last executing test programs: 27.090888235s ago: executing program 4 (id=11769): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmmsg$inet(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="efca", 0x2}], 0x1}}], 0x1, 0x6ef8eb021116f258) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000040)={0xa, 0x9}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x44, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x3}, {0x8, 0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}]}, 0x44}}, 0x24040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0xd, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a0d6}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf5, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r10, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00164d0024a60200000088", 0x14}, {&(0x7f0000000480)="ffc9ace87aade19e82581cba9520bc2145c1000cdd52a158e0b1", 0x1a}], 0x2}, 0x20044011) 26.587763905s ago: executing program 2 (id=11774): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x200000, &(0x7f00000000c0)={@align=0x100000000000, {0x0, 0x40, 0x1ff, 0x5fae}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) 26.314988442s ago: executing program 3 (id=11776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r2, 0x4, r2}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000140)={0x1, 0x1, 0x10001}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) accept4(r4, &(0x7f00000001c0)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x80000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000280)={0x7, '\x00', {0x80}, 0x9}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r8, 0x4000) bind$netlink(r1, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x4], 0x1}}, 0x30) 26.303843396s ago: executing program 2 (id=11778): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, [0xfffffffffffffffd, 0x9, 0xa, 0x200, 0xffff, 0x5, 0xffff, 0x5, 0x3, 0x800, 0xffffffffffff8001, 0x35, 0x336, 0x6, 0x3]}, &(0x7f0000000440)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x29, 0x9, 0x7, 0x1, 0x28, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8000, 0x0, 0x9e06}}) 26.031148399s ago: executing program 0 (id=11779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES8=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES8=0x0], 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0xc0c0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) 25.273539364s ago: executing program 1 (id=11782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000980)=""/189, 0xbd}], 0x3}}], 0x1, 0x41, 0x0) (async) recvmsg$can_raw(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/187, 0xbb}], 0x3}, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x9, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r4, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x2000a100) 20.47088024s ago: executing program 3 (id=11783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2e3eb97911e55c4f52eea02b3e8903a6cab26f57568a276"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "269b11e171ae208c1df60917bd676484200e9c4fae2d81c1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd3971f7a3df54f0e5d945ca874070ce7cd76485ff82a4b4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fddbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a00060008021100000000000a001a00ffffdfffffff00000a001a000802110000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048c1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x34}}, 0x0) 20.470498241s ago: executing program 4 (id=11784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05f02606e80f8de5961454ed000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x74af, 0x5a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000050) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) 20.46586272s ago: executing program 2 (id=11785): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000440)=""/154, 0x39, 0x9a, 0x1}, 0x28) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001e00010a0001e50000000000001b"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_dump={0x3f, 0x4, 0x5, 0x9c, "ed3bd79ebbf744a5badc036b6ea2402599657f7164e10de88c5e447efda78331ba65c38ee985acfac46829b25d1029790f9bc1e329bb88f35c1e15487af42af5c6d45dee7c9e957466bd673a4f77ea7646edf7660617098c776fe72a3a6d83f6894114ea68dad5e627a0183f778ac9a3ac859033498ae1913901ca7761bb761f6a136dae977634047d6f085b0826a4f665b50d583f3033a84d498fb5"}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000ea8a81f0fc55cbdfd28b08820000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250200000008000800ac141441140009002001000000000000000000000000000006000a004e2100000500040003000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x1, 0x9, 0x48, @mcast2, @loopback, 0x1, 0x80, 0x56, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x1c, 0x81, @vifc_lcl_ifindex=r4, @rand_addr=0x64010101}, 0x10) 20.43544049s ago: executing program 0 (id=11786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000001800)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000001800)) (async) 20.383032895s ago: executing program 1 (id=11787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x8}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$xdp(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="5b9ab977792c25fd911c71b686bb4c25438e084c0c26ea22", 0x18}, {&(0x7f00000000c0)="d89b2f0d964d1e301bd2b96fca7482bd4609287a7aa5ada38dca82f16bfab824c2064cc38af0eaa25543cfb44c1b2b7a58422433fd9e3bc06b45bd191266", 0x3e}, {&(0x7f0000000100)="5beaffeec906df93aac604b3f0c2640fe80d85826c9e183684f469ebfa849c955f30ae19f034ffded2626112b956db11ed7c276737fc47c86e84c8d4759070998af510c0095b2d5c4aa30d", 0x4b}], 0x3, 0x0, 0x0, 0x20008844}, 0xcc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6, @remote}, 0x10) 20.250887939s ago: executing program 2 (id=11788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) 20.159648585s ago: executing program 4 (id=11789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x148, 0x1b0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xfd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x10000, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x4, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x886cb6b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x55d) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="010000a300000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="93d9be04a39711120ac74099c510e439ef12a0e6db9b5838a0bcaa89a5d02ea46fc7baa39fc225c0768e0623c0010dcd5d08a983bad691f7f5b93fa26b81b2605174c614113306a0c52d60708b665041defbebad8277a807390e6660a953429b9da4659cf333419b8ba6f15dec4c0935bacd8687e779787e6e0d2897b57cf28eff82e672b5090c2a47b2a70f063b661f929732ba326b03f300136e31208d57f3bf1684228d109ff784ae5ae853d6185bbb3653c821b45dd7a90093d324ea3dfe4fbd882a4affa3d69ae202710bceb5fba996f395ee0a8b8923301c", @ANYRES16=r3, @ANYBLOB="210227bd7000fddbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="0800010001000000"], 0x24}}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0x1e50, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r9, @ANYRESOCT=r8], 0x48) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10}, &(0x7f0000000640), &(0x7f0000000740)=r8}, 0x20) 20.086819199s ago: executing program 1 (id=11790): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmmsg$alg(r3, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2296038943616230bbde3f7a6aba23be095897edeb5df54d1bee053bf8371c24406fd250ea37", 0x26}, {&(0x7f0000000280)="930382062f65e2a849d71d71ffed67525126aba508260e468f216aefa4a40190cacd14dc6f7f36f7563b09a60bafe49e26c4d6a96aa028d5d021992023a8f9f8687b2262e9ef116d1172c997657b669629ccf8", 0x53}, {&(0x7f0000000380)="179e97c8cadc3ba6590452b24d9b9298b939f37bf8376a7337bf0a04a5bcc0f51636c9249474cb37eac7daebec326da390216617c6c04a1484de044af2f66663491c63dce8a2f85a411eb321e3b6c2a2f6a7719dc5a97f4bb74ed0a52b8117ceef0bec8e509f1c9e018bd608455649a5f16528b235", 0x75}, {&(0x7f0000000400)="6803f897454bccca96c0e236855eb28c27d67ac38dead4743c6233a7f41a83288a456aaa23d80d9bbb5d4e053bfb628d9857ebcdbe80b06de37f85f2b5fd7c11dd92130d0e0a753d1614c48afd7feb41d548086fb137c60631da99dab8e1f7aa3f45b8395ed3e8bc47915b4fdc892500f8478a8b847b6f264cf55416b08e9c19ddef0ac6bbd86bb5044867452695fc527b88d989c165c1b598cb4c3172e5e12b74376288809daa", 0xa7}, {&(0x7f0000000500)="ad30d8d38ff22a0908895100d3441060d8e5a398660b08885c8b19aebb7f75cd09a1919de7d5ad20851d9bcb53e59c65a5f805a3226f5370147e38f0e7a0bc11c5e8762cd2bddc464f3446bd", 0x4c}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x12a0, 0x4}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)="89c7a5ee92267729fd561d36920f8a8f40662bbdd53d67eb2e0157d5173040d64c496d75e793764d74eac0f070b9dba76f9cca9fae", 0x35}, {&(0x7f0000001900)="15dbec6687d195afc097ede782b3874dd082b9a9b06c604639b89c599553614ae467384d1d6ee60efeec5a6d56f55cbecac38918a4433b57c2dbb70cf3ad1f648bc7ab7563fc", 0x46}, {&(0x7f0000001980)="774f54f8a22e45c2435694407a7b9944426d574b78eb55ec4857f66193a96b5837212dcfe828bba5f493963fbae32970e6e256bd6da4f6bb8939079aed453d991bfc855b1bdf8389fcf4e85992dcbf33115765556b5c84cc488de9f0925ce2ca6c0197857e56487b68c6797d741cf966796dfc4076a8c88c7e5dd219a401d3ea029c8a2aa7a1d3", 0x87}], 0x3, &(0x7f0000001a80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x60, 0x117, 0x2, 0x49, "b38ef1955c3f06d84c75d1cc746f7e6a1cf6871ccaea1029a319c7aaac724b23ed4b718322d6ba9bcf267aa1feed0b462a71c0adef1961fbacd6fd6193124c0d0591874c7f35682829"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa8, 0x801}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b40)="109c2d584fc4f897404d4de591de974d7a12146c840d81bc1ea5cc6602ce10fe2ca6dc76b9e0cfa30bd377a983e1690f4cf5ea1605365189476cfc43103ea10270c5c2bcb994df15381806a86f6e9823632dbe5a59e2005c8e6a269369d28578522ccbfab7624ea5250072b9b3d888bbc71c8c5fea99be7499374ea61e2386e4dad0ae8c769c8f", 0x87}, {&(0x7f0000001c00)="2012fcf9c7ed07bf477575ec2f24a7c8cc4f803f83f1db048ff75cafb2bd2fef01b5adc6559ec2f773cf39ec0b8fe63942a776598e8f0def9eb4f9356ac1ebc435a16119c47d02b6f7930f84f5fbd995a699259c2aa19d3b56ccecc8dd545df54febc251c490870a3c4a6323c7195c0ac5a98e5507f96329f1d7455c7028efcb38b3e5dfa0e71a87eaa14210b469501cf5bd815c7e45c83c5929477173098eb4548dfdf0b593b1b4f3acf8728a7f106b1ab1621f3bfe63ad40cf7e3e846ff82e7afb2f6bacf8f8cc838d8042ac83587370c884", 0xd3}, {&(0x7f0000001d00)="d182914a2105576459a51ead0ab9277e1a81728d3d0ef78e20a199b6fc202fd334b27278a8418f1f0842a3a6de405056cd038c53800933cea666fc91f9df50855bacb602feaff3ca12ec05666a7cc5df0dba8719f351980b500caf34c6052caa091e7c3f17c7d5fb22421b0d1377f1140d6337191cc0aee73508be9b1ace1504f3aa7e83126d570fa0da6891", 0x8c}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1e0, 0x4004000}], 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r5, &(0x7f0000002140)={0x67446698, 0x1, 0x4, 0x1, 0x4, "3369c3050700b51f90793b8d9f1d408794e477df577593917b1fd336446527153c63642652e68a28606e0f9a7d65f24d72d0175fa579c2843d22f5a6390f26a868f644b1d616c77b80f029cf710f71b7e97a5397b7e81499e56717c97b3c1ea3630ca3ebdcd3946596fec0bce0f028bccb7baa2228ac606997b440f78a5a1c55b2df06e17aa81ed15dc2fc92a420b34df21ec46cbde3bc250b971e3581d50c27b3f25047d57741a08863e5d9c70c5e0b3202d3610f"}, 0xc5) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5f}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$netlink(0x10, 0x3, 0x15) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYRESHEX=r7, @ANYRES64=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x840) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x42, @a={0x81, 0x3, 0x3, 0x0, 0x7f, 0x80, 0x2, {0x9, 0x3d, "a2f83e63a2ee447540604fca430ee7f9b8a351db970ade7dbd725b12c663b160084f27866caa7df19ceb3c2be21682cb5cbe4a6a2d236a065e2e9dc53a", 0xc8, 0xfa}, 0x0, 0x9, 0xf7, 0x10}}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) 20.086350661s ago: executing program 0 (id=11791): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r2, 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0x4, 0x4}, {0xc, 0x5}, {0xb, 0x4}, {0x2, 0x4}, {0x2, 0x4}, {0x10, 0x5}, {0x9, 0x4}, {0xb, 0x4}, {0x2, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x0, 0x61, 0x0]}}, &(0x7f0000000280)=""/166, 0xa1, 0xa6, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r5}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x889c}, 0x4000080) 20.05751443s ago: executing program 3 (id=11792): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000840)={{r0, &(0x7f0000000240)='GPL\x00', 0x40, &(0x7f0000000400)={@align=0x6, {0xb, 0xec, 0x8b8, 0x7f}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x2}, {[0x6, 0x9, 0x6, 0x9]}, 0x0, 0xce, &(0x7f0000000680)=""/206}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@dellinkprop={0x5c, 0x6d, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40446, 0x4002}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3164f}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_LINKMODE={0x5, 0x11, 0xd}, @IFLA_PROMISCUITY={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c0002800500010005"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000001403000028feffff620af0fff8ffffff61a4f0ff000000001d0a0000000000004e000500000000005504000001ed0a0025000000170000006e040000000000007b0300fe000000000c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858a76846b2d31a76e42f2460d0b11009e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217f9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed393252b4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bdd94b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085af113e65a16c871b381aa702ef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c230dd0e44bd4f4861f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa438af5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41197344f8a72152d0cc4a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb1db5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7bfed65c0fe1ab64b04a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12176bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adcfec1260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c08c9c07"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0xc0, 0x0, &(0x7f00000002c0)="d359259a21b7ac86a814ace8e12ce2260c968225bcfcbde5efd1febdbd6709da6d31295e599a1929cb5db30eff6e2d32e4efcfbe1379500102a7ad07b76fa991adc29c1505ce486d78b3c2455c715d4bbc1ab1382fc449585f3f2c4f0d82f65ba64651e2acfc677a24933f079ccd376853c74ea8c0772eeba456e55592bd9fdfbf0f56255455f750e699a9dd1e6559db7a81ecdc697cab738e7421fc85cba8425d0153bdf7e1efbd5a4d5f0c1bbeba30fd26dfe6f7b3ae4b4b4b0541bd65e1d6", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) 19.944020889s ago: executing program 2 (id=11793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x80) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x40c0) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="500100001a00130700000000ffdbdf25fe8000000000000000000000000000bbff020000000000000000000000000001000400004e2100020a00000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0301000000000000000000000000000004d632000000fc000000000000000000000000000000050000000000000000000000008000001100000000000000070000000000000001000000ffffffff0000000000000000010000800000000043050000000000000300000001000000ffffffffffffff7f020100000000000001000000000000000000000000000000000000002cbd7000453500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x2014) 19.855649357s ago: executing program 0 (id=11794): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800"], 0x558}}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 19.604843031s ago: executing program 1 (id=11795): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000080)=')%^#\x00', 0x80, &(0x7f0000000140)={@_ha_fsid={[0xc, 0xffffffff]}, {0x1, 0x3, 0x6575}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1000}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x2a, 0x4, 0x6, 0x807}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/49, 0x31}], 0x1, &(0x7f0000000400)=""/31, 0x1f}, 0x93}], 0x1, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}) 19.5819277s ago: executing program 4 (id=11796): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 19.503651716s ago: executing program 0 (id=11797): r0 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000fd0000000000000000009112160700000600000000d17563b719"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ef3072ed01572436bc017513ebd82fa432e8a4902173585d2b57a2f84145e89a6aa9b50cc94c77b8d20d615d1fa7d0cea41baa9a7a989f88ea6d22e8c36db7cdb980302ecbd250f94d50783c260e578b4b75553cc214aaee2928245dc9aabfccec33faf81d6cc481a4f3b0f32c6243ecffba633181ee3c307482e4e104bed1ba1fc6426213039eeecaef1937cb34379565d7f684b1ecaffd2b6b36fd7cc8fe0a70cbf00442ae5e3f2a6bedb023e63d0666e09f55adf81653ee60b2a71c586722e00268050d5ea80219a415c01d16fb2c1ea04940814d525eff170c895788f1cea88ce2f265ffea", 0xe7, 0x4000, &(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400ac64e06947bf975d53dba45bec6c0000240000040000d1180006000300000000000600040000000000060004000000000006000300000000000600040000000000a9e3075acffd436b51856507a4a4e8ca75c2a9b8c83927f7b5d8e6fd444b3c880bee0566f85958346cad9318adb05f3fb49ef4e633e102bcf6dfb774dadf14bf9917"], 0x44}, 0x1, 0x0, 0x0, 0x40448c5}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept(r3, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00'}, 0x18) sendmmsg$inet6(r8, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="c07c478116ee2368908c34fcbd387fa2d3420f43cf316c5434382510234fe876bff66877cff9dd10cf6fdf7a49fc4a726b8eb2a5f47253ec61e37d6ce7174a4e1b5a6e746f7ab4775bac0e3e37f06ca780e96318cd92b2931f561d34b192026a8e63e2f9b9bb2ca817b9676c812fb9013e1fba84f23397608d80e884498d783a151618286df87d38be88ec355706d0bbafe951eea4cccd634eecf49496ca63d79dd75053c9f9", 0xa6}, {&(0x7f0000001700)="1c1ee11cbe38c45086cd85c7465d958d19c0a7ed2e57a46b0f96afd8a2fd297e7d72f0e4a1b59f61d8c4e546065f95a1a999165a5063a12801a66d3716e6350c8407ff2663dad7e26d2e1b8a7ea74f683cf24c1d876554162c5da842becf5c2660f2494c90d12bcf1cc7f61ec0ff81f71ad961062629b9c3bdd2895af766dda7a7af79f7898194a7258f47989684af83afd11064b3be59f9559ace5583e546b323ac5c2efebe6db23510581ae7", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x2, 0x4008005) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000000000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/437], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) recvfrom$inet6(r4, 0x0, 0x0, 0x6122, 0x0, 0x0) 19.453400868s ago: executing program 2 (id=11798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="7208adbdfd11664591f9ad4c1724d12db9e8f14b30b40e5f2294a7c32e96e43b2ddb7b415f45b4f5a7f5b3996f5652c10da8905a16f52c279a4ff827b36bca5d9c7766e397208758aef1359fa682459102d23bdee3f3cf", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf255700000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68a", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0904000000000000000002f30000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a196ae563928645950e6abaa22e815afde2e246431b1a0dba8f394a284ee55609f04b196d7e43a42ba254a32844c075e6dbf13166f91a820a4933397057ee7fe5805b1ab5"], 