last executing test programs: 5.872302688s ago: executing program 2 (id=5822): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) close(r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x10000, 0x82e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) 5.129277487s ago: executing program 4 (id=5829): socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r6 = socket$netlink(0x10, 0x3, 0xe) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000440)={0x0, 0xffffffff, 0x438, 0x27}, &(0x7f0000000480)=0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="e000000affffffff0000000006000000ac1414bbac1414bbac1414aaac1e010100000000e0000001"], 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 5.039595839s ago: executing program 2 (id=5831): r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 4.919337615s ago: executing program 4 (id=5832): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)=0x13fe4c102fd7fdb3) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000140)) 4.832464102s ago: executing program 2 (id=5833): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xb8, @private0, 0x7fff}, @in={0x2, 0x4e24, @multicast1}], 0x2c) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0xd9) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00003c77e6d366d00c002e00010000000004000000040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x9000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00018000000340000000000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c000280050001000000000008000740000000001c000900080003400000000d080003400000020008000240000000000800084000000000"], 0xe5}, 0x1, 0xfffff000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x7}, 0x1c) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r1, 0x78, 0x3fcfa4e, 0x81}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x1, [0x7fe]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000007010100000000000000000a000001000003400300000000000000000005400000000100000340000000000000000700000240ffffffff00fffe000000010073797a30e8ffffff"], 0xfdfa}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c001) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000180)={r12, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1}}, 0x4, 0x87}, 0x90) 4.608675771s ago: executing program 4 (id=5836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x7188, 0xc, 0x57c, 0x4}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x1f74, 0x3, @private1, @empty, 0x48, 0x40, 0x69ec, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast1, @local, 0x0}, &(0x7f00000001c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c00000010001000"/20, @ANYRES32=0x0, @ANYBLOB="81000500000000006c0012800b00010069703676746900005c000280140004000000000000000000000000000000000108000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08c4117f96da5a240ccb182827cd00de36d46b206e72af67ab0300dfe7d10c13b0675606399c7a283e7b714bdb6e03ede301badd9c85462583d50bce4d7bcbb87088d0052a63bec1f41b1e31856dc297be1133ee90d71e7257645f36f6b1c680e632c87b6b4c6fa55fa6a56bc9c2abf329e17d5b1392878a2ddd6a9ece3f49ba3516a5c2a469ceac47497a1dd8563fd2c4dd786e43efbab5f62a01eb20624bdfc8ab6c7424f114aa418eed5c68cc0947f4e85f012e6f0775a3329c2d6a6e684d31c19fee61f56a31da732b9e06b1de8f7b", @ANYRES32=0x0, @ANYBLOB="08000300c3b6686414000500fe80000000000000000000000000001508000100", @ANYRES32=r6, @ANYBLOB="0800020000000000"], 0x8c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b8, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x14c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x840}, 0x200080c0) 4.016554403s ago: executing program 1 (id=5841): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf251b00000010002e800c00bf878c2faaaaaaaaaaaa0c0006000100000001"], 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0xfffffb6c, 0x4) (async) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x802, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000580)="004f28528714f2dfa69abbd8f2aef5138cdc4ed99544d356947c5317ec121817bfa4012e5fcee694f38ec49bbf652c0d2c67368b2046e8f939452aff4c1670376e55940ba803654348", 0x0}, 0x50) (async) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000027129493164387c309efc1db8fd56ed0000000000000070000004400000000572d"], 0x38}, 0x0) 3.897078498s ago: executing program 1 (id=5842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x200, 0x0, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.693051249s ago: executing program 4 (id=5844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "4adb125cf7939455", "e9e0d9b972a2024b334a90d4e2d3c425", "ad0f0530", "fd627c1d4704bc8e"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r0, 0x5ac1a000) sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "4adb125cf7939455", "e9e0d9b972a2024b334a90d4e2d3c425", "ad0f0530", "fd627c1d4704bc8e"}, 0x28) (async) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0x8000, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r0, 0x5ac1a000) (async) sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0) (async) unshare(0x20000400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) (async) 3.672163699s ago: executing program 1 (id=5845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x10}) ppoll(&(0x7f0000000240)=[{r1, 0x309}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.613860178s ago: executing program 0 (id=5846): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = accept4$x25(r1, &(0x7f0000000140)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x100000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000300)={0x6, &(0x7f0000000280)=[{0x9ab, 0x2d, 0x4, 0x8}, {0xf7d2, 0xd, 0x9, 0x2}, {0x2, 0x38, 0xf7, 0x5}, {0x80, 0x7, 0x7, 0x8}, {0x7c5, 0xc0, 0x7, 0x5}, {0x613d, 0x64, 0xe8, 0x7}]}) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000200)={0x3ff, 0xc, 0x3, 0xf8, 0x8f, 0x3, 0x20, "be3e4f361e40fa80f116e4eac6f8110aec65efa8", "f62d7087c7a155dd53476462606e24f2255e5856"}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x55) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) 3.421115664s ago: executing program 1 (id=5847): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x0, 0x1}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x9ca2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0x30000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000889) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = accept4(r4, 0x0, &(0x7f0000000480), 0x40800) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@deltclass={0x130, 0x29, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x10, 0x9}, {0xfff3, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}]}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x80, 0x0, 0x6, 0x3, 0xf04, 0x68e}}, @TCA_CBQ_RATE={0x10, 0x5, {0xa, 0x0, 0x81, 0x1, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x1, 0xc3, 0x6, 0x6, 0x3}}]}}, @c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_EXCESS={0x8}, @TCA_ATM_HDR={0xd, 0x3, "7039a013ce34972eaf"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x8}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x4}}, @TCA_ATM_HDR={0x7, 0x3, "557c06"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x2}}, @TCA_ATM_HDR={0x26, 0x3, "0d8ebe557f96e0694efaa8df449696904c5816b122404f5b19a4e5ba4fd92ee53d09"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x4}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8084) recvmsg(r5, &(0x7f0000000c00)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/149, 0x95}, {&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/71, 0x47}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000a00)=""/180, 0xb4}], 0x5, &(0x7f0000000b40)=""/134, 0x86}, 0x2102) r7 = accept$inet(r5, &(0x7f0000000c40)={0x2, 0x0, @dev}, &(0x7f0000000c80)=0x10) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000cc0)={@empty, @broadcast, 0xffffffffffffffff, "871eaa3bcd0bfe118431dd90c39e737d2c190c0f79cedc0d4f8b9c7ce3a6f31c", 0x3, 0x1, 0xfffff0a1, 0x439}, 0x3c) bind$alg(r6, &(0x7f0000000d00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x725001, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000dc0)={'veth0_to_team\x00'}) r9 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x81000) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000000e40)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004841) syz_genetlink_get_family_id$fou(&(0x7f0000001140), r5) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f00000012c0)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)=@report={0x1ec, 0x20, 0x8, 0x70bd2d, 0x25dfdbff, {0x6c, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e20, 0x8, 0x4e24, 0x9, 0x2, 0x20, 0x80, 0x87, r3, 0xee00}}, [@replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0x3ff}}, @replay_thresh={0x8, 0xb, 0x2}, @algo_aead={0xae, 0x12, {{'generic-gcm-aesni\x00'}, 0x310, 0x180, "effc51b2a0b57e4c735572fb4699ab22b6be076cf6415a7574dc6a0112951f6f0af7deb5593470074f37d8942d37e16c89f27c0d02f13ec1c5c3bc94041ef7d1a6df024253b07fed66f7f98d7e3319e062128f50d6e0b4dbe7951d52e2ad0d5c9a1c"}}, @replay_thresh={0x8, 0xb, 0xd4bb}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@rand_addr=0x64010101, 0x4e20, 0x7, 0x4e22, 0x0, 0x8, 0x80, 0x10, 0x2e, r2, r14}, {0x1, 0x129, 0x10, 0x1, 0x0, 0xffffffff, 0x8, 0x600000000000000}, {0x4, 0x9, 0x3, 0x5}, 0x80000000, 0x0, 0x0, 0x1, 0x1, 0x3}}, @lifetime_val={0x24, 0x9, {0x1000, 0x200, 0x8, 0x8}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, &(0x7f0000001580), 0x4) ioctl$XFS_IOC_GETBMAP(r12, 0xc0205826, &(0x7f00000015c0)={0xa5, 0x8, 0x1ff, 0xffff7fff, 0x1}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000001600)={{r6}, {@void, @max}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r13, r0, 0x0, 0x3, 0x3}, 0x50) 3.420568945s ago: executing program 4 (id=5848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "0900ba7fba623c83"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x840) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c1) 3.379967327s ago: executing program 3 (id=5849): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00"], 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3.233243423s ago: executing program 1 (id=5850): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c800) (async) write$tun(r2, &(0x7f0000000240)={@void, @val={0x0, 0x80, 0x8, 0x10, 0x0, 0x9}, @llc={@llc={0x4, 0xe, "b2cf", "eecf564ba8dc944cb94f9e194cc5a7d14f09146ff469e743e6e64bddc6023baad4430ffbec18aecc9052e46388e022f69520daf375acf7a889bbd14291001d985960aa58a8f3745e3acd3232"}}}, 0x5a) (async) r4 = socket(0x15, 0x80000, 0x5) bind$x25(r2, &(0x7f00000002c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async, rerun: 64) recvmmsg(r2, &(0x7f0000004600)=[{{&(0x7f0000000300)=@l2tp6, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/87, 0x57}, 0x4d07}, {{&(0x7f0000001440)=@qipcrtr, 0x80, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/206, 0xce}], 0x1, &(0x7f0000001600)=""/225, 0xe1}, 0x2}, {{&(0x7f0000001700)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)=""/5, 0x5}, {&(0x7f00000017c0)=""/86, 0x56}, {&(0x7f0000001840)=""/86, 0x56}], 0x3, &(0x7f0000001900)=""/102, 0x66}, 0x2}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001a00)=""/90, 0x5a}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/118, 0x76}, {&(0x7f0000002b00)=""/19, 0x13}], 0x4, &(0x7f0000002b80)=""/242, 0xf2}, 0x7}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f0000004200)=[{&(0x7f0000002d00)=""/168, 0xa8}, {&(0x7f0000002dc0)=""/239, 0xef}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)}, {&(0x7f0000003fc0)=""/112, 0x70}, {&(0x7f0000004040)=""/214, 0xd6}, {&(0x7f0000004140)=""/161, 0xa1}], 0x8, &(0x7f0000004280)=""/79, 0x4f}, 0x6}, {{&(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004380)=""/130, 0x82}, {&(0x7f0000004440)=""/140, 0x8c}, {&(0x7f0000004500)=""/64, 0x40}], 0x3, &(0x7f0000004580)=""/79, 0x4f}, 0x5}], 0x6, 0x2041, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000004780), r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c008}, 0x4004000) r6 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000048c0)) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004ac0)={0x1, 0x1, 0x1000, 0xd9, &(0x7f0000004900)="bdb515b44175887461541adac83a771946f343abf958d8cfd370d06bd029bf676a1c01b706627c7556b3982c05b165a947167b1e8f3578f3df0fae58295a61bd2b746cbd736dc36dbbe9f3f305e8768e284a7ed0a16649fc773eb4afd740db277485e20b91fc2e73cdaa7c968c6c3415b3df017eb9ca81fb000d86d8ce1ad6a3d0a08aad2fcbb7ef3454207ed59ca95d9f77d9cbbcb1968fcc874a7c476e66b6cef72bbbe05b21631c671f0635ce468c15e180cf07da489b4b078923be046e95a2054e90123284b656d1ca47b5107e6f03fadee3500c40279c", 0x99, 0x0, &(0x7f0000004a00)="097830513509e905b64b83e47cc19fad14d7102002a22ead06b9f7bd020e416fb350f613f9282460486923861eca06b4bb0ac51526fc74e677aba5c98ab554f84f1fce91cc9259dce49ef59b92d63d277453d2897cd3909697216a26983737667e819a46cd5b75c8615912d2b3590e245d9bdbb73282cabb8b23d4ba41b656f2fe4799f122e179962ae6d8759321b43ab5ea3c5d1867f57591"}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004b80), r4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000004d00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0xd8, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x215}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x220}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20020880}, 0x20000000) (async, rerun: 32) r9 = openat$cgroup_procs(r2, &(0x7f0000004d40)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000004d80)=0x0) write$cgroup_pid(r9, &(0x7f0000004dc0)=r10, 0x12) (async) recvmsg$can_raw(r2, &(0x7f0000005000)={&(0x7f0000004e00)=@isdn, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004e80)=""/1, 0x1}], 0x1, &(0x7f0000004f00)=""/211, 0xd3}, 0x40010000) (async, rerun: 64) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$SIOCX25GCALLUSERDATA(r11, 0x89e4, &(0x7f0000005040)={0x2e, "e427a0bcf38319f6f8850ec5f77ea22728808c3a88c23002a0531cdf4d6cd6b72a450e642aef9e36ba0ba3b9f943ca240d473209a2836a38ff187189536d8b15cfba3fd0fd16e18041329ad2b03917976bb8e1566828da54e5dacf6694e70b006ef36482c8b8dff57890ad23648e599f3f20963f9958f93b405262679c5bfd9b"}) sendmsg$nl_xfrm(r4, &(0x7f00000051c0)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)=@getsa={0x38, 0x12, 0x100, 0x70bd26, 0x25dfdbff, {@in=@broadcast, 0x4d3, 0x8, 0x2b}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) (async) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000005200), &(0x7f0000005240)=0x4) (async) r12 = accept$unix(r2, &(0x7f0000005280)=@abs, &(0x7f0000005300)=0x6e) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000067c0)=0x0) sendmsg$unix(r12, &(0x7f00000068c0)={&(0x7f0000005340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006740)=[{&(0x7f00000053c0)="14e6e0e06d489fb9587a428e1e76774c3e28bc11af5221ed9e0879ae40412c3e8e8c72eb4adad9eacffb2c5a27871c12bfbbb3be096b6c69c5e582234f610f6a905af5b1", 0x44}, {&(0x7f0000005440)="3ecb420b86b36a617473868258e6965241379095f37c86486515945183af30d9f716d104689c066a24b39b5da6a05dd508135be768ea09da6bd4e163ecd503c284f51870d80fab83b0dffbd570273aa92678983cc9d4ce01eadab8f7501855cdd5700cf60228dddc58ae3852f55baeb26d06fde0307869af3293a6704e09affa35a52cd532e431ff337648b43f9d06c91b9ee81dce04cad4f1b179c7df4a78e5a090161bd6ca9f9906df7663c49f147ff5cbf989fd37421d0691badc7ba6c06fd141e2ac040252b25c1b15e6d9f74003", 0xd0}, {&(0x7f0000005540)="79f9b4130bd63b915fab0c350102625e947842115310c1f29c1caae1bf008b8cefaf731e80a22185b232603093ecf5ff6d4554520162866fa76188ed5b154c2f", 0x40}, {&(0x7f0000005580)="ea256c172c80c5230ba399734133185eb58660d69fe7bf0ec4ff9436e7cf1a4a1c479dbf", 0x24}, {&(0x7f00000055c0)="be38c98de969c410433eefb53a3b754af8d672b5e878e128b80423135e035f64cac779c9bcb83294c3100f534d4154534eb4ebae031fc4cddf4bc840ac8f764dfc8821f1b0770fc5cfc0ecd4bd957ea74cd72903e45b4a176757a1e670a0c9d8ed8c883223f5a0748440f8f953191c843fd7b2e5657fa7c3a3c7bdb22b5e713091a78d0ae7f8ba46c505483d116b71e4fcc2469fd065", 0x96}, {&(0x7f0000005680)="5e1df987f490c6afd3e98d4126bc6fb669ba7cbc7181215ca462ab4a266dcd501670153faaac1a8c45aadda535884e61a88a6eb378275366a9dfd085a7e474aa5c961649675014a927a7b4908fbe8b719c366394", 0x54}, {&(0x7f0000005700)="1744f842a1edef735a8bf314ed488a329ae8afce8f6241f7a1662f0758734455012aa18f726c8c147252a97f0f30ec", 0x2f}, {&(0x7f0000005740)="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", 0x1000}], 0x8, &(0x7f0000006880)=[@cred={{0x1c, 0x1, 0x2, {r10, r13}}}], 0x20, 0x40400d0}, 0x800) 3.189507448s ago: executing program 0 (id=5851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) 3.040636551s ago: executing program 0 (id=5852): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50100000000000000600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e65766531000000000000000000"], 0x50}}, 0x4000000) write$tcp_mem(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}]}, 0x38}}, 0x0) socket(0x1f, 0x1, 0xd) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$tipc(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)=0x0) sendmsg$netlink(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)={0x18, 0x24, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x74, 0x0, 0x0, @pid=r6}]}, 0x18}, {&(0x7f0000000740)={0x2b0, 0x35, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x5}, @generic="0cbf796ae09de1dfea9ce16f2e7d6d8385ba64e0984174ebb75729a10d7c77b138928099e374a237f864e3cdd17d0fa646fc70b468469070b8acad45924722c792cfa6a4ace2fecefcf8d62068dce7542107774f98612557baa8f4062779f0e929a1aaf49ef8b9618d295583e1b0e833faa5cf586fe0779ed9ca4434316f772d7dd31b19b27a2a79d014855123219bba93249a01abaed477e53b51d4d31c1e37966b16a7f64b59ba3009", @nested={0x1e0, 0x20, 0x0, 0x1, [@typed={0x20, 0x12d, 0x0, 0x0, @str='/proc/sys/net/ipv4/tcp_rmem\x00'}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @generic="0b9f9859d0714f416fcf8b2189b9e8c0824239bc9f63c29812381f02bbac5182a98a3103fbdc865ce948c14a771667a1ad89a814e2cffba5ef9b0555ef37b06f129b3585a6fba2a0a39d4186a71987d26b341f7eaf4746052e69e3f7701f5c8e33fe56fa907d74e0b606c0927115e1ce57e8dda6af4582471e20efc777a21cc857cd17d925862cce0df8a1cc15da2796fb93a0f330bc285b11801b1bcfb52f2e23af7cda797fa5f8735763035c25732509b6d9cc6efc83a6fa6a8a29bd092810f8b377df4825ebbe53dcbd22098acdf33f79ee898bc7f794", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9e5}, @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x6}, @generic="2ffd34308edb2f24e7b3c230d51cfa4f38f694310c7b662dc917c3ab8c513fe3052f5ecb44e01fa539f54bb7b99bab1c280b5b617a0190dff0c99b2568e155a7090f36b1ce676ec11464d528a06ccdb680c5140a1d52fa5ed5e1d4c2be212f9f3853aafd977249c360dde1da98755bb5329a2fc110572d9b125599de08a7641097c796d75cbcde67d95d7184619632386af8b910220e3e3c760e509a958c7693d414dee71352fc1ffc93cd0748b0c706241e1171e488c645d473a9a221e4da71fc6a3d27a830eb8d"]}]}, 0x2b0}, {&(0x7f0000000a00)={0x84, 0x40, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="38ce098742d38c37be22c7b4f2bcdfc7", @generic="004c6b81790397fc524ad03b736df8244359770545132c5346836d5654701ea6fd0d6e796d5d4f3a4ae74f5a17a2f8352e5ee98fd5e27a4a907646d97ed288c1ca390813e0b45c27a3aae44ab8c6f054d503b505e51627c31820", @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x84}], 0x3, 0x0, 0x0, 0x20008006}, 0x0) 3.020099138s ago: executing program 3 (id=5853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) 2.801498548s ago: executing program 3 (id=5854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2.790274678s ago: executing program 0 (id=5855): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) unshare(0x100000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x20194, 0x10014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f0000000100)=r2}, 0x20) 2.610899336s ago: executing program 0 (id=5856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001b40)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x26, 0x0, "1513f800abf1923ee348d886cb657804e0baa799d4d656a417c226d7c186256df2251be7b410aa428d076da43c35d35533a521c4450a637b656d084d7af736600fec7967c445296c69b135e803a93552"}, 0xd8) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xcc, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6456dee9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50574826}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x80) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) pwritev(r3, &(0x7f0000001840)=[{&(0x7f0000000240)="2685d6a3fa44bf19c1a353bd3591e91de2e6c85221ef8eb9679734e7b58c08fde06b15c172181531f7cdf5c8aa6d54323fd0c97be122846743aeca6e85bfdb7d4e0a3165b76aad439c65b35260053517eb4de72e83a70a4c1f9bcee4511b02e7b0be5d62fcc017edf9e5f1e25aa7c622b93d4a69ef35b70e5f663c52f4d6b26a1eb2f41f1bc2f6ac18ecc0a292dfdae8f14a27097dece96dd18b5cb203d20ed21d8aeff82a86d44261ba8fcd3493c4b90fee5499b9ae8c03860a1fc36378369631ef", 