last executing test programs: 2.490471124s ago: executing program 0 (id=5229): syz_emit_ethernet(0x52, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0500e2", 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x1, 0xe}], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x6}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) recvfrom$l2tp6(r1, &(0x7f0000000680)=""/189, 0xbd, 0x163, &(0x7f0000000740)={0xa, 0x0, 0x0, @mcast2}, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x7ff}, [@exit, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0xfe, 0xf, 0x3, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000180)=[{0x1, 0x4, 0xb, 0xb}, {0x0, 0x2, 0xb}, {0x4, 0x3, 0xb}, {0x1, 0x5, 0x9, 0xc}, {0x4, 0x5, 0x7, 0x6}, {0x5, 0x5, 0x5, 0x1}, {0x1, 0x5, 0xe, 0xa}, {0x3, 0x5, 0x3}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe7, 0x46, &(0x7f00000002c0)="5bfbaec4c764ef262126212cc70b6c8230e978d2a013694303073d52af23d164800ac7815649fcce2d35a6d3f3279df5d666e5dea1db5912f74f52f8c7331cb7293542af9879672e780b34f3109115faa0e7c066a511e34de1f54c3443d85935695222bbec46168d9eeab749b700665c79f9dc53284c5c5f3f1e1a7c97632427d32e21bcfbc57754a2dade06339bf331ef86a3612c7aad43a427e5742e4fb64a17da2191ced4e37ec9bdbcd2c6d6b9bfd4fc8e500f1995008ee1a975151e3398b36b56c37470563155ceaccf2f3743b94eb34cc914ef8b1a9427807665ba63759d4b44b882a782", &(0x7f00000003c0)=""/70, 0x5, 0x0, 0xcd, 0x85, &(0x7f0000000440)="86b65f5fa9a71dcddd815c432c478494ef7dd8b96d58b74b5cbf1dec052dbd086e750d97b78e370fc1b8901a63c47a0fc35895fd1b8846940252d67e3a4939b50a64d5be3e88e14083fae2ca5d092f5a622f537f701ebe4a77c8133b06760a4136f73fecd2ef9a9cef342eeaaa837cf9712dcccaf661c5cfc8d57161d803356c5be39cb0ff546486a824cde5cc2c9e396f16fc20fd371b573d2be638a9645d866939796eaa251a61f916601344235d5b3201412a84ba8812c09a79e95c35c144ca2404c5874a162d704ad3dda3", &(0x7f0000000540)="7e1a8c93c1e261cc5fca5b1ca18c98894f0e6f8229649b9498fc7ab3d09f535f58b77432f3609b4f3f2d19668f7b5136751fe8eb3a8c15c02ee9f398003db9c2961c66a2802b96d920f0a1c142e1dd1d9b7424f18532d8845da94ee713ddb1836b4434d0ae71ffb49967e42ac2dd6a1c5109b624a90d897b3e6008f845ac4a6ac84c437242", 0x1, 0x0, 0x1}, 0x50) 2.286595323s ago: executing program 1 (id=5232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) syz_emit_ethernet(0x32a, &(0x7f0000000180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "59998e", 0x2f4, 0x11, 0xff, @empty, @mcast1, {[@dstopts={0x1, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x18, {0x2, 0x4, 0xc9, 0x3, [0x7, 0xffff]}}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0x80, [0x7fffffff, 0x101, 0x2, 0x4, 0x7, 0xfffffffffffffffc, 0x1, 0x200]}}, @generic={0x6, 0x8e, "fbb10b150729930e64b0e393a5b3409f7832451685689b43f9e3a14275c3024e987410058e050eeddad8c2844bdfebaaeab765a31644432f10729826c124de68f267f506ad6f4f007e5ecfa34c204e3ddcec9861a7213f9e34707eab82a09da1cb6b88be4709a7901b634a898664e9ca4145889f4b5e8b07be93ced5b5108d1a2e5aefc01e78e3811b1a562a0f9d"}, @jumbo={0xc2, 0x4, 0xc}]}, @dstopts={0x2c}, @routing={0x73, 0x12, 0x1, 0x4, 0x0, [@local, @private0, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0x2, 0x1, 0x0, 0x16, 0x66}, @routing={0x29, 0xa, 0x2, 0x6, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x9}, @dev={0xfe, 0x80, '\x00', 0x35}, @local]}, @srh={0x8, 0x8, 0x4, 0x4, 0xf9, 0x40, 0x7, [@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @srh={0x11, 0x6, 0x4, 0x3, 0x1, 0x18, 0x0, [@empty, @private2, @private1]}], {0x4e24, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "2d750e35e145da01fd04d9a575dc089ad6d3f5c799b62499ca48bfa0945efda2", "b5df987ea5536f4905f3be06e7d2054a", {"f1151e25c0ca2f9d348644eaa888ec7d", "36372b9c5f9e94f07072f0f829a83367"}}}}}}}}, 0x0) 2.166304762s ago: executing program 1 (id=5233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x20001, @private1={0xfc, 0x1, '\x00', 0x9}}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004504005c000000000511907800004673bd9b504c6512a17f085be5976ae30000000000004e244e200048907803000000000000004bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517eb1fe94141226cc71e718e86db665dd4f"], 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r2, 0x5, 0x9, 0x9, 0x4, 0x2, 0x5, 0x1, {r2, @in6={{0xa, 0x4e22, 0xa, @local, 0x1}}, 0x6, 0xe, 0x400, 0x4, 0xbfe5}}, &(0x7f0000000480)=0xb0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto(r6, 0x0, 0x18, 0x1002, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000004800e2ae749ded05fb0f33836b2169e900082cbd7000fbdbdf250a0080fe", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe88000000000000000000000000000114000100ff01000000000000000000000000000114000100fc000000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="000222bd6000fbdbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="1400508008000700000000000800030001ac0f0024006e80040002000400010004000200040001000400020004000100040001000400010012000a004828ea05ecd9abfad8afc90c0c1200000500080003000000080037005eb61cfc1c0050800800070002000000050009000100000005000900010000000c006e8004000200040002000c006e8004000100040002000800090005ac0f000a000600ffffffffffff0000"], 0xc0}, 0x1, 0x0, 0x0, 0x2402c040}, 0x4000881) socket(0x2d, 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) r10 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1}, &(0x7f0000000b80), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.918443938s ago: executing program 0 (id=5235): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x6, @mcast2, 0xa3}, 0x20) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r7, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fedbdf251400000008000300", @ANYRES32=r7, @ANYBLOB="0c009900070000005d0008000600ab00070000001c00ac00d0d43f73e0e04c96f6942c3bb287fa5c97e97ad99dd6cda1060012010000000006001201010000000600100095010000"], 0x64}}, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x0) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x6, @mcast2, 0xa3}, 0x20) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r7, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fedbdf251400000008000300", @ANYRES32=r7, @ANYBLOB="0c009900070000005d0008000600ab00070000001c00ac00d0d43f73e0e04c96f6942c3bb287fa5c97e97ad99dd6cda1060012010000000006001201010000000600100095010000"], 0x64}}, 0xc4) (async) 1.49879629s ago: executing program 0 (id=5240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) (async) close(0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000080)=0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={'dummy0\x00'}) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x5a2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000001c0)="5e7c2e1d998d0dc60adb04a6d7bd344c7567cbd000e035c117c5e507935db7d001211b900c37fcbd38502729c36ebe7da8854fb1b3df0baa6b05dab3dc42fcdf16d9dc8798a84852bd33cd45069a0b72020aac7ddce481efb85d8a50ca17591dd1d98b29164fc22b6fc708413c6733d1f1061d10e4d725bb2dee5626be48befce552fe4a9a95e7e15a30fdef23f63a1eae09425ab65b273f12d65a2b7e72c2f41b309420ee87bc04f52a979fd9604e9e3050082f315e97c73c1c71444751a5ec8dcbfde411f3de3ac8cf745dad7fe6b62cae96c72f66790540de32c0c452a78ff4bc0371cb1df958", 0xe8}], 0x1}}], 0x2, 0x20000080) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000100)=""/93, 0x5d, 0x0, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0x9, 0xa, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0x9, 0xa, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}, [@map_fd={0x18, 0x6, 0x1, 0x0, r7}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.402596069s ago: executing program 3 (id=5241): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00', 0x0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)={0x2, {{0xa, 0x4e20, 0x5, @local, 0x80}}, 0x1, 0x5, [{{0xa, 0x4e23, 0x74, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}, {{0xa, 0x4e23, 0x3, @local, 0xa}}, {{0xa, 0x4e20, 0x3, @local, 0x3}}, {{0xa, 0x4e24, 0xfffffc94, @mcast1, 0x7fffffff}}]}, 0x310) clock_gettime(0x4, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 1.110357213s ago: executing program 4 (id=5244): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x5, 0x3, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x41) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000150002000000200000", 0x17) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$kcm(0xa, 0x4, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0xfffffffc, @remote, 0x7}, 0x80, 0x0}, 0x20000000) 1.109498192s ago: executing program 1 (id=5245): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c56776b2820fae9d6dcd3292ea5a", 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.093383874s ago: executing program 3 (id=5246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x2f, 0x4, 0x7, 0x8, 0x1000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000017c0)={&(0x7f0000000040)="6af8caf93f95299b40b43ad19ecbaf6e33378282cc5fe80254f339800d142f4a03c649c65edd31299f6a5d44a58592ad26ca5e8377f5e2b8fb059d16aae2a4d86724cf2ec7092d25c78b750b73d779860daa6164a8d6c833a381db45e23450db4ba05785e90f7f76b8ee593a94223b467c27295f9f299c29e1e8eaa080224082885289b9188c69836b6b5fcb0b931f23537584e491efb769a8b385c1762edaf6b89cc8577ba8a36053acb5b548ed298eb4aecc78c7792e8947c0388f5dfe419d91056794a300443ffdbf5a7515ee76a949", &(0x7f0000000140)=""/87, &(0x7f0000001a80)="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", &(0x7f0000001700)="274be88308b97e8fb67b8c84b32fddab61b3eda8f3e08fc4eeddab8be95f514bcc65006f54dfe8d661b6bd6fe51953eb2fc1ac6b10e65172e079c7f8a8fdf9b624bb7201cbbbb69ff0268413ee7650d29c37454f191318223d9137db93ff249a03aac6903ca43b6d3c6cbc130c", 0x1ff, r4}, 0x38) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) writev(r8, &(0x7f0000002200)=[{&(0x7f0000000040)="98ca9d81e779", 0x6}, {&(0x7f00000008c0)="cdbc9fca299eff4867d4ca5f2e28314bfd6836b8d5145c99d31c524f7a4017ee0b9cb76e92fe224c1e5f019bedcfaa0a299b4260f8aa57dfeb7f48186007a7628b3282cf29c9b3dfbbd607327f59c95bc1a415e62e3c938b838863fc309e08ab72df2ae68f3373c77932bde4309150a7b3a6ee34045a23b98d6456695dff9eb37cbfcfba92e22f3f80f63f227ccba01d1082496a98fcc64db333372288257d68d9074020e84426448c0e0e4c980ae94bbcdc3d3d5ad0057891f58a922cc3da2e2be8e19461cbdac178eb19e26c360427594915b854de00c3777ebf02c04e3ebd3d7eeb6433796575c1c8b628949835b0d0971ec81949bf40", 0xf8}, {&(0x7f0000000ec0)="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", 0x4c2}, {0x0}, {&(0x7f0000001f40)}, {0x0}], 0x6) sendto$inet6(r8, 0x0, 0x0, 0x4044094, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) poll(&(0x7f00000003c0)=[{r9, 0x8080}], 0x1, 0x80000001) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x22, 0x0, &(0x7f0000000340)=0x9e) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) 995.150631ms ago: executing program 2 (id=5247): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) 892.987757ms ago: executing program 2 (id=5248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x1, 0x70, 0x6, 0x7, {0x4e22, 0x4e24, [0x4, 0xffffffff, 0xfff, 0x2], [0x7, 0x121, 0xabaf, 0x80000001], 0x0, [0x2a, 0x3]}, 0x3, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltfilter={0x7c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'wlan0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffc}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa3cae7abe0e8b9e3}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24044010) 892.066752ms ago: executing program 1 (id=5249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x10, 0x1, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x1316, &(0x7f0000000900)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "787f6e", 0x12dc, 0x11, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x87, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x25}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x40}]}, @fragment={0x0, 0x0, 0x80, 0x0, 0x0, 0x13, 0x68}, @fragment={0x6c, 0x0, 0xaa, 0x1, 0x0, 0x7, 0x68}, @routing={0x2f}, @srh={0x2b, 0x8, 0x4, 0x4, 0x6, 0x0, 0x7, [@mcast2, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x2f, 0xe, 0x4, 0x7, 0xd9, 0x20, 0xf6, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, @empty]}, @hopopts={0xc, 0x21d, '\x00', [@generic={0x0, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xffffffff}, @generic={0xd, 0xe1, "21a073baaf0e4ed73d8705e787d0c2a5236502ccfcf26f541457303b3e41c54ffcbd9396189100d4bb9e08423ef133085fdfe34b48dd89001a74bdc190d7041840b0ef4f5484bea7abe845a43da55ee490bc4016423c2b430ec8d5f59f34bd24965c228426df4d8e57b85352c789e4df39f6e79b9c55b88623a8982162a256313a70917622b4f5f83236d802a69478df0a877934058c274aada852786db6fa075bee80a3fe0014a1bdc160c950f0445bc0beeb2342e93394870c3bf362bd9f3d5a001156d7cb7cfdae5e3e422ccc0fa6d5be352eb9169d16eb629518b5b20f1a27"}]}, @routing={0x2b, 0x0, 0x2, 0x7c}, @routing={0x21, 0x6, 0x0, 0xf, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e23, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "108f4484020476a6286fe207ee26750cf33a3c76117c2a7f91167f44427cf551", "16264cbb3afa8d6afd21a40c4c13827c0f38a990062fbcbc7be7655007506cc1900e7ce12e23fca92744390e922a0622", "0d6adb8e05885190cd943462cc3579a026a426031aedea08e9337750", {"1f9124041c15f981c4608a865e41ff45", "9af9fba5f84d5e66d64184711f02dd7a"}}}}}}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000600)='ping', 0x4, 0x0, &(0x7f0000000700)={0xa, 0x5000, 0x0, @loopback}, 0x1c) 857.558403ms ago: executing program 3 (id=5250): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x3a0ffffffff) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xd, 0x0, 0x401}, 0xc) 808.358255ms ago: executing program 4 (id=5251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000040)) 714.286166ms ago: executing program 2 (id=5252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x73680000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048095}, 0x20000001) socket(0x15, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000680)={{r3, &(0x7f0000000040)='\x00', 0x100, &(0x7f0000000080)={@align=0x8, {0xfff7, 0x3, 0x7, 0x7}}, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x9}, {[0x7ff800, 0x1a7, 0x1, 0x6]}, 0x0, 0x73, &(0x7f0000000600)=""/115}) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x44084}, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r5, 0x11}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500000000000a00000000000000fe800005f4a86432e60de418891619574c14000000000000000000000000aa00000000000000000800120000000000000000000000000006000000000000020000000000000000e0000002000000000000d6619fec0000fc0000000005000600000000000a0000000000000000000000000000000000000000007ba4c8ee653577c602004e23ac14141a000000000000000002000000000000002001000000000000000000000000000200"/231], 0xd8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x73680000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048095}, 0x20000001) (async) socket(0x15, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000680)={{r3, &(0x7f0000000040)='\x00', 0x100, &(0x7f0000000080)={@align=0x8, {0xfff7, 0x3, 0x7, 0x7}}, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x9}, {[0x7ff800, 0x1a7, 0x1, 0x6]}, 0x0, 0x73, &(0x7f0000000600)=""/115}) (async) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x44084}, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r5, 0x11}, 0x14) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) (async) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500000000000a00000000000000fe800005f4a86432e60de418891619574c14000000000000000000000000aa00000000000000000800120000000000000000000000000006000000000000020000000000000000e0000002000000000000d6619fec0000fc0000000005000600000000000a0000000000000000000000000000000000000000007ba4c8ee653577c602004e23ac14141a000000000000000002000000000000002001000000000000000000000000000200"/231], 0xd8}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) 713.927148ms ago: executing program 1 (id=5253): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r2, &(0x7f0000000100)=""/41, 0x29) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 707.889344ms ago: executing program 3 (id=5254): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r2, @ANYBLOB="4000ac0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket(0x10, 0x80002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0x8}, {0xe, 0x5}, {0x9, 0x1}, {0x7, 0x7c7}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x81, 0x3}, {0xb, 0x1}, {0x5, 0x1}, {0xa, 0x3}, {0x3, 0x5}, {0xf, 0x5}, {0xf, 0x1}, {0x10, 0x3}]}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x3, [{0x3, 0x5, 0x6}, {0x4, 0x3, 0x4}, {0xd, 0x5, 0x81}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x6}, {0xb, 0x81}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x2e, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f0000000780)=""/240, 0x110, 0xf0, 0x1, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000280)) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r5], 0x38}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="e7b501bd7000fedbdf250c000000a80e00000000000041fcae1b47a6201121dcb4810288efa16bd10023541b4322bd16d7445f526b98b348381fa685fea7a2f5a094becf74593bda68f6b450296b2a39b5cc57f7184a6c18eb36424801af08003db76ce6e3bd15167a7678ba26f6f84f04e7e4c438"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000580)={r11, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) 647.854312ms ago: executing program 4 (id=5255): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000040)={@align=0x1, {0x7ff, 0x2, 0x9, 0x40}}, 0xfffffffb, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}) r1 = accept4$x25(r0, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0) sendmsg(r1, &(0x7f00000017c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="9ebf34c462dbace8b3ffab5ffaf61dabd8c6c3e023bf0ff49379a42d07cb6743b879178c983cf90b2d7860b4cf2db6fd81b7e2bafa4544", 0x37}, {&(0x7f0000000280)="6a44e3dad81bf3f437d121ea9d76b141ce09d18e2595560014644d2f24055a839827ac00f830d73386611da1a5baaf03fca12a544413ecde2d4a14e73c2a7d1b79b4c3d0adbb7257044d81a4f78ae7b83a15dd1f0c3416a156861b2fb24540cf98b3fe5cf23b5eb34a4c6ad62f8d09c5ff3c834a173542f3efdeb1a884561e292793c691e154b4d799fbf17850f7ea0ce4d6f7", 0x93}, {&(0x7f0000000340)="12a0bf420980ca74208c1fedcab04b7f80848203082ae156305c3ddc9985317c885bd63fddb5157f53f11139d18c34f0cdd2660a91a62a448654dcca80f2808e262fa7ea420f389a3f0f8fc1f7c6f490053e3834f0708f5228f3229e3b28d700b146655613c0b5d5852fc3d2f62912b79e7888f6821ab118ac4c9fde77fd9629afc37480d4e86b183510ae04", 0x8c}, {&(0x7f0000000400)="1be483e8fe407282f42d28e7c6718cd2eec023e9bcd0af895ebab33cfc576c82ca32a3eca15875adcd48eb3ce4d062c86f4c693636b7ed228527dd97e8976d65ecf690cedd475af046b6785d8888c840dc1754f7d50e6a5befbe13f699d35214e762c5f905b77588b39e76a7168aa1f08531afe148a15b5407a8d7416c8ffc42080352a9344c5dae69adf956c2f5de29a40c8bf3053dbb2321c49ee78cd1f447925f332445565765f245408889e1bdc165ec21b75ddd", 0xb6}, {&(0x7f00000004c0)="a5550db186b5ac50eef84fde5c2483f361be545b1e042573fb1757bf842b1b7c8b0dbc303fe71923f1d8048a9e1e84178ccdba34eb67ba7a5433dab30e7d79e733b89393b8013534e9e388d65b81d11f17e170a8fb95778ee2a8630cbe4f66156dd255ee91d9cf8a68d8b082f8c9bab7d61a680b2a0d690381155de6e69c31d960b22f20bea97ebb63833a58205564d3c6f5e66976bd03bced0af51b0c6c604bc94e9f098981f917109db61576b4240bf3bbb421ed176601c68f100dedf39f06cf182a6ae7385d63dd36fc62ec99e63cc0e3ec1e8b9b3058a95ad9c463ffa3ef3946ad551ee81a875857d75edc6d492ce7c4db6ad7e92989854e", 0xfa}], 0x5, &(0x7f0000000640)=[{0xc0, 0x398, 0xd1, "3b595f2798a38081ac1f0c6a84a6f77d1b60ea65814bd9c8e956b57163a27fc817e240b49ed8099e068cc11f58884cbb3e6b5939c2ff3c0f83148638905b6490cecae5941b112fa7a2676eef267dcd1bdd547c4ea18f099070901768d981d0ce2ec342ad9e40e69aed5f353cc5077c090be00197b4dd260091a71e55d22d7fd8040f408c6d99e474f95e352cd9e83fd609358e8e618d74b11411965c70ba3af95a86c40012debf2fb70b8d70e199"}, {0x20, 0x1, 0x2, "fcfbcdb0a7a9cc136cb3500f"}, {0x88, 0x102, 0x0, "37211f5445596896ce351e5ec531db502ce5c8385d073fdd5daebdecd18c4f7f54c94a768e4cfbc3835ef00b4743241ecebe032a35347848f5ba0273ef451199e288b70e91469dd643a2fe350f9031eb83581c0d8746eac055bb4afd03c2d6a40d6d39a6a6e4199227e749828444a904181bff0f346754"}, {0x1010, 0x115, 0x6, "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"}], 0x1178}, 