last executing test programs: 2.046401626s ago: executing program 0 (id=5208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48a00f000000000000a8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r3, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14010000360001000000000000000000010145800c0004000700000000"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.702465098s ago: executing program 0 (id=5213): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x200000000000000b, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) 1.701835546s ago: executing program 3 (id=5214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, r5}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={r7, r6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="5e72341506ead899484e"}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4004010) connect(r7, &(0x7f0000000800)=@caif=@util={0x25, "54f627f78747c5fd5ec9d8d9deeaf894"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.625455344s ago: executing program 1 (id=5215): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@var={0x200, 0x0, 0x0, 0xe, 0x4, 0x1}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0x9, 0xffff}, {0xb, 0x3}, {0x8}, {0x9, 0x4}, {0x2, 0x1000}]}, @const={0xd, 0x0, 0x0, 0xa, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x2e, 0x61]}}, &(0x7f0000000280)=""/90, 0x99, 0x5a, 0x1, 0xff, 0x10000}, 0x28) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="d4d0000050000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 1.604222613s ago: executing program 4 (id=5216): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x9, 0xef6, 0x1, @remote, @private1, 0x0, 0x20, 0xc, 0x1}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x20005040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="55275006ed747229311198ab94c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992ecb170f216f71336253a3be1833a25eb1fb2ba3913dd437e30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x5d}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.542069512s ago: executing program 2 (id=5217): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.441879981s ago: executing program 3 (id=5218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x68, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x68, {0x2, 0x4e24, @empty}, 'bond0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x3, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x7, 0x0, 0x4, 0x40, 0xfffffffffffffff0}, @cb_func={0x18, 0x5}], 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.409254171s ago: executing program 0 (id=5219): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) (async) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x2c, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x80000000, @empty, 0x17}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x2c, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x80000000, @empty, 0x17}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000140)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r5, 0x9, 0xf, 0x73f, 0x10001, 0x9a}, &(0x7f0000000400)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @private=0xa010101, @multicast1}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_getnetconf={0x24, 0x52, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8000}, @NETCONFA_FORWARDING={0x8, 0x2, 0xffff}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.397609934s ago: executing program 1 (id=5220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$inet6(0xa, 0x7, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 1.345857127s ago: executing program 3 (id=5221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}]}, 0x40}}, 0x0) 1.345086668s ago: executing program 2 (id=5222): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='!!]-#\\@-\'}\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x101]}, {0x1, 0xe, 0x7, 0x5}}, 0x8000000, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffff}, {[0x101, 0x8, 0x6, 0xfffffffb]}, 0xffff8ee7, 0x7d, &(0x7f0000000100)=""/125}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x20a, 0x0, 0xe72, r1}, &(0x7f0000000300)=0x10) 1.276787821s ago: executing program 4 (id=5223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) (async) 1.231035426s ago: executing program 2 (id=5224): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x270, 0x128, 0xffffffff, 0x3b8, 0x3b8, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x8, 0x1}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0xffffffff, 0x6, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {'9c'}}, @common=@srh={{0x30}, {0x2c, 0x1, 0x7f, 0xf1, 0x2, 0x9c1, 0x84}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, @ipv4=@remote, @port=0x4e20, @port=0x4e21}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {"b61d"}}, @common=@frag={{0x30}, {[0x0, 0xe5], 0xffff, 0x10, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@remote, @icmp_id=0x67, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800) 1.13422707s ago: executing program 0 (id=5225): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0xffffff69, 0x7, 0xfffe, 0x100, 0x3, 0x540000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x82280021, r3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x7, 0x6, 0x0, @mcast2, @mcast2, 0x1, 0x20, 0x3, 0x7}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000f40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x400c000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54010000060a010400000000000000000200000028010480180101800e000100696d6d656469617465000000040102800800014000000000f8000280f4000100ea6239605105d1745f482f52aae8ff350e744b5ad0bf6f660dac3a98653c582061417bd6f7a6b33f1454dcd2a8360523552057472ff6c4a659dc3842c25c65c4220ee6d9becdc762b67ce44dc0c044f2de80d7daf67c0ddb6a7b9fa151d83ec54dcf32c1dea91e022e2cf82a07199ee5e37f875a99589f5097072544a988fcd7ff1e03513b8dcad6631004a12d7d26b0eebd505684ef875f7b4e70def6d113eaeeffc2fd3e5a8dfd300bb024e5a94c19060ad4fd70229310551b824b7707db7210583311bad5173360701e5d7fe18484652c35f6ab8134aba01fb8f72f5aabd22cfb7e0c000180080001006f7366000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000000000000000004ce93b6af55640833084161a6b78e19001fc6432dd7ea81817fe9f24057174063f4539712acdfaf82b31de612936"], 0x17c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3a40000031a6d355cde25334905be5f0dd159adc7f383201e70f875b6c6403bcebb4e3cd61d9e7bad731c86b36ea420afa86f3deb7380d0d3ec743fb6ab55fe2e87a5cd7a9e71877594fa6f4e87eafd71b560a1fd3f8297ea90b5e7f5cedee5da056be334f3cd34cb8bbf54b5c9a2459602069c897f0cd075cdcf31ad33d139c906aac58a98a02f66b08c86ab038cc251b0a3066e3d02dea24d30383a8f264de1dce3daf37d5370e40b4e4e1a1b3ee6c78015c53606da3b1b649094834653191f92ec5", @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25210000000c00060001000000010000001c002d80050001000000000008000200020000000500040001000000"], 0x3c}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2004c901) socket$kcm(0x10, 0x2, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7b6d7f", @ANYRES32, @ANYRES16=r0, @ANYRESOCT=r9, @ANYRESOCT=r8], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 1.133822046s ago: executing program 3 (id=5226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r4}, 0x20) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x3, 0x8, 0x201}, 0x14}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'pim6reg1\x00', &(0x7f00000000c0)=@ethtool_ts_info}) 1.020335625s ago: executing program 2 (id=5227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x9, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0xd, 0x9, 0x0, 0x30}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xd7, &(0x7f00000003c0)=""/215, 0x41100, 0x12, '\x00', r4, @fallback=0x19, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0xfffffffd, 0x8}, 0x10, 0x0, r1, 0x0, &(0x7f0000000500)=[r1, r1, r1], 0x0, 0x10, 0xc}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="102a05f4ffffff000c001a8008000280040001"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x9, 0x7, 0x153, 0x1, 0x8001, 0x3, 0x3}}, {0xa, 0x2, [0x7, 0xe, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x35}}]}, 0x58}}, 0x4000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bond_slave_1\x00'}}) 1.000451537s ago: executing program 4 (id=5228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000429ef51a32d4b894dc10d120b26337d6070f41506550d26b640c78d08e7f662c81689237bd7af0978aabc172361a9a25b12d83119fe9daf98f80486db4bd4d673017e323276eef2dd2efa9d71e1d73a3480bf40c023efdae9033a4b60562c041c3436b3954c64368c6e842f01ffc9ec9c93ab7549d99", @ANYRES16=r1, @ANYBLOB="010025bd7000f7dbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650000400000"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000080)=0x100, 0x4) 837.392497ms ago: executing program 1 (id=5229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/122, 0x7a}, {&(0x7f0000000980)=""/41, 0x29}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x7, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x7, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000140)) ioctl$SIOCSIFMTU(r3, 0x8992, &(0x7f0000000580)={'ip6gre0\x00', 0x1}) (async) ioctl$SIOCSIFMTU(r3, 0x8992, &(0x7f0000000580)={'ip6gre0\x00', 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0xf4, 0xc, 0xf, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @initdev}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @multicast1}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = socket$rxrpc(0x21, 0x2, 0x2) r8 = accept(r0, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000580)=0x80) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x90000000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6a4}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1558}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x80000001}, {0x5, 0x14, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x801}, 0x20008086) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) bind$inet(r8, &(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10) (async) bind$inet(r8, &(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10) listen(r7, 0x0) listen(r7, 0x1) (async) listen(r7, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 753.768051ms ago: executing program 3 (id=5230): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x29, 0x7, 0xf9, 0x8, 0x0, @mcast2, @loopback, 0x8, 0x40, 0x9, 0x8f8}}) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r5, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 750.510037ms ago: executing program 4 (id=5231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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") socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000025748ed0b91d07148000000000000080c000780080006400000000005a32d0006000000050005110a0000000d00040000fe454ec00000000d000300686173683a6e6574000000000900020073797a3100005f00"], 0x54}}, 0x20040000) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000025748ed0b91d07148000000000000080c000780080006400000000005a32d0006000000050005110a0000000d00040000fe454ec00000000d000300686173683a6e6574000000000900020073797a3100005f00"], 0x54}}, 0x20040000) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x28}}, 0x10) 665.464973ms ago: executing program 2 (id=5232): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) r1 = accept4(r0, &(0x7f0000000140)=@ieee802154={0x24, @long}, &(0x7f00000001c0)=0x80, 0x81000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x7, 0x9}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x2, 0x30}, &(0x7f0000000340)=0xc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4c005) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000580)=0x8000, 0x4) setsockopt$sock_void(r0, 0x1, 0x36, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000700)={'pim6reg\x00', 0x0, 0x28}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000900)={r1, &(0x7f0000000800)='mptcp_pm\x00', 0x202002, &(0x7f0000000840)={@_ha_fsid={[0x7, 0x1000]}, {0xbd7, 0x4, 0xa, 0x7fffffff}}, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x641}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x228, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x300000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x89d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe7, 0x3, "c8fcaf7949c6876163d515589c384e545a9b006aac8b7f8171667a2b9842b8f860102a3615cc06096ade8e1d568023efca3bd9a973375882f269f61fa4a0f666de25c91859706194904771406ba6c419a6505fbfad6ce9b1347adba2e4c3b2507a7ad21728f472d84581d6abb25e7beb6da7e7987e35b4970ea837716669ff54413fc3639e9e017a1a35be6cf320afcc6a9fb10a155262dd7d2aeb17772540a4ea4e80509241d20cff95bdc9532c794428efb5f2e09cea4c312efe0e3dd5f69fc81b09a8a16425eb54aa11175627762bff847d93afbe01bdedf1348b2ad437beefd037"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x391}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x87}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x94, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-!\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r10, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000f80)={r1}) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000fc0)={@ipv4={'\x00', '\xff\xff', @loopback}, r4}, 0x14) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001000)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x8001, 0x2e, 0x40, 0xcf, 0x3}, {0x3cc, 0xa2, 0xfffffffffffffffb, 0x0, 0x8, 0x3}], ['\x00']}) sendmsg$kcm(r1, &(0x7f0000002440)={&(0x7f0000001100)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001180)="c5fd19c97d9fbff48ec919a1dbe77137b7c79a830087929046b708aa2be789f775f3b1440307f6b2b87e03093a58dc99de8bf0237a0bc2f0f9fad54c5d8ac61e541e61abffe2d08bbebcbc8b669d906d5bde7fe472b21a9b1a92d2bcad266460819affc6f3244c7737ac8d1cdf0780a5747f28877182f4f173c3ea2685a4301c78f353836555d9718d0748070b9e7a673dc75992b194a4b057a99f4866ddf3fa7bd7c633151d72cd4dee417fe7bd33a8ccb28e7bad04e0893effc639b0d8e5f361a944afbc1df9cc7e35bfb33d760f5360cf45bce04b12f3b551b740f59912baff45186cbc6f7d0cfc785ae8e2869e3d42cddab850106f0351592b26ebaea825cebd3c770e7680dc614c9acac172fe0fc3d57d55dcbe14e63268c222892fa3f39091c6809f302fb3d87f638a4dd6b442fac7b0d5313f7060dead7ddd52cb46e661d314ebe2b2eca2e9c1a1caf3c0777eb647ef4e0c78862cfe77ff25c6e9bd4a5fa76da10d03a49064015b1ba7a2213ddc0730149cf51161db8fdcd1a616088e6aace2bc2420d804783fd0e3acd0eb4fe76729e22778ce6d3e647a05fc8fad27b8232bcfd7550f6e670aae2449a073395030b49459162a20d7ec3a98418b74c5df1f98e79b67b9b4a32da8550b4a657b49d12b7613e66452bcd2a0d7186930559466ae672794adb283e3a701a129c27393bd31f18fec7e5425ce9130ae88d0c2cc4e50c3c11571a4cf3f2faf7d0e1c4b07885767448e7a1a97ea911035b42ce8ee8f731ae8702278d8ab1b649fa9dce0675263e30a5c563db14581286461e2158b458bae64c43ff4715b023c650745e423a4a340c9649d1efc5d5c60e88e953d7bcf116cedcc6c14f61719da0d38217412fa2b6e29a094ea476dac8602309a96308d4b341b92a8c9dfdf98162982afe71a5bd05cc7e710d1fe4e8b2d6d73ef406e491228c5f7048d29faefe1a38cfc090638089e82f1f029003ac65c4aad00f4d34ff7a7b9a68e61cc65081a9fc230e94507a70a6a90582d788e542df93c67de6f9c5491ccec58f15904daab7693d16e1ceef85ffccb44045c232c0ede95243d4b5af0470f02bacc42664e79eee2309c755bc9fdc8a29fafa49678e08763017ef54c3813843d5bf94f569dcf8644078cb7344c5466fa64d7ca90eb11feb264dc2680bf1f52876952b50c2d64af029f25e366fddcbed4c8904d9d81eeea0e2d14a2601bb1b64a40ff6a96281ed3e69d5812f925ee2a01b29e7db83aa30ab02bb206d87acb9e59536d69abf7f95db773945ee0637d738cf386775dbcebe2706810bb2e46b20fb389fa93a0187eede5f1a5885d971fa04b2302052920b6cb60d75cb174d915a22682542b5b556eff6ceadcfb0464939dca0769f1a936af30a8519b9527c3cc2b4295d16c497100fee58b4f45987f7b0a9b5a9655d409d63b23ba899148bdd0b40b39ac0f0b4775ae52ce746effef495d392291b87dff900462a70fbc0e426565825742dd4cec842beddf4b4f21c34bf9e89017ccef2eb539b7999bf3659b73e814ade7bb72918d3ac026f89958724e0bd1dc8e21473ddcec7fc56b733429bff2307897cf7d4dfffc075a359df9c75f403164d7e9fca65dd3ffce8ce886140d5e4d7a8a4a981dda4de791930569bb8528f49605b2ebd45b5a3fcdfed9ea8fc742b28065e17a9a22f327558cb45f6f1017acd28658f001010c83236d7599ca84eb0d601a1a1e042defecd5e957dde203b63610cac1d7e2589f99021a6a47397f264594e6498ac06031df906bf766848ab33c14931ff776df73ed25f99858c144730e28839145b6ac63382dc1c19ae640c1a5353ae7d6679222af46a2c465a7a8efeb9beff6c1979e53344bed166419adf5beafcfd13179e5c192cb4ee7a4b28f3852daea1ba69ba4480a25b68aecc5973f2d19090be78070225efe7152899f8251c59e1ef570c02cbe1d1c3ac63d32f26191e01c2e485ed563fe854f82d50c4c9d9c2bb42e86cb2da1da8c86c034da7a08c325441b36a91b8db1c3b714c4880e0d91474c12e04f835ef965b164d7c64e9b0a43ce0263688430203cf7edd011255b58ab3c1c800ed4e7aadb35669b87f5869eabddd355c20edd1a9fdbc1d2a8815c09a47a75b8d03f0f122d61fbcdc4ac0b1acc0c440575a2d09aef4b9a3d19933e3d36a734387564c46593ad572f77629097112dadb1fc810d3a94de369baf886643f960963c4466fe0d8b41a728f94572f6558c982c70c747a4d0e114da3044f08a8f1b18423178cb4de111e7661fbd2b93e830be257cd6c80393b7fe47bc79a379d92814525c2fc2f1d26d7141d3fdbc7357569bf400c48e662cd94908a29774b8d4bd681acd8ac24249d471452106352db3f7a35d3c04e43b767fec5ca8c38eb5abe0b7adc3e3dcb3a95c0f861394e0e91f699450bc3b032364d9e58e96b97e13a1134b4f63658c8a56d9f1b5305157bf309438c3dee2d4b636c3bc7aa9e6430029f576f02f0ff66eaea4457d57d076f20f56654a132b7fdc11074b8b95065f8b7fae86de2868ca2527a4ab094e303f10c38f97353982e8e8d2094722b4636ff1b12c4cb1deeb6ee223ecbb199e66bf770ebb387994e4ff0128f689e0a7208b07dd9e16588ca2a6d80fc7489865e480041eaf128f22a565f1477a69a8ab93cb5316797674d2df0ff5c55551e5887e1fd8b4c0fe7be47fde099496d219eac3e958634d17329353f9da53433d62b697552388a5eee1008e1c8e90317823d55a581017cf9d3f01840e0af2016bb1f3e7f0a8bfb6c7371de541db25fce6af09645a7e0815d9547c7a591f5e2b161780f84a5f2fd05caa24c66311dad8aefe01cded82735f1a04f17fbd603df7f896f5b2aa6845442b1f0cbcc0b926c268ce8b6561bd3f2236b4ce7125e58d76de12d93111a3598212ee635889061d1475bc2fa989eb4de00fa60a212dc31e39a4cf173a011bcf84810ec0bc060dbee5be649afa6f63f1847308b8a4f72d6223c34e8db23a571322a48cfb5d3d9624a904612ca321b7ab52e788f4e70bf99f9fa9e00b3c2add80c42a72f6df1aa3d4fbf1016deec219394afd43e2e38c6a4b3bbecc5e5dba3fe4fb7a88fadbf8c9bc681e6da7a622e53ea1e8205acbdcfe9f779898e000ed4140d6f41916c988a2c1f149272b9761cad0d3092466e0d71448973eb9acc5d8b1d4a30ada190be186f9a734b9aef5b11e1c98ea2934e708ade64b1dcf0537fba17a17bc5609d5bb33df2953a05a84675548fcf1ee03e9706a1636487b626c4e8126d372f2f0d1958abe730574cb5844b3b6a5d27553efe3dfdf0fc9a50e8769b97f85a3ed89ded86387dab34db65b3a2a104575b11db62bb4b10363153510ed7fba57ce873438810834aeaf5955ec3eb9069901ccf4c583643acfb353926bb4e5464388210adccfdd02e6c15e437a2ddb09cc75095d64c23d8f8f1490672d66d0d471c49228e2e4b460d41b65ece96498ddfb54072aa0b307900401835127aa409450300ac6bfbc23780920432cac5303bbb74bc6f925bf4df813d6d1a64a6f158bcf4feea345ea6baa1bb0287d951d3bffecd69d2e13e534c9360aea51041839c40a7aeab8517699df5f6ff2295d4713701757bddb18e0ae354bdb46884a2c270c10330fd445c49567fce552e0bdea56970028ef6d49f1f3b5d58a866c16b77483124ff73cb701beb88e0dcb73fc09dd189a89946d463e155b7f71a9ff60c3806e3c65816ede7051761ad1ee7b97ce2da1f00b9df95a1d0e7f13c0888a668f983c188864257ecba079af8ce2fc1b5601c556ea934337a0ed17a6b5d9984596fc608adb35c5647181234ef3af8ad7905754477a7d361f1046d82422a918264177ba82874f646736d7b195652d2773df56937cd825f1d1b85bc222e92b80568ad4c7e52942a613c99349e91443bf6863a960881232d12faf35a668e70f8637d402377975d07926dca19de7a3b19073e957daad2bd4b6944f151177f850f3179f88ea65316e8763baa29f7e7306dee914fcfa15359aefab590d2ca5b69117b86fbffaa1da42fa4fcfea9be98e397b1e35d30c6e3c84de4565e80ad55e12026e9d83f4d4f1936a297a1e3fae20cb2d67b60c7c602b686ade498687bf96345ac918f50013e3fc6f8ee4dc8184878ce1cf19463e0e8ddc54095eabaf43559a6965d5d687694473711b9b27c7caf46c34d36fa742d53cf8ecf0182385866428c078564baf22cfafb5b72844f4877d779557e04711bb4f7c15e7cc71a764e8f899db59259a1c9ee301c1aebb4283802da6ad3293a13dee87a6695159225d797b712538371a241b3a14b5e40f0ac2ced4f9eacfb2fe8c819f712c2d6da69e6af5d93bb47ea80bb8f19372b8c81e31bb24fd461a5a3f362b2b9346b1b3b5754f19514efea0cc4a03d8dfd9170428ddce332735f36facd13e0855e0839921a6d4df3d9457f9de8759f5d554de444779c8887049820e9b4c92cdab4ad7af6a1af5a815598ec21db06f00ae2f73b0836c1176f24520aff62902514660829ab10c0af4a298439c598e05ca9456c7163abd0ec8977342ed7111fdb2b9b031f6a73873f3ccf753dde3a757aad65c418e3d5775dfbf8fa5f73cbac0c909d3c6a757b51007de25f01c5f992075fbe08845213347e513f0dd1e7c85afe11ba1aec561f85d18723caa921e7c73b3eb17eb75a7160d0452017d8c7f95a1515a24fbbd332d6be7fa3a62893586dce607a804df020bcb9269b89247fb8030a9c24cce7aea085d3b7a871be2406978d23e5ddafa9dc9b90e82b4f75f28de7cd4088f0fbd6c10ed546bfc382be921a1b82e31812081c457655327eb32a70a5b0f8a246aefbb40cabb9f0fd26c73ccba193166ed762dde20d3922a5689d7524b5eac083ca0563afe292e61041b50d06bfda0154b1d8440468612d76c500a9612e40ff93ed1ec99cf103735f737c262a468db33cf70a4c703a15b8204d03d0f10c18820e3c94ed38cd0a9d885a60b20b72f57eeaf482cdf41f1d6f76b2e2aed76747e598c388876cdb04ae8c66587c0f921fcb6c97690566491ece2e3ec685a755fa4043a70fb0b3fcd7da94d2caf4f4457098269f044b1a5013eda8273458502f1cdd319ab43ea03646dc2de2c649a64326a710810fe6b3603e8ad1abc202ff01e3c90b6fd5817452a34baec128343199189ed9e19803be4e63f3aaf36b76ac113e45c9f27beecba30a007a6933d5ffbef8142ed89217764c702ba6a11a29ff74e60e219a2ec7cf8722191ca22d3da2b2a38c30c657e246e265f22d0b0ec8fd9c0dd24af6cc45820841a6ad14bd7638be738ed3e864bb421405ab943928454304fb3b3e33a8a996f19fae9442180ad0fbff1fcd066365f497e15ca887bcf0e71fd90da88615536d4e38a1a94c4bd2fb70acb456fc6f5963e65248dd638768573b3d22ead70ae0449308940c0c794bf044cbbe59277c770ebff5c23a089e76f184d2ad02ac1a555b883262ff6e20d65fafed256183bde8ad017544be15ab2137b7fd419376a085b84a940933f393993e3dc3627055e14651c982cb2476ca7259574b685aad246ec22df21a1c4e4bc9350c8bbe83ba1338a7e24e9324fa2146e09bd3b4fbcd7927eb2df4e1d9daa7a1b7136ac3bddb76ca58b7a2718f0f30150ae34b9488079756b79d922974db9d28e4708f25f4530311bbd74ac059c78553373150ca3ddfac61570c14f2c25b65f3e6e61b6a02a1018ab6d024350731c73cb0bbbc72d9c26a0348978e01ae5d94b3b0b1213dbf80da29b", 