last executing test programs: 3.931086359s ago: executing program 1 (id=4452): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xffffffffffffff4e, 0x5, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x1, 0x3}, 0x10) 3.237926588s ago: executing program 1 (id=4457): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 3.017182027s ago: executing program 1 (id=4461): ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20044000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x1, 'veth1_to_bond\x00', {}, 0x81}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xd, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x98}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f00000002c0)='GPL\x00', 0x0, 0xf4, &(0x7f0000000300)=""/244, 0x41100, 0x13, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x2, 0xb9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x1, r1, r5], &(0x7f0000000600)=[{0x0, 0x5, 0x10, 0x4}, {0x4, 0x1, 0x10, 0xa}, {0x2, 0x2, 0x6, 0xa}, {0x3, 0x2, 0xd, 0xb}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x1}, 0x94) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000740)={0x0, 0x4, 0x2, [0x4, 0x7df]}, &(0x7f0000000780)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000007c0)={r6, 0x70, "38421d84972b7d13264220b587c219883fd8e82e0a6be1a4f499c5ef642214297121410ee9b7e899fbe0673aab826ca100406e44b88dd7d3ea9603f4cd39cf324e6d6ddff2f28fc393fff1001c7ec26c390506abef255b1be363dac42d9f51a7a268c76647308cf632c8d087df9c8f10"}, &(0x7f0000000840)=0x78) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000880)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x8, 'pim6reg\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000980)={r4, 0x1, 0x6, @link_local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) socket$kcm(0x29, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000b40)=0x6) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x0, [0x1, 0x8, 0x7fff]}, &(0x7f0000000c00)=0x44) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000c40)) socketpair(0x26, 0x4, 0x6, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x4018, r8}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) r9 = socket$inet(0x2, 0x80000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000e80)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000ec0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast2, 0x4e23, 0xb5, 0x4e22, 0x0, 0x2, 0x60, 0x20, 0x89, r4, r10}, {0x2, 0x9, 0x5, 0x800, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}, {0x36e7, 0xc, 0x7fffffff, 0x1}, 0xd1, 0x6e6bb3, 0x2, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in=@broadcast, 0x3500, 0x0, 0x3, 0x1, 0xb5, 0x8, 0x4}}, 0xe8) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x38}}, 0x4040850) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 2.748523467s ago: executing program 3 (id=4463): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x4, 0x4, 0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0x0) 2.670329048s ago: executing program 1 (id=4464): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0100098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000b40)={'filter\x00', 0x4}, 0x68) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000b00)={&(0x7f0000000000)=0x8244, 0xd, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000ac0)}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xc0}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000002c0)=@newtaction={0x120, 0x30, 0x9, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_sample={0x108, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x81, 0x4, 0x8a, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x40, 0x10000000, 0x9, 0xf}}]}, {0xa1, 0x6, "28835371c3f3f9c014cde848f5ae69dcc84c26e62d98578c405d38b58af72aec04dd71a8f1742858f45e08b3ebb6898bd6cf1eeeae3fc216437912b88503c814610a12258b4b53dd028bc5a9fc7c2c0c471930d6a8ae58003e7fa5ea58861bb53a10e682997db06365aa183a854cdafe5b25f061710cd428391695d38d3dba03fe3738755a00d86a9e7e9dc107cf04e07ad6b2d0471eabfc97eefe10af"}, {0xc, 0x7, {0x9f163ec72932c2e5, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x120}}, 0x0) 2.559328261s ago: executing program 3 (id=4466): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x8940, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2a8f1a6", 0x4}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r7, 0x0, 0x80, 0x8) write(r5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$l2tp6(0xa, 0x2, 0x73) close(r9) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040080}, 0x20042080) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450000270000000000739078ac1e0101e00000010000fcffff129078a14d986b834f225b042ef9"], 0x0) 2.409953023s ago: executing program 2 (id=4467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x4c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002600553a3b4496238689090001000800fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000180)="84b31ee703f6") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.29862512s ago: executing program 2 (id=4468): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8915, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1000000000000111}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0, 0x1}, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="98ec5d275af8ffe4ef6e1dea9c52ff7ba4132e6d68d031c706c7d73c498fe9576cdf270e5cd07e88348d47669605f0ccd98aad4f6b5868ab0a911d353bbb95bd6c99b80f685f164675d78f3e610c2fc8eb7f65b59c7e9556a32da19202c9e101ec20337d9c63d56c85b9a126b7e5071fafc2d0153868741e333d226dc45e5644316995"}], 0x0, &(0x7f00000007c0)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x3c, 0x0, '\x00', [@hao={0xc9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @dstopts_2292={{0x0, 0x29, 0x4, {0x73, 0x0, '\x00', [@generic={0xf1, 0x0, "4d4bc39ebe8cf435f1864032c656546b8e55cc9721ac3e2697708a2554c9f29f4a2ba059447f61679e5309cdf279e9ba5afce66041cc285da04a45cfac2da1cc2ee46f7e6374a7a93203b0df060442129c7841d671648a3f6d0e93ed5668dd759a5a"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x0, {0x3, 0x0, 0xc, 0x7, [0x8000, 0x6, 0xfffffffffffffffb, 0x3296bbb5, 0x3, 0x7ff, 0x3]}}, @generic={0x8, 0x0, "1ab90ec5afe96453ba8a492c99be56a86bc4e39904f522cc1419dbcb2f7de98289a53ac8505246657d3e9a4dfeb6b2cd627a69deb5f4e372affe4ed2c15dd572edd8e486367a"}, @enc_lim={0x4, 0x1, 0x95}, @calipso={0x7, 0x0, {0x1, 0x0, 0xc, 0x7, [0xe, 0x18b0000000000, 0x7fff, 0x0, 0x6]}}]}}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x33, 0x0, '\x00', [@generic={0x5, 0x0, "67eb59cc00569dbcf864cfe817121cae4c16e68a167b4831173e8948190132e3fb4f1b2091df3ffc9d1eda9e46880c09c18c3b6af496d71b8840a936d18bc48fe708add6254bd19f2ad7db59b0c6ac3fdaa7837f72863adc39e26d139670cd5f0199e516506f1f6ccac3bd92cd53188fa21fb7d27ca2e7a40e1d295e9e557586374df81c"}]}}}, @hopopts={{0x0, 0x29, 0x36, {0x3b, 0x0, '\x00', [@pad1, @pad1, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x0, "7ff25102d427ead2dcf01814be6740ef68cc492420d0cf9a0a8500e303a67fa7ed27b94a0d5d8f7d401c830d7df292de8790f3ef95915d7880d21e72a9c069c8d4504a959508163b2c2948fa"}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}}}, @tclass={{0x0, 0x29, 0x43, 0x4}}, @flowinfo={{0x0, 0x29, 0xb, 0x3712}}]}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x5) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="9f0c96945e6e6ce35fb96427afd82eb4d70d3a6e7135345fbcfd01a5dca7be62c6dc7df8c8b7137c1cb0b1fadecb20c5e35eb1bd9fd9ee3fbf1e4f41545c3fb3a683f4c96d6e9c70f3ae347dd6d72f0557c3e09a7704eb859df579baadd253e0520786eeeec7aa2c942a0b8bd6730cb1aaa26623ae0a22b2a8252845860c97fc27e322d94cc1143abee538cf480ae3b7d3aa1d3599b69217e319cbb6f93e6477999031ffccece70fb51bd40bd48d84058c498024b2c6f0467166f4f37cc013ca5c5f850d3f0780ac80bc94da4f3f23b126b47db429e8", 0xd6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 2.084520849s ago: executing program 2 (id=4472): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x140b, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x60010}, 0x8040) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 2.001355899s ago: executing program 2 (id=4474): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/ipc\x00') vmsplice(r2, &(0x7f0000000b80)=[{&(0x7f0000000a00)="76cfd52d", 0x4}], 0x1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001100)={r5, "e4f8d241f4c94dd1caddf1aa34e507cf"}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 1.870644062s ago: executing program 0 (id=4475): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20024055}, 0x4008054) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x4, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000500000028001680200001"], 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd"], 0x3c}}, 0x8000) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0xa14, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2000000, 0x39}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20080}, 0x4000000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 1.869200836s ago: executing program 2 (id=4476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0, 0xfffffff7}}}, 0x84) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x6c, 0x0, 0x0, 0x5}}}], 0x18}, 0x440e0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24ada03953000000", @ANYRES16=r7, @ANYBLOB="0d002cbd7000fcdbdf250200000008000500ac14142c08000400ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x200040d0}, 0x809) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000840)) 1.69640905s ago: executing program 1 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r1) connect$netlink(r0, &(0x7f0000000040), 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x22c9, 0x5, 0x3}, 0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e24, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, &(0x7f00000004c0)=0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000001a80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @ipv6=@gre_packet={0x4, 0x6, "6ef539", 0xf98, 0x2f, 0xff, @loopback, @private0, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x7e, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x1, {0xa3ca}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x4, 0x5}, 0x2, {0x10, 0x10, 0x1, 0x17, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "d773b1e393b7efa7521eee8bc4fe12f33799e771539b05e8b419d119b9c70c2b519016cbdddc27d4cac07c87e6e9fcb86099ceb9c6ffd3fcaa6cc8c07885d6f64e642e7be259be373b0a20d99dde6e53108e9475a7bdc6c6ffc9db1127d7dcc21309408c41f340d17a44549f707d8cf69a898e10626ed6980d9bc83f0fbc2286646449eda13e5249345b73f998b7ceeedccbb7b99de22d274400b0e00b59118170d4b10d0e0ab9ee2227b1a0a4a78543f99dd651fc3e8968bbe58f9e6f202a18858e844052580b3aeb5e196a891560f1a736e63cbd029b7be6af27022f212592fa1bd26ddf112d0cd3a55f94a0b4cbebb4818df1c890efcfd64c898865fb2d7763edabdc60dacbfd84ed9fec8ea0e35b890a961e323ffe0a91256e1a313a7b6fed07c0da22404321fd838c44eb0d503023ce83f96257d496d44f514d3c1b3de893b1d4764fcb80e3ac2721e27213133313ab795c9e2c5c66a563562e28cbf4f29c4bd45fe3e0f047c180f80d6918e2a70b086a1fa56c4eecb90d5f7309680d8b12a6d057863aca68a4fda123a522c91b74cb2d2fadbac5684133d0cb2712c31f09c1f7c57cde26deb9aa1b2e475cf8e5a1db60ab78e2c8b886bb453bd8b283dc8f14c646bbdc91a5fe00689515ad0d15ed9207526078c4de39370cd56cdbb222bfafa7b30b0e9ee27c6dc2f5910546d4397f1e5217fa6466b9dd8c16b41ca39f5590db54cff63108fd82c0059a3185f330abd1381a582299df9d2fd58afed62511156450f110d7a86d9293179c8b3e21362cab9c6753cedba1eed30c417d996b6ca5a48a1960cc6437b6e5088b85c156e88c445ad8fe08bfdf6475d144bad5eba6c58e0d148ed3ae8594ef1b2d3bbf2b8c83bd27fae8c8a4609399b2d57644333822d448fccc4119ad3695465d06206e25e05f97565a3675d46cbd19a97b18187fa24710886bf20173610d6ea99565d4ae9d369f8342a425a895bc4206231f0ceee168a19eb8b443fddb5bb5b964a81d661d2529b492759e40c74077513733717a377fa990b2c2f93aad30a58c3ac98fee766844953935e2e22d4dce4ea287b7a8ea8d2c5dd1e9878d6b7d30bd3a5f9c3d2ce1d893585fedee8d203026c44a0a82b4eb249026930ef8f808b9eaebef7e5cf85121528d8bbe589495c238c21d383d08998aad955fa181008373c10c684dedfa966d1a0830a2b0c03f4b03b9fd25439369a434a3fc8cac7e50047227155ff63ce3c14c129864d4f3af2056a8abad334c5ddf673d0ac528ecd785c025a66702bb1c37a0d0631569ff84d2619aeeb41ff957af63d73de39cf54e302dbcaf2cc3f9ffe53ce4d29864ca90363a9e87011f82fd197f738966a5a0a3265ae8cb2a1558010d0deda56d515d4e641dc7f0bbc33775ab637ffa199be2eae59a1b53a83da7662d64561b032d0a7857b7505ad250e53ce423bc17ef8dfd5b942a478728920896050f268a6f42d2a655e24017efb103729cb425fe5ded562236de33d9389d89074b9d5505cd4505cd74949d0dae2d03ab5c30f16f082b1a8926c87e9656b85b5bb18512fc197f0d16378f64acbedec84e66644c112e2471c6d97d88ac2dd015cc83fd573ddb29dc54db02484d27745a8dd5d123ba06f7670a4bab94c9e1d9dee9c5323619acb3fbf918035990130ca64535976c359acc4e070f5822f1d74063542fad6b971d4712c793ea03a856f1520613730f93572c54e5be72fac91385ddaaf7024718eaf93f52789c9e1b034ceaa1fdd94e0653a3e7a4ab6b3e35159c23cecc0599f4ce8559fc9361b333d34b84b7ee9956578e653a7922ed1d2408708784bf27c7e1bf844a3f62b849537509faaa34bec36a884b9d8860ba8b5d7e0cd62c262e29c33e242dce746e11a4536f1d3298fe5f4e3f7a75aa5aae5e2cfc259548419565d4513579e9d8c94f363f414588b8826e998984fd3dd472ef00e9eabfa0e2bec33900bb44a2ec9dc8932ee2bb3a5daa906535d432953fc6f1c6aa1fc57ce0625de1129a8d2a430dc9cd06ea7369975b92d89aad366ebb256ca77d0da314603ec80ee65b0b990ac85548356aa90789d3aaf7439b981639bb00629e93d41353260c74674adc743b671da7fd60e3bc12340c0c40d6d1c5129d43051dbe682141ce3d646f5227b9064659f2540ff3d232a3427d91c4d48a294f10dff7cd4a6af3d26beebb59f671b4c0751f448b6da00333b02e876027709a4a837469ce0b07b7226331bbe59a02a627aa4621b5828290a629435f210f126890c1bae2fbd54b96ee1a637c4af2cc62ab08317de1617a6bfdad55614f910e141f5077c848d74b97df0ddddb5c2b521f1589deb2ec5c5c5507bc212656de7b801f770031b7ea07d7b2af5dab3aa2a62adcd4a0f3aecb22acd1d1650d2d24b3f2c2a41f85624525eea957ab57a7c46efe1fd12a85465c0978ac50f6325821e417937583184a372d05e01086211ff07318820827d6f820a9e576e1126ccf552820d030fe81dc49a8ef494db9c03cd0eac86c2e5712c4049eb9ad03d730be59371129373033b863227f9d3a5fc4a48c67742cf767d049d45edd0365c21b103eb5e3ae8a88a4223665a34b4b9a28c7b29f0c386686c1537008e10628b7d5a28a456de45cbfe244844f882a9af7c8b91da2741bc3950667b2c3e4ec45a8c9b6c314ba7fd011a2046621a233df6dd9ab8ff3c75e73c681c3f20c095b49952879e48b0daa7307eb8919838b7ecbfb46532552e992c4cb6f4fea82063701eed820e5fc558909d0c589f70db812a6239b8617fc7d41f8e361cbebfea75c43e12f54e598e0ee20ba1545e63fc83ce550b177fa0d82df26a466d38495d79546465a53b52f3a0a49b3479c75000c4258f3acf9f99835e99d37e8f545e1048221e766f7ab8b0f3413ab64b6d965dc81bce9323c58640067716c9bddc0ecf52a957efb5dbac523758f95faa55d2784e978cd0df7847a1c005687e987de4899b0578c71fa8dc53d4f3e84452a74b1d61f6b9809fc5b908cc7d7b1ced516b6f2caa72cbc9d4347f285fbbb6251d1a69650db0102c02778d52f9e159c10a56a54526267cd011c293d4ad2dc958ccbaa2e6d8c047ac27b8bb3b7f194bd6e0ba929b4c12a1c55668ee3ab4da7c6449a8071209b7d39caed47a85ebb86b22704630a666707722c952b1ccdb9c02b391683ddb43a1f3e5ba704ae6acdd3a671a13c46855d0ca790f37b2dfadf585b50db5c4787f3f280fcf9e00b0eab3c6213bf21d2dea86621d1adec5ad909239a2d1a348a5b2d798f2a66aaabe05f99f2c1c051112c77ef4154216ff775ea89b7d30ac5cd06b0b69eecd0d3472c9d668e1a4f429d65fce59d6320a44a4dfed8633330ce91e76918c842e455316ba651484ac82d5fd9f69c5663346db9c4f80b6932f896542d2a6bd04805b873eaeccb0536afafaafc12f71140760b265fb84337d37549b5a0ed8a2f7fa12862a3d1942f0695adb0572461a70508e96f1077d3d842bd93d3c4ac8ae33af8dbaaa740530e79087e6db6c86534fddfa7c6786f5e8b1848a697ead341b3021f5c8a8f943b841d451fde264a639823e7b5af2172b95cc0f42dba1180a460cce3dc0df2c54ea746d2e1944975cb1365f94f6a15df70c659207834780143ed39ce2a2e53bd6aee852cc291ce3d5dce74c34798cc9a74ded900888ef77d29673b62a34e1e19515d3c68e25b144c0a0a541b0bde91dfe402031b5b85f659a9de97fb558ee885e7cda9143450b3cfd00f73cef38a45170b0722afa5af1cc329d8aec734d42a3094e8291fedc0eaac26c88a0d282d0280e671625d349923c920ef96bb920b7de6a1ca161b0ff90d2c5f84bc45de78a12717bea4b86bcc1cef2d5e039595b047c146a9eff8b05e7bf068282781ea60a562a2a4e0209ece49b8ca265c75b4d6648d0c6e31829df9f952a042d02b5da75c6b2ac84fc7738c6b2bc52614ae9a6da0b63027686a1de17c3c9dfac75ac6875a998c9341c744012fc6ae9600ada1ad259b9198cabc2bde9b80746f8264eaf8e814e8a305090977cbed7cb8767972b1659f41e68015470dec0324ba5ab78f9d2d7675a13898b0694e06cd060434271989cd41f7c225ee392d5c7b7a8c83562f970b1f15e8dd9f907e2c5efa761d7ad4eade09cdc773c0d2270b047df91dbfaabfb4e867f3efecf370a04a12995e5554ca690e01c0a5fb9a950867830f3b05e00a554ad4fbe4adf66225f5a26912764a1ef2706187d21845c2b8469193704e59a8522b79a2854dde89e6c0b02ddff5d44c7067d9548fcb9ae140ca0b9c679c148ea7c5dfe47a383de7848120e4f88e0178f19b305dfc78cab1cdd3ca2ffd1eaae4748f72e4fb3ee18d0720d7f2a2056dc8ada8069cc034fbca94fbac75a8731a1d8327a9e0715315b1dc34768fdeee798d239806e825e730c12e859fa02b2893241efb02daadd0598e9064f09d36c482637c1dbb741a2cf9df1a1933ff539e3cf9fa949a183a59673b7049b448b7b2a9ed01faa541aa6e6dcedcfbd3bebdb6466e5ebde2ce5001b84f517340df9d6cddc4101124cfd54a01407bab9f2ea43ce634ae6b121c1b2af2f43ee7fe7f65c9ee65f123f3e9303560c5323569705d9cbc612afa92102c813408ec91f558c844798a3c3b55988f46378ab0af4bbe560cf85433e1ca378828ee64012f60c62f7319fa3072dbfbf373456a46093d65c3702f298faf3fe8c8c894badf2cd65fc4ad666c2b1e7e6b955ab9d2f5304759dd03aacf6b5288273a8f7eb395bb57212a7fd8a829f2582c7d6b4c68521e04a2ec854be4b8ebe7cd5cb2535c8655994e3a98c94a5446636cf88f4c962b8b2b4b64be1f1bef105f82b81b5cc08eb01ae0a100c4d88a925f574318f5e7b0e0cc1933b09abed5a500ae4b223a5a4a95714c306e1ce5b0453ef8155eeebb730bcdf76f3b99543ab24abd803f99080d81afd355bec5b476a62e380b55584e6fb87482d69560fa85070bd088c1b48d242dab86ea31879a6bf7c206d1fea8400c698b131773032d72a42e448583b6d8d5c349aa13abd7616334a26f3223bef7cb853e9bcc0f7d6f44056ec0a8ead66b5fe87250dc0d8f2299f03611000e8b4d0170bf46ae1d56b997a4c004b873e3a092a55d274eb1501b3744a618f2d570be7da157bfbd3e0e806d09d6d264bb52d1e97203fd30edfe3c80e849e4462663202f5084966ce57d3ed9c62b5fabda1c54b6037dcd50d186cdc4f6ac1fb7b3e5f1bc3a26c353bb1e48ff3472d0aa59cad11c266faa08ac3ebd56db8d25967ce369e0ea359d75c4933be0b21febc86fec7e1f64a904bcf19e1671f62664ea7a1eb4214081027291b7c04811bf68927291c89824012b34808261f52b49b63ff68f9088f7ec683d30a0e5584ec51208894ef9b34d49297ff537143e9774048e86c3318375f1eee6fadf86cd7651be9a2417fcdeca04a464ba756f9237ee9ef509af09a0c859cfec986fb91c2c016292351678dff6c9888b27a892f4ed3d504af0fe9450de64b434460683fd017b2f41e139"}}}}}, 0xfce) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00fd00000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f98496750000180"], 0x270}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000f020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000c500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.567391781s ago: executing program 3 (id=4480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001800dd8d000000000200000002000004fe090006001400000000000000000000000000810108001e00f8ffffff0a000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000004a00110e00000000000000000a0000030c002c8008003f00", @ANYRES32=0x0, @ANYBLOB="049faf4a08a7"], 