0xc2}, {&(0x7f0000000380)="ada7361f3bc00c9b1ea102eb352bcb5e276fe6a014d5bfe284321f8bee0c206f867690f5cd518258530425d666a6ad1641f143133ce3e7a88c075dc35020276b62338514df7648d7184518ee9fe3a92da0ebed0e9b63f234a7ad895de747114114b37e7730987a241b59f0ca91b55391c2cb5a0ac2655d73ef3a54a95070433187e234bd5f5887fd410631869b72f349c69d9bb3816270a9834acaf9516ba8b3c29183944ffd27cf4bdfcb3b8d4256f9da4b9ad7f4b015da47b84ddfea033b3c4dfd2d610e01c71de390639e456f1b8103dc4e2e2097965028f3141f1360507b7cf887db1cbea36066b67181bcf5", 0xee}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="02e117298acb2b058b40f652bdaf82ebd68ec7da1badf50666bb63db9eb339af74971a60dd56bdc4363b9fa1e3bc31a3bf3e76f29ef1c9ceaae2342bf93d582b4b80dd6db1026c8651534c65d0f1198014097d33bd4471cbe2816eab607cc280593476600b4f22e67d499726fd70537fc1fbe4e8a4d92feda4049b254f0b9baa7994d600e9dfe59fa7f3223be46626a863cdd419ef77557d1dddebf82fa266a43c1ead4b696c7af7e2ec313112020939a7794cc31eb39b8455896073bc45d7163fdf2a2e660f8bb136f1f07243de39b846b3824dbd865f7ae7f977c31e7b813a8a411a", 0xe3}, {&(0x7f0000001580)="3bc6d39b6b9c763941474ca2da999d1c5783f19a716c0a15b4fa9d8d4e4cb0a29948baff32b4f39625e65a40f9a81145", 0x30}, {&(0x7f00000015c0)="189f45b8cc47804c913f99299f785dc4f2143d19cdfd36ca1c50134936af29304cad2ec98fec767db664a1268cf56c478581c97031ba5bcbc26912d9d18e24276c5085f80ee97d46308041756af264f88eab", 0x52}, {&(0x7f0000001640)="74500a053c5de55774f09caddeec3c53c4bf9923e425850d7814befbc44fa6fd355593e6f689ad7e", 0x28}, {&(0x7f0000001680)="5096500cb92c9ffc97c96b37ae787a6773b6e916e1c9b41bfbad2bdfbc6e7aaad76d3ef89f4852e8a25d54fa593ad6f73522623253bcfe14c2afa55e50d319fe9b329bea7e3988370ee758cf15e5f5925f49b9397997b521f7bdc61efd6c2ceacc7208f224ca053f245ae9e482e8b97897804f5a9c9caa56981e70312170c62c44e235e8395d24ebc61fb305", 0x8c}, {&(0x7f0000001740)="0244dff52dc2e04d083fdf54295d46f00bcb55526c82a9c8586faf4f5ff94d21315e054ba04caa3ba3bc8cdc75fa2d439e414719ec1214bd3ce3ebf4de04d619641dbe0e347af9bf0b0e0b9cef6b7058205c6a49ebdad7e8e825661ab3a21bab2b3b4ec1a96df783fe101682174fdc22f7f327be8cff2881d67154a78c190475ccd9b56642253a40a87aca87afa8795afcd61e1765d96223e9915cb87a01a2ecc442fd6aaf4c1e0a4dcc8b012d2946deda925b726ecdfd3693ebc2988543f07a0c20d7170111269d560b27d6d0249202d37e58795ca01dd4d4ce43273298f54f191cfd840afb5e727f8b", 0xea}], 0x9, 0x4e, 0x5) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) (async) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c4630086180"}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x25}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0xd}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001b00)={'ip6gretap0\x00', @local}) 2.517362934s ago: executing program 3 (id=5857): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x5, &(0x7f0000000240)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0x7, 0xc, 0xfffffffffffffffc}, @map_fd={0x18, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xeb97}], &(0x7f0000000280)='syzkaller\x00', 0x81, 0x9e, &(0x7f00000002c0)=""/158, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0x1], &(0x7f0000000540)=[{0x0, 0x3, 0x7, 0x3}], 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000640)={r0, r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000400000004000000020000000000cfe5460000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.350804766s ago: executing program 3 (id=5858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x11, 0x0, {0x7, @struct={0x2, 0xf54d}, 0x0, 0x0, 0x1, 0x401, 0x8, 0x10, 0x10, @struct={0x7, 0x8}, 0x9b68acf, 0x4, [0x6, 0x1, 0x8, 0xffffffff, 0x9]}, {0x642, @usage=0x10001, 0x0, 0x7, 0xfffffffffffffff3, 0x9, 0x10001, 0xffffffffffff4a6c, 0x10, @usage=0xd5, 0x8, 0x8, [0x548, 0x800, 0x6, 0x5, 0x2, 0x800]}, {0x3, @usage=0x2, r2, 0xfffffffffffffffb, 0x2, 0x5, 0x28fc, 0x2, 0xc, @struct={0x9, 0xe}, 0x8, 0x3, [0x6, 0x20000000000, 0x7f, 0x6, 0xc0000, 0x80000001]}, {0x4, 0x101, 0x5}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8}, 0x48) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000c00)={0x0, 0x5, {0x8001, @usage=0x81, r3, 0x25e5adf8, 0xd, 0x1, 0x3ac, 0x80000001, 0x4c9, @usage=0x81, 0x3, 0x985, [0x7, 0x1ff, 0x8, 0x8000000000000001, 0x9, 0xa76]}, {0x8, @usage=0xc44, 0x0, 0x3, 0x7f95, 0x80000000, 0x7fffffff, 0x1ce, 0x4, @usage=0x8000000000000001, 0x7, 0xfffffffb, [0x800, 0xa49, 0x5, 0x0, 0x47e45e91, 0xe]}, {0x200, @usage=0x60000, r4, 0xd2, 0xac6, 0xbd, 0xda, 0xcdf5, 0x10, @usage=0x200, 0x5, 0x28b7, [0x7, 0x5, 0x5, 0xc, 0x100000001, 0xfffffffffffffffe]}, {0xf0b, 0x10001, 0x6}}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000026c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "7209b7ddc47061"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000036c0)={{0x0, 0x1, 0xfffffffffffff801, 0x100, 0xffffffffffff0001, 0x4, 0x1, 0xfff, 0xfffffff7, 0x4, 0x8, 0x6, 0x7f, 0x2, 0x19}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000046c0)={r8, r9, "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", "6c248828cfc253796fb651960d08d219bfce453e1fc61ed54935117cca5dba5be3e6f6a025899c87e530a73f36bb7371c9d49c077a2212b63ce24f0068c1e38d99602e81ad726bd65b8830ef4905315943c885665e753776978f8ca8e00763a8035e51b8620295c0383250b07b14bf5a8fdf605495541a749232ef779b66a28c5866a36a52f94c5155ddefd411e1d31cb287bd51a00be9ef7cdd55b9d0a3619393e19f6a5114011d9312f6db10afe954bb5e29c81fa88064ce0861165cdbe5c30d78eecd1a090905df3a781e8abe3518c16c0c85691d355f51a4cedd38641cd9d4e3fd464f5bee17f36f485aa7cea2c9d7c7fe6489d12761c68d7eb1e93dfd64486a2027939ccf8d119bd9862f49e35dd8c460de248f3931a84b3a694e27ff98dca654704f192b5f092b0e4923f9d8a99db62ec854baa3af4f77385c08aaf66ec7cba27534dc9c223ffb7eefc8a0d5ae641cdbd86c14a109b500f71adf019d006bc5a6a021d4e94647d8ee1323b4e5c9663cd4b582983dbcc99c870e2e690b3dfa0094b8249fcab7b142721712cea78cfd2df7a0a8ff4c3a1adedf24dff3fce7d3bcc89578d3b66f82abd0a8be2a90676080a4c8fde24cf0fa6c01e11b95ae12e206c7b999c288a90637639130ef5fc6689491963c58ba2d2904c49c267e0ffad71e05917e818c8f95b17845d05d9e7c4146b716d8235f3d3382372d75bc6ad72019c1e1dea40b05f5b4b82df5735d0b1466aca454c46d98897b98e7c3519de34ff38cc721251953366a4c7736f20010e473c90a25a07d7c9555045279e319c2e392dfd5983ca1dc3ff38244af636065c647dc16a6e530a5ae70549dd96de241d2ed45ab9bbf8d11bf07960422b21a5dceb003c66640a9337b5855b871de0fc8af5dddf93f1f2022ec71dcbdc9a2dad51196070edb3755069a0042dbd9f55c41ec2baea51213d6a8c34ace292a114c3faf5922260aaf494dfe0e53b1af21d394c5b23807cb93a384224a1c7df6daf03ef1435a5c0eb4371adcf6aefef8d27bb72d0bffe49089a9100b19d8d67df99bc181956fa59d6870096deb6a49e831f0315ee0b0082ada40f3502a5d47dc5f1026354ae1e18a5f08da0d56ca1409db376b830234c7ad5eca4dd2029a23a6f86a5f505c78f5e557846bf7054784dc52cbd4f3e2b9186614b871ebddb0ac211cadf18ae2f768a6c09d6869bea56c82adc7a8cfe66e70b37573414088f684e6bdcaba0633cc6a3bd5f1365cf971e52b224bf703232152df91a0b35e8aa178b14988ac7fde2531b4e3ce6f9a25cee568c011a2a0b40b3ceb7759940218f00b7baea4c15ec8041bb9b41c8ba8ba65ae2ac711b80455f944faf4f59026ed21776594ea39d19968bb9f08506d21a9584be70117ea3e86fb7ffcd86ce85d4f0ec0cd9f5e78e424aba7e4dcc4c4eeeb3eb7c97ae06f7d4a2ae77853d7f2b43d932873789851b103a9aeeb76cb3a5f510b79dd8b71f32dfc037ba313090f1170e7fb0468a19f001598701f688bf351979ec0a2b5f2427d55eef77771e7191c704a17e17acf0d1aabf8923bc551ecf4220b25688cf3cd0b4bc4d60db2c5921c21eb9be0dfb8db0f7b8bc335210efdbdd96fbad584a01aae92faed8f552828a0a871a7d72c322f6bcd2e47f25d0e350963dd1b5ccb0c6c3f5eb3be6e55bf0e631d697d49c926d7e97dcbb1211b1d080557b5ca785eef76afa373a0da47c5db923fbf88604524e069081b6084a42771e97ca59255755d9a96ae93a8dbbf2a3cdffe6722edc1d729814694d7b651df06e89f2be7b629e14ba493cabebbba84870ebc1568c916ba8fc8a0713596c1a1d60008ef4349460d5e04ea0a74418efbee857ccf0153cdc9633687591230da2ee606c06ee0cd7f1fceabfffa28fac978960c296e1cba3e7774d7ecfb8b5fe77a540487b93248d2ab2eedcbb3236d7cb9a116526ae88578b32817ed2c4f35158cd2e8e736f476184a3cdd43423821ff6ee1ff57fc16b240e3f0772688df4513c01f2de72d4ef9a300251225e6945baacef913b90ffe3709bc964e36c75a7f0bbe29cc0889eb2b1071f6be58ee7f27955d5d90fcdb9c874219f6a97b0eaf75cc7e22d50324ebaaab3d28038a5afbf2255786fb8bf457dcde22dd78bce0488ba92ec462ade4d0e2fe6377de8d82804f10e6e11fd9aaa7955aeb3f13a9ae8472d8462d42736b4030dacfbee5c2e46b298c52c7c3227f55d83480def86da6aa7d92fb1c98dec7b6036bb808e9320755ea9dc28b3514813c802bf804f357a6de05be8d67824be138979badf4be02d474df36da2f9298af2dabe1245d31967a9f9a38b719f321cb4773f76ce0251b68d0623e259d43d0e23b5d17b84b5176b462a1acf2bf799e189fcca5836046651dff512c2ddd8f78ff0fc8c9b01bd10bb8215aac96c31c1ede778b2bd6c7e2120dd40c449dda4ab8a369cbe4ec8171491c23a036921b3700b6b120285dc788a4699e049ef41ecb47aafc18dcdba8f532d14d59005a60e9d9a65023e84a613c2b7a4e9e4bb891e2cb2b2d9908d64df5a93fa49c6c18eb39d4a3220685d19ae3874a89cc38b4d86c02fbcb8555ba38c70122691051fe3c4469b5d5ca36ce168d8c158169a8cedb1bff00b577da95394e7e0abea7caa3ab2b61fb376561779d97bd1662988a459c2497b3aa4e512b76952f376b36800cdb3781dcf974b94028483b0bbc2e95273d95c2221e153d5aa2687f2d99aa91242c5eb2b0afba7ce5634a4c9faf2b1943ffe8e7bad2dd43195b4d42f17ce7cc80326449ab48e174f89ee7842e259e144ead15860764f03e54eeb40e6242ea981786c181ad19811620cac5b4823d220e179273341669f20319d4ee1184aeb2c4be2206f895a4a01902eecedbc72df828f96d19f9d7de59df7f98980386f95a5c74849a6bb7563e0bfe94a6e4296639facaa8e714712a651f7b7b16f136bf554a5a8adc91eea677c37ebec221fd148e67d7fac739c191b3ed1346d26ed4a12b986d3088ffcfe3b4db5273c6d1fe59ce8eacc384d608919251a08a474641893adeb788108fd7e4851e101039799b60f88848d0feb7d7b52ef4983995efe5884e2ab2bf1b5d78258ace4544d56fd418366d1c5a40dfee31dbb380d9bbf12aa46db880c54bca1f516e8b38d85d22b6d0b3c2fb12cb1476572906d229356124c85e562d41cee0ce7b5b5c1e79091ddfc48110365a57a4bc0a3139617240791723ea15ce90308bd3e20e7564603a0c11d6dadfa14d9b05075e6e5134d3f986fd22da8feb158cf871620930a761aba5d7923ef836bf3d3ed5823a2a8c70ddc207c99ccc1501a89ec69153c3e7041f808f3a5d4a6825d2878e0682536c73f1946f5614e9c8c1d36e89e47afd4e50724dbd72ece32a4ffcb32c69ec8b29481d06759bc6e779e59827f80e1664ec831191cf0dc1eeb7238a0c5a5c3a3f56d7125be3abb1f6c58c39b38ca2ebfc0a25c5ab704f311d05cdbe1c13f0ff1f0794c2df2d7ce2da1948bb3c17549253511797d153c32fb354a55cff746ea39902cd08948dec51c09e3394a70eeb106a2e1b65401d525e8593c203f1ffe3b8b6ff86f937b78a56a63c940c08547786179dabbedf28423d2e15b778eb5eb12628d0b2a22b89f9a25a120697474de9d366ef1c5828ac9c36283c009b935d61a05e1e5c700de8c12b557ef840ea5756995bf4512560ff2ad8b45e8936bf07b8956d97d615a32e42ff1b6c6e1e672c2e1f84413a4fb9c2677e0e56e2baab4de3c3fa95e753f94717ce6068c4bab30a6a74eb1fd02c466caf95909061fa09525e2e91df0375485025571c7894b579b2d120b8fe19f80f70721389f18dc5fb453f8fff43dd94994d9be89e4e8dcc8e00c7cc5293ce65c139fc0a8e9d9e1ec4cea9a533dd985dd85a8da1e63b643434e3f98cb3aa3b47a3f5867599919cea6b5c3cdfa8a3c40a4bc96c7c1044ae207c1689b1fefad4f6cd50eef772007d73fa39302b07f0589ce88496fabef46081983ccc3c5e002dd559fb3cbc9e6ddd1a0e9e77efa590247d7cf10bf263690ae06a0eb8bebfd7287a4fd269d161afd69dfdf48890facd35cb3d83ea3fa7458f1509a1152efacdd2e227790921a169077325c69b7f54573ac04ddb9cf66923e3db2b0d57146b5b418d2a8b850f0520a5038f364595005cfd923310097bab9239ffc09ba6211696fe830583ae6fc0414a1c437f34258c2cf0ae6865845bdc4ac4fb4fdfc03dde4fb62a510c397f12ed4a41f9f7ec53f59ab1d4db5cffe3847436c616d2e40e91b7ef292de61c7c590ac6708e901e39e38abc972a4fa77c3b26cb4f770d4839eace68707a9afa8981de03cb336c16a9b993bdb4234a32c911babcba8a4ecc837c1f872af0abb3494f63505ff606e0663f2b09c262464cfd5ad2018428f9afe11ec0f5659bcf4f9085266dfcdf4dc76fbd46d05f31d928100ef6bbdef1757b9f2ea68c14f47fc018555ebd7a73bbc73effad70fd6b201c6333a7014ec00f99026f70b0636de911c43369bf76388daeb532c7cb4f75ecb7db8efe608f5ae6d0a08a51825e925de9beda34c8f807793113b9ecaca2b14782cadb2f5fb249719eb866c67ba970cfe492b2bf056f4933a3bad3c5a2af7269da9ae7d7a8fe4c636bd872c6c6f8418bf29073e56e3f19750176ed952c377a523e38f5eec03f2260b1d638fc83cc079c63306ec8ecc694b79d477dc76202bd168399d70fab92cbfb38683d88f97fed1f54c167afd8808834f4ff60157d60847d4d9a85b4978543ef9393107b73acb7e9bce68ef6bc6de165d85885e3cb412f074c60d53447e91269ffc569923c9eaf20d19b108b6ab61721a08290864374998a7a7f0cb5e055b740f8263f2d82c9f9a8dcbbd111c20fed38ff3f9393ed2c5478db752e3e4a2985f14b6e8d5b411a21dfbe188a649b5e84e377ca6dbf1cbfe17d9d90036949d29a1ca72be18cced31cba692434e3a28579e4f1f210a187c8840cc64db6959a307da0480e151452cd3bf779e0ba8dda373591f96c347058f9084b079d23ace52fdabf97170dec1832ba29c2ff79400a03bf57853d0228aaeb328cf83f7b32c43ca554f47b9734f2b40ef69695862251a489b84e2e03ee5dd4dced03d8369d76ef536d4285b6503faa47a1f9a7a54c2526166128761ecc129dfc5e65f70d5946347b299ec327ee5345dc2a90ce3fd9ff7a562913b958274660e9e2e9e256cd45f405e3a41da117b133204cd4c9e25d15d65c97a6375248efe41046a5378dd295eb089d191e0089f989fca409619c9c3a2a774c6008b45eba73f44aefcc0f46428dd3ff83a571fad3103ea295f2eec0e4bd8e625aa7d852893af4391e9dcc3532639512e76062c004f4b296d1f9b7750cd3be2c567bd6e063"}) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r7, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r10, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) syz_emit_ethernet(0x107, &(0x7f0000000000)={@random="e90c610faca2", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e28, 0xe5, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}, "4020bcabefe6e7b24503fcee1e50e6c4939b13630026251d6924230dcf78bda25331131283ec22538273f644b506c05796814d3f4331ef1ab1ff235977eee111ffb1c21e296a06e71c6cbfc56cbc225f47b40142a6668aa7624e1a4eb740b642d38a4ad7f11408634bddd1daf7f6c5c084e4605e3725f97d3729a02b21eadc62947677de8075ce7039921b43555e9e3cb406e7fa7f5c3d89cf31af95e28c34862771203a789e97121d03ab90c2a413b356b9717d254590fbf71b0b3a29b6eb18463604a53be7a41fcabddd8b31f354085e9767cfa4"}}}}}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="180000000214000e00"/25], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) 2.001139604s ago: executing program 2 (id=5859): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=@ipv6_getroute={0x1044, 0x1a, 0x800, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x9e, 0xfd, 0x2, 0xfe, 0x8, 0x500}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x0, r1}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1044}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x81c) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=@ipv6_getroute={0x1044, 0x1a, 0x800, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x9e, 0xfd, 0x2, 0xfe, 0x8, 0x500}, [@RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x0, r1}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1044}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x81c) (async) 1.912871676s ago: executing program 2 (id=5860): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x4) (async) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x48, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x38, 0xf2, 0x0, 0x1, [@nested={0x34, 0x66, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@loopback}, @nested={0x25, 0x24, 0x0, 0x1, [@generic="e660fc12a811408336accc7f8b4b1ebab7450b12dd1c2503f1a7679e9b396f411b"]}]}]}]}, 0x48}, {&(0x7f00000004c0)=ANY=[@ANYBLOB="1000000026000f022dbd7000ffdbdf25a7c2748c0a670da23772134d43a22bf3be3a3c14002b503d5131bf59431657fbda48535146fd5e7b1582d5798f620c38fab7aff2a5dfee3cc824ba47387379af9691cc6ebfed5b9c60a32d795c522242ea8e254342299c3493869bf9e3bf712f26ecdaa509fddbde8bf4ebe03f00"/139], 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 263.723411ms ago: executing program 1 (id=5861): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/317], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) sendmsg$nl_crypto(r0, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)=@upd={0x108, 0x12, 0x200, 0x70bd26, 0x25dfdbfe, {{'drbg_pr_sha256\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x2d8}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0xff) ioctl$sock_proto_private(r4, 0x89e3, &(0x7f0000000100)="92e2b635d5b7f89cb8f29cf6a5c869d232fc29cbd0689603ce3ead1c9841247f20b7cf24f1ff6c39ad28fe5feaa0759d13a6d5f7bde28de139207c7378591c471c3839c4983433df045f") 263.317368ms ago: executing program 3 (id=5862): splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1, 0x0, 0x20000000) unshare(0x64000600) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 235.7774ms ago: executing program 0 (id=5863): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x10, 0x7, 0xfffffff8, 0x1, {{0x18, 0x4, 0x2, 0x14, 0x60, 0x64, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xd1, 0x1, 0x1, [{@multicast1, 0x8}, {@local, 0xb2}, {@local, 0xa75}, {@multicast2, 0x44}, {@broadcast, 0x9}, {@loopback, 0xfffff06b}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5}]}, @generic={0x44, 0xc, "019e2958853c84d826ec"}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x8000000000000003}, 0x18) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0037ec4e79f4913fa572762f8274000000800007001c0012800c0001006d6163766c616e000c00028008000300010000000800050039e76e489a79d61317f8e0f1061753047f8691143cdcb36474774de138578e7eeacfd2097ad23ba0add15842381bcf7efbe1f956ca22e957126c64a2d96b8905df5422731a17c6ec5207cc99693c038adca29200e93b", @ANYRES32=r13, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1ac, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x11}, 0x200040c1) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r15 = socket$inet6_udp(0xa, 0x2, 0x0) r16 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r15, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) connect$pppl2tp(r16, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r15, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 157.401438ms ago: executing program 4 (id=5864): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000be700000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="000000000200000000"], 0x50) sendto$inet6(r0, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) close(0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x24, 0x3, 0x92, 0x1, 0x3ff]}, &(0x7f0000000240)=0x54) r8 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r8, 0x0, &(0x7f0000000040), 0x80000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=5865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) accept4$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000edd45b36b8b7b4711787520f0010001ffffcfffffffddbdf25000000001df8f6e0c2965a5277aac2799c38a54d3680cca2e29dba98e5ad08ac547486db55698fb5b3d1326f3d2a744b3076dc3dfdbb088b2891283cd3a64f72b90225eaefab42c50d73316c7b210922ee61faeed7fcda6985936d59b4e45d33f5c627ab44e680a3079dc27b2eaaedcbd23bacf29305186b41fce5803835f9d0cf164a82e31a0d0be8fd5f422b535fa34bb2aab4417d1ecb0b4c3993776cad4ac543d15b6e246fbf06a77c5fedab43d587d5eb35ffa8b99dd2a5", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428060003002e50000008000a00", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): .511259][T20274] tipc: Enabled bearer , priority 10 [ 463.517768][T20274] tipc: Enabling of bearer rejected, already enabled [ 463.562366][T20267] macvtap2: entered promiscuous mode [ 463.587036][T20267] macvtap2: entered allmulticast mode [ 463.633443][T20274] tipc: Enabling of bearer rejected, already enabled [ 463.663259][T20268] macvtap2: entered promiscuous mode [ 463.672338][T20268] macvtap2: entered allmulticast mode [ 463.841272][T20297] sock: sock_timestamping_bind_phc: sock not bind to device [ 463.862857][T20297] validate_nla: 3 callbacks suppressed [ 463.862877][T20297] netlink: 'syz.1.3980': attribute type 10 has an invalid length. [ 463.896309][T20297] macvlan1: entered promiscuous mode [ 463.908768][T20297] macvlan1: entered allmulticast mode [ 463.923534][T20297] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 463.946875][T20297] hsr0: entered promiscuous mode [ 464.212473][T20305] netlink: 'syz.2.3985': attribute type 11 has an invalid length. [ 464.235805][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.251369][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.489170][T20320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.669298][ T9] tipc: Node number set to 3758096385 [ 465.044878][T20345] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 465.053652][T20345] netlink: 'syz.3.3998': attribute type 4 has an invalid length. [ 465.368455][T20359] netlink: 'syz.0.3996': attribute type 1 has an invalid length. [ 467.091731][T20350] netlink: 'syz.3.3998': attribute type 23 has an invalid length. [ 467.332792][T20367] __nla_validate_parse: 9 callbacks suppressed [ 467.332813][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 