last executing test programs: 3m21.637646682s ago: executing program 3 (id=492): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3m20.683170206s ago: executing program 3 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000080)=""/160, &(0x7f0000000140)=0xa0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m20.514604193s ago: executing program 3 (id=506): socket(0x1e, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x5, &(0x7f0000003280)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e000100000000000000000000030000080001"], 0x1c}}, 0x0) 3m20.483278335s ago: executing program 3 (id=507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) syz_emit_ethernet(0xfa5, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf97, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf83, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 3m20.368589506s ago: executing program 3 (id=509): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e00"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004050}, 0x800) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40800, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 3m20.275880827s ago: executing program 3 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1fd, 0x840000000003, 0x4, 0xffffffffffffff7f}, 0x1, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x1, 0x2b}, 0xa, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x446000, &(0x7f0000000200)={@align=0x7, {0x4, 0x9, 0x7, 0x5}}, 0x8, 0x0, 0x0}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}}, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 3m5.069035913s ago: executing program 32 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1fd, 0x840000000003, 0x4, 0xffffffffffffff7f}, 0x1, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x1, 0x2b}, 0xa, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x446000, &(0x7f0000000200)={@align=0x7, {0x4, 0x9, 0x7, 0x5}}, 0x8, 0x0, 0x0}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}}, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 2m36.419339832s ago: executing program 4 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06101500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) socket(0x5, 0x3, 0x0) 2m36.026394518s ago: executing program 4 (id=848): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m35.700270333s ago: executing program 4 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x11000}) write(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) tee(r2, 0xffffffffffffffff, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) r9 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x80800) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0x1, 0x6, 0x401, 0xe3b6, 0x2]}, &(0x7f0000000340)=0x54) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x26, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(r10, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000380)="946f4d9d5c5f140044fe0da425cb76cb3cff03a8df68063a074246ab991aae1221bbafe017a2a21dd1d36a52", 0x2c}, {&(0x7f0000000400)="e58c85823d3aa0622b4bb295c784a0dab6b95e032f717438817321182efc7afbaecc864d412f", 0x26}, {&(0x7f0000000440)="1d53f73799d093eb796c2008b2b52cab586aef83d6aa6f6c367ee24e9dee23b24f755ec2b120a03847614a5f6a468067b0320727b15debd868a4d6b06a269bb452681efaf9a7432f63051e633a86cf56b21aecc451ab13d3549c4025ac816c868b1c8ee08647", 0x66}, {&(0x7f00000005c0)="c030c1cd30fbe710fc9fdaa21c43852ef3c6da921fe48dadad101d0139ab69dbac0842a1e4d93459651a61a947895b9c2c37f710fb219e9047d578d5552be489deb74e21e3c95fe480569c52f2ceeb2ff4161c3241b44297589252587e8a42297fc98133ffa53d2c941d295db1adf611e862538b53ffb58c681c0d0ef219c0f20decf9b135c2ab166dc9a7aa78a5782aba9e", 0x92}, {&(0x7f0000000c00)="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", 0xff8}, {&(0x7f0000001c00)="51f8edd0edad5d3f338f9f953c003a3d7c283888d97c679d6f1fd64aa26566eaabe1e2ee9a81b3d3828f8479f728493bc893393217371aeb6b57e8e302054c31697b60354c124b36f9d18e479326ed74d9add3a33c7a775411a71879e67ce0aa2ecc6d7a2427", 0x66}], 0x6, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, 0x24}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="e02f0fd4", @ANYRES16=r4, @ANYBLOB="01032757c385085641a79b394b43d60ff060b4eefd0fb81b40260000000c0001ce180e2d15c8e25001fe4d80080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 2m35.486017207s ago: executing program 4 (id=853): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r8, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00b0b3bf", @ANYRES16=r9, @ANYBLOB="08002abd7000fcdbdf25620000000600b300020000000600b300000000000600b400950f00000600b300000000000600b400a30600000600b400640f00000600b4005d080000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m34.951114457s ago: executing program 4 (id=858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@timestamping={{0x10, 0x1, 0x51, 0x6}}], 0x10}, 0x8000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000016000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002000000000000002000000000000000000000000074c689a6b19873198cf67ff2b0000000000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESHEX=r1], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x25c1, &(0x7f0000000240)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) unshare(0x26020480) (async) r6 = socket(0x1, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000470000000000000004000000850000002700000095ba9f396fde8c579b504da4463b6af68576d35ff25320bde2c6a749ea9f3f5b0c01fdffb3b7ea1ada33"], &(0x7f0000000000)='syzkaller\x00', 0x10006, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r11, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r11, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) (async) sendto$inet(r11, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="df0010000000000000000000"], 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r14, r10, 0x25, 0x0, @void}, 0x10) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r8, 0x80186e82, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x1, 0x0, 0x2, 0x4, 0x6, 0x6841, 0x5, 0x7}, {0x0, 0x0, 0x0, 0x9, 0x4, 0x6, 0x7, 0x100}], 0x2, 0x38, 0x1, 0x6}) 2m34.737436282s ago: executing program 4 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x18, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x45) socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m19.467031933s ago: executing program 33 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x18, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x45) socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 12.225328934s ago: executing program 1 (id=1892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x193f0, 0xa00}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000b00)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000000c0)="2a73edbc44dd03eefdf0943e388335", 0xf}], 0x1}}], 0x1, 0x0) 12.005266047s ago: executing program 1 (id=1895): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x118}, {&(0x7f0000000580)={0x104, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x11e, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x41}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r3}, @nested={0xdd, 0x2b, 0x0, 0x1, [@generic="931d37a21db8b5dd0ed1209ad616cf3ed72a976b2db41376412b957165bb1b8d67f8328eec488106a12c068b24ea2f009fb8c053821e0b3ca36fc15f3430501d3bd499e781923f637ab9682f971cd9560a1672463f1e2e99673b7a5f4a2f146b9489d022de19e1ebddbfc4fa09ab357519f6fab71604a6dfbe8de6b3f7f80469288e4f3a0bd727cb3a89672fd708e717484534936c545d563839613ad9efb5230a1be74ed9627d0df7013b1bc3d878ccc42df54c527f24f2600033852e42f57e56b2fd811d", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x5}]}]}, 0x104}], 0x2, 0x0, 0x0, 0x20000080}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42c00, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) 11.827013447s ago: executing program 1 (id=1898): socket$inet_smc(0x2b, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) unshare(0x400) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x638) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(0xffffffffffffffff, 0x14) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r6, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x34, 0x26, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xf}, {0xc, 0x10}, {0x7, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20008044) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x7}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 11.298447721s ago: executing program 1 (id=1906): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r3, r2, 0x0, 0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001280)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319730542a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c8", 0x74}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}, {&(0x7f0000001180)="03b28186c89e47860b9e86a2b8ed9eb784ad9021ab0caa56b4240af8681c2167cb9727670e6b536e3c5910885e670c5a8ddd6c78b78ad0c37048c54249615729545ba56ecb55c398f399c5f7ec6b6fd8ee51a0ae90991d55c86580a0e71b54ca76d99b56b7fa98e05115e9be4381d7d607b70e145eae81f8e6320e5243a777c7d558d0c32ddef8fd040ae8d273b9eb686dbdc9011337177f3471e113bb9f170ca68e0411ff48d6f514bbcfd150ca4d09d401bcba954496e16a4c341551e01ba1158fabbe3981b629c2a2fd05f73d0b6d9c72c61e31fb5d26ba39", 0xda}, {&(0x7f0000001080)="01c497bfcd14b06414b00c7980008f904227887ddbeaaf0e1a38d098f53c334d07c2ac6257c9b436d432368f7b16d443bdf0c29d", 0x34}, {&(0x7f00000010c0)="0d810753e93591f9b8c505727c7ff61147a9e07057f2833a556702b9409b88c3ecba1d8c02bd288bdf588727b4260cbff5a76fc6798f6d810b4aed8588cd35a01b675a34567725d05ef640635f4400dc61ec8cbf5e74d7c1d18abbbac1f31d3415dd4ab81f5834c9c8b09ab3afb8a2e1321cd8892a10c6cd3942a5b1cbe3", 0x7e}, {&(0x7f0000001300)="75a94ac50d6f322e770f3b3afa0173642ef6938f7eca1c0308799002d89d51a90f0579c64478356f99f1dca9bea3b902264c661fe547736fdbb357077859ed4419ff434635b1c9063ae56e339d5403439ecbd74f22c5c53bfd38fd5b6362c61061a9ecab2f637cf912d4212162bec1010771dea38418ff446b8a9835873a128a1796a5fea2a5956a12966bc58c4aa61d1d67dbb810071325440705cc6e59e392bb58478775cb49f2bfa3d4ec881923f74927bb20e464378765b231378e2abe407c700d0e", 0xc4}, {&(0x7f0000001400)="08ae02da244052e3303d1366", 0xc}, {&(0x7f0000001440)="4ada565f5c85c70f9803c8fbf813cdb131d259e922c71b80faa08d94d489e3c97d8e0bfafb0bd90dfd87a0e7", 0x2c}], 0xb, &(0x7f0000001480)}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d681dc2e93f10a000280", @ANYRES64], 0x3c}}, 0x20040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="0500000004000000000400000f00000000000000", @ANYRES32, @ANYBLOB="d6000000000000090000000000000000000000004bfb67d8df555fbe6eb4fbbe2bab43d4dc98537093", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 11.126459895s ago: executing program 1 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 10.863509682s ago: executing program 1 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0x80087601, 0x100000000010001) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000007000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c0000000000000007b8af8ff00000000b7080000090000007b8af0ff00000004bfa100000000000007010000f8ff4fa308c7d7054f8c0e81da7658b8df84ffd9eba40000000a000007040100f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000060000009500000000000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8c78}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x92}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008800}, 0x4058811) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 4.558119766s ago: executing program 6 (id=1986): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0xffffffffffffffb4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xbb}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1000800800f3d, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x44, r7, 0x221, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8}]}, 0x44}}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x24000080) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.432888014s ago: executing program 5 (id=2005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00060000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.292114673s ago: executing program 5 (id=2008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xaf, 0xc, "e0e32eae0c75e0017c8b2020de697ac628850f95ebabb54e082945d8f0308ece0f17d260073a2ff78f52c538db9743337029a1c542a6bfb1bf5941c22ee738a342d723dc711a4f88030a507d2f8c58e8d6dd15cab616dde59a383ba010b126e6c9ce422f73e6e78b12021ee00df0003fb51b692c6e4cf426953266e0fad239989b36433001504992ffee1d8a3ca80c4a11f8ae224552717573a64371dee8da1d7a3912022a1ea7d87489e7"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_DELCHAIN={0x18, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x12c}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000400000000000000000018007e310fdf438ae389110600000100000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 2.454686089s ago: executing program 5 (id=2012): getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x8000000000000000, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x18}, {&(0x7f0000001100)="b35ba3", 0x3}], 0x2}}], 0x4, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000140)={0xf, 0x80, 0xd5, 0xdb0, 0x4}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x6, 0x10}, &(0x7f0000000180)=0xc) syz_80211_join_ibss(&(0x7f0000000440)='wlan1\x00', &(0x7f0000000480)=@default_ibss_ssid, 0x6, 0x1) 1.9631736s ago: executing program 2 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}]}], {0x14}}, 0x7c}}, 0x0) 1.961682118s ago: executing program 2 (id=2022): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010023000000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000d00a600000008000d0002000000"], 0x2c}}, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x2, 0x9, 0xd5, @random="0d0728c880c3"}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x10}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f0000000080), 0x12) pselect6(0x40, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x6, 0x6, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000004}, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0xff}, {@in=@broadcast, 0x4d6, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x103, 0x1000000000000194, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xffffffffffffffff}, {0xfffffffe, 0x3f8, 0x5}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x844) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000090000002cbd7000fbdbdf2508000100020000000800010001007070b092010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24004000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.458464251s ago: executing program 5 (id=2023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xaf, 0xc, "e0e32eae0c75e0017c8b2020de697ac628850f95ebabb54e082945d8f0308ece0f17d260073a2ff78f52c538db9743337029a1c542a6bfb1bf5941c22ee738a342d723dc711a4f88030a507d2f8c58e8d6dd15cab616dde59a383ba010b126e6c9ce422f73e6e78b12021ee00df0003fb51b692c6e4cf426953266e0fad239989b36433001504992ffee1d8a3ca80c4a11f8ae224552717573a64371dee8da1d7a3912022a1ea7d87489e7"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_DELCHAIN={0x18, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x12c}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000400000000000000000018007e310fdf438ae389110600000100000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 1.411555553s ago: executing program 6 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x0, 0x0, 0x2, 0x9, 0x8, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0x5}, @call={0x85, 0x0, 0x0, 0x3e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x2, 0x6, 0x8, 0xb, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x7, 0xeb, &(0x7f00000003c0)=""/235, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x76, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x5, 0xa, 0x2}, {0x2, 0x1, 0x0, 0x2}, {0x3, 0x5, 0x10}, {0x2, 0x5, 0x8, 0x1}, {0x0, 0x2, 0x4, 0xa}, {0x0, 0x4, 0x3, 0xc}], 0x10, 0xe}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000a80)={0x2, 0x1a, "26b73a8f8b15e9f7a3d055085090cf1069d49e3bc827c564034e"}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000980)={&(0x7f0000000140)=0x3834, 0xfff, &(0x7f00000006c0)=[{}, {}, {}], &(0x7f0000000900)}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) unshare(0x20000400) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000680)={r4, 0x0, 0x25, 0x1, @void}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async, rerun: 64) accept4(r5, 0x0, 0x0, 0x800) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket(0x1d, 0x2, 0x6) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.321103733s ago: executing program 6 (id=2025): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000140)=""/26, 0x5}) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000004c0)="d7", 0x1}], 0x1}}], 0x1, 0x8002) r6 = epoll_create(0xb4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x30000015}) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1.251349914s ago: executing program 0 (id=2026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c25ffffffc3002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.197467804s ago: executing program 0 (id=2027): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "390111bb53bd3749", "55195c6e8302422a7e3430521b39888a", "193fe5dd", "106575a22f5ff125"}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x780, 0xffffffff, 0x5f8, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x6e8, 0x6e8, 0x6e8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private=0xa010100, @multicast2, 0xffffffff, 0xffffff00, 'nicvf0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6, 0x2, 0x21}, 0x0, 0x4d0, 0x530, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xb, [{0x0, 0x7, 0x5, 0x1}, {0x3, 0x3, 0x7f, 0x5}, {0x4, 0xe, 0x5, 0x80000000}, {0x4, 0x6, 0x4, 0xfff}, {0x1, 0x5, 0x3, 0x9}, {0xc3, 0x8, 0xd7, 0x5}, {0x1d, 0x7, 0x6, 0x5ab}, {0x3ff, 0x6, 0x0, 0x7}, {0x0, 0x5b, 0x8, 0x3}, {0x0, 0x0, 0x10, 0x5488}, {0x9, 0xfa, 0x3, 0x9}, {0x2, 0x2, 0x1, 0x3ff}, {0x3, 0x1, 0x9}, {0x0, 0x5, 0x7, 0x7}, {0x6, 0x1, 0xe8, 0xfffffff7}, {0xff, 0xb, 0x4, 0xe}, {0x200, 0x4, 0x4, 0x2}, {0x8, 0x3, 0x10, 0x6}, {0x8, 0xe, 0x0, 0x2}, {0x1000, 0x5, 0x1, 0x1}, {0x2, 0x1, 0xcd, 0xa0}, {0x1, 0x6, 0xff, 0x5}, {0xf2, 0xd, 0x0, 0x5}, {0x80, 0x5, 0x40, 0x5276}, {0x8, 0xd, 0x9, 0x9}, {0x95d3, 0x0, 0x8, 0x3ff}, {0x0, 0x5, 0xb3, 0x10000}, {0x4, 0x2, 0x1, 0x8}, {0x9, 0x0, 0x6, 0x5}, {0xe59, 0x6, 0x19, 0x32dd}, {0x200, 0x6, 0x2, 0x4}, {0x5, 0x9, 0x0, 0x5}, {0x3, 0x0, 0x9, 0x8000}, {0x8000, 0x4, 0xe, 0x7}, {0x5, 0x6, 0xf3, 0x327466bc}, {0xff52, 0xf8, 0x5, 0x3}, {0x1, 0x0, 0x4, 0x200}, {0xfff7, 0x5, 0x25, 0x1}, {0x10, 0x10, 0xcd, 0x200}, {0x6, 0x3, 0x9, 0x4}, {0x0, 0x6, 0x2, 0xfffff5f5}, {0xc, 0x9, 0x81, 0xbfe5}, {0xde7, 0xa9, 0x9, 0x1bf}, {0x9, 0x8, 0xff, 0x1}, {0xc8f, 0x9, 0x2}, {0xa, 0x0, 0x7b, 0x3}, {0x1, 0xf, 0x7d, 0x2}, {0xf, 0x6, 0x6}, {0x6, 0x7, 0x3, 0x3}, {0x6, 0x7, 0x9, 