0x1000}, {&(0x7f0000002180)="f76b9f5acf14c7030a175b5fc4a7759a1bc5989a1bed4ee7a29e5237b2a5a5b38d10fdd6a4808d6c9eafe14b534194d8e1c9aca99e9e703cd91856a1e6468f7a915e21d083da78575e8ea1b1ac3b1a001bb0691bab3578369d8fc8c06cec708b247fa793aef387e07097006a5333994179dff7bbeb7c9ff62075ee83ebed61b9a4140969bf841e9bd5947f8c37eeebe6c75fb33c78a0732f4460ba43c8819b8c69dabdd96b39aec6623835ceb1cfbf35132b74371ae23821586101", 0xbb}, {&(0x7f0000002240)="b814d1cd052493a12c659186041cec4c5e7b5298dad75122f458f92dfe712adc737cb93ec856578dcf43cf42168c101e8e930e7346f69ff6447ed3921a4b0e5ae89ab1cad26925fbe937c248bc66c31fd7", 0x51}], 0x3, &(0x7f0000002300)=[{0x20, 0x88, 0x7, "8104022fddae49eccb6aa102cadc29eb"}, {0x78, 0x104, 0x4, "72893c05e54194d2565e605d99ba1b9b2e4ac43b6e8d76cad0aa0f561b51888da6bec7258338f0115fa8d65326ee8e5e08a6e30e3ecc0a9d76b04beb136798faaf6d73e85f71555390bce103c666d439a66f21e21a433c6e1390b086216f63bd5674b410"}, {0xa0, 0x1, 0xa7f, "66ae6816c772c12ecba31351bc476fd5cbc14c9aea49fc727c80d299cd8f98bdcb2aa8edd7397359d8b68998745b5d15a033ba8e9a103691caf5ac48e00f5e4414d1bf7c23092b911964b8e3c88e390a2187aebb178a45a783017497a5d3b08cff4c0886c5e87d7fe86b9c60b12dee487cf27ad82437cbdcee04987676fbc3f0923c57778142542f55940e885b"}], 0x138}, 0x4000041) close(r7) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000024c0), r11) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000026c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002680)={&(0x7f0000002500)={0x164, r12, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4020800}, 0x20000000) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000002700)={0x0, 0xd, 0x4, 0x8000, 0x7f, 0x4, 0x1ff, 0x7f}) connect$l2tp6(r11, &(0x7f0000002780)={0xa, 0x0, 0x1b18dcfb, @rand_addr=' \x01\x00', 0x3, 0x1}, 0x20) 614.272443ms ago: executing program 1 (id=5233): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x9, 0xef6, 0x1, @remote, @private1, 0x0, 0x20, 0xc, 0x1}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20005040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="55275006ed747229311198ab94c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992ecb170f216f71336253a3be1833a25eb1fb2ba3913dd437e30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x5d}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 603.775394ms ago: executing program 3 (id=5234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0xfffffffc, 0x4, {{0x19, 0x4, 0x2, 0x2c, 0x64, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@generic={0x86, 0x2}, @lsrr={0x83, 0x13, 0x22, [@local, @broadcast, @empty, @empty]}, @end, @rr={0x7, 0xf, 0xe1, [@loopback, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x2, [{@empty, 0x7ff}, {@multicast1, 0x2}, {@private=0xa010102, 0xa87}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0x3, [{@private=0xa010101, 0x2bcf}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x7, [@volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x8, 0x2}, {0x2, 0x2}, {0x9, 0x3}, {0xb}, {0x7, 0x2}, {0xe, 0x2}, {0x5, 0x4}, {0x8, 0x2}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @struct={0xa, 0x7, 0x0, 0x4, 0x0, 0x31b4, [{0xb, 0x3, 0xdf9}, {0x8, 0x0, 0x10000}, {0x1, 0x4, 0x7fffffff}, {0x4, 0x2, 0x5}, {0x7, 0x2, 0x7}, {0xe, 0x3}, {0x1, 0x0, 0x8}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x30, 0x61, 0x2e, 0x0]}}, &(0x7f00000003c0)=""/240, 0x10b, 0xf0, 0x0, 0xa66e}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0xffffff81, 0x7, 0x0, 0x1, 0x6, '\x00', r2, r3, 0x1, 0x1, 0x1, 0x6}, 0x50) socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRESOCT=r0], 0x84}}, 0x20000000) 462.32865ms ago: executing program 2 (id=5235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(r3) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) (async) 453.212387ms ago: executing program 4 (id=5236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000140)={0x800, 0x5}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) close(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket(0x14, 0x3, 0x2000004) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r4, 0x5, 0x1, [0x9]}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff50000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 370.434519ms ago: executing program 1 (id=5237): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r6, &(0x7f0000004480)=[{{&(0x7f0000000140)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/102, 0x66}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/128, 0x80}], 0x3}, 0x8000}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f0000000940)=""/64, 0x40}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/198, 0xc6}], 0x8, &(0x7f0000000d00)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001d80)=""/122, 0x7a}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/115, 0x73}, {&(0x7f0000001f80)=""/158, 0x9e}, {&(0x7f0000002040)=""/217, 0xd9}], 0x5, &(0x7f00000021c0)=""/248, 0xf8}, 0x5}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)}], 0x2, &(0x7f0000003340)=""/213, 0xd5}, 0x2}, {{&(0x7f0000003440)=@sco={0x1f, @none}, 0x80, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/57, 0x39}, {&(0x7f0000003500)}, {&(0x7f0000003540)=""/131, 0x83}, {&(0x7f0000003600)=""/115, 0x73}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000036c0)=""/25, 0x19}, {&(0x7f0000003700)=""/47, 0x2f}, {&(0x7f0000003740)=""/39, 0x27}, {&(0x7f0000003780)=""/29, 0x1d}, {&(0x7f00000037c0)=""/115, 0x73}, {&(0x7f0000003840)=""/164, 0xa4}, {&(0x7f00000046c0)=""/246, 0xf6}], 0x7, &(0x7f0000003a80)=""/69, 0x45}, 0x2}, {{&(0x7f0000003b00)=@hci, 0x80, &(0x7f0000004140)=[{&(0x7f0000003b80)=""/136, 0x88}, {&(0x7f0000003c40)=""/87, 0x57}, {&(0x7f0000003cc0)=""/152, 0x98}, {&(0x7f0000003d80)=""/144, 0x90}, {&(0x7f0000003e40)=""/103, 0x67}, {&(0x7f0000003ec0)=""/67, 0x43}, {&(0x7f0000003f40)=""/152, 0x98}, {&(0x7f0000004000)=""/181, 0xb5}, {&(0x7f00000040c0)=""/66, 0x42}], 0x9}, 0x3}, {{&(0x7f0000004200)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004280)=""/71, 0x47}], 0x1, &(0x7f0000004340)=""/20, 0x14}, 0x1}, {{&(0x7f0000004380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004400)=""/6, 0x6}], 0x1}, 0x101}], 0x9, 0x12000, 0xfffffffffffffffc) (async) r7 = socket(0x1, 0x803, 0x0) (async) socket$inet6(0xa, 0x800, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB="08010a00", @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 145.717165ms ago: executing program 0 (id=5238): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000070000000000766c616e30000000000000000000000076657468305f746f5f7465616d000000697036677265300000000000000000007465616d3000000000000000000000000180c200000fff00ff000000aaaaaaaaaaaa00ff00ffff006e00004597006e0000009e0000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000009b000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0000"]}, 0x1a6) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2dc, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x4}}]}]}, 0x2dc}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (rerun: 64) gettid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = openat$cgroup_subtree(r1, &(0x7f0000000600), 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) (async, rerun: 32) poll(&(0x7f0000000640)=[{r9, 0x10}, {r10, 0x4}], 0x2, 0x1) (async, rerun: 32) r11 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c0000000000000081efff0002000000", @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) (async) getpid() (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async, rerun: 64) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32=r13, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r14, @ANYBLOB="1500040003000000000300004505a8b9e859abc0010000000800d730", @ANYRES32=r15, @ANYBLOB], 0x44}}, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async, rerun: 64) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) (rerun: 64) 125.083473ms ago: executing program 1 (id=5239): close(0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x30}, &(0x7f0000000100)=0xc) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, r4, 0x8, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 58.09154ms ago: executing program 4 (id=5240): socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 0s ago: executing program 0 (id=5241): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="7fe76c74d859d74ea4ff15ac3078f79e77c42cfb92f70ff01624b53d51aff4e158fc4953f041884e21b5b28260800697cf2a170d7f254cf2f73898f6a142697f225cb047d7eafb65133a643be1450e4b03f1fdf8cdba81afcf3d96551568a2724b9052ae8a6828c0cbe7dcad5e7cc3358d45924d2e76a9294cf91ca743e2eecf56aa88be1fc1c7a1dcc2d7aa756e59762385cb30f99ac2ae780d52dd9719e57d4c0dcb00c886f449ed42065821d4c846489c9117c1eb83aaf515766861dea5d0ad9838122e0a8fca24b8c312d8b3a2b329b5235ffc09b51b7cd8d37292069182ee5a2a1446ce99161977a87b", 0xec}, {&(0x7f0000000280)="737bee5204008f954d9b66ac1d9c245ccf4e83592d7d", 0x16}, {&(0x7f00000002c0)="54acefcab185fa77db3d3891b69b07c148c182fda00e7b4f4e3855c03644e4942c66fcce981f2ae2e01a1023ed34c4717bcb4862", 0x34}], 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000380)=""/27, &(0x7f00000003c0)=0x1b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getneightbl={0x14, 0x42, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xf7bc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000680)={r7, 0x54, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x5, @mcast2, 0x5}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x80}, @in6={0xa, 0x4e20, 0x7824, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000006c0)=0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xfff7}]}, 0x1c}}, 0xb50d69c53d36c3e7) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b00)={0x348, 0x14, 0x20, 0x70bd2b, 0x25dfdbfb, {0x27, 0xd}, [@INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "c65c61f69ba443040744993f3e4225ce861f712dc389083156bcf0313c6341c838f82bfb8386fa2cce237580045fc8e68c0554fe37c8ce2de895e166a4199ca6f1fde4500f6f89e43f2b13f75c6a330d7b64faad2f9ef9afe0ff489ac4532dbd7e10a524755f1e8d4db93f17bb8ebea4f268047f020f6b234396bbfc6be779ff02ad44844969bba9a0b252a147a9e81e248e005f5d1c2fc2fc8f50e3e24a404432a07428358dcdc65c9fbdd80044409a8a2ece4ca20cb6d61d49f102673a1a7185e920591852c3025d6f874318c75e4a7de21164ea5cfcfbf16880bece9f5d5f948b28afa6cfb54be5ff3b09658fa5"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "f40a42aa80f5f0fc831696032abdbbca7770c74649f4fa68cad064273a0d46bb3ebdd0730ec1d7263963b299657dbd63efd838e83043d39d380d1b1b739ca1a00e1425c18dbe6f5c16d500564c07f781984879269b6ed83d74be7bd503dd57266818997283ee1bfcd4eb4e0bc2a0349a554ba7b545b8c52e35e47982c51ec3a849c056fdd20426f0844902debb600255baa4a8146b3b5ad2f047bcbc6e5a42979505661e13b8986a9eb6fbda4aab2b0e427abc"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "4efc4c8212b0a6a96aa4c10ddc20a418f719c9f5452f58828625b779bebecbf7ff90612032e686f3c452fd05b5cea038e491e6ce3691de7d7da2f06b7d4c0e3a7c275aedc5e8f95012318a6f34d93dd17843670491a91001d7b4302a9f0726952fa274db5db4673b8d78aefdef375e28256a84dcb5025fd58fc42895993a8ee971bed11bdfe2cae1ddaa6640184505576d0db5a4f324ab71009e1eef6b834c19425b5cb442ce0b80c411868c926069ae6385d736f978fc6a6c20dd0bc22c5d22a3726d7def63bea286a163a677f42970fd1c71"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "8f7a72530886b86bd60733b997cb24e88d3df5d2df736e9639b9a0bf6ab1217a4592320a15039eab3160d5f7dbca07f25bbce4e8ab59f191cc0df2a6870fc536b75d012497af62bde981cd75483fc4a6cabb72752aa544f7023da6a57b4f419d650450a7fd778856081fe72d93ad0d407a32404f5f96"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "fb76c6166ed04848351e7d6b0371365134b6c7d8f5fd"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "b58b953576062b"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "febd72a34c95419f"}]}, 0x348}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x600a}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x42, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001040)={'bridge0\x00', @broadcast}) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000001080)={0x80}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001240)={r9, &(0x7f0000001140)='l2tp\x00', 0x48780, &(0x7f0000001180)={@_ha_fsid={[0x0, 0x2]}, {0x1, 0xff, 0xe, 0x4}}, 0x10000, &(0x7f00000011c0), &(0x7f0000001200)=0x9}) bind$xdp(r12, &(0x7f0000001280)={0x2c, 0xd, 0x0, 0x26}, 0x10) kernel console output (not intermixed with test programs): vsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.886297][ T6818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.921595][ T6818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.953309][ T6818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.190521][ T6819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.213379][ T6819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.302173][T17142] xt_hashlimit: invalid interval [ 377.323774][T17134] nbd1: detected capacity change from 0 to 127 [ 377.437651][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.449309][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3175'. [ 377.471243][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.590800][T17151] sctp: [Deprecated]: syz.3.3176 (pid 17151) Use of int in max_burst socket option deprecated. [ 377.590800][T17151] Use struct sctp_assoc_value instead [ 377.613179][T17151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3176'. [ 377.630609][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3176'. [ 377.743212][T17158] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 377.832358][T17158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.870959][ T50] block nbd1: Receive control failed (result -104) [ 378.055376][T17166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.138947][T17174] syzkaller0: entered promiscuous mode [ 378.160441][T17174] syzkaller0: entered allmulticast mode [ 378.192295][T17174] 0: reclassify loop, rule prio 0, protocol 800 [ 378.567313][T17187] xt_time: unknown flags 0xf4 [ 378.599646][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.615224][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.631777][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.641861][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.654014][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.666909][ T5144] Bluetooth: hci2: command tx timeout [ 378.670549][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.686504][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.773107][T17194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.782116][T17194] tipc: Enabled bearer , priority 0 [ 378.789731][T17194] syzkaller0: entered promiscuous mode [ 378.795361][T17194] syzkaller0: entered allmulticast mode [ 378.820797][T17194] tipc: Resetting bearer [ 378.826754][T17194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.865231][T17193] tipc: Resetting bearer [ 378.942260][T17193] tipc: Disabling bearer [ 379.048092][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 379.166011][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 380.159653][T17253] bridge0: entered allmulticast mode [ 380.248190][T17189] chnl_net:caif_netlink_parms(): no params data found [ 380.269886][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'. [ 380.452966][T17265] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.509451][T17265] openvswitch: netlink: Key type 343 is out of range max 32 [ 380.634423][T17189] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.643722][T17189] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.653264][T17189] bridge_slave_0: entered allmulticast mode [ 380.662222][T17189] bridge_slave_0: entered promiscuous mode [ 380.672208][T17189] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.679575][T17189] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.687025][T17189] bridge_slave_1: entered allmulticast mode [ 380.695897][T17189] bridge_slave_1: entered promiscuous mode [ 380.749162][ T5828] Bluetooth: hci1: command tx timeout [ 380.806672][T17189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.823987][T17189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.883162][T17189] team0: Port device team_slave_0 added [ 380.896268][T17278] netlink: 'syz.0.3206': attribute type 3 has an invalid length. [ 380.937557][T17189] team0: Port device team_slave_1 added [ 380.955512][T17282] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 