0x4040000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001880)={0x300, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x326}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "489f3e3773f710d8b342edc8a44b03954ba3da8801c83f03dab9111e5367edb1a830"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf90000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x173b}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x340000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xf4, 0x3, "30116adf9f8eb6568408472ff908d86120e763fd0727c86ca6220b080e2e674c7253962cb7c795a9e3415bacd2f4ec42acf2dccb726c60f1cca7d74de01fd76a899400f8f171c2e08447f0971f260402a4c3a827c833961966c28d2aba5599e0f2da35b262110171bbde6750938b3de66f527a2c48a3b66fc18115019bf5027af5adadc5ffdc3436b6efef9147aab1bfea387cac4bd9ed92087b4215ecd952b368a7ff6873a5026d0aac790c361352deba24951476c05b52bbaafe8a404c88bd2eabd64dfa7c978c349fce94ab4a6da1034beac3e6621908cebe15e2661586fd0bb213f9922eb6b94516aba4dd32365b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7494}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "74c208a5bac51aa52d358c39bf9871819041b64de7236e0fa5bd258d2ac885af153e"}}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x4040}, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x56}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000001d80), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001ec0)={'gre0\x00', &(0x7f0000001e40)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x9, 0xffffffff, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x66, 0x0, 0xa9, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x14, 0x44, 0x1, 0x1, [{@private=0xa010101, 0x69b}, {@multicast2, 0xffffffff}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001f00)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001f40)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000002080)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0x98, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000020c0)={0x2, [0x0, 0x0]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002140)={r8, 0x2}, &(0x7f0000002180)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x50, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcfb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8) connect(r1, &(0x7f0000002340)=@phonet={0x23, 0x7, 0x9, 0x1}, 0x80) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002600)={0x0, 0x4, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{r0, 0xffffffffffffffff}, &(0x7f0000002640), &(0x7f0000002680)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x16, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000002480)='GPL\x00', 0x400, 0xd5, &(0x7f00000024c0)=""/213, 0x40f00, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x4, 0xd, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002700)=[r0, r0, r10, r0, r0, r11], &(0x7f0000002740)=[{0x2, 0x2, 0x8, 0x1}, {0x4, 0x1, 0xb, 0x8}, {0x1, 0x1, 0x0, 0x1}], 0x10, 0x100}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000002840)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002880), &(0x7f00000028c0)=0x8) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002900)={r0}, 0x8) sendmsg$AUDIT_USER(r12, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x94, 0x3ed, 0x2, 0x70bd2a, 0x25dfdbfe, "097d65ba8efa2a35ce12e6f89c37b7407704f684a65fea6eccc06ca2acca747cb0147118e4e9ed4b51a52d813dd717d0f465b2efea08c776ad57b23eb9c4fac9007c501e90c2ee686756e750e581c5d2c12864f46da244e65146849ba90444ed06ccfdf39d92fa3efdab91cf7963b5061419cfddc8a7fc949c55a3609c2cc8ffa670e3", ["", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c4) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b00), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r13, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8015) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000002c00)={0x0, 0xc, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 578.911736ms ago: executing program 2 (id=5256): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x27dfdbfa, {0x9}}, 0x61}, 0x1, 0x0, 0x0, 0x80}, 0xc048) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x80000001, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x27dfdbfa, {0x9}}, 0x61}, 0x1, 0x0, 0x0, 0x80}, 0xc048) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x80000001, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) (async) 572.265055ms ago: executing program 1 (id=5257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)="5dcc5c18304a327573e0c9dbfc6caa7cb919a22a8addd31b31c7cd131da41da1798df3b3ad549df6aac70b0fb3ab0cde6ca0e91f374e8ea82d7dd82424521f9bfe9db2f4037aa69ee713033f958394da8875b8dd3c1c5c1f3cfa0c224621a419c7da80e08142dbfc89a8c325dac9a1541acf4e379f1e6f89b03b07ffe10bc3fae2894dfd2d0ae7827bc8b96a6a1389e083587a588a74e544eb70e483732b79dc2956eb86742e332d1b7d09ae72dc58", 0xaf}, {&(0x7f0000000600)="96cba5146c61719702e6018c1758515962d74347e349913e464be0ed8bbcfab707319d5e60c7e9c93084499463e5c2448fd99c169ac5181cd8e9920f07ac4a1b7f13e77b3415a794c9025c742381eab8c830a22c35035bd825f8", 0x5a}, {0x0}, {&(0x7f00000007c0)="ca44799dbf30428e09e2bcc30f64eddd61a40aa7e5b66eb39d1b8d7c2cd864d9018e555c4b18d133463be4e1f4983b1f6c943b2c7c67b69946776030d92ee52d7936f1d3a455623dcbc778892e3780995a7814bcb0fbfc592719c7a41ed851b2574cd20509b51f7ab629f2497ebaf5d67815933f50ba8415d4697ebc2594f16f7dbb84490fb4e1160cbb5ce8d981ebf91b19eae26713f201c14b1b46b581e3cf4548eb391658e78c", 0xa8}, {&(0x7f0000000880)="427983e4b9688967dbeb8f117a904552a3575a16a6628a769f9ca63da909e9e1064c90cab337cf82e0756bf5cb37a1d8c96ce1c5ecdee8c49497568e2287efb51513472d8eaefc8f5a652c780daccbd68b6e75a9cb94cc32f74ae2ebb2e674a5752042b000597197da945b9ee291cb00e60b5ea750732c491f13462806b5841c1993842abd3cd9d29c3f95aa0f79911cd16db193f3279e32998c44507fc9cbc0f493", 0xa2}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="e80000000000000002010000020000008301c28373c482b3e3439b98c40ba67f4bdc8e97706be07030ccf9bf77de4e3605176d7e8427c842fd61a044f0bec209469e543b2ab639586b45a15e0805f0fb8af35d0b825335dbd5e29fa3c8f3a8f9ee9a9f8ff7eb63290151fac27f25c56e309bfba2fd40294450b3a8c41e33f130d673470c21e238fa98858681dc874588fca214f94f83b8e4d5b2e2fd3b5d4b2b81552fff815397d8d54f47ad0128a0c2378a94df5bc2c5e894489f1e881dcc479fd8680cd1facf38c67429a78a7d98529f0e10d5822fc59d8dc95ab8bb9ab767bb6e36ef9238b000"], 0xe8}, 0x40050) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="20004b0036005d082b0002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000d1) 528.347836ms ago: executing program 4 (id=5258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x9, 0x2, {0x2, 0x3ff}}}]}, 0x3c}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) 459.16014ms ago: executing program 3 (id=5259): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 426.091499ms ago: executing program 2 (id=5260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000100dc0)=ANY=[@ANYBLOB="40000000400007012bad700000000000017c00000c00fc8008000800010001000c00038008000600", @ANYRES32=0x0, @ANYBLOB="0c3cc100"/17, @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000100b80)=@delchain={0x208, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_ACT={0x1d8, 0x1, [@m_bpf={0xa4, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x8}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x49, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a885"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x130, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x3, 0xffffffffffffffff, 0x80, 0xde}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x3, 0x5, 0x8001}, 0x2}}]}, {0xbc, 0x6, "af76c459315e02407d046a59df89321a8846c93d1de31d6a6112247bc1976b77155b0105205964e71305f09b21de95166282b4f2bbace5a0193840c38b90d21ca5ac49d657ab3ce1f8e9fc5b887577ed3ddf950ac896d231be66705d81fda63c64e9183e1376437c22faee88a8194271a75e9b1e34e946faa68e22973b1b0c3b87c1641ccf340bd11855d9556e1ee2da68f47ba056da58d336fc85f1f2ef8dbd5865b92b7931a93e8e629cf5d2835127bb0d62bc302f2d63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010069703665727370616e30000000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400020000003665727370616e300000000000000900020073797a30"], 0xe8}}, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000100b40)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000100a80)=[{&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000100700)=""/199, 0xc7}, {&(0x7f0000100800)=""/139, 0x8b}, {&(0x7f00001008c0)=""/212, 0xd4}, {&(0x7f00001009c0)=""/36, 0x24}, {&(0x7f0000100a00)=""/69, 0x45}], 0x7, &(0x7f0000100b00)}, 0x3}], 0x1, 0x2040100, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 345.593551ms ago: executing program 0 (id=5261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8948, &(0x7f0000000580)={'bond0\x00'}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) 259.261173ms ago: executing program 4 (id=5262): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c08000093aeb1d492a0e61440dd5b93ffca53e1514df0cb539023077c88ed732a5227e978c9a5871c5a1ee6c4c880ac57d9caf6e275403ff53ea245eb2767aa23c2b1e7570f26981fdb0b571bd4a01d2b4a471cfcef445e7f5cacabb5e73a985ef875fa4809c0f798d1f169", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 256.542884ms ago: executing program 3 (id=5263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0xd, 0x4}]}, @var={0xa, 0x0, 0x0, 0xe, 0x5, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xe2b}, {0xc, 0x73}, {0x0, 0x81}]}, @fwd={0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9}]}, @fwd={0xb}]}, {0x0, [0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x30, 0x2e]}}, &(0x7f00000001c0)=""/55, 0xb5, 0x37, 0x1, 0x40}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000001240)={@void, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x8, 0xfc0, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty, {[@generic={0x94, 0x4, "c163"}]}}, {0x11, 0x8, 0x0, @multicast1, "7535bfe5a7e97b15cdcba5966d9732ea8ea08cf639b5e5d7bcec8a8a25ecde7989a190279cbfc9c67f6a2c99e404512295a4cb3dfd4a1ef09082d6d9dd11683efc9cbfbedf14876b75b5a0b6e83c7bb96983447caf70f4f1bab78e6fb7f86c49abefdd46d198449e26dade932f3bbeb7474762162a196d0921762555e96dbd4c3728c458cee2cc4573281cf2a63b58774a7e89abd34565e59067826875881bea3b1eeedfa8cb09ae250d9e89488c3e99bd41dc02f566409f739964151d46d4f3e8e25080e086e7018b95d4a2a7e66c99e9df40c7e553a5e13f9e8a895f438a6a776845b275d19dc4b6fa52153caa3c6bac9c57643ee975cb1d0665a10703d785a9ca1029a9bc4b29f5f8159788e2ce8566ae144edf636947d1d3e1fabcac9801ea7e75e2ee53fb52fcd2d05aca25f79bc514baa52d1ac470964234c3c3545ac1e7b4aef579e3ca9996afcb527157bdc14880d35c9b26891cb75503d476a1961bef9bd05aab15a8f6d086b22e4265f4f57e8692edaeff9eeb8f71981ad983b26b553142a65e00e0e0a764902d46c766f13a0393ecff1543eb642c23f587745c414315902b90b6c7ebf2c40dc5578f1f2141844489abd912b450d900ad3383636ca68b3704dea493c2cf0ddb71045b62f5a856bec50d8ac4d83dee03b201bc5ed65f281d9fb48d25fad5222550e7b23988084bbab10356cc167b8863daac2aa5ec5b4e3796625589466007e1217abc661f3bdf56b6621fe54f1ad78fde9acd9bf91ecc2a33a8ef655d5b2accd01794491a254d46c8f40dd1373aa43cec8d247c9c09acb1b0cb5e9e561b5d6f58e50d6e06463830b95b137bc9be674569c6d52233f707657b46163b56e75dec716ba88b24bb7b920a0f90ed64e25a11d71a21df7e960fae2fad78c51e55bc0b7c1f2ba6480f216f3ff07cf070627d3d6d3eae05628efac172018781b8a005e20c32022ec6c487913f9c84a881a28034c5bec4d8cb101ecb1521f077398f2f6d2fe8f23baab409a2611d4cadb438f462c4dec2a79a1d6daf8ca8dacf380159e0a9ed5933a955e9d3f1e51a73b662588a9bd9039d75a6f72a627c0d04f1241911ab66ebc3622e37502cfca2f4fde0c41dfe674fb04f028b5f363c4a2171e5ee7a37c5076684d95f9410874ed0a4fbe6b42b14a1fec1826b00bb9a92d288328cb97897ca9029396110ef9a4029bc5d81ff765cbd9217d15662d975a73c71c1d4fece4c955a89e10b5645deaf5e0c2ac858a81d04aa75a2305e815d0be3ea37b2b4dcfd12bca49350b4db4971e95b60897fced07aed8dfcbe16e923bb1687202dd0afc5fc704de262575c988aa3390ea4d958adc81e1d6295e13d55457a780855ae762ab2b95752a20c7a14c0db07aa274a46b29b5e90dcf6af0061fe2c5519c922a98b45b3e19db159afa2ebc53464244f681e4a9b77bee51563a8ac05657b701de22af924dffaea81d63c8fc155ca24c6452fca586aee653b2fd08f64c40bbb352159ca4458a6c0516dc101235e5fe8a17bf323dec6adf7ff489dad49a6c721369bde4d29070c3c1c041266a84d10956766a23cb7eb7771f7724423868ac33ea27933c2ddcdf6270dc4f95bf7574850b3989ce78f79550b3fff34430db937f6986f3c671ecfc3e9f9528f2f421e8e739f42007aafc65044017f3ae8c804b9cfe265db3f8133c52d7872fc9e84d5ee66979784e82f685548dd9d73d4e08a96fa16450138edda99f5a0f1ce42a95cd31a2cc89809314f6601d2b9f3dade31c3b6a3697258e36eb14b36a07d526e8fd35736615891a742dc5f245a3623a466394630816b4c1060fe5024b2e8502ea8e5af35dca603c435fdc600a2c6b4c850843754af386a740c7391c6597b7e449db86e8014e4016562c6554df947913924b840918ed527cd33af80e8e4621064acfe51bc109f7bc3d0ff379f99111657cd672241ce51669fe523c79df3143921674fe13d0ac9e412df58565e4a0f1bccdc46c38778a0036c68d9e91bc64e04e8089fec22ac103b28a13ac3a493e461b874ab47ec360d90a3e82761339bbf64a42586b8463e236d56528a2707ed1a391045aaec35e32cdf711073ab8dbc4dd1e00b53efa33349abae900bf776fefcb12de10f87f629db55aec4a01bdc1b2bdc353ebb438474e45fe5df2dc835595b94d98fbca406fc5dc8de8aa433bcbde4da5cb20a139fdd4a896a72f6df8d7af762c937fd9426608f605a17d80a411562a2bb7378ce7e064a96fa500222922857a7d35d66da170c5998e302141f04efe50cc59d4907a8afd9719e8b18c4e390916876df1c1c34e60ac45abdbb800ddb28d26b22f22d677098a9d08e4a5ef66e8379fd2c22850397d50e3db8a0a9c3204c32792cc5e73e7b9c7ec91960d832b97497aaaf29d68801fa3a4335de56c7b7f98dafc80a12ae8f73c47c1a591fd377bf46ee686429327901003b4d7a97ec0049119158965d85d1cbbb59c61cb3aac1005a8b1801eb5edf9b687a7179044a052e3fd0bb54aecaf6a38a1cfe08a19a1704f3e1ef0e9da860b36593ab0da53b32f8df6ac7f6543b8ae48d3033d282d12f91c565f3ad2058a0163763046897d15bbca0bf9c51295dbf6ac0b0c118aac434ef40d47f291c38f15f2d05ac9c39c2107ac636a7b59d3c6f9d01dabf6238793b128973fee47a8913fce9d19cdc3d77cbe1c0105b8f51f8dbe9cff95883bb23d490f123f05a46dd9fda0db6431f11b871ecc817b59aa399e7983a71030deda30ab18557326c567614a269b1799948bd95cad843a901e6e7277cbd0b426c7df0d8cd515a16ea4ce0fff512aa9fe1f713e8b0e0ad3d4aa133fc5e13df93a3d9e2fb1b16eed71c1ed525d4372432b0387af9c6e8632a0524986f1bc409b5341e972e67e6b37b0341e5d7874673435f3c3d5a7ca91967a755dcccce0ab81dd31493556b082514b32b38686a559ea4df5f3e1e0172d0b8e35054a14bc5c76ffbde95cd0de982ce2447533814188550dcf5c6ef11257f8fc2ae901c51450d3275d1931ea45356f34bbb999a387b8c7ff21ef55d156f3c7d128358d39d665cc77c69b76e2eaaf70df0b6b2873b43e6d163c4d185774c649cbed94d2736d55db966b23a1019bf267d90b2aff37f7b3d852211dc88177623a03914064f8541f5ca3e7dd94ffd41b85fc536ccf1ebd77ac6c37a5918ab39734d4452bc79a9c6a1f4fdd8659662ae0dd0c24e38080a9bcb803d66f92e2e9542b3bf5b9972a49e51840ae3f2ee9070988d008d2593aa5ff9e80cfcd591bc16afbe8eb1d0589c0360cd6233b4fca06b117d90daceddcc095733b5bf15dc67fd61bc7138fc0424c31cba588a213e798c8ad2a44130f009c636417346e4c30cdda5d67dee3ef6c230178ef2760ccbe3f2148e2d6b0f4482e4f01ad7b0038bfe0e1b4c4886467e2769af5f01c34d86227a63ea9e6a236f0b016ac45e4dc5740fed4648374d751c47eb05fe7c27f9c0c64bcb8eb8f7caac553b81faf229c2b4d65066db1bcc224cf55a3a9fbd9c4cef128a75081bc328033956ded108b549bb0f0e9d47b1bd11b5c0e530fe82e64fea09cf2ace9321f297865f0ac106b649515f7963a7735c35d0437b9ed86de171abb485c8ae0a356f3cdb5518ebcdc778bdc7d4199973e8b5a250b5a26665fcd4a3e2172d990a6eb0c66b46a242c4761c65dd4ea85c1fc4d72cf1ac9dfa0d97bb30f256d47dda475ed13c48f5cdf3d283e727dcb690f63cb14cb4137c6b5f0a754baac058a81863c6c63d367477ca2fd18974fc59bce30937de4e3b01c32f6b066f942323cf7781eeb0d3c50e8ebe40e24ff8f332463af30b6f34d37066a3f41bd25e91bc6b908a858a35cd3ce1f442170ae646da8d3c48131cf2636df7cc854767082d44b296b5665ac881da2dbdb3f9625e4f08878b7397c569961e5b3bc0247866071b8dfe64444df9a7b793c3536cc6366e6be8a7e149286ce418707340c6631185f7f45a2350b54c8001c1ea496a8922d72602c31184f47ed1205768a71676fe7f34dfcf40d9a179cb7c65e1bf1580dc566471ecc7e75a8c0d3ba01a2a0c7e13ea1e6baa58cde1c8bc2cdb6107c6eac6350a93d874ba02708dcd00b0e6c11357bf6ab71d1bcf5babaefb8867349c3162597ee659e8bb63c99e03d7ab7f2c71f4867aea97b2e703e7a56eb78344476e6cf6e0940774851274ef806618e07f5bdb83c5d6886be415366a14e3ad88b827af03683a59cf8048bb4c5b2e58010dfbfcfad508f94c8d9600e27d45a8cf11457624798c38dc338ec377e0dbf00b3a1cdcc239a7f1afe2a2c7d45a7da900353366ad5052da74808c38fea633bbbc13321202fc23e0728d9e63eede0b9936f59db3786012c17c6f4510861fbe5d37387c1397df41c5eb14be4b5ca3290db26326849bc7e69ce1f69a86aac9fe4c30a91f4f0624f893de5e6eb996ce4256647b6bf7779192c8e029105d669599bcd3b27a6f8ee314c948b1965888789bc729a389e87159dd9fd2bd20114d1461843bd87e498ff389550aaf27a96ce0c84dc7e409c09de299ae6edfd8af85a07b4e3e743ac44174bbdc6646c15b6abc73399bc7a6389213bb1339b79829b2d574ee22d362e708ac809d2095be7e30c4255e298a82f756b6b811302adbd102a6acb0ae3fa66999f3f10d278d0653d2069f1cd35a330f0e09749bfd1f1675373bfe72c4d394c42218e0dd60feb65a75e09a76d3c6f979ec90396cf48e8001d1e5aa90e19dfecaf82af6c728d637c7eab4dc72579997cc1c1f6bb55cb17e546ab7dee9312ac92da028c54ae12eef423e3e8c51b8f7e08dbaefccd9dc06cb52d20742821dc88df1ee6becb5189675905e2880e3265cd4519690a7264e3d306779e0e143dea0a1081c50291e797337eb8db3f62199bbb4d4ad01df503d643b34e50dfbf25a46f8f3df088df17b4fa794db60028314283b70ced54d309669b64e296a6d59fbaf1f65a24a31d7e3956347253b3ca98a5436bb66ee056959845e5c81076fa48b9b7e0872414e6bf834128140b929f0f81cac9d492efb65933a02f6d3381e7f9b2e35b6d4e591e07f1356818a1ae8862aeb82982c5d72af5ea9ba03b5a4389b84cec3f44ef48986f98a8f627f178e7aa2261322448463d3fab69aafa7c6a5e8ac73765a05c4111b98fe7852afe860df1f6490767df30339cb6e67eee871f94965eb09e28aded03e677b6aba31dda17878ba7c0651012c68255ea6fcaf1d85b81ca3706c31d856923a0c898c0aa2ed93a605243ccf02ed0a1414fae1b58bff27cbb80bbbf9a695beafab1ed20327635f6ec63e6f8571d16d1a8cad0e2a751dd5358e98ca53e39f95e12cc13fc7c53196fd849791bf80ea049403a7b15b86bf7881089dc5aeef430f18812ecb3c49553789945b1beb0befbc4ad0e49722bc08686533e1ed11040a61ab54966cb34771ba464166c8ca90f9cb97183c0856fe090b5a8dd38a44adfb92441c27eac7da02622507c51aab0706b9b0d55c91082cc73cba4990ad1535928b6101096cb547e27842df8384637a5f0e3baf74af8ead5b25b2b328b38e5ed0633881c8dccf82e8cc105f64f672c44ac4cde77c3ca0dc6e82167685743047c8543f5d2591b08c8fdc51b4708d8b9d8ebc9cacc8edd444a8"}}}, 0xfca) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, [@ldst={0x3, 0xdfc101a3696e2cf4, 0x4, 0x2, 0x9, 0xfffffffffffffff6, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', r0, 0x25, r2, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x1, 0x8}, {0x5, 0x5, 0x2, 0x9}, {0x0, 0x3, 0xc, 0x7}, {0x2, 0x5, 0xa}, {0x3, 0x2, 0x9, 0x2}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x21}, 0x94) 226.082504ms ago: executing program 0 (id=5264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) 115.6744ms ago: executing program 2 (id=5265): syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d83a04", 0x10, 0x3a, 0x0, @remote, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d83a04", 0x10, 0x3a, 0x0, @remote, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24024050}, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) 6.631791ms ago: executing program 4 (id=5266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x80, 0x400, 0xfff, 0x1000, r0, 0xe47, '\x00', r2, r3, 0x5, 0x5, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xcd, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000180), 0x0}, 0x20) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x7, 0x0, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x300000f, 0x110, r6, 0x80000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc400) 0s ago: executing program 0 (id=5267): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) write(r1, &(0x7f0000000040)="a228bc1ebacd8c6c55a92df95d4999c8dd6d37220ce8ecfef249bdfa84a5dd6da81f2df92778a3", 0x27) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000300)={r3, &(0x7f00000001c0)='\x00', 0x12000, &(0x7f0000000240)={@align, {0x9, 0x6, 0xfffffff9, 0x1}}, 0xad, &(0x7f0000000280), &(0x7f00000002c0)=0xb214}) kernel console output (not intermixed with test programs): ve_1 [ 395.967705][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.967786][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.967819][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.967850][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.099636][T19076] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 397.757114][ T4933] Bluetooth: hci1: command tx timeout [ 398.208851][T19033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.296747][T19083] netlink: 'syz.3.3300': attribute type 8 has an invalid length. [ 398.503257][T19085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.520509][T14450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.520529][T14450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.644502][T14449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.644524][T14449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.671768][T19097] __nla_validate_parse: 