0x94}}, 0x0) socket$inet6(0xa, 0x1, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000000100)={0x80000001, 0x20, [0x2, 0x8, 0x1, 0x6e], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x444) 19.442498475s ago: executing program 3 (id=11799): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}, 0x1c) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x9100}, @void, @llc={@llc={0xd4, 0x6, "bf38", "302bfac9907b71cfce85a6a591af6ced5359256971492a4f4b899d5e1d29a5841c9b7cdb30b3d8eee1c11f3b1048cf76c2e9f6a39685fc231f169fc6cb34eca278137c9b0705ed4c818155a6"}}}, 0x54) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x1d) (async, rerun: 32) close(r4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000009c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r5, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x1, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x80, 0x9, 0x7fffffff}}) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x80000005}, 0x1c) 19.23895316s ago: executing program 1 (id=11800): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.105167379s ago: executing program 1 (id=11801): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x1800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001980)=ANY=[@ANYBLOB="20010000", @ANYBLOB="d11adf3e11773fa48ac6640cb9cbedcb07aef22e6c20b2d972f2d508b3bd94549e5a2eb560d6369f3d0cdfbca3340f15e6b39e49c87451dcafbbbfe07b600faba61214a0dcddc516a689d2e02b847e15986f07b2b1f8ab49290d956c5bd5e61aa90bb494a0cfdb95ce8fdc73d949afa4f03aa51180576a0ec6b704d5b6a2256c666a407a4ee3eee4acc4049df0955e7b29f4f4b20421337ddfd161f79d05cdfeecf7bd61c29ab75e9f50a7b36137529a2bbb26602d8864ba56", @ANYBLOB="01000000000000000000010000000800020001000000080001"], 0x120}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$inet6(r1, &(0x7f0000001940)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private1, 0x101}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="060dcfe947b2aff19153524614d14bdebe51e4e1b7dbd55f942f61b18068dfd5cfc650612e7bb1d66b970bc0419a6e7d1c08f275981067d0d345f7f30889c91a121fc0f4e754b079252621f1c822c7fa52ead70e74fd75fa3c4522324bf43a68d1da0015ce20b05e6ec8a1f0b1cb26d8decf616ba956", 0x76}, {&(0x7f0000001340)="e3561633bd80f36e48f337a416cc51cdfeacd1d03d68d2eb0da4696a2d1fb033426a245e4937880fc0579e96776b40f25545817131de06b2f84ee7f18bfaa4d5503c5699405da2a2a21e52ec7cd9be177aeaf4d8555977f3464a8c150830ec541944f20a682d8b2de27c766893d588fb89af9b", 0x73}, {&(0x7f00000013c0)="9fb14432f2812fd0e0916b111e02a8bb110f4b", 0x13}, {&(0x7f0000001d80)="f8eda4baa52a38e583867437d143facfcc19fac437fa37080600bae434feb6390428f7495732fcc18e7261647ce709345e5a0e9b1e29b0d3389e2f16c63679ad3face8e7a0460cac9ecf5912f679c17f431bfb1c8547ca43c6ec58a0c099f0ec111033839e10438d950d67b4f307629e6f479d73592af96142049e74c43723ef471643173099fe9dd86e3be4d95d8fb8fc48bb1c442e288da0115b73eaa97d513e504bce1364a435b6968d5bb2471df19a5bb02fe2103cc2b16fb0654d4397dbc5db57f2c955393fd2f0816d3c58839389024eee9c24f18c8bd49eb1dac35a2a126ec958a6ae06986ba22bef87a2a941de68079ac3813d8ea85c478f4792dde14bf1c576b8cfdee02b6508441ef437783e50f6ef0e714b1bd5e4511cb6839c87fbb3be81bf7d6c3f42c7cc4af14783106a97258665c10bb89c3328455ff236d41983008f2a681b3f35757d3ead586c6e944fdf21c878c5c1318bfe211b10598806533c7e86594dd36b33f810c8492daa0a8347b8834223084ee7d6a635dec88dbb0c7c6a32e9a6872e0b4b18846565a99ab70f7b4a2f49fdd98424950f5aa37b2200c22f8ac6248eb38a5633672a0da01f0c", 0x1b2}, {&(0x7f0000001500)="33da0bc5b9d2277a7ff6836e71807a929a0978a381f297656c37154849047c45a7cef6859777721e0d93d4551e96fce6d983ba98a52e95794db18991fbc11bed524122ffa409db3a9f6bc82de2089c517bdd5842327b93491d49af1e796a3b844af6e4f28ee5a70e2f574638c8b3377b34913205bea9b711de3100b014d667e1dfc1742f34ac4e6fcc5c9b8fa4", 0x8d}, {&(0x7f00000015c0)="a251cbc271a562e56391ac6c6add2e045536de5046b2357f1a6b94cfbf20a6663ad0345617e9890e24a18767f2805ba5cd44e469756de13e35f7f9549a64464af81d7bc6398d672547ffeb77b3a0ed64ba04d747ecca7be90ea26582890eb272a86b07e1ccd93199ad0e835b4b61114871e3e8bdd23b3a055463c76b21d9dc3bf69d082a", 0x84}, {&(0x7f0000001680)="929edd40baf68141d1b13180e4e47448dde7dd68", 0x14}], 0x8, &(0x7f0000001f40)=[@hopopts={{0x298, 0x29, 0x36, {0x67, 0x4f, '\x00', [@generic={0x2, 0xcf, "96b87e8aa1a901acd261145b8e16b4513850234f54dec017885aa4936153d25d884849437271ccb973ba463a017c3b137c0fe0ba8756ac798583d9e841bcb215f85011f8a7b1158020f0b6a23853af3260ed538d54a72714e2e8fb0a70d11f4022f35ce3bd24ff003ec73b16e75f940d588326db0d10a8e74e6869195f679678e371de06038ce73c4b15c6c3068a401925a853e4202bbf61d6cf8e223e511fe0ff81ef1a3af148bbb12daaadf45c3e52d1f9a5d4de9be42c4c501d5707bd8086d5fd38ff8bac638788028ab94765af"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x4, [0x9]}}, @generic={0x58, 0xea, "18c8e4712ecb2e0443e44c66c2bd2aaf6d76cc25b4d32050b92d31000149d8fe817e0e8920a9784fe249c3b486254ba7abdcaf8e8e2af9e448a6d4629c4988dfa93bdb55f4b9bbfc95e1241f1ececf59150d8a94385fe1d15e30eea433fed5e7dcdfe70fe03eff8acf1bd04057c10577d5674d87ff6591f3290879bde6ad3b25df3be52f8bfabc407768d594f9de6794f5c658731ee55f24a5e26fe46a20fdd2e99697b31e25e309ca984be6f1972f3a6ed82adf3078ef7f69dce104d8c694c486b948dc594c7901c989da290ece5a267788c8bedc962b923978428d98d76038bf7c9c49bf3e6d04a374"}, @generic={0x2, 0x78, "ed29476dd0af403c087074f4b2a07c3b41852d03251373a217af18457532a385214188f2216393707afa95b0c73970573b6d51bc2c453e5e4d01861e9846bed70539a72e4e3ef29c93d355b0484139faecfeae3297053383b46e0145a4e6da5b87931e88704c041ade914398880953a40cf27c221d07f000"}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x0, [0x1, 0x4]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x2b0}, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x6c, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 19.086046333s ago: executing program 4 (id=11802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x56) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) (async) close(0x3) r4 = socket(0x27, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300", 0x5e, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c}, 0x4c080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3820800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r8, @ANYBLOB="10002cbd7000fbdbdf252d00000006000600ffff000008000200", @ANYRES32=r10, @ANYBLOB="060006000000000008002f000000000005002e00030000000c002d000202aaaaaaaaaaaa06000400feff000008002c00feffffff06000400a0aa000008002c00bb0e0000"], 0x68}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async, rerun: 64) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xc4ea760049c17f33, 0x0) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="40003080401d40a3dc140005002000018008000100000000001400038006000197b1000000080002000200000005000200"/64], 0x5c}}, 0x0) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1410, 0x1, 0x70bd29, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r14, 0x84, 0x1a, 0x0, &(0x7f0000001100)=0x8) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r14, 0x84, 0x8, &(0x7f0000000380), &(0x7f0000000400)=0x4) (async) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x41, 0x107, 0x70bd27, 0xfdfffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x580c4) 19.035159203s ago: executing program 3 (id=11803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) (async) pselect6(0x40, &(0x7f0000000000)={0x6, 0x3, 0x5, 0x6, 0x449, 0x1ff, 0x4, 0x4}, &(0x7f0000000040)={0x140, 0x4, 0x100, 0x10001, 0x3, 0x16, 0x7a4e, 0x8000000000000000}, &(0x7f0000000080)={0xddae, 0x9, 0x4, 0xa1, 0xffffffff, 0x200, 0x2, 0xfff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8}) (async) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) (async) close(0x3) 19.034779873s ago: executing program 0 (id=11804): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4072, 0xfe8) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0401000000040040"}, 0x10}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c014}, 0x4080) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) (async) bind$can_raw(r0, &(0x7f00000005c0), 0x10) (async) read(r0, &(0x7f00000027c0)=""/4072, 0xfe8) (async) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0401000000040040"}, 0x10}}, 0x4000040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c014}, 0x4080) (async) 6.95300099s ago: executing program 3 (id=11805): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1ff, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4040890) 0s ago: executing program 4 (id=11806): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0x4, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0xfffffffe, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0x0, 0x2, 0xe6b, 0x9, 0x4, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x9, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0xfffffffe, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x7ff, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0xfffffffd, 0x3, 0x5, 0x0, 0x4, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x13, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000003, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x3, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0x4, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0xfffffffe, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0x0, 0x2, 0xe6b, 0x9, 0x4, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x9, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0xfffffffe, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x7ff, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0xfffffffd, 0x3, 0x5, 0x0, 0x4, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x13, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000003, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x3, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000800)={{0x0, @local, 0x4e20, 0x3, 'wlc\x00', 0xc, 0x2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 0x3ff, 0x40}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000800)={{0x0, @local, 0x4e20, 0x3, 'wlc\x00', 0xc, 0x2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 0x3ff, 0x40}}, 0x44) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x7) (async) listen(r4, 0x7) listen(r2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x8004b706, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x8004b706, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) (async) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d40000006800000226bd7000fbdbdf250200000009000000140006007f00000100000000000000000000000004000b000c000c80080002000e00000014000600e000000100000000000000000000000014000600fc0000000000000000000000000000001c0002000000000005000000ff7f0000060000000100000009000000060007000400000034000200020000000300000500000000000000000100000008000000010000000300000000000000010000000100000004000400140002000000000008000000000000004f000000"], 0xd4}, 0x1, 0x0, 0x0, 0x10004840}, 0x17bf198f87ebd743) (async) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d40000006800000226bd7000fbdbdf250200000009000000140006007f00000100000000000000000000000004000b000c000c80080002000e00000014000600e000000100000000000000000000000014000600fc0000000000000000000000000000001c0002000000000005000000ff7f0000060000000100000009000000060007000400000034000200020000000300000500000000000000000100000008000000010000000300000000000000010000000100000004000400140002000000000008000000000000004f000000"], 0xd4}, 0x1, 0x0, 0x0, 0x10004840}, 0x17bf198f87ebd743) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x3ec0) close(r6) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 [ 1014.645031][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.672680][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.687385][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.709831][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.743177][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.851167][ T5637] Bluetooth: hci4: command tx timeout [ 1014.924450][T10887] hsr_slave_0: entered promiscuous mode [ 1014.933361][T10887] hsr_slave_1: entered promiscuous mode [ 1014.940432][T10887] debugfs: 'hsr0' already exists in 'hsr' [ 1014.946263][T10887] Cannot create hsr debugfs directory [ 1014.965437][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9706'. [ 1015.012116][T11139] batadv0: entered promiscuous mode [ 1015.022282][T11139] macsec1: entered promiscuous mode [ 1015.036344][T11139] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1015.324460][T11148] gretap1: entered promiscuous mode [ 1015.345514][T11148] batman_adv: batadv0: Adding interface: gretap1 [ 1015.368269][T11148] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1015.405316][T11148] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1016.068758][T11184] netlink: 'syz.2.9716': attribute type 39 has an invalid length. [ 1016.098423][T11180] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9717'. [ 1016.190495][T11181] syzkaller0: entered promiscuous mode [ 1016.211660][T11181] syzkaller0: entered allmulticast mode [ 1016.526914][T11197] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 1016.737741][T11212] lo: Caught tx_queue_len zero misconfig [ 1016.836640][T18717] IPVS: starting estimator thread 0... [ 1016.890306][T10887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1016.916645][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.929856][T11219] IPVS: using max 31 ests per chain, 74400 per kthread [ 1016.942867][T10887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1016.961054][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.971076][T10887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1016.988526][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.005708][T10887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1017.017272][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9730'. [ 1017.037277][T10887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.094862][T11226] team0: Port device team_slave_0 removed [ 1017.281728][T11242] sctp: [Deprecated]: syz.1.9733 (pid 11242) Use of int in maxseg socket option. [ 1017.281728][T11242] Use struct sctp_assoc_value instead [ 1017.388494][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.425043][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.463139][T28913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.470361][T28913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.529542][T28928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.536762][T28928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.787106][T11268] netlink: 'syz.2.9741': attribute type 1 has an invalid length. [ 1017.885512][T11272] netlink: 'syz.1.9744': attribute type 21 has an invalid length. [ 1017.909501][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.923116][T11272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1017.966238][T11272] netlink: 'syz.1.9744': attribute type 5 has an invalid length. [ 1017.974511][T11272] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1018.105773][T11281] geneve2: entered promiscuous mode [ 1018.135206][T11286] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1018.155277][T11284] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1018.298528][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9749'. [ 1018.320025][T11294] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1018.385428][T11297] netlink: 'syz.1.9750': attribute type 1 has an invalid length. [ 1018.477956][T11297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.529122][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1018.659677][T11297] bond2: (slave gretap1): making interface the new active one [ 1018.678081][T11297] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1018.730007][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.916121][T11311] tipc: Started in network mode [ 1018.931655][T11311] tipc: Node identity de0e0365c12d, cluster identity 4711 [ 1018.987952][T11311] tipc: Enabled bearer , priority 0 [ 1019.060426][T11315] netlink: 'syz.1.9754': attribute type 1 has an invalid length. [ 1019.109965][T11310] syzkaller0: entered promiscuous mode [ 1019.116298][T11310] syzkaller0: entered allmulticast mode [ 1019.123545][T11310] tipc: Resetting bearer [ 1019.132838][T10887] veth0_vlan: entered promiscuous mode [ 1019.154827][T10887] veth1_vlan: entered promiscuous mode [ 1019.262933][T10887] veth0_macvtap: entered promiscuous mode [ 1019.296031][T10887] veth1_macvtap: entered promiscuous mode [ 1019.354399][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.396671][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.435277][T28915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.461680][T28915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.487348][T28915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.529446][T11308] tipc: Resetting bearer [ 1019.701350][T11341] netlink: 'syz.0.9758': attribute type 1 has an invalid length. [ 1023.361663][T11308] tipc: Disabling bearer [ 1023.374614][T28915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.384475][T18717] tipc: Node number set to 522388325 [ 1023.406987][T11368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9759'. [ 1023.702946][T11384] netlink: 'syz.1.9763': attribute type 1 has an invalid length. [ 1023.740962][T11384] netlink: 'syz.1.9763': attribute type 2 has an invalid length. [ 1023.762960][T28913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.783205][T28913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.858555][T28920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.876048][T28920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.364936][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9773'. [ 1024.432257][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9774'. [ 1024.464382][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9774'. [ 1024.584819][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9777'. [ 1024.604376][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9778'. [ 1024.874299][T11443] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1024.947152][T11443] bond1 (unregistering): Released all slaves [ 1025.100227][T11452] syzkaller0: entered promiscuous mode [ 1025.109808][T11452] syzkaller0: entered allmulticast mode [ 1025.117209][T11459] netlink: 'syz.1.9782': attribute type 11 has an invalid length. [ 1025.143072][T11459] netlink: 'syz.1.9782': attribute type 8 has an invalid length. [ 1025.207990][T11459] openvswitch: netlink: Multiple metadata blocks provided [ 1025.218784][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1025.366289][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9784'. [ 1025.380079][T11466] tipc: Invalid UDP bearer configuration [ 1025.380135][T11466] tipc: Enabling of bearer rejected, failed to enable media [ 1025.533044][T11478] syzkaller0: entered promiscuous mode [ 1025.551301][T11478] syzkaller0: entered allmulticast mode [ 1025.787742][T11490] netlink: 'syz.0.9793': attribute type 13 has an invalid length. [ 1025.824699][T11490] netlink: 'syz.0.9793': attribute type 58 has an invalid length. [ 1025.855175][T11490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9793'. [ 1025.860559][T11494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9795'. [ 1025.935417][T11501] syzkaller0: entered promiscuous mode [ 1025.949276][T11501] syzkaller0: entered allmulticast mode [ 1026.014808][T11502] bond1: option fail_over_mac: invalid value (16) [ 1026.023776][T11502] bond1 (unregistering): Released all slaves [ 1026.470957][T11523] smc: net device team0 applied user defined pnetid SYZ2 [ 1026.655403][T11524] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.705462][T28928] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 1026.883474][T11539] netlink: 'syz.1.9808': attribute type 1 has an invalid length. [ 1026.993459][T11539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.023760][T11549] netlink: 'syz.0.9809': attribute type 21 has an invalid length. [ 1027.044214][T11549] IPv6: NLM_F_CREATE should be specified when creating new route [ 1027.061564][T11549] netlink: 'syz.0.9809': attribute type 1 has an invalid length. [ 1027.322248][T11564] IPVS: length: 24 != 12312 [ 1027.327044][T11561] ip6t_srh: unknown srh invflags 4000 [ 1027.336455][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.344188][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.431712][T11531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1027.628051][T11575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1027.635888][T11575] bridge0: port 4(bond4) entered blocking state [ 1027.643866][T11575] bridge0: port 4(bond4) entered disabled state [ 1027.671393][T11575] bond4: entered allmulticast mode [ 1027.715806][T11581] netlink: 'syz.4.9818': attribute type 1 has an invalid length. [ 1027.725715][T11575] bond4: entered promiscuous mode [ 1027.746246][T11575] bridge0: port 4(bond4) entered blocking state [ 1027.753068][T11575] bridge0: port 4(bond4) entered forwarding state [ 1028.141873][T10734] bridge0: port 4(bond4) entered disabled state [ 1028.363174][T11615] syzkaller0: entered promiscuous mode [ 1028.370847][T11615] syzkaller0: entered allmulticast mode [ 1032.275092][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.377673][T11671] ip6t_rpfilter: unknown options [ 1032.519875][T11678] __nla_validate_parse: 6 callbacks suppressed [ 1032.519895][T11678] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1032.585267][T11684] validate_nla: 2 callbacks suppressed [ 1032.585285][T11684] netlink: 'syz.1.9842': attribute type 13 has an invalid length. [ 1032.605955][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1032.658046][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1032.702505][T11692] netlink: 'syz.0.9846': attribute type 10 has an invalid length. [ 1032.819955][T11694] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1032.832144][T18697] IPVS: starting estimator thread 0... [ 1032.894402][T11692] team0: Port device dummy0 added [ 1032.938594][T11704] netlink: 'syz.2.9850': attribute type 1 has an invalid length. [ 1032.947343][T11696] IPVS: using max 39 ests per chain, 93600 per kthread [ 1032.960560][T11702] syzkaller0: entered promiscuous mode [ 1032.973953][T11704] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9850'. [ 1032.983336][T11702] syzkaller0: entered allmulticast mode [ 1033.002815][T11705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9850'. [ 1033.021802][T11704] netlink: 'syz.2.9850': attribute type 1 has an invalid length. [ 1033.060729][T11707] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1033.071567][T18696] IPVS: starting estimator thread 0... [ 1033.177885][T11718] tipc: Enabling of bearer rejected, failed to enable media [ 1033.179307][T11713] IPVS: using max 30 ests per chain, 72000 per kthread [ 1033.211549][T11718] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9853'. [ 1033.710007][T11745] ipvlan2: entered allmulticast mode [ 1033.722742][T11745] batadv_slave_1: entered allmulticast mode [ 1033.734777][T11750] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1033.749651][T11745] batman_adv: batadv0: Adding interface: ipvlan2 [ 1033.767612][T11745] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.803802][T11745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.832395][T11756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9864'. [ 1033.846610][T11745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.014812][T11745] batman_adv: batadv0: Interface activated: ipvlan2 [ 1034.054960][T11764] set match dimension is over the limit! [ 1034.267693][T11772] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1034.329919][T11774] netlink: 'syz.2.9871': attribute type 1 has an invalid length. [ 1034.447307][T11781] netlink: 'syz.2.9871': attribute type 1 has an invalid length. [ 1034.498483][T11781] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9871'. [ 1034.671721][T11776] bond2: (slave gretap1): making interface the new active one [ 1034.727285][T11776] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1034.799341][T11798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.802739][T11793] macvlan2: entered promiscuous mode [ 1034.856588][T11793] macvlan2: entered allmulticast mode [ 1035.067740][T11804] syzkaller0: entered promiscuous mode [ 1035.095079][T11804] syzkaller0: entered allmulticast mode [ 1035.115212][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'. [ 1035.146111][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'. [ 1035.860280][T11833] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1035.869327][T11833] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1035.887172][T11823] bond3: option all_slaves_active: invalid value (222) [ 1035.971388][T11823] bond3 (unregistering): Released all slaves [ 1036.222575][T11846] veth0_macvtap: left promiscuous mode [ 1036.491153][T11853] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1036.562896][T11853] bond1 (unregistering): Released all slaves [ 1036.667252][T11868] bond1: Removing last arp target with arp_interval on [ 1037.284185][T11913] netlink: 'syz.3.9906': attribute type 7 has an invalid length. [ 1037.424836][T11919] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1038.967772][T11976] SET target dimension over the limit! [ 1039.000560][T11976] netlink: 'syz.2.9922': attribute type 1 has an invalid length. [ 1039.076234][T11974] bond2 (unregistering): Released all slaves [ 1039.152934][T28920] vlan1: left allmulticast mode [ 1039.164383][T11982] __nla_validate_parse: 8 callbacks suppressed [ 1039.164404][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9923'. [ 1039.167378][T28920] geneve0: left allmulticast mode [ 1039.226638][T28920] vlan1: left promiscuous mode [ 1039.232066][T28920] geneve0: left promiscuous mode [ 1039.237460][T28920] bridge0: port 3(vlan1) entered disabled state [ 1039.261059][T28920] bridge_slave_1: left allmulticast mode [ 1039.267090][T28920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.278386][T28920] bridge_slave_0: left promiscuous mode [ 1039.284445][T28920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.308415][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9925'. [ 1039.334396][T28920] pimreg: left allmulticast mode [ 1039.340611][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9925'. [ 1039.354522][T11989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9925'. [ 1039.646555][T11996] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1039.780572][T28920] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1040.061807][T28920] bond0 (unregistering): (slave bridge4): Releasing active interface [ 1040.195860][T28920]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.207306][T28920] bond_slave_0: left allmulticast mode [ 1040.217956][T28920]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.232612][T28920] bond_slave_1: left allmulticast mode [ 1040.241605][T28920]  (unregistering): (slave bond3): Releasing backup interface [ 1040.251984][T28920] bond3 (unregistering): left allmulticast mode [ 1040.258680][T28920]  (unregistering): Released all slaves [ 1040.268544][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1040.274850][T28920] bond1 (unregistering): Released all slaves [ 1040.298468][T28920] bond2 (unregistering): Released all slaves [ 1040.323373][T28920] bond3 (unregistering): Released all slaves [ 1040.353617][T28920] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1040.363609][T28920] veth0_to_bond: left promiscuous mode [ 1040.372550][T28920] veth0_to_bond: left allmulticast mode [ 1040.396805][T28920] bond4 (unregistering): Released all slaves [ 1040.417401][T28920] bond5 (unregistering): Released all slaves [ 1040.437725][T28920] bond0 (unregistering): Released all slaves [ 1040.472384][T28920] bond6 (unregistering): (slave bond7): Releasing active interface [ 1040.486065][T28920] bond6 (unregistering): Released all slaves [ 1040.511541][T28920] bond7 (unregistering): Released all slaves [ 1040.547006][T28920] bond8 (unregistering): Released all slaves [ 1040.576377][T28920] bond9 (unregistering): Released all slaves [ 1040.597394][T11982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1040.758413][T28920] tipc: Left network mode [ 1040.865544][T12013] xt_hashlimit: size too large, truncated to 1048576 [ 1040.894935][T12013] xt_hashlimit: max too large, truncated to 1048576 [ 1040.940811][T12013] xt_hashlimit: invalid rate [ 1040.998674][T12020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.054596][T12021] siw: device registration error -23 [ 1041.309276][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9938'. [ 1041.350299][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9938'. [ 1042.232059][T12077] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1042.421926][T12052] ip6tnl0: Caught tx_queue_len zero misconfig [ 1042.883082][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9950'. [ 1043.156299][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9954'. [ 1043.352504][T12126] netlink: 'syz.0.9954': attribute type 1 has an invalid length. [ 1043.427059][T12134] netlink: 'syz.4.9955': attribute type 2 has an invalid length. [ 1044.061267][T12159] x_tables: duplicate underflow at hook 2 [ 1044.172579][T28920] hsr_slave_0: left promiscuous mode [ 1044.184762][T28920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.243461][T12169] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1044.658462][T12191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9971'. [ 1044.874796][T28920] team0 (unregistering): Port device team_slave_1 removed [ 1045.244791][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9975'. [ 1045.261522][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9975'. [ 1045.265382][T12210] pimreg: entered allmulticast mode [ 1045.310765][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9975'. [ 1045.349298][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9975'. [ 1045.416655][T12218] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1045.925299][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9985'. [ 1046.152227][T12257] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1046.203186][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9991'. [ 1046.216316][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9991'. [ 1046.388318][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9993'. [ 1047.153048][T12308] 8021q: VLANs not supported on vxcan0 [ 1047.421902][T12334] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1047.441034][T12331] ip6tnl3: entered allmulticast mode [ 1047.880654][T12348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.920218][T12348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.946670][T12348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1047.980906][T12348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.111199][T12348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.122229][T12348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.156598][ T5637] block nbd10: Receive control failed (result -32) [ 1048.701877][T12408] netlink: 'syz.2.10021': attribute type 33 has an invalid length. [ 1048.796401][T12408] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1048.830823][T12408] bond4 (unregistering): Released all slaves [ 1048.942245][T12418] ip6t_srh: unknown srh match flags 4000 [ 1049.255778][T12426] syzkaller0: entered promiscuous mode [ 1049.273386][T12430] netlink: 'syz.2.10027': attribute type 11 has an invalid length. [ 1049.283709][T12433] __nla_validate_parse: 4 callbacks suppressed [ 1049.283726][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10028'. [ 1049.303611][T12426] syzkaller0: entered allmulticast mode [ 1049.317472][T12434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10026'. [ 1054.046734][T12505] xt_CT: No such helper "snmp_trap" [ 1054.269163][T12518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10041'. [ 1054.346224][T12526] syzkaller0: entered promiscuous mode [ 1054.382324][T12526] syzkaller0: entered allmulticast mode [ 1054.532322][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1054.556377][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1054.728259][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1054.755977][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1054.842531][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10042'. [ 1054.935238][T12557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10052'. [ 1055.163208][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10055'. [ 1055.183364][T12566] openvswitch: netlink: Flow actions attr not present in new flow. [ 1055.681620][T12597] bond4 (unregistering): Released all slaves [ 1055.688032][T12599] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10064'. [ 1055.714551][T12599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.123856][T12626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10065'. [ 1056.157609][T12627] netlink: 'syz.2.10068': attribute type 1 has an invalid length. [ 1056.315933][T12627] bond4: option mode: invalid value (7) [ 1056.348372][T12627] bond4 (unregistering): Released all slaves [ 1056.382942][T12638] netlink: 'syz.2.10068': attribute type 10 has an invalid length. [ 1056.408387][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1056.413881][T12640] Unknown options in mask 4 [ 1056.520809][T12649] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1056.565424][T12638] dummy0: entered promiscuous mode [ 1056.587472][T12647] bridge2: entered promiscuous mode [ 1056.594768][T12647] bridge2: entered allmulticast mode [ 1056.632445][T12602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1056.887319][T12662] netlink: 'syz.3.10079': attribute type 21 has an invalid length. [ 1056.918186][T12658] netlink: 'syz.2.10081': attribute type 1 has an invalid length. [ 1056.948716][T12658] netlink: 'syz.2.10081': attribute type 1 has an invalid length. [ 1057.005050][T15389] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.028773][T15389] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.064565][T15389] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.143051][T15389] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.488730][T12693] netlink: 'syz.2.10093': attribute type 4 has an invalid length. [ 1057.524163][T12696] syzkaller0: entered promiscuous mode [ 1057.546112][T12703] netlink: 'syz.2.10093': attribute type 4 has an invalid length. [ 1057.554532][T12696] syzkaller0: entered allmulticast mode [ 1057.731727][T12717] xt_hashlimit: size too large, truncated to 1048576 [ 1058.463923][T12739] netlink: 'syz.4.10104': attribute type 19 has an invalid length. [ 1058.810407][T12762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1058.820210][T12762] bond0: (slave bond4): Enslaving as an active interface with an up link [ 1058.836070][T12762] set match dimension is over the limit! [ 1058.911451][T12761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1058.942064][T12761] bond0: (slave bond5): Enslaving as an active interface with an up link [ 1059.072277][T18703] IPVS: starting estimator thread 0... [ 1059.182407][T12780] IPVS: using max 31 ests per chain, 74400 per kthread [ 1059.279430][T12796] tipc: Started in network mode [ 1059.291113][T12796] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 1059.312669][T12796] tipc: Enabled bearer , priority 10 [ 1059.381153][T12799] team0: Caught tx_queue_len zero misconfig [ 1059.758111][T12813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.797476][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.804912][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.350606][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.476665][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.770598][T12804] veth0_macvtap: left allmulticast mode [ 1060.791314][T12804] macvtap0: left allmulticast mode [ 1061.082532][T12855] __nla_validate_parse: 39 callbacks suppressed [ 1061.082551][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1061.190553][T12804] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1061.202803][T12804] ipvlan2: left allmulticast mode [ 1061.207881][T12804] batadv_slave_1: left allmulticast mode [ 1061.252594][T18703] tipc: Node number set to 9677482 [ 1061.321363][T12850] syzkaller0: entered promiscuous mode [ 1061.352187][T12850] syzkaller0: entered allmulticast mode [ 1061.371893][T28928] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.401957][T28928] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.458537][T12867] netlink: 'syz.3.10137': attribute type 10 has an invalid length. [ 1061.474872][T12869] xt_cgroup: path and classid specified [ 1061.488270][T12869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10138'. [ 1061.515961][T28928] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.551930][T28928] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.562515][T12876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1061.583582][T12867] team0: Port device dummy0 added [ 1061.676294][T12887] netlink: 548 