467.578348][T20388] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4007'. [ 467.602312][T20388] netlink: Conntrack attr has 3 unknown bytes [ 467.661385][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 467.773972][T20394] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4010'. [ 467.808376][T20394] netlink: 'syz.0.4010': attribute type 64 has an invalid length. [ 467.932570][T20398] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4009'. [ 467.964122][T20398] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4009'. [ 468.107149][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'. [ 468.232550][T20417] netlink: 'syz.3.4017': attribute type 29 has an invalid length. [ 468.247726][T20428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4019'. [ 468.274952][T20429] netlink: 'syz.3.4017': attribute type 29 has an invalid length. [ 468.402741][T20434] »»»»»»: entered allmulticast mode [ 468.526355][T20432] ip6erspan1: entered allmulticast mode [ 468.659804][T20448] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 468.716319][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 468.774500][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4022'. [ 469.174425][T20443] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 469.529768][T20463] netlink: 'syz.1.4029': attribute type 4 has an invalid length. [ 469.562705][T20459] syzkaller0: entered promiscuous mode [ 469.583561][T20459] syzkaller0: entered allmulticast mode [ 469.652154][T20463] IPv6: sit2: Disabled Multicast RS [ 469.853662][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 470.686770][T20527] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 470.705636][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803228b400: rx timeout, send abort [ 470.735529][T20529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.759003][T20529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.779569][T20529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.810469][T20529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.113476][T20545] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 471.205890][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803228ac00: rx timeout, send abort [ 471.216525][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803228b400: abort rx timeout. Force session deactivation [ 471.300153][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.345149][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.361028][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.379908][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.405385][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.428876][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.447581][T20555] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 471.506495][T20566] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 471.714332][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803228ac00: abort rx timeout. Force session deactivation [ 472.254563][T20612] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 472.296392][T20612] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 472.345704][T20579] __nla_validate_parse: 15 callbacks suppressed [ 472.345723][T20579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4068'. [ 472.788771][T20633] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 472.813022][T20636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4085'. [ 472.823526][T20636] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4085'. [ 473.278175][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 475.456573][T20622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.676523][T20671] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4096'. [ 475.706108][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4096'. [ 475.745648][T20673] validate_nla: 62 callbacks suppressed [ 475.745668][T20673] netlink: 'syz.4.4096': attribute type 7 has an invalid length. [ 475.797518][T20673] netlink: 'syz.4.4096': attribute type 8 has an invalid length. [ 475.814247][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4096'. [ 475.837436][T20682] xfrm1: entered allmulticast mode [ 475.976956][T20690] netlink: 'syz.2.4100': attribute type 11 has an invalid length. [ 475.987231][T20690] netlink: 'syz.2.4100': attribute type 4 has an invalid length. [ 475.995501][T20690] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.4100'. [ 476.011339][T20691] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 476.128654][T20691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.151296][T20697] ip_vti0: entered promiscuous mode [ 476.212115][T20704] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 476.229570][T20704] bond9 (unregistering): Released all slaves [ 476.286521][T20710] netlink: 'syz.3.4106': attribute type 1 has an invalid length. [ 476.402169][T20713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4107'. [ 476.766677][T20737] veth0_macvtap: entered allmulticast mode [ 476.869620][T20742] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 476.895919][ T42] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 477.198575][T20757] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 477.202567][T20761] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 477.557939][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4128'. [ 478.207799][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 478.240566][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4135'. [ 478.317993][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4137'. [ 478.659081][T20815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4135'. [ 478.714296][T20815] nbd: device at index 64 is going down [ 479.052707][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.279953][T20857] netlink: 'syz.1.4142': attribute type 24 has an invalid length. [ 479.640893][T20861] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4145'. [ 479.704189][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.755259][T20906] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4153'. [ 481.008340][T20917] syzkaller1: entered promiscuous mode [ 481.020706][T20917] syzkaller1: entered allmulticast mode [ 481.488443][T20932] Cannot find map_set index 135 as target [ 481.519235][T20932] sock: sock_set_timeout: `syz.1.4158' (pid 20932) tries to set negative timeout [ 481.616518][T20934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4158'. [ 481.996060][T20939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4159'. [ 482.224495][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.957773][T20877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.222699][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4163'. [ 483.238522][T20952] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 483.372179][T20957] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4166'. [ 483.447634][T20963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4168'. [ 483.515357][T20965] x_tables: duplicate underflow at hook 1 [ 483.672708][T20968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'. [ 483.704027][T20973] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 483.723455][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4172'. [ 484.117631][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 484.174992][T20992] netlink: set zone limit has 4 unknown bytes [ 484.179039][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 484.269046][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4180'. [ 484.306415][T21005] netlink: 'syz.0.4180': attribute type 33 has an invalid length. [ 484.386294][T21013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4182'. [ 484.434877][T21005] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 484.466043][T21005] bond8 (unregistering): Released all slaves [ 484.734286][T21017] syzkaller1: entered promiscuous mode [ 484.748709][T21017] syzkaller1: entered allmulticast mode [ 485.128320][T21055] netlink: 'syz.1.4192': attribute type 5 has an invalid length. [ 485.148267][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 485.406772][T21067] netlink: 'syz.3.4196': attribute type 1 has an invalid length. [ 485.544487][T21067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.553571][T21077] syzkaller0: entered promiscuous mode [ 485.559163][T21077] syzkaller0: entered allmulticast mode [ 485.934446][T21085] tipc: Failed to remove unknown binding: 66,0,0/0:828724416/828724417 [ 485.969874][T21085] tipc: Failed to remove unknown binding: 66,0,0/0:828724416/828724417 [ 488.144165][ T5649] Bluetooth: hci2: command 0x0406 tx timeout [ 501.425185][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.434055][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 514.220602][T12828] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.860712][ T5649] Bluetooth: hci1: command 0x0406 tx timeout [ 539.340472][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 546.231598][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.422106][T21142] gretap0: entered promiscuous mode [ 552.444855][T21142] vlan3: entered promiscuous mode [ 552.538748][T21147] xt_hashlimit: size too large, truncated to 1048576 [ 552.612204][T21151] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 552.979640][T21167] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 553.074094][T21172] IPv6: sit1: Disabled Multicast RS [ 553.345855][T21189] netlink: 'syz.4.4222': attribute type 3 has an invalid length. [ 553.364586][T21189] syz_tun: refused to change device tx_queue_len [ 553.540003][T21204] IPVS: set_ctl: invalid protocol: 135 172.30.0.5:20001 [ 553.734195][T21215] IPVS: set_ctl: invalid protocol: 92 172.30.1.1:20002 [ 553.779937][T21215] Dead loop on virtual device ip6_vti0 (net 200), fix it urgently! [ 553.828964][T21223] __nla_validate_parse: 2 callbacks suppressed [ 553.828985][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4232'. [ 553.877770][T21223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4232'. [ 554.196720][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 554.282798][T21241] bond8: option xmit_hash_policy: invalid value (64) [ 554.299079][T21241] bond8 (unregistering): Released all slaves [ 554.345462][T21249] openvswitch: netlink: IPv6 tunnel dst address is zero [ 554.437361][T21253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.823797][T21274] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 562.864473][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.872859][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 578.223264][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.221287][T17335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.539901][T21284] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 612.629373][T21284] 8021q: adding VLAN 0 to HW filter on device bond9 [ 612.695634][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 612.756012][T21297] netlink: 'syz.4.4254': attribute type 39 has an invalid length. [ 612.844057][T21303] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 612.855503][T21303] netlink: 'syz.3.4256': attribute type 2 has an invalid length. [ 612.865402][T21303] netlink: 'syz.3.4256': attribute type 4 has an invalid length. [ 612.874043][T21303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4256'. [ 612.883872][T21303] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.891404][T21303] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.898636][T21303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.975386][T21313] netlink: 'syz.3.4258': attribute type 1 has an invalid length. [ 613.142100][T21325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4262'. [ 613.433244][T21333] openvswitch: netlink: Missing key (keys=40, expected=100) [ 613.795676][T21350] FAULT_INJECTION: forcing a failure. [ 613.795676][T21350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.842033][T21350] CPU: 0 UID: 0 PID: 21350 Comm: syz.0.4272 Not tainted syzkaller #0 PREEMPT(full) [ 613.842064][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.842076][T21350] Call Trace: [ 613.842085][T21350] [ 613.842102][T21350] dump_stack_lvl+0xe8/0x150 [ 613.842134][T21350] should_fail_ex+0x412/0x560 [ 613.842164][T21350] _copy_from_user+0x2d/0xb0 [ 613.842192][T21350] ___sys_sendmsg+0x1c6/0x360 [ 613.842218][T21350] ? __lock_acquire+0x6b5/0x2cf0 [ 613.842242][T21350] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.842300][T21350] ? __fget_files+0x2a/0x420 [ 613.842320][T21350] ? __fget_files+0x3a0/0x420 [ 613.842351][T21350] __x64_sys_sendmsg+0x1bd/0x2a0 [ 613.842379][T21350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.842417][T21350] ? __pfx_ksys_write+0x10/0x10 [ 613.842453][T21350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.842476][T21350] do_syscall_64+0x15f/0xf80 [ 613.842500][T21350] ? trace_irq_disable+0x3b/0x140 [ 613.842532][T21350] ? clear_bhb_loop+0x40/0x90 [ 613.842558][T21350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.842578][T21350] RIP: 0033:0x7fd6d5f9ce59 [ 613.842598][T21350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.842615][T21350] RSP: 002b:00007fd6d6e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.842637][T21350] RAX: ffffffffffffffda RBX: 00007fd6d6215fa0 RCX: 00007fd6d5f9ce59 [ 613.842651][T21350] RDX: 0000000000008004 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 613.842664][T21350] RBP: 00007fd6d6e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 613.842676][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.842688][T21350] R13: 00007fd6d6216038 R14: 00007fd6d6215fa0 R15: 00007fffdf58f948 [ 613.842732][T21350] [ 613.895196][T21356] netem: change failed [ 613.963391][T21358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'. [ 614.249926][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.372813][T21379] netlink: 'syz.1.4280': attribute type 11 has an invalid length. [ 614.689841][T21400] FAULT_INJECTION: forcing a failure. [ 614.689841][T21400] name failslab, interval 1, probability 0, space 0, times 0 [ 614.705919][T21399] veth3: entered promiscuous mode [ 614.711572][T21399] veth3: entered allmulticast mode [ 614.721187][T21400] CPU: 0 UID: 0 PID: 21400 Comm: syz.4.4286 Not tainted syzkaller #0 PREEMPT(full) [ 614.721215][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.721227][T21400] Call Trace: [ 614.721235][T21400] [ 614.721250][T21400] dump_stack_lvl+0xe8/0x150 [ 614.721279][T21400] should_fail_ex+0x412/0x560 [ 614.721313][T21400] should_failslab+0xa8/0x100 [ 614.721346][T21400] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 614.721373][T21400] ? __alloc_skb+0x186/0x7d0 [ 614.721400][T21400] ? __alloc_skb+0x1d0/0x7d0 [ 614.721425][T21400] ? __local_bh_enable_ip+0xd0/0x130 [ 614.721453][T21400] __alloc_skb+0x1d0/0x7d0 [ 614.721485][T21400] netlink_sendmsg+0x5d4/0xb40 [ 614.721525][T21400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.721558][T21400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.721588][T21400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.721618][T21400] ____sys_sendmsg+0x972/0x9f0 [ 614.721647][T21400] ? __might_fault+0xaf/0x130 [ 614.721680][T21400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.721721][T21400] ? import_iovec+0x73/0xa0 [ 614.721753][T21400] ___sys_sendmsg+0x2a5/0x360 [ 614.721780][T21400] ? __lock_acquire+0x6b5/0x2cf0 [ 614.721807][T21400] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.721873][T21400] ? __fget_files+0x2a/0x420 [ 614.721898][T21400] ? __fget_files+0x3a0/0x420 [ 614.721933][T21400] __x64_sys_sendmsg+0x1bd/0x2a0 [ 614.721967][T21400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.722008][T21400] ? __pfx_ksys_write+0x10/0x10 [ 614.722045][T21400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.722076][T21400] do_syscall_64+0x15f/0xf80 [ 614.722094][T21400] ? trace_irq_disable+0x3b/0x140 [ 614.722125][T21400] ? clear_bhb_loop+0x40/0x90 [ 614.722150][T21400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.722170][T21400] RIP: 0033:0x7fa43259ce59 [ 614.722190][T21400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.722207][T21400] RSP: 002b:00007fa433415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.722229][T21400] RAX: ffffffffffffffda RBX: 00007fa432815fa0 RCX: 00007fa43259ce59 [ 614.722244][T21400] RDX: 0000000000008004 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 614.722256][T21400] RBP: 00007fa433415090 R08: 0000000000000000 R09: 0000000000000000 [ 614.722268][T21400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.722280][T21400] R13: 00007fa432816038 R14: 00007fa432815fa0 R15: 00007ffe05cba4d8 [ 614.722314][T21400] [ 615.020878][T21403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4288'. [ 615.323638][T21414] bond8: option all_slaves_active: invalid value (64) [ 615.351183][T21408] IPv6: NLM_F_CREATE should be specified when creating new route [ 615.372852][T21408] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4289'. [ 615.373130][T21414] bond8 (unregistering): Released all slaves [ 615.446228][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.222765][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 616.335544][T21453] Bluetooth: MGMT ver 1.23 [ 616.356645][T21453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4300'. [ 616.373771][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 616.924557][T21488] veth0: entered promiscuous mode [ 617.142370][T21483] veth0: left promiscuous mode [ 617.280602][T21493] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4309'. [ 617.326213][T21493] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4309'. [ 617.763657][T21515] __nla_validate_parse: 6 callbacks suppressed [ 617.763678][T21515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4314'. [ 617.885960][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 617.896665][T21521] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4316'. [ 618.488911][T21546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4324'. [ 618.506661][T21549] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4322'. [ 618.543140][T21554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4325'. [ 618.556377][T21546] openvswitch: netlink: Missing valid actions attribute. [ 618.590798][T21546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.932186][T21562] syzkaller0: entered promiscuous mode [ 618.937923][T21562] syzkaller0: entered allmulticast mode [ 618.966548][T21567] FAULT_INJECTION: forcing a failure. [ 618.966548][T21567] name failslab, interval 1, probability 0, space 0, times 0 [ 618.994349][T21558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4326'. [ 619.011975][T21567] CPU: 0 UID: 0 PID: 21567 Comm: syz.2.4329 Not tainted syzkaller #0 PREEMPT(full) [ 619.012011][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.012023][T21567] Call Trace: [ 619.012032][T21567] [ 619.012040][T21567] dump_stack_lvl+0xe8/0x150 [ 619.012070][T21567] should_fail_ex+0x412/0x560 [ 619.012104][T21567] should_failslab+0xa8/0x100 [ 619.012136][T21567] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 619.012166][T21567] ? __alloc_skb+0x1d0/0x7d0 [ 619.012192][T21567] ? __local_bh_enable_ip+0xd0/0x130 [ 619.012218][T21567] __alloc_skb+0x1d0/0x7d0 [ 619.012245][T21567] ? netlink_ack_tlv_len+0x6c/0x210 [ 619.012277][T21567] netlink_ack+0x146/0xa50 [ 619.012304][T21567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.012325][T21567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 619.012351][T21567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 619.012379][T21567] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.012419][T21567] netlink_rcv_skb+0x2b6/0x4b0 [ 619.012450][T21567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.012474][T21567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.012519][T21567] ? down_read+0x270/0x2e0 [ 619.012539][T21567] ? genl_rcv+0xd/0x40 [ 619.012563][T21567] genl_rcv+0x28/0x40 [ 619.012583][T21567] netlink_unicast+0x75c/0x8e0 [ 619.012621][T21567] netlink_sendmsg+0x813/0xb40 [ 619.012660][T21567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.012694][T21567] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.012725][T21567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.012755][T21567] ____sys_sendmsg+0x972/0x9f0 [ 619.012785][T21567] ? __might_fault+0xaf/0x130 [ 619.012818][T21567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.012868][T21567] ? import_iovec+0x73/0xa0 [ 