300)=0xab) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r12, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYRESOCT, @ANYRESHEX=r2, @ANYBLOB="291133fc6b7533717322f617e309020b703a1793923d27b8ca14c0c4bbc1ce4c6644e65aff275d8b", @ANYRES32, @ANYRES8=r5, @ANYRES8, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="00743b08920e896ca0"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRES16=r9, @ANYRES32=r6, @ANYRESDEC=r13], 0xffdd) (async) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 3.391781071s ago: executing program 4 (id=2931): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) getsockname(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x7fffffff}}, 0x200, 0x5}, 0x90) 3.288368661s ago: executing program 6 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_emit_ethernet(0x1e, &(0x7f0000000340)={@empty, @local, @void, {@can={0xc, {{0x1, 0x1}, 0x3, 0x1}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) 3.097934781s ago: executing program 4 (id=2933): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9c29, 0x6, 0x3, 0x2, 0x6, "8c599fca03db3ca5ee354c0b563c114d4183cada01ad8a9c396366e9945fb3c6c9a1fca9f46d4bf161e19cf97a3e521f67d07134a49a181b219499bb27b462c25a8917b17c440349ccbb9de36d883f1a353322e53090b6bc2aac2f6e0d031e92a7a6c0ccc9122a9803943647881bc9efa89e7bfb04a346055144025eba5dff66"}) sendto$inet6(r0, &(0x7f0000000140)="c37b2c33fb33261522ed079854ad62ca40e0c87ade9dfb988913e1b55f4b3c1d14e876e5ef44601c39e9bbd5686ce5428eeacbb3e604403fb4ca79f04d71fc71", 0x40, 0x4044010, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @empty, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x65}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x88, 0x5, 0x2a, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x2, 0x5}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc44, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) 3.096722674s ago: executing program 7 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104f2ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c0002800500170000000000080004000002"], 0x44}}, 0x0) 3.003431291s ago: executing program 4 (id=2936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x22, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x0, 0x18e8a36, 0x400, 0xffffffffffffffff}) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 2.803796461s ago: executing program 6 (id=2937): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0x42, 0xfb, 0x0, 0x5886, 0x63, 0x1, 0x8, 'syz1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400cdff000708001b0000000054"], 0x30}}, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.279447696s ago: executing program 7 (id=2938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0x1}, 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r6 = socket$inet(0x2, 0x800, 0x5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'pimreg0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x4}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x2, 0x0, 0x1, 0x5], 0x4, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0xd}}}, {{@ip={@empty, @remote, 0x0, 0xffffffff, 'nicvf0\x00', 'vlan0\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ah={{0x30}, {[0xff, 0x1], 0x1}}, @common=@addrtype={{0x30}, {0x50, 0x40, 0x1, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x0, 0x80000000, 'snmp\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) 1.272096154s ago: executing program 3 (id=2939): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}, 0x50) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) 1.168548846s ago: executing program 6 (id=2940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 1.167848965s ago: executing program 5 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x1e, &(0x7f0000001940)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "5ac0c7d61001e90f"}}}}, 0x0) recvfrom(r4, &(0x7f0000000140)=""/111, 0x6f, 0x1, &(0x7f0000000240)=@isdn={0x22, 0x7f, 0x6, 0x6}, 0x80) connect$inet6(r4, &(0x7f0000000040)={0xfd, 0x3, 0xfffffffc, @loopback, 0x40}, 0x1c) 1.112791084s ago: executing program 4 (id=2942): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x30, 0x0, &(0x7f00000000c0)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000d1401003fe1d74c1eedcfd6574e4728bd70000400000008000100000000000800030000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000180)={0x4, 0x20, 0x6, {0x0, 0x2710}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "51cced901ecc131a9cd3976720137a0d0c6d0e4f0362e1bd49bf72e349bf5f4853873eadcf1bb034c34b492fbd029877a80a831c53994b728b9ffbd8525103a8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x8050) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x1e, &(0x7f0000001200)=ANY=[], 0x8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x3}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x3261e) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x1409, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x8c0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) 886.550144ms ago: executing program 5 (id=2944): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={0x5e38b282e414372c, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x4}, 0x50) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r5, r5], 0x0, 0x10, 0xc}, 0x94) 812.618659ms ago: executing program 6 (id=2945): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x17, @void}, 0x10) (rerun: 32) 812.00004ms ago: executing program 4 (id=2946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "e9244fc04a5d0a5861b55cff0be058f92dd99fe94244772f1a3261a4ab6f3147", "884500b0eb3131ec456a044e02e6881290c9693bd22477c82be30f283d636d287e466735805180bfea2717a15f784528", "fcf488347f2d1dd087860b227e14439a37fdb701c157ed71f60f7825", {"a28056b94c337bfd564b2b5e1db09cb2", "6ad47b01d4e7faa74106e6d168638e87"}}}}}}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) 755.452689ms ago: executing program 7 (id=2947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) (async, rerun: 32) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xec}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 654.174409ms ago: executing program 5 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0xe8}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 492.593782ms ago: executing program 6 (id=2949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0x1, 0xe}, {0xffff}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x6f, 0x9}}, @TCA_RATE={0x6, 0x5, {0xfc, 0xb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 492.102677ms ago: executing program 4 (id=2950): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x54, 0x2, 0xb8, 0x80, 0x85, 0x9, 0x21, 0x80, 0x8, 0x82, 0x4e, 0xff, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 377.904067ms ago: executing program 5 (id=2951): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 306.971567ms ago: executing program 7 (id=2952): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) unshare(0x20700) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) 132.679167ms ago: executing program 5 (id=2953): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401090000000000000000080005"], 0x18}}, 0x4048c81) 131.522547ms ago: executing program 6 (id=2954): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x7d, 0xa, 0x0, 0x0, @uid}]}, 0xe6}}, 0x84) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 40.540669ms ago: executing program 7 (id=2955): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x21, @empty, 0xfffffffc}}, 0xfffffc78, 0x2, 0x72597d2a, 0x7, 0x0, 0x9, 0x7}, &(0x7f00000002c0)=0x9c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) recvfrom$inet6(r3, &(0x7f00000003c0)=""/90, 0x5a, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000580)=0x6, &(0x7f00000005c0)=0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01000002000000000000000000002556c2e8865d37c3570d75b49192e56f650bc9910a0f039c1309cf4013ec5e4e1ab60d022fce0f9d60cd28b0fe9761139d73c9243c0ad99998a090d8a83895bc1d3165aed4998a976cde804c68b6ce6827f08cf0c467a4ce2bb23c630f7230aa56b6994baa64f8ad9acdcdde2a7c8d2acf54111528f5fbf0453270fcf79c27c1602ade00"/175], 0x14}}, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TESTDATA={0xe0, 0x45, "a17c39133e70a34917a1905598f923e956b9ba0a0ad2503f131e1ba0b859cef9c0b5e5781bff1fb70ce797a5752f637eeb1aa875f5a978e3f7edbcedae94013077f5bfe7ddbeb5896e46b5202743241b2dcd4345c87227479b01b4bb673ff057eb008f5b2b05447cf1aa36ba18d45f7a9fd069611f6506cba37c02936000bc8bf66f1af9aeb88d7e41e32f05ca6b2540ebf44bc7ce348375694e86adf81e04fb5472901b52cca91c2e32f4f2ae56a2ab1250a2e7a1402b4feac4992f898a950daa0a153118e0e0f02e256f6154a65d55ddef2ebd31bb64ec4fefca39"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r14, @ANYBLOB="e153afbc6ed8774bc877eef363843418dff5d98f1efb3599663bd799c451b344e73015334aebca75c792a652a306df8c666006ff01771e9575547255f15fee3008d61c7768858a960bb748282426ea37aaff174cdaac9c75e3d2aa60cafc86c1fe84471ef5ca5ec89ab73c0ed9070274e12f"], 0x54}}, 0x0) 0s ago: executing program 5 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x3, 0x80000, @mcast1, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000200e8"], 0x100}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB="adec5502e8ad0805000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3}, 0x38) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) kernel console output (not intermixed with test programs): e type 21 has an invalid length. [ 131.010350][ T7572] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.064028][ T7572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.071641][ T7572] IPv6: NLM_F_CREATE should be set when creating new route [ 131.078905][ T7572] IPv6: NLM_F_CREATE should be set when creating new route [ 131.086193][ T7572] IPv6: NLM_F_CREATE should be set when creating new route [ 131.130127][ T7577] tipc: New replicast peer: 255.255.255.255 [ 131.136649][ T7577] tipc: Enabled bearer , priority 10 [ 131.274814][ T7585] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 131.282661][ T7585] netlink: 236 bytes leftover after parsing attributes in process `syz.1.452'. [ 131.667617][ T7600] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 131.713265][ T7600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.457'. [ 131.768511][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 132.074343][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 132.160873][ T7614] gretap1: left allmulticast mode [ 132.585072][ T7639] nbd: must specify at least one socket [ 132.607714][ T7639] netlink: 3 bytes leftover after parsing attributes in process `syz.3.469'. [ 132.625632][ T6353] tipc: Subscription rejected, illegal request [ 132.687476][ T7639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.713637][ T7649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.791131][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 132.809440][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.912626][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.956125][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.553891][ T7674] syzkaller1: entered promiscuous mode [ 133.569893][ T7674] syzkaller1: entered allmulticast mode [ 133.688790][ T5973] IPVS: starting estimator thread 0... [ 133.703843][ T7679] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 133.735215][ T7682] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 133.812415][ T7681] IPVS: using max 24 ests per chain, 57600 per kthread [ 133.918584][ T7678] veth3: entered promiscuous mode [ 134.394687][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 134.434773][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.573599][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.582773][ T7721] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 134.590465][ T7721] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 135.110984][ T7736] __nla_validate_parse: 7 callbacks suppressed [ 135.111003][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 135.383728][ T7761] openvswitch: netlink: Missing key (keys=40, expected=100) [ 135.598378][ T7764] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 135.645949][ T7765] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.501'. [ 135.809532][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.818106][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.140729][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.514485][ T7785] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 136.532828][ T7785] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.649435][ T6348] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.669208][ T6348] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.704163][ T6348] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.739429][ T6348] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.760758][ T7789] veth0: entered promiscuous mode [ 136.775472][ T7787] veth0: left promiscuous mode [ 137.796525][ T7796] netlink: 'syz.3.513': attribute type 83 has an invalid length. [ 137.809468][ T7796] netlink: 'syz.3.513': attribute type 83 has an invalid length. [ 137.826473][ T7804] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 137.852057][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'. [ 138.037185][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 138.321334][ T7828] C: renamed from lo [ 138.362931][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 138.725974][ T7844] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 138.799811][ T7851] netlink: 204 bytes leftover after parsing attributes in process `syz.1.529'. [ 138.935466][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 139.165422][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.536'. [ 139.698646][ T7897] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 139.899613][ T7908] netlink: 'syz.2.548': attribute type 11 has an invalid length. [ 139.940527][ T7908] netlink: 228 bytes leftover after parsing attributes in process `syz.2.548'. [ 140.175522][ T7924] netlink: 'syz.2.552': attribute type 3 has an invalid length. [ 140.207654][ T7924] netlink: 'syz.2.552': attribute type 3 has an invalid length. [ 140.469518][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 140.594821][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 140.617083][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 141.142263][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 141.182216][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 141.269295][ T7977] dvmrp1: entered allmulticast mode [ 142.347345][ T8024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.582'. [ 142.413013][ T8023] delete_channel: no stack [ 142.984035][ T8056] netlink: 830 bytes leftover after parsing attributes in process `syz.0.593'. [ 142.999053][ T8062] netlink: 152 bytes leftover after parsing attributes in process `syz.4.594'. [ 143.122268][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.597'. [ 143.297359][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 143.728581][ T8101] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 143.771296][ T8103] netlink: 'syz.1.605': attribute type 5 has an invalid length. [ 144.087804][ T8116] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 144.674155][ T8147] tipc: Enabling of bearer rejected, failed to enable media [ 145.085263][ T8167] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 145.147215][ T8167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.390611][ T8181] bond0: (slave rose0): Error: Device can not be enslaved while up [ 145.605029][ T8194] ipvlan3: entered promiscuous mode [ 145.746153][ T8202] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.760758][ T8202] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.845163][ T8197] tipc: Enabled bearer , priority 0 [ 146.047739][ T8203] tipc: Disabling bearer [ 146.396690][ T8235] __nla_validate_parse: 7 callbacks suppressed [ 146.396710][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 146.534507][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 146.890408][ T8264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.653'. [ 147.057594][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 147.220629][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 147.255353][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 147.399126][ T8284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.658'. [ 147.474828][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 147.499589][ T8289] netlink: 'syz.0.661': attribute type 7 has an invalid length. [ 147.618409][ T8295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 147.667298][ T8286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.708430][ T8298] netlink: 'syz.0.664': attribute type 142 has an invalid length. [ 147.745824][ T8297] netlink: 'syz.0.664': attribute type 142 has an invalid length. [ 147.828507][ T8307] IPVS: set_ctl: invalid protocol: 58 172.20.20.20:20004 [ 147.830484][ T8303] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 147.892793][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 148.163855][ T8323] netlink: zone id is out of range [ 148.169066][ T8323] netlink: get zone limit has 8 unknown bytes [ 149.261453][ T8374] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 149.515506][ T8396] netlink: 'syz.2.689': attribute type 3 has an invalid length. [ 149.619186][ T8407] netlink: 'syz.0.691': attribute type 21 has an invalid length. [ 149.705913][ T8409] netlink: 'syz.0.691': attribute type 21 has an invalid length. [ 150.425038][ T8437] team0 (unregistering): Port device team_slave_0 removed [ 150.434238][ T8441] block nbd2: NBD_DISCONNECT [ 150.469584][ T8437] team0 (unregistering): Port device team_slave_1 removed [ 150.619361][ T8459] tipc: Enabling of bearer rejected, failed to enable media [ 151.254219][ T8495] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 151.637820][ T8510] __nla_validate_parse: 16 callbacks suppressed [ 151.637840][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 151.661242][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 151.678422][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 151.700187][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 151.826050][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 152.012949][ T8510] bridge0: port 3(vlan2) entered blocking state [ 152.020804][ T8510] bridge0: port 3(vlan2) entered disabled state [ 152.029973][ T8510] vlan2: entered allmulticast mode [ 152.035792][ T8510] bridge0: entered allmulticast mode [ 152.045347][ T8510] vlan2: left allmulticast mode [ 152.050261][ T8510] bridge0: left allmulticast mode [ 152.206658][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 152.287368][ T8534] gtp0: entered promiscuous mode [ 152.395210][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 152.445913][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 152.563479][ T8557] trusted_key: syz.1.731 sent an empty control message without MSG_MORE. [ 152.613428][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 152.654136][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 152.723919][ T8565] sctp: [Deprecated]: syz.4.733 (pid 8565) Use of int in maxseg socket option. [ 152.723919][ T8565] Use struct sctp_assoc_value instead [ 152.780662][ T6353] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.831022][ T6353] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.865682][ T6353] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.924695][ T6353] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.962785][ T8575] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.198124][ T8589] IPv6: sit1: Disabled Multicast RS [ 153.213549][ T8589] sit1: entered allmulticast mode [ 153.932675][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.946239][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.402762][ T8632] IPVS: persistence engine module ip_vs_pe_À not found [ 154.471515][ T8634] team0: No ports can be present during mode change [ 154.663689][ T8653] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 154.743260][ T8653] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 154.760564][ T8653] dummy0: entered promiscuous mode [ 154.768992][ T8653] bridge0: port 3(dummy0) entered blocking state [ 154.787607][ T8653] bridge0: port 3(dummy0) entered disabled state [ 154.799420][ T8653] dummy0: entered allmulticast mode [ 155.795712][ T8713] netlink: 'syz.0.776': attribute type 5 has an invalid length. [ 156.234907][ T8737] netlink: 'syz.3.783': attribute type 178 has an invalid length. [ 156.719154][ T8767] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 156.781892][ T8767] veth0_macvtap: left promiscuous mode [ 157.175312][ T8801] __nla_validate_parse: 18 callbacks suppressed [ 157.175332][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 157.227484][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 157.283596][ T8808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.801'. [ 157.339974][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 157.671458][ T8823] netlink: 'syz.1.807': attribute type 24 has an invalid length. [ 157.682850][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.805'. [ 157.710618][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 158.228828][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 158.250869][ T8852] nftables ruleset with unbound set [ 158.257402][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 158.656504][ T5529] veth0_vlan: left promiscuous mode [ 158.714269][ T5529] veth0_vlan: entered promiscuous mode [ 159.174986][ T8901] netlink: 152 bytes leftover after parsing attributes in process `syz.0.828'. [ 159.257356][ T8901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.280658][ T8912] netlink: 100 bytes leftover after parsing attributes in process `syz.3.830'. [ 159.304613][ T8909] veth0: entered promiscuous mode [ 159.559220][ T8909] veth0: left promiscuous mode [ 159.827802][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 60 seconds [ 159.838810][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 60 seconds [ 159.850494][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 60 seconds [ 159.861625][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 60 seconds [ 159.973824][ T8941] tc_dump_action: action bad kind [ 160.088519][ T8941] : renamed from hsr0 (while UP) [ 160.158697][ T8941] veth1_macvtap: left promiscuous mode [ 160.181013][ T8941] macsec0: entered promiscuous mode [ 160.206487][ T8941] macsec0: entered allmulticast mode [ 160.259618][ T8954] veth1_macvtap: entered promiscuous mode [ 160.291056][ T8954] veth1_macvtap: entered allmulticast mode [ 160.297219][ T8954] macsec0: left promiscuous mode [ 160.315540][ T8954] macsec0: left allmulticast mode [ 160.320729][ T8954] veth1_macvtap: left allmulticast mode [ 160.387070][ T8962] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 160.414809][ T8961] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 160.528900][ T8968] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 160.582671][ T8968] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 160.711680][ T8982] netlink: 'syz.0.846': attribute type 3 has an invalid length. [ 160.738688][ T8982] netlink: 'syz.0.846': attribute type 3 has an invalid length. [ 160.785060][ T8985] tipc: Enabled bearer , priority 0 [ 160.836298][ T8985] syzkaller0: MTU too low for tipc bearer [ 160.842116][ T8985] tipc: Disabling bearer [ 160.963741][ T8993] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.511858][ T9022] Bluetooth: MGMT ver 1.23 [ 161.605793][ T9025] sock: sock_timestamping_bind_phc: sock not bind to device [ 162.067828][ T9060] sctp: [Deprecated]: syz.3.871 (pid 9060) Use of int in max_burst socket option. [ 162.067828][ T9060] Use struct sctp_assoc_value instead [ 162.348627][ T9070] __nla_validate_parse: 15 callbacks suppressed [ 162.348647][ T9070] netlink: 80 bytes leftover after parsing attributes in process `syz.2.874'. [ 162.403723][ T9071] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 162.490032][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 162.502806][ T9071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.518369][ T9080] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 162.529331][ T9080] netlink: 140 bytes leftover after parsing attributes in process `syz.1.878'. [ 162.548998][ T9080] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 162.733001][ T9078] bond3 (unregistering): Released all slaves [ 162.786303][ T9087] sch_fq: defrate 0 ignored. [ 163.071373][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 163.136177][ T9102] vlan1: entered allmulticast mode [ 163.159959][ T9102] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 163.235569][ T9111] netlink: 'syz.4.884': attribute type 2 has an invalid length. [ 163.255594][ T9111] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.884'. [ 163.304922][ T9111] nbd: must specify at least one socket [ 163.358357][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.888'. [ 163.473409][ T9125] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.890'. [ 163.514297][ T9125] netlink: zone id is out of range [ 163.519486][ T9125] netlink: zone id is out of range [ 163.525183][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 163.546250][ T9125] netlink: zone id is out of range [ 163.587141][ T9128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.890'. [ 163.596354][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 163.631175][ T9125] netlink: zone id is out of range [ 163.646678][ T9125] netlink: zone id is out of range [ 163.677761][ T9125] netlink: get zone limit has 8 unknown bytes [ 163.700468][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 163.886693][ T9141] bond1: entered promiscuous mode [ 163.894560][ T9141] bond1: entered allmulticast mode [ 163.900414][ T9141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.139404][ T9157] tipc: Enabled bearer , priority 10 [ 164.328729][ T9162] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 164.630402][ T9179] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.255504][ T24] tipc: Node number set to 591458664 [ 165.527287][ T9219] netlink: 'syz.1.914': attribute type 17 has an invalid length. [ 165.565501][ T9220] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.604927][ T9217] IPVS: persistence engine module ip_vs_pe_À not found [ 165.795195][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.099964][ T9244] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 166.172606][ T9244] team0: Device hsr_slave_0 failed to register rx_handler [ 166.221756][ T5868] Bluetooth: hci4: command tx timeout [ 166.700430][ T9277] pimreg: entered allmulticast mode [ 166.809527][ T9286] dvmrp1: left allmulticast mode [ 166.846886][ T9286] pimreg: left allmulticast mode [ 167.092262][ T9300] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 167.402515][ T9312] netlink: 'syz.4.945': attribute type 11 has an invalid length. [ 167.428968][ T9309] openvswitch: netlink: Missing key (keys=40, expected=100) [ 167.434823][ T9314] openvswitch: netlink: Missing key (keys=40, expected=80) [ 167.455889][ T9309] __nla_validate_parse: 14 callbacks suppressed [ 167.456018][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.944'. [ 167.655115][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 167.684650][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 167.730130][ T9318] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.947'. [ 167.782665][ T9327] netlink: 'syz.4.950': attribute type 13 has an invalid length. [ 167.790459][ T9327] netlink: 'syz.4.950': attribute type 58 has an invalid length. [ 167.819340][ T9327] netlink: 152 bytes leftover after parsing attributes in process `syz.4.950'. [ 168.107229][ T9330] bond2: entered promiscuous mode [ 168.130296][ T9330] bond2: entered allmulticast mode [ 168.154988][ T9330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.173433][ T9334] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 168.429329][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 168.578132][ T9360] netlink: 'syz.2.956': attribute type 11 has an invalid length. [ 168.608906][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 168.635796][ T9360] netlink: 'syz.2.956': attribute type 4 has an invalid length. [ 168.669841][ T9360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.956'. [ 169.024923][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 169.404853][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 170.340557][ T9461] netlink: 'syz.1.988': attribute type 3 has an invalid length. [ 171.135302][ T9480] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 171.482896][ T9489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.333624][ T9591] sctp: [Deprecated]: syz.4.1019 (pid 9591) Use of int in maxseg socket option. [ 173.333624][ T9591] Use struct sctp_assoc_value instead [ 173.399075][ T9591] __nla_validate_parse: 7 callbacks suppressed [ 173.399094][ T9591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1019'. [ 173.492854][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 173.517947][ T9597] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 173.536752][ T9597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1021'. [ 173.547568][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 173.796954][ T9610] netlink: set zone limit has 8 unknown bytes [ 173.834100][ T9615] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 173.872905][ T9615] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 173.886991][ T9615] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 173.915151][ T9615] netlink: 'syz.3.1027': attribute type 2 has an invalid length. [ 173.928902][ T9615] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1027'. [ 174.204095][ T9629] tipc: Enabled bearer , priority 0 [ 174.353635][ T9629] tipc: Disabling bearer [ 174.873240][ T5949] IPVS: starting estimator thread 0... [ 174.886385][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 175.002007][ T9665] IPVS: using max 27 ests per chain, 64800 per kthread [ 175.025689][ T9676] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 175.221708][ T9688] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.253899][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 175.279333][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 