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1061.718351][T12882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1061.990356][T12900] syzkaller0: entered promiscuous mode [ 1062.017895][T12900] syzkaller0: entered allmulticast mode [ 1062.027764][T12903] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1062.368333][T12919] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10152'. [ 1062.385209][T12918] netlink: 'syz.0.10151': attribute type 1 has an invalid length. [ 1062.428604][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10153'. [ 1063.090597][T12965] netlink: 'syz.1.10164': attribute type 8 has an invalid length. [ 1063.245415][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1063.350217][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1063.374950][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1063.398381][T12977] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10170'. [ 1063.826985][T12995] bond2: option fail_over_mac: invalid value (16) [ 1063.858179][T12995] bond2 (unregistering): Released all slaves [ 1063.963633][T13011] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10181'. [ 1064.054215][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10181'. [ 1064.166924][T12968] infiniband syz0: set active [ 1064.179233][T18703] ip6gre0 speed is unknown, defaulting to 1000 [ 1064.211036][T12968] infiniband syz0: added ip6gre0 [ 1064.236820][T12968] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1064.255325][T12968] infiniband syz0: Couldn't open port 1 [ 1064.322985][T12968] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1064.370817][T12968] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1064.452550][T12968] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1064.588413][T12968] RDS/IB: syz0: added [ 1064.620721][T12968] smc: adding ib device syz0 with port count 1 [ 1064.652865][T12968] smc: ib device syz0 port 1 has no pnetid [ 1064.679196][T13042] netlink: 'syz.3.10186': attribute type 1 has an invalid length. [ 1064.735825][T12097] ip6gre0 speed is unknown, defaulting to 1000 [ 1064.755386][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1065.251056][T13065] netlink: 'syz.3.10197': attribute type 1 has an invalid length. [ 1065.388691][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1065.770462][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1066.098433][T13096] xt_hashlimit: size too large, truncated to 1048576 [ 1066.274883][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1066.760743][T13107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.803436][T13107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.983902][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1066.993481][T28923] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.025171][T28923] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.065897][T28923] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.104703][T28923] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.247767][T13116] ipvlan2: entered promiscuous mode [ 1067.271138][T13116] ipvlan2: entered allmulticast mode [ 1067.296357][T13116] erspan0: entered allmulticast mode [ 1067.325491][T13116] team0: Device ipvlan2 failed to register rx_handler [ 1067.613851][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1068.221516][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1068.258395][T13137] __nla_validate_parse: 6 callbacks suppressed [ 1068.258417][T13137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1068.298126][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1068.951157][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10231'. [ 1072.543583][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1072.741673][T13162] ipip0: entered allmulticast mode [ 1072.973779][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1073.032873][T13173] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1073.392873][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1073.974425][T13216] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1074.006875][T12968] ip6gre0 speed is unknown, defaulting to 1000 [ 1074.014562][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1074.243320][T13227] netlink: 'syz.1.10255': attribute type 32 has an invalid length. [ 1074.527455][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1074.538237][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1074.843494][T13253] vxcan1 speed is unknown, defaulting to 1000 [ 1074.866895][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10263'. [ 1075.085045][T13269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10268'. [ 1075.267815][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10270'. [ 1075.287752][T13282] netlink: 'syz.4.10271': attribute type 2 has an invalid length. [ 1075.307969][T13267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.365734][T13267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.449065][T13253] rB speed is unknown, defaulting to 1000 [ 1075.489510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.600486][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10273'. [ 1075.753412][T13306] netlink: 'syz.3.10277': attribute type 3 has an invalid length. [ 1075.907321][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1076.017582][T13253] ip6gre0 speed is unknown, defaulting to 1000 [ 1076.096072][T13318] tcf_pedit_act: 7 callbacks suppressed [ 1076.096096][T13318] tc action pedit offset 132 out of bounds [ 1076.109931][T13318] tc action pedit offset 132 out of bounds [ 1076.115769][T13318] tc action pedit offset 132 out of bounds [ 1076.121653][T13318] tc action pedit offset 132 out of bounds [ 1076.127483][T13318] tc action pedit offset 132 out of bounds [ 1076.133364][T13318] tc action pedit offset 132 out of bounds [ 1076.139216][T13318] tc action pedit offset 132 out of bounds [ 1076.145035][T13318] tc action pedit offset 132 out of bounds [ 1076.150916][T13318] tc action pedit offset 132 out of bounds [ 1076.156769][T13318] tc action pedit offset 132 out of bounds [ 1076.162661][T13318] 0: reclassify loop, rule prio 0, protocol 800 [ 1076.169073][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10283'. [ 1076.509045][T13341] IPVS: length: 1152 != 8 [ 1077.406620][T13370] netlink: 'syz.0.10295': attribute type 7 has an invalid length. [ 1077.436484][T13370] netlink: 'syz.0.10295': attribute type 8 has an invalid length. [ 1077.884921][T13385] bridge0: port 3(syz_tun) entered blocking state [ 1077.916877][T13385] bridge0: port 3(syz_tun) entered disabled state [ 1077.930229][T13385] syz_tun: entered allmulticast mode [ 1077.956539][T13385] syz_tun: entered promiscuous mode [ 1077.963702][T13385] bridge0: port 3(syz_tun) entered blocking state [ 1077.970306][T13385] bridge0: port 3(syz_tun) entered listening state [ 1077.989244][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 1077.999421][ C1] bridge0: topology change detected, propagating [ 1078.023284][T13392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1078.036879][T13392] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1078.051080][T13392] gretap1: entered promiscuous mode [ 1078.056429][T13392] gretap1: entered allmulticast mode [ 1078.399610][T13409] block nbd11: server does not support multiple connections per device. [ 1078.416256][T13409] block nbd11: shutting down sockets [ 1078.577675][T13426] netlink: 'syz.4.10313': attribute type 1 has an invalid length. [ 1078.608222][T13426] netlink: 'syz.4.10313': attribute type 2 has an invalid length. [ 1078.777066][T28915] bridge0: port 3(syz_tun) entered disabled state [ 1078.857058][T13437] netlink: 'syz.2.10317': attribute type 10 has an invalid length. [ 1078.882684][T13437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.896576][T13437] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1078.908097][T13445] netlink: 'syz.3.10320': attribute type 8 has an invalid length. [ 1079.056216][T13455] __nla_validate_parse: 5 callbacks suppressed [ 1079.056236][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10325'. [ 1079.482640][T13478] netlink: 'syz.4.10332': attribute type 10 has an invalid length. [ 1079.504276][T13480] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1079.527519][T13484] netlink: 'syz.2.10334': attribute type 21 has an invalid length. [ 1079.561881][T13484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10334'. [ 1079.768376][T13492] netlink: 'syz.2.10338': attribute type 8 has an invalid length. [ 1079.840274][T13494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.876939][T13496] syzkaller0: entered promiscuous mode [ 1079.892584][T13496] syzkaller0: entered allmulticast mode [ 1080.056158][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1080.076697][T13504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10342'. [ 1080.097102][T13509] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.10344'. [ 1080.174723][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10342'. [ 1080.316300][T13526] openvswitch: netlink: IP tunnel TTL not specified. [ 1080.413218][T13535] openvswitch: netlink: IP tunnel TTL not specified. [ 1080.583684][T13547] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 1080.595621][T13547] batman_adv: batadv0: Adding interface: wlan0 [ 1080.607043][T13547] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.641325][T13547] batman_adv: batadv0: Interface activated: wlan0 [ 1080.782095][T13553] tc_dump_action: action bad kind [ 1080.924074][T13560] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1080.952908][T13564] sctp: [Deprecated]: syz.1.10360 (pid 13564) Use of int in max_burst socket option deprecated. [ 1080.952908][T13564] Use struct sctp_assoc_value instead [ 1080.984777][T13563] sctp: [Deprecated]: syz.1.10360 (pid 13563) Use of int in max_burst socket option deprecated. [ 1080.984777][T13563] Use struct sctp_assoc_value instead [ 1081.094890][T13567] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20000 [ 1081.117494][T13569] netlink: 'syz.3.10363': attribute type 12 has an invalid length. [ 1081.138469][T13567] IPVS: set_ctl: invalid protocol: 50828 172.20.20.187:20004 [ 1081.156461][T13567] x_tables: duplicate underflow at hook 2 [ 1081.181597][T13569] bond3: option primary_reselect: invalid value (255) [ 1081.191559][T13569] bond3 (unregistering): Released all slaves [ 1081.435714][T28915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.463043][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10366'. [ 1081.502279][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10366'. [ 1081.547067][T13583] netlink: 'syz.0.10366': attribute type 14 has an invalid length. [ 1081.571208][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10366'. [ 1081.577541][T13594] ip6gre1: entered promiscuous mode [ 1081.606824][T13594] ip6gre1: entered allmulticast mode [ 1081.610722][T13583] netlink: 'syz.0.10366': attribute type 13 has an invalid length. [ 1081.635047][T13598] team0: Port device dummy0 removed [ 1081.641331][T13598] batman_adv: batadv0: Adding interface: dummy0 [ 1081.647698][T13598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.676366][T13598] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1081.692637][T13603] netlink: 'syz.2.10371': attribute type 1 has an invalid length. [ 1081.770486][T13603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1081.864232][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10375'. [ 1081.966952][T13613] vlan0: entered promiscuous mode [ 1082.254736][T13626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1082.285407][T13626] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1082.305292][T13626] gretap1: entered promiscuous mode [ 1082.320736][T13626] gretap1: entered allmulticast mode [ 1082.414470][T13643] syzkaller1: entered promiscuous mode [ 1082.427178][T13643] syzkaller1: entered allmulticast mode [ 1083.056946][T13630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1083.214870][T13686] netlink: 'syz.4.10392': attribute type 13 has an invalid length. [ 1083.520724][T12097] ip6gre0 speed is unknown, defaulting to 1000 [ 1083.704453][T13714] netlink: 'syz.4.10401': attribute type 64 has an invalid length. [ 1083.884513][T13718] netlink: 'syz.2.10404': attribute type 18 has an invalid length. [ 1083.983400][T13716] bond1: option xmit_hash_policy: invalid value (64) [ 1084.005933][T13716] bond1 (unregistering): Released all slaves [ 1084.161061][T13726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.195700][T13732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.226031][T28920] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.255839][T13726] __nla_validate_parse: 15 callbacks suppressed [ 1084.255858][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10405'. [ 1084.276851][T28920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.382556][T13740] batman_adv: batadv0: Removing interface: dummy0 [ 1084.403002][T13726] dummy0: entered promiscuous mode [ 1084.427597][T28920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.452400][T28920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.663940][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10416'. [ 1084.987644][T13786] sock: sock_set_timeout: `syz.4.10418' (pid 13786) tries to set negative timeout [ 1085.363850][T13797] gretap2: entered promiscuous mode [ 1085.410249][T13797] batman_adv: batadv0: Adding interface: gretap2 [ 1085.424782][T13797] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1085.483497][T13797] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1085.590799][T13813] ip6tnl0: Caught tx_queue_len zero misconfig [ 1085.740995][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10431'. [ 1085.901452][T13832] lo: Caught tx_queue_len zero misconfig [ 1085.936233][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10433'. [ 1086.062981][T13843] syzkaller0: entered promiscuous mode [ 1086.068600][T13843] syzkaller0: entered allmulticast mode [ 1086.101550][T13836] veth0: entered promiscuous mode [ 1086.108752][T13843] tipc: Started in network mode [ 1086.114927][T13843] tipc: Node identity d6e4f9b698ca, cluster identity 4711 [ 1086.123466][T13843] tipc: Enabled bearer , priority 0 [ 1086.146618][T13844] tipc: Resetting bearer [ 1086.178711][T13842] tipc: Resetting bearer [ 1086.211665][T13842] tipc: Disabling bearer [ 1086.293851][T13835] veth0: left promiscuous mode [ 1086.383617][T13847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10436'. [ 1086.674685][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10440'. [ 1086.726272][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10440'. [ 1086.743254][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10440'. [ 1086.750538][T13869] validate_nla: 3 callbacks suppressed [ 1086.750555][T13869] netlink: 'syz.0.10442': attribute type 75 has an invalid length. [ 1086.755477][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10440'. [ 1086.790918][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10440'. [ 1086.806171][T13864] openvswitch: netlink: IP tunnel TTL not specified. [ 1086.920686][T13879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.983863][T13884] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1087.247788][T13895] bond5: Unable to set down delay as MII monitoring is disabled [ 1087.263674][T13895] bond5 (unregistering): Released all slaves [ 1087.597144][T13918] tunl0: entered promiscuous mode [ 1087.613381][T13918] netlink: 'syz.2.10458': attribute type 4 has an invalid length. [ 1088.163976][T13928] netlink: 'syz.4.10462': attribute type 2 has an invalid length. [ 1088.178046][T13928] netlink: 'syz.4.10462': attribute type 2 has an invalid length. [ 1088.378518][T13955] vlan3: entered promiscuous mode [ 1088.409122][T13955] bridge0: entered promiscuous mode [ 1089.052176][ T29] audit: type=1804 audit(1785192258.277:20): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10479" name="/newroot/146/memory.events" dev="tmpfs" ino=763 res=1 errno=0 [ 1089.124726][ T29] audit: type=1800 audit(1785192258.277:21): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10479" name="memory.events" dev="tmpfs" ino=763 res=0 errno=0 [ 1089.199797][T14001] netlink: 'syz.2.10482': attribute type 13 has an invalid length. [ 1089.311897][T14008] siw: device registration error -23 [ 1089.332590][T14005] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1089.419859][T14005] bond1 (unregistering): Released all slaves [ 1089.537750][T14024] __nla_validate_parse: 40 callbacks suppressed [ 1089.537769][T14024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10488'. [ 1089.556963][T14025] x_tables: duplicate underflow at hook 2 [ 1089.863147][T14033] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10489'. [ 1090.063985][T14046] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10493'. [ 1090.091536][T14048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10494'. [ 1090.111297][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10493'. [ 1090.123606][T14050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10494'. [ 1090.408574][T14063] syzkaller0: entered promiscuous mode [ 1090.424579][T14063] syzkaller0: entered allmulticast mode [ 1090.551997][T14034] netlink: 'syz.3.10491': attribute type 4 has an invalid length. [ 1090.564804][T14064] batadv_slave_0: entered allmulticast mode [ 1090.574834][T14064] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10496'. [ 1090.648374][T14072] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10500'. [ 1090.661838][T14068] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1090.764331][T14079] openvswitch: netlink: IP tunnel dst address not specified [ 1090.810420][T14079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.096129][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'. [ 1091.115930][T14091] gre1: entered promiscuous mode [ 1091.131142][T14091] gre1: entered allmulticast mode [ 1091.192268][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10510'. [ 1091.578115][T14121] bond4: option min_links: invalid value (18446744073709551614) [ 1091.608691][T14121] bond4: option min_links: allowed values 0 - 2147483647 [ 1091.625276][T14121] bond4 (unregistering): Released all slaves [ 1091.810409][T14133] syzkaller1: entered promiscuous mode [ 1091.818391][T14133] syzkaller1: entered allmulticast mode [ 1091.864224][T14140] netlink: 'syz.1.10518': attribute type 1 has an invalid length. [ 1091.889731][T14142] openvswitch: netlink: Message has 24 unknown bytes. [ 1092.023592][T14140] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1092.116297][T14156] netlink: 'syz.4.10521': attribute type 1 has an invalid length. [ 1092.240963][T14149] smc: net device nr0 applied user defined pnetid SYZ2 [ 1092.252164][T14154] syzkaller0: entered promiscuous mode [ 1092.259717][T14154] syzkaller0: entered allmulticast mode [ 1092.297234][T14164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.346126][T14208] netlink: 'syz.0.10535': attribute type 12 has an invalid length. [ 1093.779507][T14229] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1093.779507][T14228] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1094.080727][T14237] syzkaller0: entered promiscuous mode [ 1094.092828][T14237] syzkaller0: entered allmulticast mode [ 1095.333835][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1096.967250][T14246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.937230][T14277] syzkaller0: entered promiscuous mode [ 1099.960152][T14277] syzkaller0: entered allmulticast mode [ 1099.978324][T14283] netlink: zone id is out of range [ 1099.995137][T14283] netlink: zone id is out of range [ 1100.192164][T14301] __nla_validate_parse: 11 callbacks suppressed [ 1100.192183][T14301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10556'. [ 1100.614264][T14318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10562'. [ 1100.794524][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1100.813597][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10564'. [ 1100.852971][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10564'. [ 1100.913071][T14335] veth1_to_bond: entered allmulticast mode [ 1101.711901][T14392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.724822][T14392] netlink: 'syz.1.10579': attribute type 4 has an invalid length. [ 1101.976906][T14408] syzkaller0: entered promiscuous mode [ 1101.997217][T14408] syzkaller0: entered allmulticast mode [ 1102.421157][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10593'. [ 1102.429485][T14440] netlink: 'syz.1.10592': attribute type 1 has an invalid length. [ 1102.445277][T14429] netlink: 'syz.0.10590': attribute type 1 has an invalid length. [ 1102.453589][T14429] netlink: 'syz.0.10590': attribute type 2 has an invalid length. [ 1102.476665][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10593'. [ 1102.493617][T14429] netlink: 'syz.0.10590': attribute type 1 has an invalid length. [ 1102.514217][T14432] netlink: 'syz.0.10590': attribute type 1 has an invalid length. [ 1102.535377][T14432] netlink: 'syz.0.10590': attribute type 2 has an invalid length. [ 1102.588129][T14429] netlink: 'syz.0.10590': attribute type 2 has an invalid length. [ 1102.594454][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10595'. [ 1102.695999][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10596'. [ 1102.754027][T14457] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1102.905645][T14464] bond8: Unable to set down delay as MII monitoring is disabled [ 1102.932901][T14464] bond8 (unregistering): Released all slaves [ 1103.046700][T14482] dummy0: left promiscuous mode [ 1103.094227][T14480] syzkaller0: entered promiscuous mode [ 1103.104621][T14480] syzkaller0: entered allmulticast mode [ 1103.197530][T14486] tipc: Enabled bearer , priority 0 [ 1103.278998][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10604'. [ 1103.468179][T14476] tipc: Resetting bearer [ 1103.620183][T14476] tipc: Disabling bearer [ 1103.680603][T14509] syzkaller0: entered promiscuous mode [ 1103.691480][T14509] syzkaller0: entered allmulticast mode [ 1103.717441][T14509] TC_ACT_REPEAT abuse ? [ 1104.882816][T14573] nbd: couldn't find a device at index 2 [ 1105.067406][T14573] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1105.112435][T14578] bond8: (slave batadv1): Opening slave failed [ 1105.467127][T14569] __nla_validate_parse: 2 callbacks suppressed [ 1105.467145][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10624'. [ 1105.498372][T14569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10624'. [ 1105.532684][T14600] netlink: 'syz.0.10631': attribute type 4 has an invalid length. [ 1105.656902][T14609] netlink: 'syz.0.10631': attribute type 21 has an invalid length. [ 1105.696226][T14609] IPv6: NLM_F_CREATE should be specified when creating new route [ 1105.727657][T14609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.735004][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 1105.742306][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 1105.749583][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 1105.956376][T14619] geneve3: entered promiscuous mode [ 1105.978475][T10734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 37201 - 0 [ 1106.012022][T10734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 37201 - 0 [ 1106.054828][T10734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 37201 - 0 [ 1106.094796][T14619] bridge0: Caught tx_queue_len zero misconfig [ 1106.123155][T10734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 37201 - 0 [ 1106.166067][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10638'. [ 1106.379897][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10640'. [ 1106.633284][T14653] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10644'. [ 1106.652686][T14613] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10634'. [ 1106.826719][T14659] bond7: entered promiscuous mode [ 1106.832180][T14659] bond7: entered allmulticast mode [ 1106.837834][T14659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1107.153654][T14676] team0: Caught tx_queue_len zero misconfig [ 1107.267961][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10653'. [ 1107.282091][T14678] openvswitch: netlink: Message has 8 unknown bytes. [ 1107.302964][T14678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.381279][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10655'. [ 1108.176015][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10663'. [ 1108.762433][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10672'. [ 1109.315032][T14789] netlink: 'syz.0.10676': attribute type 1 has an invalid length. [ 1109.757131][T14800] syzkaller0: entered promiscuous mode [ 1109.770501][T14800] syzkaller0: entered allmulticast mode [ 1110.014154][T14817] xt_HMARK: proto mask must be zero with L3 mode [ 1110.521427][T14837] __nla_validate_parse: 4 callbacks suppressed [ 1110.521462][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10687'. [ 1111.035897][T14863] netlink: 'syz.4.10695': attribute type 1 has an invalid length. [ 1111.083052][T14863] netlink: 'syz.4.10695': attribute type 2 has an invalid length. [ 1111.097184][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10695'. [ 1111.195771][T14868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1111.222580][T14871] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1111.495649][T14882] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1111.543231][T14876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.564590][T14879] syzkaller0: entered promiscuous mode [ 1111.605878][T14879] syzkaller0: entered allmulticast mode [ 1111.678494][T14882] batman_adv: batadv0: Interface deactivated: wlan0 [ 1111.750686][T14891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10705'. [ 1111.848724][T14895] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10706'. [ 1111.888144][T14895] bridge0: port 5(syz_tun) entered blocking state [ 1111.959920][T14895] bridge0: port 5(syz_tun) entered disabled state [ 1111.984979][T14895] syz_tun: entered allmulticast mode [ 1112.008024][T14895] syz_tun: entered promiscuous mode [ 1112.223834][T14912] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1112.392164][T14924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.905635][T14910] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1113.374622][T14948] syzkaller0: entered promiscuous mode [ 1113.382329][T14948] syzkaller0: entered allmulticast mode [ 1113.823778][T14990] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10728'. [ 1114.579035][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10729'. [ 1114.605029][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10729'. [ 1114.645931][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10730'. [ 1115.077674][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10732'. [ 1119.722298][T15026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10734'. [ 1120.085426][T15042] Bluetooth: MGMT ver 1.23 [ 1120.088206][T15046] tipc: Trying to set illegal importance in message [ 1120.101618][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10739'. [ 1120.102522][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10742'. [ 1120.125792][T15042] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1120.325519][T15048] xt_nat: multiple ranges no longer supported [ 1120.634205][T15057] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1120.812182][T15057] bond4 (unregistering): Released all slaves [ 1121.367331][T15073] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1121.484467][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.521150][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.545369][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.563590][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.619615][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.651759][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.679929][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.697990][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.715952][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.767548][T15108] openvswitch: netlink: Multiple metadata blocks provided [ 1121.828206][T15119] netlink: 'syz.3.10756': attribute type 1 has an invalid length. [ 1121.908205][T15119] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1122.163916][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1122.260565][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1123.035158][T15174] lo: Caught tx_queue_len zero misconfig [ 1123.081287][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10769'. [ 1123.204498][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10771'. [ 1123.325983][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10771'. [ 1123.634847][T15193] syzkaller0: entered promiscuous mode [ 1123.657787][T15193] syzkaller0: entered allmulticast mode [ 1123.780248][T15201] syzkaller0: entered promiscuous mode [ 1123.786126][T15201] syzkaller0: entered allmulticast mode [ 1123.824879][T15194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1124.302514][T15221] ip6tnl0: Caught tx_queue_len zero misconfig [ 1124.835129][T15242] netlink: 'syz.2.10784': attribute type 39 has an invalid length. [ 1124.951911][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1125.095647][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10785'. [ 1125.236997][T15258] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10786'. [ 1125.624386][T15269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10790'. [ 1125.685841][T15269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10790'. [ 1125.988241][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10796'. [ 1126.153716][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10798'. [ 1126.264681][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10798'. [ 1126.831505][T15320] netlink: 'syz.2.10801': attribute type 4 has an invalid length. [ 1126.872548][T15319] netlink: 'syz.4.10802': attribute type 2 has an invalid length. [ 1127.193152][T15323] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1127.213100][T15323] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1127.412568][T15332] syzkaller0: entered promiscuous mode [ 1127.429378][T15332] syzkaller0: entered allmulticast mode [ 1127.635432][T15339] : renamed from vlan1 [ 1127.944160][T10734] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.002143][T10734] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.025792][T15367] set match dimension is over the limit! [ 1128.044418][T10734] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.080704][T10734] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.218139][T15376] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1128.255264][T15376] bond4 (unregistering): Released all slaves [ 1128.463170][T15387] net_ratelimit: 24 callbacks suppressed [ 1128.463199][T15387] openvswitch: netlink: IP tunnel dst address not specified [ 1128.716119][T15403] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1129.046662][T15414] netlink: 'syz.0.10829': attribute type 1 has an invalid length. [ 1129.065033][T15416] netlink: 'syz.1.10830': attribute type 28 has an invalid length. [ 1129.096726][T15416] netlink: 'syz.1.10830': attribute type 3 has an invalid length. [ 1129.252718][T15421] vxcan1: Caught tx_queue_len zero misconfig [ 1130.403776][T15449] __nla_validate_parse: 9 callbacks suppressed [ 1130.403795][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10844'. [ 1130.756023][T15457] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1130.805408][T15452] syzkaller0: entered promiscuous mode [ 1130.842658][T15452] syzkaller0: entered allmulticast mode [ 1131.747744][T15395] syz.3.10825 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1131.871915][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.3.10825 Not tainted syzkaller #0 PREEMPT(full) [ 1131.871943][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1131.871955][T15395] Call Trace: [ 1131.871964][T15395] [ 1131.871972][T15395] dump_stack_lvl+0xe8/0x150 [ 1131.872011][T15395] dump_header+0xd3/0x4b0 [ 1131.872069][T15395] oom_kill_process+0x3ab/0x970 [ 1131.872109][T15395] out_of_memory+0x1064/0x1480 [ 1131.872129][T15395] ? try_charge_memcg+0xbca/0x1590 [ 1131.872177][T15395] ? __pfx_out_of_memory+0x10/0x10 [ 1131.872197][T15395] ? do_raw_spin_unlock+0xf5/0x210 [ 1131.872252][T15395] try_charge_memcg+0xc74/0x1590 [ 1131.872296][T15395] ? __pfx_try_charge_memcg+0x10/0x10 [ 1131.872323][T15395] ? percpu_ref_tryget+0x15/0x180 [ 1131.872373][T15395] ? charge_memcg+0x20/0x2b0 [ 1131.872402][T15395] charge_memcg+0x19c/0x2b0 [ 1131.872429][T15395] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 1131.872456][T15395] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 1131.872487][T15395] swap_cache_alloc_folio+0x4de/0x990 [ 1131.872526][T15395] swap_cache_read_folio+0x44/0x120 [ 1131.872553][T15395] swap_cluster_readahead+0x3a0/0x640 [ 1131.872583][T15395] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1131.872620][T15395] ? get_vma_policy+0x27b/0x3c0 [ 1131.872654][T15395] swapin_readahead+0x19a/0xc10 [ 1131.872681][T15395] ? swap_table_get+0x1e/0x260 [ 1131.872703][T15395] ? swap_table_get+0x1e/0x260 [ 1131.872726][T15395] ? __pfx_swapin_readahead+0x10/0x10 [ 1131.872752][T15395] ? swap_table_get+0x1e/0x260 [ 1131.872772][T15395] ? swap_table_get+0x1e/0x260 [ 1131.872791][T15395] ? swap_table_get+0x1e/0x260 [ 1131.872812][T15395] ? swap_table_get+0x216/0x260 [ 1131.872835][T15395] ? swap_cache_get_folio+0x2e7/0x2f0 [ 1131.872864][T15395] do_swap_page+0x455/0x5060 [ 1131.872906][T15395] ? __pte_offset_map+0x29/0x240 [ 1131.872933][T15395] ? trace_irq_disable+0x3b/0x140 [ 1131.872963][T15395] ? __lock_acquire+0x683/0x2cf0 [ 1131.872990][T15395] ? do_swap_page+0x124/0x5060 [ 1131.873011][T15395] ? __pfx_do_swap_page+0x10/0x10 [ 1131.873030][T15395] ? __pte_offset_map+0x1ae/0x240 [ 1131.873072][T15395] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1131.873098][T15395] handle_mm_fault+0x124c/0x3080 [ 1131.873135][T15395] ? handle_mm_fault+0xec/0x3080 [ 1131.873167][T15395] ? __pfx_handle_mm_fault+0x10/0x10 [ 1131.873187][T15395] ? lock_vma_under_rcu+0x45a/0x500 [ 1131.873227][T15395] ? task_work_run+0x21f/0x270 [ 1131.873275][T15395] do_user_addr_fault+0xa4d/0x1340 [ 1131.873326][T15395] ? trace_page_fault_user+0x84/0x1e0 [ 1131.873359][T15395] exc_page_fault+0x6a/0xc0 [ 1131.873433][T15395] asm_exc_page_fault+0x26/0x30 [ 1131.873454][T15395] RIP: 0033:0x7fd38eb9dea1 [ 1131.873473][T15395] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1131.873489][T15395] RSP: 002b:00007ffc1da45c68 EFLAGS: 00010217 [ 1131.873507][T15395] RAX: 0000000000000000 RBX: 00007fd38ee27da0 RCX: 00007fd38eb9de99 [ 1131.873521][T15395] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1131.873533][T15395] RBP: 00007fd38ee27da0 R08: 0000000000000006 R09: 0000000000000000 [ 1131.873545][T15395] R10: 00007fd38ee27cb0 R11: 0000000000000246 R12: 0000000000113be1 [ 1131.873558][T15395] R13: 00007fd38ee2618c R14: 000000000011390e R15: 00007ffc1da45d70 [ 1131.873591][T15395] [ 1131.919016][T15395] memory: usage 307200kB, limit 307200kB, failcnt 664 [ 1132.272377][T15395] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 1132.281268][T15395] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1132.293706][T15395] Memory cgroup stats for /syz3: [ 1132.294227][T15395] cache 0 [ 1132.303373][T15395] rss 0 [ 1132.306655][T15395] rss_huge 0 [ 1132.311329][T15395] shmem 0 [ 1132.314800][T15395] mapped_file 0 [ 1132.318676][T15395] dirty 0 [ 1132.323353][T15395] writeback 0 [ 1132.327093][T15395] workingset_refault_anon 0 [ 1132.332307][T15395] workingset_refault_file 0 [ 1132.337386][T15395] swap 131072 [ 1132.341186][T15395] swapcached 131072 [ 1132.345483][T15395] pgpgin 229582 [ 1132.351087][T15395] pgpgout 229582 [ 1132.355147][T15395] pgfault 420561 [ 1132.359273][T15395] pgmajfault 4 [ 1132.363043][T15395] inactive_anon 0 [ 1132.367101][T15395] active_anon 0 [ 1132.371007][T15395] inactive_file 0 [ 1132.375073][T15395] active_file 0 [ 1132.389102][T15395] unevictable 0 [ 1132.393095][T15395] hierarchical_memory_limit 314572800 [ 1132.402336][T15395] hierarchical_memsw_limit 9223372036854771712 [ 1132.411076][T15395] total_cache 0 [ 1132.414953][T15395] total_rss 0 [ 1132.418682][T15395] total_rss_huge 0 [ 1132.492367][T15395] total_shmem 0 [ 1132.495867][T15395] total_mapped_file 0 [ 1132.509542][T15395] total_dirty 0 [ 1132.525923][T15395] total_writeback 0 [ 1132.542586][T15395] total_workingset_refault_anon 0 [ 1132.569860][T15395] total_workingset_refault_file 0 [ 1132.588401][T15395] total_swap 131072 [ 1132.600531][T15395] total_swapcached 131072 [ 1132.618800][T15395] total_pgpgin 229582 [ 1132.629288][T15395] total_pgpgout 229582 [ 1132.640730][T15395] total_pgfault 420561 [ 1132.653006][T15395] total_pgmajfault 4 [ 1132.668332][T15395] total_inactive_anon 0 [ 1132.685303][T15395] total_active_anon 0 [ 1132.703226][T15395] total_inactive_file 0 [ 1132.717864][T15395] total_active_file 0 [ 1132.732238][T15395] total_unevictable 0 [ 1132.745925][T15395] anon_cost 0 [ 1132.755779][T15395] file_cost 0 [ 1132.777934][T15395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10825,pid=15395,uid=0 [ 1132.850120][T15395] Memory cgroup out of memory: Killed