619.012901][T21567] ___sys_sendmsg+0x2a5/0x360 [ 619.012930][T21567] ? __lock_acquire+0x6b5/0x2cf0 [ 619.012957][T21567] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.013038][T21567] ? __fget_files+0x2a/0x420 [ 619.013063][T21567] ? __fget_files+0x3a0/0x420 [ 619.013096][T21567] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.013129][T21567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.013168][T21567] ? __pfx_ksys_write+0x10/0x10 [ 619.013207][T21567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.013230][T21567] do_syscall_64+0x15f/0xf80 [ 619.013249][T21567] ? trace_irq_disable+0x3b/0x140 [ 619.013278][T21567] ? clear_bhb_loop+0x40/0x90 [ 619.013303][T21567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.013323][T21567] RIP: 0033:0x7feebe59ce59 [ 619.013343][T21567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.013360][T21567] RSP: 002b:00007feebc7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.013381][T21567] RAX: ffffffffffffffda RBX: 00007feebe815fa0 RCX: 00007feebe59ce59 [ 619.013395][T21567] RDX: 0000000000008004 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 619.013407][T21567] RBP: 00007feebc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 619.013419][T21567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.013430][T21567] R13: 00007feebe816038 R14: 00007feebe815fa0 R15: 00007ffee571f958 [ 619.013464][T21567] [ 620.258579][T21584] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.266856][ T5360] IPVS: starting estimator thread 0... [ 620.360805][T21586] IPVS: using max 48 ests per chain, 115200 per kthread [ 621.905447][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 622.097562][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4339'. [ 622.134770][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4339'. [ 622.169823][T21614] netlink: 'syz.3.4341': attribute type 29 has an invalid length. [ 622.481199][T21621] netlink: 'syz.1.4343': attribute type 10 has an invalid length. [ 622.706316][T21632] netlink: 'syz.3.4348': attribute type 1 has an invalid length. [ 622.975428][T21648] netlink: 'syz.2.4352': attribute type 11 has an invalid length. [ 623.312696][T21662] __nla_validate_parse: 5 callbacks suppressed [ 623.312724][T21662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4355'. [ 623.385340][T21662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4355'. [ 623.562893][T21662] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 623.717382][T21683] netlink: 'syz.4.4362': attribute type 1 has an invalid length. [ 623.725793][T21683] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4362'. [ 623.892724][T21690] netlink: 'syz.4.4364': attribute type 39 has an invalid length. [ 623.921365][T21693] ip6gre0: entered allmulticast mode [ 623.944453][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 624.304994][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.314102][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.716494][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 624.797586][T21728] xt_TCPMSS: Only works on TCP SYN packets [ 624.841385][T21730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.976892][T21735] netlink: 55946 bytes leftover after parsing attributes in process `syz.4.4375'. [ 625.002487][T21735] netlink: 'syz.4.4375': attribute type 4 has an invalid length. [ 625.147104][T21737] netlink: 'syz.1.4377': attribute type 1 has an invalid length. [ 625.614658][T21767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4386'. [ 625.693078][T21771] netlink: 'syz.0.4387': attribute type 29 has an invalid length. [ 625.727062][T21771] netlink: 'syz.0.4387': attribute type 29 has an invalid length. [ 625.786472][T21743] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 625.798149][T21771] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4387'. [ 625.950988][ T29] audit: type=1800 audit(1779741330.592:15): pid=21783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4389" name="memory.events" dev="tmpfs" ino=885 res=0 errno=0 [ 625.982853][T21784] syzkaller1: entered promiscuous mode [ 626.009839][T21784] syzkaller1: entered allmulticast mode [ 626.040590][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 626.068388][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 626.332234][T21782] bond8: entered promiscuous mode [ 626.338042][T21782] 8021q: adding VLAN 0 to HW filter on device bond8 [ 626.373022][T21799] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 626.463748][T21788] bond8: (slave bridge4): making interface the new active one [ 626.511484][T21788] bridge4: entered promiscuous mode [ 626.527247][T21788] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 626.636068][T21791] bond10: entered promiscuous mode [ 626.654421][T21791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 626.706902][T21797] bond10: (slave bridge3): making interface the new active one [ 626.715362][T21797] bridge3: entered promiscuous mode [ 626.724784][T21797] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 626.949455][T21818] bond6 (unregistering): Released all slaves [ 627.155490][T21837] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.203957][T21843] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 627.644450][T21868] syzkaller1: entered promiscuous mode [ 627.650119][T21868] syzkaller1: entered allmulticast mode [ 627.810601][T21871] validate_nla: 3 callbacks suppressed [ 627.810621][T21871] netlink: 'syz.2.4414': attribute type 8 has an invalid length. [ 627.917990][T21883] netlink: 'syz.0.4417': attribute type 1 has an invalid length. [ 628.103433][T21883] 8021q: adding VLAN 0 to HW filter on device bond9 [ 628.124673][T21894] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 628.348840][T21903] netlink: 'syz.2.4424': attribute type 1 has an invalid length. [ 628.391875][T21903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.414617][T21908] vlan0: entered promiscuous mode [ 628.437914][T21913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.806468][T21927] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 628.962367][T21949] netlink: 'syz.4.4437': attribute type 1 has an invalid length. [ 628.980785][T21949] __nla_validate_parse: 3 callbacks suppressed [ 628.980800][T21949] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4437'. [ 629.010943][T21949] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4437'. [ 629.042478][T21949] netlink: 'syz.4.4437': attribute type 1 has an invalid length. [ 629.084948][T21949] netlink: 618 bytes leftover after parsing attributes in process `syz.4.4437'. [ 629.225988][T21967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 629.246953][T21968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 629.316183][T21967] bond11: entered promiscuous mode [ 629.324712][T21967] 8021q: adding VLAN 0 to HW filter on device bond11 [ 629.615427][T21991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4448'. [ 629.689922][T21993] nbd: must specify a size in bytes for the device [ 630.086211][T22003] SET target dimension over the limit! [ 630.415851][T17335] smc: removing ib device syz1 [ 630.505807][T17335] smbdirect: ib_dev[syz1] removed [ 630.580943][ T1123] erspan0 (unregistering): left promiscuous mode [ 630.798984][ T1123] ve (unregistering): left promiscuous mode [ 630.961829][T22041] netlink: 'syz.2.4459': attribute type 1 has an invalid length. [ 631.014951][T22044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4459'. [ 631.277922][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 632.050037][ T1123] bond1 (unregistering): Released all slaves [ 632.083531][ T1123] team0: Port device bond2 removed [ 632.090577][ T1123] bond2 (unregistering): Released all slaves [ 632.168911][ T1123] bond3 (unregistering): Released all slaves [ 632.202284][ T1123] bond4 (unregistering): Released all slaves [ 632.313709][ T1123] bond0 (unregistering): Released all slaves [ 632.368688][ T1123] bond5 (unregistering): Released all slaves [ 632.414264][ T1123] bond6 (unregistering): Released all slaves [ 632.468032][ T5759] xfrm0 speed is unknown, defaulting to 1000 [ 632.479474][ T5759] syz1: Port: 1 Link DOWN [ 632.686650][T22041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.803224][T22049] bond4: (slave ip6gretap1): making interface the new active one [ 632.813113][T22049] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 633.086797][T22075] sctp: [Deprecated]: syz.4.4467 (pid 22075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.086797][T22075] Use struct sctp_sack_info instead [ 633.146143][T22080] netlink: 'syz.0.4468': attribute type 9 has an invalid length. [ 633.381650][T22090] SET target dimension over the limit! [ 633.425862][T22078] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 633.578949][ T5360] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 633.595798][T22098] Cannot find del_set index 4 as target [ 633.626655][T22098] Cannot find del_set index 4 as target [ 633.810916][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4474'. [ 633.847986][T22108] openvswitch: netlink: EtherType 50a is less than min 600 [ 633.885545][T22108] xt_l2tp: missing protocol rule (udp|l2tpip) [ 633.931874][T22113] syzkaller1: entered promiscuous mode [ 633.966095][T22113] syzkaller1: entered allmulticast mode [ 634.118279][T22122] x_tables: duplicate underflow at hook 1 [ 634.223129][ T1123] : left promiscuous mode [ 634.344186][T22125] syzkaller0: entered promiscuous mode [ 634.358934][T22125] syzkaller0: entered allmulticast mode [ 634.393973][ T1123] tipc: Disabling bearer [ 634.410074][ T1123] tipc: Left network mode [ 634.453189][ T1123] IPVS: stopping master sync thread 10574 ... [ 634.827840][T22156] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4487'. [ 634.851985][T22156] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 635.035302][T22163] x_tables: duplicate underflow at hook 3 [ 635.066003][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4489'. [ 635.097869][T22164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4490'. [ 635.192512][T22164] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.235393][T22170] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 635.270352][T22168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4490'. [ 635.575826][T22170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.623104][T22170] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 635.708589][T22189] netlink: 'syz.1.4497': attribute type 12 has an invalid length. [ 635.738921][T22189] netlink: 'syz.1.4497': attribute type 29 has an invalid length. [ 635.768369][T22189] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4497'. [ 635.782045][T22201] sctp: [Deprecated]: syz.4.4498 (pid 22201) Use of int in maxseg socket option. [ 635.782045][T22201] Use struct sctp_assoc_value instead [ 635.796735][T22189] netlink: 'syz.1.4497': attribute type 1 has an invalid length. [ 635.809698][T22189] netlink: 'syz.1.4497': attribute type 2 has an invalid length. [ 635.820114][T22189] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4497'. [ 636.112369][T22210] netlink: 'syz.4.4501': attribute type 4 has an invalid length. [ 636.140875][T22210] netlink: 'syz.4.4501': attribute type 4 has an invalid length. [ 636.216782][T22210] netlink: 'syz.4.4501': attribute type 4 has an invalid length. [ 636.279716][T22210] netlink: 'syz.4.4501': attribute type 4 has an invalid length. [ 636.292903][T22211] bond10: option min_links: invalid value (18446744073709551614) [ 636.313918][T22211] bond10: option min_links: allowed values 0 - 2147483647 [ 636.348130][T22211] bond10 (unregistering): Released all slaves [ 637.346414][T22243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.457903][ T1123] veth0_macvtap: left promiscuous mode [ 637.480780][ T1123] veth1_vlan: left promiscuous mode [ 637.495891][ T1123] veth0_vlan: left promiscuous mode [ 638.117803][T22283] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4517'. [ 638.176460][T22284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4517'. [ 638.402087][ T3346] smbdirect: ib_dev[syú2] removed [ 638.473204][T22242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4511'. [ 638.744269][T22290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.086831][ T1123] IPVS: stop unused estimator thread 0... [ 639.182386][T22310] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4527'. [ 639.324636][T22320] tipc: Started in network mode [ 639.348932][T22320] tipc: Node identity 5eff77c01f8b, cluster identity 4711 [ 639.360595][T22320] tipc: Enabled bearer , priority 0 [ 639.556381][T22325] syzkaller0: entered promiscuous mode [ 639.572974][T22325] syzkaller0: entered allmulticast mode [ 639.587585][T22325] tipc: Resetting bearer [ 639.786299][T12826] tipc: Resetting bearer [ 639.920642][T22341] validate_nla: 29 callbacks suppressed [ 639.920665][T22341] netlink: 'syz.1.4535': attribute type 20 has an invalid length. [ 639.934813][T22338] netem: change failed [ 639.944410][T22341] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.993990][T22342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.002749][T22342] bridge0: port 3(bond3) entered blocking state [ 640.009295][T22342] bridge0: port 3(bond3) entered disabled state [ 640.018159][T22342] bond3: entered allmulticast mode [ 640.027131][T22342] bond3: entered promiscuous mode [ 640.036525][T22306] tipc: Resetting bearer [ 640.158367][T22347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.173430][T22348] netlink: 'syz.2.4537': attribute type 8 has an invalid length. [ 640.200302][T22348] __nla_validate_parse: 1 callbacks suppressed [ 640.200321][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 640.260076][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4540'. [ 640.279957][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4540'. [ 642.223489][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 642.423400][T22306] tipc: Disabling bearer [ 642.433233][T22348] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.451986][T22352] gretap0: entered promiscuous mode [ 642.459347][T22352] gretap0: left promiscuous mode [ 642.479777][ T5822] tipc: Node number set to 1098151872 [ 642.728782][T22376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4547'. [ 642.815566][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4549'. [ 642.819180][T22382] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 642.838662][T22385] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 643.145854][T22401] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 643.233627][T22405] syzkaller0: entered promiscuous mode [ 643.253526][T22405] syzkaller0: entered allmulticast mode [ 643.378165][T22411] openvswitch: netlink: Key type 305 is out of range max 32 [ 643.732111][T22428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'. [ 643.752239][T22428] IPVS: Unknown mcast interface: vcan0 [ 643.777532][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 643.799970][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4565'. [ 643.808752][T22428] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4563'. [ 643.834245][T22428] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4563'. [ 643.895384][ T35] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19979 - 0 [ 643.917240][ T35] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19979 - 0 [ 643.951550][ T35] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19979 - 0 [ 644.048041][T22454] netlink: 'syz.0.4571': attribute type 24 has an invalid length. [ 644.152729][T22459] tunl0: entered promiscuous mode [ 644.297240][T22469] netlink: 'syz.0.4574': attribute type 1 has an invalid length. [ 644.340500][T22469] netlink: 'syz.0.4574': attribute type 3 has an invalid length. [ 644.466848][T22461] syzkaller0: entered promiscuous mode [ 644.479407][T22461] syzkaller0: entered allmulticast mode [ 646.930629][T22498] bond7: left allmulticast mode [ 646.963613][T22498] bond7: left promiscuous mode [ 646.971065][T22498] bridge0: port 6(bond7) entered disabled state [ 647.004917][T22498] bond6: left allmulticast mode [ 647.010042][T22498] bond6: left promiscuous mode [ 647.015728][T22498] bridge0: port 5(bond6) entered disabled state [ 647.048771][T22498] bond5: left allmulticast mode [ 647.058511][T22498] bond5: left promiscuous mode [ 647.068843][T22498] bridge0: port 4(bond5) entered disabled state [ 647.097376][T22498] bond4: left allmulticast mode [ 647.105301][T22505] xt_hashlimit: size too large, truncated to 1048576 [ 647.110685][T22498] bond4: left promiscuous mode [ 647.123214][T22498] bridge0: port 3(bond4) entered disabled state [ 647.145453][T22498] bridge_slave_1: left allmulticast mode [ 647.157989][T22498] bridge_slave_1: left promiscuous mode [ 647.180833][T22498] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.215801][T22498] bridge_slave_0: left allmulticast mode [ 647.229788][T22498] bridge_slave_0: left promiscuous mode [ 647.248981][T22498] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.279267][T22512] __nla_validate_parse: 4 callbacks suppressed [ 647.279287][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 647.393927][T22510] ip6tnl1: entered promiscuous mode [ 647.647331][T22523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4587'. [ 647.690926][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.717096][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.744240][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.746474][T22518] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 647.761789][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.773390][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.784911][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.793048][T22518] syzkaller1: Refused to change device type [ 647.815168][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 647.823426][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'. [ 648.294407][T22547] xt_NFQUEUE: number of total queues is 0 [ 648.743531][T22564] netlink: 'syz.1.4599': attribute type 2 has an invalid length. [ 650.642912][T22643] syzkaller1: entered promiscuous mode [ 650.657694][T22643] syzkaller1: entered allmulticast mode [ 651.172375][T22633] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 651.202621][T22633] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 651.544506][T22685] netlink: 'syz.4.4630': attribute type 10 has an invalid length. [ 654.495295][T22633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 654.507696][T22633] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 654.868993][ T5641] block nbd4: Receive control failed (result -32) [ 655.010882][T22736] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 655.051330][T22736] xt_hl: Unknown Hop Limit match mode: 206 [ 655.315453][T22747] sctp: [Deprecated]: syz.3.4641 (pid 22747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.315453][T22747] Use struct sctp_sack_info instead [ 655.459705][T17335] bond7: left allmulticast mode [ 655.495470][T17335] bond7: left promiscuous mode [ 655.522638][T17335] bridge0: port 3(bond7) entered disabled state [ 655.563171][T17335] bridge_slave_1: left allmulticast mode [ 655.595140][T17335] bridge_slave_1: left promiscuous mode [ 655.634338][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.668218][T17335] bridge_slave_0: left allmulticast mode [ 655.674944][T17335] bridge_slave_0: left promiscuous mode [ 655.685537][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.691793][T22766] __nla_validate_parse: 48 callbacks suppressed [ 655.691808][T22766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4644'. [ 656.172813][T17335] bond2 (unregistering): (slave gretap1): Releasing active interface [ 656.181146][T17335] bond2 (unregistering): (slave gretap1): the permanent HWaddr of slave - 06:ea:c4:cc:ca:d3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 656.301005][T17335] bond9 (unregistering): (slave geneve3): Releasing active interface [ 656.447168][T17335] bond2 (unregistering): (slave bridge2): Releasing active interface [ 656.819246][T17335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.831826][T17335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.842877][T17335] bond0 (unregistering): Released all slaves [ 656.853824][T17335] bond1 (unregistering): Released all slaves [ 656.870859][T17335] bond2 (unregistering): Released all slaves [ 656.893677][T17335] bond3 (unregistering): (slave veth3): Releasing active interface [ 656.904178][T17335] bond3 (unregistering): Released all slaves [ 656.920674][T17335] bond4 (unregistering): Released all slaves [ 656.937699][T17335] bond5 (unregistering): (slave bond6): Releasing backup interface [ 656.947143][T17335] bond5 (unregistering): Released all slaves [ 656.963744][T17335] bond6 (unregistering): Released all slaves [ 656.978231][T17335] bond7 (unregistering): Released all slaves [ 656.994775][T17335] bond8 (unregistering): Released all slaves [ 657.027285][T17335] bond9 (unregistering): Released all slaves [ 657.042265][T17335] bond10 (unregistering): Released all slaves [ 657.057683][T17335] bond11 (unregistering): Released all slaves [ 657.105008][T22780] sch_fq: defrate 0 ignored. [ 657.113191][T22782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.361294][T22802] netlink: 'syz.3.4648': attribute type 3 has an invalid length. [ 657.435599][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 657.442035][T17335] : left promiscuous mode [ 657.555014][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 657.632884][T12828] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.693948][T22633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 657.706260][T12828] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.716050][T22633] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 657.734867][T22814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4651'. [ 657.754343][T12828] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.805579][T12828] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.855281][T22633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 657.878894][T22633] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 658.049268][T22831] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4657'. [ 658.483636][T22851] 8021q: VLANs not supported on lo [ 659.163805][T22887] netlink: 'syz.1.4674': attribute type 2 has an invalid length. [ 659.439422][T22900] netlink: 'syz.1.4677': attribute type 1 has an invalid length. [ 659.476886][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.542024][T22904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.619745][T22900] 8021q: adding VLAN 0 to HW filter on device bond12 [ 659.633595][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4678'. [ 659.777466][T17335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.811187][T17335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.836926][T17335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.854022][T17335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.908277][T17335] veth1_vlan: left allmulticast mode [ 659.929148][T17335] veth1_vlan: left promiscuous mode [ 659.952017][T17335] vet: left promiscuous mode [ 660.116376][T22927] netlink: 'syz.0.4682': attribute type 49 has an invalid length. [ 660.144230][T22928] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4681'. [ 660.334485][T17335] pim6reg (unregistering): left allmulticast mode [ 660.341288][T22939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4684'. [ 660.367588][T22939] netlink: 'syz.4.4684': attribute type 7 has an invalid length. [ 660.406861][T22939] netlink: 'syz.4.4684': attribute type 8 has an invalid length. [ 660.437277][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4684'. [ 660.479172][T22943] xt_hashlimit: size too large, truncated to 1048576 [ 660.546321][T17335] team0 (unregistering): Port device macvlan1 removed [ 661.111249][T17335] team0 (unregistering): Port device team_slave_1 removed [ 661.148821][T17335] team0 (unregistering): Port device team_slave_0 removed [ 661.716080][T22927] ip6gretap0: entered promiscuous mode [ 661.726821][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 661.733954][T22927] ip6gretap0: entered allmulticast mode [ 661.738011][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4686'. [ 661.805049][T22946] bridge_slave_0 (unregistering): left allmulticast mode [ 661.830006][T22946] bridge_slave_0 (unregistering): left promiscuous mode [ 661.868847][T22946] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.938308][T22981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.942264][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4689'. [ 662.008686][T22988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4689'. [ 662.041163][T22988] openvswitch: netlink: EtherType 50a is less than min 600 [ 662.953841][T17335] IPVS: stop unused estimator thread 0... [ 662.989485][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'. [ 663.004514][T23037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4699'. [ 664.137373][T23097] netlink: 'syz.0.4715': attribute type 1 has an invalid length. [ 664.479919][ T29] audit: type=1804 audit(1779741369.112:16): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4719" name="/newroot/349/cgroup.controllers" dev="tmpfs" ino=1794 res=1 errno=0 [ 664.561634][ T29] audit: type=1800 audit(1779741369.112:17): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4719" name="cgroup.controllers" dev="tmpfs" ino=1794 res=0 errno=0 [ 665.017607][T23135] veth0: entered promiscuous mode [ 665.069620][T23135] veth0: left promiscuous mode [ 665.272760][T23146] IPv6: NLM_F_CREATE should be specified when creating new route [ 665.312611][T23146] netlink: 'syz.2.4731': attribute type 1 has an invalid length. [ 665.348365][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4731'. [ 665.471572][T23153] netlink: 'syz.0.4732': attribute type 21 has an invalid length. [ 665.489485][T23153] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4732'. [ 665.512632][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4733'. [ 665.520127][T23158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.524566][T23164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'. [ 665.895944][T23182] nbd: couldn't find a device at index 1 [ 666.393540][T23182] 8021q: VLANs not supported on ipvlan0 [ 666.415462][T23200] veth1_macvtap: left promiscuous mode [ 666.527009][T23205] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.694387][T23216] veth3: entered promiscuous mode [ 666.719853][T23222] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 666.746451][T23216] veth3: entered allmulticast mode [ 666.769214][T23228] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 667.036268][T23240] __nla_validate_parse: 6 callbacks suppressed [ 667.036289][T23240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4751'. [ 667.544463][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 667.588081][T23271] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4760'. [ 667.674945][T23278] netlink: 'syz.1.4761': attribute type 1 has an invalid length. [ 667.693885][T23279] netlink: 'syz.1.4761': attribute type 1 has an invalid length. [ 667.710359][T23278] netlink: 'syz.1.4761': attribute type 2 has an invalid length. [ 667.729662][T23279] netlink: 'syz.1.4761': attribute type 2 has an invalid length. [ 667.763174][T23279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4761'. [ 668.163003][T23297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 668.354361][T23308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.514725][T23316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4773'. [ 668.781875][T23333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4777'. [ 668.837346][T23327] netlink: set zone limit has 4 unknown bytes [ 669.143716][T23347] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 669.161906][T23347] netlink: 'syz.0.4781': attribute type 11 has an invalid length. [ 669.189376][T23347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4781'. [ 669.464897][T23361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.469611][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4786'. [ 669.493041][T23313] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4772'. [ 669.857974][T23381] bridge0: port 4(gretap0) entered blocking state [ 669.896172][T23381] bridge0: port 4(gretap0) entered disabled state [ 669.927535][T23381] gretap0: entered allmulticast mode [ 670.172537][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4793'. [ 670.334404][T23395] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 670.761854][T23422] sctp: [Deprecated]: syz.1.4801 (pid 23422) Use of int in max_burst socket option deprecated. [ 670.761854][T23422] Use struct sctp_assoc_value instead [ 670.886615][T23432] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20003 [ 670.939404][T23436] netlink: 'syz.2.4804': attribute type 21 has an invalid length. [ 670.992083][T23436] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.025576][T23436] netlink: 'syz.2.4804': attribute type 1 has an invalid length. [ 672.327257][T23504] __nla_validate_parse: 3 callbacks suppressed [ 672.327279][T23504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4818'. [ 672.439984][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4816'. [ 672.707040][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4822'. [ 672.846814][T23524] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4825'. [ 672.958202][T23526] netlink: 'syz.0.4824': attribute type 39 has an invalid length. [ 672.976496][T23526] hsr_slave_0: left promiscuous mode [ 673.013175][T23526] hsr_slave_1: left promiscuous mode [ 673.160603][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'. [ 673.345125][T23546] openvswitch: netlink: IP tunnel dst address not specified [ 674.153365][T23581] sctp: [Deprecated]: syz.2.4836 (pid 23581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.153365][T23581] Use struct sctp_sack_info instead [ 674.229054][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4837'. [ 674.295362][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 674.326139][T23584] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.584509][T23602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4842'. [ 674.657408][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4845'. [ 675.015874][T23631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4849'. [ 675.124285][T23631] netlink: 'syz.2.4849': attribute type 28 has an invalid length. [ 675.161421][T23631] netlink: 'syz.2.4849': attribute type 3 has an invalid length. [ 675.195052][T23643] 0: reclassify loop, rule prio 0, protocol 700 [ 675.398864][T23650] xt_hashlimit: size too large, truncated to 1048576 [ 675.557030][T23661] can: request_module (can-proto-5) failed. [ 675.843658][T23676] netlink: 'syz.1.4859': attribute type 32 has an invalid length. [ 676.120835][T23685] netlink: 'syz.1.4861': attribute type 10 has an invalid length. [ 676.146863][T23685] netlink: 'syz.1.4861': attribute type 10 has an invalid length. [ 676.203352][T23685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.216464][T23685] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 676.827595][T23719] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 676.952595][T23729] tipc: Enabled bearer , priority 0 [ 676.967987][T23729] syzkaller0: entered promiscuous mode [ 676.980871][T23729] syzkaller0: entered allmulticast mode [ 677.103417][T23723] tipc: Resetting bearer [ 677.199172][T23723] tipc: Disabling bearer [ 677.243293][T23747] netlink: 'syz.0.4879': attribute type 13 has an invalid length. [ 677.293787][T23747] erspan0: refused to change device tx_queue_len [ 677.315803][T23747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 677.459635][T23757] __nla_validate_parse: 6 callbacks suppressed [ 677.459656][T23757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4882'. [ 677.529470][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 677.570548][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4884'. [ 677.605088][T23763] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 677.625785][T23763] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 677.648046][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4884'. [ 677.678074][T23766] netlink: 'syz.1.4886': attribute type 1 has an invalid length. [ 677.795386][T23766] 8021q: adding VLAN 0 to HW filter on device bond13 [ 677.842186][T23770] vlan2: entered allmulticast mode [ 677.872338][T23770] bond13: entered allmulticast mode [ 678.017930][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807eaa1000: rx timeout, send abort [ 678.037820][T23773] bond13: (slave geneve3): making interface the new active one [ 678.093103][T23773] geneve3: entered allmulticast mode [ 678.154748][T23773] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 678.269090][ T1123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.313062][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.418487][ T1123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.493746][ T1123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.526365][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807eaa1000: abort rx timeout. Force session deactivation [ 678.589067][T23812] netlink: 'syz.2.4892': attribute type 16 has an invalid length. [ 678.613180][T23812] netlink: 'syz.2.4892': attribute type 17 has an invalid length. [ 678.913842][T23812] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 678.959087][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.966338][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.247433][T23841] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 679.488143][T23852] netlink: 'syz.2.4899': attribute type 16 has an invalid length. [ 679.503802][T23847] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.554831][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4902'. [ 679.560656][T23856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4899'. [ 679.608558][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4902'. [ 679.674815][T23852] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.682089][T23852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.729814][T23852] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 679.808850][T23856] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 679.851530][T23856] gretap1: entered promiscuous mode [ 679.873087][T23872] netlink: 404 bytes leftover after parsing attributes in process `syz.4.4905'. [ 679.873345][T23856] gretap1: entered allmulticast mode [ 680.049688][T23880] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 680.242464][T23887] syzkaller0: entered promiscuous mode [ 680.260913][T23887] syzkaller0: entered allmulticast mode [ 680.571888][T23900] veth0: entered promiscuous mode [ 680.675558][T23911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4917'. [ 680.777839][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'. [ 680.808906][T23903] syzkaller0: entered promiscuous mode [ 680.830280][T23903] syzkaller0: entered allmulticast mode [ 680.846909][T23899] veth0: left promiscuous mode [ 680.856324][T23914] validate_nla: 1 callbacks suppressed [ 680.856344][T23914] netlink: 'syz.1.4917': attribute type 4 has an invalid length. [ 681.129900][T23936] tipc: Failed to remove unknown binding: 66,1,1/0:1975386038/1975386040 [ 681.145164][T23936] tipc: Failed to remove unknown binding: 66,1,1/0:1975386038/1975386040 [ 683.418448][T23934] syzkaller0: entered promiscuous mode [ 683.424565][T23934] syzkaller0: entered allmulticast mode [ 683.865088][T23967] openvswitch: netlink: Message has 4 unknown bytes. [ 685.176612][T24037] IPv6: sit3: Disabled Multicast RS [ 685.250031][T24037] sit3: entered allmulticast mode [ 685.472005][T24046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4954'. [ 685.495238][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 685.522203][T24039] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 685.549425][T24050] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 685.581933][T24050] bond10 (unregistering): Released all slaves [ 685.645494][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4958'. [ 685.743984][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.753201][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 685.804500][T24054] bond5: option xmit_hash_policy: invalid value (64) [ 685.842548][T24054] bond5 (unregistering): Released all slaves [ 686.219876][T24068] bond1 (unregistering): Released all slaves [ 686.289462][T24083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4964'. [ 686.307848][T24083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4964'. [ 686.417863][T24078] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.623472][T24089] syzkaller0: entered promiscuous mode [ 686.649622][T24089] syzkaller0: entered allmulticast mode [ 686.851160][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 687.013313][T24112] netlink: 'syz.0.4969': attribute type 1 has an invalid length. [ 687.025824][T24113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4968'. [ 687.032079][T24112] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4969'. [ 687.081670][T24112] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4969'. [ 687.091128][T24112] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4969'. [ 687.127972][T24115] vlan3: entered promiscuous mode [ 687.148857][T24115] bridge0: entered promiscuous mode [ 687.583308][T24130] syzkaller0: entered promiscuous mode [ 687.599165][T24130] syzkaller0: entered allmulticast mode [ 690.834467][T24178] __nla_validate_parse: 2 callbacks suppressed [ 690.834487][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 690.965005][T24178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.367699][T24198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 691.543434][T24205] netlink: 'syz.2.4990': attribute type 8 has an invalid length. [ 691.584869][T24205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4990'. [ 692.172544][T24218] syz_tun: entered allmulticast mode [ 692.188786][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'. [ 692.224950][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 692.243043][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4994'. [ 692.262329][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 692.272319][T24221] netlink: 'syz.3.4994': attribute type 14 has an invalid length. [ 692.283167][T24221] netlink: 'syz.3.4994': attribute type 13 has an invalid length. [ 692.492917][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4997'. [ 692.627534][T24247] netlink: 'syz.2.4999': attribute type 1 has an invalid length. [ 692.655672][T24248] xt_l2tp: invalid flags combination: 8 [ 692.656951][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5000'. [ 692.843358][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5003'. [ 693.003117][T24262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.015479][T24270] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 693.138020][T24280] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5006'. [ 693.297347][T24294] netlink: 'syz.2.5008': attribute type 1 has an invalid length. [ 693.443133][T24301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.633895][T24285] bond6: (slave bridge6): making interface the new active one [ 693.646662][T24285] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 693.743086][T24317] netlink: 'syz.0.5015': attribute type 1 has an invalid length. [ 694.059894][T24327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 694.081432][T24340] openvswitch: netlink: Key type 346 is out of range max 32 [ 694.257979][T24327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 694.297614][T24327] bond6: (slave bond7): Enslaving as an active interface with an up link [ 694.399829][T24331] bond6 (unregistering): (slave bond7): Releasing backup interface [ 694.427684][T24331] bond6 (unregistering): Released all slaves [ 694.563345][T24363] ipip0: entered promiscuous mode [ 694.927389][T24380] ±ÿª¨úrBº“: left allmulticast mode [ 695.136462][T24389] netlink: 'syz.0.5042': attribute type 1 has an invalid length. [ 695.137945][T24388] netlink: 'syz.0.5042': attribute type 1 has an invalid length. [ 735.062958][T24444] sctp: [Deprecated]: syz.4.5053 (pid 24444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.062958][T24444] Use struct sctp_sack_info instead [ 735.142691][T24443] __nla_validate_parse: 5 callbacks suppressed [ 735.142714][T24443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5051'. [ 735.167662][T24452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.310676][T24462] block nbd6: Unsupported socket: should be TCP or UNIX. [ 735.415687][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 