380.976815][T17282] xt_TCPMSS: Only works on TCP SYN packets [ 380.998184][T17282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3208'. [ 381.027071][T17189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.048794][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.144148][T17189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.173651][T17189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.181095][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.194486][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3209'. [ 381.216383][T17189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.237393][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3201'. [ 381.467358][T17189] hsr_slave_0: entered promiscuous mode [ 381.496893][T17189] hsr_slave_1: entered promiscuous mode [ 381.512784][T17189] debugfs: 'hsr0' already exists in 'hsr' [ 381.529134][T17189] Cannot create hsr debugfs directory [ 381.861737][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.918138][T17314] netlink: 'syz.0.3218': attribute type 1 has an invalid length. [ 382.320101][T17189] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.540893][T17189] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.577996][T17334] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 382.604762][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.626355][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.669545][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.691713][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.707274][T17189] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.757985][T17333] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 382.785499][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.804719][T17333] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3224'. [ 382.819563][ T5828] Bluetooth: hci1: command tx timeout [ 382.840497][T17189] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.198086][T17352] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 383.369336][T17354] pimreg: entered allmulticast mode [ 383.394643][T17189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.442697][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.460624][T17189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.491533][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.521021][T17189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.545447][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.561393][T17361] netlink: 'syz.1.3233': attribute type 11 has an invalid length. [ 383.579672][T17189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.641979][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.004324][T17389] sch_fq: defrate 0 ignored. [ 384.172506][T17189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.256705][T17189] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.306585][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.313874][ T6828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.360789][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.368154][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.431855][T17408] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.480468][T17411] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xe [ 384.630293][T17418] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 384.899571][ T5828] Bluetooth: hci1: command tx timeout [ 385.487428][T17446] netlink: 'syz.4.3257': attribute type 15 has an invalid length. [ 385.495704][T17446] __nla_validate_parse: 7 callbacks suppressed [ 385.495721][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 385.562918][ T6828] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 385.596348][ T6828] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 385.631573][ T6828] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 385.667607][ T6828] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 385.726260][T17189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.908203][T17189] veth0_vlan: entered promiscuous mode [ 385.949473][T17189] veth1_vlan: entered promiscuous mode [ 386.064346][T17189] veth0_macvtap: entered promiscuous mode [ 386.087797][T17471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.095200][T17471] IPv6: NLM_F_CREATE should be set when creating new route [ 386.102971][T17471] IPv6: NLM_F_CREATE should be set when creating new route [ 386.137275][T17189] veth1_macvtap: entered promiscuous mode [ 386.188395][T17189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.222674][T17189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.241786][ T6813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.268521][ T6813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.310439][ T6803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.330450][ T6803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.437271][T17480] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 386.457602][T17480] team0 (unregistering): Port device team_slave_0 removed [ 386.504458][T17480] team0 (unregistering): Failed to send options change via netlink (err -105) [ 386.527280][T17480] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 386.553031][T17480] team0 (unregistering): Port device team_slave_1 removed [ 386.766940][ T6828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.803698][ T6828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.937520][ T6810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.945692][ T6810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.979200][ T5828] Bluetooth: hci1: command tx timeout [ 387.228443][T17509] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3184'. [ 387.255685][ T30] audit: type=1800 audit(1776952052.056:8): pid=17505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3277" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 387.282627][T17505] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 387.293055][T17505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 387.335142][T17505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 387.585049][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3280'. [ 387.808669][T17522] netlink: 'syz.4.3281': attribute type 3 has an invalid length. [ 387.951759][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3283'. [ 387.991450][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.008569][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.019415][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.032778][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.042779][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.228230][T17540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3285'. [ 388.270045][ T6803] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.351310][T17540] bond0: entered allmulticast mode [ 388.367481][T17540] bond_slave_0: entered allmulticast mode [ 388.376909][T17540] bond_slave_1: entered allmulticast mode [ 388.750477][T17562] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 388.758569][T17562] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3292'. [ 388.944300][ T6819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.965271][ T6819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.212340][ T6819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.224478][ T6819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.285272][T17531] chnl_net:caif_netlink_parms(): no params data found [ 389.331998][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3297'. [ 389.387497][T17585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.592666][ T6819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.649580][ T6819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.689212][T17585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.696643][T17585] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 389.718896][T17585] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 389.764236][T17585] bond3: (slave xfrm1): making interface the new active one [ 389.799949][T17585] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 390.059430][T17619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3307'. [ 390.102150][ T5828] Bluetooth: hci4: command tx timeout [ 390.136979][T17623] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 390.405069][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3308'. [ 390.822799][T17623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.865806][T17624] bond1: (slave veth0_to_bond): making interface the new active one [ 390.880493][T17624] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 390.956550][T17640] Bluetooth: MGMT ver 1.23 [ 391.084182][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.110096][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.126527][T17531] bridge_slave_0: entered allmulticast mode [ 391.137047][T17531] bridge_slave_0: entered promiscuous mode [ 391.181962][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.202412][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.227559][T17531] bridge_slave_1: entered allmulticast mode [ 391.244062][T17531] bridge_slave_1: entered promiscuous mode [ 391.336726][T17531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.351846][T17531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.657532][T17531] team0: Port device team_slave_0 added [ 391.698531][T17531] team0: Port device team_slave_1 added [ 391.982817][T17531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.007801][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.042337][T17686] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 392.068838][T17531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.082317][T17531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.090618][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.133942][T17531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.179814][ T5828] Bluetooth: hci4: command tx timeout [ 392.190197][ T6819] vlan2: left allmulticast mode [ 392.201485][ T6819] geneve0: left allmulticast mode [ 392.215857][ T6819] bridge0: port 3(vlan2) entered disabled state [ 392.572181][ T6819] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 392.636957][ T6819] gretap0 (unregistering): left promiscuous mode [ 392.685495][ T6819] bond4 (unregistering): (slave geneve3): Releasing active interface [ 392.732583][ T6819] bridge0 (unregistering): left allmulticast mode [ 392.835645][ T6819] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 393.095732][ T6819] .`¹ (unregistering): (slave wlan1): Releasing backup interface [ 393.116956][ T6819] .`¹ (unregistering): Released all slaves [ 393.128521][ T6819] bond1 (unregistering): Released all slaves [ 393.153334][ T6819] bond2 (unregistering): Released all slaves [ 393.171857][ T6819] bond3 (unregistering): Released all slaves [ 393.188389][ T6819] bond4 (unregistering): Released all slaves [ 393.213152][ T6819] bond5 (unregistering): Released all slaves [ 393.233259][ T6819] bond6 (unregistering): Released all slaves [ 393.255109][ T6819] bond7 (unregistering): Released all slaves [ 393.275401][ T6819] bond8 (unregistering): Released all slaves [ 393.301066][ T6819] bond0 (unregistering): Released all slaves [ 393.320266][ T6819] bond9 (unregistering): Released all slaves [ 393.344905][ T6819] bond10 (unregistering): Released all slaves [ 393.364218][ T6819] bond11 (unregistering): Released all slaves [ 393.605673][T17531] hsr_slave_0: entered promiscuous mode [ 393.637315][T17531] hsr_slave_1: entered promiscuous mode [ 393.651494][T17531] debugfs: 'hsr0' already exists in 'hsr' [ 393.667474][T17531] Cannot create hsr debugfs directory [ 393.676166][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3331'. [ 393.742615][T17710] netlink: 'syz.1.3333': attribute type 3 has an invalid length. [ 393.765071][T17710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3333'. [ 393.794223][ T6819] : left promiscuous mode [ 393.839435][T17710] sctp: [Deprecated]: syz.1.3333 (pid 17710) Use of int in max_burst socket option. [ 393.839435][T17710] Use struct sctp_assoc_value instead [ 393.977796][T17714] netlink: 'syz.0.3334': attribute type 1 has an invalid length. [ 394.203090][T17722] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 394.235776][T17727] netlink: 'syz.3.3337': attribute type 10 has an invalid length. [ 394.244875][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 394.258799][ T5828] Bluetooth: hci4: command tx timeout [ 394.270704][ T6819] tipc: Left network mode [ 394.284558][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 394.296657][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.335259][T17727] bridge_slave_1: left allmulticast mode [ 394.388304][T17727] bridge_slave_1: left promiscuous mode [ 394.406177][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.475282][T17727] bridge_slave_1: entered allmulticast mode [ 394.503274][T17727] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 394.931376][T17754] bond0: left allmulticast mode [ 394.944847][T17754] bond_slave_0: left allmulticast mode [ 394.958147][T17754] bond_slave_1: left allmulticast mode [ 394.992094][T17754] bridge_slave_1: left allmulticast mode [ 395.033089][T17754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.937530][T17789] netlink: 'syz.1.3346': attribute type 1 has an invalid length. [ 395.954110][T17789] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3346'. [ 395.990097][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'. [ 396.015057][T17789] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3346'. [ 396.028379][T17789] netlink: 'syz.1.3346': attribute type 3 has an invalid length. [ 396.040980][T17789] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3346'. [ 396.070365][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.226452][T17798] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 396.340122][ T5828] Bluetooth: hci4: command tx timeout [ 396.385100][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3351'. [ 396.456769][T17798] bond2: entered promiscuous mode [ 396.465781][T17798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.606177][T17821] xt_hashlimit: size too large, truncated to 1048576 [ 396.787444][T17805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3351'. [ 396.889796][T17809] vlan2: entered promiscuous mode [ 396.907783][T17809] geneve1: entered promiscuous mode [ 396.917011][T17809] vlan2: entered allmulticast mode [ 396.922586][T17809] geneve1: entered allmulticast mode [ 397.449835][ T6819] hsr_slave_0: left promiscuous mode [ 397.472957][ T6819] 0·: left promiscuous mode [ 397.554648][ T6819] veth1_macvtap: left promiscuous mode [ 397.570999][ T6819] veth0_macvtap: left promiscuous mode [ 397.586522][ T6819] veth1_vlan: left promiscuous mode [ 397.596826][T17850] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 398.922818][T17531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.028433][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.045687][T17531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.073793][T17884] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 399.086252][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.135470][T17888] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 399.159639][T17531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.223245][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.297140][T17884] bond3: entered promiscuous mode [ 399.307065][T17884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.318007][T17888] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 399.363111][T17894] bond3: (slave bridge1): making interface the new active one [ 399.380363][T17894] bridge1: entered promiscuous mode [ 399.415102][T17894] bridge1: left promiscuous mode [ 399.557712][T17531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.605683][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.757171][ T6819] IPVS: stop unused estimator thread 0... [ 399.916412][T17934] __nla_validate_parse: 4 callbacks suppressed [ 399.916432][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 400.035272][T17934] netlink: 'syz.3.3374': attribute type 5 has an invalid length. [ 400.087942][T17938] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3373'. [ 400.112171][T17934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3374'. [ 400.242384][T17531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.389517][T17531] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.446876][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.454171][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.515104][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.522486][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.584924][T17957] openvswitch: netlink: IP tunnel dst address not specified [ 400.748269][T17963] x_tables: duplicate underflow at hook 2 [ 400.934653][T17971] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20002 [ 400.985781][T17971] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 401.395360][T17531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.493548][T17998] netlink: 'syz.1.3391': attribute type 9 has an invalid length. [ 401.529262][T17999] netlink: 'syz.1.3391': attribute type 9 has an invalid length. [ 401.619838][T17531] veth0_vlan: entered promiscuous mode [ 401.732407][T17531] veth1_vlan: entered promiscuous mode [ 401.824148][T17531] veth0_macvtap: entered promiscuous mode [ 401.855026][T18013] openvswitch: netlink: IP tunnel dst address not specified [ 401.875714][T17531] veth1_macvtap: entered promiscuous mode [ 401.989430][T17531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.052645][T17531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.114940][ T6819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.139837][ T6819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.155750][T18023] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3397'. [ 402.184753][ T6819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.210643][ T6819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.571237][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'. [ 402.657466][ T6803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.686321][ T6803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.844055][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'. [ 402.986337][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'. [ 403.037565][T18055] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 403.058603][T18055] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.245969][ T6803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.261270][ T6803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.436775][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 403.476410][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 403.496347][T18077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3278'. [ 