last executing test programs: 2.431912221s ago: executing program 4 (id=3694): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0x4, 0x1}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e2"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.280005885s ago: executing program 4 (id=3697): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400), 0x3) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000440)) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'vlan0\x00'}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x20) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x42) getsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000580)=""/66, &(0x7f0000000600)=0x42) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000640)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000680)=0x10) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000006c0)) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000700)={r6, 0xf4, 0x20}, &(0x7f0000000740)=0xc) socket$kcm(0x29, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000007c0)={0xc, 0x20, [0x5208, 0x3, 0x1ff, 0x81], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000800)={0x1, 0x8d, 0x5, 0x8, 0x9, 0x5, 0x0, 0x9, 0x6, 0xd, 0x2, 0xe2, 0x6, 0xa}, 0xe) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000840)=0x4, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000880)={0x0, r4, 0x0, 0x2, 0x3}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000008c0)={0xfff}, 0x4) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x9}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000a40)={0x1, [0x5]}, 0x6) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r3) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r10, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x1000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000bc0)=r4, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000c80)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xffffffff, 0xc, 0x1, 0x5494efa0, 0xd, 0x9}, {0x5, 0x9, 0xffffffffffff6b44, 0x7, 0x6, 0x1}], ['\x00']}) 1.911265415s ago: executing program 2 (id=3701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}}) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x191}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xf8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x747}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x37}]}, {0x4}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8515}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x822}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x350, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x164, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}]}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x8c, 0x6, "52bd05d8b79b272c5ad42f99a695219d44a5f2f4e880f2f168aa60f357dc5e4c2b55b6e2322e270e25d250ad16f19f1adc46cfb3609514018c603468cd4876138c8718c18abd3d17494ec212939c5ccf87933995c969adddaba72d60e19ffea7f862ecba3ff264989e489968f7c5b177b8441516a55d7a8a97cbb2d45699c5b6311c35eeeed443b2"}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x128, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7b}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x24, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3db1acf7b65d22745e547a"}]}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x3d}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x730}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) (rerun: 32) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 1.820623876s ago: executing program 4 (id=3702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x47}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf4}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x17}}, @NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0x18}}]}, 0xfffffda0}, 0x1, 0x0, 0x0, 0x4081}, 0x20008004) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x20008040) recvmsg$can_raw(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.724147019s ago: executing program 0 (id=3703): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x1, 'wg0\x00', {}, 0x9}) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 1.721833021s ago: executing program 3 (id=3705): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="2800000010000108000000000300000000000000bb62c1b238ac09bac2436467ee775e6af16ddc15bf2d7b59bf3cf8fe39dc033b120317449607f74653f2b62cd0c86e4c2a901d6abd9295d9215ddeb8aaa7d83eca15d3c1c66bbe28a968b9ef14e856d82dcbf765603e2db67ff4a4c1b8d9c9e4513012810841ca2863e5eec82e826aef9b1fc943e1416107a13dc068926c632d36ac57ebf033cae53b7425dea6b37d8ea707b1fd42d5cb1d4815be79f52d95", @ANYRES32=0x0, @ANYBLOB="000000009002010008001c00", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1, 0x3, 0x5, 0x2}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000280)="58d9bc1b734567fd9389e3bf9992aff657261c8a9db3b520ec783f1a8d235716593a59206dc2231e178d5435b8228215873e7cd39095cbd8a44f44945d17846fa92d4ca3f574ab703898dfd9950d5a87c6e3ff785feb75f0777bf49fd79e09cddfe20a674dc9590fd4880de7907218b6936f04b713d447b4c3facaa9d0042aedad8d815a3b2bf86888c57069a2a8aa8c74c01a67aa96b9b6459b62b7b18aade27fbac5a94318bc6c9b19d2903a8aa920648454aeed9334af44db74ce0e593b51e48cb9f34f2fa598f89b0bddbad79fce538f47c311918f9be6d2388d98", 0xdd}, {&(0x7f0000000380)="be7bd70f92c779db5eaeccc9776052", 0xf}, {&(0x7f00000003c0)="0c20c1d730147426ff51347ca48ef698abef0514ee7874fad9896a85f830b5fa7642bf0aa2ecfa5d46a20fbc75f9afc3337778133928d1412edb2afb0382a4bb31d5258663822eefdee88a5e51daf15c0c53191b4c54d81418ea7218fe22094eff01f8b0a027a6f61dc5b68d33d2782a76830babc5d2421913be7962c877b2c3982ea47e3aa9f0e1f26475ac9981905c2d6acda1d580e5333922e6eb1e7a7184bf4a666527582b52c5ae08e986cf49", 0xaf}, {&(0x7f0000000480)="b556965f401fe5b971b00d42201947c95986a07c694f2352c0b0aca4592e15ea1a1c07aa6d710e5b298f14807b5e558feabc823b047d8d4678064a4e38b879fbdfa4ae1f5b8d1276a54547701410ea335783382092dc3fc80b0d113a515811b79b323498bffe501abe5e1873b093da895d720f96fbeb16cd8f8181ca088ab1c8831ef9df872ef03a775a9d503e23d051649824bd920023761db62801cb01d0a1dfeab0b0229c8c250ac0173032161762aa642b2804b164fe2dbef556fcc669734660ad33b089b5b65866838bf995b41337c0cbb14a8134a0e2d07922b20ce306f1c79d52", 0xe4}, {&(0x7f0000000580)="aa87f8c221c00d2fbeff987a79cf29c897396a5ac8a7", 0x16}, {&(0x7f0000000c40)="bf12d65ff00a2b5bbb62714cb34930d8d02a460dda35bebd587a7dec242a809593b29574047636b4c4d9663f135de529bf62d1caa5381ade60547cc20dfcb891bae2250a74e730ec2292be0e531f2392985bf3bbbd45c3005228c72bdaba2e4b14efd33a656d7a53b42e75bea606fe4bd0e1797334cd5e74faaffd00698729b9030a083206c8d1a42e4fd4594f4ec25912badfb1c0bb8933816a5ccc16336318dd74836c5ec99ad66f0f6bb1d722927810fe25360760c1b09354e63a6db996dee9e215aafbd42e845774f014a8604b5240c027479311d2de63dff8a52bad75a46a6c76fc462a0d0086abedbebcd6990a63075573fe52a4bb55e3be45e7cf8144edb3fb581706fb088104891d3814c86004c7e57f2bbf4592072245f21a0b00", 0x11f}, {&(0x7f0000000680)="c0a2af4f0ec8de061d7699dd9f23dd3acf8426efab457208287ee94ca790f72bc572cd60324f2c0c2d2770e99cf3795d5e9be5531edee3e1088c544acc42152da109d8d2b47dcc6048da4ced538ee7143aaf378c6416a7bf20655f397c550dd0e2e8ef35ea772acd3c8496fd8926eef4372020f230b0bd592514ce5c8556f6dbab615d5af69c41c7b2cb94e3b6fede5b00ca7eceed46cd471ff6e23a505dc623ef1a75f2dc778838d57928f79c12a177b6730d9448e073a313b4eb9058235db72d2a005887a3d491211b537a4fea818ff6ed887b2a5c55f871e63b3f0f86bf4c40d7ee7d888cd24a2d66073115", 0xed}, {&(0x7f0000000780)="60ce7af17f6cb7498ae751fe075fac27d4a8e7a961c3c28fbdc4aca8be23273cac1ebb23ffa1a367638f8630d88b39aaca5106f0f736", 0x36}], 0x9, &(0x7f0000003d40)=ANY=[@ANYRES64=r0], 0x1238}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0203fe020d00000000000004000000000300060000000000020000000000000000000000000040000200010000000000000009007fffffff030005000000000002000000ac1414aa00000000000000000007b7638300ab5f20f200000001001480000000000000000800000000"], 0x68}, 0x1, 0x7}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001ac0), 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) ioctl$sock_bt_hci(r6, 0x400448dc, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf25280000000a92ee81cc9e67c508002c00000000000800020037dfc833d1715a617a8bbca49cf4bf36f34730ae41a777e475e23fa7b15771b70661fdfb36f832eb4dc88d749797c41eb32cc7eadd3db3f825622238aa08dc75a4c6a961caca6eae687b7416df65b42990f06fe4c7ed7ef5f326d6806eb68266712e7a22c7922a6c82a7c041ecda21cf161a4441889fc6908d2c6c06fefc782ea01863c1eb009dcdc145c04b325183eb012e3d8fb921cdf8a5cdc2623b1961274079c8cc62efdcd3ec068a5d0f32dfc08ff39c502470b06c3cadb8a8f322e9ae6c07f151b90c518b192c854220c529c4405d158a7aaa2a1c6e673d3ca4956e59ec083c695c4f54272fba780f1931d9cbc1ac7c15aac8b0c3718323bd5637ac73488efc227df004eeed0d11fe0949c69ad2211052e0088247b0ba64af8ac7cbf7a0a6788017a0fdd210084ebf1dc7c3cec649d6b6775b5008e20eb8", @ANYRES32=r11, @ANYBLOB="0c002d000200aaaaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4004811}, 