735.699474][T24476] netlink: 'syz.3.5061': attribute type 3 has an invalid length. [ 736.215485][T24470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5059'. [ 736.417589][T24510] netlink: 'syz.2.5069': attribute type 1 has an invalid length. [ 736.512466][T24512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5069'. [ 736.517065][T24514] netlink: 'syz.4.5070': attribute type 1 has an invalid length. [ 736.534871][T24514] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 736.543717][T24514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.674260][T24510] bond7: entered promiscuous mode [ 736.683766][T24510] 8021q: adding VLAN 0 to HW filter on device bond7 [ 736.714914][T24512] bond7: entered allmulticast mode [ 736.733032][T24520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5070'. [ 736.771465][T24524] bond7: (slave bridge7): making interface the new active one [ 736.779304][T24524] bridge7: entered promiscuous mode [ 736.787074][T24524] bridge7: entered allmulticast mode [ 736.813804][T24524] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 736.902252][T24533] netlink: 'syz.0.5074': attribute type 1 has an invalid length. [ 736.938302][T24533] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5074'. [ 736.980294][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5074'. [ 737.193811][T24550] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5078'. [ 737.376759][T24566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.385083][T24559] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 737.537688][T24574] syz.0.5084: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 737.623640][T24574] CPU: 0 UID: 0 PID: 24574 Comm: syz.0.5084 Not tainted syzkaller #0 PREEMPT(full) [ 737.623672][T24574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.623685][T24574] Call Trace: [ 737.623693][T24574] [ 737.623702][T24574] dump_stack_lvl+0xe8/0x150 [ 737.623735][T24574] warn_alloc+0x249/0x340 [ 737.623768][T24574] ? stack_trace_save+0xa9/0x100 [ 737.623807][T24574] ? __pfx_warn_alloc+0x10/0x10 [ 737.623847][T24574] ? kasan_save_track+0x4f/0x80 [ 737.623874][T24574] ? kasan_save_track+0x3e/0x80 [ 737.623900][T24574] ? __kasan_kmalloc+0x93/0xb0 [ 737.623930][T24574] ? __kmalloc_cache_noprof+0x31c/0x660 [ 737.623964][T24574] ? xskq_create+0x56/0x170 [ 737.623993][T24574] ? xsk_setsockopt+0x54c/0x990 [ 737.624018][T24574] ? do_sock_setsockopt+0x17c/0x1b0 [ 737.624049][T24574] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 737.624077][T24574] ? do_syscall_64+0x15f/0xf80 [ 737.624101][T24574] __vmalloc_node_range_noprof+0x132/0x1750 [ 737.624169][T24574] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 737.624215][T24574] ? __kasan_kmalloc+0x93/0xb0 [ 737.624252][T24574] vmalloc_user_noprof+0xad/0xe0 [ 737.624283][T24574] ? xskq_create+0xbf/0x170 [ 737.624313][T24574] xskq_create+0xbf/0x170 [ 737.624346][T24574] xsk_init_queue+0x8a/0xe0 [ 737.624378][T24574] xsk_setsockopt+0x54c/0x990 [ 737.624409][T24574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.624436][T24574] ? __pfx_aa_sk_perm+0x10/0x10 [ 737.624469][T24574] ? aa_sock_opt_perm+0xff/0x1a0 [ 737.624503][T24574] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 737.624530][T24574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.624559][T24574] do_sock_setsockopt+0x17c/0x1b0 [ 737.624596][T24574] __x64_sys_setsockopt+0x13d/0x1b0 [ 737.624631][T24574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.624655][T24574] do_syscall_64+0x15f/0xf80 [ 737.624672][T24574] ? trace_irq_disable+0x3b/0x140 [ 737.624702][T24574] ? clear_bhb_loop+0x40/0x90 [ 737.624730][T24574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.624752][T24574] RIP: 0033:0x7fd6d5f9ce59 [ 737.624773][T24574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.624792][T24574] RSP: 002b:00007fd6d6e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.624816][T24574] RAX: ffffffffffffffda RBX: 00007fd6d6215fa0 RCX: 00007fd6d5f9ce59 [ 737.624832][T24574] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 737.624845][T24574] RBP: 00007fd6d6032d6f R08: 0000000000000004 R09: 0000000000000000 [ 737.624858][T24574] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.624871][T24574] R13: 00007fd6d6216038 R14: 00007fd6d6215fa0 R15: 00007fffdf58f948 [ 737.624908][T24574] [ 737.626731][T24574] Mem-Info: [ 737.779794][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'. [ 737.804586][T24574] active_anon:5943 inactive_anon:5 isolated_anon:0 [ 737.804586][T24574] active_file:2890 inactive_file:40457 isolated_file:0 [ 737.804586][T24574] unevictable:768 dirty:34 writeback:0 [ 737.804586][T24574] slab_reclaimable:11541 slab_unreclaimable:119381 [ 737.804586][T24574] mapped:29463 shmem:1298 pagetables:1682 [ 737.804586][T24574] sec_pagetables:0 bounce:0 [ 737.804586][T24574] kernel_misc_reclaimable:0 [ 737.804586][T24574] free:1301873 free_pcp:10913 free_cma:0 [ 737.968061][T24590] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.978999][T24574] Node 0 active_anon:24012kB inactive_anon:20kB active_file:11560kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117876kB dirty:164kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14156kB pagetables:6824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 738.040472][T24574] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 738.098760][T24574] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.166168][T24574] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 738.204128][T24574] Node 0 DMA32 free:1257700kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23712kB inactive_anon:20kB active_file:11560kB inactive_file:161632kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:42616kB local_pcp:21316kB free_cma:0kB [ 738.308473][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5094'. [ 738.318009][T24574] lowmem_reserve[]: 0 0 0 0 0 [ 738.318066][T24574] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 738.318129][T24574] lowmem_reserve[]: 0 0 0 0 0 [ 738.371046][T24574] Node 1 Normal free:3937084kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.403936][T24574] lowmem_reserve[]: 0 0 0 0 0 [ 738.430071][T24574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 738.479863][T24574] Node 0 DMA32: 11033*4kB (UME) 7147*8kB (UME) 4336*16kB (UME) 596*32kB (UME) 975*64kB (UME) 1209*128kB (UME) 832*256kB (UME) 422*512kB (UM) 188*1024kB (UM) 69*2048kB (UM) 22*4096kB (UM) = 1259900kB [ 738.551691][T24574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 738.583761][T24574] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 12*16kB (UM) 10*32kB (UM) 4*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3937084kB [ 738.601927][T24574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.618261][T24574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 738.629350][T24574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.658059][T24574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 738.668760][T24574] 44641 total pagecache pages [ 738.676094][T24574] 0 pages in swap cache [ 738.680969][T24574] Free swap = 124996kB [ 738.685188][T24574] Total swap = 124996kB [ 738.689364][T24574] 2097051 pages RAM [ 738.706733][T24574] 0 pages HighMem/MovableOnly [ 738.720484][T24574] 427133 pages reserved [ 738.733567][T24574] 0 pages cma reserved [ 738.881450][T24627] netlink: 'syz.3.5099': attribute type 1 has an invalid length. [ 738.933404][T24623] netlink: 'syz.3.5099': attribute type 10 has an invalid length. [ 739.147181][T16553] smc: removing ib device syz2 [ 739.273845][T16553] smbdirect: ib_dev[syz2] removed [ 739.376727][T24646] netlink: 'syz.3.5108': attribute type 13 has an invalid length. [ 739.429420][T24653] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 739.638455][T24656] bridge_slave_0: default FDB implementation only supports local addresses [ 740.418820][T24681] netlink: 'syz.0.5119': attribute type 1 has an invalid length. [ 740.628353][T24681] 8021q: adding VLAN 0 to HW filter on device bond10 [ 740.809414][T24694] __nla_validate_parse: 18 callbacks suppressed [ 740.809434][T24694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5121'. [ 740.918751][T24701] netlink: 'syz.2.5123': attribute type 4 has an invalid length. [ 740.992688][T24701] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5123'. [ 741.494318][T24705] syzkaller0: entered promiscuous mode [ 741.517778][T24705] syzkaller0: entered allmulticast mode [ 744.726820][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5140'. [ 744.775125][T24764] macvlan0: entered promiscuous mode [ 744.789186][T24766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5140'. [ 744.846658][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'. [ 744.960102][T24776] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.991051][T24410] IPVS: starting estimator thread 0... [ 745.038017][T24783] 0: reclassify loop, rule prio 0, protocol 800 [ 745.107515][T24785] IPVS: using max 28 ests per chain, 67200 per kthread [ 745.195799][T24797] ip6gre2: entered allmulticast mode [ 745.343105][T24806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 745.607455][T24826] netlink: 'syz.1.5156': attribute type 1 has an invalid length. [ 745.631489][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5155'. [ 745.753451][T24828] ip6gre3: entered allmulticast mode [ 745.769672][T24828] team0: Device ip6gre3 is of different type [ 745.784419][T24838] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:0 [ 746.096535][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5161'. [ 746.498929][T24865] IPVS: Scheduler module ip_vs_sip not found [ 746.702317][T24880] C: renamed from lo [ 746.727393][T24880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 746.776068][T24880] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5167'. [ 746.967598][T24888] netlink: 'syz.2.5169': attribute type 1 has an invalid length. [ 747.001533][T24894] netlink: 'syz.1.5171': attribute type 1 has an invalid length. [ 747.107084][T24894] 8021q: adding VLAN 0 to HW filter on device bond14 [ 747.136225][T24895] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 747.182964][ T1311] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 747.390494][T24911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5177'. [ 747.419411][T24911] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5177'. [ 747.750850][T24931] netlink: 'syz.0.5180': attribute type 9 has an invalid length. [ 747.816932][T24933] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5182'. [ 748.036781][T24941] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5185'. [ 748.162351][T24943] xt_hashlimit: size too large, truncated to 1048576 [ 748.242402][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5188'. [ 748.292388][T24953] h: entered promiscuous mode [ 748.747428][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5195'. [ 748.837227][T24983] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 748.879124][T24983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.963140][T24993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5198'. [ 749.035720][T24949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.071448][T24949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.103057][T24949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19979 - 0 [ 749.298626][T24949] bond0: (slave netdevsim1): Releasing backup interface [ 749.356659][T24949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.383355][T24949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.418025][T24949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19979 - 0 [ 749.703844][T24949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.726172][T24949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.752415][T24949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19979 - 0 [ 749.833864][T25040] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5207'. [ 749.844772][T25039] netlink: 'syz.3.5208': attribute type 17 has an invalid length. [ 750.166882][ T73] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.189367][ T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19979 - 0 [ 750.208508][ T73] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 750.278307][ T73] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.292066][ T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19979 - 0 [ 750.301838][ T73] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 750.388105][T12828] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.417604][T12828] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19979 - 0 [ 750.453755][T12828] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 750.576287][ T73] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.607383][ T73] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19979 - 0 [ 750.636044][ T73] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 751.026177][T25107] netlink: 'syz.4.5223': attribute type 1 has an invalid length. [ 751.215270][T25107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.227726][T25117] __nla_validate_parse: 6 callbacks suppressed [ 751.227744][T25117] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5226'. [ 751.254372][T25111] bond5: (slave gretap2): making interface the new active one [ 751.263996][T25111] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 751.287080][T25114] erspan0: entered promiscuous mode [ 751.305381][T25114] vlan3: entered promiscuous mode [ 751.532985][T25134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5230'. [ 751.564234][T25138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5232'. [ 751.937871][T25158] netlink: 'syz.2.5235': attribute type 9 has an invalid length. [ 751.974160][T25158] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5235'. [ 752.102831][T25164] netlink: 'syz.4.5237': attribute type 1 has an invalid length. [ 752.136944][T25166] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 752.171889][T25131] netlink: 'syz.1.5231': attribute type 21 has an invalid length. [ 752.197889][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5238'. [ 752.257831][T25172] tipc: Started in network mode [ 752.263642][T25172] tipc: Node identity 5aef9da006ba, cluster identity 4711 [ 752.271655][T25172] tipc: Enabled bearer , priority 0 [ 752.338036][T25172] syzkaller0: entered promiscuous mode [ 752.344254][T25172] syzkaller0: entered allmulticast mode [ 752.352639][T25172] tipc: Resetting bearer [ 752.383949][T25170] tipc: Resetting bearer [ 754.878846][T25170] tipc: Disabling bearer [ 754.901422][ T9] tipc: Node number set to 1549114784 [ 755.096390][T25209] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5247'. [ 755.308521][T25223] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5253'. [ 755.322185][T25224] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5253'. [ 755.527356][T25243] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 755.644065][T25253] netlink: 'syz.3.5259': attribute type 12 has an invalid length. [ 755.655313][T25253] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5259'. [ 755.668547][T25253] 8021q: VLANs not supported on gre0 [ 755.883916][T25270] xt_hashlimit: size too large, truncated to 1048576 [ 755.913069][T25273] netlink: 'syz.4.5265': attribute type 1 has an invalid length. [ 756.041984][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5266'. [ 756.072267][T25273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 756.505503][T25306] netlink: 'syz.2.5272': attribute type 1 has an invalid length. [ 756.533470][T25306] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5272'. [ 756.592378][T25311] IPVS: length: 8 != 2920 [ 756.611553][T25311] IPVS: length: 8 != 2920 [ 756.619387][T25311] IPVS: length: 8 != 2920 [ 756.639129][T25311] IPVS: length: 8 != 2920 [ 756.653429][T25311] IPVS: length: 8 != 2920 [ 756.672060][T25311] IPVS: length: 8 != 2920 [ 756.682723][T25311] IPVS: length: 8 != 2920 [ 756.695998][T25311] IPVS: length: 8 != 2920 [ 756.715122][T25311] IPVS: length: 8 != 2920 [ 756.735494][T25311] IPVS: length: 8 != 2920 [ 756.740119][T25311] IPVS: length: 8 != 2920 [ 756.749359][T25311] IPVS: length: 8 != 2920 [ 756.758191][T25311] IPVS: length: 8 != 2920 [ 756.768907][T25311] IPVS: length: 8 != 2920 [ 756.777686][T25311] IPVS: length: 8 != 2920 [ 756.811904][T25311] IPVS: length: 8 != 2920 [ 756.837988][T25311] IPVS: length: 8 != 2920 [ 756.850470][T25311] IPVS: length: 8 != 2920 [ 756.860731][T25311] IPVS: length: 8 != 2920 [ 756.870383][T25311] IPVS: length: 8 != 2920 [ 756.890536][T25311] IPVS: length: 8 != 2920 [ 756.914816][T25311] IPVS: length: 8 != 2920 [ 756.945510][T25311] IPVS: length: 8 != 2920 [ 756.983427][T25311] IPVS: length: 8 != 2920 [ 757.010303][T25311] IPVS: length: 8 != 2920 [ 757.032358][T25311] IPVS: length: 8 != 2920 [ 757.052839][T25311] IPVS: length: 8 != 2920 [ 757.070288][T25311] IPVS: length: 8 != 2920 [ 757.090328][T25311] IPVS: length: 8 != 2920 [ 757.110250][T25311] IPVS: length: 8 != 2920 [ 757.122302][T25311] IPVS: length: 8 != 2920 [ 757.133539][T25326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5279'. [ 757.134472][T25311] IPVS: length: 8 != 2920 [ 757.153141][T25311] IPVS: length: 8 != 2920 [ 757.175483][T25311] IPVS: length: 8 != 2920 [ 757.210570][T25311] IPVS: length: 8 != 2920 [ 757.230404][T25311] IPVS: length: 8 != 2920 [ 757.244499][T25311] IPVS: length: 8 != 2920 [ 757.257704][T25311] IPVS: length: 8 != 2920 [ 757.288121][T25311] IPVS: length: 8 != 2920 [ 757.309300][T25311] IPVS: length: 8 != 2920 [ 757.335775][T25311] IPVS: length: 8 != 2920 [ 757.606102][T25343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5284'. [ 757.694110][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'. [ 757.734885][T25349] tipc: Enabled bearer , priority 0 [ 757.758360][T25349] syzkaller0: entered promiscuous mode [ 757.775885][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'. [ 757.788910][T25349] syzkaller0: entered allmulticast mode [ 757.885682][T25360] nbd: must specify an index to disconnect [ 757.904748][T25346] tipc: Resetting bearer [ 757.931835][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5289'. [ 757.967776][T25360] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5289'. [ 758.083084][T25346] tipc: Disabling bearer [ 758.364877][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 758.429288][T25380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'. [ 758.492064][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 758.507600][T25389] macvlan0: entered promiscuous mode [ 759.287817][T25422] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 759.299729][T25422] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 759.512340][T25427] netlink: 'syz.0.5307': attribute type 1 has an invalid length. [ 759.568709][T25429] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 759.856792][T25444] netlink: 'syz.2.5312': attribute type 21 has an invalid length. [ 760.072843][T25451] netlink: 'syz.1.5314': attribute type 1 has an invalid length. [ 760.094351][T25449] netlink: 'syz.3.5315': attribute type 2 has an invalid length. [ 760.184420][T25464] netlink: 'syz.0.5319': attribute type 20 has an invalid length. [ 760.192904][T25464] IPv6: NLM_F_CREATE should be specified when creating new route [ 760.206662][T25464] netlink: 'syz.0.5319': attribute type 20 has an invalid length. [ 760.267613][T25451] 8021q: adding VLAN 0 to HW filter on device bond15 [ 760.296955][T25462] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 760.423422][T25477] netlink: 'syz.4.5322': attribute type 28 has an invalid length. [ 760.441693][T25469] vlan3: entered allmulticast mode [ 760.446947][T25469] bond0: entered allmulticast mode [ 760.447846][T25477] netlink: 'syz.4.5322': attribute type 3 has an invalid length. [ 760.454812][T25469] bond_slave_0: entered allmulticast mode [ 760.467902][T25469] bond_slave_1: entered allmulticast mode [ 760.489352][T25469] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 760.586805][T25473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.608860][T25473] bond_slave_0: left allmulticast mode [ 760.617576][T25473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.645374][T25473] bond_slave_1: left allmulticast mode [ 760.657745][T25473] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 760.668470][T25473] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 