3 callbacks suppressed [ 398.671788][T19097] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3305'. [ 398.690643][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3305'. [ 399.019892][T19108] netlink: Failed to add helper -22 [ 399.019943][T19108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.203632][T19108] netlink: 'syz.4.3308': attribute type 23 has an invalid length. [ 399.291744][ T52] block nbd0: Receive control failed (result -32) [ 399.448050][T19137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.483353][T19137] bond1: Unable to set up delay as MII monitoring is disabled [ 399.494038][T19137] bond1 (unregistering): Released all slaves [ 399.526800][ T4933] Bluetooth: hci0: Opcode 0x0c24 failed: -112 [ 399.613460][T19150] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 399.662896][T19152] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 399.669496][T19150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3318'. [ 400.036796][T19176] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 400.720929][ T52] Bluetooth: hci0: command 0x0c24 tx timeout [ 400.722733][ T4933] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 400.904776][T19225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3335'. [ 401.022365][T19232] block nbd0: Unsupported socket: should be TCP or UNIX. [ 401.060972][T19232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3337'. [ 401.254313][T19251] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20003 [ 401.405447][T19256] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3341'. [ 401.421056][T19258] netlink: 'syz.0.3345': attribute type 13 has an invalid length. [ 401.442787][T19262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3341'. [ 401.628649][T19267] batman_adv: batadv0: Adding interface: syzkaller0 [ 401.628667][T19267] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.628695][T19267] batman_adv: batadv0: Interface activated: syzkaller0 [ 401.669302][T19275] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3348'. [ 401.700183][T19266] netlink: 'syz.1.3346': attribute type 1 has an invalid length. [ 401.951190][T19265] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 401.995415][T19265] batman_adv: batadv0: Removing interface: syzkaller0 [ 402.100278][T19295] netlink: 'syz.2.3353': attribute type 24 has an invalid length. [ 402.323891][T19303] netlink: 'syz.1.3356': attribute type 8 has an invalid length. [ 402.334735][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 402.378228][T19311] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3358'. [ 402.518235][T19318] ip6t_srh: unknown srh match flags 4000 [ 402.797281][ T52] Bluetooth: hci0: command 0x0c24 tx timeout [ 402.961703][T19333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.991288][T19333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.597169][T19375] netlink: 'syz.1.3377': attribute type 3 has an invalid length. [ 403.904931][T19392] __nla_validate_parse: 131 callbacks suppressed [ 403.904949][T19392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3384'. [ 403.927164][ T13] IPVS: starting estimator thread 0... [ 404.016097][T19400] IPVS: using max 30 ests per chain, 72000 per kthread [ 404.170723][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3387'. [ 404.212942][T19411] netlink: 'syz.3.3389': attribute type 64 has an invalid length. [ 404.313013][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 404.498682][T19425] xt_MASQUERADE: bad rangesize 2147483646 [ 404.861621][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 404.861642][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3401'. [ 404.940651][T19459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3403'. [ 404.941294][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 405.000633][T19461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3404'. [ 405.000668][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3404'. [ 405.101045][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3406'. [ 405.354745][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b4e8400: rx timeout, send abort [ 405.471782][T19472] ip_tables: iptables: counters copy to user failed while replacing table [ 405.854911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b4ea400: rx timeout, send abort [ 405.864544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b4e8400: abort rx timeout. Force session deactivation [ 406.301873][T19516] netlink: 'syz.3.3419': attribute type 3 has an invalid length. [ 406.339143][T19520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.355125][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b4ea400: abort rx timeout. Force session deactivation [ 406.772711][T19532] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 406.772746][T19532] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 406.772779][T19532] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 406.889857][T19532] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 407.195197][T19558] openvswitch: netlink: Tunnel attr 131 out of range max 16 [ 407.200366][ T81] smbdirect: ib_dev[syz2] removed [ 407.262842][T19558] batadv_slave_0: entered promiscuous mode [ 407.424112][T19552] batadv_slave_0: left promiscuous mode [ 407.722547][T19579] netlink: 'syz.3.3441': attribute type 4 has an invalid length. [ 407.729319][T19579] netlink: 'syz.3.3441': attribute type 4 has an invalid length. [ 408.401441][T19605] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 408.642125][T19616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.914445][T19633] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 409.090342][T19640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.342722][T19658] __nla_validate_parse: 22 callbacks suppressed [ 409.342743][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 409.655451][T19676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3474'. [ 409.733076][T19683] bridge_slave_0: left allmulticast mode [ 409.733098][T19683] bridge_slave_0: left promiscuous mode [ 409.736014][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.763997][T19683] bridge_slave_1: left allmulticast mode [ 409.764019][T19683] bridge_slave_1: left promiscuous mode [ 409.764201][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.805180][T19683] bond0: (slave bond_slave_0): Releasing backup interface [ 409.827293][T19683] bond0: (slave bond_slave_1): Releasing backup interface [ 409.862461][T19683] team0: Port device team_slave_0 removed [ 409.872250][T19683] team0: Port device team_slave_1 removed [ 409.874692][T19683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.874711][T19683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.881220][T19683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.881237][T19683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.891859][T19683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.954385][T19695] ip_tables: iptables: counters copy to user failed while replacing table [ 409.968850][T19690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.982478][T19695] syzkaller1: entered promiscuous mode [ 409.982497][T19695] syzkaller1: entered allmulticast mode [ 410.074557][T19698] xt_HMARK: proto mask must be zero with L3 mode [ 410.111785][T19698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.115396][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 410.299196][T19708] macvtap1: entered promiscuous mode [ 410.299344][T19708] macvtap1: entered allmulticast mode [ 410.299353][T19708] veth1_vlan: entered allmulticast mode [ 410.303208][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303222][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303229][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303235][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303240][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303246][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303252][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303258][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303264][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.303270][T19707] tc action pedit unable to extract header offset for header type (0x5) [ 410.319543][T19707] IPVS: length: 8 != 213000 [ 410.524739][T19710] netlink: 'syz.0.3482': attribute type 2 has an invalid length. [ 410.637733][T19715] gre1: entered promiscuous mode [ 410.637760][T19715] gre1: entered allmulticast mode [ 410.740692][T19721] netlink: 'syz.0.3486': attribute type 7 has an invalid length. [ 412.520022][T19670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.539963][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 412.732484][T19748] net_ratelimit: 1 callbacks suppressed [ 412.732502][T19748] openvswitch: netlink: Missing valid actions attribute. [ 412.758921][T19751] openvswitch: netlink: Missing valid actions attribute. [ 412.759302][T19748] openvswitch: netlink: Missing valid actions attribute. [ 412.827744][T19756] netlink: 'syz.0.3495': attribute type 2 has an invalid length. [ 412.903520][T19760] sctp: [Deprecated]: syz.1.3499 (pid 19760) Use of int in max_burst socket option. [ 412.903520][T19760] Use struct sctp_assoc_value instead [ 412.915073][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3497'. [ 412.915095][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3497'. [ 412.915245][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 412.961339][T19769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'. [ 413.020342][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 413.039431][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 413.188063][T19795] x_tables: duplicate underflow at hook 1 [ 413.255618][T19799] smc: net device team0 applied user defined pnetid SYZ2 [ 414.081663][T19830] syz.1.3517 (19830) used greatest stack depth: 18048 bytes left [ 414.485334][T19867] __nla_validate_parse: 5 callbacks suppressed [ 414.485352][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3525'. [ 414.908238][T14451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.908273][T14451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.944385][T19892] ip_tables: iptables: counters copy to user failed while replacing table [ 414.971084][T19889] syzkaller0: entered promiscuous mode [ 414.971098][T19889] syzkaller0: entered allmulticast mode [ 415.243232][T19902] sctp: [Deprecated]: syz.3.3535 (pid 19902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.243232][T19902] Use struct sctp_sack_info instead [ 415.274217][T19903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3537'. [ 415.508797][T19920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3540'. [ 415.534550][T19924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3540'. [ 415.640129][ T31] audit: type=1804 audit(1790488507.842:10): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3542" name="/newroot/111/cgroup.controllers" dev="tmpfs" ino=583 res=1 errno=0 [ 415.640355][ T31] audit: type=1800 audit(1790488507.842:11): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3542" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0 [ 415.874122][T19949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3545'. [ 415.874146][T19949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3545'. [ 416.055384][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'. [ 416.168041][T19959] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20002 [ 416.644243][T19988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.588048][T20054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3574'. [ 417.588074][T20054] nbd: socks must be embedded in a SOCK_ITEM attr [ 417.774764][T20060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3577'. [ 417.841594][T20068] sctp: [Deprecated]: syz.3.3579 (pid 20068) Use of int in max_burst socket option. [ 417.841594][T20068] Use struct sctp_assoc_value instead [ 417.877402][T20070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 418.140132][T20078] x_tables: unsorted entry at hook 2 [ 418.385139][T20101] netlink: 'syz.3.3589': attribute type 32 has an invalid length. [ 418.598229][T20114] netlink: 'syz.3.3590': attribute type 2 has an invalid length. [ 418.891295][T20121] netlink: 'syz.3.3592': attribute type 2 has an invalid length. [ 418.891315][T20121] netlink: 'syz.3.3592': attribute type 8 has an invalid length. [ 419.617266][T20143] netlink: 'syz.0.3597': attribute type 6 has an invalid length. [ 419.621222][T20145] netlink: 'syz.2.3599': attribute type 2 has an invalid length. [ 419.621242][T20145] netlink: 'syz.2.3599': attribute type 8 has an invalid length. [ 419.621254][T20145] __nla_validate_parse: 11 callbacks suppressed [ 419.621263][T20145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3599'. [ 419.753154][T20147] bond0: entered promiscuous mode [ 419.753176][T20147] bond_slave_0: entered promiscuous mode [ 419.753393][T20147] bond_slave_1: entered promiscuous mode [ 419.763793][T20147] batadv0: entered promiscuous mode [ 419.769344][T20147] debugfs: 'hsr1' already exists in 'hsr' [ 419.769365][T20147] Cannot create hsr debugfs directory [ 419.769910][T20147] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 419.804501][T20149] netlink: get zone limit has 8 unknown bytes [ 420.046011][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 420.087638][T20168] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 420.091926][ T5622] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 420.220175][T20174] netlink: 'syz.1.3609': attribute type 1 has an invalid length. [ 420.230641][T20179] netlink: 'syz.1.3609': attribute type 1 has an invalid length. [ 420.260632][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 420.262675][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 420.263331][T20176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3608'. [ 420.263358][T20176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3608'. [ 420.395295][T20188] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3612'. [ 420.413884][T20188] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 420.414477][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3612'. [ 421.058356][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3618'. [ 421.079509][T20208] netlink: 'syz.2.3619': attribute type 7 has an invalid length. [ 421.079532][T20208] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3619'. [ 421.241759][T20215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.245344][T20215] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 421.283582][T20215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.308792][T20215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.341896][ T52] Bluetooth: hci1: unexpected cc 0x2035 length: 2 > 1 [ 421.344637][T20215] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 421.394189][T20215] bond0 (unregistering): Released all slaves [ 421.603221][T20231] veth1_macvtap: left promiscuous mode [ 421.782032][T20235] Bluetooth: MGMT ver 1.23 [ 422.875250][T20304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.208547][T20316] batadv_slave_1: entered promiscuous mode [ 423.210054][T20316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.268139][T20316] batadv_slave_1 (unregistering): left promiscuous mode [ 423.268202][T20316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.537080][T20278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.674930][T20350] __nla_validate_parse: 11 callbacks suppressed [ 425.674949][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 425.768167][T20357] hsr0: entered allmulticast mode [ 425.768189][T20357] hsr_slave_0: entered allmulticast mode [ 425.768205][T20357] hsr_slave_1: entered allmulticast mode [ 425.887748][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 425.889134][T20361] bond0: entered promiscuous mode [ 425.898254][T20361] batadv0: entered promiscuous mode [ 425.902607][T20361] debugfs: 'hsr1' already exists in 'hsr' [ 425.902630][T20361] Cannot create hsr debugfs directory [ 425.902694][T20361] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 425.920632][T20361] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 425.930708][T20364] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3655'. [ 426.299986][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 426.304280][T20380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 426.304286][T20382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 426.426823][T20387] validate_nla: 2 callbacks suppressed [ 426.426842][T20387] netlink: 'syz.2.3660': attribute type 21 has an invalid length. [ 426.600054][T20387] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 426.600606][T20400] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3662'. [ 426.600627][T20400] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3662'. [ 426.642645][T20387] bond0 (unregistering): Released all slaves [ 426.934993][T20415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3667'. [ 427.033628][T20417] netlink: Failed to add helper -22 [ 427.033681][T20417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.074962][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 427.141045][T20428] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 427.167895][T20428] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 427.286845][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.287256][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.287627][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.288009][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.288674][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.289045][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.289416][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.444539][T20443] netlink: 'syz.1.3675': attribute type 21 has an invalid length. [ 427.822605][T20462] tipc: Failed to remove unknown binding: 66,1,1/0:961476947/961476949 [ 427.977023][ T12] IPVS: starting estimator thread 0... [ 428.066646][T20471] IPVS: using max 30 ests per chain, 72000 per kthread [ 428.140970][T20480] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 428.313382][T20489] IPv6: NLM_F_REPLACE set, but no existing node found! [ 428.679868][ T6791] tipc: Subscription rejected, illegal request [ 428.849281][T20472] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 429.021466][T20534] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 429.061802][T20534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.090152][T20534] bond0: (slave gretap2): making interface the new active one [ 429.110217][T20534] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 429.269872][ T12] IPVS: starting estimator thread 0... [ 429.356762][T20554] IPVS: using max 38 ests per chain, 91200 per kthread [ 429.894775][T20578] bond4: entered allmulticast mode [ 429.895249][T20578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.921513][T20579] wg1 speed is unknown, defaulting to 1000 [ 429.933554][T20589] x_tables: duplicate underflow at hook 1 [ 429.941859][T20590] x_tables: duplicate underflow at hook 1 [ 429.967277][T20592] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 429.972422][T20579] wg1 speed is unknown, defaulting to 1000 [ 429.975484][T20579] wg1 speed is unknown, defaulting to 1000 [ 430.035887][T20594] rdma_rxe: rxe_newlink: failed to add wg1 [ 430.169091][T20594] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 430.292111][T20603] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 430.716068][ T5725] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec [ 430.749131][T20617] __nla_validate_parse: 12 callbacks suppressed [ 430.749150][T20617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3729'. [ 430.971338][T20626] bond1: entered promiscuous mode [ 431.004314][ T5725] wg1 speed is unknown, defaulting to 1000 [ 431.013090][T20579] infiniband syz2: set active [ 431.013109][T20579] infiniband syz2: added wg1 [ 431.081080][T20634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3734'. [ 