403.531714][T18077] ipt_ECN: cannot use operation on non-tcp rule [ 403.647880][T18070] veth1_macvtap: left promiscuous mode [ 403.666156][T18070] macsec0: entered promiscuous mode [ 403.673477][T18080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.695459][T18070] macsec0: entered allmulticast mode [ 403.907658][T18092] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 404.003714][T18104] tc_dump_action: action bad kind [ 404.338291][T18113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.471912][T18136] netlink: 'syz.0.3419': attribute type 10 has an invalid length. [ 404.635254][T18143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.655661][T18140] macvlan0: entered promiscuous mode [ 404.849130][T18152] openvswitch: netlink: EtherType 50a is less than min 600 [ 404.849167][T18146] syzkaller0: entered promiscuous mode [ 404.869510][T18146] syzkaller0: entered allmulticast mode [ 405.038356][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.303628][T18178] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 405.318596][T18174] __nla_validate_parse: 3 callbacks suppressed [ 405.318614][T18174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3433'. [ 405.418518][T18180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.428505][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 405.510304][T18182] netlink: 'syz.0.3433': attribute type 9 has an invalid length. [ 405.571896][T18184] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3438'. [ 405.710481][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3441'. [ 405.801128][T18194] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 405.819918][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 405.831189][T18191] syzkaller0: entered allmulticast mode [ 405.996982][T18206] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3444'. [ 406.006956][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 406.578085][T18233] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3455'. [ 406.599638][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'. [ 407.027755][T18247] bond2: option fail_over_mac: invalid value (16) [ 407.092145][T18247] bond2 (unregistering): Released all slaves [ 407.266489][T18253] xt_CT: No such helper "snmp_trap" [ 407.322157][T18259] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 407.463146][T18269] nft_compat: unsupported protocol 1 [ 407.475834][ T516] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 30 seconds [ 407.493695][ T516] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,1024B). Runtime 30 seconds [ 407.504944][ T516] block nbd1: Possible stuck request ffff888026bbe380: control (read@2048,1024B). Runtime 30 seconds [ 407.515611][T18270] nft_compat: unsupported protocol 1 [ 407.516527][ T516] block nbd1: Possible stuck request ffff888026bbe540: control (read@3072,1024B). Runtime 30 seconds [ 407.696183][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3466'. [ 407.706190][T18275] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 407.766652][T18275] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 407.827178][T18275] bond5: (slave ip6gre1): making interface the new active one [ 407.836485][T18275] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 407.852360][T18283] netlink: 'syz.1.3468': attribute type 64 has an invalid length. [ 408.275583][T18305] nbd: must specify a size in bytes for the device [ 408.516355][T18309] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.524971][T18309] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.582147][T18315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.757793][T18318] smc: net device team0 applied user defined pnetid SYZ2 [ 408.992437][T18344] delete_channel: no stack [ 409.294069][T18358] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 409.311391][T18358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.735569][T18373] ip6tnl1: entered allmulticast mode [ 410.404178][T18396] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 410.540843][T18396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.073707][T18414] __nla_validate_parse: 16 callbacks suppressed [ 411.073728][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3508'. [ 411.335748][T18430] netlink: 'syz.4.3511': attribute type 21 has an invalid length. [ 411.366505][T18430] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3511'. [ 411.409624][T18430] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3511'. [ 411.653041][T18443] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3514'. [ 412.231132][T18458] netlink: 'syz.1.3518': attribute type 6 has an invalid length. [ 412.533172][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3520'. [ 412.732484][T18478] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 412.751939][T18478] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3522'. [ 412.886867][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 412.928796][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 413.048136][T18493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.338348][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3533'. [ 413.406314][T18515] netlink: 'syz.3.3534': attribute type 1 has an invalid length. [ 413.613604][T18515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.792300][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'. [ 413.939347][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 414.116659][T18544] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 414.790055][T18579] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 415.426897][T18623] tipc: Can't bind to reserved service type 1 [ 415.604313][T18631] netlink: 'syz.1.3567': attribute type 2 has an invalid length. [ 415.626938][T18631] netlink: 'syz.1.3567': attribute type 4 has an invalid length. [ 415.838481][T18642] block nbd1: Unsupported socket: should be TCP or UNIX. [ 415.928996][T18645] netlink: 'syz.0.3569': attribute type 16 has an invalid length. [ 415.956159][T18645] netlink: 'syz.0.3569': attribute type 17 has an invalid length. [ 416.028584][T18640] veth1_to_bond: entered promiscuous mode [ 416.053641][T18644] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.063489][T18644] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.123525][T18645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.147325][T18622] veth1_to_bond: left promiscuous mode [ 416.696432][T18665] netlink: 'syz.4.3572': attribute type 21 has an invalid length. [ 416.772346][T18674] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 416.772346][T18674] Please contact the netfilter-devel mailing list or update your nftables rules. [ 417.071409][T18688] __nla_validate_parse: 12 callbacks suppressed [ 417.071429][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'. [ 417.222337][T18696] netlink: 'syz.3.3577': attribute type 23 has an invalid length. [ 417.371121][T18702] syzkaller1: entered promiscuous mode [ 417.386992][T18702] syzkaller1: entered allmulticast mode [ 417.480921][T18704] netlink: 'syz.3.3581': attribute type 4 has an invalid length. [ 417.515719][T18704] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3581'. [ 417.525969][T18702] pim6reg1: entered promiscuous mode [ 417.560889][T18702] pim6reg1: entered allmulticast mode [ 417.637308][T18704] .`: renamed from bond0 (while UP) [ 417.781827][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3583'. [ 417.793268][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3583'. [ 418.016802][T18719] can: request_module (can-proto-3) failed. [ 418.173605][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'. [ 418.240780][T18732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.981040][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.006685][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 419.047065][T18767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3599'. [ 419.393728][T18780] sctp: [Deprecated]: syz.3.3603 (pid 18780) Use of int in max_burst socket option deprecated. [ 419.393728][T18780] Use struct sctp_assoc_value instead [ 419.583385][T18798] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 419.626904][ T6817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.642939][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.654532][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.673793][T18798] macvlan0: entered promiscuous mode [ 420.021224][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.027509][T18816] netlink: 294 bytes leftover after parsing attributes in process `syz.3.3612'. [ 420.065235][T18816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.135553][T18817] bridge1: entered promiscuous mode [ 420.156448][T18817] bridge1: entered allmulticast mode [ 420.262114][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.272996][ T6813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.284348][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.305020][T18824] netlink: 'syz.1.3615': attribute type 61 has an invalid length. [ 420.344452][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3615'. [ 420.451842][T18836] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3615'. [ 421.092980][T18861] team0: Port device team_slave_0 removed [ 421.610853][T18900] netlink: 'syz.2.3633': attribute type 3 has an invalid length. [ 421.632043][T18900] netlink: 'syz.2.3633': attribute type 3 has an invalid length. [ 421.705561][T18905] veth1_to_team: entered allmulticast mode [ 421.788296][T18912] netlink: 'syz.1.3636': attribute type 2 has an invalid length. [ 422.091073][T18925] syzkaller0: entered promiscuous mode [ 422.100550][T18925] syzkaller0: entered allmulticast mode [ 422.103705][T10879] net_ratelimit: 2 callbacks suppressed [ 422.103764][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.135452][T18928] __nla_validate_parse: 7 callbacks suppressed [ 422.135473][T18928] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3642'. [ 422.194237][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.216710][T18928] syzkaller0: entered allmulticast mode [ 422.450569][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'. [ 422.460243][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'. [ 423.032834][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.067347][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.088220][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.099991][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.117637][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.155029][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.174653][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.201412][T18970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.207728][T18971] kthread_run failed with err -4 [ 423.338344][ T172] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 423.349134][T18982] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 423.380031][T18982] bond6 (unregistering): Released all slaves [ 423.643089][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 424.471148][T19013] netlink: 'syz.0.3670': attribute type 7 has an invalid length. [ 424.479198][T19013] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3670'. [ 424.541390][T19015] netlink: 'syz.0.3671': attribute type 1 has an invalid length. [ 424.573794][T19015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.605707][T19015] bond2: (slave veth0_to_bond): making interface the new active one [ 424.620865][T19015] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 424.876419][T19028] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 424.886756][T19028] netlink: 'syz.0.3674': attribute type 3 has an invalid length. [ 424.897488][T19028] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3674'. [ 425.015837][ T6813] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 425.152730][ T6813] bond13 (unregistering): (slave geneve5): Releasing active interface [ 425.169208][ T6813] bond10 (unregistering): (slave geneve4): Releasing active interface [ 425.198503][ T6813] bond2 (unregistering): (slave geneve2): Releasing active interface [ 425.250153][ T6813] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 425.258781][ T6813] bridge2 (unregistering): left promiscuous mode [ 425.293381][ T6813] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 425.303420][ T6813] bridge3 (unregistering): left promiscuous mode [ 425.334550][ T6813] team0: Port device bridge4 removed [ 425.653965][ T6813] bond0 (unregistering): left promiscuous mode [ 425.665102][ T6813] bond0 (unregistering): Released all slaves [ 425.677525][ T6813] bond1 (unregistering): Released all slaves [ 425.694734][ T6813] bond2 (unregistering): Released all slaves [ 425.724844][ T6813] bond3 (unregistering): Released all slaves [ 425.742471][ T6813] bond4 (unregistering): Released all slaves [ 425.759543][ T6813] bond5 (unregistering): Released all slaves [ 425.776619][ T6813] bond6 (unregistering): (slave vlan2): Releasing active interface [ 425.788438][ T6813] bond6 (unregistering): Released all slaves [ 425.809928][ T6813] bond7 (unregistering): Released all slaves [ 425.828199][ T6813] bond8 (unregistering): Released all slaves [ 425.846877][ T6813] bond9 (unregistering): Released all slaves [ 425.870269][ T6813] bond10 (unregistering): Released all slaves [ 425.887114][ T6813] bond11 (unregistering): Released all slaves [ 425.907224][ T6813] bond12 (unregistering): Released all slaves [ 425.926775][ T6813] bond13 (unregistering): Released all slaves [ 425.949674][ T6813] bond14 (unregistering): Released all slaves [ 426.164382][ T6813] tipc: Left network mode [ 426.232331][T18976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.732180][T19048] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3681'. [ 426.803987][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 427.064575][T19061] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3684'. [ 427.109589][T19061] unsupported nlmsg_type 40 [ 427.127922][T19048] tipc: Started in network mode [ 427.146732][T19048] tipc: Node identity a6bdd1c5e22e, cluster identity 4711 [ 427.200401][T19048] tipc: Enabled bearer , priority 0 [ 427.253109][T19055] syzkaller0: entered promiscuous mode [ 427.266914][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 427.289062][T19055] syzkaller0: entered allmulticast mode [ 427.314472][ T10] net_ratelimit: 165 callbacks suppressed [ 427.314492][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.387597][T19047] tipc: Resetting bearer [ 427.397545][T19067] openvswitch: netlink: Message has 8 unknown bytes. [ 427.432973][T19067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.511336][T19047] tipc: Disabling bearer [ 427.637174][ T6813] veth1_vlan: left allmulticast mode [ 427.651779][ T6813] veth1_vlan: left promiscuous mode [ 427.667478][ T6813] veth1_macvtap: left promiscuous mode [ 427.680096][ T6813] veth0_macvtap: left promiscuous mode [ 427.701072][ T6813] veth0_vlan: left promiscuous mode [ 428.033513][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.044071][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.052602][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.100261][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.108732][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.117276][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.134660][T19097] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.174424][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.434360][T19105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.532383][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 429.148394][T19114] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 429.198264][T19114] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 429.209932][T19114] gretap1: entered promiscuous mode [ 429.217299][T19114] gretap1: entered allmulticast mode [ 429.223137][T19122] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 429.437233][T19140] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3702'. [ 429.667160][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 429.687529][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 429.765927][T19145] syzkaller0: entered promiscuous mode [ 429.792109][T19145] syzkaller0: entered allmulticast mode [ 429.866256][ T6813] IPVS: stop unused estimator thread 0... [ 430.563970][ T48] bond5 (unregistering): (slave gretap2): Releasing active interface [ 430.603080][ T48] bond9 (unregistering): (slave gretap3): Releasing active interface [ 430.646496][ T48] bond8 (unregistering): (slave geneve4): Releasing active interface [ 430.730738][ T48] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 430.854391][ T48] bond5 (unregistering): (slave bridge4): Releasing active interface [ 431.040576][ T48] .`¹ (unregistering): (slave bridge_slave_1): Releasing backup interface [ 431.050422][ T48] bridge_slave_1: left allmulticast mode [ 431.056784][ T48] .