0x20}}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f00000003c0)={{0x5c, @multicast2, 0x4e21, 0x800004, 'nq\x00', 0x8, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x1, 0x8, 0x2000052}}, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000133020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc0200000000000000000000000000006c0300000335000008000200ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000100000635000002000f00ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a0010000000000000000000400017000900000029bd70002dbd700027bd700028bd70007f00000000000000070000000700000005000000800000000000000007000000f7ffffff060000000c001c00", @ANYRES32=0x0, @ANYBLOB="e203000001080000"], 0x27c}}, 0x85) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c00)={{r3, &(0x7f0000000080)='\x00', 0x8800, &(0x7f0000000180)={@align, {0x2, 0x5, 0x1, 0x1}}, 0x0, &(0x7f00000001c0), &(0x7f00000004c0)=0x401}, 0x6, &(0x7f0000000b40)=[{0x1, 0x7, &(0x7f0000000500)='nq\x00', &(0x7f0000000600)="186576fabfad6dae9d43737ced6ded866686849f0b638cae8a00415d21359e582444558940b8bff8eda94d7ae5dab64f957ebdaee556af1c56d458444cbfd10b1af63e326ebed97b71197cfeb64e688781b8c7087ab7e0444babc52b997c1d884405b7295e07", 0x66, 0x18}, {0x2, 0xa1, &(0x7f0000000680)=',+\x00', &(0x7f0000000700)="257776e200ee2861bb79b7253f406c9ceb75070ee22c0675032352c398b7cb2983f715b75ef5", 0x26, 0x50}, {0x1, 0xbfa, &(0x7f0000000740)='[@^}-]+\\-\x00', &(0x7f00000007c0)="dc22ac8e6a9f0db2fd16e3e80eb80a9dee5348451577e0cb0a4e1e7c2c91f3f9cf3cc8a662f4b1475cbd65ecd85bad67ebd9686d014a63f24639608d7502257b22460a3c9f8104ca3e91b77ec663190d", 0x50}, {0x3, 0xd2, &(0x7f0000000840)='\xff\xff', &(0x7f0000000880)="df9e5b79529fd5b5770c93b211e46aa8bcb2e5bea96177507ad223e15cfebd9fc34428fa3b643f68d37289002dc70687afa95f959e34b2964613a9bdc6acf095cb2802fb00a9b57a56465eca76e01ea2aa4317b1cd18cc5ee585ba4b17af09f350ded3f640cccd5c9e2f9ae694d931c6f81f8cbf95b0868ceb73cc0ab06e291c25ae5bb040d6477330d3193e31741866539d8035ca2f13a619d500aa6564f8d9d1be5e781b84e898a5002cb880a87394de31420401e02b85083758d49ffe66ad27b44c544a628c932a73ee7e55e931eb496b795f220e7d88df1d", 0xda, 0x30}, {0x3, 0x5, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="16a0c19e7d070f5e6103b5e104647adbfe8ea8cd02d3cca5cab464995dd3a82791a0aad9f3b0463ac272adfacb765a65676920935cedd4f43ee7c0a947e3825dab27d0d6853ca59d8a0811e224711c8fc76769578248822c7b20c9f953456a9f7a21d71f52d501fac7161869e46c1e5110691d9222e795ca1433ed41cdd077126d08be1742ec92f9f61a4c222b9a905a24ff", 0x92, 0xb}, {0x1, 0x4, &(0x7f0000000a80)='nq\x00', &(0x7f0000000ac0)="993aa0f43f8ccb136335b8587561928d26e9a6d195c547c56d5b478b5e9cc853f05138739d18d646fa62f630c7a8b2eb3daccf310eac9a6beb9d302f44455523e876594ab9d6c86a10a03469aba5eb233dfa36afa479f594a827fa70ea4d88", 0x5f, 0x10}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r10, 0x800442d2, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.359958961s ago: executing program 4 (id=4482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x6}, 0x2e, {0x2, 0x4e23, @multicast2}, 'ip_vti0\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0xa8, 0x4) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x8, 0x8, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x1b, 0x77, [@empty, @local, @private=0xa010101, @local, @remote, @rand_addr=0x64010100]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000280)=@newchain={0x800, 0x64, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x10, 0xc}, {0xfff1, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x3c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x3}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x14}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xd}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x35}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xe}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0xca2}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}, @filter_kind_options=@f_cgroup={{0xb}, {0x74c, 0x2, [@TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x100, 0x7, 0x8, 0x5, 0x100, 0xffffffff, 0x100, 0xf, 0xe, 0x1, 0xd, 0x0, 0x0, 0x9, 0xd27, 0x1, 0x3, 0x9, 0x8, 0xb7, 0xab7, 0xc, 0x7, 0x1, 0x4452, 0x9, 0x8f2, 0x4, 0xfffff3a1, 0x6939, 0xf90, 0x0, 0x4, 0x0, 0x8, 0x37db, 0x4, 0x6, 0x7f, 0x4, 0x8, 0xffff, 0x1, 0x5, 0x9, 0xb, 0x3, 0xf19, 0x2, 0xc, 0x5, 0x8, 0x7fffffff, 0x5, 0xd6bf, 0x7, 0x3a2, 0x6, 0x800, 0x1ff, 0xfffffffa, 0x8, 0x9, 0x7, 0x6, 0xfffffff9, 0x8, 0x6, 0x26d, 0x7, 0x5, 0xfffffffe, 0xfff, 0x4c, 0xd, 0x0, 0x7, 0x7, 0x7, 0x7, 0x6, 0x4, 0x4, 0x3, 0x4, 0x2, 0x2, 0x4, 0x9, 0x7, 0x80, 0x6, 0x9, 0x9, 0x1000, 0x100, 0x6, 0x4, 0x3ff, 0x3ff, 0xee, 0x7fff, 0xcc4b, 0x10, 0xc, 0x1000, 0xffff2aa7, 0x5, 0x694, 0x6, 0x7, 0x6, 0xf1, 0x131075d8, 0x5e, 0x8000000, 0x3ff, 0x7, 0x7, 0x3, 0x7, 0xc, 0x6, 0x5, 0x9, 0x0, 0x8, 0xffffff0d, 0x9, 0x3e, 0x1, 0x78, 0xae6f, 0xf78c2a, 0x7de, 0x4e3, 0x1804, 0x80, 0xfff, 0x4, 0x2, 0x1720ef13, 0x8, 0x374, 0x4, 0x7, 0x6, 0x4, 0x1, 0x3abe, 0x2dc, 0xa046, 0x1f10, 0xc, 0x1d35bf79, 0x5, 0x8, 0x3, 0xffffffff, 0x8, 0x6, 0x1, 0x4, 0x2, 0x4, 0x5, 0x80, 0x81, 0x6, 0x4, 0x9, 0x37a, 0x6, 0xad6, 0x3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x7fffffff, 0x3, 0x77a, 0x7f, 0xfffffd02, 0x40, 0x6000, 0x7, 0x3, 0x1, 0x53, 0x6, 0xb, 0x7, 0x7ff, 0x7fffffff, 0x2, 0x5, 0x81, 0x3, 0x8, 0x5, 0x7b8f, 0xd, 0x3, 0xc, 0x4, 0x7, 0x1, 0x387, 0xb, 0x9, 0x6, 0x5, 0x7, 0xb5, 0x8, 0x7, 0x7, 0x1, 0xc7489e70, 0x746c, 0x4, 0x3, 0x5, 0x0, 0x24000000, 0x888, 0x7, 0x4, 0x0, 0x2, 0x10, 0x0, 0x8, 0xf, 0x7f, 0x7, 0x5, 0xbfb1, 0x7, 0xc9dc, 0x6148, 0x8, 0xb, 0x6665, 0x2, 0x7fffffff, 0x2, 0x8000, 0x1, 0x1, 0x10, 0x3, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_CGROUP_EMATCHES={0x324, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0xfff8}, {0x5, 0x100, 0x9}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x5cec}, {0x200, 0x6, 0x7, 0x401}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2}, {0x4, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x6b29}, {0x4, 0x10000, 0x6, 0x6}}}, @TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0x3}, "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"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0x9, 0x6, 0x100, 0xa}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4cb9, 0x2, 0x101}, {0x0, 0x2, 0x0, "aa8b"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xb787, 0x8, 0xffff}, {0x2, 0x6}}}, @TCF_EM_CONTAINER={0x6c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x9}, "f3e8ca5291eb2acc85c4555d525d29b41f362bcc6c6c601fc6bc5c5e6dfc4e292c42c4c89a491400d92d2599ebfc624b5a1aa72282e91d159929c23596c35d457002b28f46ca886e1d82399bd85e1b0575a16ede057d1a1bcf404989c715"}}, @TCF_EM_CONTAINER={0xa4, 0x0, 0x0, 0x0, {{0x4, 0x0, 0x60}, "5d38e480a8d3ec559ca314d2076454d742c6150493eb4f82c78726ccb149fc35bc3bd1823560a696dc86567d65e56c910a7fcb260d848290c9398583df86137eb9221218f30285e424221ceb6256f8fba8549f34156f3abd4cfd416403186b63c6ac6a14bd37200258701b1c3a7e789572f743f1075b5065d455519d0850544fb33b82b3d6851a5fa0ba7bfa64e87bd8592c4467c031"}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x1}, {0x4, 0xa, 0x0, "e1129aedd414f92e7881"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xf, 0x2, 0xffff}, {0xb, 0x4, 0x1, "d1cb79eb"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x306}, {0x0, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x800}, 0x1, 0x0, 0x0, 0x4004090}, 0x20000000) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000b00)) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000b80)={[{0x0, 'rdma'}, {0x2b, 'io'}, {0x2b, 'perf_event'}, {0x2b, 'blkio'}, {0x2d, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2b, 'hugetlb'}]}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000c00)={0x1, 0x80000001, 0x16360cd2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@fallback=r4, 0x10, 0x0, 0x1, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@cgroup=r6, 0xffffffffffffffff, 0x36, 0x2000, 0x0, @value=r10, @void, @void, @void, r9}, 0x20) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGIDLE32(r11, 0x8008743f, &(0x7f0000000e40)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x70000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(r11, 0x800c581e, &(0x7f0000000f80)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000fc0)={0x0, 0xfffffffc}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000001040)=r13, 0x4) sendmsg$nl_netfilter(r11, &(0x7f00000022c0)={&(0x7f0000001080), 0xc, &(0x7f0000002280)={&(0x7f00000010c0)={0x11ac, 0x14, 0x5, 0x201, 0x70bd2d, 0x4, {0xa, 0x0, 0x8}, [@typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x1188, 0xd0, 0x0, 0x1, [@typed={0x4, 0xee}, @nested={0x4, 0xf3}, @typed={0x8, 0xd7, 0x0, 0x0, @u32}, @generic="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", @generic="bda85bb8e982490072487721ff8ea1808d25dcd08bb2357367f94f2fadcc565b54eba276c2a1340dce6ef94d3a67575c82570d03d4ed855dded0c4386c46297096c2fc60232161d0f5ff6f416730e1dde382a0fe28d681deb4502537aa5ad698bbc81b36abfa994e2ccb96989c4d5d617d79535c5f4e5fd5e4780e3880b9d2d52b61422927e1f8d7fb7b9028ae09c60894013f5e6f47b4a613ef22e607be87f1316b493ce6e291fba6907b6db62db61d43b0b6077e40b0975c74c4ccdc5e72daab8815dbe1e41b47f6aa8af919093cdf02b9e586fa6524ff5f0417ae", @generic="5865cd1d4a3a3eb80ff931ada071719269b792b37420a5f1d20906ed6089912cbaa28ea58c8a71310b28276783320b06320ec09a00df3d2748e49acb30ffec132c0276a1c0bc79974dcfe9239244e03543da58a6e7239abdcad3d2d19bc6b03869cb1b259f6ea547a09b1490e5c701116b65cdb4a6cc3482ac9f7df5cd782fb38af7fa03ad471946e50fcb17", @typed={0x8, 0xef, 0x0, 0x0, @u32=0x18796dc}, @nested={0x4, 0x114}]}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0x100}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x8d1}, 0xd0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000002300)='dummy0\x00') 1.356136705s ago: executing program 0 (id=4483): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x88}, 0x5a, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe950}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xe, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9d}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0xb3, &(0x7f0000000700)=""/179, 0x40f00, 0x72, '\x00', r6, @fallback=0xa, r3, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x401, 0x1000}, 0x10, r7, r5, 0x5, &(0x7f0000000840)=[0x1], &(0x7f0000000880)=[{0x5, 0x1, 0x5, 0x8}, {0x4, 0x2, 0x7, 0xb}, {0x2, 0x5, 0x5, 0x4}, {0x2, 0x3, 0xb, 0x7}, {0x2, 0x3, 0x9, 0x8}], 0x10, 0xfffffffa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0xffffffffffffff78) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r8, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000400)={0xff, 0xaa64, 0x7f, 0x8000}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) 1.242030249s ago: executing program 4 (id=4484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x140b, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x60010}, 0x8040) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 1.241585454s ago: executing program 0 (id=4485): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8044) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010004bd70000000000002201400fc0200070002000008000300", @ANYRES32=r5, @ANYBLOB="08000100e0"], 0x34}}, 0xea5bc50b6199d7fe) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000280)="96fa2c0bff", 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x24, 0x319, 0x70bd26, 0x8000, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r7) close(r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="f79200"/20, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="00000000040000000000000000000000e687bb39862cd100"/35], 0x50) 1.218632808s ago: executing program 4 (id=4486): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0feffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) 1.206066694s ago: executing program 0 (id=4487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000b80040005800c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.098582738s ago: executing program 4 (id=4488): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000040)=0xfd, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001f40), &(0x7f0000001f80)=0x8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) r4 = socket(0x10, 0x80002, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000009e3f427fff1eb5c0bddc4855", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0200"/28], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x10, &(0x7f0000000340)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r7, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r9, @ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.098182332s ago: executing program 0 (id=4489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={0x0, 0x6}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xd961}, @ldst={0x1, 0x1, 0x2, 0xa, 0x1, 0x50, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.063670726s ago: executing program 0 (id=4490): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xfffb, 0x0, 0x0, 0x9, 0x9b, 0x2, 0x5508, 0xff, 0x0, 0x5, 'syz0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0xb413000) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$rxrpc(0x21, 0x2, 0xa) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) select(0x40, &(0x7f0000000100)={0xfe4, 0x2d35ef81, 0xe, 0xe96, 0x6, 0x40, 0xf800000000000000, 0x1}, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x178, 0xc, 0xd0, 0x178, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x3}}}, {{@ipv6={@private2, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'team_slave_1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 946.544611ms ago: executing program 2 (id=4491): r0 = socket(0x29, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) listen(0xffffffffffffffff, 0x0) r1 = socket(0x2a, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 590.494571ms ago: executing program 3 (id=4492): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8}, 0x50) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000015c0)="b93bc4f2b790", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x29, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) 589.898416ms ago: executing program 1 (id=4493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f14000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200000000000000000000000042cb369a5712db810400000087e41500d5fe6dffced804438531bb1d6b5967768a73c126398f14ca3b87d4d94d380517bf"], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0x7ff, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4) sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r8, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000801}, 0x200480c1) r10 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) 463.934752ms ago: executing program 3 (id=4494): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 213.362928ms ago: executing program 3 (id=4495): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4000) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2000002c55f6f62073f2df366774fdffffffffe01800000200000080", @ANYRES32=0x0], 0x20, 0x4008000}, 0x28008841) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000001080)=""/181, &(0x7f0000001180)=0xb5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) socket$nl_rdma(0x10, 0x3, 0x14) 162.624071ms ago: executing program 4 (id=4496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x140b, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x60010}, 0x8040) recvfrom$inet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=4497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$FIONCLEX(r3, 0x5450) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000002c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000040)={0x1d, r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000002c0), 0x0, 0x10000, &(0x7f0000000440)={r7, r8+60000000}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendto$packet(r10, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f00000006c0)=""/152, &(0x7f0000000540)=0x98) (async) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f00000006c0)=""/152, &(0x7f0000000540)=0x98) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r12, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xfffffffffffffc82, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a303a06b334e516d902c0000007b5eec6239ca93feb5b23e3c5cf2c6466abdfcd1d68719c547b7f24df6170a037c7233f4224abe70000000ffff0923e401563a6250ae6f95bf63fe73365979dbf5e581b87152cf2d9f4775fdd6c6bf37332cbea6df4ec2676d6ead7a627dee030529207644df179881af2d4394b8b885e270cd62434865fc15c655158b4f92c25ecd9833cc1471bbce2f5297be17720c905cb5001b409df0594e8b001d165eb125867943021a402c691144b4f0002cbd6dd08244d04ab1001a60669dd9881289ebbef68093fae6beac7be9be45319157da13350316dee828e4c3301e026f757b2e7722950d412b524718b7c341e1ed69c4c99ef661402b5cb56624808f98f71c5e1dddeccb1e17789c1a902b347aca0d3891b8d59398cc0cc2414d0018f776caa4519fdb0521328919"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) kernel console output (not intermixed with test programs): ave bond_slave_0): Enslaving as an active interface with an up link [ 481.051724][T18486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.202807][T18486] team0: Port device team_slave_0 added [ 481.226572][T18550] sch_fq: defrate 3 ignored. [ 481.281181][T18486] team0: Port device team_slave_1 added [ 481.411974][T18486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.421324][T18486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.466867][T18486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.501646][T18555] FAULT_INJECTION: forcing a failure. [ 481.501646][T18555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.516432][T18555] CPU: 1 UID: 0 PID: 18555 Comm: syz.0.3043 Not tainted syzkaller #0 PREEMPT(full) [ 481.516470][T18555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.516483][T18555] Call Trace: [ 481.516491][T18555] [ 481.516500][T18555] dump_stack_lvl+0xe8/0x150 [ 481.516537][T18555] should_fail_ex+0x412/0x560 [ 481.516576][T18555] _copy_from_iter+0x1d3/0x1670 [ 481.516602][T18555] ? rcu_is_watching+0x15/0xb0 [ 481.516631][T18555] ? __pfx__copy_from_iter+0x10/0x10 [ 481.516662][T18555] ? netlink_sendmsg+0x650/0xb40 [ 481.516683][T18555] ? skb_put+0x11b/0x210 [ 481.516709][T18555] netlink_sendmsg+0x6c0/0xb40 [ 481.516741][T18555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.516765][T18555] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.516790][T18555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.516818][T18555] ____sys_sendmsg+0x972/0x9f0 [ 481.516842][T18555] ? __might_fault+0xaf/0x130 [ 481.516872][T18555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.516906][T18555] ? import_iovec+0x73/0xa0 [ 481.516935][T18555] ___sys_sendmsg+0x2a5/0x360 [ 