431.095023][T20579] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 431.095055][T20579] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 431.095088][T20579] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 431.194674][T20634] xfrm1: entered promiscuous mode [ 431.194695][T20634] xfrm1: entered allmulticast mode [ 431.214109][T20638] bond0: entered promiscuous mode [ 431.214131][T20638] gretap2: entered promiscuous mode [ 431.229289][T20638] batadv0: entered promiscuous mode [ 431.231660][T20579] RDS/IB: syz2: added [ 431.232876][T20638] debugfs: 'hsr1' already exists in 'hsr' [ 431.232895][T20638] Cannot create hsr debugfs directory [ 431.232950][T20638] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 431.240535][T20638] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 431.247762][T20579] smc: adding ib device syz2 with port count 1 [ 431.248012][T20579] smc: ib device syz2 port 1 has pnetid S (user defined) [ 431.252213][ T5801] wg1 speed is unknown, defaulting to 1000 [ 431.285499][T20579] wg1 speed is unknown, defaulting to 1000 [ 431.620830][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 431.621623][T20660] netlink: 'syz.3.3743': attribute type 3 has an invalid length. [ 431.621821][T20660] netlink: 'syz.3.3743': attribute type 3 has an invalid length. [ 431.699738][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 432.072158][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.072367][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.072564][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.072752][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.072943][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.073170][T20689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3748'. [ 432.310209][T20579] wg1 speed is unknown, defaulting to 1000 [ 432.456835][ T6790] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.908865][T20721] net_ratelimit: 21 callbacks suppressed [ 432.908884][T20721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.911344][T20721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.099993][T20727] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 433.179085][T20579] wg1 speed is unknown, defaulting to 1000 [ 433.228042][T20730] netlink: zone id is out of range [ 433.228137][T20730] netlink: zone id is out of range [ 433.228161][T20730] netlink: zone id is out of range [ 433.228396][T20730] netlink: zone id is out of range [ 433.228404][T20730] netlink: zone id is out of range [ 433.228534][T20730] netlink: zone id is out of range [ 433.233254][T20730] netlink: zone id is out of range [ 433.331550][T20737] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 433.331777][T20737] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 433.522740][T20739] veth1_to_bond: entered allmulticast mode [ 433.524466][T20739] veth1_to_bond: left allmulticast mode [ 433.628815][T20579] wg1 speed is unknown, defaulting to 1000 [ 434.242578][T20579] wg1 speed is unknown, defaulting to 1000 [ 434.705112][T20793] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 434.714667][T20793] batadv_slave_0: entered promiscuous mode [ 434.714896][T20793] batadv_slave_0: left promiscuous mode [ 434.819281][T20579] wg1 speed is unknown, defaulting to 1000 [ 435.336427][T20579] wg1 speed is unknown, defaulting to 1000 [ 435.359026][T20811] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 435.412855][T20814] sctp: [Deprecated]: syz.1.3775 (pid 20814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.412855][T20814] Use struct sctp_sack_info instead [ 435.457334][T20817] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 435.951679][T20827] tipc: Started in network mode [ 435.951708][T20827] tipc: Node identity 0ace39bf6517, cluster identity 4711 [ 435.951925][T20827] tipc: Enabled bearer , priority 0 [ 435.997391][ T4933] Bluetooth: hci1: command 0x0405 tx timeout [ 436.065746][T20835] __nla_validate_parse: 68 callbacks suppressed [ 436.065766][T20835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3779'. [ 436.113477][T20827] syzkaller0: entered promiscuous mode [ 436.113501][T20827] syzkaller0: entered allmulticast mode [ 436.114257][T20827] tipc: Resetting bearer [ 436.472084][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 436.472924][T20844] ip6t_srh: unknown srh invflags 4000 [ 438.473557][T20579] wg1 speed is unknown, defaulting to 1000 [ 438.533309][T20844] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3782'. [ 438.587888][T20826] tipc: Resetting bearer [ 438.635299][T20863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3784'. [ 438.652884][T20826] tipc: Disabling bearer [ 438.682421][ T4945] tipc: Node number set to 1876507071 [ 438.692712][T20861] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3784'. [ 438.699870][T20866] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 438.721656][T20863] gretap0: entered promiscuous mode [ 438.740532][T20861] 0{X: renamed from gretap0 [ 438.752052][T20861] 0{X: left promiscuous mode [ 438.752071][T20861] 0{X: entered allmulticast mode [ 438.770470][T20861] net_ratelimit: 8 callbacks suppressed [ 438.770487][T20861] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 438.927803][T20871] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 438.927824][T20871] netlink: 'syz.1.3787': attribute type 2 has an invalid length. [ 438.927835][T20871] netlink: 'syz.1.3787': attribute type 3 has an invalid length. [ 438.927846][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 438.955363][T20871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.955379][T20871] IPv6: NLM_F_CREATE should be set when creating new route [ 439.138905][T20877] netlink: 'syz.4.3788': attribute type 1 has an invalid length. [ 439.138927][T20877] netlink: 'syz.4.3788': attribute type 7 has an invalid length. [ 439.138939][T20877] netlink: 'syz.4.3788': attribute type 8 has an invalid length. [ 439.138951][T20877] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3788'. [ 439.138963][T20877] NCSI netlink: No device for ifindex 65584 [ 439.191386][T20876] 0{X: entered promiscuous mode [ 439.333882][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'. [ 439.335603][T20885] bridge_slave_1: left allmulticast mode [ 439.335628][T20885] bridge_slave_1: left promiscuous mode [ 439.335914][T20885] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.383649][T20885] bridge_slave_0: left allmulticast mode [ 439.383674][T20885] bridge_slave_0: left promiscuous mode [ 439.383890][T20885] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.560557][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 439.575522][T20898] vcan0: tx address claim with broadcast sa [ 439.653320][T20908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3797'. [ 439.755288][T20911] netlink: 'syz.4.3798': attribute type 3 has an invalid length. [ 440.153841][T20934] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 440.200657][T20934] bond2: (slave gretap1): making interface the new active one [ 440.202280][T20934] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 440.298175][T20943] syzkaller0: entered promiscuous mode [ 440.298196][T20943] syzkaller0: entered allmulticast mode [ 440.448888][T20947] ip_tables: iptables: counters copy to user failed while replacing table [ 440.545171][T20949] netlink: Failed to add helper -22 [ 440.545219][T20949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.974696][T20974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 441.118934][T20979] netlink: 'syz.2.3817': attribute type 21 has an invalid length. [ 441.118955][T20979] netlink: 'syz.2.3817': attribute type 22 has an invalid length. [ 441.118969][T20979] __nla_validate_parse: 3 callbacks suppressed [ 441.118980][T20979] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3817'. [ 441.119762][T20979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3817'. [ 442.162165][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079b8f400: rx timeout, send abort [ 442.162769][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079b8f400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 442.177727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079b8d400: rx timeout, send abort [ 442.178013][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079b8d400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 442.283649][T21039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3830'. [ 442.751287][T21066] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 442.895699][T21073] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.913305][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3839'. [ 442.975541][T21075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.152726][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 443.152887][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 443.153035][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 443.153185][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 443.153393][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 443.153548][T21093] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 444.218170][T21096] validate_nla: 3 callbacks suppressed [ 444.218188][T21096] netlink: 'syz.0.3845': attribute type 11 has an invalid length. [ 444.218201][T21096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3845'. [ 444.218627][T21098] netlink: 'syz.0.3845': attribute type 11 has an invalid length. [ 444.218641][T21098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3845'. [ 444.258597][T21104] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3846'. [ 444.314892][T21107] bridge0: port 1(veth1_to_bridge) entered blocking state [ 444.314982][T21107] bridge0: port 1(veth1_to_bridge) entered disabled state [ 444.315122][T21107] veth1_to_bridge: entered allmulticast mode [ 444.340292][T21107] veth1_to_bridge: entered promiscuous mode [ 444.343795][T21107] bridge0: port 1(veth1_to_bridge) entered blocking state [ 444.343897][T21107] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 444.378499][T21108] dvmrp0: entered allmulticast mode [ 444.413208][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 445.181129][T21153] netlink: 'syz.1.3860': attribute type 28 has an invalid length. [ 445.181151][T21153] netlink: 'syz.1.3860': attribute type 3 has an invalid length. [ 445.181164][T21153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3860'. [ 445.364029][T21157] nbd: must specify at least one socket [ 445.622183][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 445.622218][T21175] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 445.622440][T21175] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 445.741397][T21184] netlink: 'syz.0.3867': attribute type 10 has an invalid length. [ 445.758733][T21184] bridge0: port 1(veth1_to_bridge) entered disabled state [ 445.782253][T21184] bridge0: port 1(veth1_to_bridge) entered blocking state [ 445.782388][T21184] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 445.805639][T21184] bridge0: entered promiscuous mode [ 445.813816][T21184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 446.817458][T21240] __nla_validate_parse: 4 callbacks suppressed [ 446.817476][T21240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3880'. [ 446.817992][T21242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3880'. [ 446.851812][T21243] net_ratelimit: 48 callbacks suppressed [ 446.851829][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.852117][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.853516][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.853795][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.854070][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.855780][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.858414][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.858681][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.860134][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.861275][T21243] openvswitch: netlink: Missing valid actions attribute. [ 446.990453][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3884'. [ 446.990495][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3884'. [ 447.402899][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3892'. [ 447.505452][T21282] netlink: 'syz.4.3895': attribute type 49 has an invalid length. [ 447.550316][T21285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3894'. [ 447.683380][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'. [ 447.788153][T21303] x_tables: duplicate underflow at hook 2 [ 447.790651][T21304] x_tables: duplicate underflow at hook 2 [ 448.015726][ T4933] block nbd0: Receive control failed (result -107) [ 448.034250][T21313] block nbd0: reconnected socket [ 448.069754][T21313] --map-set only usable from mangle table [ 448.497996][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3907'. [ 448.770998][T21344] syzkaller1: entered promiscuous mode [ 448.771020][T21344] syzkaller1: entered allmulticast mode [ 449.115487][T21372] netlink: 'syz.4.3918': attribute type 9 has an invalid length. [ 449.115507][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'. [ 449.232424][T21381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3920'. [ 449.437306][ T4933] Bluetooth: hci1: command 0x0405 tx timeout [ 449.469006][T21389] netlink: 'syz.2.3922': attribute type 12 has an invalid length. [ 449.603617][T21403] netlink: 'syz.4.3924': attribute type 1 has an invalid length. [ 449.658228][T21389] bond9: option primary_reselect: invalid value (255) [ 449.670032][T21389] bond9 (unregistering): Released all slaves [ 449.842215][T21416] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 449.953802][T21419] x_tables: duplicate underflow at hook 2 [ 450.334842][T21426] ip6gre1: entered allmulticast mode [ 450.347716][ T1206] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.566896][T21444] xt_REDIRECT: bad MAP_IPS. [ 451.024043][T21431] netlink: 'syz.0.3934': attribute type 15 has an invalid length. [ 451.105794][T21461] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 451.357093][T21467] batadv_slave_0: entered promiscuous mode [ 451.665531][T21490] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 451.669122][T21490] bond6 (unregistering): Released all slaves [ 451.985556][T21513] netlink: 'syz.2.3956': attribute type 5 has an invalid length. [ 452.089503][T21519] __nla_validate_parse: 13 callbacks suppressed [ 452.089526][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'. [ 452.242540][T21477] batadv_slave_0: left promiscuous mode [ 452.251296][T21525] net_ratelimit: 56 callbacks suppressed [ 452.251318][T21525] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 452.251345][T21525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.311765][T21530] netlink: 'syz.0.3961': attribute type 3 has an invalid length. [ 452.340166][T21527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3960'. [ 452.749517][T21556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3965'. [ 452.773831][T21556] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3965'. [ 452.779264][T21540] netlink: 'syz.2.3963': attribute type 21 has an invalid length. [ 452.779286][T21540] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3963'. [ 452.779364][T21540] netlink: 'syz.2.3963': attribute type 5 has an invalid length. [ 452.779376][T21540] netlink: 'syz.2.3963': attribute type 6 has an invalid length. [ 452.779388][T21540] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3963'. [ 452.825674][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3965'. [ 453.040119][T21562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 453.072658][T21566] tipc: Enabled bearer , priority 0 [ 453.603829][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 454.050752][T21597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3977'. [ 454.246167][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.608757][T21646] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 454.720052][T21654] netlink: 'syz.3.3995': attribute type 58 has an invalid length. [ 455.249178][T21693] netlink: 'syz.4.4006': attribute type 18 has an invalid length. [ 455.487482][T21706] netlink: 'syz.0.4007': attribute type 11 has an invalid length. [ 455.665849][T21718] Set syz1 is full, maxelem 1038 reached [ 456.173619][T21742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.367517][T21749] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 456.369345][T21749] netlink: 'syz.2.4015': attribute type 21 has an invalid length. [ 456.369422][T21749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.369430][T21749] IPv6: NLM_F_CREATE should be set when creating new route [ 456.369466][T21749] IPv6: NLM_F_CREATE should be set when creating new route [ 456.369489][T21749] IPv6: NLM_F_CREATE should be set when creating new route [ 456.592981][T21757] tipc: Enabling of bearer rejected, failed to enable media [ 456.985282][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985304][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 456.985315][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985325][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 456.985536][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985547][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 456.985557][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985568][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 456.985778][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985789][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 456.985799][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 456.985809][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.070623][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.070641][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.070651][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.070661][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.070879][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.070890][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.070899][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.070907][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071099][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071110][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071120][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071129][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071322][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071334][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071343][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071351][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071541][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071553][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071562][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071570][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071766][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071777][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.071787][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.071796][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.072011][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.072023][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.072033][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.072043][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.074675][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.074691][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.074701][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.074711][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.074917][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.074928][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.074938][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.074947][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075142][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075153][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075163][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075189][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075388][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075399][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075409][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075419][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075631][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075643][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.075652][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.075663][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211351][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211370][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211381][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211392][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211633][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211644][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211654][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211663][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211853][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211864][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.211874][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.211883][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.215601][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.215617][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.215628][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.215638][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.221748][T21794] __nla_validate_parse: 