0x6}, {0x1, 0x0, 0x2, 0xfffff000}, {0x3ff, 0x3, 0x1, 0x80000000}, {0x4, 0x10, 0x0, 0x2}, {0x9, 0xfc, 0x9, 0x10}, {0x4c9c, 0x2, 0x2b, 0x9}, {0x0, 0x9, 0x9, 0xfff}, {0x46, 0x3, 0x9, 0x4}, {0x3, 0xb1, 0x5, 0x1}, {0x5, 0x8, 0x6, 0x6dd}, {0xfff7, 0xf3, 0x6, 0x7fff}, {0x5, 0x3e, 0x6, 0x2}, {0x0, 0x9d, 0x73, 0x1}, {0x2, 0x0, 0x0, 0x8}, {0xfff7, 0x57, 0x2, 0x10100}], {0x3}}}, @common=@unspec=@bpf0={{0x230}, {0x35, [{0x6, 0x4, 0xc0, 0xc}, {0x6, 0x5, 0x6, 0x3}, {0x1, 0x9a, 0xf, 0xde64}, {0x63f9, 0x4, 0x1, 0x6}, {0x4, 0x7, 0xe, 0x9ed}, {0x0, 0x3, 0x5, 0xfffffffd}, {0x1, 0xf, 0x5, 0x3}, {0x1, 0x91, 0x9, 0x1000}, {0x100, 0x9, 0x8, 0x3}, {0x6, 0x5, 0xb9, 0x3}, {0xf, 0x9a, 0x59, 0x1}, {0x4, 0xa, 0x9, 0x4}, {0x7, 0x1, 0xb, 0x200}, {0x5, 0x3, 0x6, 0x6}, {0x2, 0x4, 0x28, 0x5}, {0x4, 0x7, 0x0, 0x5}, {0x9, 0x0, 0x2, 0x4}, {0x7, 0x3, 0x6, 0x8}, {0x3, 0xff, 0x6, 0x7}, {0x3ff, 0x6, 0x9, 0x26}, {0xdfcc, 0x7, 0xf7}, {0x3677, 0x80, 0x4, 0xfffffff8}, {0x1, 0x3, 0x79, 0xd9}, {0x6, 0xf7, 0xf}, {0x81, 0x2, 0x8, 0x9}, {0x0, 0xf, 0x2, 0x9}, {0x800, 0x9, 0x7, 0x9}, {0xa, 0xe, 0x6, 0x80000001}, {0x5, 0x5c, 0x8, 0x40}, {0x7, 0x0, 0xe5}, {0x4277, 0x8, 0x8, 0xd}, {0x0, 0xff, 0x4, 0x40}, {0x1ff, 0x5a, 0xc, 0x27d7}, {0x5, 0xe, 0x7, 0xc}, {0x1, 0x1, 0xf6, 0xc}, {0x7, 0x9, 0x0, 0x3}, {0x9a, 0xfc, 0x4, 0xfffffffb}, {0x0, 0x5, 0x8, 0x9}, {0x7, 0x7, 0x8, 0x1000}, {0x0, 0xf7, 0xd, 0x3}, {0x9, 0xdb, 0x81, 0x2}, {0x6, 0x24, 0x9, 0x2}, {0x8001, 0x81, 0x1, 0x10000}, {0x5, 0x0, 0x1, 0x4}, {0x28f3, 0xa, 0x4}, {0xfff, 0x2, 0x4, 0xe3e}, {0x6, 0x9, 0xf, 0xe9}, {0x8, 0x3, 0x3, 0x7}, {0x1, 0x4, 0x5, 0x7}, {0xa, 0x8, 0xcd, 0x4}, {0xffff, 0x0, 0x8, 0xc}, {0x2, 0x8, 0x6, 0x5}, {0x4, 0x78, 0x0, 0x9}, {0x7, 0xb, 0x10, 0xdb}, {0x5, 0x26, 0xff, 0x2}, {0x5, 0x7f, 0x1, 0x8e}, {0x6, 0xc, 0x8, 0x40000000}, {0x2, 0x80, 0xa0, 0x7}, {0xff, 0x0, 0x0, 0x10001}, {0x2, 0x6, 0x9, 0x7ff}, {0x7f, 0x9, 0x1, 0x9}, {0xd, 0xbb, 0x18, 0x4}, {0x2, 0xb, 0xf, 0x1}, {0xf98, 0x8b, 0xde, 0x9}], {0x20000}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x4, 0x9, [0xa, 0x2e, 0x1f, 0x17, 0x33, 0x36, 0xe, 0x17, 0x25, 0x29, 0x1d, 0x24, 0x0, 0x31, 0x1f, 0x23], 0x0, 0x6}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x40], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x4, 0xd, [0x1a, 0x2f, 0x18, 0x6, 0x1a, 0x31, 0x1a, 0xa, 0x1a, 0x28, 0x3, 0x5, 0x31, 0x19, 0x17, 0x34], 0x0, 0x80000001, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x7e0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.019721222s ago: executing program 2 (id=2028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x10000009, 0x1, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000050000000000000000000000711000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 582.520856ms ago: executing program 0 (id=2029): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r8, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00b0b3bf", @ANYRES16=r9, @ANYBLOB="08002abd7000fcdbdf25620000000600b300020000000600b300000000000600b400950f00000600b300000000000600b400a30600000600b400640f00000600b4005d080000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 573.144029ms ago: executing program 2 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x1060, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x104c, 0x1, [@m_vlan={0x1048, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9d8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1060}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 552.697899ms ago: executing program 6 (id=2031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) 435.518939ms ago: executing program 2 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011140100299d710000000000080001000000000008004b0028"], 0x28}}, 0x4044190) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00v', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25040000001400028006000e004e22000008000800000000004400018008000500010000000800050002000000080005000100000008000b0073697000060002005e00000006000100000000000800090076000000060002003b0000000800040003000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x80000001) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x80000000) 431.712812ms ago: executing program 5 (id=2033): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'io'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2b, 'net'}, {0x2d, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'pids'}, {0x2d, 'freezer'}, {0x0, 'net_prio'}]}, 0x49) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'io'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2b, 'net'}, {0x2d, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'pids'}, {0x2d, 'freezer'}, {0x0, 'net_prio'}]}, 0x49) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) 354.551205ms ago: executing program 0 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f0000000080)={0x11, 0x9900, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 178.986443ms ago: executing program 2 (id=2035): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x8000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="8361"], 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000140)={0x0, 0x10, 0x4, 0x0, 0x4, 0x3, 0x0, &(0x7f0000000100)=[{0x6, 0xfe, 0x1}, {0x19, 0xfe, 0x6}, {0x1, 0x1ff}]}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040)=0xf65, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0x2010000}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 177.693775ms ago: executing program 5 (id=2036): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x2004}, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x2a80}], 0x38) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xa}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 167.36841ms ago: executing program 0 (id=2037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c251fffffff002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 95.192934ms ago: executing program 6 (id=2038): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1000) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'rlimit'}, {0x2d, 'net_cls'}, {0x2b, 'memory'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}, {0x2d, 'net'}, {0x2b, 'pids'}, {0x2d, 'net'}, {0x2d, 'cpu'}]}, 0x3c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10001, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000002c0)=0x84) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') 7.804156ms ago: executing program 6 (id=2039): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000240)={0x8, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}, {{0x2, 0x4e21, @remote}}}, 0x108) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x80, 0x2, 0xb, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000, 0x10, 0x1, 0x80000000}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0xb4, 0x24, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x3, 0x3}, {0x2, 0xfff3}, {0x4, 0x1}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0xb4, 0x24, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x3, 0x3}, {0x2, 0xfff3}, {0x4, 0x1}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) syz_emit_ethernet(0x52, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x67, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, {[@lsrr={0x83, 0x3, 0x75}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x2, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x800}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000180)=0x1f5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711082000000000006000000000000000000000000000000135a54730a6ed499db1b4609ac9b32b8c6714d25472d5b8b5b10ead5dec0b96a730536872788e1e01fc324cb8a94bf50d73aa3e5840ee088e4e9be9b712f045a13ee570efae365fa42c9b40ca6d4d90b68b6b8be9389f9fb8017c0a6d212c08df910de21256af7d4db62724866"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711082000000000006000000000000000000000000000000135a54730a6ed499db1b4609ac9b32b8c6714d25472d5b8b5b10ead5dec0b96a730536872788e1e01fc324cb8a94bf50d73aa3e5840ee088e4e9be9b712f045a13ee570efae365fa42c9b40ca6d4d90b68b6b8be9389f9fb8017c0a6d212c08df910de21256af7d4db62724866"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000001c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000001c0)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001800)="f3", 0x1}], 0x1}}], 0x1, 0x40480c0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmmsg(r4, &(0x7f0000009200)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004100)="b2", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYRESHEX=r5], 0xb4}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="11", 0x1}], 0x1, 0x0, 0x56}}], 0x3, 0x8c0) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) write$tun(r3, &(0x7f00000005c0)={@void, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@can={0xc, {{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "5cc927ee882a8f0c"}}}}}, 0x1e) (async) write$tun(r3, &(0x7f00000005c0)={@void, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@can={0xc, {{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "5cc927ee882a8f0c"}}}}}, 0x1e) 0s ago: executing program 0 (id=2040): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfda, &(0x7f0000001e00)=""/4058}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="8802000008e644f480919fd60c032a52be3cabeda75f6a0a3df67e523838d711c5c0658a4bab22de234d9435df0b30acc1d7e8d5934cd57b9d7eeb54d8eceb9882a05bfb670e709dfdc04b988377c240d2248370e1afc7b7b91922a603b1a074acc854db1f24166f1d1dfd15098f5f8939c297f48644b4a022ff59c74247c1feb927a83b66627c4590db66594d5cca2b199430b50a4e2e00e22e1967f3101f7c913b", @ANYRES16=0x0], 0x288}, 0x1, 0x0, 0x0, 0x20000040}, 0xc085) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x400c000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000d00)={0x1d, 0x0, 0x3, {0x1}, 0x1}, 0x18) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x200, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23000000d5dc000000e1000000ff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r8, &(0x7f0000000580), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r11}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r11, &(0x7f0000000840)="b89a", &(0x7f00000003c0)=@tcp6, 0x2}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x10, r0}, 0x18) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x3, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x6, '\x00', r9, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x5, 0x31}, 0x10, r10, r2, 0x6, &(0x7f0000000940)=[r11, r12, r13], &(0x7f0000000980)=[{0x5, 0x4, 0xa, 0x3}, {0x0, 0x2, 0xe, 0x7}, {0x1, 0x2, 0x7, 0xb}, {0x4, 0x1, 0x5, 0x1}, {0x3, 0x3, 0xf874, 0x5}, {0x3, 0x3, 0xd, 0x1}], 0x10, 0x6}, 0x94) kernel console output (not intermixed with test programs): mode [ 104.724997][ T6203] bond_slave_1: left promiscuous mode [ 104.758829][ T6203] gretap0: left promiscuous mode [ 104.809007][ T6209] syz_tun: entered promiscuous mode [ 104.830103][ T6211] netlink: 44 bytes leftover after parsing attributes in process `syz.2.108'. [ 105.190122][ T6207] syz_tun: left promiscuous mode [ 105.660893][ T6232] unsupported nla_type 216 [ 107.264735][ T6282] __nla_validate_parse: 3 callbacks suppressed [ 107.264755][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 107.295236][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.126'. [ 107.454708][ T6287] Bluetooth: MGMT ver 1.23 [ 107.552233][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 107.648822][ T6288] batadv0: entered promiscuous mode [ 107.663259][ T6288] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 107.786443][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 107.961078][ T6307] xt_hashlimit: size too large, truncated to 1048576 [ 108.338383][ T6324] nbd: must specify at least one socket [ 108.671895][ T6333] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 109.239626][ T6345] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 109.265111][ T6345] bond1: (slave gre1): Error -95 calling set_mac_address [ 109.739757][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.823263][ T6382] netlink: 'syz.2.147': attribute type 2 has an invalid length. [ 109.888495][ T6390] netlink: 240 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.905290][ T6390] netlink: 'syz.4.148': attribute type 9 has an invalid length. [ 109.941930][ T6390] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.983314][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.031130][ T6393] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.304231][ T6402] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.339616][ T6402] block nbd1: shutting down sockets [ 110.371069][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.153'. [ 110.417864][ T6407] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.088826][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 111.231646][ T6398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.259219][ T6398] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 111.270878][ T6437] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 111.349108][ T6398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.373573][ T6398] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 111.451973][ T6398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.473750][ T6398] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 111.549355][ T6398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.582009][ T6398] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 111.654258][ T6398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.681522][ T6398] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 112.479384][ T6477] ip6erspan0: entered allmulticast mode [ 112.567528][ T6492] __nla_validate_parse: 1 callbacks suppressed [ 112.567547][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 113.192132][ T6515] netlink: 'syz.4.174': attribute type 2 has an invalid length. [ 113.265035][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 113.302923][ T6515] xt_bpf: check failed: parse error [ 113.426426][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 113.491389][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 113.597941][ T6534] xt_hashlimit: size too large, truncated to 1048576 [ 113.642770][ T6518] veth3: entered promiscuous mode [ 113.678010][ T6518] bond1: (slave veth3): Enslaving as an active interface with an up link [ 113.727883][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.016297][ T6550] netlink: 'syz.2.181': attribute type 28 has an invalid length. [ 114.051289][ T6552] netlink: 'syz.2.181': attribute type 28 has an invalid length. [ 114.139850][ T6558] bridge_slave_0: left allmulticast mode [ 114.173230][ T6558] bridge_slave_0: left promiscuous mode [ 114.195893][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.273390][ T6558] bridge_slave_1: left allmulticast mode [ 114.292779][ T6558] bridge_slave_1: left promiscuous mode [ 114.312373][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.366145][ T6558] bond0: (slave bond_slave_0): Releasing backup interface [ 114.416836][ T6558] bond0: (slave bond_slave_1): Releasing backup interface [ 114.497759][ T6558] team0: Port device team_slave_0 removed [ 114.538591][ T6558] team0: Port device team_slave_1 removed [ 114.560289][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.586067][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.621123][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.644709][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.669358][ T6558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.962624][ T6589] syzkaller0: entered promiscuous mode [ 114.993882][ T6589] syzkaller0: entered allmulticast mode [ 115.383984][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.420539][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.472122][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 115.503767][ T6615] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 115.533304][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.622566][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.688326][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.717424][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.131400][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 116.156527][ T6638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.236105][ T6642] bridge3: entered promiscuous mode [ 116.246178][ T6648] netlink: 'syz.3.201': attribute type 16 has an invalid length. [ 116.261733][ T6642] bridge3: entered allmulticast mode [ 116.668502][ T6658] netlink: 240 bytes leftover after parsing attributes in process `syz.3.207'. [ 116.781430][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 116.860942][ T6666] lo speed is unknown, defaulting to 1000 [ 116.900697][ T6666] lo speed is unknown, defaulting to 1000 [ 116.931504][ T6666] lo speed is unknown, defaulting to 1000 [ 116.937692][ T6670] netlink: 'syz.1.210': attribute type 2 has an invalid length. [ 116.948067][ T6666] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.964713][ T6666] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.983373][ T6666] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 117.004394][ T6666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.110258][ T6666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.376785][ T6666] lo speed is unknown, defaulting to 1000 [ 117.398112][ T6666] lo speed is unknown, defaulting to 1000 [ 117.434909][ T6666] lo speed is unknown, defaulting to 1000 [ 117.468783][ T6666] lo speed is unknown, defaulting to 1000 [ 117.488536][ T6666] lo speed is unknown, defaulting to 1000 [ 118.053683][ T6711] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 118.139849][ T6709] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 118.209788][ T6720] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.223'. [ 118.260179][ T6723] netlink: 'syz.2.222': attribute type 2 has an invalid length. [ 118.277824][ T6720] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 118.514276][ T6733] netlink: 240 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.565708][ T6733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.579232][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 118.616002][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 118.654943][ T6737] netlink: 'syz.2.227': attribute type 21 has an invalid length. [ 118.682965][ T6737] netlink: 156 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.808743][ T6743] Bluetooth: MGMT ver 1.23 [ 118.901841][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 118.915833][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 118.968054][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 119.024585][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 119.207000][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.244901][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.277817][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.356723][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.315806][ T5769] IPVS: starting estimator thread 0... [ 120.436528][ T6815] IPVS: using max 31 ests per chain, 74400 per kthread [ 120.673521][ T6831] syz_tun: entered allmulticast mode [ 120.771509][ T6831] netlink: 'syz.4.252': attribute type 9 has an invalid length. [ 120.797858][ T6831] netlink: 'syz.4.252': attribute type 6 has an invalid length. [ 121.010262][ T6830] syz_tun: left allmulticast mode [ 121.471728][ T6867] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 121.545931][ T6858] netlink: 'syz.1.261': attribute type 29 has an invalid length. [ 121.825668][ T6879] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.132903][ T6892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.140299][ T6892] IPv6: NLM_F_CREATE should be set when creating new route [ 122.769244][ T6917] netlink: 'syz.1.275': attribute type 11 has an invalid length. [ 122.979714][ T6919] lo speed is unknown, defaulting to 1000 [ 123.022134][ T6924] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.224309][ T6932] sctp: [Deprecated]: syz.2.281 (pid 6932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.224309][ T6932] Use struct sctp_sack_info instead [ 123.660882][ T6948] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 123.969448][ T6919] dvmrp0: entered allmulticast mode [ 124.314175][ T64] dvmrp0: left allmulticast mode [ 124.463788][ T6946] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 124.621968][ T6981] netlink: 'syz.3.292': attribute type 12 has an invalid length. [ 124.635487][ T6981] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 124.665482][ T6981] netlink: 'syz.3.292': attribute type 7 has an invalid length. [ 124.675789][ T6981] __nla_validate_parse: 81 callbacks suppressed [ 124.675806][ T6981] netlink: 104 bytes leftover after parsing attributes in process `syz.3.292'. [ 124.791685][ T6946] team0: Port device vlan0 added [ 125.790497][ T7037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.308'. [ 125.888942][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 126.359569][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 126.372065][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 126.438649][ T29] audit: type=1804 audit(1784358997.072:3): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.311" name="/newroot/73/cgroup.controllers" dev="tmpfs" ino=389 res=1 errno=0 [ 126.526347][ T29] audit: type=1800 audit(1784358997.082:4): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.311" name="cgroup.controllers" dev="tmpfs" ino=389 res=0 errno=0 [ 126.835658][ T7063] syzkaller0: entered promiscuous mode [ 126.851437][ T7063] syzkaller0: entered allmulticast mode [ 126.873752][ T7057] 0: reclassify loop, rule prio 0, protocol 800 [ 126.914009][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 126.937130][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 126.956386][ T7057] validate_nla: 4 callbacks suppressed [ 126.956404][ T7057] netlink: 'syz.3.315': attribute type 19 has an invalid length. [ 127.009650][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 127.048732][ T7057] netlink: 'syz.3.315': attribute type 20 has an invalid length. [ 127.086650][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 127.100162][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 127.164355][ T7063] netlink: 'syz.3.315': attribute type 19 has an invalid length. [ 127.202990][ T7063] netlink: 'syz.3.315': attribute type 20 has an invalid length. [ 127.272768][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.301715][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.354842][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.414402][ T29] audit: type=1804 audit(1784358998.052:5): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.319" name="/newroot/62/cgroup.controllers" dev="tmpfs" ino=332 res=1 errno=0 [ 127.450755][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.481631][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.496002][ T29] audit: type=1800 audit(1784358998.082:6): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.319" name="cgroup.controllers" dev="tmpfs" ino=332 res=0 errno=0 [ 127.517810][ T7081] tipc: Started in network mode [ 127.531401][ T7088] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 127.546468][ T7081] tipc: Node identity ac14140f, cluster identity 4711 [ 127.604318][ T7081] tipc: New replicast peer: 255.255.255.255 [ 127.614604][ T7081] tipc: Enabled bearer , priority 10 [ 127.694850][ T7088] bond1: entered promiscuous mode [ 127.701194][ T7088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.710256][ T7081] bond1: entered allmulticast mode [ 127.840219][ T7081] bond1: (slave bridge1): making interface the new active one [ 127.879414][ T7081] bridge1: entered promiscuous mode [ 127.906584][ T7081] bridge1: entered allmulticast mode [ 127.919259][ T7081] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 128.035216][ T7106] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 128.763163][ T5715] tipc: Node number set to 2886997007 [ 128.803864][ T7138] syzkaller0: entered promiscuous mode [ 128.833454][ T7138] syzkaller0: entered allmulticast mode [ 129.071676][ T7161] tipc: Started in network mode [ 129.083064][ T7161] tipc: Node identity ac14140f, cluster identity 4711 [ 129.098980][ T7161] tipc: New replicast peer: 255.255.255.255 [ 129.108086][ T7161] tipc: Enabled bearer , priority 10 [ 129.127728][ T7162] ip6gretap0: entered promiscuous mode [ 129.973858][ T7208] pim6reg1: entered allmulticast mode [ 130.779835][ T42] tipc: Node number set to 2886997007 [ 131.123254][ T7243] __nla_validate_parse: 8 callbacks suppressed [ 131.123273][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 131.229787][ T7244] bond1: option arp_all_targets: invalid value (3) [ 131.248881][ T7244] bond1 (unregistering): Released all slaves [ 131.430232][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.585764][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.691121][ T7269] syzkaller0: entered promiscuous mode [ 131.712590][ T7269] syzkaller0: entered allmulticast mode [ 131.739378][ T7275] bridge0: port 1(vlan2) entered blocking state [ 131.746100][ T7275] bridge0: port 1(vlan2) entered disabled state [ 131.753778][ T7275] vlan2: entered allmulticast mode [ 131.765686][ T7275] dummy0: entered allmulticast mode [ 131.774937][ T7275] vlan2: entered promiscuous mode [ 131.781490][ T7275] dummy0: entered promiscuous mode [ 131.929185][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.117300][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.418252][ T7297] lo speed is unknown, defaulting to 1000 [ 132.479433][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 132.731985][ T64] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.810447][ T3338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.889751][ T3338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.907038][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948765][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.981452][ T7297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.114749][ T7311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 133.309266][ T7322] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.482439][ T7315] tipc: Enabling of bearer rejected, already enabled [ 133.626658][ T7322] lo speed is unknown, defaulting to 1000 [ 133.678996][ T7332] IPv6: addrconf: prefix option has invalid lifetime [ 133.836227][ T7335] syzkaller0: entered promiscuous mode [ 133.852494][ T7335] syzkaller0: entered allmulticast mode [ 133.946960][ T7342] Cannot find del_set index 4 as target [ 134.279634][ T7352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.450851][ T7358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.088732][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.172953][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.211859][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.269497][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.370307][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.457930][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.548842][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.704250][ T7408] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 135.712882][ T7407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.152993][ T7428] __nla_validate_parse: 9 callbacks suppressed [ 136.153013][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 136.377068][ T7439] netlink: 116 bytes leftover after parsing attributes in process `syz.1.418'. [ 136.888541][ T7459] netlink: 460 bytes leftover after parsing attributes in process `syz.1.422'. [ 136.953474][ T7459] netlink: 3744 bytes leftover after parsing attributes in process `syz.1.422'. [ 136.979270][ T7463] lo speed is unknown, defaulting to 1000 [ 136.985196][ T7459] netlink: 72 bytes leftover after parsing attributes in process `syz.1.422'. [ 137.004522][ T7459] netlink: 6158 bytes leftover after parsing attributes in process `syz.1.422'. [ 137.039165][ T7459] netlink: 2044 bytes leftover after parsing attributes in process `syz.1.422'. [ 137.054338][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.355879][ T7482] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 137.421664][ T7484] team0: Port device bridge_slave_0 added [ 137.520648][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 137.620231][ T7482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.676453][ T7489] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.741255][ T7468] ieee802154 phy1 wpan1: encryption failed: -90 [ 138.457982][ T7524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.689463][ T7529] bond2 (unregistering): Released all slaves [ 139.259619][ T7562] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 139.681174][ T7584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.452'. [ 139.824278][ T7591] netlink: 'syz.0.455': attribute type 5 has an invalid length. [ 140.185220][ T7597] xt_hashlimit: size too large, truncated to 1048576 [ 140.388859][ T7607] syzkaller0: entered promiscuous mode [ 140.408618][ T7607] syzkaller0: entered allmulticast mode [ 140.434609][ T7607] tipc: Started in network mode [ 140.442515][ T7607] tipc: Node identity 02589a19430d, cluster identity 4711 [ 140.450384][ T7607] tipc: Enabled bearer , priority 0 [ 140.528217][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.4.452'. [ 140.542147][ T7605] tipc: Resetting bearer [ 140.613205][ T7605] tipc: Disabling bearer [ 140.927857][ T7624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 141.766948][ T7660] team0: Port device bridge_slave_0 removed [ 141.806651][ T7660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.396899][ T7676] __nla_validate_parse: 1 callbacks suppressed [ 142.396921][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 142.500296][ T7676] lo speed is unknown, defaulting to 1000 [ 142.527332][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 142.850549][ T7700] x_tables: ip_tables: SYNPROXY target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD [ 143.081681][ T7714] Bluetooth: MGMT ver 1.23 [ 143.087955][ T7714] netlink: 'syz.3.487': attribute type 13 has an invalid length. [ 143.097018][ T7714] netlink: 120 bytes leftover after parsing attributes in process `syz.3.487'. [ 143.113816][ T7715] geneve0: entered allmulticast mode [ 143.223025][ T7717] netlink: 'syz.3.487': attribute type 2 has an invalid length. [ 143.276933][ T7708] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 143.300769][ T7714] syz_tun: refused to change device tx_queue_len [ 143.332479][ T7714] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 143.402529][ T7717] : entered promiscuous mode [ 143.483008][ T7706] lo speed is unknown, defaulting to 1000 [ 143.574421][ T7722] netlink: 104 bytes leftover after parsing attributes in process `syz.4.488'. [ 143.940361][ T7735] netlink: 'syz.3.492': attribute type 13 has an invalid length. [ 143.997072][ T7735] netlink: 152 bytes leftover after parsing attributes in process `syz.3.492'. [ 144.019105][ T7732] ipip0: entered promiscuous mode [ 144.086975][ T7735] syz_tun: refused to change device tx_queue_len [ 144.114778][ T7735] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.218909][ T7742] IPVS: Scheduler module ip_vs_ not found [ 144.400077][ T7753] block nbd1: Unsupported socket: should be TCP or UNIX. [ 144.510524][ T7762] netlink: 'syz.4.500': attribute type 13 has an invalid length. [ 144.518689][ T7762] netlink: 120 bytes leftover after parsing attributes in process `syz.4.500'. [ 144.529440][ T7762] syz_tun: refused to change device tx_queue_len [ 144.537027][ T7762] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.578501][ T7762] netlink: 'syz.4.500': attribute type 2 has an invalid length. [ 144.595314][ T7762] : entered promiscuous mode [ 144.651889][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'. [ 146.071655][ T7841] netlink: 'syz.4.514': attribute type 13 has an invalid length. [ 146.093464][ T7841] netlink: 120 bytes leftover after parsing attributes in process `syz.4.514'. [ 146.136272][ T7841] syz_tun: refused to change device tx_queue_len [ 146.179253][ T7841] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 146.215977][ T7845] netlink: 'syz.4.514': attribute type 2 has an invalid length. [ 146.271309][ T7850] lo: entered allmulticast mode [ 146.469363][ T7858] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.518'. [ 146.573647][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 146.644824][ T7860] syzkaller1: entered promiscuous mode [ 146.651924][ T7860] syzkaller1: entered allmulticast mode [ 146.777690][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.800765][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.908583][ T7875] netlink: 'syz.4.525': attribute type 5 has an invalid length. [ 146.951414][ T7875] geneve2: entered promiscuous mode [ 146.961184][ T7875] geneve2: entered allmulticast mode [ 147.030704][ T7807] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 51367 - 0 [ 147.061849][ T7807] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 51367 - 0 [ 147.075233][ T7878] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 147.092280][ T7807] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 51367 - 0 [ 147.122282][ T7880] netlink: 'syz.4.529': attribute type 13 has an invalid length. [ 147.139745][ T7878] geneve2: entered promiscuous mode [ 147.145622][ T7878] geneve2: entered allmulticast mode [ 147.162598][ T7812] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 51367 - 0 [ 147.198624][ T7880] syz_tun: refused to change device tx_queue_len [ 147.225570][ T7880] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 147.353587][ T7888] : entered promiscuous mode [ 147.677235][ T7904] __nla_validate_parse: 11 callbacks suppressed [ 147.677255][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 147.708618][ T7903] xt_hashlimit: size too large, truncated to 1048576 [ 147.765107][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 147.807737][ T7915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.535'. [ 147.891232][ T7919] netlink: 56 bytes leftover after parsing attributes in process `syz.2.537'. [ 147.906754][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.537'. [ 148.302133][ T7936] sctp: [Deprecated]: syz.2.543 (pid 7936) Use of int in max_burst socket option. [ 148.302133][ T7936] Use struct sctp_assoc_value instead [ 148.455192][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 148.588686][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.870586][ T7949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.881093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.904444][ T7953] syzkaller0: entered promiscuous mode [ 148.925602][ T7953] syzkaller0: entered allmulticast mode [ 149.637475][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.511717][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.676912][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.468628][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.480186][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.715672][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.847957][ T7999] xt_CT: No such helper "snmp_trap" [ 151.920029][ T8003] validate_nla: 2 callbacks suppressed [ 151.920048][ T8003] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 152.356556][ T8003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.383681][ T8009] bond2: (slave geneve2): making interface the new active one [ 152.397586][ T8009] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 152.565615][ T8016] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 152.649676][ T8017] syzkaller1: entered promiscuous mode [ 152.709239][ T8017] syzkaller1: entered allmulticast mode [ 152.747735][ T5769] net_ratelimit: 2 callbacks suppressed [ 152.747756][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.548596][ T8050] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.565846][ T8050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.572'. [ 153.578440][ T8062] IPVS: set_ctl: invalid protocol: 98 172.30.0.5:20003 [ 153.605984][ T8050] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 153.613282][ T8050] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 153.796204][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.829787][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 154.367042][ T8087] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 154.469733][ T8091] netlink: 27 bytes leftover after parsing attributes in process `syz.4.583'. [ 154.481896][ T8091] openvswitch: netlink: Missing valid actions attribute. [ 154.489253][ T8091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.586132][ T8091] block nbd1: server does not support multiple connections per device. [ 154.610498][ T8091] block nbd1: shutting down sockets [ 154.773472][ T8106] tipc: Started in network mode [ 154.788002][ T8106] tipc: Node identity 8201ac93f725, cluster identity 4711 [ 154.796427][ T8106] tipc: Enabled bearer , priority 0 [ 154.803394][ T8107] syzkaller0: entered promiscuous mode [ 154.810335][ T8107] syzkaller0: entered allmulticast mode [ 154.827113][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.871787][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.588'. [ 154.882501][ T8107] tipc: Resetting bearer [ 154.912591][ T8107] tipc: Disabling bearer [ 155.202541][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 155.330300][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 156.163306][ T8155] netlink: 'syz.1.599': attribute type 49 has an invalid length. [ 157.034381][ T8177] tipc: Started in network mode [ 157.057530][ T8177] tipc: Node identity 0a8c5a7564dd, cluster identity 4711 [ 157.091679][ T8177] tipc: Enabled bearer , priority 0 [ 157.123089][ T8177] +: renamed from syzkaller0 [ 157.158033][ T8177] tipc: Disabling bearer [ 157.206285][ T8185] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.353166][ T5282] veth0_macvtap: left promiscuous mode [ 157.671935][ T8198] netlink: 232 bytes leftover after parsing attributes in process `syz.2.605'. [ 157.713621][ T8199] syzkaller0: entered promiscuous mode [ 157.727063][ T8199] syzkaller0: entered allmulticast mode [ 157.946068][ T8205] netlink: 'syz.2.607': attribute type 13 has an invalid length. [ 157.971896][ T8205] netlink: 120 bytes leftover after parsing attributes in process `syz.2.607'. [ 157.990649][ T8205] syz_tun: refused to change device tx_queue_len [ 158.010207][ T8205] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 158.140312][ T8205] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 158.206501][ T8205] : entered promiscuous mode [ 158.334860][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 158.673376][ T42] IPVS: starting estimator thread 0... [ 158.786398][ T8239] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.837923][ T8244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.972705][ T8249] bond0: (slave ip6tnl0): refused to change device type [ 158.984221][ T8252] bond0: (slave ip6tnl0): refused to change device type [ 159.107475][ T8252] ip6erspan0: entered allmulticast mode [ 159.393335][ T8249] ip6erspan0: entered allmulticast mode [ 159.592211][ T8259] veth3: entered allmulticast mode [ 159.645138][ T8262] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 159.826742][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.067222][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 160.179213][ T8287] lo speed is unknown, defaulting to 1000 [ 160.287526][ T8290] bond3 (unregistering): Released all slaves [ 160.630999][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.642089][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.653450][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.670919][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.682840][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.722458][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.732355][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.744051][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.776532][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.787132][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.919350][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 160.965230][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 160.990224][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 161.260941][ T8327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.635'. [ 161.466047][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 161.490425][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.635'. [ 161.813723][ T8299] lo speed is unknown, defaulting to 1000 [ 161.941886][ T8344] tipc: Enabled bearer , priority 0 [ 162.109668][ T8344] syzkaller0: entered promiscuous mode [ 162.117034][ T8344] syzkaller0: entered allmulticast mode [ 162.123607][ T8344] tipc: Resetting bearer [ 162.380220][ T8341] tipc: Resetting bearer [ 162.642842][ T8372] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.645'. [ 162.663975][ T8372] openvswitch: netlink: Message has 16 unknown bytes. [ 162.829435][ T5621] Bluetooth: hci5: command tx timeout [ 164.214909][ T8341] tipc: Disabling bearer [ 164.538108][ T8392] IPv6: Can't replace route, no match found [ 164.687478][ T7824] tipc: Subscription rejected, illegal request [ 164.716902][ T8391] syzkaller0: entered promiscuous mode [ 164.730779][ T8391] syzkaller0: entered allmulticast mode [ 164.879344][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.906237][ T5621] Bluetooth: hci5: command tx timeout [ 164.907431][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.925804][ T8299] bridge_slave_0: entered allmulticast mode [ 164.933972][ T8299] bridge_slave_0: entered promiscuous mode [ 164.946980][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.954263][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.961681][ T8299] bridge_slave_1: entered allmulticast mode [ 164.970388][ T8299] bridge_slave_1: entered promiscuous mode [ 165.011232][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.025604][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.068331][ T8299] team0: Port device team_slave_0 added [ 165.078560][ T8299] team0: Port device team_slave_1 added [ 165.143512][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.153405][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.215554][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.252685][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.272010][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.304374][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.495190][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 165.652676][ T8422] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 165.750513][ T8299] hsr_slave_0: entered promiscuous mode [ 165.758467][ T8299] hsr_slave_1: entered promiscuous mode [ 165.766946][ T8299] debugfs: 'hsr0' already exists in 'hsr' [ 165.772825][ T8299] Cannot create hsr debugfs directory [ 166.017298][ T8433] netlink: 272 bytes leftover after parsing attributes in process `syz.1.657'. [ 166.239462][ T8299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.260846][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.271047][ T8299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.283921][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.294598][ T8299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.317111][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.328484][ T8299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.351613][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.510825][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.546395][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.565409][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.572659][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.596735][ T8455] bridge0: port 3(syz_tun) entered blocking state [ 166.614881][ T8455] bridge0: port 3(syz_tun) entered disabled state [ 166.629585][ T8455] syz_tun: entered allmulticast mode [ 166.639917][ T8455] syz_tun: entered promiscuous mode [ 166.647028][ T8455] bridge0: port 3(syz_tun) entered blocking state [ 166.654466][ T8455] bridge0: port 3(syz_tun) entered forwarding state [ 166.673533][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.680783][ T7812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.985559][ T5621] Bluetooth: hci5: command tx timeout [ 167.454361][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.757292][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 167.898491][ T8299] veth0_vlan: entered promiscuous mode [ 167.920751][ T8299] veth1_vlan: entered promiscuous mode [ 167.954505][ T8299] veth0_macvtap: entered promiscuous mode [ 167.970074][ T8299] veth1_macvtap: entered promiscuous mode [ 167.991108][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.006232][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.021317][ T7812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.031740][ T7812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.044417][ T7812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.054435][ T7812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.065539][ T5621] Bluetooth: hci5: command tx timeout [ 169.629505][ T8458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.784466][ T7812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.818984][ T7812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.914398][ T8517] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 169.978498][ T8517] netlink: 'syz.1.672': attribute type 2 has an invalid length. [ 169.988016][ T7828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.006029][ T7828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.105206][ T8517] : entered promiscuous mode [ 170.692075][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'. [ 170.869538][ T8549] netlink: 165 bytes leftover after parsing attributes in process `syz.2.680'. [ 170.891499][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 170.914854][ T8549] netlink: 52 bytes leftover after parsing attributes in process `syz.2.680'. [ 170.934745][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 171.303418][ T8549] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.317155][ T8554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.328200][ T8549] netlink: 128 bytes leftover after parsing attributes in process `syz.2.680'. [ 171.374878][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.681'. [ 172.035180][ T8585] tipc: Enabled bearer , priority 0 [ 172.113713][ T8582] tipc: Disabling bearer [ 172.212640][ T8594] netlink: 240 bytes leftover after parsing attributes in process `syz.5.692'. [ 172.244226][ T8594] netlink: 72 bytes leftover after parsing attributes in process `syz.5.692'. [ 173.117369][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 173.250242][ T8628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.017704][ T8625] block nbd1: server does not support multiple connections per device. [ 174.040209][ T8625] block nbd1: shutting down sockets [ 174.150197][ T8634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.177581][ T8634] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 174.206544][ T8634] bond3: (slave vti0): Error -95 calling set_mac_address [ 174.287816][ T8665] netlink: 'syz.2.705': attribute type 13 has an invalid length. [ 174.329325][ T8648] bond3: (slave dummy0): Error -99 calling set_mac_address [ 174.347185][ T8665] syz_tun: refused to change device tx_queue_len [ 174.369967][ T8665] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 174.476499][ T8636] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 174.512387][ T8636] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 174.520880][ T8665] netlink: 'syz.2.705': attribute type 2 has an invalid length. [ 174.952668][ T8676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.932735][ T8729] netlink: 'syz.2.724': attribute type 3 has an invalid length. [ 175.941509][ T8729] netlink: 'syz.2.724': attribute type 6 has an invalid length. [ 176.286608][ T8728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 176.492937][ T8735] vxcan1: tx drop: invalid sa for name 0x0002000000000000 [ 176.570439][ T8735] bond0: entered promiscuous mode [ 176.593002][ T8735] bond_slave_0: entered promiscuous mode [ 176.619168][ T8735] bond_slave_1: entered promiscuous mode [ 176.633192][ T8735] bridge1: entered promiscuous mode [ 176.689993][ T8735] bond0: left promiscuous mode [ 176.700420][ T8735] bond_slave_0: left promiscuous mode [ 176.723488][ T8735] bond_slave_1: left promiscuous mode [ 176.755881][ T8735] bridge1: left promiscuous mode [ 176.863537][ T8742] bond0: entered promiscuous mode [ 176.887859][ T8742] bond_slave_0: entered promiscuous mode [ 176.906172][ T8742] bond_slave_1: entered promiscuous mode [ 176.940967][ T8742] bridge1: entered promiscuous mode [ 176.963564][ T8742] bond0: left promiscuous mode [ 176.987367][ T8742] bond_slave_0: left promiscuous mode [ 176.998138][ T8742] bond_slave_1: left promiscuous mode [ 177.007708][ T8742] bridge1: left promiscuous mode [ 177.321079][ T8773] tipc: Enabled bearer , priority 0 [ 177.339886][ T8775] syzkaller0: entered promiscuous mode [ 177.365397][ T8775] syzkaller0: entered allmulticast mode [ 177.479077][ T8775] tipc: Resetting bearer [ 177.530817][ T8775] tipc: Disabling bearer [ 177.908550][ T5746] IPVS: starting estimator thread 0... [ 178.005431][ T8793] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.067255][ T8797] syzkaller0: entered promiscuous mode [ 178.079345][ T8797] syzkaller0: entered allmulticast mode [ 178.364581][ T8800] __nla_validate_parse: 1 callbacks suppressed [ 178.364600][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 178.914068][ T8808] netlink: 'syz.1.743': attribute type 12 has an invalid length. [ 179.367908][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 179.580820][ T8835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.752'. [ 179.594150][ T8830] syzkaller0: entered promiscuous mode [ 179.619488][ T8830] syzkaller0: entered allmulticast mode [ 179.820008][ T8841] syzkaller0: entered promiscuous mode [ 179.837441][ T8841] syzkaller0: entered allmulticast mode [ 180.477355][ T8867] netlink: 'syz.5.762': attribute type 13 has an invalid length. [ 180.518160][ T8867] netlink: 120 bytes leftover after parsing attributes in process `syz.5.762'. [ 180.534598][ T8869] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 180.552107][ T8867] syz_tun: refused to change device tx_queue_len [ 180.596918][ T8867] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 180.644933][ T8874] netlink: 'syz.5.762': attribute type 2 has an invalid length. [ 180.658703][ T8869] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 180.720030][ T8874] : entered promiscuous mode [ 180.950138][ T8885] syzkaller0: entered promiscuous mode [ 180.967719][ T8885] syzkaller0: entered allmulticast mode [ 181.340223][ T8912] syzkaller0: entered promiscuous mode [ 181.353790][ T8912] syzkaller0: entered allmulticast mode [ 181.380554][ T8913] sctp: [Deprecated]: syz.5.773 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.380554][ T8913] Use struct sctp_sack_info instead [ 181.491642][ T8912] tipc: Enabled bearer , priority 0 [ 181.536407][ T8912] tipc: Resetting bearer [ 181.618356][ T8906] tipc: Resetting bearer [ 181.692412][ T8906] tipc: Disabling bearer [ 181.786480][ T8939] netlink: 240 bytes leftover after parsing attributes in process `syz.1.780'. [ 181.821861][ T8939] netlink: 72 bytes leftover after parsing attributes in process `syz.1.780'. [ 181.936307][ T8941] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.210977][ T8955] syzkaller0: entered promiscuous mode [ 182.226824][ T8955] syzkaller0: entered allmulticast mode [ 182.430693][ T8962] netlink: 7 bytes leftover after parsing attributes in process `syz.4.789'. [ 182.875907][ T8965] bridge0: port 2(syz_tun) entered blocking state [ 182.908475][ T8965] bridge0: port 2(syz_tun) entered disabled state [ 182.930945][ T8965] syz_tun: entered allmulticast mode [ 182.949655][ T8965] syz_tun: entered promiscuous mode [ 182.982835][ T8965] bridge0: port 2(syz_tun) entered blocking state [ 182.989482][ T8965] bridge0: port 2(syz_tun) entered forwarding state [ 183.491396][ T9003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.794'. [ 183.564319][ T9009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.796'. [ 183.849769][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 184.000861][ T9033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.804'. [ 184.046097][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 184.126534][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.805'. [ 184.145118][ T9039] syzkaller0: entered promiscuous mode [ 184.185875][ T9039] syzkaller0: entered allmulticast mode [ 184.213744][ T9040] siw: device registration error -23 [ 184.361807][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 184.428803][ T9040] smbdirect: ib_dev[syz2] removed [ 184.573643][ T188] lo speed is unknown, defaulting to 1000 [ 184.589752][ T188] infiniband syz2: ib_query_port failed (-19) [ 184.947357][ T9069] netlink: 7 bytes leftover after parsing attributes in process `syz.4.813'. [ 185.033135][ T9072] netlink: 'syz.0.812': attribute type 4 has an invalid length. [ 185.264961][ T9085] erspan0: entered promiscuous mode [ 185.290593][ T9085] erspan0: entered allmulticast mode [ 185.466201][ T9083] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 186.745889][ T9130] netlink: 240 bytes leftover after parsing attributes in process `syz.1.824'. [ 186.779472][ T9130] netlink: 72 bytes leftover after parsing attributes in process `syz.1.824'. [ 187.051951][ T9138] syzkaller0: refused to change device tx_queue_len [ 187.146840][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.244262][ T9147] bond4: Unable to set down delay as MII monitoring is disabled [ 187.257335][ T9147] bond4 (unregistering): Released all slaves [ 188.519172][ T9186] bridge0: port 3(syz_tun) entered disabled state [ 188.538850][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.546794][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.659656][ T9197] __nla_validate_parse: 2 callbacks suppressed [ 188.659676][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 188.709505][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.722833][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.860693][ T7811] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.886287][ T7811] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.959917][ T7811] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.000586][ T7811] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.114092][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 189.145052][ T9212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.152412][ T9212] IPv6: NLM_F_CREATE should be set when creating new route [ 189.501092][ T9232] netlink: 9 bytes leftover after parsing attributes in process `syz.5.846'. [ 189.529514][ T9232] gretap0: entered promiscuous mode [ 189.601127][ T9240] netlink: 5 bytes leftover after parsing attributes in process `syz.5.846'. [ 189.618879][ T9240] 0{X: renamed from gretap0 [ 189.651630][ T9240] 0{X: left promiscuous mode [ 189.671546][ T9240] 0{X: entered allmulticast mode [ 189.712349][ T9240] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 189.859719][ T9251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.851'. [ 190.173339][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 190.209496][ T9263] erspan0: entered promiscuous mode [ 190.237796][ T9265] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 190.257999][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 190.396663][ T9268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.856'. [ 190.819449][ T9280] bond3 (unregistering): Released all slaves [ 190.853431][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 190.971473][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 191.089439][ T9294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.222308][ T9301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.262730][ T9301] bond4: (slave bond5): Enslaving as an active interface with an up link [ 191.387301][ T9302] bond4 (unregistering): (slave bond5): Releasing backup interface [ 191.410383][ T9302] bond4 (unregistering): Released all slaves [ 191.644478][ T9330] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 191.698821][ T9330] nbd: must specify a size in bytes for the device [ 192.092607][ T9341] xt_CT: No such helper "syz0" [ 192.284646][ T9359] tipc: Failed to remove unknown binding: 66,1,1/0:481687140/481687142 [ 193.452297][ T9392] raw_sendmsg: syz.5.887 forgot to set AF_INET. Fix it! [ 193.476213][ T9387] syzkaller0: entered promiscuous mode [ 193.485382][ T9387] syzkaller0: entered allmulticast mode [ 193.501045][ T9388] tipc: Enabled bearer , priority 0 [ 193.692623][ T9385] tipc: Resetting bearer [ 193.933532][ T9401] openvswitch: netlink: Message has 16 unknown bytes. [ 193.944234][ T9401] __nla_validate_parse: 3 callbacks suppressed [ 193.944253][ T9401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.891'. [ 194.001466][ T9404] IPv6: addrconf: prefix option has invalid lifetime [ 194.360819][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.527917][ T9420] netlink: 'syz.5.896': attribute type 1 has an invalid length. [ 195.900230][ T9385] tipc: Disabling bearer [ 195.927772][ T9420] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 196.048897][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 196.145191][ T9429] netlink: 84 bytes leftover after parsing attributes in process `syz.2.898'. [ 196.170237][ T9432] netlink: 84 bytes leftover after parsing attributes in process `syz.2.898'. [ 196.190066][ T9429] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 196.243151][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.5.900'. [ 196.512138][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 196.557525][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 196.693783][ T9457] netlink: 56 bytes leftover after parsing attributes in process `syz.5.908'. [ 196.729102][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 197.116264][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 197.565712][ T9486] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 197.581131][ T9486] bridge3: left allmulticast mode [ 197.769263][ T9490] netlink: 'syz.5.915': attribute type 33 has an invalid length. [ 198.114656][ T9499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.150009][ T9501] netlink: 'syz.5.919': attribute type 1 has an invalid length. [ 198.202389][ T9501] veth3: entered allmulticast mode [ 198.211911][ T9501] bond1: (slave veth3): Enslaving as an active interface with a down link [ 198.230970][ T9501] bond1: (slave veth0_to_bond): making interface the new active one [ 198.240513][ T9501] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 198.479639][ T9507] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 198.519562][ T9511] netlink: 'syz.5.923': attribute type 5 has an invalid length. [ 198.537892][ T9507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.545231][ T9514] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 198.559200][ T9514] bond3: entered allmulticast mode [ 198.720787][ T9520] ip6gre1: entered promiscuous mode [ 198.734342][ T9520] ip6gre1: entered allmulticast mode [ 198.841358][ T9532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.116797][ T9545] __nla_validate_parse: 5 callbacks suppressed [ 199.116818][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 199.164110][ T9546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.183701][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 199.470307][ T9569] veth0: entered promiscuous mode [ 199.545068][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 199.735913][ T9572] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.819093][ T9569] bond0: (slave bond_slave_1): Releasing backup interface [ 199.828186][ T9579] FAULT_INJECTION: forcing a failure. [ 199.828186][ T9579] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.874160][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.5.932 Not tainted syzkaller #0 PREEMPT(full) [ 199.874190][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 199.874211][ T9579] Call Trace: [ 199.874220][ T9579] [ 199.874229][ T9579] dump_stack_lvl+0xe8/0x150 [ 199.874278][ T9579] should_fail_ex+0x40c/0x560 [ 199.874316][ T9579] _copy_from_user+0x2d/0xb0 [ 199.874349][ T9579] __sys_bpf+0x2e7/0xd90 [ 199.874388][ T9579] ? __pfx___sys_bpf+0x10/0x10 [ 199.874429][ T9579] ? __fget_files+0x2a/0x420 [ 199.874478][ T9579] ? ksys_write+0x242/0x270 [ 199.874513][ T9579] ? __pfx_ksys_write+0x10/0x10 [ 199.874552][ T9579] __x64_sys_bpf+0xba/0xd0 [ 199.874578][ T9579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.874602][ T9579] do_syscall_64+0x174/0x580 [ 199.874634][ T9579] ? trace_irq_disable+0x3b/0x140 [ 199.874661][ T9579] ? clear_bhb_loop+0x40/0x90 [ 199.874688][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.874710][ T9579] RIP: 0033:0x7f317a19de99 [ 199.874748][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.874766][ T9579] RSP: 002b:00007f317b123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.874793][ T9579] RAX: ffffffffffffffda RBX: 00007f317a425fa0 RCX: 00007f317a19de99 [ 199.874808][ T9579] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 199.874822][ T9579] RBP: 00007f317b123090 R08: 0000000000000000 R09: 0000000000000000 [ 199.874835][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.874847][ T9579] R13: 00007f317a426038 R14: 00007f317a425fa0 R15: 00007ffdfc624288 [ 199.874881][ T9579] [ 200.145065][ T9568] veth0: left promiscuous mode [ 200.382014][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 200.410677][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 200.679689][ T9603] pim6reg1: entered allmulticast mode [ 200.766443][ T9608] syzkaller0: entered promiscuous mode [ 200.769314][ T9609] FAULT_INJECTION: forcing a failure. [ 200.769314][ T9609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.781034][ T9608] syzkaller0: entered allmulticast mode [ 200.789848][ T9609] CPU: 1 UID: 0 PID: 9609 Comm: syz.2.942 Not tainted syzkaller #0 PREEMPT(full) [ 200.789921][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 200.789960][ T9609] Call Trace: [ 200.789981][ T9609] [ 200.790009][ T9609] dump_stack_lvl+0xe8/0x150 [ 200.790107][ T9609] should_fail_ex+0x40c/0x560 [ 200.790366][ T9609] _copy_from_user+0x2d/0xb0 [ 200.790469][ T9609] ___sys_sendmsg+0x1c6/0x360 [ 200.790661][ T9609] ? __lock_acquire+0x683/0x2cf0 [ 200.790717][ T9609] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.790788][ T9609] ? __fget_files+0x2a/0x420 [ 200.790815][ T9609] ? __fget_files+0x3a2/0x420 [ 200.790853][ T9609] __x64_sys_sendmsg+0x1b1/0x290 [ 200.790888][ T9609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.790941][ T9609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.790966][ T9609] do_syscall_64+0x174/0x580 [ 200.790997][ T9609] ? trace_irq_disable+0x3b/0x140 [ 200.791025][ T9609] ? clear_bhb_loop+0x40/0x90 [ 200.791052][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.791074][ T9609] RIP: 0033:0x7f372ab9de99 [ 200.791094][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.791112][ T9609] RSP: 002b:00007f372b9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.791134][ T9609] RAX: ffffffffffffffda RBX: 00007f372ae25fa0 RCX: 00007f372ab9de99 [ 200.791190][ T9609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.791210][ T9609] RBP: 00007f372b9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.791255][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.791287][ T9609] R13: 00007f372ae26038 R14: 00007f372ae25fa0 R15: 00007fffe5912b38 [ 200.791409][ T9609] [ 200.988828][ T9606] netlink: 'syz.5.940': attribute type 13 has an invalid length. [ 201.021303][ T9606] netlink: 'syz.5.940': attribute type 16 has an invalid length. [ 201.033993][ T9606] netlink: 120 bytes leftover after parsing attributes in process `syz.5.940'. [ 201.044369][ T9606] syz_tun: refused to change device tx_queue_len [ 201.051370][ T9606] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 201.097018][ T9606] netlink: 'syz.5.940': attribute type 2 has an invalid length. [ 201.183429][ T9617] syzkaller1: entered promiscuous mode [ 201.195474][ T9617] syzkaller1: entered allmulticast mode [ 201.280865][ T9619] xt_l2tp: missing protocol rule (udp|l2tpip) [ 201.426238][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.435142][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.452002][ T9622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.475737][ T9624] batman_adv: batadv0: Adding interface: gretap1 [ 201.482341][ T9624] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.508530][ T9624] batman_adv: batadv0: Interface activated: gretap1 [ 201.521888][ T9622] netlink: 766 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.913938][ T9635] netlink: 'syz.0.950': attribute type 3 has an invalid length. [ 202.621050][ T9673] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 202.901098][ T9691] tipc: Enabled bearer , priority 0 [ 202.932851][ T9690] tipc: Disabling bearer [ 204.138620][ T9728] __nla_validate_parse: 10 callbacks suppressed [ 204.138641][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.977'. [ 204.341874][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 204.578307][ T9749] FAULT_INJECTION: forcing a failure. [ 204.578307][ T9749] name failslab, interval 1, probability 0, space 0, times 1 [ 204.601012][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.5.985 Not tainted syzkaller #0 PREEMPT(full) [ 204.601047][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 204.601061][ T9749] Call Trace: [ 204.601070][ T9749] [ 204.601080][ T9749] dump_stack_lvl+0xe8/0x150 [ 204.601122][ T9749] should_fail_ex+0x40c/0x560 [ 204.601157][ T9749] should_failslab+0xa8/0x100 [ 204.601195][ T9749] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 204.601225][ T9749] ? skb_clone+0x212/0x3a0 [ 204.601248][ T9749] ? skb_clone+0x212/0x3a0 [ 204.601279][ T9749] skb_clone+0x212/0x3a0 [ 204.601306][ T9749] __netlink_deliver_tap+0x413/0x860 [ 204.601343][ T9749] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.601368][ T9749] netlink_deliver_tap+0x19c/0x1b0 [ 204.601394][ T9749] netlink_unicast+0x77f/0x940 [ 204.601444][ T9749] netlink_sendmsg+0x813/0xb40 [ 204.601484][ T9749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.601515][ T9749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.601547][ T9749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.601571][ T9749] sock_sendmsg_nosec+0x13a/0x180 [ 204.601604][ T9749] ____sys_sendmsg+0x54e/0x850 [ 204.601649][ T9749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.601699][ T9749] ? import_iovec+0x73/0xa0 [ 204.601739][ T9749] ___sys_sendmsg+0x2a5/0x360 [ 204.601775][ T9749] ? __lock_acquire+0x683/0x2cf0 [ 204.601825][ T9749] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.601909][ T9749] ? __fget_files+0x2a/0x420 [ 204.601940][ T9749] ? __fget_files+0x3a2/0x420 [ 204.601985][ T9749] __x64_sys_sendmsg+0x1b1/0x290 [ 204.602028][ T9749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.602089][ T9749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.602117][ T9749] do_syscall_64+0x174/0x580 [ 204.602152][ T9749] ? trace_irq_disable+0x3b/0x140 [ 204.602182][ T9749] ? clear_bhb_loop+0x40/0x90 [ 204.602213][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.602238][ T9749] RIP: 0033:0x7f317a19de99 [ 204.602261][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.602280][ T9749] RSP: 002b:00007f317b123028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.602306][ T9749] RAX: ffffffffffffffda RBX: 00007f317a425fa0 RCX: 00007f317a19de99 [ 204.602323][ T9749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.602338][ T9749] RBP: 00007f317b123090 R08: 0000000000000000 R09: 0000000000000000 [ 204.602352][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.602366][ T9749] R13: 00007f317a426038 R14: 00007f317a425fa0 R15: 00007ffdfc624288 [ 204.602406][ T9749] [ 204.950202][ T9751] netlink: 92 bytes leftover after parsing attributes in process `syz.0.986'. [ 205.136812][ T9755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.988'. [ 205.229296][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 205.744227][ T9794] FAULT_INJECTION: forcing a failure. [ 205.744227][ T9794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.758076][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.2.998 Not tainted syzkaller #0 PREEMPT(full) [ 205.758105][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 205.758117][ T9794] Call Trace: [ 205.758125][ T9794] [ 205.758134][ T9794] dump_stack_lvl+0xe8/0x150 [ 205.758172][ T9794] should_fail_ex+0x40c/0x560 [ 205.758201][ T9794] _copy_to_user+0x31/0xb0 [ 205.758235][ T9794] simple_read_from_buffer+0xe1/0x170 [ 205.758268][ T9794] proc_fail_nth_read+0x1bb/0x230 [ 205.758310][ T9794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.758343][ T9794] ? rw_verify_area+0x24a/0x4c0 [ 205.758376][ T9794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.758404][ T9794] vfs_read+0x213/0xa80 [ 205.758440][ T9794] ? __pfx___mutex_lock+0x10/0x10 [ 205.758473][ T9794] ? __pfx_vfs_read+0x10/0x10 [ 205.758507][ T9794] ? __fget_files+0x2a/0x420 [ 205.758539][ T9794] ? __fget_files+0x3a2/0x420 [ 205.758565][ T9794] ? __fget_files+0x2a/0x420 [ 205.758602][ T9794] ksys_read+0x150/0x270 [ 205.758636][ T9794] ? __pfx_ksys_read+0x10/0x10 [ 205.758676][ T9794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.758699][ T9794] do_syscall_64+0x174/0x580 [ 205.758729][ T9794] ? trace_irq_disable+0x3b/0x140 [ 205.758756][ T9794] ? clear_bhb_loop+0x40/0x90 [ 205.758782][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.758804][ T9794] RIP: 0033:0x7f372ab5e6ce [ 205.758824][ T9794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.758840][ T9794] RSP: 002b:00007f372b9b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.758861][ T9794] RAX: ffffffffffffffda RBX: 00007f372b9b66c0 RCX: 00007f372ab5e6ce [ 205.758880][ T9794] RDX: 000000000000000f RSI: 00007f372b9b60a0 RDI: 0000000000000004 [ 205.758892][ T9794] RBP: 00007f372b9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.758905][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.758917][ T9794] R13: 00007f372ae26038 R14: 00007f372ae25fa0 R15: 00007fffe5912b38 [ 205.758950][ T9794] [ 206.203055][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.220681][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.231463][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.244322][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.252241][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.334442][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 206.457438][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 206.636904][ T9820] netlink: 'syz.2.1005': attribute type 13 has an invalid length. [ 206.660008][ T9820] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1005'. [ 206.701193][ T9820] syz_tun: refused to change device tx_queue_len [ 206.726620][ T9820] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 207.117734][ T9838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.480050][ T9853] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 207.643703][ T9858] syzkaller0: entered promiscuous mode [ 207.656605][ T9858] syzkaller0: entered allmulticast mode [ 208.029604][ T9867] netlink: 'syz.0.1019': attribute type 13 has an invalid length. [ 208.074812][ T9867] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1019'. [ 208.136810][ T9869] netlink: 'syz.0.1019': attribute type 2 has an invalid length. [ 208.224628][ T9867] syz_tun: refused to change device tx_queue_len [ 208.237919][ T9867] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 208.345148][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 208.355587][ T5621] Bluetooth: hci6: command tx timeout [ 208.445042][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.452434][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.461515][ T9804] bridge_slave_0: entered allmulticast mode [ 208.480776][ T9804] bridge_slave_0: entered promiscuous mode [ 208.540268][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.547927][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.562305][ T9804] bridge_slave_1: entered allmulticast mode [ 208.570787][ T9804] bridge_slave_1: entered promiscuous mode [ 208.675211][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.712585][ T9893] pimreg: entered allmulticast mode [ 208.744814][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.795914][ T9901] bond4: entered promiscuous mode [ 208.801709][ T9901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.981155][ T9892] pimreg: left allmulticast mode [ 209.038916][ T9804] team0: Port device team_slave_0 added [ 209.089223][ T9804] team0: Port device team_slave_1 added [ 209.185866][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.204244][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.255282][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.268898][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.276546][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.331478][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.502349][ T9926] __nla_validate_parse: 3 callbacks suppressed [ 209.502370][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 209.744666][ T9933] netlink: 'syz.1.1037': attribute type 11 has an invalid length. [ 209.765942][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 209.767804][ T9933] netlink: 'syz.1.1037': attribute type 4 has an invalid length. [ 209.789490][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 209.804299][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 209.816837][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1037'. [ 209.861633][ T9937] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1055130600/1055130602 [ 209.872859][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 209.893883][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 209.911239][ T9937] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1055130600/1055130601 [ 209.947324][ T9937] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1055130600/1055130602 [ 210.019101][ T9937] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1055130600/1055130601 [ 210.040727][ T9804] hsr_slave_0: entered promiscuous mode [ 210.072060][ T9804] hsr_slave_1: entered promiscuous mode [ 210.096535][ T9804] debugfs: 'hsr0' already exists in 'hsr' [ 210.115137][ T9804] Cannot create hsr debugfs directory [ 210.246066][ T9951] netlink: 'syz.1.1040': attribute type 15 has an invalid length. [ 210.284544][ T9951] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1040'. [ 210.376688][ T9951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1040'. [ 210.427543][ T5621] Bluetooth: hci6: command tx timeout [ 210.886445][ T9967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1046'. [ 211.059676][ T9804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.099255][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.114084][ T9804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.149786][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.197715][ T9804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.223649][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.280473][ T9804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.327321][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.709342][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.744929][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.764406][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.771663][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.814568][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.821954][ T7809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.505778][ T5621] Bluetooth: hci6: command tx timeout [ 212.712067][T10035] netlink: 'syz.2.1066': attribute type 2 has an invalid length. [ 212.727550][T10045] netlink: 'syz.0.1067': attribute type 12 has an invalid length. [ 212.836809][T10045] macsec0: entered promiscuous mode [ 212.954328][T10045] veth1_macvtap: left promiscuous mode [ 212.991374][T10045] macsec0 (unregistering): left promiscuous mode [ 213.269294][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.423631][T10071] netlink: 'syz.1.1076': attribute type 13 has an invalid length. [ 213.451087][T10071] syz_tun: refused to change device tx_queue_len [ 213.458652][T10071] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.667211][T10078] netlink: 'syz.0.1078': attribute type 2 has an invalid length. [ 213.685527][T10078] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 213.713146][T10078] nbd: illegal input index -120127480 [ 213.995045][ T9804] veth0_vlan: entered promiscuous mode [ 214.021694][ T9804] veth1_vlan: entered promiscuous mode [ 214.149690][T10067] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 214.166497][T10067] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 214.209661][ T9804] veth0_macvtap: entered promiscuous mode [ 214.243928][ T9804] veth1_macvtap: entered promiscuous mode [ 214.276460][T10105] xt_hashlimit: size too large, truncated to 1048576 [ 214.298122][T10104] xt_hashlimit: size too large, truncated to 1048576 [ 214.309636][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.346337][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.387443][ T7805] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.422222][ T7805] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.462112][ T7805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.490520][ T7805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.114004][T10115] __nla_validate_parse: 14 callbacks suppressed [ 215.114024][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'. [ 215.383045][T10129] dummy0: entered promiscuous mode [ 215.570517][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 215.640441][T10130] dummy0 (unregistering): left promiscuous mode [ 215.671394][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 215.704204][ T7820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.735815][ T7820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.773124][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1093'. [ 215.857680][T10137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.897874][T10139] bond6: (slave veth5): Enslaving as an active interface with an up link [ 216.016876][ T7811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.027846][ T7811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.134944][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 216.155579][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 216.175126][T10161] netlink: 'syz.2.1100': attribute type 12 has an invalid length. [ 216.188019][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1099'. [ 216.263034][ T7805] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.292257][ T7805] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.329395][ T7805] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.352260][ T7805] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.475651][T10168] syzkaller0: entered promiscuous mode [ 216.497868][T10168] syzkaller0: entered allmulticast mode [ 216.510400][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 216.599148][T10176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1103'. [ 216.912698][T10159] syz.1.1099 (10159) used greatest stack depth: 18312 bytes left [ 217.217513][T10197] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1109'. [ 218.753919][T10221] netlink: 'syz.5.1117': attribute type 11 has an invalid length. [ 218.874427][T10243] netlink: 'syz.2.1122': attribute type 26 has an invalid length. [ 218.994723][T10241] IPVS: persistence engine module ip_vs_pe_ not found [ 219.413572][T10259] lo speed is unknown, defaulting to 1000 [ 219.425125][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 219.450391][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 219.458947][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 219.584945][T10259] lo speed is unknown, defaulting to 1000 [ 219.621025][T10269] syzkaller1: entered promiscuous mode [ 219.637736][T10269] syzkaller1: entered allmulticast mode [ 219.663322][T10259] lo speed is unknown, defaulting to 1000 [ 219.710337][T10259] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 219.751538][T10259] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 219.801721][T10259] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 219.847474][T10276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.866551][T10259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 219.993518][T10259] lo speed is unknown, defaulting to 1000 [ 220.028831][T10259] lo speed is unknown, defaulting to 1000 [ 220.069277][T10259] lo speed is unknown, defaulting to 1000 [ 220.146544][T10259] lo speed is unknown, defaulting to 1000 [ 220.164947][T10259] lo speed is unknown, defaulting to 1000 [ 220.187655][T10282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.201740][T10259] lo speed is unknown, defaulting to 1000 [ 220.227281][T10259] lo speed is unknown, defaulting to 1000 [ 220.306819][T10287] __nla_validate_parse: 6 callbacks suppressed [ 220.306838][T10287] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1137'. [ 220.362515][T10265] infiniband syz0: set active [ 220.380823][T10265] infiniband syz0: added xfrm0 [ 220.390437][ T5620] xfrm0 speed is unknown, defaulting to 1000 [ 220.456534][T10265] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 220.505050][T10265] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 220.527326][T10265] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 220.603232][T10265] RDS/IB: syz0: added [ 220.620364][T10265] smc: adding ib device syz0 with port count 1 [ 220.639377][T10265] smc: ib device syz0 port 1 has no pnetid [ 220.657822][ T5746] xfrm0 speed is unknown, defaulting to 1000 [ 220.701178][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 220.733726][T10302] IPVS: set_ctl: invalid protocol: 226 172.20.20.54:20001 [ 220.766687][T10300] IPVS: set_ctl: invalid protocol: 226 172.20.20.54:20001 [ 220.834369][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 220.862229][T10307] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1145'. [ 221.065932][T10317] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1147'. [ 221.529467][T10337] syz_tun: left allmulticast mode [ 221.535142][T10337] syz_tun: left promiscuous mode [ 221.549868][T10337] bridge0: port 3(syz_tun) entered disabled state [ 221.566793][T10337] bridge_slave_0: left allmulticast mode [ 221.588736][T10337] bridge_slave_0: left promiscuous mode [ 221.600078][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.644350][T10337] bridge_slave_1: left allmulticast mode [ 221.651105][T10337] bridge_slave_1: left promiscuous mode [ 221.658297][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.677157][T10337] bond1: (slave veth0_to_bond): Releasing backup interface [ 221.690810][T10337] bond0: (slave bond_slave_0): Releasing backup interface [ 221.702370][T10337] team0: Port device team_slave_0 removed [ 221.726686][T10337] team0: Port device team_slave_1 removed [ 221.734273][T10337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.743414][T10337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.753085][T10337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.774369][T10341] team0: Port device xfrm0 added [ 221.784419][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 221.832406][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 222.010987][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 222.572953][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 222.619103][T10384] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.734931][T10387] bridge_slave_0: left allmulticast mode [ 222.755597][T10387] bridge_slave_0: left promiscuous mode [ 222.768064][T10389] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 222.773314][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.016681][T10387] bridge_slave_1: left allmulticast mode [ 223.024874][T10387] bridge_slave_1: left promiscuous mode [ 223.034705][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.045172][T10394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1169'. [ 223.108653][T10387] bond0: (slave bond_slave_0): Releasing backup interface [ 223.151368][T10387] bond0: (slave bond_slave_1): Releasing backup interface [ 223.201507][T10387] team0: Port device team_slave_0 removed [ 223.271952][T10387] team0: Port device team_slave_1 removed [ 223.290487][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.302437][T10387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.314026][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.321998][T10387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.332350][T10387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.418453][T10393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.454411][T10393] bond4: (slave bond5): making interface the new active one [ 223.482268][T10393] bond4: (slave bond5): Enslaving as an active interface with an up link [ 223.502687][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.576438][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.605445][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 223.644616][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 223.685192][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 223.724031][T10406] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1172'. [ 223.744106][T10404] erspan0: entered promiscuous mode [ 224.089411][T10422] geneve0: entered allmulticast mode [ 224.460210][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 224.460243][T10430] lo speed is unknown, defaulting to 1000 [ 224.925997][T10442] syzkaller1: entered promiscuous mode [ 224.946461][T10442] syzkaller1: entered allmulticast mode [ 225.114852][T10430] xfrm0 speed is unknown, defaulting to 1000 [ 225.602624][T10466] sctp: [Deprecated]: syz.1.1189 (pid 10466) Use of int in max_burst socket option. [ 225.602624][T10466] Use struct sctp_assoc_value instead [ 225.646198][T10466] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 225.792065][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 226.102158][T10483] syzkaller0: entered promiscuous mode [ 226.113785][T10483] syzkaller0: entered allmulticast mode [ 226.220159][T10470] __nla_validate_parse: 7 callbacks suppressed [ 226.220179][T10470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1191'. [ 226.359765][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 226.474681][T10265] xfrm0 speed is unknown, defaulting to 1000 [ 226.744909][T10496] trusted_key: syz.2.1197 sent an empty control message without MSG_MORE. [ 226.937210][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 226.949500][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 227.031167][T10507] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1202'. [ 228.012665][T10540] netlink: 'syz.0.1208': attribute type 8 has an invalid length. [ 228.058727][T10540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1208'. [ 228.075275][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1210'. [ 228.102445][T10540] openvswitch: netlink: Flow key attr not present in new flow. [ 228.706931][T10563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1218'. [ 228.939835][T10574] syzkaller0: entered promiscuous mode [ 228.953401][T10574] syzkaller0: entered allmulticast mode [ 228.980637][T10579] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1220'. [ 229.149480][ T5621] block nbd1: Receive control failed (result -32) [ 229.158193][ T5630] block nbd1: Receive control failed (result -32) [ 229.224549][T10582] ip6gretap0: left promiscuous mode [ 229.263708][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 229.303490][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.312718][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.321506][T10582] batadv0: left promiscuous mode [ 229.352138][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.467171][T10582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.497679][T10582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.561101][T10582] veth1_vlan: left promiscuous mode [ 229.580625][T10582] veth0_vlan: left promiscuous mode [ 229.588095][T10582] veth0_vlan: entered promiscuous mode [ 229.596853][T10582] veth1_vlan: entered promiscuous mode [ 229.610499][T10582] veth1_macvtap: left promiscuous mode [ 229.617797][T10582] veth0_macvtap: entered promiscuous mode [ 229.625085][T10582] veth1_macvtap: entered promiscuous mode [ 229.639663][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.648676][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.674640][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.716781][T10582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.741247][T10582] batadv0: entered promiscuous mode [ 229.754926][T10582] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 229.762438][T10599] netlink: 'syz.6.1230': attribute type 29 has an invalid length. [ 229.808986][T10582] ip6gretap0: entered promiscuous mode [ 229.818805][T10582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.830077][T10582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.851536][T10582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.865273][T10582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.075982][ T1033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.196737][T10599] bond1: option lacp_active: invalid value (98) [ 230.243143][T10599] bond1 (unregistering): Released all slaves [ 230.372473][ T7811] bond0: (slave bridge1): link status definitely down, disabling slave [ 230.413921][ T7811] bond0: now running without any active interface! [ 230.508967][ T1033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.543086][ T1033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.583451][ T1033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.009861][T10633] syzkaller0: entered promiscuous mode [ 231.026230][T10633] syzkaller0: entered allmulticast mode [ 231.034627][T10650] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 231.161279][T10650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.308488][T10655] macvlan2: entered promiscuous mode [ 233.314083][T10655] macvlan2: entered allmulticast mode [ 233.320785][T10655] bond2: entered allmulticast mode [ 233.327014][T10655] bond2: entered promiscuous mode [ 233.332818][T10655] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.344187][T10655] team0: Port device macvlan2 added [ 233.385926][T10650] bond2: (slave ip6gretap1): making interface the new active one [ 233.414625][T10650] ip6gretap1: entered promiscuous mode [ 233.433269][T10650] ip6gretap1: entered allmulticast mode [ 233.458635][T10650] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 233.851532][T10695] syzkaller0: entered promiscuous mode [ 233.869005][T10700] xt_connbytes: Forcing CT accounting to be enabled [ 233.877993][T10695] syzkaller0: entered allmulticast mode [ 233.906004][T10697] syzkaller0: entered promiscuous mode [ 233.921067][T10697] syzkaller0: entered allmulticast mode [ 233.950959][T10697] 0: reclassify loop, rule prio 0, protocol 800 [ 234.146222][T10711] netlink: 'syz.5.1267': attribute type 1 has an invalid length. [ 234.253729][T10711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.315198][T10714] bond3: entered allmulticast mode [ 234.484496][T10711] bond3: (slave ip6gretap1): making interface the new active one [ 234.507369][T10711] ip6gretap1: entered allmulticast mode [ 234.521335][T10711] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.591823][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 236.312493][T10755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.616810][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 237.208401][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'. [ 237.489078][T10813] macsec1: entered promiscuous mode [ 237.503788][T10813] bridge0: entered promiscuous mode [ 237.681299][T10822] syzkaller0: entered promiscuous mode [ 237.695833][T10822] syzkaller0: entered allmulticast mode [ 238.039926][T10835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1317'. [ 238.372593][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 238.424867][T10852] bond3: entered promiscuous mode [ 238.454972][T10852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.082416][T10883] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 239.103940][T10883] pim6reg0: ignored: set checksum disabled [ 239.774183][T10907] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1346'. [ 240.537635][T10950] syzkaller0: entered promiscuous mode [ 240.556899][T10950] syzkaller0: entered allmulticast mode [ 240.655038][T10956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1369'. [ 240.689421][T10956] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1369'. [ 240.702545][T10956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1369'. [ 240.954598][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 241.670803][T11001] syz_tun: entered allmulticast mode [ 241.768417][T11001] dvmrp1: entered allmulticast mode [ 241.828021][T11000] syz_tun: left allmulticast mode [ 241.850535][T11000] dvmrp1: left allmulticast mode [ 241.969420][T11019] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 242.002617][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 242.054703][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1388'. [ 242.168101][T11032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1388'. [ 242.372962][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 242.483655][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 242.508853][T11028] veth3: entered promiscuous mode [ 242.573440][T11028] bond1: (slave veth3): Enslaving as an active interface with an up link [ 242.625975][T11032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.234241][T11124] gretap0: entered promiscuous mode [ 244.876598][T11153] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 