760.682508][T25473] bond0 (unregistering): Released all slaves [ 760.932706][T25496] netlink: 'syz.4.5328': attribute type 83 has an invalid length. [ 761.583693][T25492] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 761.818579][T25538] netlink: 'syz.4.5338': attribute type 21 has an invalid length. [ 761.832007][T25538] IPv6: NLM_F_CREATE should be specified when creating new route [ 761.864006][T25542] openvswitch: netlink: IP tunnel dst address not specified [ 761.879983][T25542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.228718][T25559] __nla_validate_parse: 35 callbacks suppressed [ 762.228740][T25559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5345'. [ 762.312322][T25570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5345'. [ 762.557950][T25577] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5349'. [ 762.620443][T25585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5351'. [ 762.637256][T25585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5351'. [ 763.346045][T25628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5363'. [ 763.484794][T25635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5366'. [ 763.862127][T25663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5373'. [ 763.893209][T25663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5373'. [ 764.001790][T25669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5375'. [ 764.235888][T25676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.114094][T25726] validate_nla: 1 callbacks suppressed [ 765.114115][T25726] netlink: 'syz.1.5393': attribute type 1 has an invalid length. [ 765.274841][T25723] 8021q: adding VLAN 0 to HW filter on device bond7 [ 765.308158][T25728] bond7 (unregistering): Released all slaves [ 765.945247][T25767] syzkaller0: entered promiscuous mode [ 765.973756][T25767] syzkaller0: entered allmulticast mode [ 766.289780][T25794] syzkaller0: entered promiscuous mode [ 766.307534][T25794] syzkaller0: entered allmulticast mode [ 766.351305][T25794] syzkaller0: mtu less than device minimum [ 768.777722][T25759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.235719][T25864] __nla_validate_parse: 12 callbacks suppressed [ 769.235740][T25864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5416'. [ 769.292402][T25866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5416'. [ 769.298392][T25864] xfrm2: entered promiscuous mode [ 769.319135][T25864] xfrm2: entered allmulticast mode [ 769.379834][T25864] : entered promiscuous mode [ 769.518973][T25879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5421'. [ 769.525050][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5420'. [ 769.558700][T25879] xfrm1: entered promiscuous mode [ 769.567115][T25879] xfrm1: entered allmulticast mode [ 769.591395][T25887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5421'. [ 769.685020][T25877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 769.766864][T25877] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 769.787118][T25877] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5420'. [ 769.881135][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5420'. [ 770.122445][T25908] netlink: 'syz.2.5430': attribute type 4 has an invalid length. [ 770.307434][T25918] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 770.323133][T25918] bond8: option packets_per_slave: allowed values 0 - 65535 [ 770.382492][T25918] bond8 (unregistering): Released all slaves [ 770.457071][T25933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5434'. [ 770.485999][T25933] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5434'. [ 770.529122][T25940] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 770.734373][T25949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5438'. [ 770.865984][T25953] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 770.942541][T25953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 770.977167][T25953] syzkaller0: entered promiscuous mode [ 770.983002][T25953] syzkaller0: entered allmulticast mode [ 771.120112][T25962] netlink: 'syz.0.5443': attribute type 1 has an invalid length. [ 771.883853][T25995] bridge0: port 4(gretap0) entered blocking state [ 771.890551][T25995] bridge0: port 4(gretap0) entered listening state [ 771.897404][T25995] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.904660][T25995] bridge0: port 1(bridge_slave_0) entered listening state [ 772.656553][T26030] netlink: 'syz.3.5464': attribute type 8 has an invalid length. [ 772.682051][T26031] netlink: 'syz.3.5464': attribute type 8 has an invalid length. [ 772.797660][T26038] x_tables: duplicate underflow at hook 2 [ 772.989702][T26049] tipc: Enabling of bearer rejected, failed to enable media [ 773.037023][T26041] netlink: 'syz.1.5468': attribute type 5 has an invalid length. [ 773.302071][T26065] macvtap1: entered promiscuous mode [ 773.320389][T26065] team0: entered promiscuous mode [ 773.334346][T26065] team_slave_0: entered promiscuous mode [ 773.346691][T26065] team_slave_1: entered promiscuous mode [ 773.362277][T26065] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 773.378094][T26065] team0: Device macvtap1 is already an upper device of the team interface [ 773.389525][T26065] team0: left promiscuous mode [ 773.425032][T24407] team_slave_0: left promiscuous mode [ 773.430568][T24407] team_slave_1: left promiscuous mode [ 773.503286][T26061] syzkaller0: left promiscuous mode [ 773.525753][T26061] syzkaller0: left allmulticast mode [ 773.766281][T26082] syzkaller0: entered promiscuous mode [ 773.785158][T26082] syzkaller0: entered allmulticast mode [ 774.107972][T26108] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.169893][T26102] bond0 (unregistering): Released all slaves [ 774.397539][T26126] netlink: 'syz.0.5491': attribute type 1 has an invalid length. [ 774.462363][T26126] 8021q: adding VLAN 0 to HW filter on device bond11 [ 774.536132][T26126] __nla_validate_parse: 7 callbacks suppressed [ 774.536153][T26126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5491'. [ 774.578626][T26135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5493'. [ 774.675559][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5494'. [ 774.882303][T26141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5495'. [ 774.966728][T26147] syzkaller0: entered promiscuous mode [ 774.990812][T26147] syzkaller0: entered allmulticast mode [ 775.225848][T26162] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 775.377301][T26168] sit4: entered promiscuous mode [ 775.392893][T26168] sit4: entered allmulticast mode [ 775.613653][T26183] ip6t_srh: unknown srh invflags 4000 [ 775.666050][T26185] netlink: 'syz.0.5509': attribute type 1 has an invalid length. [ 775.834239][T26185] 8021q: adding VLAN 0 to HW filter on device bond12 [ 775.888306][ T29] audit: type=1107 audit(1779741480.522:18): pid=26182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 775.894264][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5512'. [ 776.077093][T26185] bond12: (slave gretap3): making interface the new active one [ 776.168081][T26185] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 776.420525][T26226] sctp: [Deprecated]: syz.4.5520 (pid 26226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.420525][T26226] Use struct sctp_sack_info instead [ 776.427751][T26229] netlink: 'syz.2.5518': attribute type 1 has an invalid length. [ 776.442658][T26228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5519'. [ 776.458256][T26226] x_tables: duplicate underflow at hook 2 [ 776.496631][T26228] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5519'. [ 776.528483][T26228] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5519'. [ 776.599994][T26229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5518'. [ 776.675473][T26243] netlink: 'syz.4.5524': attribute type 2 has an invalid length. [ 776.684518][T26243] netlink: 'syz.4.5524': attribute type 2 has an invalid length. [ 776.726947][T26231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 776.759015][T26231] bond8: (slave bond9): making interface the new active one [ 776.778305][T26231] bond8: (slave bond9): Enslaving as an active interface with an up link [ 776.807440][T26235] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 776.827566][T26229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 776.878635][T26246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'. [ 777.037262][T26258] bridge0: port 5(ipvlan0) entered blocking state [ 777.053864][T26258] bridge0: port 5(ipvlan0) entered disabled state [ 777.061861][T26258] ipvlan0: entered allmulticast mode [ 777.067430][T26258] bridge0: entered allmulticast mode [ 777.082038][T26258] ipvlan0: left allmulticast mode [ 777.087302][T26258] bridge0: left allmulticast mode [ 777.779707][T26294] netlink: 'syz.1.5537': attribute type 11 has an invalid length. [ 777.813593][T26294] netlink: 'syz.1.5537': attribute type 11 has an invalid length. [ 777.853331][T26296] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 777.939739][T26303] netlink: 'syz.2.5541': attribute type 1 has an invalid length. [ 778.571181][ T575] bond0 (unregistering): Released all slaves [ 778.583510][ T575] bond1 (unregistering): Released all slaves [ 778.607284][ T575] bond2 (unregistering): Released all slaves [ 778.623516][ T575] bond3 (unregistering): Released all slaves [ 778.639016][ T575] bond4 (unregistering): Released all slaves [ 778.654422][ T575] bond5 (unregistering): Released all slaves [ 778.671295][ T575] bond6 (unregistering): Released all slaves [ 778.807441][T26303] bond10: entered promiscuous mode [ 778.845558][T26303] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.982246][T26302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 778.989956][T26302] bond10: (slave vti2): The slave device specified does not support setting the MAC address [ 779.001343][T26302] bond10: (slave vti2): Setting fail_over_mac to active for active-backup mode [ 779.014767][T26302] bond10: (slave vti2): making interface the new active one [ 779.024690][T26302] vti2: entered promiscuous mode [ 779.030950][T26302] bond10: (slave vti2): Enslaving as an active interface with an up link [ 779.051414][T26324] macvtap0: entered allmulticast mode [ 779.056964][T26324] veth0_macvtap: entered allmulticast mode [ 779.065480][ T575] tipc: Disabling bearer [ 779.080787][ T575] tipc: Left network mode [ 779.676255][T26353] __nla_validate_parse: 2 callbacks suppressed [ 779.676275][T26353] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5552'. [ 780.008658][T26359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5554'. [ 780.326216][T26370] syzkaller0: entered promiscuous mode [ 780.364925][T26370] syzkaller0: entered allmulticast mode [ 780.474125][T26370] netlink: 'syz.3.5557': attribute type 11 has an invalid length. [ 780.528494][T26370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5557'. [ 780.668929][T26350] netlink: 'syz.0.5553': attribute type 4 has an invalid length. [ 780.722632][T26354] netlink: 'syz.0.5553': attribute type 1 has an invalid length. [ 780.734829][T26350] netlink: 'syz.0.5553': attribute type 1 has an invalid length. [ 780.750415][T26354] netlink: 'syz.0.5553': attribute type 4 has an invalid length. [ 780.775503][T26354] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.5553'. [ 780.784734][T26350] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5553'. [ 781.065505][T26401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.323704][T26411] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 781.461552][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5568'. [ 781.733454][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5571'. [ 782.233949][ T29] audit: type=1800 audit(1779741486.872:19): pid=26455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5572" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2711 res=0 errno=0 [ 782.294919][T26451] syzkaller0: entered promiscuous mode [ 782.323232][T26451] syzkaller0: entered allmulticast mode [ 782.371471][T26460] netlink: 'syz.2.5574': attribute type 1 has an invalid length. [ 782.372543][T26463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.432827][ T575] hsr_slave_0: left promiscuous mode [ 782.474598][ T575] veth1_macvtap: left promiscuous mode [ 782.497761][T26471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5574'. [ 782.512616][ T575] veth0_macvtap: left promiscuous mode [ 782.529436][ T575] veth1_vlan: left promiscuous mode [ 782.543912][ T575] veth0_vlan: left promiscuous mode [ 783.146161][T26460] 8021q: adding VLAN 0 to HW filter on device bond11 [ 783.185506][T26467] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 783.684421][T26509] netlink: 'syz.4.5586': attribute type 30 has an invalid length. [ 783.911337][ T575] IPVS: stop unused estimator thread 0... [ 784.006986][T26522] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 784.216445][T26533] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 784.260908][T26533] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5592'. [ 784.272417][T26533] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 784.316102][T26533] netlink: 'syz.1.5592': attribute type 8 has an invalid length. [ 784.344505][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5591'. [ 784.375835][T26533] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 784.421985][T26533] netlink: 'syz.1.5592': attribute type 1 has an invalid length. [ 784.967340][T26565] syzkaller0: entered promiscuous mode [ 784.980500][T26565] syzkaller0: entered allmulticast mode [ 785.380970][T26587] veth0: entered promiscuous mode [ 785.404966][T26587] veth0: left promiscuous mode [ 785.458584][T26593] x_tables: duplicate underflow at hook 3 [ 786.320895][T26626] bond0: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 786.422951][T26626] bond0: (slave C): Enslaving as an active interface with an up link [ 786.442567][T26626] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 786.541981][T26604] __nla_validate_parse: 195 callbacks suppressed [ 786.542003][T26604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5609'. [ 786.610961][T26604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5609'. [ 787.064238][T26618] validate_nla: 193 callbacks suppressed [ 787.064259][T26618] netlink: 'syz.2.5611': attribute type 1 has an invalid length. [ 787.317261][T26618] bond12: entered promiscuous mode [ 787.361362][T26618] 8021q: adding VLAN 0 to HW filter on device bond12 [ 787.447444][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 787.508699][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5619'. [ 787.527867][T26677] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5619'. [ 787.540776][T26677] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 787.589398][T26676] netlink: 'syz.0.5620': attribute type 8 has an invalid length. [ 787.603618][T26676] sch_fq: defrate 0 ignored. [ 787.656367][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5622'. [ 787.779438][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5624'. [ 787.831949][T26685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5623'. [ 787.870999][T26685] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5623'. [ 788.594447][T26732] netlink: 'syz.4.5632': attribute type 21 has an invalid length. [ 788.617677][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5632'. [ 789.079584][T26755] netlink: 'syz.0.5638': attribute type 8 has an invalid length. [ 789.299206][T26769] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 789.373372][T26769] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 789.429795][T26776] netlink: 'syz.2.5645': attribute type 178 has an invalid length. [ 789.453449][T26780] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 789.649414][T26789] team0: mtu less than device minimum [ 789.690109][T26787] syzkaller0: entered promiscuous mode [ 789.733577][T26787] syzkaller0: entered allmulticast mode [ 789.931040][T26805] RDS: rds_bind could not find a transport for fe80::d, load rds_tcp or rds_rdma? [ 790.572793][T26840] netlink: 'syz.4.5660': attribute type 4 has an invalid length. [ 791.371202][T26887] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 791.410693][T26887] netlink: 'syz.3.5669': attribute type 3 has an invalid length. [ 791.455203][T26887] NCSI netlink: No device for ifindex 813332851 [ 791.603393][T26896] __nla_validate_parse: 5 callbacks suppressed [ 791.603415][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 791.673103][T26900] netlink: 'syz.0.5674': attribute type 16 has an invalid length. [ 791.721419][T26910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5677'. [ 791.731279][T26900] netlink: 'syz.0.5674': attribute type 17 has an invalid length. [ 791.815900][T26910] gre0: entered allmulticast mode [ 792.155423][T26900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.197128][T26900] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.226031][T26900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.307483][T26900] veth0_macvtap: left allmulticast mode [ 792.343685][T26900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.355411][T26900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.366127][T26900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 792.375204][T26900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 792.385994][T26900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.394888][T26900] ip6erspan1: left allmulticast mode [ 792.402331][T26900] xfrm1: left allmulticast mode [ 792.412418][T26900] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.421043][T26900] bond8: left promiscuous mode [ 792.425811][T26900] bridge4: left promiscuous mode [ 792.439697][T26900] ip6tnl1: left promiscuous mode [ 792.448255][T26900] ip6gre2: left allmulticast mode [ 792.456277][T26900] 8021q: adding VLAN 0 to HW filter on device eth0 [ 792.466428][T26900] 8021q: adding VLAN 0 to HW filter on device eth1 [ 792.475991][T26900] 8021q: adding VLAN 0 to HW filter on device eth2 [ 792.484984][T26900] 8021q: adding VLAN 0 to HW filter on device eth3 [ 792.496047][T26900] xfrm2: left promiscuous mode [ 792.501511][T26900] xfrm2: left allmulticast mode [ 792.509930][T26900] sit4: left promiscuous mode [ 792.515301][T26900] sit4: left allmulticast mode [ 792.539635][T25235] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.546859][T25235] bridge0: port 1(bridge_slave_0) entered listening state [ 792.567766][T25235] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.574980][T25235] bridge0: port 2(bridge_slave_1) entered listening state [ 792.687042][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5681'. [ 792.690670][T26918] syzkaller0: entered promiscuous mode [ 792.703338][T26918] syzkaller0: entered allmulticast mode [ 792.708976][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5681'. [ 792.725925][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5680'. [ 792.955938][T26957] netlink: 'syz.2.5684': attribute type 39 has an invalid length. [ 793.278675][T26965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5688'. [ 793.346553][T26966] netlink: 'syz.4.5688': attribute type 3 has an invalid length. [ 795.256478][T26957] hsr_slave_0: left promiscuous mode [ 795.286608][T26957] hsr_slave_1: left promiscuous mode [ 795.421697][T24410] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 795.520587][ T5853] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 795.667192][T26981] syzkaller0: entered promiscuous mode [ 795.689269][T26981] syzkaller0: entered allmulticast mode [ 795.764585][T26987] bond0: entered promiscuous mode [ 795.785566][T26987] bond0: left promiscuous mode [ 796.054184][T27006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5699'. [ 796.068586][T27009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.306578][T25235] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 796.802124][T27049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5712'. [ 796.825279][T27051] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5713'. [ 796.838830][T27052] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5713'. [ 796.866256][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5714'. [ 796.902222][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5714'. [ 796.915304][T27059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.019621][T27059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'. [ 