14 callbacks suppressed [ 457.221765][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 457.221789][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4029'. [ 457.240012][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240031][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240043][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240053][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240269][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240280][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240289][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240299][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240509][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240521][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240530][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240540][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240726][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.240736][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.240748][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.244277][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.247749][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.247768][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.247778][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.247789][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248028][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248039][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248049][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248059][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248277][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248314][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248325][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248335][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248546][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248558][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248568][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248579][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248782][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248793][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.248804][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.248814][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.259561][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.259580][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.259590][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.259601][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.259827][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.259838][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.259847][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.259857][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.260046][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.260055][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.260065][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.260074][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.260263][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.260273][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.260282][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.263418][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.263650][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.263662][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.263672][T21786] Bluetooth: hci0: unsupported parameter 5135 [ 457.263682][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 457.367994][T21791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4028'. [ 457.465178][T21800] syzkaller0: entered promiscuous mode [ 457.465199][T21800] syzkaller0: entered allmulticast mode [ 457.773290][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 457.979465][T21811] netlink: 'syz.0.4033': attribute type 1 has an invalid length. [ 457.979487][T21811] netlink: 'syz.0.4033': attribute type 1 has an invalid length. [ 458.020624][T21814] netlink: 'syz.1.4034': attribute type 8 has an invalid length. [ 458.020880][T21814] sch_fq: defrate 0 ignored. [ 458.051456][T21817] geneve0: entered allmulticast mode [ 458.056528][T21818] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4035'. [ 458.061921][T21818] 0{X: left allmulticast mode [ 458.345073][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4041'. [ 458.516359][T21837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.519624][T21837] bond0: (slave bond3): Enslaving as an active interface with an up link [ 458.573085][T21849] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4042'. [ 458.621732][T21844] syzkaller0: entered promiscuous mode [ 458.621754][T21844] syzkaller0: entered allmulticast mode [ 458.790478][T21852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.889449][T21862] bond0: Error: Cannot enslave bond to itself. [ 459.001149][T21871] netlink: 'syz.0.4048': attribute type 1 has an invalid length. [ 459.031129][T21871] syzkaller1: entered promiscuous mode [ 459.031154][T21871] syzkaller1: entered allmulticast mode [ 459.054424][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 459.054446][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4049'. [ 459.092196][T21868] netlink: 'syz.4.4049': attribute type 4 has an invalid length. [ 459.092218][T21868] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4049'. [ 459.095769][T21875] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 459.142051][T21868] .`: renamed from bond0 [ 459.910955][T21920] TCP: TCP_TX_DELAY enabled [ 460.044533][T21927] x_tables: ip_tables: osf match: only valid for protocol 6 [ 460.144211][T21932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.301447][T21936] openvswitch: netlink: Message has 153 unknown bytes. [ 460.568671][T21946] netlink: 'syz.4.4071': attribute type 4 has an invalid length. [ 460.710258][T21951] IPVS: set_ctl: invalid protocol: 137 172.20.20.50:6 [ 460.710285][T21952] IPVS: set_ctl: invalid protocol: 137 172.20.20.50:6 [ 460.710647][T21951] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004 [ 461.676160][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.577143][T21898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.817032][T21961] __nla_validate_parse: 5 callbacks suppressed [ 462.817051][T21961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4075'. [ 462.924934][T21969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4078'. [ 462.951276][T21960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4076'. [ 463.214225][T21975] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4080'. [ 463.501763][T21991] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 463.503741][T21991] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 463.522692][T21992] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 463.667300][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 463.682650][T21998] netlink: 'syz.0.4089': attribute type 2 has an invalid length. [ 463.913231][T21998] : entered promiscuous mode [ 463.973082][T22002] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 464.685527][T22046] netlink: 'syz.1.4103': attribute type 10 has an invalid length. [ 464.722812][T21994] infiniband syz0: set active [ 464.722833][T21994] infiniband syz0: added bond_slave_1 [ 464.741983][T22046] team0: Device veth0_macvtap failed to register rx_handler [ 464.743424][T21994] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 464.807387][T21994] infiniband syz0: Couldn't open port 1 [ 464.807631][T21994] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 464.807660][T21994] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 464.807696][T21994] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 464.986889][T21994] RDS/IB: syz0: added [ 464.986949][T21994] smc: adding ib device syz0 with port count 1 [ 464.988015][T21994] smc: ib device syz0 port 1 has no pnetid [ 465.539662][T22067] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.553715][T22067] bond4: (slave lo): Enslaving as an active interface with an up link [ 465.560746][T22067] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 465.622358][T22072] syzkaller1: entered promiscuous mode [ 465.622379][T22072] syzkaller1: entered allmulticast mode [ 465.791646][T22089] netlink: 'syz.3.4114': attribute type 10 has an invalid length. [ 466.813895][T22157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 467.072612][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4130'. [ 467.596028][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 469.378939][T22128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.416581][T22187] netlink: 524 bytes leftover after parsing attributes in process `syz.4.4134'. [ 469.576064][T22193] netlink: 'syz.1.4135': attribute type 1 has an invalid length. [ 469.576085][T22193] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.4135'. [ 469.657703][T22200] hsr0: entered allmulticast mode [ 469.657725][T22200] hsr_slave_0: entered allmulticast mode [ 469.657741][T22200] hsr_slave_1: entered allmulticast mode [ 469.731364][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4136'. [ 469.732219][T22206] hsr_slave_0: left promiscuous mode [ 469.745306][T22206] hsr_slave_1: left promiscuous mode [ 469.774101][T22206] hsr0 (unregistering): left allmulticast mode [ 469.809135][T22211] openvswitch: netlink: IP tunnel dst address not specified [ 469.874829][T22215] netlink: 'syz.4.4144': attribute type 4 has an invalid length. [ 469.878928][T22205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4140'. [ 469.981553][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 470.040356][T22205] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.050629][T22205] bridge_slave_1 (unregistering): left allmulticast mode [ 470.050654][T22205] bridge_slave_1 (unregistering): left promiscuous mode [ 470.050720][T22205] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.132782][T22218] tipc: Started in network mode [ 470.132811][T22218] tipc: Node identity e0000001, cluster identity 4711 [ 470.132862][T22218] tipc: Enabling of bearer rejected, failed to enable media [ 470.133163][T22223] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 470.151313][T22223] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4145'. [ 470.486599][T22249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.859883][T22269] IPv6: sit1: Disabled Multicast RS [ 471.029103][T22274] netlink: 'syz.3.4159': attribute type 3 has an invalid length. [ 471.059515][T22279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 471.618415][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 471.645744][T22313] xt_l2tp: wrong L2TP version: 255 [ 471.716711][T22318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4169'. [ 474.192174][T22292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.192704][T22320] netlink: 'syz.1.4168': attribute type 11 has an invalid length. [ 474.192722][T22320] netlink: 'syz.1.4168': attribute type 4 has an invalid length. [ 474.192735][T22320] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4168'. [ 474.271710][T22341] netlink: 'syz.3.4175': attribute type 1 has an invalid length. [ 474.271732][T22341] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4175'. [ 474.271747][T22341] netlink: 'syz.3.4175': attribute type 1 has an invalid length. [ 474.502436][T22356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.527673][T22358] sctp: [Deprecated]: syz.3.4180 (pid 22358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.527673][T22358] Use struct sctp_sack_info instead [ 474.669441][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4178'. [ 474.918561][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4187'. [ 475.244509][T22395] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 475.445168][T22410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.457134][T22409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 475.791596][T22424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4200'. [ 475.898944][T22431] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 475.901801][T22431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4203'. [ 475.929583][T22431] SET target dimension over the limit! [ 476.095379][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4204'. [ 477.036346][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.840799][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 478.087196][T22397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.324214][T22448] xt_ipcomp: unknown flags 1D [ 478.440802][T22457] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 478.747772][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4217'. [ 478.747804][T22474] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 478.850144][T22481] Cannot find add_set index 4 as target [ 479.013671][T22490] netlink: 'syz.0.4221': attribute type 1 has an invalid length. [ 479.052541][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4220'. [ 479.147460][T22490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.229849][T22493] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 479.313386][T22495] IPVS: Scheduler module ip_vs_sip not found [ 479.478552][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4226'. [ 480.091874][T22541] gretap0: entered promiscuous mode [ 480.092601][T22541] vlan1: entered promiscuous mode [ 480.182025][T22553] x_tables: duplicate underflow at hook 2 [ 480.364490][T22560] dvmrp1: entered allmulticast mode [ 480.631276][T22570] netlink: 'syz.0.4243': attribute type 1 has an invalid length. [ 480.722542][T22570] bond3: (slave bridge2): making interface the new active one [ 480.723297][T22570] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 480.725650][T22575] nbd: must specify an index to disconnect [ 480.778717][T22580] netlink: 'syz.4.4245': attribute type 4 has an invalid length. [ 481.125419][T22593] netlink: 'syz.2.4249': attribute type 21 has an invalid length. [ 481.125491][T22593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4249'. [ 481.220944][T22600] netlink: 'syz.3.4250': attribute type 4 has an invalid length. [ 481.220965][T22600] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4250'. [ 481.250397][T22600] .`: renamed from bond0 (while UP) [ 481.275243][T22600] netlink: 'syz.3.4250': attribute type 11 has an invalid length. [ 481.310290][T22612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4253'. [ 481.313717][T22612] block nbd0: Unsupported socket: should be TCP or UNIX. [ 481.315425][T22612] tc_dump_action: action bad kind [ 481.320358][T22612] SET target dimension over the limit! [ 481.527762][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4257'. [ 481.755616][T22627] netlink: 'syz.0.4259': attribute type 11 has an invalid length. [ 481.815043][T22634] netlink: 'syz.4.4262': attribute type 3 has an invalid length. [ 481.815061][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 481.815583][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 481.815599][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4262'. [ 482.025099][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4264'. [ 482.063710][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4264'. [ 482.074355][T22646] xt_nat: multiple ranges no longer supported [ 482.354184][T22668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4271'. [ 482.379142][T22662] pim6reg: entered allmulticast mode [ 482.854340][T22696] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 482.925083][T22699] syzkaller0: left promiscuous mode [ 482.925108][T22699] syzkaller0: left allmulticast mode [ 483.678624][T22739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.065702][T22764] netlink: 'syz.2.4298': attribute type 27 has an invalid length. [ 484.257286][T22773] xt_recent: Unsupported userspace flags (000000b1) [ 484.382024][T22780] tipc: Invalid UDP bearer configuration [ 484.382070][T22780] tipc: Enabling of bearer rejected, failed to enable media [ 484.540117][T22782] vlan1: entered promiscuous mode [ 484.540140][T22782] bridge0: entered promiscuous mode [ 484.997745][T22804] netlink: 'syz.0.4311': attribute type 21 has an invalid length. [ 484.997825][T22804] netlink: 'syz.0.4311': attribute type 5 has an invalid length. [ 485.525009][T22836] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 485.764297][T22847] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 485.856796][T22853] syzkaller0: entered promiscuous mode [ 485.856818][T22853] syzkaller0: entered allmulticast mode [ 485.940619][T22858] xt_l2tp: invalid flags combination: 8 [ 486.323822][T22870] __nla_validate_parse: 17 callbacks suppressed [ 486.323841][T22870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4330'. [ 486.490537][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.490651][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.490744][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.490830][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.490919][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.494550][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.494641][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.494737][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.494820][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.494908][T22879] xt_cluster: node mask cannot exceed total number of nodes [ 486.588627][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.588831][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589012][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589185][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589430][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589604][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589786][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.589960][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 486.590421][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 487.322749][T22914] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 487.910403][T22947] tipc: Started in network mode [ 487.910424][T22947] tipc: Node identity 2, cluster identity 4711 [ 487.910435][T22947] tipc: Node number set to 2 [ 490.510169][T23022] syzkaller0: entered promiscuous mode [ 490.510192][T23022] syzkaller0: entered allmulticast mode [ 491.102038][T22959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.295387][T23042] nbd: couldn't find device at index 15663104 [ 491.477907][T23052] ipt_ECN: cannot use operation on non-tcp rule [ 491.505389][T23049] bond0: entered promiscuous mode [ 491.512777][T23049] batadv0: entered promiscuous mode [ 491.518045][T23049] debugfs: 'hsr1' already exists in 'hsr' [ 