481.516956][T18555] ? __lock_acquire+0x6b5/0x2cf0 [ 481.516992][T18555] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.517060][T18555] ? __fget_files+0x2a/0x420 [ 481.517081][T18555] ? __fget_files+0x3a0/0x420 [ 481.517114][T18555] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.517139][T18555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.517173][T18555] ? __pfx_ksys_write+0x10/0x10 [ 481.517208][T18555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.517231][T18555] do_syscall_64+0x15f/0xf80 [ 481.517259][T18555] ? trace_irq_disable+0x3b/0x140 [ 481.517286][T18555] ? clear_bhb_loop+0x40/0x90 [ 481.517312][T18555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.517332][T18555] RIP: 0033:0x7f4613d9cdd9 [ 481.517353][T18555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.517371][T18555] RSP: 002b:00007f4614bb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.517394][T18555] RAX: ffffffffffffffda RBX: 00007f4614015fa0 RCX: 00007f4613d9cdd9 [ 481.517410][T18555] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 481.517424][T18555] RBP: 00007f4614bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.517438][T18555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.517450][T18555] R13: 00007f4614016038 R14: 00007f4614015fa0 R15: 00007ffeb2f27358 [ 481.517496][T18555] [ 481.874275][T18486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.892070][T18486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.960735][T18486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.982560][T18559] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 482.111584][T18564] gretap5: entered allmulticast mode [ 482.120263][T18564] bond12: (slave gretap5): making interface the new active one [ 482.128647][T18564] bond12: (slave gretap5): Enslaving as an active interface with an up link [ 482.165675][ T5845] Bluetooth: hci0: command tx timeout [ 482.210084][T18486] hsr_slave_0: entered promiscuous mode [ 482.219871][T18486] hsr_slave_1: entered promiscuous mode [ 482.226793][T18486] debugfs: 'hsr0' already exists in 'hsr' [ 482.232684][T18486] Cannot create hsr debugfs directory [ 482.253215][T18566] __nla_validate_parse: 2 callbacks suppressed [ 482.253256][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 482.302870][T18566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'. [ 482.424633][T18569] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 482.439869][T18569] bond1 (unregistering): Released all slaves [ 483.000019][T18589] tipc: Started in network mode [ 483.021747][T18589] tipc: Node identity ac14140f, cluster identity 4711 [ 483.031944][T18592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3052'. [ 483.053526][T18589] tipc: New replicast peer: 255.255.255.255 [ 483.062813][T18589] tipc: Enabled bearer , priority 10 [ 483.332080][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3054'. [ 483.589099][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 483.692562][T18616] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3058'. [ 483.715692][T18616] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3058'. [ 483.724976][T18616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 484.222721][ T808] tipc: Node number set to 2886997007 [ 484.246449][ T5845] Bluetooth: hci0: command tx timeout [ 484.414647][T18637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.442339][T18643] Bluetooth: MGMT ver 1.23 [ 484.482304][T18486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.523139][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.532256][T18486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.551548][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.670031][T18637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.702961][T18486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.719163][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.729719][T18643] wg1 speed is unknown, defaulting to 1000 [ 484.737098][T18486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.761765][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.849114][T18637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.948675][T18637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.173678][T18486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.232356][ T6668] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.268183][ T6668] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.324842][ T6668] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.337620][T18486] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.361697][T13751] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.383885][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.391164][T13751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.446613][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.453848][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.593312][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3070'. [ 485.638754][T18670] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3070'. [ 485.914308][T18486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.010969][T18486] veth0_vlan: entered promiscuous mode [ 486.049338][T18486] veth1_vlan: entered promiscuous mode [ 486.145126][T18486] veth0_macvtap: entered promiscuous mode [ 486.173673][T18486] veth1_macvtap: entered promiscuous mode [ 486.244635][T18486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.290042][T18486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.328357][ T5845] Bluetooth: hci0: command tx timeout [ 486.329727][ T6668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.369770][ T6668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.418854][ T6668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.459180][ T6668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.639958][T13750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.692199][T13750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.798578][T18708] xt_limit: Overflow, try lower: 268435456/134217728 [ 486.883860][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.922169][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.220845][T18731] : entered promiscuous mode [ 487.295646][T18733] vlan2: entered promiscuous mode [ 487.314521][T18733] gretap0: entered promiscuous mode [ 487.448577][T18736] vlan2: entered allmulticast mode [ 487.469177][T18736] bond0: entered allmulticast mode [ 487.484712][T18736] bond_slave_0: entered allmulticast mode [ 487.506672][T18736] bond_slave_1: entered allmulticast mode [ 487.581510][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.592049][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.813884][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.829224][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.840842][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.853709][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.878305][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.001640][T18769] wg1 speed is unknown, defaulting to 1000 [ 489.171870][T18783] __nla_validate_parse: 1 callbacks suppressed [ 489.171895][T18783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3101'. [ 489.431431][T18789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3104'. [ 489.474723][T18789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.565153][T18789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.613082][ T5843] bond8: (slave syz_tun): Removing an active aggregator [ 489.640726][ T5843] bond8: (slave syz_tun): Releasing backup interface [ 490.193218][T18805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3108'. [ 490.334188][T18769] chnl_net:caif_netlink_parms(): no params data found [ 490.617260][T18769] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.624612][T18769] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.639884][T18769] bridge_slave_0: entered allmulticast mode [ 490.662936][T18769] bridge_slave_0: entered promiscuous mode [ 490.672698][T18769] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.680927][T18769] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.716945][T18769] bridge_slave_1: entered allmulticast mode [ 490.748172][T18769] bridge_slave_1: entered promiscuous mode [ 490.780669][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'. [ 490.828403][T18832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'. [ 490.924911][T18769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.970960][ T5851] Bluetooth: hci1: command tx timeout [ 490.973467][T18769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.138837][ T9] IPVS: starting estimator thread 0... [ 491.228221][T18769] team0: Port device team_slave_0 added [ 491.254844][T18769] team0: Port device team_slave_1 added [ 491.265567][T18845] IPVS: using max 24 ests per chain, 57600 per kthread [ 491.443152][T18769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.464417][T18769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.544518][T18769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.579381][T18769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.589628][T18769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.618709][T18769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.680462][T18859] wg1 speed is unknown, defaulting to 1000 [ 492.081247][T18769] hsr_slave_0: entered promiscuous mode [ 492.091752][T18769] hsr_slave_1: entered promiscuous mode [ 492.116777][T18769] debugfs: 'hsr0' already exists in 'hsr' [ 492.122576][T18769] Cannot create hsr debugfs directory [ 492.290060][T18887] netlink: 'syz.1.3127': attribute type 19 has an invalid length. [ 492.309093][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 492.345398][T18887] netlink: 'syz.1.3127': attribute type 19 has an invalid length. [ 492.350610][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3127'. [ 492.381156][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 492.418720][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 492.440034][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3125'. [ 492.604707][T18900] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 492.669970][T18901] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 492.855566][T18908] netlink: 'syz.1.3133': attribute type 62 has an invalid length. [ 493.055967][ T5851] Bluetooth: hci1: command tx timeout [ 494.400181][T18933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.414959][T18933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.471874][T18769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.526530][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.546040][T18945] tipc: Started in network mode [ 494.556695][T18945] tipc: Node identity b2835aa125d9, cluster identity 4711 [ 494.578804][T18945] tipc: Enabled bearer , priority 0 [ 494.602750][T18948] __nla_validate_parse: 1 callbacks suppressed [ 494.602772][T18948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3144'. [ 494.698625][T18933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.712490][T18933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.737331][T18769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.754938][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.834672][T18946] syzkaller0: entered promiscuous mode [ 494.840609][T18946] syzkaller0: entered allmulticast mode [ 494.848366][T18946] tipc: Resetting bearer [ 494.854839][T18769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.878039][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.892035][T18946] tipc: Resetting bearer [ 495.128188][ T5851] Bluetooth: hci1: command tx timeout [ 495.576095][T18964] netlink: 'syz.1.3147': attribute type 21 has an invalid length. [ 495.584210][T18964] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.205563][ T5851] Bluetooth: hci1: command tx timeout [ 497.508588][T18946] tipc: Disabling bearer [ 497.518600][T18769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.532373][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.574731][T18933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.586042][T18933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.612084][ T808] tipc: Node number set to 2539281057 [ 497.733783][T18933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.744466][T18933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.834126][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3151'. [ 497.857592][T18979] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3150'. [ 498.039042][T18769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.159567][ T6668] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.194358][ T6668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.397194][T19001] bond13: entered promiscuous mode [ 498.403045][T19001] 8021q: adding VLAN 0 to HW filter on device bond13 [ 498.415491][T19001] bridge0: port 3(bond13) entered blocking state [ 498.422164][T19001] bridge0: port 3(bond13) entered disabled state [ 498.429063][T19001] bond13: entered allmulticast mode [ 498.444996][T19001] bridge0: port 3(bond13) entered blocking state [ 498.451601][T19001] bridge0: port 3(bond13) entered forwarding state [ 498.469736][T18769] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.549553][T19006] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3158'. [ 498.560854][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3158'. [ 498.626089][ T36] bridge0: port 3(bond13) entered disabled state [ 498.799442][ T63] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.831594][ T63] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.916077][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.923327][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.968591][T13750] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.995410][T13750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.036070][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.043324][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.091492][T13751] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.099949][T13751] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.134017][T19019] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3160'. [ 499.197178][T19019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.210364][T19019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.221877][T19019] bond0 (unregistering): Released all slaves [ 499.270221][T18769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.300906][T18769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.372464][T19011] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 499.560789][T19030] batadv0: entered promiscuous mode [ 499.575653][T19030] batadv0: entered allmulticast mode [ 499.794983][T18769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.919283][T18769] veth0_vlan: entered promiscuous mode [ 499.947340][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 499.970960][T18769] veth1_vlan: entered promiscuous mode [ 500.091779][T18769] veth0_macvtap: entered promiscuous mode [ 500.154233][T18769] veth1_macvtap: entered promiscuous mode [ 500.217108][T18769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.224523][T19055] wg1 speed is unknown, defaulting to 1000 [ 500.254061][T18769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.293316][ T6668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.319305][ T6668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.335460][ T6668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.347918][ T6668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.545964][T13751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.577955][T13751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.624219][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.642406][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.727185][ T5851] Bluetooth: hci0: command 0x080f tx timeout [ 500.873438][T19062] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 500.874231][ T5847] IPVS: starting estimator thread 0... [ 501.005455][T19065] IPVS: using max 25 ests per chain, 60000 per kthread [ 501.099524][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.114466][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.130854][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.148038][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.158180][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.713815][T19076] syzkaller1: entered promiscuous mode [ 501.719680][T19076] syzkaller1: entered allmulticast mode [ 501.731121][T19066] wg1 speed is unknown, defaulting to 1000 [ 501.991911][T19084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.011246][T19084] netlink: 'syz.0.3175': attribute type 10 has an invalid length. [ 502.023383][T19082] tipc: Enabled bearer , priority 0 [ 502.050250][T19082] syzkaller0: entered promiscuous mode [ 502.062681][T19082] syzkaller0: entered allmulticast mode [ 502.154623][T19082] tipc: Resetting bearer [ 502.158445][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 502.194558][T19081] tipc: Resetting bearer [ 502.230378][T19081] tipc: Disabling bearer [ 502.806140][ T995] page_pool_release_retry() stalled pool shutdown: id 102, 1 inflight 60 sec [ 502.940583][T19066] chnl_net:caif_netlink_parms(): no params data found [ 503.210140][ T5845] Bluetooth: hci2: command tx timeout [ 503.401842][T19066] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.401866][T19150] netlink: 'syz.4.3190': attribute type 3 has an invalid length. [ 503.424558][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 503.434699][T19066] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.442285][T19066] bridge_slave_0: entered allmulticast mode [ 503.450929][T19066] bridge_slave_0: entered promiscuous mode [ 503.502647][T19066] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.535714][T19066] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.549220][T19066] bridge_slave_1: entered allmulticast mode [ 503.569287][T19066] bridge_slave_1: entered promiscuous mode [ 503.701060][T19066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.736810][T19066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.958575][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3194'. [ 503.975419][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3194'. [ 504.018680][T19066] team0: Port device team_slave_0 added [ 504.037544][T19066] team0: Port device team_slave_1 added [ 504.150169][T19066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.174643][T19066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.211224][T19066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.228560][T19066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.237225][T19066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.302425][T19066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.473748][T19181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3197'. [ 