0x86) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r12, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r12, 0xd1383000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r13, 0xd7dd5000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r13, 0x1000) 1.584977885s ago: executing program 4 (id=3707): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000000)='S\\^[[\x00', 0x201, &(0x7f0000000040)={@_ha_fsid={[0x10000000, 0x4]}, {0x2, 0x1000, 0xfffffc00, 0x4}}, 0xfffffff9, &(0x7f0000000080), &(0x7f00000000c0)=0x800}, 0x1, &(0x7f0000000240)=[{0x2, 0x11a, &(0x7f0000000100)='%\x00', &(0x7f0000000140)="20f1e84c231e2199a40eddc21859fd0f4e607a93f63d8319cfb2145a8e82cb086878917c79c992e50be52ea026ebeb90e0a02784f734ebfd319ffa6e17a5681eb6aff693abcd42a8f6cd899d5edecfc0ab77e633473cbc8d3c437e2f5cabfa309a59cc931942bb7feb3d30ab76881ba13cc3f4f721255faf8a36ad7c6300758117957ccb18ab98cd1f3a8f0d1b47500197afa8450c1187f75e97f7ed371989d3de3c9062a794ead8fe0328e835be11c0998740d58258ae6a3550c24350b3b2c306119ebb2a449284cd7852b7ddb9e4da82e1c46678ebea093e05cb809f0ac92f5b0f9152ef397fd9e81cfd07ff62fbf46231", 0xf2}]}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000300)=0x3) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x3}, {0x8}, 0x100, 0x0, 0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)="ef24004bd0c7487c8134078d45011ba3321fefbc0fb7edc658bcd35f24a47139dc0c4564101e771222754c9d0a4574f965b49031052bdc4798c49df8cf99ff6067fe3fa59bc3efa7d7b279ca981155fbe2734218ce088e8ac01e6c7b885d7f6f995afe0bf994f4c3ec8074c5141a3843c25f13ae21694624dc126e936ded0f5df79c45", 0x83, 0x0, &(0x7f0000000540)={0x2, 0x182, {0x1, 0xc, 0xd2, "c6cdfa4412e5d1a3983620af8e3b5e91e61541f70dd98b1e1e28df20c2cfbfb6c34e7b1f02508055324753e4b9110e3f17c464d9f19d7befd8d43e3192231c3a37757a717c048d0927a5674f2673ffa60bc13a58ddc83bc60f6bd73a9c08b76d27839143b3eed105f0c71f154fc1ea8ac0b3a40eaa0e05b7fc4a2b3fc95f8fa203cae0039a67648bf7df706eb54246c5251c659f247d325f375e08e7fd36ad2c8da9cc401a49c77c7e5a5631105f5f46936d36af5451bb7d0e8d40538c56da8e0120119e4c13baf6800bad043b8024517b0c", 0xa3, "f7839c085f2da8aea9b50eb7525778bafc79deb1ff6629af43ea57974eb66d0be8c2e1203de36ecce02c58244e2a20a9318d8d544840f2104709a72a15814ce6814290482bb3d75d7383337fb745c5cb2ebb56ef1e94aaf6b53e9bd8625b1c9b5a915e9b9c8248ea9361561b509ebbc271e98ab20961a81c6e2285c4ce214d7975a5edc2c8386500d6674982feb92b6fa89f0c8c79c12fde4c3ac4e1b2ba075fbb05a5"}, 0xbf, "d4a2a2f613276376abbce214758fa4c1c579864f5ab27fdb83a3c920986e64edf3d4d2a07579f714a4e5cf34166daf52e6d16bd9588d34fdd683600157e579f4315b9018ebe138ce74ddd583a680d57dbd0f24d2da4a0957e7c162c83b37bb4251d2f681bdb42bdec00dcc4729a38bc46ee596740171e21777fceaf3d98623150f85a0c26660a43459fbe1054e767151420f4a1478f1f51c1ec41f09998ccdf9e404e1b81fbb21f4ad93a2e263b5d360fabc66e733a19ffb3fa3453bc71554"}, 0x24d}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000008c0)=@get={0x1, &(0x7f0000000840)=""/114, 0x9}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000900)={0x3, 0x0, 0x7, 0x17, 0x97, 0xff, 0xf, 0x4, 0x3, 0x7, 0x2, 0xa, 0x9, 0xd}, 0xe) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000940)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000009c0)=0x9, 0x8) r2 = accept4$unix(r0, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e, 0x80800) recvmmsg$unix(r2, &(0x7f0000005200)=[{{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/130, 0x82}, {&(0x7f0000000d00)=""/68, 0x44}, {&(0x7f0000000d80)=""/73, 0x49}, {&(0x7f0000000e00)=""/219, 0xdb}, {&(0x7f0000000f00)=""/85, 0x55}, {&(0x7f0000000f80)=""/34, 0x22}], 0x6, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000003540)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/79, 0x4f}, {&(0x7f00000031c0)=""/204, 0xcc}, {&(0x7f00000032c0)=""/146, 0x92}, {&(0x7f0000003380)=""/161, 0xa1}, {&(0x7f0000003440)=""/243, 0xf3}], 0x8, &(0x7f00000035c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003680)=""/97, 0x61}, {&(0x7f0000003700)=""/55, 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003780)=""/108, 0x6c}, {&(0x7f0000003800)=""/9, 0x9}, {&(0x7f0000003840)=""/27, 0x1b}, {&(0x7f0000003880)=""/244, 