491.518066][T23049] Cannot create hsr debugfs directory [ 491.518137][T23049] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 491.518869][T23049] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 491.609575][ T8081] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x75 [ 491.647304][T23050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.745744][T23073] vxcan1: Master is either lo or non-ether device [ 491.931147][T23076] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 491.987389][T23083] __nla_validate_parse: 33 callbacks suppressed [ 491.989548][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4384'. [ 492.039039][T23083] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 492.303698][T23103] sctp: [Deprecated]: syz.2.4388 (pid 23103) Use of int in maxseg socket option. [ 492.303698][T23103] Use struct sctp_assoc_value instead [ 492.918657][T23140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4399'. [ 493.082558][T23145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4401'. [ 493.305781][T23154] tipc: Enabling not permitted [ 493.305814][T23154] tipc: Enabling of bearer rejected, failed to enable media [ 493.393082][T23158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.420740][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'. [ 493.449949][T23167] macvlan4: entered promiscuous mode [ 493.449971][T23167] macvlan4: entered allmulticast mode [ 493.605286][T23171] xt_policy: too many policy elements [ 493.705413][T23179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.079475][T23206] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4422'. [ 494.197012][T23211] netlink: 'syz.4.4421': attribute type 1 has an invalid length. [ 494.249121][T23224] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4426'. [ 494.256222][T23214] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4423'. [ 494.302554][T23227] Bluetooth: MGMT ver 1.23 [ 494.470591][T23236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.495766][T23236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4428'. [ 494.553049][T23242] netlink: 'syz.2.4431': attribute type 1 has an invalid length. [ 494.641740][T23242] bond9: entered promiscuous mode [ 494.645703][T23242] 8021q: adding VLAN 0 to HW filter on device bond9 [ 494.678390][T23242] IPVS: length: 1152 != 8 [ 494.733534][T23246] syzkaller1: entered promiscuous mode [ 494.733556][T23246] syzkaller1: entered allmulticast mode [ 494.825095][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4434'. [ 495.120068][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4435'. [ 495.318314][ T31] audit: type=1107 audit(1790488587.522:12): pid=23264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 495.636371][T23285] sock: sock_timestamping_bind_phc: sock not bind to device [ 497.302124][T23373] netlink: 'syz.0.4469': attribute type 3 has an invalid length. [ 497.302145][T23373] netlink: 'syz.0.4469': attribute type 2 has an invalid length. [ 497.564103][T23382] __nla_validate_parse: 1 callbacks suppressed [ 497.564123][T23382] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4471'. [ 498.047720][T23371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.112611][T23402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.318805][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 498.590040][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 498.590094][T23429] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 498.686810][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4479'. [ 498.744079][T23437] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 498.899270][T23441] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4481'. [ 498.929840][T23441] syzkaller1: entered promiscuous mode [ 498.929861][T23441] syzkaller1: entered allmulticast mode [ 499.282457][T23469] sctp: [Deprecated]: syz.1.4487 (pid 23469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.282457][T23469] Use struct sctp_sack_info instead [ 499.288181][T23457] bond4: option lp_interval: invalid value (0) [ 499.288203][T23457] bond4: option lp_interval: allowed values 1 - 2147483647 [ 499.315085][T23457] bond4 (unregistering): Released all slaves [ 499.380676][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.891201][T23508] 8021q: adding VLAN 0 to HW filter on device .` [ 499.960537][T23508] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 500.019806][T23513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4497'. [ 500.345662][T23512] bond6 (unregistering): Released all slaves [ 500.874035][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4505'. [ 500.979767][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 501.022300][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4506'. [ 501.407082][T23609] syzkaller1: entered promiscuous mode [ 501.407106][T23609] syzkaller1: entered allmulticast mode [ 501.829522][T23647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4511'. [ 502.302274][T23667] netlink: 'syz.4.4516': attribute type 32 has an invalid length. [ 502.302295][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'. [ 502.427366][T23667] bond5: Setting coupled_control to off (0) [ 502.427725][T23675] 8021q: VLANs not supported on ip6tnl0 [ 503.881278][T23748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.950404][T23752] __nla_validate_parse: 2 callbacks suppressed [ 503.950423][T23752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4536'. [ 506.734004][T23736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.015423][T23787] netlink: 'syz.2.4545': attribute type 29 has an invalid length. [ 507.082533][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'. [ 507.084263][T23800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'. [ 507.302668][T23811] netlink: 'syz.1.4551': attribute type 1 has an invalid length. [ 507.387836][T23811] 8021q: adding VLAN 0 to HW filter on device bond19 [ 507.394131][T23818] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 507.408667][T23815] netlink: 'syz.2.4554': attribute type 32 has an invalid length. [ 507.450266][T23811] macvtap1: entered allmulticast mode [ 507.483477][T23821] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 507.784346][T23836] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4557'. [ 508.051849][T23845] team0: Cannot enslave team device to itself [ 508.378215][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.378408][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.378579][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.378746][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.378921][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.379088][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 508.396040][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.579644][T23872] Bluetooth: ISO socket layer initialized [ 508.580648][ T4933] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 508.852155][T23874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.915265][T23887] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 508.955056][T23886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 509.089328][T23894] sctp: [Deprecated]: syz.0.4576 (pid 23894) Use of int in maxseg socket option. [ 509.089328][T23894] Use struct sctp_assoc_value instead [ 509.572979][T23904] __nla_validate_parse: 60 callbacks suppressed [ 509.572998][T23904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 509.624049][T23918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 509.707611][T23904] xfrm1: entered promiscuous mode [ 509.707632][T23904] xfrm1: entered allmulticast mode [ 510.232106][T23952] netlink: 'syz.3.4590': attribute type 6 has an invalid length. [ 510.244597][T23952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4590'. [ 510.244651][T23952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4590'. [ 510.264577][T23957] netlink: Unknown nat attribute (0) [ 510.264618][T23957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.359190][T23959] ipvlan0: entered promiscuous mode [ 510.463456][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4595'. [ 510.465175][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4595'. [ 510.479957][T23963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4595'. [ 510.497151][T23967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4593'. [ 511.058761][T24003] team0: Device gtp1 is up. Set it down before adding it as a team port [ 511.084616][T24001] Unsupported ieee802154 address type: 0 [ 511.095653][T24010] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4605'. [ 511.118298][T24010] gretap0: entered promiscuous mode [ 511.316920][T24014] bond6: entered promiscuous mode [ 511.318064][T24024] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 511.343636][T24016] macvlan2: entered promiscuous mode [ 511.343654][T24016] macvlan2: entered allmulticast mode [ 511.352984][T24016] bond6: (slave macvlan2): Opening slave failed [ 511.483855][T24030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.532605][T24033] ip_tables: iptables: counters copy to user failed while replacing table [ 513.983910][T24041] kthread_run failed with err -4 [ 514.134379][T24060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4618'. [ 514.688135][T24060] __nla_validate_parse: 4 callbacks suppressed [ 514.688153][T24060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4618'. [ 514.793363][T24060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4618'. [ 514.948128][T24060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4618'. [ 514.954774][T24105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4625'. [ 514.991127][T24061] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 515.706696][T24139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4632'. [ 515.784620][T24141] ip_tables: iptables: counters copy to user failed while replacing table [ 516.085399][T24147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.461661][T24190] syzkaller0: entered promiscuous mode [ 517.461682][T24190] syzkaller0: entered allmulticast mode [ 517.648135][T24203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.700873][T24206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4652'. [ 517.711012][T24206] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.724462][T24208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4653'. [ 517.740665][T24206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4652'. [ 517.741602][T24208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 517.951411][T24219] netlink: 'syz.4.4657': attribute type 1 has an invalid length. [ 517.952014][T24219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4657'. [ 518.453247][T24240] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4663'. [ 519.115009][T24275] pimreg: entered allmulticast mode [ 519.281023][T24287] Unknown options in mask 4 [ 519.459172][T24308] netlink: 'syz.0.4683': attribute type 21 has an invalid length. [ 519.702329][T24317] netlink: 'syz.3.4684': attribute type 21 has an invalid length. [ 519.851746][T24327] __nla_validate_parse: 5 callbacks suppressed [ 519.851766][T24327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4687'. [ 520.073234][T24339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4689'. [ 520.073459][T24333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4689'. [ 521.431347][T24343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4690'. [ 521.475330][T24351] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 521.520853][T24354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4691'. [ 521.539720][T24351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.679393][T24365] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 521.712542][T24351] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 521.742400][T24359] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 521.753686][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 521.777914][ T50] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 521.800633][T24361] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 522.008273][T24371] bond7: entered promiscuous mode [ 522.008297][T24371] bond7: entered allmulticast mode [ 522.012849][T24378] batman_adv: batadv0: Adding interface: syzkaller0 [ 522.012867][T24378] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.022287][T24378] batman_adv: batadv0: Interface activated: syzkaller0 [ 522.081301][ T50] bond7: (slave dummy0): link status definitely down, disabling slave [ 522.143596][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4702'. [ 522.243847][T24396] ip_tables: iptables: counters copy to user failed while replacing table [ 522.330923][T24403] ip6t_hbh: too many supported opts specified [ 522.394929][T24407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4708'. [ 522.434421][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 522.435244][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 522.504410][T24408] netlink: 'syz.2.4708': attribute type 1 has an invalid length. [ 522.595746][T24372] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 522.668010][T24372] batman_adv: batadv0: Removing interface: syzkaller0 [ 522.769072][T24430] tipc: Enabled bearer , priority 10 [ 523.173990][T24453] batman_adv: batadv0: Adding interface: syzkaller0 [ 523.174008][T24453] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.174034][T24453] batman_adv: batadv0: Interface activated: syzkaller0 [ 523.882476][T24452] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 523.949777][T24452] batman_adv: batadv0: Removing interface: syzkaller0 [ 524.147130][T24487] ip_tables: iptables: counters copy to user failed while replacing table [ 524.147788][T24487] netlink: 'syz.2.4733': attribute type 4 has an invalid length. [ 524.147902][T24488] netlink: 'syz.2.4733': attribute type 4 has an invalid length. [ 525.285685][T24522] netlink: 'syz.1.4745': attribute type 2 has an invalid length. [ 525.412716][T24533] __nla_validate_parse: 1 callbacks suppressed [ 525.412735][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'. [ 525.412751][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'. [ 525.605705][T24543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4750'. [ 525.621503][T24543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4750'. [ 525.625356][T24537] can: request_module (can-proto-0) failed. [ 525.711706][T24548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.744994][T24549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.864758][T24560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4752'. [ 525.901820][T24560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4752'. [ 526.040169][T24571] netlink: Conntrack attr has 1 unknown bytes [ 526.040206][T24571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.135041][T24576] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4758'. [ 526.174407][T24578] veth1_macvtap: left promiscuous mode [ 526.256382][T24580] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 526.313587][T24580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4760'. [ 526.382385][T24588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4764'. [ 526.582171][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4766'. [ 527.084116][T24630] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 527.218281][T24643] netlink: zone id is out of range [ 527.218295][T24643] netlink: zone id is out of range [ 527.218303][T24643] netlink: zone id is out of range [ 527.218310][T24643] netlink: zone id is out of range [ 527.218317][T24643] netlink: zone id is out of range [ 527.218324][T24643] netlink: zone id is out of range [ 527.218331][T24643] netlink: zone id is out of range [ 527.218339][T24643] netlink: zone id is out of range [ 527.218345][T24643] netlink: zone id is out of range [ 527.293326][T24646] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 527.310291][T24650] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 527.310310][T24650] netlink: 'syz.2.4778': attribute type 2 has an invalid length. [ 527.751944][T24677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.751959][T24677] IPv6: NLM_F_CREATE should be set when creating new route [ 527.751997][T24677] IPv6: NLM_F_CREATE should be set when creating new route [ 527.752017][T24677] IPv6: NLM_F_CREATE should be set when creating new route [ 527.754022][T24677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.180551][T24703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.256345][T24527] Bluetooth: hci3: unexpected cc 0x2035 length: 2 > 1 [ 528.256378][T24527] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 528.373699][T24719] netlink: 'syz.0.4795': attribute type 1 has an invalid length. [ 528.447650][T24719] bridge0: port 2(batadv1) entered blocking state [ 528.447989][T24719] bridge0: port 2(batadv1) entered disabled state [ 528.448167][T24719] batadv1: entered allmulticast mode [ 528.449926][T24719] batadv1: entered promiscuous mode [ 528.926357][ T6790] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 528.926371][ T6790] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 531.563714][T24736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.804085][T24773] tipc: Enabling of bearer rejected, already enabled [ 531.808444][T24769] __nla_validate_parse: 5 callbacks suppressed [ 531.808461][T24769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4810'. [ 531.831575][T24778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4813'. [ 531.868969][T24774] veth1_to_team: entered allmulticast mode [ 531.879772][T24779] netlink: 'syz.4.4812': attribute type 11 has an invalid length. [ 531.887394][T24778] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 531.887413][T24778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4813'. [ 531.903676][T24775] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4811'. [ 531.980004][T24770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.184849][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4816'. [ 532.304874][T24802] bond5: entered promiscuous mode [ 532.320828][T24802] macvlan5: entered promiscuous mode [ 532.320849][T24802] macvlan5: entered allmulticast mode [ 532.321716][T24802] bond5: (slave macvlan5): Opening slave failed [ 532.372992][T24806] netlink: 'syz.0.4820': attribute type 24 has an invalid length. [ 532.512236][T24814] netlink: 'syz.2.4819': attribute type 1 has an invalid length. [ 532.673224][T24829] netlink: 'syz.4.4825': attribute type 2 has an invalid length. [ 532.703313][T24830] netlink: 'syz.0.4826': attribute type 33 has an invalid length. [ 532.747088][T24830] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 532.748581][T24830] bond6 (unregistering): Released all slaves [ 532.787407][T24829] lo: entered promiscuous mode [ 532.787573][T24829] net_ratelimit: 728 callbacks suppressed [ 532.787586][T24829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.203138][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 533.203172][T24856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.230371][T24846] netlink: 'syz.0.4832': attribute type 11 has an invalid length. [ 533.525811][T24867] netlink: 'syz.4.4836': attribute type 39 has an invalid length. [ 533.764723][T24874] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4838'. [ 534.020285][ T31] audit: type=1107 audit(1790488626.222:13): pid=24877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊 =̢Xd40ۮ$FEeBM' [ 534.021686][T24878] netlink: 'syz.3.4840': attribute type 1 has an invalid length. [ 534.047097][T24878] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.051057][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 534.155083][T24885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4842'. [ 534.262731][T24888] veth1_macvtap: entered promiscuous mode [ 534.269505][T24888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.303888][T24888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.323260][T24888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.329607][T24888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.334296][T24888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.344585][T24888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.353629][T24888] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.368671][T24888] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.371202][T24888] 