504.499840][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 504.598519][T19184] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3198'. [ 504.671040][T19066] hsr_slave_0: entered promiscuous mode [ 504.678619][T19066] hsr_slave_1: entered promiscuous mode [ 504.685900][T19066] debugfs: 'hsr0' already exists in 'hsr' [ 504.691802][T19066] Cannot create hsr debugfs directory [ 504.699298][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3200'. [ 504.737018][T19197] netlink: 'syz.4.3200': attribute type 39 has an invalid length. [ 505.289380][ T5845] Bluetooth: hci2: command tx timeout [ 505.814618][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 506.050148][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.050148][T19255] Use struct sctp_sack_info instead [ 506.087575][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.087575][T19255] Use struct sctp_sack_info instead [ 506.104337][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.104337][T19252] Use struct sctp_sack_info instead [ 506.137639][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.137639][T19255] Use struct sctp_sack_info instead [ 506.207469][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.207469][T19255] Use struct sctp_sack_info instead [ 506.249903][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.249903][T19255] Use struct sctp_sack_info instead [ 506.324749][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.324749][T19252] Use struct sctp_sack_info instead [ 506.381047][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.381047][T19255] Use struct sctp_sack_info instead [ 506.402090][T19259] netlink: 'syz.3.3215': attribute type 21 has an invalid length. [ 506.404777][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.404777][T19255] Use struct sctp_sack_info instead [ 506.415037][T19259] netlink: 'syz.3.3215': attribute type 22 has an invalid length. [ 506.438036][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.438036][T19252] Use struct sctp_sack_info instead [ 506.466823][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.466823][T19252] Use struct sctp_sack_info instead [ 506.495415][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.495415][T19255] Use struct sctp_sack_info instead [ 506.496304][T19259] netlink: 'syz.3.3215': attribute type 23 has an invalid length. [ 506.512766][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.512766][T19255] Use struct sctp_sack_info instead [ 506.552641][T19259] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3215'. [ 506.592431][T19255] sctp: [Deprecated]: syz.0.3214 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.592431][T19255] Use struct sctp_sack_info instead [ 506.602854][T19066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.626606][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3216'. [ 506.640126][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.640126][T19252] Use struct sctp_sack_info instead [ 506.641678][T19066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.683835][T19066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.699988][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.699988][T19252] Use struct sctp_sack_info instead [ 506.723997][T19066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.745270][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.745270][T19252] Use struct sctp_sack_info instead [ 506.777277][T19066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.811926][T19066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.821375][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.821375][T19252] Use struct sctp_sack_info instead [ 506.832714][T19270] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3219'. [ 506.841769][T19252] sctp: [Deprecated]: syz.0.3214 (pid 19252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.841769][T19252] Use struct sctp_sack_info instead [ 506.868277][T19066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.883003][T19066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.947502][T19280] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3219'. [ 506.978498][T19280] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.985840][T19280] bridge0: port 2(bridge_slave_1) entered listening state [ 506.993335][T19280] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.000582][T19280] bridge0: port 1(bridge_slave_0) entered listening state [ 507.020238][T19280] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3219'. [ 507.057808][T19283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 507.076946][T19283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 507.113597][T19280] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.121088][T19280] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.167009][T19288] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 507.187909][ T5847] team_slave_0: entered promiscuous mode [ 507.195232][ T5847] team_slave_1: entered promiscuous mode [ 507.242187][T19288] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 507.332368][T19066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.367755][ T5851] Bluetooth: hci2: command tx timeout [ 507.380076][T19066] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.417552][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.424833][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.480357][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.487651][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.520464][T19295] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 507.562153][T19295] bond1: entered promiscuous mode [ 507.573384][T19295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.611030][T19297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.618539][T19297] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 507.632069][T19297] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 507.647121][T19297] bond1: (slave ip6gre1): making interface the new active one [ 507.655003][T19297] ip6gre1: entered promiscuous mode [ 507.663343][T19297] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 508.355006][T19326] netlink: 1311 bytes leftover after parsing attributes in process `syz.3.3232'. [ 508.372774][T19328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3231'. [ 508.595105][T19328] bond1: entered promiscuous mode [ 508.710041][T19328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.734136][T19333] wg1 speed is unknown, defaulting to 1000 [ 508.809330][T19348] bond1: (slave vti0): refused to change device type [ 508.938441][T19066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.124795][T19066] veth0_vlan: entered promiscuous mode [ 509.194982][T19066] veth1_vlan: entered promiscuous mode [ 509.313232][T19362] wg1 speed is unknown, defaulting to 1000 [ 509.348150][T19066] veth0_macvtap: entered promiscuous mode [ 509.373619][T19066] veth1_macvtap: entered promiscuous mode [ 509.447801][ T5845] Bluetooth: hci2: command tx timeout [ 509.475350][T19066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.508556][T19066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.572661][ T381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.594925][ T381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.639909][ T381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.666548][ T381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.749873][T19375] geneve2: entered promiscuous mode [ 509.770247][T19375] geneve2: entered allmulticast mode [ 509.789896][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 509.809738][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 509.864446][T19375] pimreg: entered allmulticast mode [ 509.874402][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 509.914177][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.138185][T19386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 510.245392][T13750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.275388][T13750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.406738][ T381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.415915][ T381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.551700][T19394] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 510.846889][T19400] tipc: Started in network mode [ 510.861084][T19400] tipc: Node identity ac14140f, cluster identity 4711 [ 510.882307][T19400] tipc: New replicast peer: 172.20.20.170 [ 510.894650][T19400] tipc: Enabled bearer , priority 10 [ 510.944408][T19394] bond1: (slave bridge1): making interface the new active one [ 510.954541][T19394] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 511.088085][T19404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.096127][T19417] __nla_validate_parse: 7 callbacks suppressed [ 511.096175][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3254'. [ 511.123740][T19412] netlink: 'syz.3.3253': attribute type 3 has an invalid length. [ 511.189236][T19412] nbd: nbd3 already in use [ 511.203882][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 511.218761][T19412] block nbd3: NBD_DISCONNECT [ 511.223837][T19412] block nbd3: Send disconnect failed -32 [ 511.232358][T19412] block nbd3: shutting down sockets [ 511.346879][T19404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.419138][T13751] veth9: left allmulticast mode [ 511.425294][T13751] veth9: left promiscuous mode [ 511.430459][T13751] bridge11: port 1(veth9) entered disabled state [ 511.621500][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 511.689370][T13751] bond5 (unregistering): (slave vti1): Releasing backup interface [ 511.702211][T13751] vti1 (unregistering): left promiscuous mode [ 512.230879][T13751] bond8 (unregistering): (slave bridge9): Releasing active interface [ 512.349106][T13751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.359780][T13751] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 512.369555][T13751] bond0 (unregistering): Released all slaves [ 512.383833][T13751] bond1 (unregistering): Released all slaves [ 512.399057][T13751] bond2 (unregistering): Released all slaves [ 512.419763][T13751] bond3 (unregistering): Released all slaves [ 512.441602][T13751] bond4 (unregistering): Released all slaves [ 512.456273][T13751] bond5 (unregistering): Released all slaves [ 512.471503][T13751] bond6 (unregistering): Released all slaves [ 512.504221][T13751] bond7 (unregistering): Released all slaves [ 512.522075][T13751] bond8 (unregistering): (slave veth7): Releasing active interface [ 512.531856][T13751] bond8 (unregistering): Released all slaves [ 512.547436][T13751] bond9 (unregistering): Released all slaves [ 512.562798][T13751] bond10 (unregistering): Released all slaves [ 512.583010][T13751] bond11 (unregistering): Released all slaves [ 512.598763][T13751] bond12 (unregistering): Released all slaves [ 512.614590][T13751] bond13 (unregistering): Released all slaves [ 512.703612][T19412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.759345][T19429] bond0: entered promiscuous mode [ 512.764785][T19429] bond_slave_0: entered promiscuous mode [ 512.774272][T19429] bond_slave_1: entered promiscuous mode [ 512.783252][T19429] batadv_slave_0: entered promiscuous mode [ 512.791216][T19429] batadv_slave_0: left promiscuous mode [ 512.798028][T19429] bond0: left promiscuous mode [ 512.803347][T19429] bond_slave_0: left promiscuous mode [ 512.809413][T19429] bond_slave_1: left promiscuous mode [ 512.944482][ T8630] tipc: Node number set to 2886997007 [ 513.039961][T19404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.072370][T13751] : left promiscuous mode [ 513.161595][T13751] m1Ie5nè‹Ò: left promiscuous mode [ 513.238640][T19446] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 513.262315][T19446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.339381][T19404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.374861][T13751] hmac(sha224): left promiscuous mode [ 513.520477][T13751] tipc: Disabling bearer [ 513.579840][T13751] tipc: Left network mode [ 513.753791][T19457] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3262'. [ 514.564119][T19480] netlink: 'syz.4.3264': attribute type 10 has an invalid length. [ 514.578558][T19480] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3264'. [ 514.640384][ T381] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.717834][ T381] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.960209][T19493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3266'. [ 515.004778][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.172307][ T63] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.393657][T19510] xt_TCPMSS: Only works on TCP SYN packets [ 516.113143][T19539] netlink: 'syz.3.3278': attribute type 7 has an invalid length. [ 516.287195][T19550] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 516.513707][T19539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.531711][T19539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 516.599321][T19550] bond3: entered promiscuous mode [ 516.604966][T19550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.628349][T19557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.635859][T19557] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 516.648216][T19557] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 516.662950][T19557] bond3: (slave wireguard0): making interface the new active one [ 516.671082][T19557] wireguard0: entered promiscuous mode [ 516.678845][T19557] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 516.703755][T13751] hsr_slave_0: left promiscuous mode [ 516.718483][T13751] hsr_slave_1: left promiscuous mode [ 516.741811][T13751] hsr0: left allmulticast mode [ 517.357829][T19539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.400853][T19539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 517.730211][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 517.757562][T19539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.768597][T19595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3290'. [ 517.768729][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 517.797397][T19539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 517.826446][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3289'. [ 517.963760][T19603] netlink: 'syz.1.3293': attribute type 68 has an invalid length. [ 517.983348][T19539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.994087][T19539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.742890][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 520.981378][T19617] bond0: option resend_igmp: invalid value (18446744072210219584) [ 520.989517][T19617] bond0: option resend_igmp: allowed values 0 - 255 [ 521.017060][T19629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3299'. [ 521.036967][T19629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3299'. [ 521.062684][ T6666] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.073302][ T6666] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.089122][ T6666] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.097810][ T6666] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.144322][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 521.157802][T13751] IPVS: stop unused estimator thread 0... [ 521.292114][ T6666] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.329547][ T6666] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.359746][T19638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3301'. [ 521.473965][ T6666] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.505585][ T6666] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.657078][T19648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.751140][T19652] syzkaller0: entered promiscuous mode [ 521.769448][T19652] syzkaller0: entered allmulticast mode [ 521.784835][T19657] wg2: entered promiscuous mode [ 521.807462][T19657] wg2: entered allmulticast mode [ 521.897086][T19644] syzkaller0: entered promiscuous mode [ 521.919814][T19644] syzkaller0: entered allmulticast mode [ 521.937389][T19650] wg1 speed is unknown, defaulting to 1000 [ 521.947886][T19652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3305'. [ 521.981046][T19652] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 522.243852][T19665] bond0 (unregistering): Released all slaves [ 523.112472][T19699] __nla_validate_parse: 1 callbacks suppressed [ 523.112495][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 523.195988][T19687] syzkaller0: entered promiscuous mode [ 523.203625][T19687] syzkaller0: entered allmulticast mode [ 523.245593][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3314'. [ 523.516880][T19711] tipc: Enabled bearer , priority 0 [ 523.661278][T19711] tipc: Disabling bearer [ 523.725131][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 523.732608][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3322'. [ 523.784788][T19721] veth1_macvtap: left promiscuous mode [ 524.029374][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 524.063499][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 524.111326][T19733] netlink: 'syz.3.3326': attribute type 6 has an invalid length. [ 524.198319][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 524.207444][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.223182][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.234645][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 524.244288][T19733] netlink: 'syz.3.3326': attribute type 6 has an invalid length. [ 524.327086][T19742] hmó3)óÿ: entered promiscuous mode [ 524.339665][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.365629][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.509502][T19758] veth0: entered promiscuous mode [ 524.666771][T19767] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3332'. [ 524.716994][T19756] veth0: left promiscuous mode [ 524.864496][T19784] TCP: TCP_TX_DELAY enabled [ 525.028670][T19792] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3337'. [ 525.170016][T19800] syzkaller0: entered promiscuous mode [ 525.175836][T19800] syzkaller0: entered allmulticast mode [ 526.832299][T19725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.022832][T19805] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 528.100777][T19854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.220231][T19860] __nla_validate_parse: 2 callbacks suppressed [ 528.220248][T19860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3358'. [ 528.515476][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3363'. [ 