process 15395 (syz.3.10825) total-vm:98596kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1133.254681][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1136.323081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.827709][T15514] siw: device registration error -23 [ 1138.933710][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10855'. [ 1139.468315][T15537] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1139.551827][T15542] openvswitch: netlink: Flow key attr not present in new flow. [ 1139.675869][T15551] mac80211_hwsim hwsim89 : renamed from wlan1 (while UP) [ 1139.702859][T15553] netlink: 'syz.3.10864': attribute type 12 has an invalid length. [ 1139.746535][T15553] netlink: 'syz.3.10864': attribute type 11 has an invalid length. [ 1139.791754][T15553] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.10864'. [ 1139.869312][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10864'. [ 1140.187423][T15568] syzkaller1: entered promiscuous mode [ 1140.205521][T15568] syzkaller1: entered allmulticast mode [ 1140.246072][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10869'. [ 1140.447494][T15581] netlink: 'syz.1.10871': attribute type 2 has an invalid length. [ 1140.456096][T15581] netlink: 'syz.1.10871': attribute type 1 has an invalid length. [ 1140.510911][T15581] netlink: 'syz.1.10871': attribute type 1 has an invalid length. [ 1141.093650][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10877'. [ 1141.167215][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10877'. [ 1141.402110][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10879'. [ 1141.427141][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1141.576552][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10880'. [ 1141.706972][T15629] netlink: 'syz.2.10880': attribute type 1 has an invalid length. [ 1141.981408][T15636] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1141.988495][T15625] bond10: entered promiscuous mode [ 1142.015934][T15625] bond10: entered allmulticast mode [ 1142.131570][T15647] netlink: 'syz.3.10886': attribute type 1 has an invalid length. [ 1142.167117][T15629] bond11: entered promiscuous mode [ 1142.177289][T15629] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1142.391228][T15617] bond12: entered promiscuous mode [ 1142.410000][T15617] bond12: entered allmulticast mode [ 1142.492391][T15647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1142.547991][T15653] bond4: (slave geneve2): making interface the new active one [ 1142.560660][T15653] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1142.861369][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10893'. [ 1142.984855][T15681] veth1_to_hsr: mtu greater than device maximum [ 1143.006841][T15680] netlink: 'syz.4.10894': attribute type 10 has an invalid length. [ 1143.026404][T15687] sock: sock_timestamping_bind_phc: sock not bind to device [ 1143.060258][T15691] sock: sock_timestamping_bind_phc: sock not bind to device [ 1143.087825][T15690] tipc: Failed to remove unknown binding: 66,0,0/0:2860773275/2860773276 [ 1143.140570][T15690] tipc: Failed to remove unknown binding: 66,0,0/0:2860773275/2860773276 [ 1143.163343][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.266173][T15680] bond0: (slave team0): Enslaving as an active interface with an up link [ 1143.432255][T15699] bridge0: port 4(vlan4) entered blocking state [ 1143.480291][T15699] bridge0: port 4(vlan4) entered disabled state [ 1143.491278][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10902'. [ 1143.514218][T15699] vlan4: entered allmulticast mode [ 1143.533999][T15699] geneve0: entered allmulticast mode [ 1143.572826][T15699] vlan4: entered promiscuous mode [ 1143.590562][T15699] geneve0: entered promiscuous mode [ 1143.627813][T15702] geneve3: entered promiscuous mode [ 1143.907176][T15727] netlink: 'syz.1.10905': attribute type 10 has an invalid length. [ 1144.014452][T15734] __nla_validate_parse: 3 callbacks suppressed [ 1144.014469][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10908'. [ 1144.145722][T15741] netlink: 'syz.4.10911': attribute type 3 has an invalid length. [ 1144.178266][T15741] netlink: 'syz.4.10911': attribute type 1 has an invalid length. [ 1144.452103][T15753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10915'. [ 1144.492781][T15753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10915'. [ 1144.518000][T15755] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1144.544635][T15755] syzkaller1: Refused to change device type [ 1144.563598][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10916'. [ 1144.683836][T15761] tipc: Enabled bearer , priority 0 [ 1144.717432][T15763] syzkaller0: entered promiscuous mode [ 1144.742631][T15763] syzkaller0: entered allmulticast mode [ 1144.902041][T15763] tipc: Resetting bearer [ 1144.937205][T15761] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1145.057977][T15787] syzkaller0: entered promiscuous mode [ 1145.072248][T15787] syzkaller0: entered allmulticast mode [ 1145.088465][T15759] tipc: Resetting bearer [ 1145.188787][T15759] tipc: Disabling bearer [ 1145.554838][T15800] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1145.816286][T15812] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1145.855435][T15812] openvswitch: netlink: Message has 4 unknown bytes. [ 1145.872811][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.888609][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10932'. [ 1145.911943][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10932'. [ 1145.945272][T15816] lo: Caught tx_queue_len zero misconfig [ 1146.001827][T15819] netlink: 3080 bytes leftover after parsing attributes in process `syz.4.10933'. [ 1146.032565][T15816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.043444][T15819] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.10933'. [ 1146.435555][T15832] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1146.620536][T15847] netlink: 'syz.2.10942': attribute type 24 has an invalid length. [ 1146.917487][T15855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10944'. [ 1147.368092][T15875] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10951'. [ 1147.511692][T15882] bond0: (slave bond_slave_1): Releasing backup interface [ 1147.576315][T15885] syzkaller0: entered promiscuous mode [ 1147.596855][T15885] syzkaller0: entered allmulticast mode [ 1148.063621][T15909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.144401][T15914] netlink: 'syz.2.10964': attribute type 1 has an invalid length. [ 1148.259644][T15918] pim6reg527: entered allmulticast mode [ 1148.651634][T15931] vxcan1 speed is unknown, defaulting to 1000 [ 1148.881530][T15948] netlink: 'syz.1.10975': attribute type 1 has an invalid length. [ 1149.103610][T15953] __nla_validate_parse: 10 callbacks suppressed [ 1149.103631][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1149.247307][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1149.284737][T15931] rB speed is unknown, defaulting to 1000 [ 1149.358407][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1150.034106][T15978] netlink: 'syz.1.10985': attribute type 1 has an invalid length. [ 1150.292307][T15992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10986'. [ 1150.324793][T15992] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1150.394397][T15979] veth3: entered allmulticast mode [ 1150.427114][T15979] bond8: (slave veth3): Enslaving as an active interface with a down link [ 1150.439104][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1150.454641][T15931] ip6gre0 speed is unknown, defaulting to 1000 [ 1150.544908][T15998] 0: reclassify loop, rule prio 0, protocol 03 [ 1150.861182][T16012] netlink: 'syz.4.10992': attribute type 1 has an invalid length. [ 1150.907497][T16012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.943012][T16017] netlink: 'syz.3.10993': attribute type 1 has an invalid length. [ 1150.971829][T16012] netlink: 'syz.4.10992': attribute type 1 has an invalid length. [ 1150.985493][T16012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.087097][T16018] bond5: (slave veth0_to_bond): making interface the new active one [ 1151.141783][T16018] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1151.973160][T16052] netlink: 'syz.4.11001': attribute type 12 has an invalid length. [ 1152.009843][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11003'. [ 1152.267029][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11005'. [ 1152.286636][T16062] netlink: 'syz.3.11005': attribute type 33 has an invalid length. [ 1152.305135][T16062] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11005'. [ 1152.775021][T16067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11007'. [ 1152.949178][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11008'. [ 1152.987751][T16071] openvswitch: netlink: EtherType 0 is less than min 600 [ 1154.076805][T16106] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 1154.184098][T16103] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1154.603554][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11021'. [ 1154.648062][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11021'. [ 1155.361766][T16156] macvlan2: entered promiscuous mode [ 1155.378516][T16156] macvlan2: entered allmulticast mode [ 1155.453616][T16159] tipc: Started in network mode [ 1155.463836][T16159] tipc: Node identity 1000001, cluster identity 4711 [ 1155.479923][T16159] tipc: Node number set to 16777217 [ 1155.955447][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11038'. [ 1155.966610][T16194] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11036'. [ 1155.966638][T16194] openvswitch: netlink: Message has 4 unknown bytes. [ 1161.436802][T16167] tipc: Enabled bearer , priority 1 [ 1161.477962][T16180] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1161.541507][T16180] nicvf0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1161.557243][T16180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1161.570906][T16180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1161.628045][T16148] tipc: Resetting bearer [ 1161.718108][T16148] tipc: Disabling bearer [ 1161.754316][T16193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.825467][T16193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.871532][T16199] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1162.254338][T10289] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1162.298292][T16229] syzkaller0: entered promiscuous mode [ 1162.338718][T16229] syzkaller0: entered allmulticast mode [ 1162.481845][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11050'. [ 1162.678765][T16250] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1165.124760][T16223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1165.406947][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11057'. [ 1165.425396][T16271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11057'. [ 1165.503672][T16270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11057'. [ 1165.642183][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1165.691943][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1165.724094][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1165.802187][T10289] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.811694][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1165.835126][T10289] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.863072][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1165.896587][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1166.522512][T16316] syzkaller0: entered promiscuous mode [ 1166.552404][T16316] syzkaller0: entered allmulticast mode [ 1167.093680][T16343] x_tables: duplicate underflow at hook 1 [ 1167.162545][T16339] rdma_rxe: rxe_newlink: failed to add veth0_macvtap [ 1167.164027][T16341] netlink: 'syz.4.11077': attribute type 11 has an invalid length. [ 1167.213594][T16340] rdma_rxe: rxe_newlink: failed to add veth0_macvtap [ 1167.354038][T16353] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1167.568417][T16368] ip6t_rpfilter: unknown options [ 1167.705724][T16371] __nla_validate_parse: 2 callbacks suppressed [ 1167.705758][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11087'. [ 1167.789930][T16371] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11087'. [ 1167.804182][T16378] tc_dump_action: action bad kind [ 1167.823860][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11087'. [ 1167.958186][T16386] vlan1: entered allmulticast mode [ 1167.980849][T16386] bond0: entered allmulticast mode [ 1167.993139][T16386] bond_slave_0: entered allmulticast mode [ 1168.001253][T16386] bond_slave_1: entered allmulticast mode [ 1168.007356][T16386] bond4: entered allmulticast mode [ 1168.013249][T16386] bond5: entered allmulticast mode [ 1168.023376][T16386] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1168.373708][T16400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1169.446544][T16447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11109'. [ 1169.457838][T16447] 8021q: VLANs not supported on gre0 [ 1169.628280][T16458] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11113'. [ 1169.817854][T16465] Cannot find add_set index 65532 as target [ 1170.067027][T16481] sctp: [Deprecated]: syz.4.11119 (pid 16481) Use of int in maxseg socket option. [ 1170.067027][T16481] Use struct sctp_assoc_value instead [ 1170.473366][T16500] pimreg3: entered allmulticast mode [ 1170.611318][T16508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1170.747493][T16511] netlink: 'syz.0.11130': attribute type 2 has an invalid length. [ 1170.798754][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1170.822832][T16511] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 1171.187190][T16530] xt_hashlimit: size too large, truncated to 1048576 [ 1171.251949][ T5638] block nbd11: Receive control failed (result -32) [ 1171.253285][T16526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.386733][T16544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11139'. [ 1171.440467][T16526] bridge_slave_0 (unregistering): left allmulticast mode [ 1171.459138][T16526] bridge_slave_0 (unregistering): left promiscuous mode [ 1171.499865][T16526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.866753][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11141'. [ 1172.398640][T16571] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1172.541772][T16570] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1172.832161][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11151'. [ 1172.881370][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11151'. [ 1173.451968][T16618] syzkaller0: entered promiscuous mode [ 1173.472587][T16618] syzkaller0: entered allmulticast mode [ 1174.087000][T16640] veth5: entered promiscuous mode [ 1174.092769][T16640] veth5: entered allmulticast mode [ 1174.521861][T16649] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1174.534450][T16645] veth7: entered allmulticast mode [ 1174.551296][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11170'. [ 1174.593469][T16651] IPVS: Unknown mcast interface: vcan0 [ 1174.785026][T16659] bridge0: Caught tx_queue_len zero misconfig [ 1174.881395][T16661] x_tables: duplicate entry at hook 2 [ 1174.905883][T16661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.969555][T16663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1175.237338][T16672] veth3: entered allmulticast mode [ 1175.303269][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11180'. [ 1175.362684][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11182'. [ 1176.215148][T16723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1176.284355][T16726] netlink: 'syz.4.11194': attribute type 21 has an invalid length. [ 1176.321466][T16726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11194'. [ 1176.336591][T16732] netlink: 'syz.0.11196': attribute type 11 has an invalid length. [ 1176.436205][T16737] openvswitch: netlink: IPv4 tun info is not correct [ 1176.485641][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11200'. [ 1176.528773][T16744] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1176.894998][T16757] x_tables: unsorted underflow at hook 3 [ 1176.963866][T16757] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11203'. [ 1177.004775][T16757] syzkaller1: entered promiscuous mode [ 1177.027783][T16757] syzkaller1: entered allmulticast mode [ 1177.329644][T16768] syzkaller0: entered promiscuous mode [ 1177.365272][T16768] syzkaller0: entered allmulticast mode [ 1177.405694][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11207'. [ 1177.857435][T16796] __nla_validate_parse: 2 callbacks suppressed [ 1177.857480][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11212'. [ 1177.863473][T16797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.038697][T16806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11216'. [ 1178.128118][T16806] macvlan0: entered promiscuous mode [ 1178.150597][T16806] veth1: entered promiscuous mode [ 1178.830589][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11225'. [ 1178.841448][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11226'. [ 1178.897857][T16841] netlink: 'syz.0.11226': attribute type 11 has an invalid length. [ 1178.924343][T16840] netlink: 'syz.0.11226': attribute type 11 has an invalid length. [ 1179.327952][T16857] Cannot find del_set index 4 as target [ 1179.438511][T16859] sctp: [Deprecated]: syz.0.11230 (pid 16859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1179.438511][T16859] Use struct sctp_sack_info instead [ 1179.903158][T16876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11235'. [ 1180.059331][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11237'. [ 1180.333645][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11240'. [ 1180.477335][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11242'. [ 1180.509087][T16891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11241'. [ 1180.659250][T16902] netlink: 'syz.1.11243': attribute type 4 has an invalid length. [ 1180.701144][T16902] netlink: 'syz.1.11243': attribute type 4 has an invalid length. [ 1180.844008][T16911] netlink: 'syz.3.11238': attribute type 2 has an invalid length. [ 1180.872919][T16909] netlink: 'syz.0.11245': attribute type 4 has an invalid length. [ 1180.932624][T16909] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11245'. [ 1180.957727][T16882] netlink: 'syz.3.11238': attribute type 2 has an invalid length. [ 1181.681082][T16935] sctp: [Deprecated]: syz.1.11251 (pid 16935) Use of int in maxseg socket option. [ 1181.681082][T16935] Use