`¹ (unregistering): Released all slaves [ 431.086966][ T48] bond0 (unregistering): Released all slaves [ 431.108358][ T48] bond1 (unregistering): Released all slaves [ 431.150602][ T48] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 431.161152][ T48] bond2 (unregistering): Released all slaves [ 431.189730][ T48] bond3 (unregistering): Released all slaves [ 431.206766][ T48] bond4 (unregistering): Released all slaves [ 431.223401][ T48] bond5 (unregistering): Released all slaves [ 431.246613][ T48] bond6 (unregistering): (slave vlan3): Releasing active interface [ 431.266596][ T48] bond6 (unregistering): Released all slaves [ 431.283538][ T48] bond7 (unregistering): Released all slaves [ 431.302448][ T48] bond8 (unregistering): Released all slaves [ 431.321969][ T48] bond9 (unregistering): Released all slaves [ 431.344555][ T48] bond10 (unregistering): Released all slaves [ 431.596415][T19200] netlink: 'syz.0.3719': attribute type 1 has an invalid length. [ 431.706781][T19200] bond3: entered promiscuous mode [ 431.714128][T19200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.728430][T19209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3721'. [ 431.793275][ T48] tipc: Disabling bearer [ 431.819420][ T48] tipc: Left network mode [ 431.926960][T19208] bond3: (slave bridge1): making interface the new active one [ 431.973763][T19208] bridge1: entered promiscuous mode [ 432.039954][T19208] bridge1: left promiscuous mode [ 432.132648][T19216] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3725'. [ 432.323137][T19213] bond0: entered promiscuous mode [ 432.328243][T19213] bond_slave_0: entered promiscuous mode [ 432.334572][T19213] bond_slave_1: entered promiscuous mode [ 432.344176][T19213] batadv0: entered promiscuous mode [ 432.352579][T19213] debugfs: 'hsr1' already exists in 'hsr' [ 432.358387][T19213] Cannot create hsr debugfs directory [ 432.377701][T19213] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 432.386523][T19213] bond0: left promiscuous mode [ 432.392330][T19213] bond_slave_0: left promiscuous mode [ 432.398183][T19213] bond_slave_1: left promiscuous mode [ 432.405978][T19213] batadv0: left promiscuous mode [ 432.499863][T10879] net_ratelimit: 52 callbacks suppressed [ 432.499884][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.644826][T19222] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.3727'. [ 432.658141][T19230] Cannot find set identified by id 0 to match [ 432.710130][T19234] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3730'. [ 432.721624][T19232] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 432.817968][T19232] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3729'. [ 433.078078][T19245] nbd: nbd1 already in use [ 433.085067][T19245] nbd: must specify an index to disconnect [ 433.095589][T19245] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 433.104345][T19245] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 433.130003][T19250] sctp: [Deprecated]: syz.3.3736 (pid 19250) Use of int in max_burst socket option. [ 433.130003][T19250] Use struct sctp_assoc_value instead [ 433.310573][T19264] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 433.387887][T19268] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 433.432870][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3737'. [ 433.549043][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.606253][T19247] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3734'. [ 433.702810][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.841925][T19280] bond6: Unable to set up delay as MII monitoring is disabled [ 433.862942][T19280] bond6 (unregistering): Released all slaves [ 433.988788][ T48] hsr_slave_0: left promiscuous mode [ 434.005853][ T48] hsr_slave_1: left promiscuous mode [ 434.040675][T19291] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3747'. [ 434.061760][T19291] nbd: illegal input index -8454144 [ 434.062156][T19293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3746'. [ 434.500804][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.581249][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.962334][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3751'. [ 434.985788][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.233701][T19341] netlink: 'syz.1.3758': attribute type 6 has an invalid length. [ 435.633853][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.660637][T19360] netlink: 'syz.0.3763': attribute type 13 has an invalid length. [ 435.693958][T19360] netlink: 'syz.0.3763': attribute type 58 has an invalid length. [ 435.737495][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3761'. [ 435.753039][T19360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3763'. [ 435.768175][T19365] openvswitch: netlink: Flow key attr not present in new flow. [ 435.782677][ T48] IPVS: stop unused estimator thread 0... [ 436.607027][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.619992][T19405] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 436.660568][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.674890][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.724043][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.757940][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.789902][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.857421][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.920819][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 436.964197][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 437.002945][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 437.045797][T19406] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 437.144642][T19429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.195574][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.203349][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.366351][T19431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.404577][T19438] macvlan2: entered promiscuous mode [ 437.412577][T19438] macvlan2: entered allmulticast mode [ 437.439802][T19441] bond0: (slave ip6gretap1): making interface the new active one [ 437.453887][T19441] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 437.550115][ T516] block nbd1: Connection timed out, retrying (0/1 alive) [ 437.559597][ T516] block nbd1: Connection timed out, retrying (0/1 alive) [ 437.567764][ T516] block nbd1: Connection timed out, retrying (0/1 alive) [ 437.575623][ T516] block nbd1: Connection timed out, retrying (0/1 alive) [ 437.584780][ T516] block nbd1: Dead connection, failed to find a fallback [ 437.598309][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.698927][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.862847][T19442] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.928042][T19442] bond6 (unregistering): Released all slaves [ 438.423146][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.431981][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.440448][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.498715][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.507223][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.515693][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.551840][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.560308][T19494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.581334][T19500] __nla_validate_parse: 3 callbacks suppressed [ 438.581359][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3794'. [ 438.612935][T19503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3794'. [ 438.646447][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3794'. [ 438.688783][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3794'. [ 438.945960][T19517] 8021q: VLANs not supported on tunl0 [ 439.515529][T19533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.551854][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 439.634509][T19533] macvlan3: entered promiscuous mode [ 439.669973][T19533] macvlan3: entered allmulticast mode [ 440.104214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.614465][T19578] syzkaller1: entered promiscuous mode [ 440.654627][T19578] syzkaller1: entered allmulticast mode [ 441.144308][T19594] syzkaller0: entered promiscuous mode [ 441.160050][T19594] syzkaller0: entered allmulticast mode [ 441.407786][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 441.457661][T19612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3821'. [ 441.471566][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3821'. [ 441.673764][T19619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.867676][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3826'. [ 442.025862][ T10] IPVS: starting estimator thread 0... [ 442.036509][T19636] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 442.120011][T19638] IPVS: using max 26 ests per chain, 62400 per kthread [ 442.907206][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3841'. [ 442.932744][T19680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.955325][T19680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.970840][T19680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.979929][T19680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.055637][T19683] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 443.114114][T10879] net_ratelimit: 104 callbacks suppressed [ 443.114136][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.188419][T19678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.281243][T19678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.371080][T19678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.444926][T19678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.551899][ T6808] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.568420][ T6808] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.590906][ T6813] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.607588][ T6819] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.699345][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.183088][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.580711][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.221682][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.260658][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.669596][ T5194] udevd[5194]: worker [11105] /devices/virtual/block/nbd1 is taking a long time [ 446.740719][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.299282][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.780543][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.340017][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.384653][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.779055][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.421044][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.462283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.503911][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.820020][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.543195][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.551695][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.179523][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.580956][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.821052][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.622085][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.860184][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.661534][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.701472][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.743336][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.899103][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.783889][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.823127][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.877074][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.886593][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.939433][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.904436][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.358209][T19696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3842'. [ 463.387520][T19697] : entered promiscuous mode [ 463.593050][T19710] validate_nla: 61 callbacks suppressed [ 463.593071][T19710] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 463.610261][T19710] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3849'. [ 463.685499][T19720] netlink: 'syz.2.3851': attribute type 5 has an invalid length. [ 463.715264][T19723] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 463.779633][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.941518][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.009265][T19723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.126495][T19709] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 464.285929][T19719] netlink: 'syz.0.3848': attribute type 10 has an invalid length. [ 464.356605][T19719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.394905][T19719] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 464.647912][T10846] IPVS: starting estimator thread 0... [ 464.709819][T19768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3860'. [ 464.759266][T19769] netlink: 'syz.1.3861': attribute type 1 has an invalid length. [ 464.769200][T19765] IPVS: using max 27 ests per chain, 64800 per kthread [ 464.781564][T19770] IPVS: sh: FWM 3 0x00000003 - no destination available [ 464.823768][T19770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.896125][T19777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3863'. [ 464.981001][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.006884][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.213763][T19788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3866'. [ 465.266152][T19788] netlink: 'syz.0.3866': attribute type 24 has an invalid length. [ 465.333590][T19788] syzkaller0: entered promiscuous mode [ 465.352992][T19788] syzkaller0: entered allmulticast mode [ 465.461988][T19795] netlink: 'syz.3.3870': attribute type 32 has an invalid length. [ 465.556529][T19803] tls_set_device_offload: netdev not found [ 465.600484][T19803] netlink: 'syz.3.3872': attribute type 10 has an invalid length. [ 465.615474][T19797] tipc: Enabled bearer , priority 0 [ 465.627653][T19797] syzkaller0: entered promiscuous mode [ 465.634502][T19803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3872'. [ 465.645203][T19797] syzkaller0: entered allmulticast mode [ 465.653296][T19803] batadv0: entered promiscuous mode [ 465.660819][T19803] batadv0: entered allmulticast mode [ 465.667114][T19803] bridge0: port 2(batadv0) entered blocking state [ 465.692700][T19803] bridge0: port 2(batadv0) entered disabled state [ 465.732634][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 465.752852][T19803] bridge0: port 2(batadv0) entered blocking state [ 465.759640][T19803] bridge0: port 2(batadv0) entered forwarding state [ 465.791834][T19810] lo: entered allmulticast mode [ 465.854363][T19810] lo: left allmulticast mode [ 465.870548][T19797] tipc: Resetting bearer [ 465.936935][T19793] tipc: Resetting bearer [ 466.014145][T19793] tipc: Disabling bearer [ 466.021938][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.191386][ T6808] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 466.203035][ T6808] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 466.322417][T19838] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3882'. [ 466.435095][T19843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 466.444111][T19844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 467.059114][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.619882][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.009367][T19914] netlink: 'syz.1.3903': attribute type 33 has an invalid length. [ 468.020215][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.059783][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 468.269492][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3908'. [ 468.673590][T19933] bond4 (unregistering): Released all slaves [ 468.687363][T19946] netlink: 'syz.2.3913': attribute type 11 has an invalid length. [ 468.735080][T19946] netlink: 'syz.2.3913': attribute type 11 has an invalid length. [ 468.755153][T19946] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3913'. [ 468.829181][ C0] net_ratelimit: 6 callbacks suppressed [ 468.829202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.899112][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.958895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.032330][T19949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.043240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.071700][T19949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.081232][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.098814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.141662][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.247945][T19967] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 471.975975][T19954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.989155][T19977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3918'. [ 472.494175][T20002] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 472.509825][T20002] bond5 (unregistering): Released all slaves [ 472.633982][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 472.782861][T20002] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 472.847683][T20002] bond5 (unregistering): Released all slaves [ 472.883132][T20026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3936'. [ 472.905079][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 472.950900][T20028] syzkaller0: entered promiscuous mode [ 472.956567][T20028] syzkaller0: entered allmulticast mode [ 472.984067][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 473.073602][T20002] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 473.111889][T20002] bond5 (unregistering): Released all slaves [ 473.171827][T20032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3936'. [ 473.273801][T20002] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 473.321760][T20002] bond5 (unregistering): Released all slaves [ 473.528486][T20053] netlink: 'syz.2.3940': attribute type 3 has an invalid length. [ 473.547983][T20053] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 473.898434][T20064] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 474.100332][T10887] net_ratelimit: 9 callbacks suppressed [ 474.100352][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.341229][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.539589][T20097] bond6: entered promiscuous mode [ 474.996776][T20128] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3957'. [ 475.013670][T20128] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3957'. [ 475.310324][T20127] nbd2: detected capacity change from 0 to 63 [ 475.391408][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.405054][ T5828] block nbd2: Receive control failed (result -104) [ 475.405581][ T50] block nbd2: Receive control failed (result -32) [ 475.624562][T20152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3961'. [ 475.662947][T20158] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3963'. [ 475.692025][T20152] netlink: 'syz.4.3961': attribute type 5 has an invalid length. [ 475.941438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.971525][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.108305][T20175] lo: entered promiscuous mode [ 476.154556][T20175] tunl0: entered promiscuous mode [ 476.205454][T20175] gre0: entered promiscuous mode [ 476.251697][T10846] IPVS: starting estimator thread 0... [ 476.285525][T20175] gretap0: entered promiscuous mode [ 476.347232][T20175] erspan0: entered promiscuous mode [ 476.359391][T20191] IPVS: using max 32 ests per chain, 76800 per kthread [ 476.391776][T20175] ip_vti0: entered promiscuous mode [ 476.419546][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.556592][T20200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3976'. [ 476.785152][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 476.825898][T20216] xfrm1: entered promiscuous mode [ 476.840348][T20216] xfrm1: entered allmulticast mode [ 476.854562][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 476.896383][T20221] tipc: Cannot configure node identity twice [ 477.139448][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.377090][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 477.392707][T20243] hsr_slave_0: left promiscuous mode [ 477.399812][T20243] hsr_slave_1: left promiscuous mode [ 477.459970][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.477714][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 477.490318][T20245] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 477.646291][T20249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3990'. [ 477.895682][T20266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.063698][T20274] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 478.082222][T20284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.531718][T20365] lo: left promiscuous mode [ 479.539922][T10846] net_ratelimit: 3 callbacks suppressed [ 479.539949][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.562586][T20366] netlink: 'syz.1.4026': attribute type 15 has an invalid length. [ 479.952881][T20387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.179694][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.193479][T20405] __nla_validate_parse: 4 callbacks suppressed [ 480.193503][T20405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4039'. [ 480.419716][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.491281][T20411] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 480.522812][T20411] bond7: option packets_per_slave: allowed values 0 - 65535 [ 480.541209][T20425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4046'. [ 480.558081][T20411] bond7 (unregistering): Released all slaves [ 480.581675][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.064493][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.354079][T20452] netlink: 'syz.4.4053': attribute type 58 has an invalid length. [ 481.376191][T20452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4053'. [ 481.410017][T20455] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4054'. [ 481.441212][T20455] netlink: 'syz.1.4054': attribute type 1 has an invalid length. [ 481.463922][T20453] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.477373][T20455] SET target dimension over the limit! [ 481.540648][T20461] netlink: 'syz.0.4055': attribute type 1 has an invalid length. [ 481.569469][T20464] netlink: 'syz.3.4057': attribute type 15 has an invalid length. [ 481.577547][T20464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4057'. [ 481.622409][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.699536][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.726740][T20461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.756531][T20475] netlink: 'syz.1.4058': attribute type 4 has an invalid length. [ 481.765381][T20475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4058'. [ 481.798127][T20479] sctp: [Deprecated]: syz.4.4059 (pid 20479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.798127][T20479] Use struct sctp_sack_info instead [ 481.832377][T20468] bond5: (slave veth3): Enslaving as an active interface with a down link [ 481.901654][T20483] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.911329][T20483] netlink: 'syz.4.4061': attribute type 1 has an invalid length. [ 481.946889][T20473] bond5: (slave dummy0): making interface the new active one [ 481.956244][T20473] dummy0: entered promiscuous mode [ 481.964283][T20473] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 482.000060][T20475] .