797.283764][T27078] netlink: 'syz.1.5719': attribute type 5 has an invalid length. [ 797.343187][T25235] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 797.385043][T25235] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 797.575837][T27094] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 797.592140][T27094] batman_adv: batadv0: Adding interface: wlan0 [ 797.633328][T27094] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.712983][T27094] batman_adv: batadv0: Interface activated: wlan0 [ 797.892021][T27105] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 797.913193][T27109] netlink: 'syz.3.5729': attribute type 1 has an invalid length. [ 797.917852][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5728'. [ 797.955115][T27105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5728'. [ 798.220747][ T9] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 798.228098][T27119] bridge8: entered promiscuous mode [ 798.248237][T27119] bridge8: entered allmulticast mode [ 798.384425][ T5641] block nbd5: Receive control failed (result -110) [ 798.474168][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5735'. [ 798.498220][T27128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5737'. [ 798.515896][T27126] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 798.524169][T27128] tipc: Invalid UDP bearer configuration [ 798.524223][T27128] tipc: Enabling of bearer rejected, failed to enable media [ 799.051794][T27162] netlink: 'syz.1.5746': attribute type 1 has an invalid length. [ 799.196195][T27172] netlink: 'syz.4.5748': attribute type 1 has an invalid length. [ 799.324030][T27176] netlink: 'syz.1.5749': attribute type 11 has an invalid length. [ 799.387981][T27178] Cannot find add_set index 65532 as target [ 799.402053][T27177] Cannot find add_set index 65532 as target [ 800.389137][T27222] macvtap1: entered promiscuous mode [ 800.415382][T27222] team0: entered promiscuous mode [ 800.433953][T27222] team_slave_0: entered promiscuous mode [ 800.457772][T27222] team_slave_1: entered promiscuous mode [ 800.467452][T27222] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 800.475626][T27222] team0: Device macvtap1 is already an upper device of the team interface [ 800.499211][T27222] team0: left promiscuous mode [ 800.575776][ T42] team_slave_0: left promiscuous mode [ 800.581224][ T42] team_slave_1: left promiscuous mode [ 800.747473][T27239] veth7: entered promiscuous mode [ 800.886655][T27251] IPVS: length: 107 != 8 [ 801.033439][T27256] batman_adv: batadv0: Interface deactivated: wlan0 [ 801.660319][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 802.135581][T27298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 802.223294][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 802.232275][ C0] bridge0: port 4(gretap0) entered learning state [ 802.309730][T27305] __nla_validate_parse: 15 callbacks suppressed [ 802.309753][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5778'. [ 802.695640][T27327] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.711567][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5782'. [ 803.223804][T27360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5785'. [ 803.235184][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5785'. [ 803.252945][T27360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5785'. [ 803.266260][T27362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5785'. [ 803.698455][T27383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5787'. [ 803.837926][T27390] netlink: 'syz.3.5788': attribute type 9 has an invalid length. [ 803.963975][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5789'. [ 804.586108][T27278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.783717][T27404] netlink: 'syz.0.5792': attribute type 2 has an invalid length. [ 804.799948][T27404] netlink: 'syz.0.5792': attribute type 2 has an invalid length. [ 804.811826][T27404] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5792'. [ 804.895332][ T29] audit: type=1804 audit(1779741509.532:20): pid=27412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5794" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2526 res=1 errno=0 [ 804.986958][T27414] tipc: Failed to remove unknown binding: 66,1,1/0:743689990/743689992 [ 804.996320][T27414] tipc: Failed to remove unknown binding: 66,1,1/0:743689990/743689992 [ 805.009987][T27414] netlink: 'syz.0.5796': attribute type 142 has an invalid length. [ 805.019490][ T29] audit: type=1800 audit(1779741509.532:21): pid=27412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5794" name="cgroup.controllers" dev="tmpfs" ino=2526 res=0 errno=0 [ 805.299313][T27427] tipc: Enabling of bearer rejected, failed to enable media [ 805.348963][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5800'. [ 805.465519][T27430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 805.718759][T27451] netlink: 'syz.4.5807': attribute type 1 has an invalid length. [ 805.740009][T27451] netlink: 'syz.4.5807': attribute type 1 has an invalid length. [ 806.340622][T27493] sctp: [Deprecated]: syz.3.5813 (pid 27493) Use of int in maxseg socket option. [ 806.340622][T27493] Use struct sctp_assoc_value instead [ 806.531722][T27505] openvswitch: netlink: Flow key attr not present in new flow. [ 806.875881][T27524] netlink: 'syz.3.5821': attribute type 11 has an invalid length. [ 807.185899][T27541] netlink: 'syz.4.5825': attribute type 18 has an invalid length. [ 807.396073][T12565] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.423875][T12565] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.461612][T12565] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.499315][T12565] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.583941][T27555] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 807.998609][T27573] __nla_validate_parse: 15 callbacks suppressed [ 807.998631][T27573] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5833'. [ 808.049170][T27573] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5833'. [ 808.093370][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5835'. [ 808.135414][T27577] netem: invalid attributes len -5 [ 808.179147][T27577] netem: change failed [ 808.185915][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5836'. [ 808.239095][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5836'. [ 808.518573][T27601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5838'. [ 808.685560][T27608] openvswitch: netlink: EtherType 50a is less than min 600 [ 808.745240][T27611] openvswitch: netlink: IPv4 tun info is not correct [ 808.906650][T27617] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5842'. [ 809.109466][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5843'. [ 809.162147][T27628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5846'. [ 809.739377][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5852'. [ 809.766723][T27659] netlink: 'syz.3.5853': attribute type 1 has an invalid length. [ 809.774923][T27657] netlink: 'syz.0.5852': attribute type 18 has an invalid length. [ 809.783634][T27659] netlink: 'syz.3.5853': attribute type 2 has an invalid length. [ 809.795505][T27657] netlink: 'syz.0.5852': attribute type 18 has an invalid length. [ 810.185804][T27669] netlink: 'syz.3.5857': attribute type 4 has an invalid length. [ 810.252018][T27669] .`: renamed from bond0 (while UP) [ 810.373135][T27673] netlink: 'syz.3.5858': attribute type 5 has an invalid length. [ 810.540382][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 812.326170][T27633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.587337][T27689] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 812.664199][T27693] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 812.693334][T27693] 0ªX¹¦Dö»: entered allmulticast mode [ 812.744870][T27689] [ 812.747259][T27689] ====================================================== [ 812.754290][T27689] WARNING: possible circular locking dependency detected [ 812.761313][T27689] syzkaller #0 Not tainted [ 812.765728][T27689] ------------------------------------------------------ [ 812.772742][T27689] syz.0.5863/27689 is trying to acquire lock: [ 812.778803][T27689] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 812.788127][T27689] [ 812.788127][T27689] but task is already holding lock: [ 812.795493][T27689] ffff88803524a960 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 812.805071][T27689] [ 812.805071][T27689] which lock already depends on the new lock. [ 812.805071][T27689] [ 812.815472][T27689] [ 812.815472][T27689] the existing dependency chain (in reverse order) is: [ 812.824482][T27689] [ 812.824482][T27689] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 812.832307][T27689] lock_sock_nested+0x41/0x100 [ 812.837602][T27689] mptcp_sendmsg_fastopen+0x128/0x580 [ 812.843496][T27689] mptcp_sendmsg+0x1b0c/0x1dc0 [ 812.848792][T27689] ____sys_sendmsg+0x80a/0x9f0 [ 812.854087][T27689] ___sys_sendmsg+0x2a5/0x360 [ 812.859296][T27689] __x64_sys_sendmsg+0x1bd/0x2a0 [ 812.864763][T27689] do_syscall_64+0x15f/0xf80 [ 812.869873][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.876287][T27689] [ 812.876287][T27689] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 812.883936][T27689] lock_sock_nested+0x41/0x100 [ 812.889227][T27689] inet_shutdown+0x6a/0x390 [ 812.894251][T27689] nbd_mark_nsock_dead+0x2e9/0x560 [ 812.899887][T27689] recv_work+0x1c2e/0x1d40 [ 812.904826][T27689] process_scheduled_works+0xb5d/0x1860 [ 812.910892][T27689] worker_thread+0xa53/0xfc0 [ 812.916005][T27689] kthread+0x389/0x470 [ 812.920601][T27689] ret_from_fork+0x514/0xb70 [ 812.925726][T27689] ret_from_fork_asm+0x1a/0x30 [ 812.931013][T27689] [ 812.931013][T27689] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 812.938666][T27689] __mutex_lock+0x1a3/0x1550 [ 812.943781][T27689] nbd_queue_rq+0x37b/0x1100 [ 812.948898][T27689] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 812.954974][T27689] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 812.961824][T27689] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 812.968329][T27689] blk_mq_run_hw_queue+0x348/0x4f0 [ 812.973970][T27689] blk_mq_dispatch_list+0xd16/0xe10 [ 812.979699][T27689] blk_mq_flush_plug_list+0x48d/0x570 [ 812.985607][T27689] __blk_flush_plug+0x3ed/0x4d0 [ 812.990988][T27689] __submit_bio+0x28d/0x580 [ 812.996017][T27689] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 813.002178][T27689] block_read_full_folio+0x599/0x830 [ 813.007987][T27689] filemap_read_folio+0x137/0x3b0 [ 813.013566][T27689] do_read_cache_folio+0x358/0x590 [ 813.019210][T27689] read_part_sector+0xb6/0x2b0 [ 813.024507][T27689] adfspart_check_ICS+0xb1/0x960 [ 813.029976][T27689] bdev_disk_changed+0x817/0x1770 [ 813.035530][T27689] blkdev_get_whole+0x380/0x510 [ 813.040912][T27689] bdev_open+0x31e/0xd30 [ 813.045684][T27689] blkdev_open+0x470/0x610 [ 813.050623][T27689] do_dentry_open+0x785/0x14e0 [ 813.055914][T27689] vfs_open+0x3b/0x340 [ 813.060506][T27689] path_openat+0x2e08/0x3860 [ 813.065634][T27689] do_file_open+0x23e/0x4a0 [ 813.070664][T27689] do_sys_openat2+0x113/0x200 [ 813.075874][T27689] __x64_sys_openat+0x138/0x170 [ 813.081247][T27689] do_syscall_64+0x15f/0xf80 [ 813.086358][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.092778][T27689] [ 813.092778][T27689] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 813.099992][T27689] __mutex_lock+0x1a3/0x1550 [ 813.105113][T27689] nbd_queue_rq+0xc6/0x1100 [ 813.110165][T27689] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 813.116271][T27689] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 813.123130][T27689] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 813.129649][T27689] blk_mq_run_hw_queue+0x348/0x4f0 [ 813.135298][T27689] blk_mq_dispatch_list+0xd16/0xe10 [ 813.141040][T27689] blk_mq_flush_plug_list+0x48d/0x570 [ 813.146952][T27689] __blk_flush_plug+0x3ed/0x4d0 [ 813.152340][T27689] __submit_bio+0x28d/0x580 [ 813.157374][T27689] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 813.163542][T27689] block_read_full_folio+0x599/0x830 [ 813.169355][T27689] filemap_read_folio+0x137/0x3b0 [ 813.174913][T27689] do_read_cache_folio+0x358/0x590 [ 813.180552][T27689] read_part_sector+0xb6/0x2b0 [ 813.185850][T27689] adfspart_check_ICS+0xb1/0x960 [ 813.191318][T27689] bdev_disk_changed+0x817/0x1770 [ 813.196878][T27689] blkdev_get_whole+0x380/0x510 [ 813.202266][T27689] bdev_open+0x31e/0xd30 [ 813.207038][T27689] blkdev_open+0x470/0x610 [ 813.211977][T27689] do_dentry_open+0x785/0x14e0 [ 813.217262][T27689] vfs_open+0x3b/0x340 [ 813.221850][T27689] path_openat+0x2e08/0x3860 [ 813.226970][T27689] do_file_open+0x23e/0x4a0 [ 813.232000][T27689] do_sys_openat2+0x113/0x200 [ 813.237199][T27689] __x64_sys_openat+0x138/0x170 [ 813.242571][T27689] do_syscall_64+0x15f/0xf80 [ 813.247679][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.254090][T27689] [ 813.254090][T27689] -> #3 (set->srcu){.+.+}-{0:0}: [ 813.261227][T27689] __synchronize_srcu+0xca/0x300 [ 813.266688][T27689] elevator_switch+0x1e8/0x7a0 [ 813.271978][T27689] elevator_change+0x2cc/0x450 [ 813.277273][T27689] elevator_set_default+0x36c/0x430 [ 813.282999][T27689] blk_register_queue+0x3e9/0x4e0 [ 813.288544][T27689] __add_disk+0x677/0xd50 [ 813.293399][T27689] add_disk_fwnode+0xfb/0x480 [ 813.298599][T27689] nbd_dev_add+0x72c/0xb50 [ 813.303535][T27689] nbd_init+0x168/0x1f0 [ 813.308214][T27689] do_one_initcall+0x250/0x870 [ 813.313503][T27689] do_initcall_level+0x104/0x190 [ 813.318967][T27689] do_initcalls+0x59/0xa0 [ 813.323825][T27689] kernel_init_freeable+0x2a6/0x3e0 [ 813.329554][T27689] kernel_init+0x1d/0x1d0 [ 813.334423][T27689] ret_from_fork+0x514/0xb70 [ 813.339555][T27689] ret_from_fork_asm+0x1a/0x30 [ 813.344854][T27689] [ 813.344854][T27689] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 813.352686][T27689] __mutex_lock+0x1a3/0x1550 [ 813.357805][T27689] elevator_change+0x1b3/0x450 [ 813.363099][T27689] elevator_set_none+0xb5/0x140 [ 813.368481][T27689] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 813.374809][T27689] nbd_start_device+0x17f/0xb10 [ 813.380191][T27689] nbd_genl_connect+0x165b/0x1cf0 [ 813.385747][T27689] genl_family_rcv_msg_doit+0x22a/0x330 [ 813.391821][T27689] genl_rcv_msg+0x61c/0x7a0 [ 813.396854][T27689] netlink_rcv_skb+0x232/0x4b0 [ 813.402163][T27689] genl_rcv+0x28/0x40 [ 813.406671][T27689] netlink_unicast+0x75c/0x8e0 [ 813.411962][T27689] netlink_sendmsg+0x813/0xb40 [ 813.417259][T27689] ____sys_sendmsg+0x972/0x9f0 [ 813.422557][T27689] ___sys_sendmsg+0x2a5/0x360 [ 813.427773][T27689] __x64_sys_sendmsg+0x1bd/0x2a0 [ 813.433250][T27689] do_syscall_64+0x15f/0xf80 [ 813.438365][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.444784][T27689] [ 813.444784][T27689] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 813.453398][T27689] blk_alloc_queue+0x546/0x680 [ 813.458694][T27689] __blk_mq_alloc_disk+0x197/0x390 [ 813.464325][T27689] nbd_dev_add+0x499/0xb50 [ 813.469265][T27689] nbd_init+0x168/0x1f0 [ 813.473942][T27689] do_one_initcall+0x250/0x870 [ 813.479231][T27689] do_initcall_level+0x104/0x190 [ 813.484698][T27689] do_initcalls+0x59/0xa0 [ 813.489555][T27689] kernel_init_freeable+0x2a6/0x3e0 [ 813.495285][T27689] kernel_init+0x1d/0x1d0 [ 813.500146][T27689] ret_from_fork+0x514/0xb70 [ 813.505265][T27689] ret_from_fork_asm+0x1a/0x30 [ 813.510554][T27689] [ 813.510554][T27689] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 813.517766][T27689] __lock_acquire+0x15a5/0x2cf0 [ 813.523142][T27689] lock_acquire+0x106/0x350 [ 813.528171][T27689] fs_reclaim_acquire+0x71/0x100 [ 813.533635][T27689] __kmalloc_cache_noprof+0x40/0x660 [ 813.539447][T27689] tcp_fastopen_defer_connect+0x250/0x390 [ 813.545691][T27689] tcp_v4_connect+0x10ac/0x19b0 [ 813.551068][T27689] __inet_stream_connect+0x25a/0xdd0 [ 813.556875][T27689] inet_stream_connect+0x66/0xa0 [ 813.562335][T27689] __sys_connect+0x312/0x450 [ 813.567448][T27689] __x64_sys_connect+0x7a/0x90 [ 813.572739][T27689] do_syscall_64+0x15f/0xf80 [ 813.577850][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.584265][T27689] [ 813.584265][T27689] other info that might help us debug this: [ 813.584265][T27689] [ 813.594492][T27689] Chain exists of: [ 813.594492][T27689] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 813.594492][T27689] [ 813.607284][T27689] Possible unsafe locking scenario: [ 813.607284][T27689] [ 813.614745][T27689] CPU0 CPU1 [ 813.620117][T27689] ---- ---- [ 813.625485][T27689] lock(k-sk_lock-AF_INET); [ 813.630084][T27689] lock(sk_lock-AF_INET); [ 813.637025][T27689] lock(k-sk_lock-AF_INET); [ 813.644140][T27689] lock(fs_reclaim); [ 813.648126][T27689] [ 813.648126][T27689] *** DEADLOCK *** [ 813.648126][T27689] [ 813.656266][T27689] 1 lock held by syz.0.5863/27689: [ 813.661384][T27689] #0: ffff88803524a960 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 813.671419][T27689] [ 813.671419][T27689] stack backtrace: [ 813.677320][T27689] CPU: 1 UID: 0 PID: 27689 Comm: syz.0.5863 Not tainted syzkaller #0 PREEMPT(full) [ 813.677340][T27689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.677350][T27689] Call Trace: [ 813.677357][T27689] [ 813.677363][T27689] dump_stack_lvl+0xe8/0x150 [ 813.677386][T27689] print_circular_bug+0x2e1/0x300 [ 813.677409][T27689] check_noncircular+0x12e/0x150 [ 813.677433][T27689] __lock_acquire+0x15a5/0x2cf0 [ 813.677454][T27689] ? __tcp_get_metrics+0x7ec/0x870 [ 813.677477][T27689] ? __kmalloc_cache_noprof+0x40/0x660 [ 813.677499][T27689] lock_acquire+0x106/0x350 [ 813.677514][T27689] ? __kmalloc_cache_noprof+0x40/0x660 [ 813.677536][T27689] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 813.677558][T27689] fs_reclaim_acquire+0x71/0x100 [ 813.677579][T27689] ? __kmalloc_cache_noprof+0x40/0x660 [ 813.677600][T27689] __kmalloc_cache_noprof+0x40/0x660 [ 813.677622][T27689] ? tcp_fastopen_defer_connect+0x250/0x390 [ 813.677645][T27689] tcp_fastopen_defer_connect+0x250/0x390 [ 813.677668][T27689] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 813.677688][T27689] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 813.677712][T27689] ? __pfx_secure_tcp_seq_and_ts_off+0x10/0x10 [ 813.677735][T27689] ? sk_setup_caps+0x9ef/0xc40 [ 813.677759][T27689] ? sk_setup_caps+0x29/0xc40 [ 813.677782][T27689] tcp_v4_connect+0x10ac/0x19b0 [ 813.677809][T27689] ? __pfx_tcp_v4_connect+0x10/0x10 [ 813.677831][T27689] __inet_stream_connect+0x25a/0xdd0 [ 813.677849][T27689] ? do_raw_spin_lock+0x12b/0x2f0 [ 813.677871][T27689] ? lock_sock_nested+0x6a/0x100 [ 813.677888][T27689] ? __pfx___inet_stream_connect+0x10/0x10 [ 813.677905][T27689] ? inet_stream_connect+0x51/0xa0 [ 813.677921][T27689] ? __local_bh_enable_ip+0xd0/0x130 [ 813.677938][T27689] inet_stream_connect+0x66/0xa0 [ 813.677955][T27689] __sys_connect+0x312/0x450 [ 813.677975][T27689] ? __pfx___sys_connect+0x10/0x10 [ 813.677999][T27689] ? rcu_is_watching+0x15/0xb0 [ 813.678019][T27689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.678035][T27689] __x64_sys_connect+0x7a/0x90 [ 813.678056][T27689] do_syscall_64+0x15f/0xf80 [ 813.678069][T27689] ? trace_irq_disable+0x3b/0x140 [ 813.678093][T27689] ? clear_bhb_loop+0x40/0x90 [ 813.678110][T27689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.678125][T27689] RIP: 0033:0x7fd6d5f9ce59 [ 813.678140][T27689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.678154][T27689] RSP: 002b:00007fd6d6e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 813.678178][T27689] RAX: ffffffffffffffda RBX: 00007fd6d6215fa0 RCX: 00007fd6d5f9ce59 [ 813.678190][T27689] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 813.678200][T27689] RBP: 00007fd6d6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 813.678210][T27689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.678219][T27689] R13: 00007fd6d6216038 R14: 00007fd6d6215fa0 R15: 00007fffdf58f948 [ 813.678237][T27689] [ 814.027118][T27694] __nla_validate_parse: 9 callbacks suppressed [ 814.027160][T27694] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5861'. [ 814.062283][T27701] netlink: 'syz.2.5865': attribute type 1 has an invalid length. [ 814.189800][T27701] 8021q: adding VLAN 0 to HW filter on device bond13 [ 822.710216][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 822.717403][ C1] bridge0: port 1(bridge_slave_0) entered learning state