struct sctp_assoc_value instead [ 1181.988800][T16949] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1182.027832][T16949] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1182.444751][T16962] netlink: 'syz.3.11259': attribute type 2 has an invalid length. [ 1182.478239][T16962] netlink: 'syz.3.11259': attribute type 2 has an invalid length. [ 1183.122711][T16988] netlink: 'syz.3.11267': attribute type 1 has an invalid length. [ 1183.148789][T16987] netlink: 'syz.3.11267': attribute type 1 has an invalid length. [ 1183.214042][T16986] ip6gre1: entered allmulticast mode [ 1183.285883][T16991] bond13 (unregistering): Released all slaves [ 1183.447641][T16987] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1183.452811][T16988] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1183.610895][T17005] lo: entered promiscuous mode [ 1183.640860][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.746708][T17011] xt_nat: multiple ranges no longer supported [ 1183.808723][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.825163][T17011] __nla_validate_parse: 7 callbacks suppressed [ 1183.825182][T17011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11275'. [ 1183.886075][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.957188][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.070007][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.217642][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.681894][T17041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11281'. [ 1184.746088][T17047] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11281'. [ 1184.778562][T17046] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11282'. [ 1185.017152][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11284'. [ 1185.026831][T17033] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1185.214099][T17058] macsec1: entered promiscuous mode [ 1185.250433][T17058] bridge0: entered promiscuous mode [ 1185.277304][T17058] macsec1: entered allmulticast mode [ 1185.297157][T17058] bridge0: entered allmulticast mode [ 1185.341508][T17058] bridge0: port 3(macsec1) entered blocking state [ 1185.359460][T17058] bridge0: port 3(macsec1) entered disabled state [ 1185.421252][T17058] bridge0: left allmulticast mode [ 1185.508367][ T5634] bridge0: left promiscuous mode [ 1185.741673][ T5288] veth0_vlan: left promiscuous mode [ 1185.822572][T18696] veth0_vlan: entered promiscuous mode [ 1185.964471][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11291'. [ 1186.047038][T17087] netlink: 'syz.0.11291': attribute type 30 has an invalid length. [ 1186.137074][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11291'. [ 1186.230236][T17098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1186.317366][T17103] syz_tun: left allmulticast mode [ 1186.338144][T17103] syz_tun: left promiscuous mode [ 1186.362597][T17103] bridge0: port 5(syz_tun) entered disabled state [ 1186.407721][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11296'. [ 1186.437353][T17103] bond4: left allmulticast mode [ 1186.467444][ T29] audit: type=1107 audit(1785192355.697:22): pid=17108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1186.491135][T17103] bond4: left promiscuous mode [ 1186.511035][T17103] bridge0: port 4(bond4) entered disabled state [ 1186.556403][T17103] vlan2: left allmulticast mode [ 1186.572922][T17103] geneve0: left allmulticast mode [ 1186.586383][T17103] vlan2: left promiscuous mode [ 1186.592165][T17103] geneve0: left promiscuous mode [ 1186.602181][T17103] bridge0: port 3(vlan2) entered disabled state [ 1186.618602][T17103] bridge_slave_1: left allmulticast mode [ 1186.637474][T17103] bridge_slave_1: left promiscuous mode [ 1186.657102][T17103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.733108][T17103] bridge_slave_0: left allmulticast mode [ 1186.762627][T17103] bridge_slave_0: left promiscuous mode [ 1186.781040][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.199122][T17109] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1187.266435][T17109] bond3 (unregistering): Released all slaves [ 1187.365774][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11302'. [ 1187.540309][T17141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.588141][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11303'. [ 1187.627158][T17146] blkio.reset_stats is deprecated [ 1187.787414][T17145] ipvlan0: entered allmulticast mode [ 1187.798717][T17145] syz_tun: entered allmulticast mode [ 1187.988386][T17150] batadv0: entered promiscuous mode [ 1188.023787][T17150] macsec1: entered promiscuous mode [ 1188.081939][T17150] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1188.118049][T17150] batadv0: left promiscuous mode [ 1188.126435][T17171] netlink: 'syz.0.11309': attribute type 12 has an invalid length. [ 1189.136237][T17201] __nla_validate_parse: 3 callbacks suppressed [ 1189.136257][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11313'. [ 1189.607567][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1189.650414][T17212] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1189.755832][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.810349][T17224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1189.885376][ T1176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.976786][ T1176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.026229][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.263622][T17245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11327'. [ 1190.351946][T17249] openvswitch: netlink: IP tunnel dst address not specified [ 1190.845203][T17272] ip6erspan0: entered allmulticast mode [ 1190.877552][T17269] syzkaller0: entered promiscuous mode [ 1190.887912][T17269] syzkaller0: entered allmulticast mode [ 1191.035925][ T5288] veth1_macvtap: entered allmulticast mode [ 1192.040847][T17303] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 1193.297995][T17249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.441160][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11342'. [ 1193.566092][T28913] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1193.628644][ T4280] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1193.638534][T28913] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1193.759203][T17324] bond0: (slave gre0): refused to change device type [ 1193.821587][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11346'. [ 1193.834356][T17326] bond0: (slave gre0): refused to change device type [ 1193.851048][ T4280] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1193.866554][T17325] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1193.872467][T17333] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1193.990740][ T29] audit: type=1804 audit(1785192363.217:23): pid=17336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.11347" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2154 res=1 errno=0 [ 1194.095793][ T29] audit: type=1800 audit(1785192363.227:24): pid=17336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11347" name="cgroup.controllers" dev="tmpfs" ino=2154 res=0 errno=0 [ 1194.549171][T17360] xt_hashlimit: size too large, truncated to 1048576 [ 1194.609428][ T4280] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1194.990751][T17374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11359'. [ 1195.065569][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11358'. [ 1195.148506][T17382] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1195.701947][T17410] netlink: 'syz.2.11364': attribute type 21 has an invalid length. [ 1195.719996][T17410] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11364'. [ 1195.854848][T17414] netlink: 'syz.0.11366': attribute type 3 has an invalid length. [ 1195.868433][T17416] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1195.887127][T17414] netlink: 'syz.0.11366': attribute type 1 has an invalid length. [ 1195.934709][T17414] netlink: 212 bytes leftover after parsing attributes in process `syz.0.11366'. [ 1195.978341][T17414] NCSI netlink: No device for ifindex 813332851 [ 1195.993616][T17426] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11368'. [ 1196.006091][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11368'. [ 1196.016942][T17426] x_tables: unsorted entry at hook 2 [ 1196.024106][T17426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11368'. [ 1196.206428][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11367'. [ 1196.222257][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11369'. [ 1196.284242][T17437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.566773][T17450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1197.032337][T17457] netlink: 'syz.3.11377': attribute type 2 has an invalid length. [ 1197.650778][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1198.085693][T17507] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1198.582672][T17525] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1198.655028][T17537] IPv6: NLM_F_CREATE should be specified when creating new route [ 1198.685526][T17537] netlink: 'syz.4.11395': attribute type 1 has an invalid length. [ 1198.827705][T17546] netlink: 'syz.0.11397': attribute type 1 has an invalid length. [ 1198.872383][T17546] netlink: 'syz.0.11397': attribute type 11 has an invalid length. [ 1198.899827][T17546] netlink: 'syz.0.11397': attribute type 11 has an invalid length. [ 1199.067037][T17556] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1199.245592][T17569] syzkaller0: entered promiscuous mode [ 1199.255152][T17569] syzkaller0: entered allmulticast mode [ 1199.463137][T17577] tunl0: left promiscuous mode [ 1199.537134][T17577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1200.452250][T28913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1200.469540][T28913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1200.478532][T17614] netlink: 'syz.3.11416': attribute type 8 has an invalid length. [ 1200.489467][T18706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1200.528164][T17614] __nla_validate_parse: 9 callbacks suppressed [ 1200.528184][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11416'. [ 1200.636018][T17614] bond0: entered promiscuous mode [ 1200.657178][T17614] bond_slave_0: entered promiscuous mode [ 1200.711270][T17614] bond_slave_1: entered promiscuous mode [ 1200.757815][T17614] gretap0: entered promiscuous mode [ 1200.765862][T17628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11420'. [ 1200.782432][T17614] team0: entered promiscuous mode [ 1200.798045][T17614] team_slave_0: entered promiscuous mode [ 1200.811164][T17614] team_slave_1: entered promiscuous mode [ 1200.836453][T17614] hsr1: entered promiscuous mode [ 1200.909952][T18706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1200.921998][T17624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11418'. [ 1201.022378][T18706] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1201.688068][T17662] syzkaller0: entered promiscuous mode [ 1201.712029][T17662] syzkaller0: entered allmulticast mode [ 1204.769290][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1206.058164][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1207.408768][T17669] syzkaller0: entered promiscuous mode [ 1207.426031][T17669] syzkaller0: entered allmulticast mode [ 1208.147632][T17717] netlink: 'syz.4.11437': attribute type 1 has an invalid length. [ 1208.264881][T17717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1208.329748][T17740] netlink: 'syz.1.11441': attribute type 1 has an invalid length. [ 1208.412713][T17734] xt_cluster: node mask cannot exceed total number of nodes [ 1208.482428][T17717] bond0: (slave team0): Releasing backup interface [ 1208.717082][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11444'. [ 1208.834914][T17759] gre0: Caught tx_queue_len zero misconfig [ 1209.007899][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11447'. [ 1209.191623][T17774] netlink: 'syz.0.11451': attribute type 9 has an invalid length. [ 1209.223384][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11450'. [ 1209.363610][T17779] 8021q: VLANs not supported on lo [ 1209.825659][T17798] hsr_slave_0: left promiscuous mode [ 1209.914461][T17798] hsr_slave_1: left promiscuous mode [ 1210.082912][T17814] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1210.116050][T17815] netlink: 'syz.4.11463': attribute type 1 has an invalid length. [ 1210.130690][T17799] netlink: 'syz.3.11459': attribute type 4 has an invalid length. [ 1210.148487][T17815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11463'. [ 1210.516912][T17834] netlink: 'syz.4.11469': attribute type 1 has an invalid length. [ 1210.918562][T17856] bridge3: entered promiscuous mode [ 1210.942869][T17856] bridge3: entered allmulticast mode [ 1211.485643][T17880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11479'. [ 1211.507562][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11480'. [ 1211.567241][T17881] netlink: 212 bytes leftover after parsing attributes in process `syz.1.11480'. [ 1211.598441][T17886] netlink: 'syz.4.11478': attribute type 3 has an invalid length. [ 1211.821040][T17895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11482'. [ 1212.242060][T17914] nbd0: detected capacity change from 0 to 87 [ 1212.305281][ T11] block nbd0: Dead connection, failed to find a fallback [ 1212.431397][T17925] sctp: [Deprecated]: syz.1.11490 (pid 17925) Use of int in max_burst socket option deprecated. [ 1212.431397][T17925] Use struct sctp_assoc_value instead [ 1212.896726][T17948] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11495'. [ 1212.979965][T17955] netlink: 'syz.1.11496': attribute type 1 has an invalid length. [ 1213.024553][T17955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11496'. [ 1213.041196][T17955] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 1213.225631][T17967] IPVS: set_ctl: invalid protocol: 41 172.30.1.1:20001 [ 1213.296250][T17970] netlink: 'syz.0.11498': attribute type 16 has an invalid length. [ 1213.325526][T17970] netlink: 'syz.0.11498': attribute type 17 has an invalid length. [ 1213.336927][ T11] block nbd0: shutting down sockets [ 1213.342684][ T11] blk_print_req_error: 115 callbacks suppressed [ 1213.342702][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1213.355197][T17967] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003 [ 1213.361197][ T11] buffer_io_error: 138 callbacks suppressed [ 1213.361289][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1213.380961][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1213.392246][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1213.400732][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1213.410846][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1213.423807][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.433704][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1213.441715][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1213.451270][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1213.460077][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1213.469685][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.481255][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1213.489890][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1213.497958][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.508313][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.520488][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.532006][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.542769][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.545456][T17970] lo: left promiscuous mode [ 1213.553513][T17924] ldm_validate_partition_table(): Disk read failed. [ 1213.553714][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1213.554161][T17924] Dev nbd0: unable to read RDB block 0 [ 1213.555523][T17924] nbd0: unable to read partition table [ 1213.612700][T17924] ldm_validate_partition_table(): Disk read failed. [ 1213.632160][T17924] Dev nbd0: unable to read RDB block 0 [ 1213.643999][T17924] nbd0: unable to read partition table [ 1213.661619][T17924] block nbd0: NBD_DISCONNECT [ 1213.666351][T17924] block nbd0: Send disconnect failed -32 [ 1213.729036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.927228][T17970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.964055][T17988] x_tables: duplicate underflow at hook 2 [ 1214.067967][T17970] vlan0: left promiscuous mode [ 1214.113026][T17970] netdevsim netdevsim0 : left promiscuous mode [ 1214.145683][T17992] nft_compat: unsupported protocol 0 [ 1214.166374][T17970] geneve2: left promiscuous mode [ 1214.194858][T17970] geneve2: left allmulticast mode [ 1214.262277][T17970] macsec1: left promiscuous mode [ 1214.277737][T17970] gretap1: left promiscuous mode [ 1214.293821][T17970] batman_adv: batadv0: Interface activated: gretap1 [ 1214.318804][T17970] ip6tnl3: left allmulticast mode [ 1214.360930][T17970] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1214.464458][T17973] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1214.485142][T17973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1214.510069][T17973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1214.682921][T18004] veth1_macvtap: left promiscuous mode [ 1214.735208][T18000] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11507'. [ 1214.809808][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1214.813115][T18007] pimreg: entered allmulticast mode [ 1214.840239][T18000] 0{X: renamed from gretap0 [ 1214.855654][T18004] netlink: 95 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1214.871305][T18000] 0{X: entered allmulticast mode [ 1214.887146][T18004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1214.891851][T18000] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1214.983479][T18016] syzkaller0: entered promiscuous mode [ 1214.992829][T18016] syzkaller0: entered allmulticast mode [ 1215.368385][T18024] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11514'. [ 1215.709490][T18032] tipc: Enabled bearer , priority 0 [ 1215.724723][T18032] syzkaller0: entered promiscuous mode [ 1215.747434][T18032] syzkaller0: entered allmulticast mode [ 1215.865986][T18035] tipc: Resetting bearer [ 1215.921980][T18031] tipc: Resetting bearer [ 1216.011998][T18031] tipc: Disabling bearer [ 1216.020406][T18045] xt_CONNSECMARK: invalid mode: 0 [ 1216.037269][T18044] tipc: Enabled bearer , priority 10 [ 1216.595171][T18066] netlink: 'syz.3.11527': attribute type 1 has an invalid length. [ 1216.695571][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11527'. [ 