`: renamed from bond0 (while UP) [ 482.114960][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4061'. [ 482.345788][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 482.373898][T20495] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4063'. [ 482.662910][T10879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.773569][T20517] netlink: 'syz.0.4069': attribute type 23 has an invalid length. [ 482.884741][T20517] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 482.918822][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4069'. [ 482.942033][T20517] netlink: 'syz.0.4069': attribute type 2 has an invalid length. [ 483.076581][T20517] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 483.112612][T20517] bond6 (unregistering): Released all slaves [ 483.143548][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 483.223321][T20546] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 484.025172][T20581] bond4: entered promiscuous mode [ 484.033944][T20581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.213439][T20581] bond4: (slave bridge2): making interface the new active one [ 484.256896][T20581] bridge2: entered promiscuous mode [ 484.322139][T20581] bridge2: left promiscuous mode [ 484.739909][T10878] net_ratelimit: 5 callbacks suppressed [ 484.739931][T10878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.395232][T20657] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 485.530940][T20660] syzkaller0: entered promiscuous mode [ 485.547051][T20660] syzkaller0: entered allmulticast mode [ 485.634160][T20653] __nla_validate_parse: 18 callbacks suppressed [ 485.634181][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 486.463856][T20705] Bluetooth: MGMT ver 1.23 [ 486.888572][T10887] IPVS: starting estimator thread 0... [ 486.979875][T20737] IPVS: using max 37 ests per chain, 88800 per kthread [ 487.155081][T20745] syzkaller1: entered promiscuous mode [ 487.174750][T20745] syzkaller1: entered allmulticast mode [ 487.397986][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 487.412024][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 487.584586][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 487.644761][T20766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4138'. [ 487.792754][T20776] syzkaller0: entered promiscuous mode [ 487.798491][T20776] syzkaller0: entered allmulticast mode [ 488.128223][T20792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'. [ 488.207379][T20798] vcan0: tx address claim with different name [ 488.224334][T20796] syzkaller1: entered promiscuous mode [ 488.243165][T20796] syzkaller1: entered allmulticast mode [ 488.288213][T20802] gtp1: entered promiscuous mode [ 488.293380][T20802] gtp1: entered allmulticast mode [ 488.537823][T10878] IPVS: starting estimator thread 0... [ 488.641479][T20811] IPVS: using max 27 ests per chain, 64800 per kthread [ 489.277074][T20841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4160'. [ 489.833674][T20867] sock: sock_timestamping_bind_phc: sock not bind to device [ 489.911753][T20871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4168'. [ 489.925352][T20871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4168'. [ 490.341142][T20893] validate_nla: 8 callbacks suppressed [ 490.341161][T20893] netlink: 'syz.1.4174': attribute type 13 has an invalid length. [ 490.566353][T20904] netlink: 'syz.3.4176': attribute type 1 has an invalid length. [ 490.575061][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4176'. [ 490.586719][T20904] netlink: 'syz.3.4176': attribute type 2 has an invalid length. [ 490.597328][T20904] netlink: 'syz.3.4176': attribute type 2 has an invalid length. [ 490.606704][T20904] netlink: 'syz.3.4176': attribute type 2 has an invalid length. [ 490.682198][T20893] lo: Caught tx_queue_len zero misconfig [ 490.882531][T20917] __nla_validate_parse: 1 callbacks suppressed [ 490.882551][T20917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4181'. [ 491.211142][T20933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4185'. [ 491.289761][T20941] ipt_REJECT: TCP_RESET invalid for non-tcp [ 491.608468][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 491.799919][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 492.516936][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 492.665182][T21013] x_tables: duplicate underflow at hook 1 [ 492.722407][T21021] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4213'. [ 493.132391][T21034] netlink: 'syz.0.4218': attribute type 8 has an invalid length. [ 493.165867][ T6803] dummy0: left promiscuous mode [ 493.197137][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'. [ 493.372593][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 493.390453][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 493.423490][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4220'. [ 493.434004][T21042] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4220'. [ 493.700773][T21058] netlink: 'syz.0.4226': attribute type 1 has an invalid length. [ 493.916591][T21072] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 494.029547][T10879] page_pool_release_retry() stalled pool shutdown: id 95, 1 inflight 60 sec [ 494.513267][T21088] xt_hashlimit: size too large, truncated to 1048576 [ 494.824489][T21102] Cannot find set identified by id 65534 to match [ 495.807503][T21144] netlink: 'syz.0.4251': attribute type 1 has an invalid length. [ 495.864350][T21136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.947808][T21136] bond5 (unregistering): Released all slaves [ 496.138907][T21154] netlink: 'syz.1.4254': attribute type 4 has an invalid length. [ 496.197652][T21158] netlink: 'syz.1.4254': attribute type 4 has an invalid length. [ 496.315893][T21166] netlink: 'syz.2.4256': attribute type 4 has an invalid length. [ 496.343228][T21164] __nla_validate_parse: 9 callbacks suppressed [ 496.343250][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4257'. [ 496.533997][T21178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4259'. [ 497.030422][T21162] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 497.224429][T21221] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4272'. [ 497.390963][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4273'. [ 497.415537][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4273'. [ 497.463997][T21228] bridge2: port 1(vlan1) entered blocking state [ 497.472781][T21228] bridge2: port 1(vlan1) entered disabled state [ 497.480088][T21228] vlan1: entered allmulticast mode [ 497.485505][T21228] bridge2: entered allmulticast mode [ 497.496454][T21228] vlan1: left allmulticast mode [ 497.503105][T21228] bridge2: left allmulticast mode [ 497.546892][T21235] sctp: [Deprecated]: syz.1.4275 (pid 21235) Use of int in maxseg socket option. [ 497.546892][T21235] Use struct sctp_assoc_value instead [ 499.806309][T21190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.817487][T21210] netlink: 'syz.4.4263': attribute type 10 has an invalid length. [ 499.826797][T21210] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4263'. [ 500.273164][T21261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4284'. [ 500.416989][T21267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.468187][T21267] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 500.862855][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 500.886137][T21290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.916007][T21290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.545724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.856015][T21338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.975552][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4312'. [ 502.055334][T21343] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 502.087572][T21343] bond5 (unregistering): Released all slaves [ 502.156330][T21359] netlink: 'syz.4.4315': attribute type 21 has an invalid length. [ 502.164676][T21359] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4315'. [ 502.181944][T21359] netlink: 'syz.4.4315': attribute type 4 has an invalid length. [ 502.190350][T21359] netlink: 'syz.4.4315': attribute type 5 has an invalid length. [ 502.216603][T21359] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4315'. [ 502.231052][T21360] netlink: 'syz.4.4315': attribute type 21 has an invalid length. [ 502.264829][T21360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4315'. [ 502.280222][T21360] netlink: 'syz.4.4315': attribute type 4 has an invalid length. [ 502.288244][T21360] netlink: 'syz.4.4315': attribute type 5 has an invalid length. [ 502.297091][T21360] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4315'. [ 502.521277][T21367] xt_hashlimit: size too large, truncated to 1048576 [ 502.583718][T21378] syzkaller0: entered promiscuous mode [ 502.596179][T21378] syzkaller0: entered allmulticast mode [ 502.694646][T21382] openvswitch: netlink: IP tunnel dst address not specified [ 502.848480][T21390] ±ÿ: renamed from lo (while UP) [ 503.075854][T21406] xt_bpf: check failed: parse error [ 503.157900][T21411] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4328'. [ 503.208536][T21413] syzkaller1: entered promiscuous mode [ 503.221892][T21413] syzkaller1: entered allmulticast mode [ 503.262925][T21413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4329'. [ 503.751913][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 504.158984][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4347'. [ 504.340864][T21471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4345'. [ 504.716155][T21499] ip6tnl1: entered promiscuous mode [ 505.382524][ T5159] block nbd2: Connection timed out, retrying (0/2 alive) [ 505.389922][ T5159] block nbd2: Connection timed out, retrying (0/2 alive) [ 505.400145][ T5159] block nbd2: Connection timed out, retrying (0/2 alive) [ 505.407395][ T5159] block nbd2: Connection timed out, retrying (0/2 alive) [ 505.416471][ T5159] block nbd2: Dead connection, failed to find a fallback [ 505.423759][ T5159] block nbd2: shutting down sockets [ 505.432971][ T5159] blk_print_req_error: 138 callbacks suppressed [ 505.432989][ T5159] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.454298][ T5159] buffer_io_error: 138 callbacks suppressed [ 505.454315][ T5159] Buffer I/O error on dev nbd2, logical block 3, async page read [ 505.470487][ T5159] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.480423][ T5159] Buffer I/O error on dev nbd2, logical block 2, async page read [ 505.491731][ T5159] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.501626][ T5159] Buffer I/O error on dev nbd2, logical block 1, async page read [ 505.509679][ T5159] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.520355][ T5159] Buffer I/O error on dev nbd2, logical block 0, async page read [ 505.530922][T18057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.541685][T18057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 505.550812][T18057] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.560406][T18057] Buffer I/O error on dev nbd2, logical block 1, async page read [ 505.568398][T18057] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.577834][T18057] Buffer I/O error on dev nbd2, logical block 2, async page read [ 505.587701][T18057] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.597844][T18057] Buffer I/O error on dev nbd2, logical block 3, async page read [ 505.605999][T18057] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.616414][T18057] Buffer I/O error on dev nbd2, logical block 0, async page read [ 505.630301][T18057] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.640397][T18057] Buffer I/O error on dev nbd2, logical block 1, async page read [ 505.651444][T18057] ldm_validate_partition_table(): Disk read failed. [ 505.659962][T18057] Dev nbd2: unable to read RDB block 0 [ 505.667466][T18057] nbd2: unable to read partition table [ 505.706201][T21544] netlink: 'syz.2.4361': attribute type 4 has an invalid length. [ 505.718217][T18057] ldm_validate_partition_table(): Disk read failed. [ 505.744035][T18057] Dev nbd2: unable to read RDB block 0 [ 505.765827][T18057] nbd2: unable to read partition table [ 506.105188][T21559] delete_channel: no stack [ 506.509963][T21572] openvswitch: netlink: Missing key (keys=40, expected=100) [ 506.558046][T21572] syzkaller0: entered promiscuous mode [ 506.583292][T21572] syzkaller0: entered allmulticast mode [ 506.888860][T21593] netlink: 'syz.4.4376': attribute type 11 has an invalid length. [ 507.075912][ T5828] Bluetooth: hci4: link tx timeout [ 507.083891][ T5828] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 507.160379][T21615] __nla_validate_parse: 10 callbacks suppressed [ 507.160401][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 507.208494][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 507.371808][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.394785][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.428052][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.444333][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.455704][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.474199][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.509918][T21624] netlink: 'syz.3.4386': attribute type 29 has an invalid length. [ 507.642136][T21636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 507.655765][T21633] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.045387][T21658] xt_recent: Unsupported userspace flags (000000b1) [ 508.165657][T21651] veth0: entered promiscuous mode [ 508.176307][T21653] veth0: left promiscuous mode [ 508.185716][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4397'. [ 508.577677][T21687] netlink: 'syz.1.4401': attribute type 8 has an invalid length. [ 508.687694][T21689] netlink: 'syz.0.4402': attribute type 2 has an invalid length. [ 508.697823][T21689] netlink: 'syz.0.4402': attribute type 5 has an invalid length. [ 508.739468][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 509.149064][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 511.407572][T21676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.682669][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 511.703824][T21719] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4411'. [ 511.714548][T21710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4410'. [ 511.948196][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 511.973237][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 512.026245][T21721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 514.633379][T21709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.840717][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 515.115554][T21777] validate_nla: 1 callbacks suppressed [ 515.115574][T21777] netlink: 'syz.3.4429': attribute type 10 has an invalid length. [ 515.354034][T21782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4430'. [ 515.405786][T21785] ip6tnl0: Caught tx_queue_len zero misconfig [ 515.591690][T21789] bond7: entered promiscuous mode [ 515.602153][T21794] netlink: 'syz.3.4433': attribute type 10 has an invalid length. [ 515.602963][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'. [ 515.656509][T21789] bond7: entered allmulticast mode [ 515.668892][T21789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 515.766695][T21794] bridge0: port 2(batadv0) entered disabled state [ 515.786773][T21794] batadv0: left allmulticast mode [ 515.792977][T21794] batadv0: left promiscuous mode [ 515.800101][T21794] bridge0: port 2(batadv0) entered disabled state [ 515.865605][T21794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.908133][T21794] .