175.322934][ T9687] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1046'. [ 175.533019][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 175.863859][ T9721] syzkaller1: entered promiscuous mode [ 175.881990][ T9721] syzkaller1: entered allmulticast mode [ 175.888560][ T9717] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 175.970297][ T9733] openvswitch: netlink: Key type 85 is out of range max 32 [ 177.596445][ T9819] bond0: (slave rose0): Error: Device can not be enslaved while up [ 177.764232][ T9826] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.789602][ T9826] IPv6: Can't replace route, no match found [ 177.930612][ T9834] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 178.090562][ T9840] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 178.274409][ T9840] team0: Device veth0_vlan failed to register rx_handler [ 178.513465][ T9866] __nla_validate_parse: 6 callbacks suppressed [ 178.513484][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 178.940708][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.316101][ T9895] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 179.357502][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 179.373326][ T9908] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 179.567662][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 179.624482][ T9915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.740525][ T9921] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1110'. [ 179.971780][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 179.990344][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 180.256850][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 180.500523][ T9959] veth0_virt_wifi: renamed from vlan0 [ 180.589907][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 181.305114][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 181.330402][ T9993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.396493][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 182.001559][T10029] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.038128][T10029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.171246][T10040] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 183.367808][T10100] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 183.697555][T10115] __nla_validate_parse: 5 callbacks suppressed [ 183.697575][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 183.751573][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 184.139226][T10135] sctp: [Deprecated]: syz.4.1176 (pid 10135) Use of int in maxseg socket option. [ 184.139226][T10135] Use struct sctp_assoc_value instead [ 184.365516][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1179'. [ 184.515379][T10151] veth7: entered allmulticast mode [ 184.646553][T10154] netlink: 'syz.3.1180': attribute type 10 has an invalid length. [ 184.668201][T10154] dummy0: left allmulticast mode [ 184.694279][T10154] dummy0: left promiscuous mode [ 184.709781][T10154] bridge0: port 3(dummy0) entered disabled state [ 184.754380][T10158] netlink: 'syz.1.1181': attribute type 16 has an invalid length. [ 184.790563][T10158] netlink: 'syz.1.1181': attribute type 17 has an invalid length. [ 184.837954][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 184.856295][T10168] netlink: 'syz.3.1180': attribute type 10 has an invalid length. [ 184.885705][T10166] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1184'. [ 184.899700][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.942754][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.027749][T10156] tipc: Resetting bearer [ 185.036564][T10156] tipc: Resetting bearer [ 185.085219][ T6353] tipc: Resetting bearer [ 185.146561][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.153805][T10158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.168766][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.176106][T10158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.215251][T10158] tipc: Resetting bearer [ 185.235806][T10158] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 185.260068][T10158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.276264][T10158] ipip0: left promiscuous mode [ 185.285425][T10158] dummy0: entered promiscuous mode [ 185.306284][T10158] bond2: left promiscuous mode [ 185.312246][T10158] bond2: left allmulticast mode [ 185.340219][T10168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.396051][T10184] netlink: 'syz.1.1186': attribute type 4 has an invalid length. [ 185.409890][T10181] tipc: Enabling of bearer rejected, failed to enable media [ 185.425130][T10182] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 185.433159][T10182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1185'. [ 185.744847][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 185.774325][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 186.206068][T10226] openvswitch: netlink: Key type 85 is out of range max 32 [ 186.402045][T10238] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1202'. [ 186.419194][T10236] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 186.427905][T10238] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 186.439867][T10236] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1203'. [ 186.455484][T10236] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 186.467937][T10236] netlink: 'syz.1.1203': attribute type 2 has an invalid length. [ 186.483444][T10238] 0ªî{X¹¦: entered allmulticast mode [ 186.500597][T10238] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 186.934053][T10263] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 187.375449][T10297] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 187.405406][T10297] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 187.450343][T10289] veth0: entered promiscuous mode [ 187.456995][T10289] veth0: left promiscuous mode [ 188.050644][T10331] tipc: Enabled bearer , priority 0 [ 188.059819][T10331] syzkaller0: entered promiscuous mode [ 188.065571][T10331] syzkaller0: entered allmulticast mode [ 188.109815][T10331] tipc: Resetting bearer [ 188.166185][T10329] tipc: Resetting bearer [ 188.212012][T10329] tipc: Disabling bearer [ 189.260293][T10392] __nla_validate_parse: 3 callbacks suppressed [ 189.260311][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1247'. [ 189.541961][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 189.567776][T10405] nbd: nbd0 already in use [ 189.589114][T10407] xt_policy: too many policy elements [ 189.903381][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 90 seconds [ 189.914368][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 90 seconds [ 189.925435][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 90 seconds [ 189.936826][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 90 seconds [ 190.087247][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 190.098378][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 190.122490][T10435] validate_nla: 3 callbacks suppressed [ 190.122509][T10435] netlink: 'syz.3.1258': attribute type 10 has an invalid length. [ 190.152494][T10435] bridge_slave_1: left allmulticast mode [ 190.168222][T10435] bridge_slave_1: left promiscuous mode [ 190.186697][T10435] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.245836][T10435] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.276625][T10442] delete_channel: no stack [ 190.545357][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.728785][T10460] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 190.778332][T10467] netlink: 'syz.1.1269': attribute type 5 has an invalid length. [ 190.995055][ T30] audit: type=1800 audit(1755452154.564:3): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1264" name="memory.events" dev="tmpfs" ino=1240 res=0 errno=0 [ 191.278064][T10481] Bluetooth: MGMT ver 1.23 [ 191.452306][T10486] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1274'. [ 191.468115][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 191.490289][T10491] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1276'. [ 191.544936][T10489] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 191.748344][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 191.789078][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 192.787648][T10561] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 192.795761][T10561] netlink: 'syz.4.1302': attribute type 3 has an invalid length. [ 192.830470][T10561] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1302'. [ 192.860510][T10561] NCSI netlink: No device for ifindex 131080 [ 192.878664][T10561] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 192.896766][T10561] netlink: 'syz.4.1302': attribute type 3 has an invalid length. [ 192.914708][T10561] NCSI netlink: No device for ifindex 131080 [ 192.927220][T10561] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 192.947391][T10561] netlink: 'syz.4.1302': attribute type 3 has an invalid length. [ 192.965320][T10561] NCSI netlink: No device for ifindex 131080 [ 192.982324][T10561] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 193.002626][T10561] netlink: 'syz.4.1302': attribute type 3 has an invalid length. [ 193.027706][T10561] NCSI netlink: No device for ifindex 131080 [ 193.036430][T10561] NCSI netlink: No device for ifindex 131080 [ 193.043856][T10561] NCSI netlink: No device for ifindex 131080 [ 193.095804][T10561] NCSI netlink: No device for ifindex 131080 [ 193.106228][T10561] NCSI netlink: No device for ifindex 131080 [ 193.113230][T10561] NCSI netlink: No device for ifindex 131080 [ 193.119676][T10561] NCSI netlink: No device for ifindex 131080 [ 193.126499][T10561] NCSI netlink: No device for ifindex 131080 [ 193.133404][T10561] NCSI netlink: No device for ifindex 131080 [ 193.157589][T10561] NCSI netlink: No device for ifindex 131080 [ 193.170111][T10561] NCSI netlink: No device for ifindex 131080 [ 193.201317][T10561] NCSI netlink: No device for ifindex 131080 [ 193.219215][T10561] NCSI netlink: No device for ifindex 131080 [ 193.230293][T10561] NCSI netlink: No device for ifindex 131080 [ 193.239873][T10561] NCSI netlink: No device for ifindex 131080 [ 193.249052][T10561] NCSI netlink: No device for ifindex 131080 [ 193.276165][T10561] NCSI netlink: No device for ifindex 131080 [ 193.304952][T10561] NCSI netlink: No device for ifindex 131080 [ 193.334677][T10561] NCSI netlink: No device for ifindex 131080 [ 193.362374][T10561] NCSI netlink: No device for ifindex 131080 [ 193.379016][T10561] NCSI netlink: No device for ifindex 131080 [ 193.398636][T10561] NCSI netlink: No device for ifindex 131080 [ 193.419630][T10561] NCSI netlink: No device for ifindex 131080 [ 193.434697][T10580] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 193.445192][T10561] NCSI netlink: No device for ifindex 131080 [ 193.467439][T10561] NCSI netlink: No device for ifindex 131080 [ 193.511292][T10561] NCSI netlink: No device for ifindex 131080 [ 193.543327][T10561] NCSI netlink: No device for ifindex 131080 [ 193.550244][T10561] NCSI netlink: No device for ifindex 131080 [ 193.572965][T10561] NCSI netlink: No device for ifindex 131080 [ 193.579313][T10561] NCSI netlink: No device for ifindex 131080 [ 194.295872][T10618] __nla_validate_parse: 33 callbacks suppressed [ 194.295895][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'. [ 194.343710][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 194.643945][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1324'. [ 194.924069][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'. [ 195.026786][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 195.086374][T10649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.879476][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'. [ 196.072094][T10691] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1340'. [ 196.172574][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 196.459620][T10705] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.460597][ T1077] IPVS: starting estimator thread 0... [ 196.582192][T10713] IPVS: using max 24 ests per chain, 57600 per kthread [ 196.913965][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.107311][T10743] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1352'. [ 197.162566][T10745] Bluetooth: MGMT ver 1.23 [ 197.684925][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 197.694303][T10773] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 197.702264][T10773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.956763][T10781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.978381][T10778] validate_nla: 59 callbacks suppressed [ 198.978401][T10778] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 199.213379][T10790] veth3: entered allmulticast mode [ 199.547782][T10806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 199.681802][T10809] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 200.189476][T10837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.285526][T10847] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 200.553046][T10860] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 200.562799][T10860] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.565973][T10855] tipc: Enabling of bearer rejected, failed to enable media [ 200.613319][T10863] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 200.640197][T10855] syzkaller0: entered promiscuous mode [ 200.660575][T10855] syzkaller0: entered allmulticast mode [ 200.871087][T10874] __nla_validate_parse: 2 callbacks suppressed [ 200.871107][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1395'. [ 201.007119][T10880] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 201.034598][T10880] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 201.058922][T10880] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 201.404592][T10898] tipc: Enabled bearer , priority 0 [ 201.422997][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 201.505446][T10897] tipc: Disabling bearer [ 201.951864][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 202.058115][T10923] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 202.135065][T10924] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 202.178836][T10923] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 202.237824][T10923] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 202.514599][T10941] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 202.720573][T10961] netlink: 'syz.0.1419': attribute type 13 has an invalid length. [ 202.777159][T10961] lo: entered promiscuous mode [ 202.807792][T10961] lo: entered allmulticast mode [ 202.824844][T10961] tunl0: entered promiscuous mode [ 202.830077][T10961] tunl0: entered allmulticast mode [ 202.871519][T10961] gre0: entered promiscuous mode [ 202.876542][T10961] gre0: entered allmulticast mode [ 202.930311][T10967] IPVS: length: 74 != 24 [ 202.961958][T10961] gretap0: entered promiscuous mode [ 202.967486][T10961] gretap0: entered allmulticast mode [ 202.990768][T10961] gretap0: refused to change device tx_queue_len [ 