528.729856][T19885] netlink: 'syz.3.3366': attribute type 3 has an invalid length. [ 529.325994][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 529.346823][T19918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3374'. [ 529.539176][T19927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 529.790892][T19926] lo speed is unknown, defaulting to 1000 [ 529.908203][T19926] lo speed is unknown, defaulting to 1000 [ 529.922390][T19926] lo speed is unknown, defaulting to 1000 [ 529.940945][T19936] block nbd3: server does not support multiple connections per device. [ 529.984423][T19936] block nbd3: shutting down sockets [ 530.111804][T19936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3376'. [ 530.148971][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3376'. [ 530.722049][T19926] infiniband sqz0: set active [ 530.736501][T19926] infiniband sqz0: added lo [ 530.757210][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 530.805030][T19926] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 530.837096][T19960] syzkaller0: entered promiscuous mode [ 530.856241][T19960] syzkaller0: entered allmulticast mode [ 530.878273][ T6245] lo speed is unknown, defaulting to 1000 [ 530.888495][T19926] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 530.909275][T19926] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 530.963257][T19960] netlink: zone id is out of range [ 530.975873][T19926] RDS/IB: sqz0: added [ 530.985492][T19926] smc: adding ib device sqz0 with port count 1 [ 530.998222][T19926] smc: ib device sqz0 port 1 has no pnetid [ 531.020078][T19960] netlink: zone id is out of range [ 531.063437][T19960] netlink: zone id is out of range [ 531.097253][T19960] netlink: zone id is out of range [ 531.129411][T19960] netlink: zone id is out of range [ 531.173770][T19960] netlink: zone id is out of range [ 531.210450][T19960] netlink: zone id is out of range [ 531.239674][T19960] netlink: zone id is out of range [ 531.291370][T19960] netlink: zone id is out of range [ 534.497088][ T24] lo speed is unknown, defaulting to 1000 [ 534.505432][T19926] lo speed is unknown, defaulting to 1000 [ 534.519288][T19995] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3386'. [ 534.565637][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 534.816654][T20000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.836493][T20000] team0: Port device bond4 added [ 534.914614][T20010] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 535.005796][T20010] bond0: (slave wlan1): Opening slave failed [ 535.223378][T20014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3392'. [ 535.257139][T20014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3392'. [ 535.289344][T20022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3394'. [ 535.346093][T19926] lo speed is unknown, defaulting to 1000 [ 535.794673][T20038] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 535.822961][T20038] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3397'. [ 536.612513][T19926] lo speed is unknown, defaulting to 1000 [ 536.637964][ T6668] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.699761][ T6668] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.731600][ T6668] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.787130][ T6668] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.943742][T20073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3401'. [ 536.993267][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 537.614156][T20082] wg1 speed is unknown, defaulting to 1000 [ 537.841506][T20088] syzkaller1: entered promiscuous mode [ 537.873614][T20088] syzkaller1: entered allmulticast mode [ 537.930753][T19926] lo speed is unknown, defaulting to 1000 [ 538.011104][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 538.101233][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.109079][T20099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.124613][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.148445][T20099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.422764][T20110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 538.449319][T20110] syzkaller1: linktype set to 260 [ 538.872725][T20123] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3411'. [ 538.918761][T20124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 538.942888][T20124] tipc: Enabled bearer , priority 0 [ 538.997361][T20124] syzkaller0: entered promiscuous mode [ 539.025417][T20124] syzkaller0: entered allmulticast mode [ 539.075606][ C1] net_ratelimit: 337 callbacks suppressed [ 539.075626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.095671][T20124] tipc: Resetting bearer [ 539.147385][T20122] tipc: Resetting bearer [ 539.237405][T20122] tipc: Disabling bearer [ 539.264713][T20082] lo speed is unknown, defaulting to 1000 [ 539.578524][T20135] __nla_validate_parse: 2 callbacks suppressed [ 539.578545][T20135] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3415'. [ 539.616939][T20137] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 539.618499][T20135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3415'. [ 539.661100][T20137] netlink: 'syz.2.3416': attribute type 21 has an invalid length. [ 539.711972][T20137] netlink: 'syz.2.3416': attribute type 6 has an invalid length. [ 539.742615][T20137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3416'. [ 539.870487][T19926] lo speed is unknown, defaulting to 1000 [ 540.116211][T20141] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 540.224907][T20146] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3418'. [ 540.373237][T20149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3419'. [ 540.485088][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3420'. [ 540.599864][T19926] lo speed is unknown, defaulting to 1000 [ 541.234185][T19926] lo speed is unknown, defaulting to 1000 [ 541.268520][T20177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3426'. [ 541.511936][T20180] syzkaller0: entered promiscuous mode [ 541.541677][T20180] ipt_REJECT: TCP_RESET invalid for non-tcp [ 541.887370][T19926] lo speed is unknown, defaulting to 1000 [ 542.026974][T20189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 542.856412][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3436'. [ 542.937308][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3436'. [ 542.983047][T20226] sch_fq: defrate 193 ignored. [ 543.437818][T20231] bond1: option all_slaves_active: invalid value (5) [ 543.471371][T20231] bond1 (unregistering): Released all slaves [ 543.653520][T20241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3443'. [ 544.010652][T20242] syzkaller1: entered promiscuous mode [ 544.035378][T20242] syzkaller1: entered allmulticast mode [ 544.583242][T20269] xt_cgroup: path and classid specified [ 544.815562][T20269] wg1 speed is unknown, defaulting to 1000 [ 544.984386][T20285] __nla_validate_parse: 2 callbacks suppressed [ 544.984410][T20285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3455'. [ 545.050306][T20289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 545.488496][T20302] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3460'. [ 545.639945][T20271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3453'. [ 545.801611][T20310] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3462'. [ 545.815043][T20310] tipc: Enabled bearer , priority 0 [ 545.824442][T20310] syzkaller0: entered promiscuous mode [ 545.831092][T20310] syzkaller0: entered allmulticast mode [ 545.942371][T20312] tipc: Resetting bearer [ 545.961400][T20269] lo speed is unknown, defaulting to 1000 [ 545.979398][T20308] tipc: Resetting bearer [ 546.047045][T20308] tipc: Disabling bearer [ 546.478272][T20332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3469'. [ 546.578788][T20331] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 547.429390][T20371] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 547.490219][T20374] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3474'. [ 547.515090][T20374] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3474'. [ 547.534939][T20374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'. [ 547.649219][T20371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.699769][ T5863] block nbd4: Receive control failed (result -110) [ 548.139453][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 548.231221][T20386] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 548.494100][T20389] bond1: (slave geneve2): making interface the new active one [ 548.540441][T20389] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 548.572633][T20392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.618942][ T6674] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.641416][ T6674] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.677854][ T6674] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.703311][T20400] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 548.712519][T20400] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 548.726399][ T6674] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.784210][T20397] wg1 speed is unknown, defaulting to 1000 [ 548.936881][T20405] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 549.251178][T20419] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 549.275589][T20419] syzkaller1: linktype set to 0 [ 549.480628][T20423] netlink: 'syz.2.3487': attribute type 1 has an invalid length. [ 549.562380][T20397] lo speed is unknown, defaulting to 1000 [ 558.095721][T20462] syz_tun: entered allmulticast mode [ 558.276833][T20463] syz_tun: left allmulticast mode [ 558.764624][T20489] __nla_validate_parse: 5 callbacks suppressed [ 558.764646][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 559.030647][T20497] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 559.064263][T20497] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 559.196877][T20505] syz.3.3509 uses old SIOCAX25GETINFO [ 559.361823][T20507] openvswitch: netlink: Flow key attribute not present in set flow. [ 559.672574][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3515'. [ 559.884558][T20530] dvmrp6: entered allmulticast mode [ 559.948009][T20534] syzkaller1: entered promiscuous mode [ 559.956093][T20534] syzkaller1: entered allmulticast mode [ 560.051065][T20541] sctp: [Deprecated]: syz.1.3519 (pid 20541) Use of int in maxseg socket option. [ 560.051065][T20541] Use struct sctp_assoc_value instead [ 560.538030][T20555] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3523'. [ 560.949224][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 561.198629][T20572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.217350][T20577] netlink: 'syz.3.3528': attribute type 29 has an invalid length. [ 561.447564][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3530'. [ 561.457919][T20586] netlink: 'syz.2.3530': attribute type 7 has an invalid length. [ 561.473468][T20586] netlink: 'syz.2.3530': attribute type 8 has an invalid length. [ 561.482252][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'. [ 561.529268][T20582] bond4: entered allmulticast mode [ 561.555001][T20587] macvlan2: entered promiscuous mode [ 561.561753][T20587] macvlan2: entered allmulticast mode [ 561.568862][T20587] bond4: (slave macvlan2): Opening slave failed [ 561.652660][T20586] bridge0: entered promiscuous mode [ 561.687762][T20586] ip6gretap0: entered promiscuous mode [ 561.714031][T20586] bridge0: left promiscuous mode [ 561.740560][T20586] ip6gretap0: left promiscuous mode [ 561.914806][T20609] 8021q: VLANs not supported on ip6tnl0 [ 561.994441][T20599] syzkaller1: entered promiscuous mode [ 562.005482][T20599] syzkaller1: entered allmulticast mode [ 562.106703][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.221099][T20627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3539'. [ 562.258078][T20629] siw: device registration error -23 [ 562.328235][T20627] tipc: New replicast peer: 255.255.255.255 [ 562.358115][T20627] tipc: Enabled bearer , priority 10 [ 562.462964][T20623] syzkaller0: entered promiscuous mode [ 562.483405][T20623] syzkaller0: entered allmulticast mode [ 562.741869][T20647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.365586][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3550'. [ 563.412390][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 563.458430][T20660] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3550'. [ 563.490679][ T5971] tipc: Node number set to 17918512 [ 563.564906][T20633] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 564.258709][T20681] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 564.514973][T20687] tipc: Enabled bearer , priority 0 [ 564.546449][T20687] syzkaller0: entered promiscuous mode [ 564.563393][T20687] syzkaller0: entered allmulticast mode [ 564.680981][T20686] tipc: Resetting bearer [ 564.745875][T20686] tipc: Disabling bearer [ 564.820568][T20694] syzkaller1: entered promiscuous mode [ 564.843587][T20694] syzkaller1: entered allmulticast mode [ 564.862087][T20696] tipc: Enabled bearer , priority 0 [ 564.899989][T20696] syzkaller0: entered promiscuous mode [ 564.922486][T20696] syzkaller0: entered allmulticast mode [ 564.958590][T20695] tipc: Resetting bearer [ 564.959528][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.979108][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.992779][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.003282][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.013862][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.024732][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.037319][T20708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.054690][T20695] tipc: Disabling bearer [ 565.223021][T20715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3568'. [ 565.269332][T20717] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.3569'. [ 565.335463][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 565.551869][T20729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3574'. [ 565.845478][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3578'. [ 565.866535][T20735] wg1 speed is unknown, defaulting to 1000 [ 566.273061][T20758] IPVS: length: 238 != 8 [ 566.276451][T20759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3583'. [ 566.500007][T20768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.843313][T20780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3589'. [ 566.886092][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 566.919078][T20780] tc_dump_action: action bad kind [ 567.190958][T20782] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.198826][T20782] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.492026][T20782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.532878][T20782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.584144][T20804] sctp: [Deprecated]: syz.4.3591 (pid 20804) Use of int in maxseg socket option. [ 567.584144][T20804] Use struct sctp_assoc_value instead [ 567.676962][ T5971] lo speed is unknown, defaulting to 1000 [ 567.683375][ T5971] sqz0: Port: 1 Link DOWN [ 567.691819][T20798] tipc: Enabling of bearer rejected, failed to enable media [ 567.709752][ T6674] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.727918][ T6674] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.741783][ T6674] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.752675][ T29] lo speed is unknown, defaulting to 1000 [ 567.791122][T20735] lo speed is unknown, defaulting to 1000 [ 567.802972][ T6674] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.836983][ T6674] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.870498][ T6674] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.908060][ T6674] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.933685][ T6674] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.962342][ T6674] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 567.991311][ T6674] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.026820][ T6674] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 568.054483][ T6674] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.082394][T20809] tipc: Enabling of bearer rejected, already enabled [ 568.091390][T20814] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 568.517816][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3602'. [ 568.556797][T20827] lo speed is unknown, defaulting to 1000 [ 568.598842][T20827] lo speed is unknown, defaulting to 1000 [ 568.698042][T20827] lo speed is unknown, defaulting to 1000 [ 568.712644][T20827] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 568.746298][T20827] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 568.798340][T20827] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 568.937895][T20827] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 569.387132][T20827] lo speed is unknown, defaulting to 1000 [ 569.456663][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 569.490972][T20827] lo speed is unknown, defaulting to 1000 [ 569.539298][T20843] wg1 speed is unknown, defaulting to 1000 [ 569.580980][T20827] lo speed is unknown, defaulting to 1000 [ 569.640200][T20827] lo speed is unknown, defaulting to 1000 [ 569.702199][T20827] lo speed is unknown, defaulting to 1000 [ 569.817337][T20827] lo speed is unknown, defaulting to 1000 [ 569.922018][T20827] lo speed is unknown, defaulting to 1000 [ 570.089167][T20827] lo speed is unknown, defaulting to 1000 [ 570.124703][T20827] lo speed is unknown, defaulting to 1000 [ 570.233653][T20879] netlink: 'syz.0.3610': attribute type 1 has an invalid length. [ 570.290508][T20879] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3610'. [ 570.622966][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 570.670755][T20890] xt_TCPMSS: Only works on TCP SYN packets [ 570.817925][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 570.829658][T20843] lo speed is unknown, defaulting to 1000 [ 571.074369][T20903] openvswitch: netlink: IP tunnel dst address not specified [ 571.927946][T20934] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3625'. [ 572.317831][T20946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3628'. [ 572.361103][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 572.402387][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3629'. [ 572.888073][T20959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.950444][T20971] netlink: 'syz.3.3631': attribute type 1 has an invalid length. [ 573.006396][T20971] netlink: 'syz.3.3631': attribute type 2 has an invalid length. [ 573.187630][T20973] syzkaller0: entered promiscuous mode [ 573.215012][T20973] syzkaller0: entered allmulticast mode [ 573.616209][T20988] netlink: 