`: (slave batadv0): Enslaving as an active interface with an up link [ 515.933776][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4440'. [ 515.944281][T21810] netlink: 'syz.0.4441': attribute type 178 has an invalid length. [ 515.968431][T21804] gretap0: default FDB implementation only supports local addresses [ 516.081759][T21813] netlink: 'syz.2.4442': attribute type 1 has an invalid length. [ 516.120155][T21816] netlink: 'syz.0.4444': attribute type 1 has an invalid length. [ 516.144253][T21813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.165027][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4443'. [ 517.080054][T21874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4457'. [ 517.186290][T21868] bridge5: entered promiscuous mode [ 517.227073][T21868] bridge5: entered allmulticast mode [ 517.373784][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'. [ 517.641406][T21886] syzkaller1: entered promiscuous mode [ 517.670137][T21886] syzkaller1: entered allmulticast mode [ 517.719303][T21886] netlink: 'syz.3.4460': attribute type 1 has an invalid length. [ 517.748788][T21886] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4460'. [ 517.792552][T21886] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4460'. [ 517.901386][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'. [ 518.545623][ T5489] veth1_macvtap: left promiscuous mode [ 518.678126][T21931] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 518.892013][T21942] netlink: 'syz.2.4473': attribute type 11 has an invalid length. [ 519.154038][T21955] netlink: 'syz.0.4477': attribute type 2 has an invalid length. [ 519.210181][T21957] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 519.748358][T21981] pimreg: left allmulticast mode [ 520.206168][T21999] x_tables: duplicate underflow at hook 2 [ 520.274128][T22002] __nla_validate_parse: 6 callbacks suppressed [ 520.274150][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4487'. [ 520.681475][T22020] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 520.979685][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 521.558024][T21999] kthread_run failed with err -4 [ 521.855073][T22033] netlink: 'syz.3.4494': attribute type 1 has an invalid length. [ 521.864934][T22038] netlink: 'syz.0.4497': attribute type 1 has an invalid length. [ 521.946439][T22044] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4498'. [ 521.947189][T22042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4494'. [ 522.014559][T22033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.033366][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4494'. [ 522.063004][T22052] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 522.191433][T22049] xt_CT: No such helper "syz1" [ 522.242426][T22052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.482801][T22074] IPv6: NLM_F_REPLACE set, but no existing node found! [ 522.514141][T22074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4507'. [ 522.593419][T22078] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 522.743643][T22093] ipt_ECN: cannot use operation on non-tcp rule [ 522.974467][T22103] veth1: Caught tx_queue_len zero misconfig [ 523.083890][T22110] netlink: 'syz.1.4518': attribute type 23 has an invalid length. [ 523.489937][T22129] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 523.555033][T22136] netlink: 'syz.1.4524': attribute type 1 has an invalid length. [ 523.769343][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 523.778771][T22136] bond6: entered promiscuous mode [ 523.812652][T22136] bond6: entered allmulticast mode [ 523.843166][T22136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.904313][T22159] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4526'. [ 523.953649][T22139] macvlan2: entered promiscuous mode [ 523.970988][T22139] macvlan2: entered allmulticast mode [ 524.003446][T22139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.063568][T22153] bond4: (slave syz_tun): Removing an active aggregator [ 524.081228][ T6807] bond4: Warning: Found an uninitialized port [ 524.089636][T22153] bond4: (slave syz_tun): Releasing backup interface [ 524.238163][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4529'. [ 524.373012][ T6807] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 524.919055][T22195] netlink: 'syz.4.4537': attribute type 10 has an invalid length. [ 524.962155][T22195] bridge_slave_1: left allmulticast mode [ 524.983619][T22195] bridge_slave_1: left promiscuous mode [ 525.005661][T22195] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.280707][T22195] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 525.741040][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 525.756545][T22234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 525.786911][T22234] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4547'. [ 526.179870][T22259] geneve3: entered promiscuous mode [ 526.195677][T22259] geneve3: entered allmulticast mode [ 526.586959][T22273] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 526.604961][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4557'. [ 526.623298][T22275] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4558'. [ 526.632683][T22276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4557'. [ 527.825716][T22327] netlink: 'syz.3.4575': attribute type 4 has an invalid length. [ 528.145958][T22327] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.273183][T22327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.471569][ T6819] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.510287][ T6819] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.546124][ T6819] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.588750][ T6819] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.852034][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 529.131544][T22383] netlink: 'syz.0.4588': attribute type 12 has an invalid length. [ 529.256557][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 529.485387][T22409] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 529.568044][T22416] vlan2: entered allmulticast mode [ 529.586416][T22416] bond0: entered allmulticast mode [ 529.592402][T22414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4594'. [ 529.603476][T22419] netlink: 'syz.0.4596': attribute type 2 has an invalid length. [ 529.620814][T22419] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4596'. [ 529.692895][T22422] netlink: 'syz.0.4596': attribute type 2 has an invalid length. [ 530.354351][T22456] bridge_slave_0 (unregistering): left allmulticast mode [ 530.378727][T22456] bridge_slave_0 (unregistering): left promiscuous mode [ 530.398803][T22456] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.423637][T22465] tipc: Enabling of bearer rejected, failed to enable media [ 531.467583][T22495] syzkaller1: entered promiscuous mode [ 531.484632][T22495] syzkaller1: entered allmulticast mode [ 531.587631][T22511] __nla_validate_parse: 2 callbacks suppressed [ 531.587652][T22511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4617'. [ 531.631816][T22514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4618'. [ 531.939794][T22525] netlink: 'syz.1.4621': attribute type 1 has an invalid length. [ 532.103737][T22537] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4625'. [ 532.274578][T22537] vlan0: entered allmulticast mode [ 532.280521][T22537] gretap0: entered allmulticast mode [ 532.445240][T22537] x_tables: unsorted underflow at hook 4 [ 532.468428][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 532.480012][T22555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4630'. [ 532.546892][T22533] syzkaller0: entered promiscuous mode [ 532.569147][T22533] syzkaller0: entered allmulticast mode [ 532.595859][T22561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4632'. [ 532.608181][T22556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4629'. [ 532.839725][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4629'. [ 536.461186][T22560] veth0: entered promiscuous mode [ 536.467081][T22571] veth0: left promiscuous mode [ 536.550475][T22596] x_tables: duplicate entry at hook 3 [ 536.563635][T22597] x_tables: duplicate entry at hook 3 [ 536.670513][T22600] netlink: 'syz.1.4637': attribute type 1 has an invalid length. [ 536.722044][T22600] netlink: 'syz.1.4637': attribute type 1 has an invalid length. [ 536.831238][T22609] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 537.207709][T22630] ip6gre1: entered allmulticast mode [ 537.255241][T22634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4645'. [ 537.293297][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4644'. [ 537.397323][T22644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4649'. [ 537.450199][T22649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4649'. [ 537.605229][T22655] h: entered promiscuous mode [ 537.771780][T22665] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 537.921802][T22665] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 538.445372][T22705] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4665'. [ 538.602118][T22710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 538.871327][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 538.905641][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 538.972088][T22723] tipc: Enabling of bearer rejected, media not registered [ 539.130475][T22732] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4672'. [ 539.169783][T22736] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4675'. [ 539.191154][T22731] netlink: 'syz.4.4673': attribute type 1 has an invalid length. [ 539.491187][T22749] netlink: 'syz.3.4678': attribute type 10 has an invalid length. [ 539.591377][T22749] team0 (unregistering): Port device team_slave_0 removed [ 539.606708][T22749] team0 (unregistering): Port device team_slave_1 removed [ 539.625729][T22760] netlink: 'syz.4.4680': attribute type 4 has an invalid length. [ 539.711241][T22764] wg1: entered promiscuous mode [ 539.726910][T22764] wg1: entered allmulticast mode [ 539.876350][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4685'. [ 540.152038][T22793] bond0: entered allmulticast mode [ 540.157528][T22793] ip6gretap1: entered allmulticast mode [ 541.182167][T22842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.107272][T22790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.337478][T22849] netlink: 'syz.0.4709': attribute type 21 has an invalid length. [ 543.349452][T22849] IPv6: NLM_F_CREATE should be specified when creating new route [ 543.361627][T22849] netlink: 'syz.0.4709': attribute type 1 has an invalid length. [ 543.375206][T22853] netlink: 'syz.2.4710': attribute type 1 has an invalid length. [ 543.500342][T22853] __nla_validate_parse: 4 callbacks suppressed [ 543.500362][T22853] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4710'. [ 543.548287][T22854] syzkaller0: entered promiscuous mode [ 543.560478][T22854] syzkaller0: entered allmulticast mode [ 543.739768][T22869] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 543.756514][T22870] netlink: 'syz.0.4713': attribute type 1 has an invalid length. [ 546.991650][T22869] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 547.062498][T22876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4715'. [ 547.467333][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4724'. [ 547.552679][T22908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.591127][T22908] x_tables: duplicate underflow at hook 1 [ 547.617097][T22913] set match dimension is over the limit! [ 550.333337][T22891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.536258][T22924] atomic_op ffff88804df87198 conn xmit_atomic 0000000000000000 [ 550.665840][T22934] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 551.073378][T22955] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4740'. [ 551.090311][T22952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4739'. [ 551.235191][T22968] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4743'. [ 551.545173][T22982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4747'. [ 551.570199][T22985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4747'. [ 552.266950][T22995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4750'. [ 552.375415][T23001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4751'. [ 552.498025][T23007] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 552.504127][T23007] syzkaller1: Linktype set failed because interface is up [ 552.518948][ T1210] syzkaller1: tun_net_xmit 90 [ 552.525134][T23007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4753'. [ 554.105603][T22959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.120442][T23012] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4755'. [ 554.493009][T23033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4762'. [ 554.506017][T23031] netlink: 'syz.1.4761': attribute type 2 has an invalid length. [ 554.610498][T23038] syzkaller0: entered promiscuous mode [ 554.617195][T23038] syzkaller0: entered allmulticast mode [ 555.072634][T23062] syzkaller1: entered promiscuous mode [ 555.104137][T23062] syzkaller1: entered allmulticast mode [ 555.586977][T23085] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.608339][T23085] bridge_slave_0 (unregistering): left allmulticast mode [ 555.615488][T23085] bridge_slave_0 (unregistering): left promiscuous mode [ 555.622674][T23085] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.117564][T23091] __nla_validate_parse: 3 callbacks suppressed [ 556.117579][T23091] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4780'. [ 556.365100][T23099] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 556.830501][T23111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4787'. [ 557.901920][T23052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.911950][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4772'. [ 558.012660][T23125] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4793'. [ 558.320623][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4797'. [ 558.465815][T23150] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4802'. [ 559.009774][T23184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4811'. [ 559.054905][T23185] netlink: 'syz.1.4810': attribute type 10 has an invalid length. [ 560.162491][T23197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4815'. [ 560.571296][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'. [ 560.586215][T23212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4820'. [ 561.538327][T23157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.731473][T23227] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4826'. [ 561.754106][T23225] openvswitch: netlink: Message has 592 unknown bytes. [ 561.774883][T23225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.362198][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4834'. [ 562.388238][T23263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4836'. [ 562.670263][T23276] netlink: 'syz.4.4841': attribute type 16 has an invalid length. [ 562.698794][T23276] netlink: 'syz.4.4841': attribute type 3 has an invalid length. [ 562.718975][T23276] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4841'. [ 562.762178][T23278] syzkaller0: entered promiscuous mode [ 562.773099][T23278] syzkaller0: entered allmulticast mode [ 562.917860][T23282] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 562.986174][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.125172][T23303] vlan1: entered promiscuous mode [ 563.132187][T23303] bridge0: entered promiscuous mode [ 563.172620][T23307] ip6t_srh: unknown srh match flags 4000 [ 563.336263][T23318] ipt_REJECT: TCP_RESET invalid for non-tcp [ 563.343558][T23315] netlink: 'syz.0.4853': attribute type 33 has an invalid length. [ 563.371910][T23311] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 563.406165][T23315] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 563.445041][T23315] bond9 (unregistering): Released all slaves [ 563.516455][ T6803] bond0: (slave bond_slave_0): interface is now down [ 563.547621][ T6803] bond0: (slave bond_slave_1): interface is now down [ 563.573717][T23325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4855'. [ 563.999710][T23332] veth5: entered allmulticast mode [ 564.086022][T23332] bond8: (slave veth5): Enslaving as an active interface with an up link [ 564.220940][T23348] dvmrp0: entered allmulticast mode [ 564.244808][T23348] x_tables: duplicate underflow at hook 2 [ 564.427008][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'. [ 564.437035][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4865'. [ 564.446642][T23357] netlink: 'syz.1.4865': attribute type 14 has an invalid length. [ 564.455295][T23357] netlink: 'syz.1.4865': attribute type 13 has an invalid length. [ 564.526433][T23353] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 564.791358][T23373] netlink: 'syz.3.4871': attribute type 8 has an invalid length. [ 564.880908][T23376] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 564.979296][T23376] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4873'. [ 565.016565][T23376] xt_policy: neither incoming nor outgoing policy selected [ 565.043006][T23387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.072046][T23387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4875'. [ 565.382682][T23403] netlink: 'syz.1.4880': attribute type 2 has an invalid length. [ 565.707460][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4885'. [ 566.102089][ T172] bond0: (slave bond_slave_0): interface is now down [ 566.120766][ T172] bond0: (slave bond_slave_1): interface is now down [ 566.175710][ T172] bond0: now running without any active interface! [ 567.452327][T23508] __nla_validate_parse: 5 callbacks suppressed [ 567.452353][T23508] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4913'. [ 567.496986][T23508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.545146][T23513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4915'. [ 567.561087][T23513] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4915'. [ 567.580333][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4915'. [ 568.012782][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4923'. [ 568.183715][T23546] bridge0: port 1(vlan0) entered blocking state [ 568.212529][T23546] bridge0: port 1(vlan0) entered disabled state [ 568.232685][T23546] vlan0: entered allmulticast mode [ 568.248231][T23546] geneve0: entered allmulticast mode [ 568.270042][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4927'. [ 568.285536][T23559] netlink: 'syz.3.4927': attribute type 1 has an invalid length. [ 568.300087][T23559] netlink: 'syz.3.4927': attribute type 2 has an invalid length. [ 568.361768][T23557] netlink: set zone limit has 4 unknown bytes [ 568.465347][T23568] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4932'. [ 568.490776][T23570] sctp: [Deprecated]: syz.2.4931 (pid 23570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.490776][T23570] Use struct sctp_sack_info instead [ 568.661916][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4933'. [ 568.734469][T23574] syzkaller0: entered promiscuous mode [ 568.776874][T23574] syzkaller0: entered allmulticast mode [ 568.803752][T23591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.046313][T23598] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4937'. [ 569.088433][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 569.351932][T23616] netlink: 'syz.1.4943': attribute type 12 has an invalid length. [ 569.623108][T23633] block nbd0: Unsupported socket: should be TCP or UNIX. [ 569.886845][T23646] xt_hashlimit: invalid interval [ 570.299090][T23672] netlink: 'syz.4.4963': attribute type 1 has an invalid length. [ 570.477444][T23676] netlink: 'syz.1.4965': attribute type 44 has an invalid length. [ 570.905895][T23700] IPVS: sh: FWM 3 0x00000003 - no destination available [ 572.117556][T23751] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 572.237388][T23751] bond6: entered promiscuous mode [ 572.254237][T23751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.311482][T23758] bond6: (slave bridge3): making interface the new active one [ 572.331102][T23758] bridge3: entered promiscuous mode [ 572.341419][T23763] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 572.370920][T23758] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 572.564363][T23770] __nla_validate_parse: 13 callbacks suppressed [ 572.564383][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4989'. [ 572.617311][T23769] netlink: 'syz.0.4989': attribute type 9 has an invalid length. [ 573.041901][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4993'. [ 573.371877][T23811] openvswitch: netlink: Message has 592 unknown bytes. [ 573.417965][T23811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.567461][T23821] netlink: 'syz.0.4998': attribute type 10 has an invalid length. [ 573.637467][T23821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.674727][T23821] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 573.734435][T23829] syzkaller0: entered promiscuous mode [ 573.749182][T23829] syzkaller0: entered allmulticast mode [ 573.993971][T23843] netlink: 'syz.2.5002': attribute type 4 has an invalid length. [ 574.003668][T23843] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5002'. [ 574.026220][T23843] .