203.016692][T10961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.544435][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.566451][T11003] tipc: Enabling of bearer rejected, failed to enable media [ 203.751681][T11012] erspan0: entered promiscuous mode [ 203.783810][T11012] erspan0: entered allmulticast mode [ 203.952590][T11025] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1436'. [ 204.205161][T11038] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 204.247381][T11038] netlink: 'syz.2.1440': attribute type 2 has an invalid length. [ 204.274252][T11038] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 204.518332][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 204.697709][T11066] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 204.712610][T11066] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1448'. [ 204.723766][T11066] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 204.763229][T11072] netlink: 'syz.0.1450': attribute type 6 has an invalid length. [ 204.803179][T11071] netlink: 'syz.0.1450': attribute type 6 has an invalid length. [ 204.834273][T11075] netlink: 'syz.0.1450': attribute type 6 has an invalid length. [ 204.940777][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 205.877606][T11116] C: renamed from lo [ 205.898153][T11116] netlink: 'syz.0.1461': attribute type 13 has an invalid length. [ 206.150635][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.189218][T11116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.299054][T11125] bond3: entered promiscuous mode [ 206.304995][T11125] bond3: entered allmulticast mode [ 206.310656][T11125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.632383][T11141] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 206.689118][T11147] netlink: 'syz.0.1472': attribute type 64 has an invalid length. [ 206.743777][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1472'. [ 206.890841][T11155] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1474'. [ 206.999578][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 207.061513][T11166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1475'. [ 207.196008][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 207.249353][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 207.259410][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 208.059834][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1489'. [ 208.166423][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 208.215632][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 208.665300][ T6397] udevd[6397]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.951641][T11249] tipc: Enabled bearer , priority 0 [ 208.981984][T11249] syzkaller0: entered promiscuous mode [ 208.997902][T11249] syzkaller0: entered allmulticast mode [ 209.004297][T11255] nbd: device at index 2 is going down [ 209.100818][T11249] tipc: Resetting bearer [ 209.169988][T11246] tipc: Resetting bearer [ 209.208737][T11246] tipc: Disabling bearer [ 209.266078][T11264] validate_nla: 2 callbacks suppressed [ 209.266101][T11264] netlink: 'syz.3.1500': attribute type 4 has an invalid length. [ 209.309630][ T6397] udevd[6397]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 209.505555][T11277] netlink: 'syz.0.1503': attribute type 4 has an invalid length. [ 210.055602][T11298] netlink: 'syz.4.1509': attribute type 11 has an invalid length. [ 210.341383][T11310] netlink: 'syz.0.1515': attribute type 9 has an invalid length. [ 210.409751][T11311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.681879][T11325] netlink: 'syz.0.1518': attribute type 8 has an invalid length. [ 210.967690][T11335] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 211.325724][T11347] netlink: 'syz.4.1523': attribute type 10 has an invalid length. [ 211.697860][T11354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.706597][T11354] team0: Port device bond4 added [ 211.823207][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.829441][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.829446][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.829508][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.108871][T11371] __nla_validate_parse: 9 callbacks suppressed [ 212.108891][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 212.132144][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 212.305754][T11388] netlink: 'syz.3.1533': attribute type 23 has an invalid length. [ 212.368496][T11377] syzkaller0: entered promiscuous mode [ 212.376637][T11377] syzkaller0: entered allmulticast mode [ 212.416973][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1533'. [ 212.625489][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 212.634596][T11398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1535'. [ 212.671365][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 212.736804][T11402] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1537'. [ 212.746723][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1538'. [ 212.846123][T11407] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.902445][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 213.231286][T11432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.272477][T11432] netlink: 'syz.1.1546': attribute type 5 has an invalid length. [ 213.335894][T11438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1548'. [ 213.523336][T11447] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 213.755144][T11438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.798512][T11438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.859901][T11438] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 213.887200][T11438] bond0 (unregistering): Released all slaves [ 214.199790][T11448] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 214.532826][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 214.570678][T11491] openvswitch: netlink: nsh attribute has 31087 unknown bytes. [ 214.589437][T11491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.523579][T11537] netlink: 'syz.2.1576': attribute type 4 has an invalid length. [ 215.562496][T11540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.597900][T11543] netlink: 'syz.0.1579': attribute type 18 has an invalid length. [ 215.796706][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806e1b7c00: rx timeout, send abort [ 216.116403][T11567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.296846][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055817c00: rx timeout, send abort [ 216.306152][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806e1b7c00: abort rx timeout. Force session deactivation [ 216.805249][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055817c00: abort rx timeout. Force session deactivation [ 217.287413][T11604] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 217.601869][T11623] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 217.778268][T11627] netlink: 'syz.4.1603': attribute type 10 has an invalid length. [ 217.807458][T11627] __nla_validate_parse: 5 callbacks suppressed [ 217.807479][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1603'. [ 217.851734][T11627] dummy0: entered promiscuous mode [ 217.869086][T11627] bridge0: port 2(dummy0) entered blocking state [ 217.895780][T11627] bridge0: port 2(dummy0) entered disabled state [ 217.913747][T11627] dummy0: entered allmulticast mode [ 217.937126][T11627] bridge0: port 2(dummy0) entered blocking state [ 217.943713][T11627] bridge0: port 2(dummy0) entered forwarding state [ 217.953731][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 218.241772][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1607'. [ 218.307029][T11645] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 218.529267][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 218.761803][T11671] netlink: 'syz.4.1614': attribute type 21 has an invalid length. [ 218.769804][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 219.118284][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 219.219732][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 219.607854][T11705] batadv_slave_1: entered promiscuous mode [ 219.615749][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 219.876126][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1631'. [ 219.991932][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 120 seconds [ 220.003429][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 120 seconds [ 220.014837][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 120 seconds [ 220.026193][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 120 seconds [ 220.059293][T11726] netlink: 'syz.1.1634': attribute type 39 has an invalid length. [ 220.216832][T11733] wg1: entered promiscuous mode [ 220.367308][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 220.379507][T11737] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 220.419335][T11743] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 220.430570][T11737] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 220.433557][T11704] batadv_slave_1: left promiscuous mode [ 221.681698][T11811] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 222.283906][T11831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.768195][T11848] netlink: 'syz.2.1667': attribute type 4 has an invalid length. [ 223.909852][T11856] __nla_validate_parse: 5 callbacks suppressed [ 223.909874][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'. [ 224.016580][T11861] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 224.160091][T11866] lo: entered promiscuous mode [ 224.177411][T11868] Driver unsupported XDP return value 0 on prog (id 395) dev N/A, expect packet loss! [ 224.208484][T11866] tunl0: entered promiscuous mode [ 224.216006][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 224.229824][T11868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1673'. [ 224.239363][T11866] gre0: entered promiscuous mode [ 224.294682][T11866] gretap0: entered promiscuous mode [ 224.331580][T11866] erspan0: entered promiscuous mode [ 224.354399][T11866] ip_vti0: entered promiscuous mode [ 224.473750][T11882] pim6reg1: entered promiscuous mode [ 224.484804][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1676'. [ 224.492626][T11882] pim6reg1: entered allmulticast mode [ 224.605083][T11887] gtp1: entered promiscuous mode [ 224.610083][T11887] gtp1: entered allmulticast mode [ 224.821857][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 224.914273][T11902] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 225.011465][T11909] dvmrp0: entered allmulticast mode [ 225.190310][T11926] netlink: 'syz.1.1692': attribute type 29 has an invalid length. [ 225.204353][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 225.215105][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1692'. [ 225.343655][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 225.791524][T11955] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 225.828687][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 225.864886][T11963] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 225.905776][T11971] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 225.915527][T11970] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 225.932242][T11967] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 226.093218][T11979] netlink: 'syz.1.1706': attribute type 24 has an invalid length. [ 226.343269][T11992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1709'. [ 226.727820][T11999] hsr_slave_0 (unregistering): left promiscuous mode [ 227.005395][T12022] tipc: Started in network mode [ 227.010414][T12022] tipc: Node identity 3ab0d78d247b, cluster identity 4711 [ 227.024022][T12022] tipc: Enabled bearer , priority 0 [ 227.034633][T12022] syzkaller0: entered promiscuous mode [ 227.050835][T12022] syzkaller0: entered allmulticast mode [ 227.081753][T12022] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 227.164440][T12026] hsr_slave_1 (unregistering): left promiscuous mode [ 227.218916][T12025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.230065][T12022] tipc: Resetting bearer [ 227.273256][T12021] tipc: Resetting bearer [ 227.335975][T12021] tipc: Disabling bearer [ 227.459786][T12041] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 227.467438][T12041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.091349][T12126] netlink: 'syz.2.1748': attribute type 5 has an invalid length. [ 229.341461][T12143] __nla_validate_parse: 9 callbacks suppressed [ 229.341480][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1751'. [ 229.556346][T12133] syzkaller0: entered promiscuous mode [ 229.577476][T12133] syzkaller0: entered allmulticast mode [ 229.597684][T12154] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1754'. [ 229.946931][T12182] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 229.959548][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1760'. [ 229.975144][T12182] netlink: 'syz.1.1760': attribute type 21 has an invalid length. [ 229.984656][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1760'. [ 230.101669][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1762'. [ 231.582704][T12212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 231.615758][T12212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 232.240718][T12233] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 232.937393][T12263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1783'. [ 232.949515][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 233.004698][T12263] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 233.056569][T12263] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 233.071074][T12263] gretap1: entered promiscuous mode [ 233.077288][T12263] gretap1: entered allmulticast mode [ 233.368950][T12283] tipc: Enabled bearer , priority 0 [ 233.398728][T12283] syzkaller0: entered promiscuous mode [ 233.430666][T12283] syzkaller0: entered allmulticast mode [ 233.517929][T12283] tipc: Resetting bearer [ 233.547754][T12282] tipc: Resetting bearer [ 233.620738][T12282] tipc: Disabling bearer [ 234.068977][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1803'. [ 234.136601][T12320] xfrm1: entered promiscuous mode [ 234.151882][T12320] xfrm1: entered allmulticast mode [ 234.393514][T12337] __nla_validate_parse: 4 callbacks suppressed [ 234.393534][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'. [ 234.633088][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 235.048340][T12378] netlink: 'syz.2.1823': attribute type 1 has an invalid length. [ 235.090374][T12378] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1823'. [ 235.929692][T12430] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 236.005174][T12436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1837'. [ 236.107045][T12436] vlan0: entered allmulticast mode [ 236.129477][T12436] bridge0: entered allmulticast mode [ 236.394794][T12448] tipc: Enabled bearer , priority 0 [ 236.420037][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 236.430591][T12448] syzkaller0: entered promiscuous mode [ 236.445213][T12448] syzkaller0: entered allmulticast mode [ 236.481565][T12448] tipc: Resetting bearer [ 236.492022][T12457] : renamed from hsr0 [ 236.501801][T12452] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1845'. [ 236.512728][T12446] tipc: Resetting bearer [ 236.550259][T12446] tipc: Disabling bearer [ 236.850687][T12476] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1852'. [ 236.867703][T12475] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.1851'. [ 237.377105][T12504] netlink: zone id is out of range [ 237.385745][T12504] netlink: del zone limit has 4 unknown bytes [ 237.673420][T12522] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1864'. [ 237.687319][T12522] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1864'. [ 237.877337][T12534] veth0: entered promiscuous mode [ 238.208454][T12551] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 238.737365][T12582] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 239.250261][T12602] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 239.403164][T12608] gretap2: entered promiscuous mode [ 239.408640][T12608] gretap2: entered allmulticast mode [ 239.443363][T12608] __nla_validate_parse: 8 callbacks suppressed [ 239.443384][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 239.546232][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 239.789629][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1891'. [ 240.060092][T12642] pim6reg: entered allmulticast mode [ 240.096477][T12642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1897'. [ 240.112914][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1897'. [ 240.126663][T12649] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1899'. [ 240.168998][T12642] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.240795][T12651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1901'. [ 240.447494][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 240.666314][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1908'. [ 240.704725][T12677] C: left promiscuous mode [ 240.709223][T12677] C: left allmulticast mode [ 240.754206][T12677] tunl0: left promiscuous mode [ 240.759534][T12677] tunl0: left allmulticast mode [ 240.777458][T12677] gre0: left promiscuous mode [ 240.810709][T12677] gre0: left allmulticast mode [ 240.831881][T12677] gretap0: left promiscuous mode [ 240.836969][T12677] gretap0: left allmulticast mode [ 240.881997][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1912'. [ 241.020803][T12689] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 241.082053][T12689] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 241.124274][T12689] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 241.160329][T12689] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 241.199445][T12703] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 241.338004][T12703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.067590][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.599644][T12764] syzkaller0: entered promiscuous mode [ 242.609351][T12764] syzkaller0: entered allmulticast mode [ 243.019079][T12782] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 243.257838][T12787] sctp: [Deprecated]: syz.0.1943 (pid 12787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.257838][T12787] Use struct sctp_sack_info instead [ 244.669020][T12821] netlink: 'syz.4.1950': attribute type 4 has an invalid length. [ 244.680169][T12823] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 244.722951][T12815] netlink: 'syz.4.1950': attribute type 4 has an invalid length. [ 245.400595][T12857] tipc: Enabling of bearer rejected, failed to enable media [ 245.725820][T12870] netlink: 'syz.1.1961': attribute type 12 has an invalid length. [ 245.734004][T12870] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 245.746365][T12870] __nla_validate_parse: 6 callbacks suppressed [ 245.746384][T12870] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1961'. [ 245.778750][T12870] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1961'. [ 245.797205][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1961'. [ 245.897480][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1962'. [ 246.050173][T12882] pim6reg: entered allmulticast mode [ 246.126147][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 246.558273][T12909] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 246.566951][T12909] netlink: 'syz.1.1971': attribute type 8 has an invalid length. [ 246.575051][T12909] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1971'. [ 246.754476][T12916] netlink: 'syz.1.1972': attribute type 11 has an invalid length. [ 246.885017][T12921] netlink: 'syz.0.1974': attribute type 12 has an invalid length. [ 246.915449][T12921] netlink: 'syz.0.1974': attribute type 29 has an invalid length. [ 246.939516][T12921] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1974'. [ 246.991203][T12921] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1974'. [ 247.162695][T12936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.170017][T12936] IPv6: NLM_F_CREATE should be set when creating new route [ 247.253132][T12939] IPv6: NLM_F_REPLACE set, but no existing node found! [ 247.267645][T12940] delete_channel: no stack [ 247.277324][T12940] delete_channel: no stack [ 247.329059][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 247.360490][T12946] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.396063][T12946] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.421351][T12946] gretap1: entered promiscuous mode [ 247.426624][T12946] gretap1: entered allmulticast mode [ 247.458978][T12952] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 247.488142][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 247.504516][T12954] netlink: 'syz.3.1983': attribute type 5 has an invalid length. [ 247.713545][T12965] netlink: 'syz.4.1987': attribute type 10 has an invalid length. [ 247.972562][T12980] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 248.011510][T12984] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 248.044020][T12986] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 249.029154][T13043] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 249.045106][T13043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.171894][T13052] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 250.070511][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 150 seconds [ 250.082540][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 150 seconds [ 250.094068][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 150 seconds [ 250.105246][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 150 seconds [ 250.565401][T13082] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 250.725095][T13114] bond4 (unregistering): Released all slaves [ 250.777145][T13121] __nla_validate_parse: 18 callbacks suppressed [ 250.777173][T13121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2040'. [ 250.843836][T13116] ip6tnl1: entered promiscuous mode [ 250.849384][T13116] ip6tnl1: entered allmulticast mode [ 250.962983][T13126] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2042'. [ 251.007189][T13128] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2042'. [ 251.355010][T13155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2049'. [ 251.479768][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 251.744385][ T5876] Bluetooth: hci4: command 0x0401 tx timeout [ 253.113102][T13184] validate_nla: 8 callbacks suppressed [ 253.113124][T13184] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 253.188241][T13184] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2052'. [ 253.213575][T13184] netlink: 'syz.1.2052': attribute type 2 has an invalid length. [ 253.224859][T13184] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 253.429496][T13198] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2059'. [ 253.657876][T13209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2061'. [ 254.074354][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2068'. [ 254.179683][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 254.488440][T13242] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 254.516317][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.543190][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.551516][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.564098][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.572841][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.749084][T13218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.900245][T13248] chnl_net:caif_netlink_parms(): no params data found [ 255.409206][T13248] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.439664][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.451588][T13248] bridge_slave_0: entered allmulticast mode [ 255.479931][T13248] bridge_slave_0: entered promiscuous mode [ 255.511771][T13248] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.518959][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.532214][T13248] bridge_slave_1: entered allmulticast mode [ 255.543730][T13248] bridge_slave_1: entered promiscuous mode [ 255.679898][T13248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.717091][T13248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.747877][T13301] sctp: [Deprecated]: syz.0.2089 (pid 13301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.747877][T13301] Use struct sctp_sack_info instead [ 255.948647][T13248] team0: Port device team_slave_0 added [ 255.989603][T13248] team0: Port device team_slave_1 added [ 256.237069][T13248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.246044][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.275142][T13248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.300348][T13248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.308360][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.359688][T13248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.588471][T13248] hsr_slave_0: entered promiscuous mode [ 256.604211][T13248] hsr_slave_1: entered promiscuous mode [ 256.621489][ T5876] Bluetooth: hci5: command tx timeout [ 256.747761][T13350] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 256.924122][T13357] netlink: 'syz.3.2102': attribute type 4 has an invalid length. [ 256.962065][T13355] netlink: 'syz.3.2102': attribute type 4 has an invalid length. [ 257.049361][T13358] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 257.350115][T13373] __nla_validate_parse: 6 callbacks suppressed [ 257.350137][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'. [ 257.460206][T13383] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 257.486143][T13248] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.495230][T13382] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 257.527118][T13248] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.550240][T13248] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.574165][T13248] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.744234][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 257.807459][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 257.851967][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 258.002836][T13408] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 258.104389][T13408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 258.179617][T13414] veth13: entered promiscuous mode [ 258.194877][T13414] bond9: (slave veth13): Enslaving as an active interface with a down link [ 258.233814][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2115'. [ 258.286989][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.390220][T13248] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.427855][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.435114][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.502002][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.509271][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.509657][T13428] netlink: ct family unspecified [ 258.528079][T13428] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.544472][T13427] sctp: [Deprecated]: syz.4.2121 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.544472][T13427] Use struct sctp_sack_info instead [ 258.701848][ T5876] Bluetooth: hci5: command tx timeout [ 258.936489][T13446] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2128'. [ 258.985856][T13450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2128'. [ 259.469398][T13248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.894181][T13248] veth0_vlan: entered promiscuous mode [ 259.923259][T13248] veth1_vlan: entered promiscuous mode [ 259.992455][T13248] veth0_macvtap: entered promiscuous mode [ 260.028998][T13248] veth1_macvtap: entered promiscuous mode [ 260.099299][T13248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.113191][T13248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.172323][ T6384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.212302][ T6384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.238283][ T6384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.331059][ T6384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.409208][T13502] netlink: 'syz.4.2140': attribute type 27 has an invalid length. [ 260.459988][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 260.516875][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 260.571493][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 260.702043][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.723431][T13508] nbd3: detected capacity change from 0 to 549764202496 [ 260.734133][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.766530][ T5876] block nbd3: Receive control failed (result -104) [ 260.784698][ T5876] Bluetooth: hci5: command tx timeout [ 260.888727][T13513] bond4: entered promiscuous mode [ 260.904286][T13513] bond4: entered allmulticast mode [ 260.910424][T13513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.979859][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.983449][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.991056][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.995573][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.218944][T13530] syzkaller1: entered promiscuous mode [ 261.231726][T13530] syzkaller1: entered allmulticast mode [ 261.274206][T13530] 8021q: VLANs not supported on ipvlan1 [ 261.369018][T13543] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 261.750482][ T30] audit: type=1804 audit(1755452225.314:4): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2156" name="/newroot/3/cgroup.controllers" dev="tmpfs" ino=33 res=1 errno=0 [ 261.782908][ T30] audit: type=1800 audit(1755452225.314:5): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2156" name="cgroup.controllers" dev="tmpfs" ino=33 res=0 errno=0 [ 261.979294][T13579] pimreg: entered allmulticast mode [ 262.413937][T13599] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 262.767312][T13616] __nla_validate_parse: 2 callbacks suppressed [ 262.767333][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 262.862356][ T5876] Bluetooth: hci5: command tx timeout [ 263.115735][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 