'syz.3.3638': attribute type 13 has an invalid length. [ 574.285378][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 575.398457][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 577.208069][ T29] hsr0: entered promiscuous mode [ 577.300416][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 577.338442][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 577.362356][T21017] 8021q: VLANs not supported on caif0 [ 577.823305][T21044] macsec1: entered promiscuous mode [ 577.850996][T21044] macsec1: entered allmulticast mode [ 578.089782][T21044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.355591][T21068] netlink: 'syz.2.3655': attribute type 11 has an invalid length. [ 578.386685][T21068] netlink: 'syz.2.3655': attribute type 23 has an invalid length. [ 578.408684][T21068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3655'. [ 578.509639][T21080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 578.756723][T21083] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3658'. [ 578.788458][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3658'. [ 578.816063][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3658'. [ 578.918699][T21085] syzkaller1: entered allmulticast mode [ 579.281675][T21099] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 579.526366][T21110] tipc: Enabled bearer , priority 14 [ 580.006129][T21124] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 580.030493][T21129] xt_hashlimit: size too large, truncated to 1048576 [ 580.054246][T21132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 580.149959][T21132] : entered promiscuous mode [ 580.231263][T21139] x_tables: duplicate underflow at hook 1 [ 580.310129][T21143] pim6reg1: entered promiscuous mode [ 580.354949][T21143] pim6reg1: entered allmulticast mode [ 580.406583][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 580.649062][T21152] wg1 speed is unknown, defaulting to 1000 [ 580.686934][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3682'. [ 581.417388][T21184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'. [ 581.569973][T21152] lo speed is unknown, defaulting to 1000 [ 581.834221][T21199] wg1 speed is unknown, defaulting to 1000 [ 582.048376][T21213] netlink: 'syz.2.3692': attribute type 1 has an invalid length. [ 582.073765][T21213] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 582.523261][T21152] lo speed is unknown, defaulting to 1000 [ 582.536151][T21217] IPVS: set_ctl: invalid protocol: 107 224.0.0.2:20003 [ 582.705725][T21224] block nbd3: server does not support multiple connections per device. [ 582.733487][T21224] block nbd3: shutting down sockets [ 582.850511][T21199] lo speed is unknown, defaulting to 1000 [ 583.484578][T21199] lo speed is unknown, defaulting to 1000 [ 583.630864][T21254] __nla_validate_parse: 1 callbacks suppressed [ 583.630890][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 583.646662][T21255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3706'. [ 583.727492][T21258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 583.938942][T21260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3708'. [ 584.011887][ T6668] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.047884][ T6668] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.157479][ T6668] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.203683][ T6668] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.579836][T21275] syzkaller0: entered promiscuous mode [ 584.598822][T21275] syzkaller0: entered allmulticast mode [ 584.670540][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3711'. [ 585.246238][ T24] IPVS: starting estimator thread 0... [ 585.298680][T21285] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 585.357572][T21287] IPVS: using max 27 ests per chain, 64800 per kthread [ 585.398229][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.721879][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 585.794888][T21295] wg1 speed is unknown, defaulting to 1000 [ 586.245655][ T5845] Bluetooth: hci2: command tx timeout [ 586.253457][ T63] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.407823][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.418316][T21323] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 586.587560][T21323] bond3: entered promiscuous mode [ 586.593234][T21323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.607082][T21308] wg1 speed is unknown, defaulting to 1000 [ 586.613351][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 586.628772][T21295] lo speed is unknown, defaulting to 1000 [ 587.042576][T21342] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3728'. [ 587.304259][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.349123][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.393440][T21349] netlink: 'syz.0.3730': attribute type 1 has an invalid length. [ 587.641714][T21349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.657730][T21295] lo speed is unknown, defaulting to 1000 [ 587.658210][T21356] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 587.678444][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 587.687438][T21356] netlink: 'syz.4.3732': attribute type 2 has an invalid length. [ 587.723587][T21358] bond4: entered allmulticast mode [ 587.792035][T21349] bond4: (slave ip6gretap1): making interface the new active one [ 587.824220][T21349] ip6gretap1: entered allmulticast mode [ 587.836357][T21349] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 587.912852][T21308] lo speed is unknown, defaulting to 1000 [ 588.230007][T21378] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3737'. [ 588.275456][T21368] wg1 speed is unknown, defaulting to 1000 [ 588.493182][T21385] netlink: 'syz.0.3738': attribute type 13 has an invalid length. [ 588.530158][T21385] netlink: 'syz.0.3738': attribute type 17 has an invalid length. [ 588.592511][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.600230][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.618521][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 588.702506][T21382] team_slave_0: left promiscuous mode [ 588.726442][T21382] team_slave_1: left promiscuous mode [ 588.977341][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.032181][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.461101][T21385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.471013][T21385] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.485731][T21385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.515513][T21308] lo speed is unknown, defaulting to 1000 [ 589.523682][T21368] lo speed is unknown, defaulting to 1000 [ 589.531229][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.556498][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.586929][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.605370][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.722002][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.751993][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.782300][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.804499][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.177768][T21400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3740'. [ 590.381151][T21410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3743'. [ 590.769011][T21368] lo speed is unknown, defaulting to 1000 [ 591.527791][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.619940][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 591.750002][T21424] netlink: 'syz.0.3744': attribute type 13 has an invalid length. [ 591.781884][T21426] bridge_slave_0: left allmulticast mode [ 591.791298][T21426] bridge_slave_0: left promiscuous mode [ 591.801385][T21426] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.829067][T21426] bridge_slave_1: left allmulticast mode [ 591.843703][T21426] bridge_slave_1: left promiscuous mode [ 591.857030][T21426] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.894608][T21426] bond0: (slave bond_slave_0): Releasing backup interface [ 591.920867][T21426] bond0: (slave bond_slave_1): Releasing backup interface [ 591.947711][T21426] team0: Port device team_slave_0 removed [ 591.976910][T21426] team0: Port device team_slave_1 removed [ 591.995068][T21426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.016604][T21426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.026774][T21426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.034218][T21426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.046078][T21426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.102975][T21452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3751'. [ 593.248036][T21435] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 593.250312][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.296369][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.334066][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.343184][T21459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3752'. [ 593.378640][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.757950][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3760'. [ 593.973467][T21493] netlink: 'syz.4.3761': attribute type 10 has an invalid length. [ 593.994968][T21493] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3761'. [ 594.016987][T21497] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 594.024892][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 594.053880][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3764'. [ 594.054964][T21497] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 594.080970][T21499] netlink: 'syz.1.3764': attribute type 7 has an invalid length. [ 594.102422][T21497] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 594.114688][T21499] netlink: 'syz.1.3764': attribute type 8 has an invalid length. [ 594.137492][T21497] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 594.160299][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 594.178027][T21497] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 594.196601][T21497] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 594.282088][T21493] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 594.490994][ T5863] Bluetooth: hci0: command 0x080f tx timeout [ 595.134684][T21544] wg2: entered allmulticast mode [ 595.311706][T21546] hmac(sh: entered promiscuous mode [ 595.347933][T21551] bridge0: port 3(bond0) entered blocking state [ 595.385460][T21551] bridge0: port 3(bond0) entered disabled state [ 595.443746][T21551] bond0: entered allmulticast mode [ 595.477571][T21551] bond_slave_0: entered allmulticast mode [ 595.529783][T21551] bond_slave_1: entered allmulticast mode [ 595.570966][T21551] bond0: entered promiscuous mode [ 595.615025][T21551] bond_slave_0: entered promiscuous mode [ 595.695943][T21551] bond_slave_1: entered promiscuous mode [ 595.785005][T21551] bridge0: port 3(bond0) entered blocking state [ 595.791509][T21551] bridge0: port 3(bond0) entered forwarding state [ 595.846828][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 595.858406][T21557] __nla_validate_parse: 2 callbacks suppressed [ 595.858422][T21557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 595.874952][T21557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 595.893324][T21569] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3776'. [ 596.231141][T21586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3781'. [ 596.270306][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 597.420537][T21621] netlink: zone id is out of range [ 597.437394][T21621] netlink: zone id is out of range [ 597.468886][T21621] netlink: zone id is out of range [ 597.490901][T21621] netlink: zone id is out of range [ 597.526760][T21621] netlink: zone id is out of range [ 597.560372][T21621] netlink: zone id is out of range [ 597.593287][T21621] netlink: zone id is out of range [ 597.609155][T21621] netlink: zone id is out of range [ 597.620050][T21621] netlink: zone id is out of range [ 597.644878][T21621] netlink: zone id is out of range [ 598.091712][T21652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'. [ 598.170581][T21652] nbd: must specify a device to reconfigure [ 598.358303][T21659] Unsupported ieee802154 address type: 0 [ 598.494550][T21656] bridge0: port 3(bond0) entered disabled state [ 598.501161][T21656] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.509148][T21656] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.591287][T21676] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3800'. [ 598.834515][T21658] vlan2: entered allmulticast mode [ 598.843527][T21658] bridge0: port 4(vlan2) entered blocking state [ 598.850231][T21658] bridge0: port 4(vlan2) entered disabled state [ 598.861000][T21658] vlan2: entered promiscuous mode [ 598.914984][ T63] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.938349][ T63] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.966116][ T6674] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.981938][ T6674] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.032103][ T6674] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.047844][ T6674] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.060243][ T6674] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.069755][ T6674] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.079851][T21672] wg1 speed is unknown, defaulting to 1000 [ 599.082234][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 599.230160][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'. [ 599.363039][T21682] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3802'. [ 600.040305][T21672] lo speed is unknown, defaulting to 1000 [ 600.165363][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 600.702682][T21672] lo speed is unknown, defaulting to 1000 [ 600.966522][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 601.494960][T21732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 601.889693][T21741] __nla_validate_parse: 1 callbacks suppressed [ 601.889714][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 602.175347][T21687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.198666][T21745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3827'. [ 602.354660][T21752] bond1: left promiscuous mode [ 602.376843][T21752] ip6gre1: left promiscuous mode [ 602.398545][T21752] bond3: left promiscuous mode [ 602.420439][T21752] bond4: left allmulticast mode [ 602.435318][T21752] ip6gretap1: left allmulticast mode [ 602.682497][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 602.740074][T21770] sit1: entered allmulticast mode [ 602.861898][T21778] netlink: 'syz.2.3840': attribute type 4 has an invalid length. [ 602.895230][ T5919] lo speed is unknown, defaulting to 1000 [ 602.913427][ T5919] syz2: Port: 1 Link DOWN [ 603.566530][T21805] syzkaller1: entered promiscuous mode [ 603.591073][T21805] syzkaller1: entered allmulticast mode [ 603.671999][T21813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'. [ 603.892669][T21816] syzkaller0: entered promiscuous mode [ 603.915576][T21816] syzkaller0: entered allmulticast mode [ 604.368882][T21837] wg1 speed is unknown, defaulting to 1000 [ 605.619777][T21837] lo speed is unknown, defaulting to 1000 [ 605.658534][T21859] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3878'. [ 606.247741][T21872] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 606.362238][T21837] lo speed is unknown, defaulting to 1000 [ 606.402985][T21876] tls_set_device_offload: netdev not found [ 606.504839][T21878] netlink: 'syz.2.3886': attribute type 1 has an invalid length. [ 606.538218][T21878] net_ratelimit: 44 callbacks suppressed [ 606.538233][T21878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.072813][T21896] netlink: 'syz.2.3891': attribute type 8 has an invalid length. [ 607.097501][T21896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 607.199178][T21896] bond0: entered promiscuous mode [ 607.215376][T21896] bond_slave_0: entered promiscuous mode [ 607.227207][T21896] bond_slave_1: entered promiscuous mode [ 607.255294][T21896] gretap0: entered promiscuous mode [ 607.270434][T21896] ip6gretap0: entered promiscuous mode [ 607.303575][T21896] hsr1: entered promiscuous mode [ 607.487165][ T6668] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.528914][ T6668] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.557778][ T6668] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.566938][T21901] netlink: 'syz.3.3892': attribute type 13 has an invalid length. [ 607.595284][ T6668] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.597479][T21901] netlink: 'syz.3.3892': attribute type 17 has an invalid length. [ 607.917278][T21924] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3894'. [ 608.059894][T21901] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.110373][T21901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.139011][ T807] lo speed is unknown, defaulting to 1000 [ 608.146031][ T807] sqz0: Port: 1 Link ACTIVE [ 608.155038][T21907] netlink: 'syz.1.3894': attribute type 33 has an invalid length. [ 608.222653][ T807] lo speed is unknown, defaulting to 1000 [ 608.413433][T21937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3899'. [ 608.422953][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3898'. [ 608.647653][T21944] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3901'. [ 608.937182][T21955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3906'. [ 609.122787][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3910'. [ 609.158887][T21967] xt_connbytes: Forcing CT accounting to be enabled [ 609.175544][T21966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3910'. [ 609.667994][T21988] wg1 speed is unknown, defaulting to 1000 [ 610.691232][T22010] tipc: Enabled bearer , priority 0 [ 610.745724][T22011] syzkaller0: entered promiscuous mode [ 610.780337][T22011] syzkaller0: entered allmulticast mode [ 610.887590][T22011] tipc: Resetting bearer [ 610.991858][T22011] tipc: Disabling bearer [ 611.066623][T21988] lo speed is unknown, defaulting to 1000 [ 611.165811][T22037] wg1 speed is unknown, defaulting to 1000 [ 611.214445][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 611.658518][T22060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.688213][T22062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3926'. [ 612.000144][T21988] lo speed is unknown, defaulting to 1000 [ 612.123475][T22048] wg1 speed is unknown, defaulting to 1000 [ 612.173941][T22037] lo speed is unknown, defaulting to 1000 [ 613.108190][T22037] lo speed is unknown, defaulting to 1000 [ 613.132892][T22048] lo speed is unknown, defaulting to 1000 [ 613.736000][T22094] x_tables: duplicate underflow at hook 1 [ 