`¹: renamed from bond0 (while UP) [ 576.181541][T23800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.398512][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5008'. [ 576.457327][T23875] tipc: Started in network mode [ 576.470846][T23875] tipc: Node identity 4, cluster identity 4711 [ 576.489570][T23875] tipc: Node number set to 4 [ 576.513131][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5007'. [ 576.630215][T23883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5013'. [ 576.644360][T23883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5013'. [ 576.668741][T23883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5013'. [ 576.687489][T23885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.992019][T23893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5015'. [ 577.014306][T23893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.038979][T23897] can: request_module (can-proto-0) failed. [ 577.199733][T23893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.323144][T23910] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5019'. [ 577.435982][T23915] netlink: 'syz.1.5020': attribute type 8 has an invalid length. [ 577.485436][T23915] bond0: entered promiscuous mode [ 577.495473][T23915] gretap0: entered promiscuous mode [ 577.515043][T23915] bond0: left promiscuous mode [ 577.524600][T23915] gretap0: left promiscuous mode [ 577.756006][T23928] __nla_validate_parse: 2 callbacks suppressed [ 577.756037][T23928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5024'. [ 577.828448][T23928] netlink: 'syz.3.5024': attribute type 1 has an invalid length. [ 577.849641][T23920] delete_channel: no stack [ 577.855112][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5026'. [ 577.876759][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5024'. [ 577.886694][T23928] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5024'. [ 577.896375][T23928] netlink: 'syz.3.5024': attribute type 1 has an invalid length. [ 578.098191][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'. [ 578.200324][T23952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5032'. [ 578.300782][T23955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5033'. [ 578.468386][T23967] only policy match revision 0 supported [ 578.468411][T23967] unable to load match [ 578.523097][T23970] xt_l2tp: missing protocol rule (udp|l2tpip) [ 579.004725][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5042'. [ 579.063173][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5042'. [ 579.267902][T23998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 579.415379][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5047'. [ 579.489919][T24013] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 579.497899][T24013] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 579.522918][T24019] netlink: zone id is out of range [ 579.528344][T24019] netlink: zone id is out of range [ 579.534190][T24019] netlink: zone id is out of range [ 579.539904][T24019] netlink: zone id is out of range [ 579.545261][T24019] netlink: zone id is out of range [ 579.551034][T24019] netlink: zone id is out of range [ 579.556635][T24019] netlink: zone id is out of range [ 579.570049][T24019] netlink: zone id is out of range [ 579.575525][T24019] netlink: zone id is out of range [ 579.581301][T24019] netlink: zone id is out of range [ 580.282033][T24055] netlink: 'syz.0.5060': attribute type 21 has an invalid length. [ 580.308760][T24055] netlink: 'syz.0.5060': attribute type 1 has an invalid length. [ 581.002355][T24092] sch_fq: defrate 0 ignored. [ 581.257313][T24115] netlink: 'syz.3.5077': attribute type 8 has an invalid length. [ 581.293689][T24121] netlink: 'syz.3.5077': attribute type 8 has an invalid length. [ 581.691693][T24144] syzkaller0: entered promiscuous mode [ 581.702794][T24144] syzkaller0: entered allmulticast mode [ 582.795536][T24218] __nla_validate_parse: 12 callbacks suppressed [ 582.795555][T24218] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5104'. [ 582.912328][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5104'. [ 583.025907][T24220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5106'. [ 583.065012][T24230] netlink: 'syz.4.5109': attribute type 1 has an invalid length. [ 583.073003][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 583.096514][T24230] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5109'. [ 583.131377][T24234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5110'. [ 583.362872][T24251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5114'. [ 583.534243][T24260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5118'. [ 584.093573][T24294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5126'. [ 584.454495][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5132'. [ 584.681969][T24314] net_ratelimit: 135 callbacks suppressed [ 584.681993][T24314] openvswitch: netlink: Flow key attr not present in new flow. [ 584.691367][T24330] bond9: entered promiscuous mode [ 584.725942][T24330] bond9: entered allmulticast mode [ 584.769157][T24337] bridge0: port 3(syz_tun) entered blocking state [ 584.781836][T24337] bridge0: port 3(syz_tun) entered disabled state [ 584.809008][T24337] syz_tun: entered allmulticast mode [ 584.826115][T24337] syz_tun: entered promiscuous mode [ 585.272781][T24365] batman_adv: batadv0: Adding interface: dummy0 [ 585.281922][T24365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.330294][T24365] batman_adv: batadv0: Interface activated: dummy0 [ 585.409695][T24371] batadv0: mtu less than device minimum [ 585.428231][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.442301][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.454164][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.466064][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.477880][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.489853][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.501772][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.513605][T24371] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 585.654171][T24382] netlink: 'syz.0.5147': attribute type 3 has an invalid length. [ 585.797404][T24387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.999725][T24398] hsr_slave_0: left promiscuous mode [ 586.006299][T24398] hsr_slave_1: left promiscuous mode [ 586.185041][T24409] IPv6: Can't replace route, no match found [ 586.224407][T24409] sctp: [Deprecated]: syz.3.5155 (pid 24409) Use of int in max_burst socket option deprecated. [ 586.224407][T24409] Use struct sctp_assoc_value instead [ 586.517061][T24427] pim6reg1: entered promiscuous mode [ 586.536209][T24427] pim6reg1: entered allmulticast mode [ 586.865715][T24443] netlink: 'syz.4.5163': attribute type 24 has an invalid length. [ 587.546791][T24474] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 587.597752][T24474] xt_hashlimit: size too large, truncated to 1048576 [ 587.708334][T24482] netlink: 'syz.0.5171': attribute type 2 has an invalid length. [ 588.270211][T24509] netlink: 'syz.4.5179': attribute type 32 has an invalid length. [ 588.702285][T24530] __nla_validate_parse: 8 callbacks suppressed [ 588.702310][T24530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5184'. [ 588.732893][T24530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5184'. [ 589.064217][ T6819] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 589.180156][T24549] netlink: 'syz.1.5188': attribute type 33 has an invalid length. [ 589.509587][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'. [ 589.563428][T24558] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 589.593490][T24558] netlink: 'syz.1.5191': attribute type 2 has an invalid length. [ 589.753897][T24570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5197'. [ 589.817246][T24570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5197'. [ 590.382193][T24607] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 590.427622][T24607] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5208'. [ 590.667225][T24623] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.5213'. [ 590.939587][T24634] net_ratelimit: 14 callbacks suppressed [ 590.939609][T24634] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 591.151305][T24650] x_tables: duplicate underflow at hook 1 [ 591.302651][T24660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5225'. [ 591.417590][T24667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5227'. [ 591.785379][T24686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5234'. [ 591.963046][T24694] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 591.986890][T24698] bond1: (slave veth0_to_bond): Releasing active interface [ 592.072829][T24694] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 592.419486][ T31] INFO: task kworker/0:1H:516 blocked for more than 143 seconds. [ 592.447919][ T31] Not tainted syzkaller #0 [ 592.455969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.468340][ T31] task:kworker/0:1H state:D stack:26440 pid:516 tgid:516 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 592.495562][ T31] Workqueue: kblockd blk_mq_requeue_work [ 592.509478][ T31] Call Trace: [ 592.516334][ T31] [ 592.538660][ T31] __schedule+0x17b4/0x5680 [ 592.548753][ T31] ? __pfx___schedule+0x10/0x10 [ 592.568684][ T31] ? schedule+0x90/0x360 [ 592.573171][ T31] schedule+0x164/0x360 [ 592.577433][ T31] schedule_timeout+0x158/0x2c0 [ 592.583604][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 592.589243][ T31] ? __pfx_process_timeout+0x10/0x10 [ 592.594700][ T31] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 592.600932][ T31] ? prepare_to_wait_event+0x436/0x480 [ 592.606845][ T31] nbd_queue_rq+0x857/0x1100 [ 592.611838][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 592.617216][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.625209][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 592.632036][ T31] ? sbitmap_get+0x229/0x390 [ 592.636802][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 592.643565][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 592.650682][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 592.657573][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 592.666971][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 592.673467][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 592.679857][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 592.685529][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 592.693283][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 592.699995][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 592.705275][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 592.715272][ T31] blk_mq_requeue_work+0x71c/0x780 [ 592.721537][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 592.728150][ T31] ? process_scheduled_works+0xa70/0x1860 [ 592.734921][ T31] ? process_scheduled_works+0xa70/0x1860 [ 592.741998][ T31] process_scheduled_works+0xb5d/0x1860 [ 592.747743][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.755158][ T31] ? assign_work+0x3d5/0x5e0 [ 592.760397][ T31] worker_thread+0xa53/0xfc0 [ 592.765362][ T31] kthread+0x388/0x470 [ 592.771216][ T31] ? __pfx_worker_thread+0x10/0x10 [ 592.776719][ T31] ? __pfx_kthread+0x10/0x10 [ 592.782768][ T31] ret_from_fork+0x514/0xb70 [ 592.787840][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 592.793632][ T31] ? __switch_to+0xc79/0x1410 [ 592.800286][ T31] ? __pfx_kthread+0x10/0x10 [ 592.805130][ T31] ret_from_fork_asm+0x1a/0x30 [ 592.812077][ T31] [ 592.815656][ T31] [ 592.815656][ T31] Showing all locks held in the system: [ 592.827857][ T31] 1 lock held by khungtaskd/31: [ 592.834324][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 592.845598][ T31] 3 locks held by kworker/u8:3/48: [ 592.851288][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 592.864606][ T31] #1: ffffc90000b87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 592.877147][ T31] #2: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 592.890171][ T31] 4 locks held by kworker/0:1H/516: [ 592.895650][ T31] #0: ffff8880202bc140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 592.908398][ T31] #1: ffffc900015f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 592.924065][ T31] #2: ffff88802694fd98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 592.939237][ T31] #3: ffff888026bbe6b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 592.949872][ T31] 2 locks held by getty/5587: [ 592.954744][ T31] #0: ffff8880365810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.964788][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 592.975236][ T31] 1 lock held by udevd/11105: [ 592.980482][ T31] #0: ffff888026aa8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 592.989968][ T31] 2 locks held by syz.3.5234/24685: [ 592.995249][ T31] #0: ffff888078ae8240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 593.005732][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 593.016790][ T31] 2 locks held by syz.2.5235/24695: [ 593.022166][ T31] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 593.031888][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 593.043280][ T31] 2 locks held by syz.4.5240/24712: [ 593.048747][ T31] #0: ffffffff90343ce8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 593.058314][ T31] #1: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 593.070454][ T31] 1 lock held by syz.0.5241/24714: [ 593.075656][ T31] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 593.085227][ T31] [ 593.087957][ T31] ============================================= [ 593.087957][ T31] [ 593.112894][ T31] NMI backtrace for cpu 0 [ 593.112917][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.112934][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.112944][ T31] Call Trace: [ 593.112950][ T31] [ 593.112957][ T31] dump_stack_lvl+0xe8/0x150 [ 593.112990][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 593.113007][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 593.113031][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 593.113049][ T31] sys_info+0x135/0x170 [ 593.113070][ T31] watchdog+0xfaa/0x1000 [ 593.113091][ T31] ? watchdog+0x209/0x1000 [ 593.113113][ T31] kthread+0x388/0x470 [ 593.113129][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.113143][ T31] ? __pfx_kthread+0x10/0x10 [ 593.113159][ T31] ret_from_fork+0x514/0xb70 [ 593.113183][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.113204][ T31] ? __switch_to+0xc79/0x1410 [ 593.113224][ T31] ? __pfx_kthread+0x10/0x10 [ 593.113240][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.113275][ T31] [ 593.113281][ T31] Sending NMI from CPU 0 to CPUs 1: [ 593.225176][ C1] NMI backtrace for cpu 1 [ 593.225195][ C1] CPU: 1 UID: 0 PID: 17531 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 593.225216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.225234][ C1] RIP: 0033:0x7faafde6a7bf [ 593.225255][ C1] Code: 4c 24 40 e8 03 00 00 48 c1 ea 12 4c 8d 34 11 4c 89 74 24 18 8b 40 08 44 89 64 24 2c 89 44 24 08 bf 10 27 00 00 e8 71 2b 13 00 01 00 00 40 48 89 ee bf ff ff ff ff e8 3f 04 13 00 39 c3 0f 84 [ 593.225271][ C1] RSP: 002b:00007ffe9f007020 EFLAGS: 00000206 [ 593.225287][ C1] RAX: 0000000000000000 RBX: 0000000000000429 RCX: 00005555676e9808 [ 593.225299][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.225310][ C1] RBP: 00007ffe9f00705c R08: 0000000000000000 R09: 0000000000000000 [ 593.225321][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 593.225332][ C1] R13: 00000000000927c0 R14: 000000000009082a R15: 00007ffe9f0070b0 [ 593.225345][ C1] FS: 00005555676e9500 GS: 0000000000000000 [ 593.327964][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 593.334872][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.344000][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.354085][ T31] Call Trace: [ 593.357412][ T31] [ 593.360391][ T31] vpanic+0x56c/0xa60 [ 593.364427][ T31] ? __pfx___schedule+0x10/0x10 [ 593.369316][ T31] ? __pfx_vpanic+0x10/0x10 [ 593.373868][ T31] ? __pfx_console_unlock+0x10/0x10 [ 593.379121][ T31] panic+0xc5/0xd0 [ 593.382898][ T31] ? __pfx_panic+0x10/0x10 [ 593.387352][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 593.392774][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 593.398980][ T31] watchdog+0xff4/0x1000 [ 593.403284][ T31] ? watchdog+0x209/0x1000 [ 593.407747][ T31] kthread+0x388/0x470 [ 593.411849][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.416555][ T31] ? __pfx_kthread+0x10/0x10 [ 593.421180][ T31] ret_from_fork+0x514/0xb70 [ 593.425814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.430960][ T31] ? __switch_to+0xc79/0x1410 [ 593.435684][ T31] ? __pfx_kthread+0x10/0x10 [ 593.440355][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.445175][ T31] [ 593.448420][ T31] Kernel Offset: disabled [ 593.452858][ T31] Rebooting in 86400 seconds..