263.234664][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 263.445581][T13649] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2177'. [ 263.496111][T13649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.546907][T13645] bridge_slave_1: left allmulticast mode [ 263.563823][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 263.575216][T13645] bridge_slave_1: left promiscuous mode [ 263.600510][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.657801][T13645] bridge_slave_0: left allmulticast mode [ 263.673525][T13645] bridge_slave_0: left promiscuous mode [ 263.690674][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.573574][T13699] tc_dump_action: action bad kind [ 264.666908][T13706] netlink: 'syz.4.2192': attribute type 5 has an invalid length. [ 264.769513][T13714] netlink: zone id is out of range [ 264.789822][T13714] netlink: del zone limit has 4 unknown bytes [ 264.803285][T13714] openvswitch: netlink: IP tunnel dst address not specified [ 264.826753][T13713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2197'. [ 264.857445][T13715] bond5 (unregistering): Released all slaves [ 264.992037][T13723] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2200'. [ 265.407490][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2204'. [ 265.420201][T13743] netlink: 776 bytes leftover after parsing attributes in process `syz.5.2204'. [ 265.641830][T13751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.740307][T13731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.758536][T13731] openvswitch: netlink: Message has 4 unknown bytes. [ 265.772798][T13731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.786328][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 267.349774][T13772] batadv1: entered allmulticast mode [ 267.444889][T13779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.611349][T13789] netlink: 'syz.0.2219': attribute type 13 has an invalid length. [ 267.787642][T13789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.844332][T13796] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 268.235952][T13824] vlan2: entered promiscuous mode [ 268.249330][T13824] bridge0: entered promiscuous mode [ 268.423817][T13838] __nla_validate_parse: 4 callbacks suppressed [ 268.423838][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2233'. [ 268.500783][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 268.690598][T13854] 8021q: VLANs not supported on sit0 [ 268.708984][T13854] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2237'. [ 268.720230][T13854] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 269.218632][T13878] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.230785][ T5959] IPVS: starting estimator thread 0... [ 269.281479][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2250'. [ 269.332039][T13884] IPVS: using max 33 ests per chain, 79200 per kthread [ 269.377129][T13893] netlink: 'syz.4.2250': attribute type 21 has an invalid length. [ 269.385362][T13893] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2250'. [ 269.422351][T13892] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 269.476342][T13899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2251'. [ 269.564170][T13892] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.682594][T13905] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2254'. [ 271.156154][T13914] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 271.184991][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2257'. [ 271.361254][T13924] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 271.665768][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 271.716940][T13955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 271.995621][T13967] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 272.024488][T13967] netlink: 'syz.5.2271': attribute type 2 has an invalid length. [ 272.041755][T13968] gtp0: entered promiscuous mode [ 272.053344][T13968] gtp0: entered allmulticast mode [ 272.649415][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.910051][T14008] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 273.022122][T14016] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 273.088040][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.419487][T14038] delete_channel: no stack [ 273.986460][T14071] __nla_validate_parse: 7 callbacks suppressed [ 273.986481][T14071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2299'. [ 274.074208][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 274.247823][T14082] wg1: entered promiscuous mode [ 274.272413][T14082] wg1: entered allmulticast mode [ 274.283242][T14083] batadv_slave_1: entered promiscuous mode [ 274.303141][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 274.327587][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2306'. [ 274.332694][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 274.460079][T14081] batadv_slave_1: left promiscuous mode [ 274.565675][T14095] tap0: tun_chr_ioctl cmd 1074025678 [ 274.573333][T14095] tap0: group set to 0 [ 274.577967][T14095] tap0: tun_chr_ioctl cmd 1074025678 [ 274.586777][T14095] tap0: group set to 0 [ 274.780234][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 274.790539][T14105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2312'. [ 274.957289][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 274.984232][T14114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.111540][T14116] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2317'. [ 275.417512][T14133] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2322'. [ 275.480077][T14127] syzkaller0: entered promiscuous mode [ 275.505286][T14127] syzkaller0: entered allmulticast mode [ 275.546077][T14127] netlink: 'syz.4.2321': attribute type 10 has an invalid length. [ 275.563113][T14139] nbd: must specify a size in bytes for the device [ 277.210021][T14162] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 277.254697][T14162] netlink: 'syz.0.2328': attribute type 2 has an invalid length. [ 277.276258][T14162] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 277.307695][T14162] netlink: 'syz.0.2328': attribute type 2 has an invalid length. [ 277.510514][T14174] netlink: 'syz.5.2331': attribute type 10 has an invalid length. [ 277.545193][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.555906][T14174] bridge_slave_1: left allmulticast mode [ 277.581608][T14174] bridge_slave_1: left promiscuous mode [ 277.596771][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.689835][T14174] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 278.100159][T14197] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 278.116206][T14197] nbd: couldn't find device at index 1048576 [ 279.724505][T14271] __nla_validate_parse: 6 callbacks suppressed [ 279.724525][T14271] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2359'. [ 279.742633][T14271] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2359'. [ 279.795366][T14276] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 279.844277][T14276] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 280.016227][T14290] netlink: 'syz.3.2362': attribute type 11 has an invalid length. [ 280.020029][T14289] netlink: 'syz.4.2365': attribute type 2 has an invalid length. [ 280.064525][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2364'. [ 280.082309][T14289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2365'. [ 280.144447][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 180 seconds [ 280.155565][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 180 seconds [ 280.166715][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 180 seconds [ 280.178113][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 180 seconds [ 280.233410][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2366'. [ 280.351960][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2368'. [ 280.428285][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2366'. [ 280.438015][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2366'. [ 280.470418][T14315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2370'. [ 280.778558][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 281.136569][T14335] veth7: entered promiscuous mode [ 282.164169][T14395] validate_nla: 1 callbacks suppressed [ 282.164188][T14395] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 282.722935][T14433] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 283.103868][T14451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.288081][T14462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.295409][T14462] IPv6: NLM_F_CREATE should be set when creating new route [ 283.302715][T14462] IPv6: NLM_F_CREATE should be set when creating new route [ 283.309991][T14462] IPv6: NLM_F_CREATE should be set when creating new route [ 283.329737][T14466] IPv6: sit2: Disabled Multicast RS [ 283.349537][T14466] sit2: entered allmulticast mode [ 283.372519][T14469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.448233][T14462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.479137][T14476] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 283.505760][T14476] openvswitch: netlink: Duplicate key (type 0). [ 283.816958][T14490] tipc: Resetting bearer [ 285.798977][T14530] __nla_validate_parse: 15 callbacks suppressed [ 285.798999][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2436'. [ 286.013839][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 286.105952][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2443'. [ 286.144965][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 286.209423][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.373510][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.377492][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 286.833021][T14585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.158127][T14604] netlink: 'syz.3.2453': attribute type 2 has an invalid length. [ 287.177678][T14604] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2453'. [ 287.418576][T14620] netlink: set zone limit has 8 unknown bytes [ 287.458823][T14625] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 287.514515][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2463'. [ 287.639728][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 287.729685][T14637] tipc: Started in network mode [ 287.742027][T14637] tipc: Node identity da2052c0fd95, cluster identity 4711 [ 287.751452][T14637] tipc: Enabled bearer , priority 10 [ 287.758899][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'. [ 288.133198][T14656] C: renamed from team_slave_0 [ 288.141707][T14656] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 288.154823][T14656] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 288.224731][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 288.303076][T14656] macvtap1: entered promiscuous mode [ 288.308677][T14656] vlan0: entered promiscuous mode [ 288.315820][T14656] macvtap1: entered allmulticast mode [ 288.321629][T14656] vlan0: entered allmulticast mode [ 288.326859][T14656] veth0_vlan: entered allmulticast mode [ 288.540168][T14667] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 288.572085][T14670] xfrm1: entered allmulticast mode [ 288.789470][T14683] vlan2: entered allmulticast mode [ 288.813051][T14683] bond0: entered allmulticast mode [ 288.824385][T14683] bond_slave_0: entered allmulticast mode [ 288.830281][T14683] bond_slave_1: entered allmulticast mode [ 288.863299][T14683] bridge_slave_1: entered allmulticast mode [ 288.871218][ T5935] tipc: Node number set to 666194624 [ 288.894780][T14688] netlink: 'syz.5.2480': attribute type 142 has an invalid length. [ 288.922607][T14686] tipc: Enabling of bearer rejected, failed to enable media [ 288.943825][T14686] netlink: 'syz.3.2484': attribute type 11 has an invalid length. [ 289.274831][T14711] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 289.678464][T14728] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 289.769564][T14733] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.842771][T14733] bond5: entered promiscuous mode [ 289.847945][T14733] bond5: entered allmulticast mode [ 289.855319][T14733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.866580][T14738] xt_socket: unknown flags 0x50 [ 290.042946][T14747] IPVS: length: 246 != 8 [ 290.047465][T14744] IPVS: length: 246 != 8 [ 290.233708][T14753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.639976][T14775] IPv6: NLM_F_REPLACE set, but no existing node found! [ 290.920466][T14789] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 290.986459][T14787] bridge_slave_0: left allmulticast mode [ 291.025346][ T55] block nbd3: Possible stuck request ffff888025585080: control (read@0,4096B). Runtime 30 seconds [ 291.037943][T14787] bridge_slave_0: left promiscuous mode [ 291.044696][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.115859][T14787] bond0: (slave bridge_slave_1): Releasing backup interface [ 291.147661][T14787] bridge_slave_1: left allmulticast mode [ 291.169187][T14787] bond0: (slave bond_slave_0): Releasing backup interface [ 291.188781][T14787] bond_slave_0: left allmulticast mode [ 291.210063][T14787] bond0: (slave bond_slave_1): Releasing backup interface [ 291.229497][T14787] bond_slave_1: left allmulticast mode [ 291.281238][T14787] team0: Port device team_slave_0 removed [ 291.332482][T14787] team0: Port device team_slave_1 removed [ 291.362193][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.388434][T14787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.406254][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.418723][T14787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.974238][T14831] __nla_validate_parse: 71 callbacks suppressed [ 291.974262][T14831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2521'. [ 292.017185][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2521'. [ 292.085311][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 292.098766][T14835] netlink: 'syz.5.2523': attribute type 4 has an invalid length. [ 292.137294][T14837] netlink: 'syz.3.2521': attribute type 2 has an invalid length. [ 292.151548][T14837] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2521'. [ 292.610537][T14856] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2530'. [ 292.787334][T14871] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 292.808598][T14870] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 292.834443][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 293.072560][T14882] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 293.091211][T14831] infiniband syz0: set down [ 293.096018][T14831] infiniband syz0: added ipvlan1 [ 293.115318][T14831] syz0: rxe_create_cq: returned err = -12 [ 293.132889][T14831] infiniband syz0: Couldn't create ib_mad CQ [ 293.166004][T14831] infiniband syz0: Couldn't open port 1 [ 293.326498][T14831] RDS/IB: syz0: added [ 293.357545][T14831] smc: adding ib device syz0 with port count 1 [ 293.398614][T14831] smc: ib device syz0 port 1 has pnetid [ 293.677425][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2545'. [ 293.938358][T14934] tipc: Enabled bearer , priority 0 [ 293.977597][T14934] syzkaller0: entered promiscuous mode [ 293.987050][T14934] syzkaller0: entered allmulticast mode [ 294.010383][T14934] tipc: Resetting bearer [ 294.019938][T14933] tipc: Resetting bearer [ 294.063560][T14933] tipc: Disabling bearer [ 294.073473][T14942] IPVS: length: 184 != 24 [ 294.733505][T14972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.759975][T14972] tipc: Enabling of bearer rejected, failed to enable media [ 294.961199][T14983] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2566'. [ 294.975390][T14983] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2566'. [ 295.388741][T15000] netlink: 'syz.4.2567': attribute type 21 has an invalid length. [ 295.416503][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 295.662440][T15008] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 295.732893][T15010] syzkaller1: entered promiscuous mode [ 295.765718][T15010] syzkaller1: entered allmulticast mode [ 296.175731][T15036] netlink: 'syz.5.2578': attribute type 10 has an invalid length. [ 296.219122][T15036] bridge0: entered allmulticast mode [ 296.702943][T15060] tipc: Enabled bearer , priority 0 [ 296.715942][T15060] syzkaller0: entered promiscuous mode [ 296.723299][T15060] syzkaller0: entered allmulticast mode [ 296.750357][T15060] tipc: Resetting bearer [ 296.766794][T15065] tipc: Enabling of bearer rejected, already enabled [ 296.800445][T15065] tipc: Resetting bearer [ 296.816586][T15065] tipc: Disabling bearer [ 297.039136][T15071] __nla_validate_parse: 1 callbacks suppressed [ 297.039158][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2585'. [ 297.373794][T15087] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2589'. [ 297.631968][T15094] netlink: 'syz.5.2591': attribute type 4 has an invalid length. [ 297.726259][T15097] openvswitch: netlink: Multiple metadata blocks provided [ 297.753951][T15095] openvswitch: netlink: Multiple metadata blocks provided [ 297.810376][T15098] syzkaller0: entered promiscuous mode [ 297.816054][T15098] syzkaller0: entered allmulticast mode [ 297.881347][T15104] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2593'. [ 299.499527][T15118] vlan2: entered allmulticast mode [ 299.505389][T15118] veth1: entered allmulticast mode [ 299.516333][T15121] syzkaller0: entered promiscuous mode [ 299.527531][T15121] syzkaller0: entered allmulticast mode [ 299.735252][T15133] IPv6: Can't replace route, no match found [ 299.924020][T15145] tipc: Enabled bearer , priority 0 [ 299.932121][T15145] syzkaller0: entered promiscuous mode [ 299.937634][T15145] syzkaller0: entered allmulticast mode [ 299.993891][T15145] tipc: Resetting bearer [ 300.024840][T15141] tipc: Resetting bearer [ 300.071713][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 300.107659][T15141] tipc: Disabling bearer [ 300.309739][T15164] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2609'. [ 300.322411][T15161] syzkaller0: entered promiscuous mode [ 300.327923][T15161] syzkaller0: entered allmulticast mode [ 300.357963][T15160] tipc: Enabled bearer , priority 0 [ 300.366541][T15160] tipc: Enabling of bearer rejected, already enabled [ 300.443473][T15160] tipc: Resetting bearer [ 300.492722][T15160] tipc: Disabling bearer [ 301.154884][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 301.219720][T15209] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 301.285902][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2623'. [ 301.313518][T15216] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 301.542295][T15230] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 301.603440][T15222] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 301.780144][T15250] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2631'. [ 301.826959][T15248] tipc: Enabled bearer , priority 0 [ 301.861703][T15253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.068461][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.102676][T15254] tipc: Disabling bearer [ 302.480625][T15287] tipc: Trying to set illegal importance in message [ 302.517318][T15287] tipc: Enabled bearer , priority 0 [ 302.525166][T15287] syzkaller0: entered promiscuous mode [ 302.530690][T15287] syzkaller0: entered allmulticast mode [ 302.573936][T15286] tipc: Resetting bearer [ 302.650078][T15286] tipc: Disabling bearer [ 302.674424][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2640'. [ 302.701133][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2640'. [ 302.711439][T15291] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2640'. [ 302.751522][T15294] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2640'. [ 302.874228][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 302.934774][T15304] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2645'. [ 303.578477][T15334] IPv6: sit2: Disabled Multicast RS [ 303.590194][T15336] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 303.628242][T15334] sit2: entered allmulticast mode [ 303.818048][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 303.843504][T15352] netlink: 'syz.3.2660': attribute type 24 has an invalid length. [ 303.880519][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 303.918569][T15353] ip6erspan0: entered promiscuous mode [ 303.928323][T15353] ip6erspan0: entered allmulticast mode [ 304.047672][T15361] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 304.074444][T15361] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 304.371099][T15375] tipc: Enabling of bearer rejected, failed to enable media [ 304.380783][T15372] netlink: 'syz.5.2665': attribute type 1 has an invalid length. [ 304.388749][T15372] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2665'. [ 304.398063][T15372] nbd: couldn't find device at index 1048576 [ 304.404939][T15377] tipc: Enabling of bearer rejected, failed to enable media [ 304.675640][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 305.256495][T15422] netlink: 'syz.4.2676': attribute type 2 has an invalid length. [ 305.296094][T15426] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 305.304473][T15426] bridge_slave_1: left allmulticast mode [ 305.310226][T15426] bridge_slave_1: left promiscuous mode [ 305.317854][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.316110][T15444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.328010][T15457] netlink: 'syz.5.2687': attribute type 1 has an invalid length. [ 306.733460][T15481] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 307.075193][T15504] syz_tun: entered allmulticast mode [ 307.227445][T15502] syz_tun: left allmulticast mode [ 307.484310][T15522] Bluetooth: MGMT ver 1.23 [ 307.681312][T15535] __nla_validate_parse: 4 callbacks suppressed [ 307.681332][T15535] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2707'. [ 307.834894][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2708'. [ 307.847703][T15542] netlink: 'syz.5.2708': attribute type 1 has an invalid length. [ 307.866073][T15542] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2708'. [ 307.945861][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2710'. [ 308.101713][T15550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2711'. [ 309.079067][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 309.096130][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 309.109332][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 309.116933][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2719'. [ 309.119709][T15577] netlink: 'syz.5.2718': attribute type 3 has an invalid length. [ 309.284950][T15581] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 309.691631][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2727'. [ 309.794275][T15596] infiniband syz1: set active [ 309.800926][T15596] infiniband syz1: added bond0 [ 309.866057][T15596] RDS/IB: syz1: added [ 309.872085][T15596] smc: adding ib device syz1 with port count 1 [ 309.878873][T15596] smc: ib device syz1 port 1 has pnetid [ 310.151596][T15609] syzkaller0: entered promiscuous mode [ 310.159005][T15609] syzkaller0: entered allmulticast mode [ 310.230700][ T125] block nbd0: Possible stuck request ffff88802547e000: control (read@0,1024B). Runtime 210 seconds [ 310.246734][ T125] block nbd0: Possible stuck request ffff88802547e1c0: control (read@1024,1024B). Runtime 210 seconds [ 310.257970][ T125] block nbd0: Possible stuck request ffff88802547e380: control (read@2048,1024B). Runtime 210 seconds [ 310.269525][ T125] block nbd0: Possible stuck request ffff88802547e540: control (read@3072,1024B). Runtime 210 seconds [ 310.344046][T15614] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20001 [ 311.515973][ T5872] Bluetooth: hci5: command 0x0405 tx timeout [ 311.669349][T15620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.448735][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.457971][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.466643][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.491183][ T5876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.509881][ T5876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.564798][T15641] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 312.951114][T15659] __nla_validate_parse: 2 callbacks suppressed [ 312.951134][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2747'. [ 313.307523][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2749'. [ 314.002537][T15688] IPVS: persistence engine module ip_vs_pe_À not found [ 314.074921][T15695] netlink: 'syz.5.2756': attribute type 1 has an invalid length. [ 314.143097][T15695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.233307][T15697] veth5: entered promiscuous mode [ 314.415185][T15636] chnl_net:caif_netlink_parms(): no params data found [ 314.543582][ T5876] Bluetooth: hci6: command tx timeout [ 314.721388][ T5959] IPVS: starting estimator thread 0... [ 314.773884][T15720] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2761'. [ 314.825281][T15636] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.833781][T15718] IPVS: using max 25 ests per chain, 60000 per kthread [ 314.849400][T15636] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.858077][T15636] bridge_slave_0: entered allmulticast mode [ 314.866643][T15636] bridge_slave_0: entered promiscuous mode [ 314.876016][T15636] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.884844][T15636] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.900219][T15636] bridge_slave_1: entered allmulticast mode [ 314.923782][T15636] bridge_slave_1: entered promiscuous mode [ 314.964662][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2761'. [ 315.095702][T15636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.147894][T15636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.327927][T15636] team0: Port device team_slave_0 added [ 315.352269][T15636] team0: Port device team_slave_1 added [ 315.455147][T15636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.466345][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.498813][T15636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.522472][T15738] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2767'. [ 315.538399][T15636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.549457][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.583169][T15636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.823666][T15636] hsr_slave_0: entered promiscuous mode [ 315.844295][T15636] hsr_slave_1: entered promiscuous mode [ 315.850731][T15636] debugfs: 'hsr0' already exists in 'hsr' [ 315.890902][T15636] Cannot create hsr debugfs directory [ 316.070396][T15754] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 316.101892][T15759] tipc: Enabled bearer , priority 0 [ 316.159930][T15759] syzkaller0: entered promiscuous mode [ 316.174806][T15759] syzkaller0: entered allmulticast mode [ 316.219798][T15762] tipc: Resetting bearer [ 316.248651][T15762] tipc: Disabling bearer [ 316.622527][ T5872] Bluetooth: hci6: command tx timeout [ 316.652909][T15636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.693263][T15636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.723308][T15636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.746815][T15636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.109139][T15636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.167179][T15636] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.174466][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 317.392089][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.400360][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.406160][T15822] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 317.435526][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.442762][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.624026][T15830] delete_channel: no stack [ 317.879924][T15838] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 317.897417][T15840] netlink: 'syz.3.2789': attribute type 3 has an invalid length. [ 317.965820][T15842] netlink: 'syz.3.2789': attribute type 3 has an invalid length. [ 318.088274][T15636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.600498][T15636] veth0_vlan: entered promiscuous mode [ 318.616226][T15636] veth1_vlan: entered promiscuous mode [ 318.658620][T15636] veth0_macvtap: entered promiscuous mode [ 318.668422][T15636] veth1_macvtap: entered promiscuous mode [ 318.693603][T15636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.701530][ T5872] Bluetooth: hci6: command 0x040f tx timeout [ 318.716693][T15636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.734403][ T6381] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.744149][ T6381] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.756412][ T6381] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.767536][ T6381] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.187583][T15871] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2795'. [ 319.427970][ T6358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.448900][ T6358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.572115][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.602519][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.613563][T15895] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2801'. [ 319.653306][T15895] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2801'. [ 320.058507][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2807'. [ 320.094849][T15916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2808'. [ 320.101464][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2807'. [ 320.112891][T15916] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.341825][T15929] sctp: [Deprecated]: syz.6.2810 (pid 15929) Use of int in max_burst socket option deprecated. [ 320.341825][T15929] Use struct sctp_assoc_value instead [ 320.386335][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2813'. [ 320.486144][T15935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.530265][T15935] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2814'. [ 320.782449][ T5876] Bluetooth: hci6: command 0x040f tx timeout [ 