614.118797][T22048] lo speed is unknown, defaulting to 1000 [ 614.124842][T22101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.714663][T22109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3939'. [ 618.291926][T22127] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 618.365395][T22130] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 618.537064][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 618.776727][T22141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 618.818092][T22142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3948'. [ 618.876602][T22142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3948'. [ 618.948292][T22141] veth0: entered promiscuous mode [ 619.040055][T22141] veth0: left promiscuous mode [ 619.411771][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3953'. [ 619.468977][T22159] smc: net device veth1_to_team applied user defined pnetid S [ 619.564429][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 619.595752][T22170] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 619.611005][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 619.679107][T22170] team0: Port device dummy0 added [ 619.686439][T22177] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 619.807823][T22177] team0: Port device dummy0 removed [ 619.862827][T22177] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 619.945708][T22176] wg1 speed is unknown, defaulting to 1000 [ 619.951663][T22186] netlink: 'syz.4.3959': attribute type 3 has an invalid length. [ 620.067037][T22186] nbd: nbd4 already in use [ 620.382302][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 620.442226][T22207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3965'. [ 621.097656][T22230] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 621.157354][T22232] syzkaller1: entered promiscuous mode [ 621.176032][T22232] syzkaller1: entered allmulticast mode [ 621.484317][T22241] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3974'. [ 621.534351][T22176] lo speed is unknown, defaulting to 1000 [ 621.573808][T22246] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 621.636893][T22241] wg1 speed is unknown, defaulting to 1000 [ 621.844878][T22248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3976'. [ 622.258329][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 622.366689][T22263] netlink: 888 bytes leftover after parsing attributes in process `syz.4.3980'. [ 622.390796][T22176] lo speed is unknown, defaulting to 1000 [ 622.571285][T22267] syzkaller0: entered promiscuous mode [ 622.614369][T22267] syzkaller0: entered allmulticast mode [ 622.761968][T22271] sctp: [Deprecated]: syz.1.3982 (pid 22271) Use of int in maxseg socket option. [ 622.761968][T22271] Use struct sctp_assoc_value instead [ 622.787913][T22241] lo speed is unknown, defaulting to 1000 [ 623.301271][T22241] lo speed is unknown, defaulting to 1000 [ 623.350730][T22279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.742550][T22289] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 624.586940][ T6668] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.611523][ T6668] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.628693][ T6668] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.650687][ T6668] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.704380][ T6668] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.715959][ T6668] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.724735][ T6668] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.743054][ T6668] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.153084][T22307] netlink: 4092 bytes leftover after parsing attributes in process `syz.4.3992'. [ 625.208361][T22302] wg1 speed is unknown, defaulting to 1000 [ 625.792320][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3998'. [ 625.900076][T22331] wg1 speed is unknown, defaulting to 1000 [ 625.918101][T22302] lo speed is unknown, defaulting to 1000 [ 626.158706][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 626.432625][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 626.580426][T22302] lo speed is unknown, defaulting to 1000 [ 626.662382][T22341] wg1 speed is unknown, defaulting to 1000 [ 626.688121][T22331] lo speed is unknown, defaulting to 1000 [ 626.814767][T22358] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 626.949745][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4006'. [ 626.952191][T22358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.015814][T22357] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 627.424055][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4011'. [ 627.471251][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4011'. [ 627.563139][T22331] lo speed is unknown, defaulting to 1000 [ 627.569222][T22341] lo speed is unknown, defaulting to 1000 [ 628.132601][T22390] veth1_to_bond: entered promiscuous mode [ 628.143683][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 628.159386][T22390] veth1_to_bond (unregistering): left promiscuous mode [ 628.196627][T22390] bond0: (slave bond_slave_1): Releasing backup interface [ 628.419603][T22394] wg1 speed is unknown, defaulting to 1000 [ 628.427616][T22341] lo speed is unknown, defaulting to 1000 [ 629.935973][T22420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4022'. [ 629.990764][T22421] netlink: 'syz.2.4023': attribute type 15 has an invalid length. [ 630.050247][T22394] lo speed is unknown, defaulting to 1000 [ 630.171500][T22429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4024'. [ 630.505513][T22438] netlink: 'syz.0.4027': attribute type 3 has an invalid length. [ 630.529234][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4027'. [ 631.084537][T22454] wg1 speed is unknown, defaulting to 1000 [ 631.295057][T22394] lo speed is unknown, defaulting to 1000 [ 631.607228][T22472] Bluetooth: MGMT ver 1.23 [ 631.623487][T22472] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 631.974310][T22473] tap0: tun_chr_ioctl cmd 1074025681 [ 632.136460][T22453] wg1 speed is unknown, defaulting to 1000 [ 632.323802][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 632.349030][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 632.584622][T22483] wg1 speed is unknown, defaulting to 1000 [ 632.609876][T22454] lo speed is unknown, defaulting to 1000 [ 633.273930][T22489] wg1 speed is unknown, defaulting to 1000 [ 633.303484][T22453] lo speed is unknown, defaulting to 1000 [ 633.312641][T22454] lo speed is unknown, defaulting to 1000 [ 633.908469][T22483] lo speed is unknown, defaulting to 1000 [ 634.442810][T22489] lo speed is unknown, defaulting to 1000 [ 634.449929][T22453] lo speed is unknown, defaulting to 1000 [ 634.465070][T22483] lo speed is unknown, defaulting to 1000 [ 634.488616][T22494] netlink: 'syz.3.4040': attribute type 4 has an invalid length. [ 634.508401][T22494] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4040'. [ 635.144325][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4041'. [ 635.272680][T22489] lo speed is unknown, defaulting to 1000 [ 637.802384][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 637.867374][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4046'. [ 638.912728][T22554] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 638.988792][T22554] pim6reg1: entered promiscuous mode [ 639.004144][T22554] pim6reg1: entered allmulticast mode [ 639.025064][T22560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4058'. [ 639.204912][T22568] netlink: 'syz.1.4060': attribute type 1 has an invalid length. [ 639.282068][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 639.283930][T22570] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 639.319389][T22570] bond1 (unregistering): Released all slaves [ 639.507113][T22568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 639.529472][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 639.661913][T22588] netlink: 'syz.0.4064': attribute type 21 has an invalid length. [ 639.680241][T22588] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.696976][T22588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.704295][T22588] IPv6: NLM_F_CREATE should be set when creating new route [ 639.711616][T22588] IPv6: NLM_F_CREATE should be set when creating new route [ 639.718937][T22588] IPv6: NLM_F_CREATE should be set when creating new route [ 639.736500][ T6245] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 639.737124][T22585] syzkaller0: entered promiscuous mode [ 639.796279][T22585] syzkaller0: entered allmulticast mode [ 639.824132][T22590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4068'. [ 639.850272][ T6245] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 639.877811][T22598] openvswitch: netlink: IP tunnel dst address not specified [ 639.896898][T20612] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 640.170849][T22608] netlink: 'syz.1.4074': attribute type 8 has an invalid length. [ 640.435994][T22615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4076'. [ 640.709163][T22620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'. [ 640.771655][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'. [ 640.791177][T22628] tipc: Enabled bearer , priority 0 [ 640.972046][ T6674] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 641.000658][ T6674] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 641.063310][T22645] xt_hashlimit: size too large, truncated to 1048576 [ 641.229450][T22642] syzkaller0: entered promiscuous mode [ 641.256492][T22642] syzkaller0: entered allmulticast mode [ 641.765733][ T5919] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 644.965445][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 645.224941][T22668] macvtap1: entered promiscuous mode [ 645.250261][T22668] bridge0: entered promiscuous mode [ 645.276366][T22668] bridge0: port 3(macvtap1) entered blocking state [ 645.299968][T22668] bridge0: port 3(macvtap1) entered disabled state [ 645.316393][T22668] macvtap1: entered allmulticast mode [ 645.343006][T22668] bridge0: entered allmulticast mode [ 645.378321][T22673] netlink: 'syz.4.4092': attribute type 10 has an invalid length. [ 645.390970][T22668] macvtap1: left allmulticast mode [ 645.411239][T22668] bridge0: left allmulticast mode [ 645.415986][T22675] netlink: 'syz.4.4092': attribute type 10 has an invalid length. [ 645.428008][T22668] bridge0: left promiscuous mode [ 645.464071][T22683] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4093'. [ 645.489173][T22671] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 645.603908][T22673] team0 (unregistering): Port device team_slave_0 removed [ 645.641710][T22673] team0 (unregistering): Port device team_slave_1 removed [ 645.863231][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4098'. [ 645.903342][T22697] syzkaller1: entered promiscuous mode [ 645.929138][T22697] syzkaller1: entered allmulticast mode [ 646.195821][ T5971] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 646.209416][T22706] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4100'. [ 646.220328][T20612] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 646.254104][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 646.266442][ T5971] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 646.317607][T22705] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4100'. [ 646.357113][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 646.698946][T22728] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4103'. [ 646.850017][T22732] netlink: 'syz.2.4105': attribute type 4 has an invalid length. [ 646.881735][T22733] netlink: 'syz.2.4105': attribute type 4 has an invalid length. [ 647.286469][T20610] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.296005][T20610] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.515433][ T29] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 651.045454][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 653.285343][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 655.204333][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 655.237273][T22738] ip6tnl2: entered allmulticast mode [ 655.373857][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 655.853418][T22783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 655.943832][T22783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4118'. [ 656.042667][T22789] x_tables: duplicate underflow at hook 2 [ 656.093560][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4122'. [ 656.192138][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 656.279347][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 656.371615][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4126'. [ 656.393817][T22811] wg1 speed is unknown, defaulting to 1000 [ 656.403628][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4126'. [ 656.444954][T22816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.452293][T22816] IPv6: NLM_F_CREATE should be set when creating new route [ 656.459632][T22816] IPv6: NLM_F_CREATE should be set when creating new route [ 656.466908][T22816] IPv6: NLM_F_CREATE should be set when creating new route [ 656.478549][T22816] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4128'. [ 656.753093][T22827] netlink: 'syz.1.4131': attribute type 15 has an invalid length. [ 656.835557][T22811] lo speed is unknown, defaulting to 1000 [ 657.319559][T22811] lo speed is unknown, defaulting to 1000 [ 657.963670][T22886] netlink: 'syz.4.4151': attribute type 10 has an invalid length. [ 658.218211][T22902] netlink: 'syz.1.4155': attribute type 10 has an invalid length. [ 658.333729][T22902] team0: Port device vxcan1 added [ 658.343284][T22908] x_tables: duplicate underflow at hook 1 [ 658.405383][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 658.738144][T22925] netlink: 'syz.1.4162': attribute type 10 has an invalid length. [ 658.776353][T22926] netlink: 'syz.1.4162': attribute type 10 has an invalid length. [ 658.829595][T22925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.861474][T22925] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 659.552904][T22916] lec:lec_atm_close: lec0: Shut down! [ 660.460828][T22990] wg1 speed is unknown, defaulting to 1000 [ 661.202495][T23023] __nla_validate_parse: 22 callbacks suppressed [ 661.202517][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4183'. [ 661.256601][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4183'. [ 661.646769][ T5971] lec:lec_start_xmit: lec0:No lecd attached [ 661.742559][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4185'. [ 661.830781][T22990] lo speed is unknown, defaulting to 1000 [ 662.157115][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 662.204833][T23058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4188'. [ 662.225255][T23059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4188'. [ 662.663785][T22990] lo speed is unknown, defaulting to 1000 [ 663.361397][T23104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4197'. [ 663.541605][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 663.709113][T23119] netlink: 'syz.4.4202': attribute type 4 has an invalid length. [ 663.876592][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4202'. [ 663.898153][T23127] netlink: 'syz.4.4202': attribute type 5 has an invalid length. [ 663.932591][T23127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4202'. [ 664.016061][T23124] macsec1: entered promiscuous mode [ 664.034048][T23124] dummy0: entered promiscuous mode [ 664.058741][T23124] macsec1: entered allmulticast mode [ 664.066209][T23124] dummy0: entered allmulticast mode [ 664.084784][T23124] dummy0: left allmulticast mode [ 664.095965][T23124] dummy0: left promiscuous mode [ 664.167539][T23139] xt_hashlimit: max too large, truncated to 1048576 [ 664.184180][T23139] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 664.204665][T23127] geneve2: entered promiscuous mode [ 664.216502][T23127] geneve2: entered allmulticast mode [ 664.293371][ T6668] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40168 - 0 [ 664.808278][T23177] wg1 speed is unknown, defaulting to 1000 [ 665.149591][T23177] lo speed is unknown, defaulting to 1000 [ 665.368766][T23191] netlink: get zone limit has 4 unknown bytes [ 665.557264][T23201] tipc: Enabling of bearer rejected, failed to enable media [ 665.643568][T23119] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40168 - 0 [ 665.709503][T23177] lo speed is unknown, defaulting to 1000 [ 665.941336][T20610] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40168 - 0 [ 666.036027][T20610] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 40168 - 0 [ 666.155030][T20610] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 40168 - 0 [ 666.232059][T20610] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 40168 - 0 [ 666.347167][T23227] __nla_validate_parse: 2 callbacks suppressed [ 666.347192][T23227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4227'. [ 666.383859][T23227] x_tables: duplicate underflow at hook 2 [ 666.935940][T23250] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4233'. [ 667.068196][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 667.103756][T23250] veth5: entered promiscuous mode [ 667.229286][T23265] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 667.334597][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'. [ 667.365189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 667.375355][ C1] lec:lec_tx_timeout: lec0 [ 667.380951][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.395057][T23266] bond6: option all_slaves_active: invalid value (5) [ 667.408968][T23266] bond6 (unregistering): Released all slaves [ 667.411470][T23274] netlink: 'syz.4.4243': attribute type 1 has an invalid length. [ 667.433425][T23274] netlink: 'syz.4.4243': attribute type 2 has an invalid length. [ 667.442324][T23273] bridge0: port 5(veth0_to_bridge) entered blocking state [ 667.456835][T23273] bridge0: port 5(veth0_to_bridge) entered disabled state [ 667.464334][T23273] veth0_to_bridge: entered allmulticast mode [ 667.474574][T23273] veth0_to_bridge: entered promiscuous mode [ 667.638244][T23286] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4245'. [ 667.640464][T23288] xt_hashlimit: size too large, truncated to 1048576 [ 667.877151][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4247'. [ 667.895433][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4247'. [ 667.915517][T23297] syz_tun: entered promiscuous mode [ 669.295449][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.811553][T23297] syz_tun: left promiscuous mode [ 670.836293][T23300] tc_dump_action: action bad kind [ 670.855691][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4248'. [ 