1216.748595][T18066] bond6: entered promiscuous mode [ 1216.756367][T18066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1216.773895][T18066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11527'. [ 1216.808990][T18066] bond6: (slave bridge3): making interface the new active one [ 1216.838312][T18066] bridge3: entered promiscuous mode [ 1216.857407][T18080] sctp: [Deprecated]: syz.0.11532 (pid 18080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1216.857407][T18080] Use struct sctp_sack_info instead [ 1216.890996][T18066] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1216.977373][T18073] syzkaller0: entered promiscuous mode [ 1217.000151][T18073] syzkaller0: entered allmulticast mode [ 1217.442981][T18102] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11538'. [ 1217.477365][T18102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11538'. [ 1217.512501][T18108] ip_tables: iptables: counters copy to user failed while replacing table [ 1217.689813][T18111] vlan0: entered promiscuous mode [ 1217.713635][T18111] gretap0: entered promiscuous mode [ 1217.977811][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.048082][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.405738][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11549'. [ 1218.542603][T18141] team0: Port device team_slave_0 removed [ 1218.604846][T18153] gre0: Caught tx_queue_len zero misconfig [ 1218.694738][T18157] bridge_slave_1: left allmulticast mode [ 1218.731896][T18157] bridge_slave_1: left promiscuous mode [ 1218.752178][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.832074][T18166] tipc: Trying to set illegal importance in message [ 1218.841567][T18157] bridge_slave_0: left allmulticast mode [ 1218.875234][T18157] bridge_slave_0: left promiscuous mode [ 1218.894041][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.041953][T18172] batadv_slave_1: entered promiscuous mode [ 1219.098695][T18169] batadv_slave_1: left promiscuous mode [ 1219.116787][T18174] 1{X: renamed from 30{X (while UP) [ 1219.160085][T18176] x_tables: duplicate underflow at hook 2 [ 1219.161417][T18174] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 1219.977312][T18215] __nla_validate_parse: 5 callbacks suppressed [ 1219.977349][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11565'. [ 1220.475932][T18236] netlink: 'syz.1.11570': attribute type 10 has an invalid length. [ 1220.809921][ T29] audit: type=1800 audit(1785192390.047:25): pid=18253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11577" name="memory.events" dev="tmpfs" ino=1826 res=0 errno=0 [ 1220.834958][T18253] set match dimension is over the limit! [ 1220.895742][T18249] xt_ecn: cannot match TCP bits for non-tcp packets [ 1221.467828][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1222.334368][T18319] netlink: 'syz.1.11591': attribute type 1 has an invalid length. [ 1222.346673][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11588'. [ 1222.350255][T18311] gretap0: entered promiscuous mode [ 1222.380937][T18311] vlan2: entered promiscuous mode [ 1222.391468][T18318] netlink: 'syz.0.11588': attribute type 10 has an invalid length. [ 1222.421789][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11588'. [ 1222.516333][T18319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1222.841725][T18336] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1222.885163][T18339] sctp: [Deprecated]: syz.0.11597 (pid 18339) Use of int in maxseg socket option. [ 1222.885163][T18339] Use struct sctp_assoc_value instead [ 1223.097078][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1223.331026][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1223.606087][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1223.968050][T18387] sctp: [Deprecated]: syz.0.11611 (pid 18387) Use of int in maxseg socket option. [ 1223.968050][T18387] Use struct sctp_assoc_value instead [ 1224.211629][T18407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11616'. [ 1224.275982][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11616'. [ 1224.637209][T18434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.776232][T18434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.032447][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11625'. [ 1225.066517][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11625'. [ 1225.383671][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11628'. [ 1225.500571][T18468] netlink: 'syz.3.11628': attribute type 1 has an invalid length. [ 1225.579036][T18470] netlink: 'syz.3.11628': attribute type 1 has an invalid length. [ 1226.288097][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11639'. [ 1226.576280][T18520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11640'. [ 1226.997707][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11645'. [ 1227.481003][T18557] veth0: entered promiscuous mode [ 1227.546119][T18557] netlink: 'syz.3.11655': attribute type 13 has an invalid length. [ 1227.586081][T18561] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1227.613827][T18561] bond4 (unregistering): Released all slaves [ 1228.110285][T18703] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.225930][T18555] veth0: left promiscuous mode [ 1228.907126][T18621] netlink: 'syz.4.11673': attribute type 75 has an invalid length. [ 1228.955691][T18619] bond0: Caught tx_queue_len zero misconfig [ 1229.102394][T18703] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1229.124233][T18629] netlink: 'syz.0.11676': attribute type 1 has an invalid length. [ 1229.299541][T18638] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11678'. [ 1229.365333][T18629] bond15: entered promiscuous mode [ 1229.377408][T18629] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1229.432845][T18646] netlink: zone id is out of range [ 1229.464374][T18646] netlink: zone id is out of range [ 1229.479000][T18646] netlink: zone id is out of range [ 1229.508081][T18646] netlink: zone id is out of range [ 1229.545390][T18646] netlink: zone id is out of range [ 1229.558475][T18646] netlink: zone id is out of range [ 1229.577211][T18646] netlink: zone id is out of range [ 1229.595665][T18646] netlink: zone id is out of range [ 1229.607628][T18646] netlink: zone id is out of range [ 1229.641587][T18646] netlink: zone id is out of range [ 1229.844416][T18661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11683'. [ 1229.892396][T18661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11683'. [ 1230.038464][T18666] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1230.042539][T18669] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11684'. [ 1231.649041][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1231.768767][T18755] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1231.838283][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11707'. [ 1231.865845][T18759] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11704'. [ 1231.951885][T18760] veth0_macvtap: left promiscuous mode [ 1232.200885][T18778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11712'. [ 1232.313929][T18783] netlink: 'syz.4.11714': attribute type 1 has an invalid length. [ 1232.481942][T18783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.555209][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11716'. [ 1232.599107][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11716'. [ 1232.899572][T18810] netlink: 'syz.4.11720': attribute type 11 has an invalid length. [ 1233.102083][T18816] netlink: 'syz.0.11723': attribute type 1 has an invalid length. [ 1233.256425][T18816] bond16: entered promiscuous mode [ 1233.263125][T18816] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1233.492861][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11731'. [ 1233.602462][T18840] veth1: left promiscuous mode [ 1233.743588][T18847] xt_l2tp: invalid flags combination: 0 [ 1233.792304][T18844] bridge0: port 3(syz_tun) entered disabled state [ 1233.890412][T18844] syz_tun (unregistering): left allmulticast mode [ 1233.898632][T18844] syz_tun (unregistering): left promiscuous mode [ 1233.912860][T18844] bridge0: port 3(syz_tun) entered disabled state [ 1233.976429][T18855] nbd: must specify a size in bytes for the device [ 1233.987794][T18855] netlink: 'syz.1.11735': attribute type 1 has an invalid length. [ 1234.024970][T18856] netlink: 'syz.1.11735': attribute type 1 has an invalid length. [ 1234.114578][T18856] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1234.144999][T18857] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1234.187873][T18857] bond12: entered allmulticast mode [ 1234.334044][T18864] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11739'. [ 1234.538257][T18869] team0: Port device vlan0 added [ 1234.747672][T18881] syzkaller0: entered promiscuous mode [ 1234.762163][T18881] syzkaller0: entered allmulticast mode [ 1234.894748][T18892] net_ratelimit: 22 callbacks suppressed [ 1234.894766][T18892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.261830][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11748'. [ 1235.292144][T18913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11751'. [ 1235.756448][T18937] xt_hashlimit: invalid interval [ 1235.830715][T18942] netlink: ct family unspecified [ 1235.850528][T18942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.923782][T18966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11761'. [ 1238.278459][T18913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1238.596765][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11765'. [ 1238.649119][T18981] dummy0: Caught tx_queue_len zero misconfig [ 1238.666185][T18986] xt_hashlimit: invalid interval [ 1238.732200][T18981] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1238.736977][T18983] netlink: 'syz.1.11763': attribute type 11 has an invalid length. [ 1238.871506][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1239.000408][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1239.192553][T18998] bond7: Unable to set down delay as MII monitoring is disabled [ 1239.236664][T18998] bond7 (unregistering): Released all slaves [ 1239.302105][T19008] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 1239.312136][T19008] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 1239.345435][T19002] team0: mtu less than device minimum [ 1239.662181][T19023] lo: Caught tx_queue_len zero misconfig [ 1239.806390][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11773'. [ 1239.872913][T19029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1239.894911][T19005] syzkaller0: entered promiscuous mode [ 1239.900749][T19005] syzkaller0: entered allmulticast mode [ 1240.364063][T19046] netlink: 'syz.0.11779': attribute type 1 has an invalid length. [ 1240.956951][ T29] audit: type=1107 audit(1785192410.187:26): pid=19062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1245.627389][T19046] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1246.347668][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11789'. [ 1246.386973][T19093] xt_nfacct: accounting object `syz1' does not exist [ 1246.446371][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11792'. [ 1246.918538][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11798'. [ 1246.964720][T19128] batadv_slave_0 (unregistering): left allmulticast mode [ 1247.004933][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.626987][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1257.796295][ C0] sched: DL replenish lagged too much [ 1266.210437][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.627917][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1341.091461][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1371.810403][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1382.072081][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1433.318841][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1433.325827][ C0] rcu: (detected by 0, t=10502 jiffies, g=275309, q=893 ncpus=2) [ 1433.333648][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9583 (4295080455-4295070872), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1433.346946][ C0] rcu: rcu_preempt kthread starved for 9583 jiffies! g275309 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1433.358149][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1433.368126][ C0] rcu: RCU grace-period kthread stack dump: [ 1433.374015][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1433.387519][ C0] Call Trace: [ 1433.390804][ C0] [ 1433.393747][ C0] __schedule+0x17d9/0x56c0 [ 1433.398269][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1433.403248][ C0] ? __pfx___schedule+0x10/0x10 [ 1433.408130][ C0] ? schedule+0x90/0x2b0 [ 1433.412385][ C0] schedule+0x164/0x2b0 [ 1433.416549][ C0] schedule_timeout+0x152/0x2c0 [ 1433.421411][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1433.426797][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1433.432123][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1433.437936][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1433.443507][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1433.448404][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1433.453616][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1433.459432][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1433.465616][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1433.470912][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1433.476120][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1433.481936][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1433.486549][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1433.491770][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1433.496724][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1433.501777][ C0] kthread+0x388/0x470 [ 1433.505862][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1433.511071][ C0] ? __pfx_kthread+0x10/0x10 [ 1433.515672][ C0] ret_from_fork+0x514/0xb70 [ 1433.520324][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1433.525459][ C0] ? __switch_to+0xc89/0x1420 [ 1433.530148][ C0] ? __pfx_kthread+0x10/0x10 [ 1433.534756][ C0] ret_from_fork_asm+0x1a/0x30 [ 1433.539543][ C0] [ 1433.542561][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1433.548896][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1433.554117][ C1] NMI backtrace for cpu 1 [ 1433.554136][ C1] CPU: 1 UID: 0 PID: 3198 Comm: kworker/R-ipv6_ Not tainted syzkaller #0 PREEMPT(full) [ 1433.554156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1433.554168][ C1] Workqueue: ipv6_addrconf addrconf_verify_work [ 1433.554289][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1433.554344][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 1b 09 5f f5 cc [ 1433.554359][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00000246 [ 1433.554375][ C1] RAX: ffffffff89a549a2 RBX: 0000000080000100 RCX: ffff8880324d3e00 [ 1433.554388][ C1] RDX: 0000000000000100 RSI: 0000000080000100 RDI: 0000000000000000 [ 1433.554400][ C1] RBP: ffffc90000a08c00 R08: ffffffff90578a37 R09: 1ffffffff20af146 [ 1433.554413][ C1] R10: dffffc0000000000 R11: fffffbfff20af147 R12: 1ffff1100649a858 [ 1433.554426][ C1] R13: 0000000000000002 R14: 0000000000000001 R15: ffff8880324d3e00 [ 1433.554439][ C1] FS: 0000000000000000(0000) GS:ffff888125050000(0000) knlGS:0000000000000000 [ 1433.554453][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1433.554466][ C1] CR2: 00007fcc8f83ff8c CR3: 000000004f858000 CR4: 00000000003526f0 [ 1433.554482][ C1] Call Trace: [ 1433.554493][ C1] [ 1433.554500][ C1] __netif_receive_skb_core+0x11f2/0x30b0 [ 1433.554592][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1433.554618][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1433.554641][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1433.554663][ C1] ? process_backlog+0x3c3/0x1860 [ 1433.554688][ C1] ? lock_acquire+0x106/0x350 [ 1433.554712][ C1] ? process_backlog+0x3c3/0x1860 [ 1433.554740][ C1] ? process_backlog+0x3c3/0x1860 [ 1433.554763][ C1] ? process_backlog+0x3c3/0x1860 [ 1433.554790][ C1] process_backlog+0x706/0x1860 [ 1433.554817][ C1] ? process_backlog+0x3c3/0x1860 [ 1433.554848][ C1] __napi_poll+0xaa/0x330 [ 1433.554873][ C1] net_rx_action+0x61d/0xf50 [ 1433.554904][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1433.554928][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1433.555028][ C1] ? net_tx_action+0xbff/0xc30 [ 1433.555055][ C1] handle_softirqs+0x225/0x840 [ 1433.555078][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1433.555109][ C1] __irq_exit_rcu+0xca/0x220 [ 1433.555129][ C1] irq_exit_rcu+0x9/0x30 [ 1433.555148][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1433.555167][ C1] [ 1433.555173][ C1] [ 1433.555180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1433.555199][ C1] RIP: 0010:__rtnl_unlock+0x1f/0xf0 [ 1433.555262][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df e8 98 01 1e f8 48 8b 1d 11 56 1f 11 <48> c7 05 06 56 1f 11 00 00 00 00 48 c7 c0 c0 29 02 90 48 c1 e8 03 [ 1433.555277][ C1] RSP: 0018:ffffc9000cd6f9a0 EFLAGS: 00000293 [ 1433.555291][ C1] RAX: ffffffff89a8ffe8 RBX: 0000000000000000 RCX: ffff8880324d3e00 [ 1433.555304][ C1] RDX: 0000000000000000 RSI: ffffffff8e22bfea RDI: ffffffff8c4bdb80 [ 1433.555316][ C1] RBP: ffffc9000cd6fad0 R08: ffffffff90578a37 R09: 1ffffffff20af146 [ 1433.555330][ C1] R10: dffffc0000000000 R11: fffffbfff20af147 R12: ffffc9000cd6fa60 [ 1433.555343][ C1] R13: 1ffff920019adf40 R14: dffffc0000000000 R15: dffffc0000000000 [ 1433.555361][ C1] ? __rtnl_unlock+0x18/0xf0 [ 1433.555385][ C1] netdev_run_todo+0x2e8/0x10d0 [ 1433.555405][ C1] ? trace_irq_disable+0x3b/0x140 [ 1433.555431][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 1433.555451][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1433.555478][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1433.555497][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1433.555532][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1433.555551][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1433.555575][ C1] ? assign_work+0x3af/0x5d0 [ 1433.555596][ C1] rescuer_thread+0x7b6/0x10b0 [ 1433.555621][ C1] ? rescuer_thread+0xb8/0x10b0 [ 1433.555653][ C1] kthread+0x388/0x470 [ 1433.555678][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1433.555699][ C1] ? __pfx_kthread+0x10/0x10 [ 1433.555724][ C1] ret_from_fork+0x514/0xb70 [ 1433.555750][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1433.555775][ C1] ? __switch_to+0xc89/0x1420 [ 1433.555797][ C1] ? __pfx_kthread+0x10/0x10 [ 1433.555822][ C1] ret_from_fork_asm+0x1a/0x30 [ 1433.555847][ C1]