320.884250][T15954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2821'. [ 320.919120][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 321.076443][T15957] geneve3: entered promiscuous mode [ 321.098932][T15957] geneve3: entered allmulticast mode [ 321.105235][ T55] block nbd3: Possible stuck request ffff888025585080: control (read@0,4096B). Runtime 60 seconds [ 321.163780][ T79] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 321.208252][ T79] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 321.329126][T15960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.349234][T15960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.613283][T15976] netlink: 'syz.6.2829': attribute type 3 has an invalid length. [ 321.740337][ T5872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.767344][ T5872] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.776150][ T5872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.786853][ T5872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.795950][ T5872] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.969301][T15993] sctp: [Deprecated]: syz.5.2835 (pid 15993) Use of int in maxseg socket option. [ 321.969301][T15993] Use struct sctp_assoc_value instead [ 322.550370][T16009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.864054][ T5872] Bluetooth: hci6: command 0x040f tx timeout [ 322.910598][T15960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.932009][T15960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.946981][T15960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 323.189343][T16041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.308397][T15960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.399871][T15960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.481958][T15960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 323.821016][ T5872] Bluetooth: hci7: command tx timeout [ 323.830513][T16059] : renamed from hsr0 (while UP) [ 323.877526][T16056] netlink: zone id is out of range [ 323.893845][T16056] netlink: zone id is out of range [ 323.911400][T16056] netlink: zone id is out of range [ 323.916631][T15983] chnl_net:caif_netlink_parms(): no params data found [ 323.941275][T16056] netlink: zone id is out of range [ 323.946455][T16056] netlink: zone id is out of range [ 323.968903][T16056] netlink: get zone limit has 8 unknown bytes [ 323.999608][T16066] netlink: 'syz.6.2855': attribute type 33 has an invalid length. [ 324.303933][ T79] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.312328][ T79] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 324.321971][ T79] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.333181][ T79] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.341665][ T79] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 324.349952][ T79] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.535853][ T79] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.545498][ T79] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 324.565951][ T79] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.587080][T15983] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.597843][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.605752][T15983] bridge_slave_0: entered allmulticast mode [ 324.614373][T15983] bridge_slave_0: entered promiscuous mode [ 324.625242][ T6358] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.634816][ T6358] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 324.644843][ T6358] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.656521][T15983] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.665402][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.672977][T15983] bridge_slave_1: entered allmulticast mode [ 324.681168][T15983] bridge_slave_1: entered promiscuous mode [ 324.766449][T15983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.794516][T15983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.842519][T15983] team0: Port device team_slave_0 added [ 324.852508][T15983] team0: Port device team_slave_1 added [ 324.900408][T16096] syzkaller0: entered promiscuous mode [ 324.906754][T16096] syzkaller0: entered allmulticast mode [ 324.945988][T16097] __nla_validate_parse: 7 callbacks suppressed [ 324.946006][T16097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2863'. [ 324.946552][T15983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.953511][T16097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2863'. [ 324.979159][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.007078][T15983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.020357][T15983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.027681][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.055291][T15983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.261888][T15983] hsr_slave_0: entered promiscuous mode [ 325.268994][T15983] hsr_slave_1: entered promiscuous mode [ 325.278565][T15983] debugfs: 'hsr0' already exists in 'hsr' [ 325.290779][T15983] Cannot create hsr debugfs directory [ 325.867174][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 325.901842][ T5872] Bluetooth: hci7: command tx timeout [ 325.921904][T15983] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.939868][T15983] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.974226][T15983] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 326.004281][T15983] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.090352][T16134] netlink: 'syz.6.2872': attribute type 10 has an invalid length. [ 326.118203][T16134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2872'. [ 326.176424][T16134] team0: Port device geneve0 added [ 326.304425][T15983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.373256][T15983] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.417075][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.424337][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.488319][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.495566][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.515742][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 326.530962][T16146] netlink: 'syz.5.2876': attribute type 11 has an invalid length. [ 326.580800][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 326.599096][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.608548][T16146] netlink: 'syz.5.2876': attribute type 11 has an invalid length. [ 326.617563][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.633260][T16148] IPVS: Error joining to the multicast group [ 326.657083][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.690465][ T79] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.707029][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 326.735451][T16148] netlink: 'syz.6.2878': attribute type 1 has an invalid length. [ 326.762312][T16148] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2878'. [ 326.777805][T16148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2878'. [ 326.824998][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2880'. [ 327.369140][T15983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.981302][ T5872] Bluetooth: hci7: command tx timeout [ 328.035918][T15983] veth0_vlan: entered promiscuous mode [ 328.097221][T15983] veth1_vlan: entered promiscuous mode [ 328.335606][T15983] veth0_macvtap: entered promiscuous mode [ 328.348987][T15983] veth1_macvtap: entered promiscuous mode [ 328.373884][T15983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.389727][T15983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.505215][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.526885][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.560153][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.587931][ T79] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.743372][T16234] netlink: 'syz.6.2899': attribute type 10 has an invalid length. [ 328.785928][T16238] netlink: 'syz.6.2899': attribute type 10 has an invalid length. [ 328.794305][T16237] netlink: 'syz.3.2900': attribute type 11 has an invalid length. [ 328.815240][T16237] netlink: 'syz.3.2900': attribute type 11 has an invalid length. [ 328.888664][T16234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 328.923768][T16238] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 329.235625][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.259792][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.409996][ T6358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.470632][ T6358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.532478][T16265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.723879][T16273] netlink: 'syz.3.2914': attribute type 13 has an invalid length. [ 330.062739][ T5872] Bluetooth: hci7: command tx timeout [ 330.183276][T16292] vlan0: entered promiscuous mode [ 330.188501][T16292] bridge0: entered promiscuous mode [ 330.326077][T16306] netlink: 'syz.5.2922': attribute type 9 has an invalid length. [ 330.796742][T16325] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 330.827787][T16330] __nla_validate_parse: 10 callbacks suppressed [ 330.827808][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2926'. [ 331.180377][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.245093][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.275898][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.290263][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.305506][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.315871][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.330006][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.356488][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.377973][T16342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2932'. [ 331.578467][T16355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 333.043104][T16351] veth0: entered promiscuous mode [ 333.091240][T16352] veth0: left promiscuous mode [ 333.641409][T16376] veth0: entered promiscuous mode [ 333.685260][T16375] veth0: left promiscuous mode [ 334.321947][T16404] netlink: 'syz.6.2954': attribute type 10 has an invalid length. [ 334.457046][ T5874] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 334.469030][ T5874] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 334.477491][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 334.489697][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.499785][ T5874] RIP: 0010:klist_remove+0x14a/0x340 [ 334.505129][ T5874] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 9c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a 9c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 334.524768][ T5874] RSP: 0018:ffffc9000405f600 EFLAGS: 00010202 [ 334.530885][ T5874] RAX: 000000000000000b RBX: ffff88802de69e00 RCX: 0000000000000000 [ 334.538893][ T5874] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 334.546899][ T5874] RBP: ffffc9000405f6e8 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 334.554898][ T5874] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 334.562892][ T5874] R13: 1ffff1100623ff8c R14: ffff8880311ffc60 R15: dffffc0000000000 [ 334.570885][ T5874] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 334.579834][ T5874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.586430][ T5874] CR2: 0000000000000000 CR3: 0000000059060000 CR4: 00000000003526f0 [ 334.594418][ T5874] Call Trace: [ 334.597700][ T5874] [ 334.600645][ T5874] ? __pfx_klist_remove+0x10/0x10 [ 334.605696][ T5874] ? __pfx_kobject_move+0x10/0x10 [ 334.610830][ T5874] ? get_device_parent+0x366/0x3a0 [ 334.616047][ T5874] device_move+0x193/0x700 [ 334.620490][ T5874] hci_conn_del_sysfs+0xb8/0x170 [ 334.625447][ T5874] hci_conn_del+0x9b7/0xd60 [ 334.629969][ T5874] hci_conn_hash_flush+0x191/0x230 [ 334.635090][ T5874] hci_dev_close_sync+0xaef/0x1330 [ 334.640227][ T5874] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 334.645787][ T5874] ? up_write+0x1c4/0x420 [ 334.650134][ T5874] hci_unregister_dev+0x21a/0x510 [ 334.655170][ T5874] vhci_release+0x80/0xd0 [ 334.659517][ T5874] ? __pfx_vhci_release+0x10/0x10 [ 334.664553][ T5874] __fput+0x449/0xa70 [ 334.668642][ T5874] task_work_run+0x1d4/0x260 [ 334.673250][ T5874] ? __pfx_task_work_run+0x10/0x10 [ 334.678380][ T5874] ? kmem_cache_free+0x18f/0x400 [ 334.683359][ T5874] do_exit+0x6b5/0x2300 [ 334.687531][ T5874] ? do_raw_spin_lock+0x121/0x290 [ 334.692570][ T5874] ? __pfx_do_exit+0x10/0x10 [ 334.697191][ T5874] do_group_exit+0x21c/0x2d0 [ 334.701806][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.707023][ T5874] get_signal+0x1286/0x1340 [ 334.711548][ T5874] arch_do_signal_or_restart+0x9a/0x750 [ 334.717137][ T5874] ? fput_close_sync+0x119/0x200 [ 334.722088][ T5874] ? kmem_cache_free+0x309/0x400 [ 334.727041][ T5874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.733219][ T5874] ? exit_to_user_mode_loop+0x40/0x110 [ 334.738698][ T5874] exit_to_user_mode_loop+0x75/0x110 [ 334.744001][ T5874] do_syscall_64+0x2bd/0x3b0 [ 334.748615][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.753825][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.759905][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 334.764596][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.770499][ T5874] RIP: 0033:0x7f383bb8d5fc [ 334.774935][ T5874] Code: Unable to access opcode bytes at 0x7f383bb8d5d2. [ 334.781954][ T5874] RSP: 002b:00007ffcc4a1b790 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.790389][ T5874] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f383bb8d5fc [ 334.798462][ T5874] RDX: 0000000000000030 RSI: 00007ffcc4a1b850 RDI: 00000000000000f9 [ 334.806447][ T5874] RBP: 00007ffcc4a1b7fc R08: 0000000000000000 R09: 00007ffcc4a1b507 [ 334.814532][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 334.822511][ T5874] R13: 00000000000927c0 R14: 000000000005156a R15: 00007ffcc4a1b850 [ 334.830500][ T5874] [ 334.833525][ T5874] Modules linked in: [ 334.839074][ T5874] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.889106][ T5874] RIP: 0010:klist_remove+0x14a/0x340 [ 334.894558][ T5874] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 9c b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a 9c b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 334.994648][ T5874] RSP: 0018:ffffc9000405f600 EFLAGS: 00010202 [ 335.000788][ T5874] RAX: 000000000000000b RBX: ffff88802de69e00 RCX: 0000000000000000 [ 335.016625][ T5874] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 335.040917][ T5874] RBP: ffffc9000405f6e8 R08: ffffffff8f89f843 R09: 1ffffffff1f13f08 [ 335.060936][ T5874] R10: dffffc0000000000 R11: fffffbfff1f13f09 R12: 0000000000000000 [ 335.070241][ T5874] R13: 1ffff1100623ff8c R14: ffff8880311ffc60 R15: dffffc0000000000 [ 335.091482][ T5874] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 335.100467][ T5874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.130926][ T5874] CR2: 000000110c32fee1 CR3: 0000000061d88000 CR4: 00000000003526f0 [ 335.138979][ T5874] Kernel panic - not syncing: Fatal exception [ 335.145429][ T5874] Kernel Offset: disabled [ 335.149764][ T5874] Rebooting in 86400 seconds..