670.929099][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 670.999394][T23305] wg1 speed is unknown, defaulting to 1000 [ 671.194656][T23326] netlink: 'syz.2.4255': attribute type 1 has an invalid length. [ 671.220150][T23328] netlink: 'syz.3.4256': attribute type 8 has an invalid length. [ 671.301815][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'. [ 671.419638][T23329] gretap1: entered allmulticast mode [ 671.444480][T23329] bond8: (slave gretap1): making interface the new active one [ 671.474827][T23329] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 671.597345][T23305] lo speed is unknown, defaulting to 1000 [ 671.677827][T23312] block nbd3: NBD_DISCONNECT [ 671.710508][T23312] block nbd3: Disconnected due to user request. [ 671.724671][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'. [ 671.750580][T23312] block nbd3: shutting down sockets [ 672.239351][T23372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4269'. [ 672.294202][T23312] udevd[23312]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 672.332830][T23305] lo speed is unknown, defaulting to 1000 [ 672.376956][T23374] batadv_slave_0: entered promiscuous mode [ 672.448125][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4270'. [ 672.508287][T23372] netlink: 'syz.3.4269': attribute type 13 has an invalid length. [ 672.526080][T23377] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 672.632762][T23369] batadv_slave_0: left promiscuous mode [ 672.692604][T23382] wg1 speed is unknown, defaulting to 1000 [ 672.888035][T23390] netlink: 'syz.3.4272': attribute type 11 has an invalid length. [ 672.911545][T23390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4272'. [ 673.125179][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 673.133286][ C1] lec:lec_tx_timeout: lec0 [ 673.138011][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 673.146569][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 673.176406][T23393] nbd: socks must be embedded in a SOCK_ITEM attr [ 673.240680][T23394] netlink: 'syz.2.4274': attribute type 13 has an invalid length. [ 673.841371][T23382] lo speed is unknown, defaulting to 1000 [ 674.038339][T23417] syzkaller1: entered promiscuous mode [ 674.064427][T23417] syzkaller1: entered allmulticast mode [ 674.551953][T23437] netlink: 'syz.3.4285': attribute type 17 has an invalid length. [ 674.596149][T23382] lo speed is unknown, defaulting to 1000 [ 674.988448][T23452] 8021q: VLANs not supported on ip6_vti0 [ 675.331490][T23467] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 675.589966][T23472] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 675.681547][T23472] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4290'. [ 675.946791][T23481] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4292'. [ 676.108211][T23489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4293'. [ 676.736247][T23505] wg1 speed is unknown, defaulting to 1000 [ 676.847024][T23507] block nbd5: server does not support multiple connections per device. [ 676.884295][T23507] block nbd5: shutting down sockets [ 677.473672][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4299'. [ 677.722163][T23538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4303'. [ 677.750545][T23538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4303'. [ 677.776640][T23538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4303'. [ 678.053890][T23505] lo speed is unknown, defaulting to 1000 [ 678.155196][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 678.163304][ C1] lec:lec_tx_timeout: lec0 [ 678.168151][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 678.431711][T23570] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 678.523856][T23570] bond9: entered promiscuous mode [ 678.537236][T23570] 8021q: adding VLAN 0 to HW filter on device bond9 [ 678.697849][T23570] bond9: (slave bridge4): making interface the new active one [ 678.716663][T23570] bridge4: entered promiscuous mode [ 678.718005][T23574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4313'. [ 678.731813][T23574] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4313'. [ 678.742737][T23574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4313'. [ 678.752565][T23570] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 678.762100][T23505] lo speed is unknown, defaulting to 1000 [ 678.771050][T23574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4313'. [ 679.214501][T23583] wg1 speed is unknown, defaulting to 1000 [ 679.317795][T23601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4318'. [ 679.344577][T20612] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 679.419308][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 679.753969][T23583] lo speed is unknown, defaulting to 1000 [ 679.940843][T23590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.557513][T23639] syzkaller0: entered promiscuous mode [ 680.589552][T23639] syzkaller0: entered allmulticast mode [ 680.601261][T23583] lo speed is unknown, defaulting to 1000 [ 680.777847][T23649] netlink: 'syz.4.4330': attribute type 3 has an invalid length. [ 680.786272][T23649] netlink: 'syz.4.4330': attribute type 3 has an invalid length. [ 680.797189][T23642] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 680.919607][T23642] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 681.758620][T23675] gretap0: entered promiscuous mode [ 682.001811][T23685] netlink: 'syz.1.4341': attribute type 1 has an invalid length. [ 682.109745][T23685] bond6: entered promiscuous mode [ 682.116016][T23685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 682.228455][T23687] netlink: 'syz.3.4340': attribute type 1 has an invalid length. [ 682.232296][T23695] syzkaller0: entered promiscuous mode [ 682.265152][T23695] syzkaller0: entered allmulticast mode [ 682.326005][T23687] bond1 (unregistering): Released all slaves [ 682.717403][T23709] syzkaller0: entered promiscuous mode [ 682.733230][T23709] syzkaller0: entered allmulticast mode [ 682.757506][T23714] __nla_validate_parse: 8 callbacks suppressed [ 682.757529][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 682.789368][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.798227][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.805064][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.812925][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.819783][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.826620][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.833413][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.840293][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.847128][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.853914][T23709] tc action pedit offset must be on 32 bit boundaries [ 682.860814][T23709] TC_ACT_REPEAT abuse ? [ 683.175289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 683.183413][ C1] lec:lec_tx_timeout: lec0 [ 683.188144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 683.361323][T23737] syzkaller0: entered promiscuous mode [ 683.392643][T23737] syzkaller0: entered allmulticast mode [ 683.428434][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4357'. [ 683.453109][T23743] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4358'. [ 683.475283][T23741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 683.761716][T23755] netlink: 'syz.1.4364': attribute type 4 has an invalid length. [ 683.858626][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4364'. [ 683.919367][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4364'. [ 684.023738][T23769] netlink: 'syz.2.4368': attribute type 6 has an invalid length. [ 684.080518][T23769] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4368'. [ 684.451114][T23312] udevd[23312]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 684.664338][T23802] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 684.696109][T23802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4373'. [ 684.716484][T23806] netlink: 'syz.1.4373': attribute type 2 has an invalid length. [ 684.738563][T23806] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 684.757741][T23806] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 684.965751][T23813] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 684.982141][T23813] bond7 (unregistering): Released all slaves [ 685.020603][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4380'. [ 685.031843][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4380'. [ 685.179359][T23821] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 685.228486][T23825] wg1 speed is unknown, defaulting to 1000 [ 685.289130][T23834] xt_bpf: check failed: parse error [ 685.551929][T23849] batman_adv: batadv0: Adding interface: dummy0 [ 685.552967][T23845] xt_hashlimit: size too large, truncated to 1048576 [ 685.575535][T23849] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.657738][T23849] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 685.718702][T23864] netlink: 'syz.3.4391': attribute type 9 has an invalid length. [ 685.736952][T23866] netlink: 'syz.3.4391': attribute type 9 has an invalid length. [ 686.169134][T23825] lo speed is unknown, defaulting to 1000 [ 686.582132][T23895] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 686.926919][T23825] lo speed is unknown, defaulting to 1000 [ 687.457024][T23922] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 687.491982][T23922] bridge5: entered allmulticast mode [ 688.131202][T23943] syzkaller1: entered promiscuous mode [ 688.150587][T23943] syzkaller1: entered allmulticast mode [ 688.319759][T23956] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 688.342366][T23956] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 688.355639][T23956] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 688.365785][T23962] __nla_validate_parse: 13 callbacks suppressed [ 688.365804][T23962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4415'. [ 688.710780][T23975] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4419'. [ 688.736823][T23977] netlink: 'syz.2.4420': attribute type 21 has an invalid length. [ 688.791430][T23977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4420'. [ 688.965124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 688.973249][ C1] lec:lec_tx_timeout: lec0 [ 688.979175][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 689.339340][T24004] bridge0: port 3(batadv1) entered blocking state [ 689.348042][T24004] bridge0: port 3(batadv1) entered disabled state [ 689.354767][T24004] batadv1: entered allmulticast mode [ 689.364333][T24004] batadv1: entered promiscuous mode [ 689.617742][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4431'. [ 689.836548][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 689.847173][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 689.868837][T24025] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4438'. [ 689.922449][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 690.448011][T24057] dvmrp6: entered allmulticast mode [ 690.468422][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 690.488231][T24061] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 [ 690.499773][T24063] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 690.536096][T24063] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 690.640971][T24070] netlink: 780 bytes leftover after parsing attributes in process `syz.3.4450'. [ 690.659954][T24070] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 691.015850][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4454'. [ 691.803325][T24122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4462'. [ 692.271188][T24144] syzkaller1: entered promiscuous mode [ 692.277199][T24144] syzkaller1: entered allmulticast mode [ 692.663899][T24167] netlink: 'syz.0.4475': attribute type 1 has an invalid length. [ 692.723203][T24167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.749683][T24172] bond6: (slave veth7): Enslaving as an active interface with a down link [ 692.814538][T24167] batman_adv: batadv0: Removing interface: dummy0 [ 692.900683][T24167] bond6: (slave dummy0): making interface the new active one [ 692.930698][T24167] dummy0: entered promiscuous mode [ 692.946526][T24167] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 692.978980][T24172] bond6: (slave dummy0): Releasing active interface [ 693.005719][T24172] dummy0 (unregistering): left promiscuous mode [ 693.364128][T24206] openvswitch: netlink: IP tunnel dst address not specified [ 693.507709][T24212] wg1 speed is unknown, defaulting to 1000 [ 693.517618][T24213] __nla_validate_parse: 8 callbacks suppressed [ 693.517632][T24213] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4488'. [ 693.995771][T24218] wg1 speed is unknown, defaulting to 1000 [ 694.005643][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 694.013703][ C1] lec:lec_tx_timeout: lec0 [ 694.018587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 694.033770][T24212] lo speed is unknown, defaulting to 1000 [ 694.179420][T24230] netlink: 'syz.3.4494': attribute type 1 has an invalid length. [ 694.210516][T24230] netlink: 728 bytes leftover after parsing attributes in process `syz.3.4494'. [ 694.238207][T24214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4490'. [ 694.622670][T24243] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 694.634625][T24243] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 694.643075][T24243] CPU: 1 UID: 0 PID: 24243 Comm: syz.4.4497 Not tainted syzkaller #0 PREEMPT(full) [ 694.652476][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.662565][T24243] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 694.668419][T24243] Code: 4b f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 c8 b6 f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da c8 b6 f8 4d 8b 1f 4c 89 f7 89 [ 694.688058][T24243] RSP: 0018:ffffc900025a70a8 EFLAGS: 00010202 [ 694.694170][T24243] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888066a39ec0 [ 694.702173][T24243] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888039d4f840 [ 694.710173][T24243] RBP: 0000000000000002 R08: ffff88808ccf9eeb R09: 1ffff1101199f3dd [ 694.718170][T24243] R10: dffffc0000000000 R11: ffffed101199f3de R12: dffffc0000000000 [ 694.726171][T24243] R13: dffffc0000000000 R14: ffff888039d4f840 R15: 0000000000000068 [ 694.734167][T24243] FS: 00007f44a13866c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 694.743123][T24243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.749742][T24243] CR2: 0000200000004680 CR3: 000000004e7e4000 CR4: 00000000003526f0 [ 694.757743][T24243] Call Trace: [ 694.761029][T24243] [ 694.763966][T24243] udp_tunnel_sock_release+0x6f/0x80 [ 694.769269][T24243] rxe_net_del+0x121/0x2e0 [ 694.773699][T24243] rxe_dellink+0x15/0x20 [ 694.777947][T24243] nldev_dellink+0x304/0x3d0 [ 694.782549][T24243] ? __pfx_nldev_dellink+0x10/0x10 [ 694.787703][T24243] ? apparmor_capable+0x126/0x170 [ 694.792737][T24243] ? bpf_lsm_capable+0x9/0x20 [ 694.797421][T24243] ? security_capable+0x7e/0x2c0 [ 694.802368][T24243] ? __pfx_nldev_dellink+0x10/0x10 [ 694.807489][T24243] rdma_nl_rcv+0x6d1/0xa10 [ 694.811917][T24243] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 694.816869][T24243] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.822070][T24243] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.827271][T24243] netlink_unicast+0x75c/0x8e0 [ 694.832048][T24243] netlink_sendmsg+0x813/0xb40 [ 694.836818][T24243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.842104][T24243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.847040][T24243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.852331][T24243] ____sys_sendmsg+0x972/0x9f0 [ 694.857095][T24243] ? __might_fault+0xaf/0x130 [ 694.861774][T24243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.867062][T24243] ? import_iovec+0x73/0xa0 [ 694.871574][T24243] ___sys_sendmsg+0x2a5/0x360 [ 694.876250][T24243] ? __lock_acquire+0x6b5/0x2cf0 [ 694.881198][T24243] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.886401][T24243] ? futex_wait+0x2a2/0x390 [ 694.890919][T24243] ? __fget_files+0x2a/0x420 [ 694.895508][T24243] ? __fget_files+0x3a0/0x420 [ 694.900190][T24243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.905131][T24243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.910594][T24243] ? rcu_is_watching+0x15/0xb0 [ 694.915362][T24243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.921428][T24243] do_syscall_64+0x15f/0xf80 [ 694.926027][T24243] ? trace_irq_disable+0x3b/0x140 [ 694.931059][T24243] ? clear_bhb_loop+0x40/0x90 [ 694.935740][T24243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.941632][T24243] RIP: 0033:0x7f44a059cdd9 [ 694.946052][T24243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.965659][T24243] RSP: 002b:00007f44a1386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.974078][T24243] RAX: ffffffffffffffda RBX: 00007f44a0816090 RCX: 00007f44a059cdd9 [ 694.982053][T24243] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000007 [ 694.990026][T24243] RBP: 00007f44a0632d69 R08: 0000000000000000 R09: 0000000000000000 [ 694.998002][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.005974][T24243] R13: 00007f44a0816128 R14: 00007f44a0816090 R15: 00007ffe574e8708 [ 695.013964][T24243] [ 695.016988][T24243] Modules linked in: [ 695.022639][T24243] ---[ end trace 0000000000000000 ]--- [ 695.065723][T24243] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 695.078216][T24243] Code: 4b f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f7 c8 b6 f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 da c8 b6 f8 4d 8b 1f 4c 89 f7 89 [ 695.098185][T24218] lo speed is unknown, defaulting to 1000 [ 695.111726][T24212] lo speed is unknown, defaulting to 1000 [ 695.131335][T24243] RSP: 0018:ffffc900025a70a8 EFLAGS: 00010202 [ 695.145200][T24243] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888066a39ec0 [ 695.177461][T24243] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888039d4f840 [ 695.204068][T24243] RBP: 0000000000000002 R08: ffff88808ccf9eeb R09: 1ffff1101199f3dd [ 695.229675][T24243] R10: dffffc0000000000 R11: ffffed101199f3de R12: dffffc0000000000 [ 695.259337][T24243] R13: dffffc0000000000 R14: ffff888039d4f840 R15: 0000000000000068 [ 695.289504][T24243] FS: 00007f44a13866c0(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 695.318204][T24243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.339388][T24243] CR2: 00007feeb0060368 CR3: 000000004e7e4000 CR4: 00000000003526f0 [ 695.368243][T24243] Kernel panic - not syncing: Fatal exception [ 695.374525][T24243] Kernel Offset: disabled [ 695.378857][T24243] Rebooting in 86400 seconds..