245.366579][T11146] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 245.504611][T11168] __nla_validate_parse: 11 callbacks suppressed [ 245.504635][T11168] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1424'. [ 245.561055][T11168] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1424'. [ 245.983676][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 246.282540][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 246.328771][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 246.358321][T11203] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.388812][T11205] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1437'. [ 246.410999][T11199] netlink: 'syz.2.1434': attribute type 7 has an invalid length. [ 246.419585][T11205] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1437'. [ 246.428934][T11199] netlink: 'syz.2.1434': attribute type 3 has an invalid length. [ 246.444761][T11199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1434'. [ 246.615985][T11211] sctp: [Deprecated]: syz.0.1439 (pid 11211) Use of int in max_burst socket option deprecated. [ 246.615985][T11211] Use struct sctp_assoc_value instead [ 247.116836][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1450'. [ 247.583196][T11261] netlink: 'syz.1.1456': attribute type 40 has an invalid length. [ 247.637197][T11262] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.743366][T11261] lo speed is unknown, defaulting to 1000 [ 247.918197][T11261] xfrm0 speed is unknown, defaulting to 1000 [ 248.207349][T11274] syzkaller0: entered promiscuous mode [ 248.215698][T11274] syzkaller0: entered allmulticast mode [ 248.646212][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1463'. [ 249.160415][T11316] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 249.181699][T11306] veth0_to_team: entered promiscuous mode [ 249.319011][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 249.341502][ T7820] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.472994][T11318] vlan2: entered allmulticast mode [ 249.491623][T11318] bond4: entered allmulticast mode [ 249.917633][T11335] syzkaller0: entered promiscuous mode [ 249.940585][T11335] syzkaller0: entered allmulticast mode [ 250.873697][T11367] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.960871][T11367] bond6 (unregistering): Released all slaves [ 251.273078][T11375] __nla_validate_parse: 8 callbacks suppressed [ 251.273099][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 251.346269][T11381] netlink: 'syz.0.1484': attribute type 15 has an invalid length. [ 251.381984][T11385] netlink: 64467 bytes leftover after parsing attributes in process `syz.6.1486'. [ 251.424485][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 251.691448][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 251.940122][T11396] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 252.051340][ T5630] block nbd2: Receive control failed (result -32) [ 252.886551][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1509'. [ 252.926190][T11453] xt_hashlimit: size too large, truncated to 1048576 [ 252.971967][T11457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1510'. [ 253.180551][T11467] Bluetooth: MGMT ver 1.23 [ 253.385531][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.478186][T11479] netlink: 'syz.5.1519': attribute type 5 has an invalid length. [ 253.492839][T11480] syzkaller0: entered promiscuous mode [ 253.509403][T11480] syzkaller0: entered allmulticast mode [ 254.819252][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1532'. [ 254.997079][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 255.011591][T11542] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1535'. [ 255.042555][T11544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1535'. [ 255.153820][T11535] lo speed is unknown, defaulting to 1000 [ 255.196464][T11535] xfrm0 speed is unknown, defaulting to 1000 [ 255.283291][T11551] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 255.303227][T11551] netlink: 'syz.2.1538': attribute type 3 has an invalid length. [ 255.344418][T11551] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 255.382360][T11551] netlink: 'syz.2.1538': attribute type 2 has an invalid length. [ 255.396294][T11557] syz_tun: entered allmulticast mode [ 255.788991][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.019929][T11552] syz_tun: left allmulticast mode [ 256.314699][T11591] netlink: 'syz.1.1545': attribute type 8 has an invalid length. [ 256.353088][ T5729] block nbd64: NBD_DISCONNECT [ 256.522089][T11597] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.598349][T11603] __nla_validate_parse: 2 callbacks suppressed [ 256.598370][T11603] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1548'. [ 256.630547][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 256.659359][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 256.719939][ T5729] udevd[5729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 256.833585][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 256.917400][T11612] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 256.936230][T11612] syzkaller1: linktype set to 0 [ 257.192636][T11618] bridge_slave_1: left allmulticast mode [ 257.234448][T11618] bridge_slave_1: left promiscuous mode [ 257.271867][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.364314][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 257.391386][T11618] bridge_slave_0: left allmulticast mode [ 257.426122][T11618] bridge_slave_0: left promiscuous mode [ 257.459501][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.935221][T11640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1560'. [ 257.986459][T11643] lo speed is unknown, defaulting to 1000 [ 258.028892][T11643] xfrm0 speed is unknown, defaulting to 1000 [ 258.046561][T11646] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1562'. [ 259.007777][T11689] netlink: 'syz.0.1575': attribute type 3 has an invalid length. [ 259.026689][T11689] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 259.050342][T11689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1575'. [ 259.085398][T11693] netlink: 'syz.0.1575': attribute type 3 has an invalid length. [ 259.098147][T11693] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1575'. [ 259.771874][T11715] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 259.821630][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.829447][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.855796][T11715] bridge0: entered allmulticast mode [ 259.918419][T11721] bridge_slave_1: left allmulticast mode [ 259.924506][T11721] bridge_slave_1: left promiscuous mode [ 259.934846][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.001133][T11723] netlink: 'syz.5.1584': attribute type 4 has an invalid length. [ 260.073881][T11724] netlink: 'syz.5.1584': attribute type 4 has an invalid length. [ 260.127552][T11721] bridge_slave_0: left allmulticast mode [ 260.157135][T11721] bridge_slave_0: left promiscuous mode [ 260.177509][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.412825][T11730] netlink: 'syz.2.1587': attribute type 11 has an invalid length. [ 261.555607][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.847249][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.864285][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.875170][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.227392][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 263.561228][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1628'. [ 264.101043][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1635'. [ 264.165200][T11909] bond4: entered allmulticast mode [ 264.198978][T11909] macvlan2: entered promiscuous mode [ 264.210367][T11909] macvlan2: entered allmulticast mode [ 264.226908][T11909] bond4: (slave macvlan2): Opening slave failed [ 264.270721][T11901] geneve0: entered promiscuous mode [ 264.278711][T11901] macvlan3: entered promiscuous mode [ 264.697968][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1644'. [ 264.716091][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1644'. [ 264.823264][T11940] team1: entered promiscuous mode [ 264.835934][T11940] team1: entered allmulticast mode [ 264.854780][T11940] 8021q: adding VLAN 0 to HW filter on device team1 [ 264.936078][T11942] syzkaller0: entered promiscuous mode [ 264.945555][T11942] syzkaller0: entered allmulticast mode [ 265.383331][T11969] --map-set only usable from mangle table [ 265.411406][T11967] ipvlan2: entered promiscuous mode [ 265.417408][T11969] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003 [ 265.432672][T11967] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.470609][T11967] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 265.484309][T11967] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 265.601796][T11974] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 265.635537][T11974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1656'. [ 265.770017][T11979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'. [ 266.202018][T11988] bond6: entered promiscuous mode [ 266.214434][T11988] bond6: entered allmulticast mode [ 266.220826][T11988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.605772][T12018] tipc: Enabled bearer , priority 0 [ 266.662003][T12018] syzkaller0: entered promiscuous mode [ 266.673409][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 266.682685][T12018] syzkaller0: entered allmulticast mode [ 266.691887][T12018] tipc: Resetting bearer [ 266.698412][T12019] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.829393][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'. [ 266.957817][T12026] tipc: Resetting bearer [ 267.326554][T12036] tipc: MTU too low for tipc bearer [ 267.379349][T12039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.425570][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 267.553066][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1679'. [ 267.578672][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1679'. [ 267.597100][T12047] netlink: 'syz.5.1679': attribute type 20 has an invalid length. [ 267.679939][ T188] tipc: Node number set to 1965337747 [ 267.790513][ T29] audit: type=1800 audit(1784359138.432:7): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1680" name="memory.events" dev="tmpfs" ino=1730 res=0 errno=0 [ 267.921081][T12054] syzkaller0: entered promiscuous mode [ 267.944509][T12054] syzkaller0: entered allmulticast mode [ 267.962569][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'. [ 270.195614][T12087] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1690'. [ 270.208698][T12086] syzkaller0: entered promiscuous mode [ 270.216178][T12086] syzkaller0: entered allmulticast mode [ 270.423337][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1694'. [ 270.530168][T12108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1695'. [ 270.651282][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1698'. [ 270.723646][T12115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1699'. [ 270.844811][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1701'. [ 270.866097][T12116] syzkaller1: entered promiscuous mode [ 270.882658][T12116] syzkaller1: entered allmulticast mode [ 270.938938][T12115] syzkaller1: left promiscuous mode [ 270.945338][T12115] syzkaller1: left allmulticast mode [ 271.043878][T12122] team0: Device xfrm0 is of different type [ 271.155658][T12123] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 271.361232][T12136] syzkaller0: entered promiscuous mode [ 271.369244][T12136] syzkaller0: entered allmulticast mode [ 271.562654][ T7811] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 272.153581][T12170] lo speed is unknown, defaulting to 1000 [ 272.192491][T12170] xfrm0 speed is unknown, defaulting to 1000 [ 272.620286][T12189] syzkaller0: entered promiscuous mode [ 272.635586][T12189] syzkaller0: entered allmulticast mode [ 273.352667][T12171] __nla_validate_parse: 1 callbacks suppressed [ 273.352689][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 273.588008][T12212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1727'. [ 273.643182][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1728'. [ 274.531689][T12233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1734'. [ 274.710646][T12237] siw: device registration error -23 [ 274.751503][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 275.074754][T12246] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 275.137448][T12246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.185103][T12248] bond7: (slave gretap1): making interface the new active one [ 275.201005][T12248] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 275.211375][T12252] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 275.220969][T12252] netlink: 'syz.1.1742': attribute type 2 has an invalid length. [ 275.360984][T12248] bond7 (unregistering): (slave gretap1): Releasing active interface [ 275.392858][T12248] bond7 (unregistering): Released all slaves [ 275.593558][T12265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.634214][T12265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.663578][T12265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.704614][T12265] tipc: Resetting bearer [ 275.839066][ T29] audit: type=1107 audit(1784359146.482:8): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 275.963878][T12282] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 276.002303][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 276.038068][T12286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.039995][T12282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1749'. [ 276.140806][T12291] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 276.300295][T12296] netlink: 'syz.6.1754': attribute type 1 has an invalid length. [ 276.417023][T12296] netlink: 'syz.6.1754': attribute type 1 has an invalid length. [ 276.440595][T12296] netlink: 'syz.6.1754': attribute type 1 has an invalid length. [ 276.801159][T12325] syzkaller0: entered promiscuous mode [ 276.824368][T12325] syzkaller0: entered allmulticast mode [ 277.069337][T12330] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 277.099491][T12330] bond6 (unregistering): Released all slaves [ 277.190681][T12341] tipc: Resetting bearer [ 277.296864][T12348] syzkaller0: entered promiscuous mode [ 277.318215][T12348] syzkaller0: entered allmulticast mode [ 277.332034][T12357] tipc: Resetting bearer [ 277.445570][ T7807] tipc: Resetting bearer [ 277.749128][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 277.852168][T12380] netlink: 'syz.6.1773': attribute type 3 has an invalid length. [ 278.098395][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 278.271084][T12392] syzkaller0: entered promiscuous mode [ 278.280823][T12392] syzkaller0: entered allmulticast mode [ 278.305251][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 278.387429][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 278.825546][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.910382][T12416] lo speed is unknown, defaulting to 1000 [ 278.933092][T12416] xfrm0 speed is unknown, defaulting to 1000 [ 278.957739][T12426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1787'. [ 278.978898][T12427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1787'. [ 278.995714][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 279.019582][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 280.579208][T12496] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 281.119727][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 281.325773][T12530] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1815'. [ 281.342230][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1815'. [ 281.352177][T12530] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1815'. [ 281.362296][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1815'. [ 283.738103][T12552] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 312.745565][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.225500][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.529211][T12566] __nla_validate_parse: 6 callbacks suppressed [ 325.529233][T12566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 326.111782][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1831'. [ 326.157995][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'. [ 326.430948][T12610] netlink: 6156 bytes leftover after parsing attributes in process `syz.0.1835'. [ 326.449550][T12611] netlink: 6156 bytes leftover after parsing attributes in process `syz.0.1835'. [ 326.700781][T12621] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 326.726436][T12622] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 326.777992][T12617] netlink: 'syz.5.1837': attribute type 3 has an invalid length. [ 329.061900][T12619] tipc: Enabled bearer , priority 0 [ 329.072487][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1840'. [ 329.241731][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1843'. [ 329.310432][T12642] xt_hashlimit: size too large, truncated to 1048576 [ 329.324584][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'. [ 329.655449][T12663] can: request_module (can-proto-0) failed. [ 329.937549][T12682] netlink: 'syz.5.1851': attribute type 1 has an invalid length. [ 329.989690][T12683] bond1: (slave veth0_to_bond): Releasing active interface [ 330.036420][T12682] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 330.037785][T12574] udevd[12574]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.241135][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 330.363747][T12705] nbd: must specify a size in bytes for the device [ 330.379003][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1857'. [ 330.606917][T12715] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1859'. [ 330.627811][T12719] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 330.641770][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 330.686309][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 330.721743][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 331.280606][T12732] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1866'. [ 331.293592][T12733] tipc: Resetting bearer [ 331.323846][T12732] netlink: 'syz.1.1866': attribute type 21 has an invalid length. [ 331.347798][T12732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1866'. [ 331.368853][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'. [ 331.552040][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 331.586246][T12743] netlink: 'syz.5.1868': attribute type 5 has an invalid length. [ 331.651223][T12731] tipc: Resetting bearer [ 331.777456][ T3338] tipc: Resetting bearer [ 331.797660][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 331.883007][T12750] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1871'. [ 