8021q: adding VLAN 0 to HW filter on device bond10 [ 534.373531][T24888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 534.380574][T24888] 8021q: adding VLAN 0 to HW filter on device bond12 [ 534.389056][T24888] 8021q: adding VLAN 0 to HW filter on device bond13 [ 534.399303][T24888] 8021q: adding VLAN 0 to HW filter on device bond14 [ 534.411359][T24888] 8021q: adding VLAN 0 to HW filter on device bond15 [ 534.416794][T24888] 8021q: adding VLAN 0 to HW filter on device bond16 [ 534.424010][T24888] 8021q: adding VLAN 0 to HW filter on device bond17 [ 534.438487][T24888] 8021q: adding VLAN 0 to HW filter on device bond18 [ 534.453111][T24888] bond19: entered allmulticast mode [ 534.453538][T24888] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 534.602324][T24891] bond9: (slave bridge0): making interface the new active one [ 534.603417][T24891] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 534.649897][ T6790] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.650143][ T6790] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.717155][T24900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4846'. [ 534.720940][ T1206] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.721036][ T1206] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.873606][T24909] bridge8: entered promiscuous mode [ 534.873628][T24909] bridge8: entered allmulticast mode [ 534.890482][T24909] team0: Port device bridge8 added [ 534.934074][T24909] block nbd0: Unsupported socket: should be TCP or UNIX. [ 534.946748][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4847'. [ 534.946768][T24907] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 534.955639][T24909] bridge0: port 2(team0) entered blocking state [ 534.955771][T24909] bridge0: port 2(team0) entered disabled state [ 534.988709][T24909] team0: entered allmulticast mode [ 534.988729][T24909] team_slave_0: entered allmulticast mode [ 534.988745][T24909] team_slave_1: entered allmulticast mode [ 534.995236][T24909] team0: entered promiscuous mode [ 535.021366][T24909] bridge0: port 2(team0) entered blocking state [ 535.021495][T24909] bridge0: port 2(team0) entered forwarding state [ 535.601483][T24916] bridge3: entered promiscuous mode [ 535.601506][T24916] bridge3: entered allmulticast mode [ 535.641912][T24916] bridge0: port 3(batadv1) entered blocking state [ 535.642092][T24916] bridge0: port 3(batadv1) entered disabled state [ 535.642229][T24916] batadv1: entered allmulticast mode [ 535.668112][T24916] batadv1: entered promiscuous mode [ 535.689442][T24939] tipc: Enabled bearer , priority 0 [ 535.749589][T24943] tipc: Resetting bearer [ 535.772134][T24949] netlink: 'syz.1.4860': attribute type 5 has an invalid length. [ 535.965759][T24964] netlink: 'syz.2.4863': attribute type 10 has an invalid length. [ 535.975512][T24964] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.976091][T24964] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.107026][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 536.107045][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 536.158818][T24972] can: request_module (can-proto-3) failed. [ 536.348072][T24985] can: request_module (can-proto-3) failed. [ 536.408025][T24988] ip_tables: iptables: counters copy to user failed while replacing table [ 536.764370][T25008] vlan3: entered promiscuous mode [ 536.764392][T25008] hsr0: entered promiscuous mode [ 536.764654][T25008] vlan3: entered allmulticast mode [ 536.764666][T25008] hsr0: entered allmulticast mode [ 536.764677][T25008] hsr_slave_0: entered allmulticast mode [ 536.764690][T25008] hsr_slave_1: entered allmulticast mode [ 536.812464][ T5622] tipc: Node number set to 3758096385 [ 536.893831][T25017] __nla_validate_parse: 10 callbacks suppressed [ 536.893850][T25017] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4876'. [ 537.032942][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 537.051490][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'. [ 537.222491][T25031] validate_nla: 28 callbacks suppressed [ 537.222510][T25031] netlink: 'syz.1.4880': attribute type 2 has an invalid length. [ 537.261502][T25034] bond10: Removing last arp target with arp_interval on [ 537.858027][T25074] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4889'. [ 537.977246][T25074] gretap0: entered promiscuous mode [ 538.454070][T25109] ip_tables: iptables: counters copy to user failed while replacing table [ 538.487214][T25112] ip_tables: iptables: counters copy to user failed while replacing table [ 538.652318][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 538.821083][T25130] netlink: 'syz.4.4903': attribute type 6 has an invalid length. [ 538.869871][T25133] Bluetooth: hci0: unsupported parameter 5161 [ 538.869893][T25133] Bluetooth: hci0: unsupported parameter 8192 [ 538.869905][T25133] Bluetooth: hci0: unsupported parameter 5161 [ 538.869916][T25133] Bluetooth: hci0: unsupported parameter 8192 [ 538.928831][T25133] sctp: [Deprecated]: syz.3.4904 (pid 25133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.928831][T25133] Use struct sctp_sack_info instead [ 539.165687][T25143] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 539.165709][T25143] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4910'. [ 539.204388][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4908'. [ 539.261364][T25152] netlink: 'syz.0.4911': attribute type 12 has an invalid length. [ 539.261386][T25152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4911'. [ 539.496850][T25160] tipc: New replicast peer: 172.20.20.187 [ 539.497978][T25160] tipc: Enabled bearer , priority 10 [ 539.505253][T25160] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4913'. [ 567.933442][ T7603] batadv0: left allmulticast mode [ 567.933461][ T7603] batadv0: left promiscuous mode [ 567.933586][ T7603] bridge0: port 1(batadv0) entered disabled state [ 567.939995][ T7603] pim6reg: left allmulticast mode [ 568.135346][ T7603] gretap0 (unregistering): left promiscuous mode [ 568.199556][ T7603] bond7 (unregistering): (slave geneve4): Releasing active interface [ 568.245033][ T7603] bond1 (unregistering): Released all slaves [ 568.259819][ T7603] bond0 (unregistering): Released all slaves [ 568.267885][ T7603] bond2 (unregistering): Released all slaves [ 568.280974][ T7603] bond3 (unregistering): Released all slaves [ 568.289856][ T7603] bond4 (unregistering): Released all slaves [ 568.312017][ T7603] bond5 (unregistering): Released all slaves [ 568.323671][ T7603] bond6 (unregistering): Released all slaves [ 568.338497][ T7603] bond7 (unregistering): Released all slaves [ 568.352106][ T7603] bond8 (unregistering): Released all slaves [ 568.464719][ T7603] : left promiscuous mode [ 568.550322][ T7603] tipc: Disabling bearer [ 568.550666][ T7603] tipc: Disabling bearer [ 568.550772][ T7603] tipc: Left network mode [ 569.025700][ T7603] hsr_slave_0: left promiscuous mode [ 569.028068][ T7603] hsr_slave_1: left promiscuous mode [ 569.042856][ T7603] veth0_vlan: left promiscuous mode [ 569.909887][ T7603] IPVS: stop unused estimator thread 0... [ 573.036144][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.434937][T25302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4922'. [ 594.902777][T25338] syzkaller0: left allmulticast mode [ 594.903083][T25338] tipc: Resetting bearer [ 594.934352][T25341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4929'. [ 594.979081][T25341] netlink: 'syz.3.4929': attribute type 4 has an invalid length. [ 594.979105][T25341] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.4929'. [ 595.161862][T25362] netlink: 'syz.0.4934': attribute type 29 has an invalid length. [ 595.183659][T25354] syzkaller1: entered promiscuous mode [ 595.183681][T25354] syzkaller1: entered allmulticast mode [ 595.251528][T25364] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 595.337075][T25369] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 595.343022][T25369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4938'. [ 595.401277][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4939'. [ 595.598914][T25384] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4943'. [ 595.678785][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4944'. [ 595.804929][T25391] netlink: 'syz.0.4946': attribute type 49 has an invalid length. [ 596.610670][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 596.846506][T25436] ipt_REJECT: ECHOREPLY no longer supported. [ 596.972829][T25440] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 596.977027][T25440] bond20 (unregistering): Released all slaves [ 597.197063][T25463] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4968'. [ 597.202058][T25454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4967'. [ 597.790825][T25490] netlink: 'syz.1.4975': attribute type 1 has an invalid length. [ 597.954721][T25501] syz.4.4976: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.954804][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.4.4976 Not tainted syzkaller #0 PREEMPT(full) [ 597.954827][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.954841][T25501] Call Trace: [ 597.954852][T25501] [ 597.954860][T25501] dump_stack_lvl+0xe8/0x150 [ 597.955016][T25501] warn_alloc+0x24d/0x270 [ 597.955067][T25501] ? kasan_save_track+0x4f/0x80 [ 597.955085][T25501] ? kasan_save_track+0x3e/0x80 [ 597.955107][T25501] ? __pfx_warn_alloc+0x10/0x10 [ 597.955122][T25501] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 597.955245][T25501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.955299][T25501] __vmalloc_node_range_noprof+0x127/0x1540 [ 597.955355][T25501] ? rcu_is_watching+0x16/0xb0 [ 597.955401][T25501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.955427][T25501] ? __kmalloc_cache_noprof+0x321/0x600 [ 597.955447][T25501] ? __kmalloc_cache_noprof+0x14d/0x600 [ 597.955465][T25501] ? xskq_create+0x56/0x220 [ 597.955576][T25501] xskq_create+0x148/0x220 [ 597.955597][T25501] ? xsk_init_queue+0x8a/0xe0 [ 597.955622][T25501] xsk_init_queue+0x8a/0xe0 [ 597.955645][T25501] xsk_setsockopt+0x52a/0x960 [ 597.955668][T25501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.955688][T25501] ? __pfx_aa_sk_perm+0x10/0x10 [ 597.955802][T25501] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 597.955842][T25501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.955862][T25501] do_sock_setsockopt+0x17c/0x1b0 [ 597.955891][T25501] __x64_sys_setsockopt+0x13d/0x1b0 [ 597.955919][T25501] do_syscall_64+0x166/0x520 [ 597.955981][T25501] ? trace_irq_disable+0x3b/0x140 [ 597.956013][T25501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.956039][T25501] ? clear_bhb_loop+0x70/0xc0 [ 597.956063][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.956081][T25501] RIP: 0033:0x7f1e90f9e159 [ 597.956099][T25501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.956114][T25501] RSP: 002b:00007f1e91e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.956133][T25501] RAX: ffffffffffffffda RBX: 00007f1e91225fa0 RCX: 00007f1e90f9e159 [ 597.956147][T25501] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 597.956158][T25501] RBP: 00007f1e9103506b R08: 0000000000000004 R09: 0000000000000000 [ 597.956169][T25501] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.956180][T25501] R13: 00007f1e91226038 R14: 00007f1e91225fa0 R15: 00007ffd23a6e0d8 [ 597.956211][T25501] [ 598.183843][T25501] Mem-Info: [ 598.183859][T25501] active_anon:5690 inactive_anon:0 isolated_anon:0 [ 598.183859][T25501] active_file:0 inactive_file:43283 isolated_file:0 [ 598.183859][T25501] unevictable:0 dirty:49 writeback:0 [ 598.183859][T25501] slab_reclaimable:11983 slab_unreclaimable:127169 [ 598.183859][T25501] mapped:29363 shmem:540 pagetables:1122 [ 598.183859][T25501] sec_pagetables:0 bounce:0 [ 598.183859][T25501] kernel_misc_reclaimable:0 [ 598.183859][T25501] free:1291927 free_pcp:10851 free_cma:0 [ 598.183910][T25501] Node 0 active_anon:22760kB inactive_anon:0kB active_file:0kB inactive_file:172920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117452kB dirty:196kB writeback:0kB shmem:2160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16536kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 598.183983][T25501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 598.184032][T25501] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.184083][T25501] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 598.184117][T25501] Node 0 DMA32 free:1207692kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22760kB inactive_anon:0kB active_file:0kB inactive_file:172920kB unevictable:0kB writepending:196kB zspages:0kB present:3129332kB managed:2546900kB mlocked:0kB bounce:0kB free_pcp:43156kB local_pcp:21092kB free_cma:0kB [ 598.184168][T25501] lowmem_reserve[]: 0 0 0 0 0 [ 598.184199][T25501] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.184246][T25501] lowmem_reserve[]: 0 0 0 0 0 [ 598.184277][T25501] Node 1 Normal free:3944656kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 598.184327][T25501] lowmem_reserve[]: 0 0 0 0 0 [ 598.184357][T25501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 598.184459][T25501] Node 0 DMA32: 1833*4kB (UM) 670*8kB (UME) 259*16kB (UME) 515*32kB (UME) 123*64kB (UME) 46*128kB (UM) 6*256kB (UME) 2*512kB (U) 1*1024kB (U) 5*2048kB (UME) 280*4096kB (UM) = 1207780kB [ 598.184608][T25501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.184696][T25501] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 5*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944656kB [ 598.184834][T25501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.184849][T25501] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.184866][T25501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.184880][T25501] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.184894][T25501] 43819 total pagecache pages [ 598.184904][T25501] 0 pages in swap cache [ 598.184911][T25501] Free swap = 124996kB [ 598.184918][T25501] Total swap = 124996kB [ 598.184924][T25501] 2097051 pages RAM [ 598.184930][T25501] 0 pages HighMem/MovableOnly [ 598.184937][T25501] 428710 pages reserved [ 598.184943][T25501] 0 pages cma reserved [ 598.724780][T25522] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 598.724941][T25522] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 598.754746][T25523] netlink: 'syz.3.4978': attribute type 4 has an invalid length. [ 598.769998][T25517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.783571][T25517] bond11: (slave bond0): Enslaving as an active interface with a down link [ 598.960759][T25528] bond20: option downdelay: invalid value (18446744073709551615) [ 598.960784][T25528] bond20: option downdelay: allowed values 0 - 2147483647 [ 598.972576][T25528] bond20 (unregistering): Released all slaves [ 599.518875][T25558] __nla_validate_parse: 5 callbacks suppressed [ 599.518894][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4990'. [ 599.786752][T25561] netlink: 'syz.4.4992': attribute type 21 has an invalid length. [ 599.786774][T25561] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4992'. [ 599.786922][T25561] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4992'. [ 599.943005][T25565] Bluetooth: hci0: unsupported parameter 5135 [ 599.943028][T25565] Bluetooth: hci0: unsupported parameter 8192 [ 599.943040][T25565] Bluetooth: hci0: unsupported parameter 5135 [ 599.943051][T25565] Bluetooth: hci0: unsupported parameter 8192 [ 600.037433][T25569] netlink: 'syz.0.4997': attribute type 1 has an invalid length. [ 600.037454][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4997'. [ 600.037466][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4997'. [ 600.234046][T25583] ipt_ECN: cannot use operation on non-tcp rule [ 600.481715][T25602] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 600.505203][T25602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5005'. [ 600.511622][T25599] sctp: [Deprecated]: syz.2.5003 (pid 25599) Use of int in maxseg socket option. [ 600.511622][T25599] Use struct sctp_assoc_value instead [ 600.511685][T25603] sctp: [Deprecated]: syz.2.5003 (pid 25603) Use of int in maxseg socket option. [ 600.511685][T25603] Use struct sctp_assoc_value instead [ 600.559421][T25597] x_tables: ip_tables: osf match: only valid for protocol 6 [ 600.861305][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5011'. [ 600.888112][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5011'. [ 600.990164][T25637] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 601.077736][T25641] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 601.245319][T25639] syzkaller0: entered promiscuous mode [ 601.245341][T25639] syzkaller0: entered allmulticast mode [ 601.632977][T25672] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5022'. [ 601.655349][T25672] netlink: 'syz.4.5022': attribute type 10 has an invalid length. [ 601.655368][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5022'. [ 601.737533][T25675] Cannot find add_set index 65532 as target [ 602.111055][T25701] netlink: 'syz.3.5030': attribute type 4 has an invalid length. [ 602.135439][T25705] netlink: 'syz.4.5032': attribute type 3 has an invalid length. [ 602.202977][T25702] netlink: 'syz.3.5030': attribute type 4 has an invalid length. [ 602.279695][T25709] tipc: Enabling of bearer rejected, failed to enable media [ 602.561125][T25732] netlink: 'syz.4.5036': attribute type 18 has an invalid length. [ 602.952537][T25756] netlink: 'syz.3.5044': attribute type 10 has an invalid length. [ 602.953598][T25756] hsr0: left allmulticast mode [ 602.953616][T25756] hsr_slave_0: left allmulticast mode [ 602.953631][T25756] hsr_slave_1: left allmulticast mode [ 602.973947][T25756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 603.163003][T25769] ip6t_srh: unknown srh invflags 4000 [ 603.338215][T25776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.508931][T25785] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 603.534199][T25788] tipc: Resetting bearer [ 603.823460][T25813] netlink: 'syz.3.5058': attribute type 12 has an invalid length. [ 604.411051][T25807] bond8 (unregistering): Released all slaves [ 604.482201][T25779] tipc: Resetting bearer [ 604.622186][ T1206] tipc: Resetting bearer [ 604.635136][T25829] __nla_validate_parse: 15 callbacks suppressed [ 604.635153][T25829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5062'. [ 604.635166][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 604.635178][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 604.635190][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 604.636279][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 604.812100][T25839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 604.891468][T25839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5066'. [ 605.067860][T25846] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5067'. [ 605.294915][T25865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.784642][T25877] netlink: 'syz.3.5075': attribute type 10 has an invalid length. [ 605.992724][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 606.023196][T25884] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5077'. [ 606.121418][T25888] syzkaller1: entered promiscuous mode [ 606.121440][T25888] syzkaller1: entered allmulticast mode [ 606.398799][T25894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5080'. [ 606.440749][T25894] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 606.793072][T25918] netlink: 'syz.3.5085': attribute type 29 has an invalid length. [ 606.814303][T25916] tipc: Enabling of bearer rejected, failed to enable media [ 606.815325][T25917] tipc: Enabling of bearer rejected, failed to enable media [ 606.823705][T25918] netlink: 'syz.3.5085': attribute type 8 has an invalid length. [ 606.836241][T25920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.890490][T25918] netlink: 'syz.3.5085': attribute type 29 has an invalid length. [ 607.561598][T25959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.758740][T25962] dvmrp1: entered allmulticast mode [ 607.764828][T25963] 8021q: VLANs not supported on ip6tnl0 [ 608.053496][T25977] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 608.119132][T25982] netlink: 'syz.2.5104': attribute type 21 has an invalid length. [ 608.119156][T25982] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.119250][T25982] netlink: 'syz.2.5104': attribute type 1 has an invalid length. [ 608.154390][T25979] bond6 (unregistering): Released all slaves [ 608.354727][T25994] bond6 (unregistering): Released all slaves [ 609.308031][T26024] bond12: option resend_igmp: invalid value (2048) [ 609.308057][T26024] bond12: option resend_igmp: allowed values 0 - 255 [ 609.311888][T26024] bond12 (unregistering): Released all slaves [ 609.605976][T26044] IPVS: length: 74 != 24 [ 609.645561][T26046] sctp: [Deprecated]: syz.2.5118 (pid 26046) Use of int in maxseg socket option. [ 609.645561][T26046] Use struct sctp_assoc_value instead [ 609.875726][T26051] netlink: 'syz.2.5119': attribute type 11 has an invalid length. [ 610.025649][T26057] erspan0: entered promiscuous mode [ 610.045369][T26057] __nla_validate_parse: 15 callbacks suppressed [ 610.045388][T26057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5122'. [ 610.228143][T26063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5125'. [ 610.233695][T26063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5125'. [ 610.858870][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 611.260420][T26114] bond8 (unregistering): Released all slaves [ 611.401496][T26121] sctp: [Deprecated]: syz.3.5141 (pid 26121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.401496][T26121] Use struct sctp_sack_info instead [ 611.402367][T26121] netlink: 'syz.3.5141': attribute type 10 has an invalid length. [ 611.479042][T26120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5141'. [ 611.571938][T26128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5143'. [ 611.573204][T26127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5142'. [ 611.637374][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5145'. [ 611.637407][T26133] netlink: 'syz.3.5145': attribute type 30 has an invalid length. [ 611.637419][T26133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5145'. [ 611.825811][T26142] ip_tables: iptables: counters copy to user failed while replacing table [ 611.840344][T26137] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5146'. [ 611.864725][T26142] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 611.867615][T26142] bond12 (unregistering): Released all slaves [ 611.909684][T26143] netlink: 'syz.2.5148': attribute type 8 has an invalid length. [ 612.443490][T26171] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 613.120701][T26207] Bluetooth: MGMT ver 1.23 [ 613.131455][T26207] netlink: 'syz.2.5168': attribute type 12 has an invalid length. [ 613.154393][T26207] bond12: option primary_reselect: invalid value (255) [ 613.167580][T26207] bond12 (unregistering): Released all slaves [ 613.702863][T26234] syzkaller1: entered promiscuous mode [ 613.702900][T26234] syzkaller1: entered allmulticast mode [ 614.271262][T26258] netlink: 'syz.1.5182': attribute type 2 has an invalid length. [ 614.479967][T26268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.805528][T26286] gretap0: entered promiscuous mode [ 615.059903][T26295] netlink: 'syz.2.5190': attribute type 2 has an invalid length. [ 615.196200][T24527] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 615.198354][T24527] Bluetooth: hci5: command 0x0406 tx timeout [ 615.382832][T26304] ip_tables: iptables: counters copy to user failed while replacing table [ 615.455552][T26304] x_tables: ip_tables: osf match: only valid for protocol 6 [ 615.869493][T26324] tipc: Enabling of bearer rejected, media not registered [ 615.941070][T26325] __nla_validate_parse: 5 callbacks suppressed [ 615.941089][T26325] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5200'. [ 615.956487][T26329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5199'. [ 616.215384][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 616.323559][T26344] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5204'. [ 616.550109][T26357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5209'. [ 616.555185][T26361] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5208'. [ 616.577968][T26357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.605552][T26357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.622414][T26357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5209'. [ 616.705434][T26361] siw: device registration error -23 [ 617.039086][T26389] netlink: 'syz.1.5213': attribute type 2 has an invalid length. [ 617.057403][T26389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5213'. [ 617.281020][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5216'. [ 617.281043][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5216'. [ 617.281067][T26396] netlink: 'syz.1.5216': attribute type 14 has an invalid length. [ 617.281080][T26396] netlink: 'syz.1.5216': attribute type 13 has an invalid length. [ 617.386521][T26404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 617.425204][T26404] openvswitch: netlink: IPv6 tunnel dst address is zero [ 617.501546][T26401] netlink: 'syz.4.5218': attribute type 18 has an invalid length. [ 617.502250][T26401] netlink: 'syz.4.5218': attribute type 18 has an invalid length. [ 618.083249][T26449] openvswitch: netlink: Duplicate or invalid key (type 0). [ 618.089278][T26448] 8021q: VLANs not supported on lo [ 618.100461][T26449] 0: reclassify loop, rule prio 0, protocol 800 [ 618.136868][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.155438][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.180996][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.202339][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.215327][T26441] bridge_slave_0: default FDB implementation only supports local addresses [ 618.234258][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.271190][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.310983][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.350212][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.428479][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 618.511866][T26459] netlink: 'syz.0.5229': attribute type 1 has an invalid length. [ 618.527056][T26461] sctp: [Deprecated]: syz.2.5230 (pid 26461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.527056][T26461] Use struct sctp_sack_info instead [ 618.599889][T26459] bond6: entered promiscuous mode [ 618.601517][T26459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.676357][T26459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.676752][T26459] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 618.676771][T26459] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 618.680567][T26459] bond6: (slave xfrm1): making interface the new active one [ 618.680586][T26459] xfrm1: entered promiscuous mode [ 618.685439][T26459] xfrm1: left promiscuous mode [ 618.761667][T26461] syzkaller1: entered promiscuous mode [ 618.761689][T26461] syzkaller1: entered allmulticast mode [ 619.203271][T26498] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 619.212878][T26506] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 619.372046][T26512] can: request_module (can-proto-0) failed. [ 619.393457][T26499] veth1_vlan: left promiscuous mode [ 619.620009][T26518] veth0: entered promiscuous mode [ 619.624998][T26526] IPVS: set_ctl: invalid protocol: 98 172.30.1.5:20002 [ 619.787393][T26537] Bluetooth: hci0: unsupported parameter 5135 [ 619.787416][T26537] Bluetooth: hci0: unsupported parameter 8192 [ 619.787428][T26537] Bluetooth: hci0: unsupported parameter 5135 [ 619.787440][T26537] Bluetooth: hci0: unsupported parameter 8192 [ 619.868584][T26543] netlink: 'syz.2.5247': attribute type 13 has an invalid length. [ 620.020739][T26550] IPVS: sh: FWM 1 0x00000001 - no destination available [ 620.303131][T26517] veth0: left promiscuous mode [ 620.545578][T26586] netlink: 'syz.2.5260': attribute type 4 has an invalid length. [ 620.671267][T26591] nbd5: detected capacity change from 0 to 63 [ 620.695301][T26595] nbd6: detected capacity change from 0 to 63 [ 620.728657][T24527] block nbd6: Receive control failed (result -104) [ 620.731733][ T52] block nbd5: Receive control failed (result -32) [ 620.798756][T26599] netlink: 'syz.2.5265': attribute type 5 has an invalid length. [ 620.830348][T26602] [ 620.832719][T26602] ====================================================== [ 620.839739][T26602] WARNING: possible circular locking dependency detected [ 620.846764][T26602] syzkaller #0 Not tainted [ 620.851165][T26602] ------------------------------------------------------ [ 620.858166][T26602] syz.4.5266/26602 is trying to acquire lock: [ 620.864213][T26602] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 620.873337][T26602] [ 620.873337][T26602] but task is already holding lock: [ 620.880681][T26602] ffff88807e989078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 620.890166][T26602] [ 620.890166][T26602] which lock already depends on the new lock. [ 620.890166][T26602] [ 620.900549][T26602] [ 620.900549][T26602] the existing dependency chain (in reverse order) is: [ 620.909547][T26602] [ 620.909547][T26602] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 620.917091][T26602] __might_fault+0xcb/0x130 [ 620.922110][T26602] _copy_from_iter+0x100/0x1660 [ 620.927569][T26602] tcp_sendmsg_locked+0x20cf/0x5400 [ 620.933344][T26602] tcp_sendmsg+0x2f/0x50 [ 620.938093][T26602] sock_sendmsg_nosec+0x10e/0x180 [ 620.943665][T26602] sock_write_iter+0x2de/0x3e0 [ 620.948934][T26602] vfs_write+0x612/0xba0 [ 620.953712][T26602] ksys_write+0x150/0x270 [ 620.958553][T26602] do_syscall_64+0x166/0x520 [ 620.963664][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.970085][T26602] [ 620.970085][T26602] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 620.977730][T26602] lock_sock_nested+0x41/0x100 [ 620.983092][T26602] inet_shutdown+0x6a/0x390 [ 620.988141][T26602] nbd_mark_nsock_dead+0x2cb/0x550 [ 620.993841][T26602] recv_work+0x1cee/0x1e10 [ 620.998770][T26602] process_scheduled_works+0xc3d/0x1630 [ 621.004857][T26602] worker_thread+0xa47/0xfb0 [ 621.009956][T26602] kthread+0x38b/0x480 [ 621.014528][T26602] ret_from_fork+0x514/0xb70 [ 621.019645][T26602] ret_from_fork_asm+0x1a/0x30 [ 621.024943][T26602] [ 621.024943][T26602] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 621.032577][T26602] __mutex_lock+0x19d/0x1550 [ 621.037798][T26602] nbd_queue_rq+0x373/0xff0 [ 621.042816][T26602] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.048945][T26602] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.055822][T26602] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.062316][T26602] blk_mq_run_work_fn+0x16c/0x300 [ 621.067849][T26602] process_scheduled_works+0xc3d/0x1630 [ 621.073903][T26602] worker_thread+0xa47/0xfb0 [ 621.079004][T26602] kthread+0x38b/0x480 [ 621.083580][T26602] ret_from_fork+0x514/0xb70 [ 621.088674][T26602] ret_from_fork_asm+0x1a/0x30 [ 621.093952][T26602] [ 621.093952][T26602] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 621.101155][T26602] __mutex_lock+0x19d/0x1550 [ 621.106259][T26602] nbd_queue_rq+0xc1/0xff0 [ 621.111180][T26602] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.117316][T26602] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.124155][T26602] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.130640][T26602] blk_mq_run_work_fn+0x16c/0x300 [ 621.136177][T26602] process_scheduled_works+0xc3d/0x1630 [ 621.142492][T26602] worker_thread+0xa47/0xfb0 [ 621.147591][T26602] kthread+0x38b/0x480 [ 621.152177][T26602] ret_from_fork+0x514/0xb70 [ 621.157269][T26602] ret_from_fork_asm+0x1a/0x30 [ 621.162541][T26602] [ 621.162541][T26602] -> #3 (set->srcu){.+.+}-{0:0}: [ 621.169645][T26602] __synchronize_srcu+0xc9/0x2f0 [ 621.175093][T26602] elevator_switch+0x1e8/0x7b0 [ 621.180429][T26602] elevator_change+0x2fa/0x480 [ 621.185704][T26602] elevator_set_default+0x375/0x440 [ 621.191407][T26602] blk_register_queue+0x3f3/0x4e0 [ 621.197005][T26602] __add_disk+0x6b8/0xdb0 [ 621.201847][T26602] add_disk_fwnode+0x100/0x3a0 [ 621.207118][T26602] nbd_dev_add+0x733/0xb60 [ 621.212037][T26602] nbd_init+0x168/0x1f0 [ 621.216802][T26602] do_one_initcall+0x250/0x870 [ 621.222079][T26602] do_initcall_level+0x10a/0x1a0 [ 621.227575][T26602] do_initcalls+0x59/0xa0 [ 621.232408][T26602] kernel_init_freeable+0x29d/0x3e0 [ 621.238202][T26602] kernel_init+0x22/0x1d0 [ 621.243033][T26602] ret_from_fork+0x514/0xb70 [ 621.248125][T26602] ret_from_fork_asm+0x1a/0x30 [ 621.253407][T26602] [ 621.253407][T26602] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 621.261213][T26602] __mutex_lock+0x19d/0x1550 [ 621.266316][T26602] elevator_change+0x1af/0x480 [ 621.271586][T26602] elevator_set_none+0xb5/0x140 [ 621.276942][T26602] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 621.283271][T26602] nbd_start_device+0x189/0xb30 [ 621.288626][T26602] nbd_genl_connect+0x167d/0x1cd0 [ 621.294158][T26602] genl_family_rcv_msg_doit+0x233/0x340 [ 621.300296][T26602] genl_rcv_msg+0x614/0x7a0 [ 621.305311][T26602] netlink_rcv_skb+0x226/0x4a0 [ 621.310732][T26602] genl_rcv+0x28/0x40 [ 621.315224][T26602] netlink_unicast+0x7bd/0x940 [ 621.320520][T26602] netlink_sendmsg+0x813/0xb40 [ 621.325791][T26602] sock_sendmsg_nosec+0x13a/0x180 [ 621.331325][T26602] ____sys_sendmsg+0x54e/0x850 [ 621.336600][T26602] ___sys_sendmsg+0x2a5/0x360 [ 621.341785][T26602] __x64_sys_sendmsg+0x1b1/0x290 [ 621.347233][T26602] do_syscall_64+0x166/0x520 [ 621.352330][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.358728][T26602] [ 621.358728][T26602] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 621.367316][T26602] blk_alloc_queue+0x544/0x690 [ 621.372591][T26602] __blk_mq_alloc_disk+0x194/0x390 [ 621.378212][T26602] nbd_dev_add+0x494/0xb60 [ 621.383135][T26602] nbd_init+0x168/0x1f0 [ 621.387801][T26602] do_one_initcall+0x250/0x870 [ 621.393076][T26602] do_initcall_level+0x10a/0x1a0 [ 621.398517][T26602] do_initcalls+0x59/0xa0 [ 621.403786][T26602] kernel_init_freeable+0x29d/0x3e0 [ 621.409490][T26602] kernel_init+0x22/0x1d0 [ 621.414329][T26602] ret_from_fork+0x514/0xb70 [ 621.419428][T26602] ret_from_fork_asm+0x1a/0x30 [ 621.424705][T26602] [ 621.424705][T26602] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 621.431900][T26602] __lock_acquire+0x164c/0x2de0 [ 621.437287][T26602] lock_acquire+0x115/0x350 [ 621.442297][T26602] fs_reclaim_acquire+0x71/0x100 [ 621.447739][T26602] prepare_alloc_pages+0x149/0x600 [ 621.453354][T26602] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 621.459670][T26602] alloc_pages_mpol+0x21e/0x390 [ 621.465028][T26602] alloc_pages_noprof+0xb1/0x2b0 [ 621.470489][T26602] __pmd_alloc+0x3a/0x5c0 [ 621.475340][T26602] handle_mm_fault+0xe9d/0x3750 [ 621.480718][T26602] do_user_addr_fault+0x746/0x1340 [ 621.486369][T26602] exc_page_fault+0x6a/0xc0 [ 621.491388][T26602] asm_exc_page_fault+0x26/0x30 [ 621.496753][T26602] rep_movs_alternative+0xf/0xa0 [ 621.502205][T26602] _copy_from_user+0x7a/0xb0 [ 621.507383][T26602] copy_from_sockptr+0x45/0x50 [ 621.512720][T26602] rxrpc_setsockopt+0x4b5/0x970 [ 621.518075][T26602] do_sock_setsockopt+0x17c/0x1b0 [ 621.523609][T26602] __x64_sys_setsockopt+0x13d/0x1b0 [ 621.529313][T26602] do_syscall_64+0x166/0x520 [ 621.534412][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.540808][T26602] [ 621.540808][T26602] other info that might help us debug this: [ 621.540808][T26602] [ 621.551018][T26602] Chain exists of: [ 621.551018][T26602] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 621.551018][T26602] [ 621.563515][T26602] Possible unsafe locking scenario: [ 621.563515][T26602] [ 621.570943][T26602] CPU0 CPU1 [ 621.576290][T26602] ---- ---- [ 621.581687][T26602] rlock(&mm->mmap_lock); [ 621.586091][T26602] lock(sk_lock-AF_INET); [ 621.593011][T26602] lock(&mm->mmap_lock); [ 621.599857][T26602] lock(fs_reclaim); [ 621.603841][T26602] [ 621.603841][T26602] *** DEADLOCK *** [ 621.603841][T26602] [ 621.611978][T26602] locks held by syz.4.5266/26602: 2, last CPU#1: [ 621.618297][T26602] #0: ffff888034989260 (sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_setsockopt+0xe2/0x970 [ 621.628042][T26602] #1: ffff88807e989078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 621.637970][T26602] [ 621.637970][T26602] stack backtrace: [ 621.643849][T26602] CPU: 1 UID: 0 PID: 26602 Comm: syz.4.5266 Not tainted syzkaller #0 PREEMPT(full) [ 621.653219][T26602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.663268][T26602] Call Trace: [ 621.666545][T26602] [ 621.669501][T26602] dump_stack_lvl+0xe8/0x150 [ 621.674095][T26602] print_circular_bug+0x2e2/0x300 [ 621.679120][T26602] check_noncircular+0x12f/0x150 [ 621.684058][T26602] __lock_acquire+0x164c/0x2de0 [ 621.688908][T26602] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.693931][T26602] lock_acquire+0x115/0x350 [ 621.698422][T26602] ? prepare_alloc_pages+0x149/0x600 [ 621.703694][T26602] ? trace_hrtimer_start+0x82/0x200 [ 621.708922][T26602] fs_reclaim_acquire+0x71/0x100 [ 621.713845][T26602] ? prepare_alloc_pages+0x149/0x600 [ 621.719116][T26602] prepare_alloc_pages+0x149/0x600 [ 621.724256][T26602] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 621.730053][T26602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.736371][T26602] ? __pfx_policy_nodemask+0x10/0x10 [ 621.741646][T26602] ? __lock_acquire+0x747/0x2de0 [ 621.746573][T26602] alloc_pages_mpol+0x21e/0x390 [ 621.751416][T26602] alloc_pages_noprof+0xb1/0x2b0 [ 621.756341][T26602] __pmd_alloc+0x3a/0x5c0 [ 621.760661][T26602] handle_mm_fault+0xe9d/0x3750 [ 621.765504][T26602] ? handle_mm_fault+0xf1/0x3750 [ 621.770431][T26602] ? __pfx_handle_mm_fault+0x10/0x10 [ 621.775708][T26602] ? __lock_acquire+0x747/0x2de0 [ 621.780633][T26602] ? lock_mm_and_find_vma+0xa7/0x340 [ 621.785915][T26602] do_user_addr_fault+0x746/0x1340 [ 621.791022][T26602] exc_page_fault+0x6a/0xc0 [ 621.795513][T26602] asm_exc_page_fault+0x26/0x30 [ 621.800349][T26602] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 621.806054][T26602] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e [ 621.825647][T26602] RSP: 0018:ffffc9000498fd38 EFLAGS: 00050202 [ 621.831705][T26602] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 621.839661][T26602] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000498fdd0 [ 621.847615][T26602] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 621.855569][T26602] R10: dffffc0000000000 R11: fffff52000931fba R12: 1ffff92000931fb4 [ 621.863524][T26602] R13: 0000000000000000 R14: ffffc9000498fdd0 R15: 0000000000000000 [ 621.871488][T26602] _copy_from_user+0x7a/0xb0 [ 621.876078][T26602] copy_from_sockptr+0x45/0x50 [ 621.880837][T26602] rxrpc_setsockopt+0x4b5/0x970 [ 621.885677][T26602] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 621.891034][T26602] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 621.896569][T26602] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 621.901935][T26602] do_sock_setsockopt+0x17c/0x1b0 [ 621.906955][T26602] __x64_sys_setsockopt+0x13d/0x1b0 [ 621.912147][T26602] do_syscall_64+0x166/0x520 [ 621.916728][T26602] ? trace_irq_disable+0x3b/0x140 [ 621.921748][T26602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.927812][T26602] ? clear_bhb_loop+0x70/0xc0 [ 621.932480][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.938360][T26602] RIP: 0033:0x7f1e90f9e159 [ 621.942772][T26602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.962366][T26602] RSP: 002b:00007f1e91e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 621.970770][T26602] RAX: ffffffffffffffda RBX: 00007f1e91225fa0 RCX: 00007f1e90f9e159 [ 621.978726][T26602] RDX: 0000000000000007 RSI: 0000000000000110 RDI: 0000000000000007 [ 621.986692][T26602] RBP: 00007f1e9103506b R08: 0000000000000004 R09: 0000000000000000 [ 621.994659][T26602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.002623][T26602] R13: 00007f1e91226038 R14: 00007f1e91225fa0 R15: 00007ffd23a6e0d8 [ 622.010596][T26602]