331.986963][T12754] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 332.920837][T12804] tipc: Resetting bearer [ 332.971619][T12803] tipc: Resetting bearer [ 333.499973][T12826] netlink: 'syz.5.1894': attribute type 1 has an invalid length. [ 333.797447][T12838] block nbd3: server does not support multiple connections per device. [ 333.822438][T12844] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 333.841701][T12838] block nbd3: shutting down sockets [ 333.939074][ T3338] tipc: Resetting bearer [ 333.960823][T12835] tipc: Resetting bearer [ 334.053139][T12835] tipc: Resetting bearer [ 334.444678][T12877] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 335.019430][ T7809] tipc: Resetting bearer [ 335.701463][T12910] openvswitch: netlink: IP tunnel dst address not specified [ 336.085682][T12928] tipc: Resetting bearer [ 336.123737][T12927] tipc: Resetting bearer [ 336.297603][T12936] xt_bpf: check failed: parse error [ 336.303540][T12936] siw: device registration error -23 [ 337.074681][ T7820] tipc: Resetting bearer [ 337.664869][ T29] audit: type=1107 audit(1784359208.302:9): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='! [ 337.664869][ T29] 9,6ka̭'P:o:m9^3{rcK%+u [ 337.949458][T13002] syzkaller0: left promiscuous mode [ 337.977894][T13002] syzkaller0: left allmulticast mode [ 338.024944][T13001] tc action pedit offset 132 out of bounds [ 338.031715][T13001] tc action pedit offset 132 out of bounds [ 338.037749][T13001] tc action pedit offset 132 out of bounds [ 338.043612][T13001] tc action pedit offset 132 out of bounds [ 338.049588][T13001] tc action pedit offset 132 out of bounds [ 338.055465][T13001] tc action pedit offset 132 out of bounds [ 338.061315][T13001] tc action pedit offset 132 out of bounds [ 338.067205][T13001] tc action pedit offset 132 out of bounds [ 338.073073][T13001] tc action pedit offset 132 out of bounds [ 338.078951][T13001] tc action pedit offset 132 out of bounds [ 338.084779][T13001] 0: reclassify loop, rule prio 0, protocol 800 [ 338.111353][T13008] lo speed is unknown, defaulting to 1000 [ 338.119963][T13008] xfrm0 speed is unknown, defaulting to 1000 [ 338.160654][T13000] tipc: Resetting bearer [ 338.206361][ T1033] tipc: Resetting bearer [ 338.302327][T13014] __nla_validate_parse: 11 callbacks suppressed [ 338.302348][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 339.071777][T13052] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1960'. [ 339.492830][T13069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1965'. [ 339.533230][T13071] xt_hashlimit: size too large, truncated to 1048576 [ 339.660014][T13072] bond8: Unable to set up delay as MII monitoring is disabled [ 339.675803][T13072] bond8 (unregistering): Released all slaves [ 340.224758][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1973'. [ 340.282611][T13095] netlink: 'syz.5.1973': attribute type 11 has an invalid length. [ 340.308107][T13095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1973'. [ 340.336642][T13095] netlink: 'syz.5.1973': attribute type 16 has an invalid length. [ 340.386831][T13095] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1973'. [ 340.959840][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1985'. [ 341.291617][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 341.301405][T13144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1991'. [ 341.363513][T13141] xt_CT: No such helper "netbios-ns" [ 341.597270][T13158] syzkaller0: entered promiscuous mode [ 341.635392][T13158] syzkaller0: entered allmulticast mode [ 341.669452][T13165] netlink: 'syz.5.1998': attribute type 1 has an invalid length. [ 341.681952][T13165] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1998'. [ 341.694138][T13165] netlink: 'syz.5.1998': attribute type 1 has an invalid length. [ 341.828966][T13170] netlink: 'syz.2.2001': attribute type 8 has an invalid length. [ 341.849882][T13170] bond0: entered promiscuous mode [ 341.866616][T13170] bridge1: entered promiscuous mode [ 341.880847][T13170] gretap0: entered promiscuous mode [ 341.893757][T13170] bond0: left promiscuous mode [ 341.903008][T13170] bridge1: left promiscuous mode [ 341.910652][T13170] gretap0: left promiscuous mode [ 342.069771][T13182] netlink: 'syz.2.2006': attribute type 2 has an invalid length. [ 342.083349][T13182] netlink: 'syz.2.2006': attribute type 8 has an invalid length. [ 342.123058][T13182] netlink: 'syz.2.2006': attribute type 2 has an invalid length. [ 342.143448][T13182] netlink: 'syz.2.2006': attribute type 8 has an invalid length. [ 342.798237][T13194] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.815124][T13194] bond6 (unregistering): Released all slaves [ 343.347326][T13220] __nla_validate_parse: 6 callbacks suppressed [ 343.347357][T13220] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2017'. [ 344.471003][T13265] tipc: Resetting bearer [ 344.484225][T13265] syzkaller0: entered promiscuous mode [ 344.490477][T13265] syzkaller0: entered allmulticast mode [ 344.502030][T13265] simple: basic_1 [ 344.507015][T13265] simple: basic_2 [ 344.510848][T13265] simple: basic_3 [ 344.514549][T13265] simple: basic_4 [ 344.518265][T13265] simple: basic_5 [ 344.521939][T13265] simple: basic_6 [ 344.525649][T13265] simple: basic_7 [ 344.529320][T13265] simple: basic_8 [ 344.532992][T13265] simple: basic_9 [ 344.536734][T13265] simple: basic_10 [ 344.540494][T13265] simple: basic_11 [ 344.544245][T13265] simple: basic_12 [ 344.548040][T13265] simple: basic_13 [ 344.552040][T13265] simple: basic_14 [ 344.555847][T13265] simple: basic_15 [ 344.559891][T13265] simple: basic_16 [ 344.563680][T13265] simple: basic_17 [ 344.567482][T13265] 0: reclassify loop, rule prio 0, protocol 800 [ 344.716145][T13264] tipc: Resetting bearer [ 344.850642][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 344.957417][ T1033] tipc: Resetting bearer [ 345.117740][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 345.159696][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 345.389177][ T30] INFO: task syz.4.864:9296 blocked for more than 143 seconds. [ 345.409704][ T30] Not tainted syzkaller #0 [ 345.424895][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.455696][ T30] task:syz.4.864 state:D stack:27200 pid:9296 tgid:9295 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 345.483171][ T30] Call Trace: [ 345.497110][ T30] [ 345.508521][ T30] __schedule+0x17d9/0x56c0 [ 345.524585][ T30] ? __lock_acquire+0x683/0x2cf0 [ 345.538462][ T30] ? __lock_acquire+0x683/0x2cf0 [ 345.556843][ T30] ? __pfx___schedule+0x10/0x10 [ 345.568864][ T30] ? schedule+0x90/0x2b0 [ 345.573287][ T30] schedule+0x164/0x2b0 [ 345.580118][ T30] schedule_preempt_disabled+0x13/0x30 [ 345.591005][ T30] __mutex_lock+0x7bf/0x1550 [ 345.595936][ T30] ? __mutex_lock+0x5d4/0x1550 [ 345.600990][ T30] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 345.606825][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 345.612109][ T30] ? net_generic+0x1e/0x240 [ 345.616826][ T30] ? net_generic+0x1e/0x240 [ 345.621466][ T30] ? net_generic+0x1e/0x240 [ 345.627898][ T30] ? net_generic+0x1e/0x240 [ 345.632588][ T30] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 345.638424][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 345.644129][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 345.650479][ T30] ? bpf_lsm_capable+0x9/0x20 [ 345.655420][ T30] ? security_capable+0x7e/0x2c0 [ 345.660611][ T30] genl_rcv_msg+0x614/0x7a0 [ 345.665310][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.670476][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 345.676910][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.682830][ T30] netlink_rcv_skb+0x226/0x4a0 [ 345.688575][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.693805][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.706145][ T30] ? down_read+0x2be/0x330 [ 345.710678][ T30] genl_rcv+0x28/0x40 [ 345.714717][ T30] netlink_unicast+0x7bb/0x940 [ 345.719756][ T30] netlink_sendmsg+0x813/0xb40 [ 345.725094][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.730560][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.735752][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.741098][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 345.751836][ T30] ____sys_sendmsg+0x54e/0x850 [ 345.756905][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.762381][ T30] ? import_iovec+0x73/0xa0 [ 345.767026][ T30] ___sys_sendmsg+0x2a5/0x360 [ 345.771761][ T30] ? __lock_acquire+0x683/0x2cf0 [ 345.776855][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.782125][ T30] ? futex_wait+0x2a2/0x390 [ 345.786777][ T30] ? __fget_files+0x2a/0x420 [ 345.791422][ T30] ? __fget_files+0x3a2/0x420 [ 345.796722][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 345.801737][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.809308][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.819211][ T30] do_syscall_64+0x174/0x580 [ 345.823909][ T30] ? trace_irq_disable+0x3b/0x140 [ 345.830402][ T30] ? clear_bhb_loop+0x40/0x90 [ 345.835754][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.841972][ T30] RIP: 0033:0x7f379599de99 [ 345.846581][ T30] RSP: 002b:00007f379685c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.855147][ T30] RAX: ffffffffffffffda RBX: 00007f3795c25fa0 RCX: 00007f379599de99 [ 345.863299][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 345.871986][ T30] RBP: 00007f3795a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 345.880291][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.889122][T13305] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.2036'. [ 345.898687][ T30] R13: 00007f3795c26038 R14: 00007f3795c25fa0 R15: 00007ffcee265298 [ 345.906914][ T30] [ 345.910230][ T30] [ 345.910230][ T30] Showing all locks held in the system: [ 345.938978][T13305] netlink: 'syz.5.2036': attribute type 1 has an invalid length. [ 345.949923][ T30] 1 lock held by khungtaskd/30: [ 345.951051][ T7805] wlan1: Trigger new scan to find an IBSS to join [ 345.974934][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.003093][ T30] 1 lock held by udevd/4987: [ 346.010409][ T30] 2 locks held by getty/5375: [ 346.015691][ T30] #0: ffff8880360910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.031258][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 346.044454][ T30] 1 lock held by syz-executor/5629: [ 346.049939][ T30] 2 locks held by syz.3.511/7787: [ 346.055158][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 346.063900][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 346.074710][ T30] 2 locks held by syz.4.864/9296: [ 346.080272][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 346.089190][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 346.099564][ T30] 2 locks held by syz.1.1915/12888: [ 346.121370][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 346.132937][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 346.143708][ T30] 2 locks held by syz.2.2035/13290: [ 346.152896][ T30] #0: ffff888056084180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 346.163670][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 346.192922][ T30] 1 lock held by syz.5.2036/13289: [ 346.201467][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 346.215321][ T30] 2 locks held by syz.5.2036/13298: [ 346.225331][ T30] [ 346.235413][ T30] ============================================= [ 346.235413][ T30] [ 346.255763][ T30] NMI backtrace for cpu 1 [ 346.255794][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 346.255830][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 346.255843][ T30] Call Trace: [ 346.255851][ T30] [ 346.255860][ T30] dump_stack_lvl+0xe8/0x150 [ 346.255896][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 346.255925][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 346.255959][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 346.255990][ T30] sys_info+0x135/0x170 [ 346.256014][ T30] watchdog+0xfd7/0x1030 [ 346.256049][ T30] ? watchdog+0x1c7/0x1030 [ 346.256083][ T30] kthread+0x388/0x470 [ 346.256123][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.256146][ T30] ? __pfx_kthread+0x10/0x10 [ 346.256178][ T30] ret_from_fork+0x514/0xb70 [ 346.256212][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 346.256242][ T30] ? __switch_to+0xc89/0x1420 [ 346.256272][ T30] ? __pfx_kthread+0x10/0x10 [ 346.256304][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.256342][ T30] [ 346.256350][ T30] Sending NMI from CPU 1 to CPUs 0: [ 346.370043][ C0] NMI backtrace for cpu 0 [ 346.370061][ C0] CPU: 0 UID: 0 PID: 13298 Comm: syz.5.2036 Not tainted syzkaller #0 PREEMPT(full) [ 346.370084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 346.370095][ C0] RIP: 0010:unwind_next_frame+0x4a/0x2550 [ 346.370122][ C0] Code: 83 c7 48 48 89 f8 48 c1 e8 03 48 89 44 24 20 42 80 3c 20 00 74 05 e8 c5 0c bd 00 49 8b 5e 48 49 8d 7e 38 48 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 05 e8 a9 0c bd 00 4d 8b 6e 38 4d 89 f7 49 c1 [ 346.370138][ C0] RSP: 0018:ffffc90007b970c0 EFLAGS: 00000a02 [ 346.370155][ C0] RAX: 1ffff92000f72e36 RBX: ffffffff82472cc8 RCX: 0000000000000000 [ 346.370169][ C0] RDX: dffffc0000000000 RSI: ffffffff82472cc8 RDI: ffffc90007b971a0 [ 346.370184][ C0] RBP: 1ffff92000f72e34 R08: ffffc90007b97230 R09: 000000000000000d [ 346.370197][ C0] R10: ffffc90007b971b8 R11: ffffffff81b16a10 R12: dffffc0000000000 [ 346.370211][ C0] R13: 0000000000000000 R14: ffffc90007b97168 R15: ffffc90007b97168 [ 346.370225][ C0] FS: 00007f317b0e16c0(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 346.370241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.370254][ C0] CR2: 00007f372aded2f8 CR3: 000000007469c000 CR4: 00000000003526f0 [ 346.370270][ C0] Call Trace: [ 346.370277][ C0] [ 346.370287][ C0] ? sock_close+0xad/0x220 [ 346.370309][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.370326][ C0] ? __fput+0x418/0xa50 [ 346.370350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.370373][ C0] arch_stack_walk+0x11b/0x150 [ 346.370395][ C0] ? __fput+0x418/0xa50 [ 346.370419][ C0] stack_trace_save+0xa9/0x100 [ 346.370441][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 346.370465][ C0] ? __lock_acquire+0x683/0x2cf0 [ 346.370492][ C0] kasan_save_track+0x3e/0x80 [ 346.370515][ C0] ? kasan_save_track+0x3e/0x80 [ 346.370537][ C0] ? kasan_save_free_info+0x40/0x50 [ 346.370554][ C0] ? __kasan_slab_free+0x5c/0x80 [ 346.370584][ C0] ? kfree+0x1c5/0x640 [ 346.370601][ C0] ? genradix_free_recurse+0x5d/0xa0 [ 346.370630][ C0] ? genradix_free_recurse+0x5d/0xa0 [ 346.370657][ C0] ? sctp_stream_free+0x262/0x2a0 [ 346.370686][ C0] ? sctp_association_free+0x26d/0x7f0 [ 346.370702][ C0] ? sctp_do_sm+0x3fce/0x5d50 [ 346.370723][ C0] ? sctp_primitive_SHUTDOWN+0x98/0xc0 [ 346.370751][ C0] ? sctp_close+0x3bc/0x8d0 [ 346.370777][ C0] ? inet_release+0x143/0x190 [ 346.370799][ C0] ? sock_close+0xad/0x220 [ 346.370817][ C0] ? __fput+0x418/0xa50 [ 346.370864][ C0] kasan_save_free_info+0x40/0x50 [ 346.370882][ C0] __kasan_slab_free+0x5c/0x80 [ 346.370906][ C0] kfree+0x1c5/0x640 [ 346.370924][ C0] ? genradix_free_recurse+0x5d/0xa0 [ 346.370955][ C0] genradix_free_recurse+0x5d/0xa0 [ 346.370984][ C0] genradix_free_recurse+0x5d/0xa0 [ 346.371013][ C0] sctp_stream_free+0x262/0x2a0 [ 346.371038][ C0] sctp_association_free+0x26d/0x7f0 [ 346.371059][ C0] sctp_do_sm+0x3fce/0x5d50 [ 346.371086][ C0] ? register_lock_class+0x31/0x2e0 [ 346.371114][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 346.371160][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.371186][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.371213][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.371240][ C0] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 346.371272][ C0] sctp_close+0x3bc/0x8d0 [ 346.371306][ C0] ? __pfx_sctp_close+0x10/0x10 [ 346.371338][ C0] ? down_write+0x16d/0x200 [ 346.371355][ C0] ? ip_mc_drop_socket+0x25e/0x280 [ 346.371378][ C0] inet_release+0x143/0x190 [ 346.371404][ C0] sock_close+0xad/0x220 [ 346.371423][ C0] ? __pfx_sock_close+0x10/0x10 [ 346.371443][ C0] __fput+0x418/0xa50 [ 346.371470][ C0] task_work_run+0x1d9/0x270 [ 346.371501][ C0] ? __pfx_task_work_run+0x10/0x10 [ 346.371530][ C0] ? kick_process+0xeb/0x160 [ 346.371560][ C0] get_signal+0x1181/0x12c0 [ 346.371592][ C0] ? __fput_deferred+0x216/0x380 [ 346.371620][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 346.371645][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.371668][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 346.371707][ C0] exit_to_user_mode_loop+0x104/0x730 [ 346.371730][ C0] ? rcu_is_watching+0x15/0xb0 [ 346.371758][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.371778][ C0] do_syscall_64+0x353/0x580 [ 346.371804][ C0] ? trace_irq_disable+0x3b/0x140 [ 346.371827][ C0] ? clear_bhb_loop+0x40/0x90 [ 346.371848][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.371866][ C0] RIP: 0033:0x7f317a19de99 [ 346.371882][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.371898][ C0] RSP: 002b:00007f317b0e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.371915][ C0] RAX: 0000000000000001 RBX: 00007f317a426180 RCX: 00007f317a19de99 [ 346.371928][ C0] RDX: 0000000004000891 RSI: 0000200000000240 RDI: 000000000000000b [ 346.371940][ C0] RBP: 00007f317a233eaf R08: 0000000000000000 R09: 0000000000000000 [ 346.371952][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.371963][ C0] R13: 00007f317a426218 R14: 00007f317a426180 R15: 00007ffdfc624288 [ 346.371987][ C0] [ 346.895574][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 346.902489][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 346.911896][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 346.921988][ T30] Call Trace: [ 346.925293][ T30] [ 346.928253][ T30] vpanic+0x56c/0xa60 [ 346.932272][ T30] ? __pfx___schedule+0x10/0x10 [ 346.937157][ T30] ? __pfx_vpanic+0x10/0x10 [ 346.941694][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 346.947877][ T30] panic+0xc5/0xd0 [ 346.951634][ T30] ? __pfx_panic+0x10/0x10 [ 346.956081][ T30] ? preempt_schedule_common+0x82/0xd0 [ 346.961582][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 346.966988][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 346.973177][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 346.979359][ T30] watchdog+0x1030/0x1030 [ 346.983735][ T30] ? watchdog+0x1c7/0x1030 [ 346.988224][ T30] kthread+0x388/0x470 [ 346.992332][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.997031][ T30] ? __pfx_kthread+0x10/0x10 [ 347.001658][ T30] ret_from_fork+0x514/0xb70 [ 347.006287][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 347.011435][ T30] ? __switch_to+0xc89/0x1420 [ 347.016138][ T30] ? __pfx_kthread+0x10/0x10 [ 347.020778][ T30] ret_from_fork_asm+0x1a/0x30 [ 347.025585][ T30] [ 347.029234][ T30] Kernel Offset: disabled [ 347.033578][ T30] Rebooting in 86400 seconds..