0xf4}, {&(0x7f0000003980)=""/249, 0xf9}, {&(0x7f0000003a80)=""/25, 0x19}, {&(0x7f0000003ac0)=""/186, 0xba}, {&(0x7f0000003b80)=""/107, 0x6b}], 0x8, &(0x7f0000003c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003dc0)=""/103, 0x67}], 0x1, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000005080)=[{&(0x7f0000003fc0)=""/169, 0xa9}, {&(0x7f0000004080)=""/4096, 0x1000}], 0x2, &(0x7f00000050c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x120}}], 0x7, 0x40000000, &(0x7f00000053c0)) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r4) sendmsg$NL80211_CMD_SET_REG(r15, &(0x7f00000055c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005580)={&(0x7f0000005480)={0xcc, r16, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xec24}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4034}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7fff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008090}, 0x20046800) recvmsg(r6, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000005600)=""/30, 0x1e}, {&(0x7f0000005640)=""/32, 0x20}, {&(0x7f0000005680)=""/176, 0xb0}, {&(0x7f0000005740)=""/183, 0xb7}, {&(0x7f0000005800)=""/192, 0xc0}, {&(0x7f00000058c0)=""/73, 0x49}, {&(0x7f0000005940)=""/16, 0x10}, {&(0x7f0000005980)=""/120, 0x78}], 0x8}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000005ac0)={'wg0\x00', 0x0}) ioctl$XFS_IOC_GET_RESBLKS(r10, 0x80105873, &(0x7f0000005b00)) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000005b80), r13) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000005c40)={&(0x7f0000005b40), 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x1c, r18, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$int_in(r2, 0x5452, &(0x7f0000005c80)=0x1) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005d00), r5) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000005f80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005f40)={&(0x7f0000005d40)={0x1cc, r19, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xea2c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x424}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x79}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c0}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x69c9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "69cb9455566eefca271bdd91647baefa731fb32b94cbc6c96da5d422c89648d6185285"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ed}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0xc042) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000006100)={{r13, &(0x7f0000005fc0)=',+\x00', 0x248100, &(0x7f0000006000)={@align=0x3, {0x1, 0xe4f1, 0x5, 0x8}}, 0xffffffff, &(0x7f0000006040), &(0x7f0000006080)=0x1}, {[0x5f, 0x6, 0x8]}, 0x5, 0x38, &(0x7f00000060c0)=""/56}) setsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000006180)={{{@in=@loopback, @in6=@mcast1, 0x4e21, 0x80, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x16, r17, r14}, {0x3, 0x7, 0xffffffffffffffe9, 0x6, 0x2, 0x1, 0x73, 0x101}, {0x10000000000000, 0x708, 0x5, 0x3}, 0x1, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in6=@private1, 0x3505, 0x2, 0x3, 0xff, 0x0, 0x2f0, 0xb}}, 0xe8) recvfrom$unix(r7, &(0x7f0000006280)=""/153, 0x99, 0x41, &(0x7f0000006340)=@file={0x1, './file0\x00'}, 0x6e) poll(&(0x7f00000063c0)=[{r11, 0x17a0}, {r12, 0x10}], 0x2, 0xffff) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f0000006400)=0x4, 0x4) r21 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r21, &(0x7f0000006440)={0xa, 0x0, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}, 0x20) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000064c0)={'dummy0\x00', &(0x7f0000006480)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x2e, 0x2, "6b9e3f", 0x800, [0x5, 0x7f, 0x3, 0x7, 0x7, 0x9, 0xc, 0x9]}}) 1.491716787s ago: executing program 2 (id=3708): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'geneve1\x00', @multicast}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) write$ppp(r0, &(0x7f0000000540)='|Z', 0x2) (async) listen(r6, 0x2d) 1.481437107s ago: executing program 0 (id=3709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="016fe9ff010008000000020000ed4500003000090010008490783fffffffac1414da2cc34494186c17276aec55d9b0367d6f61e644bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7a000005907800180903000502000000"], 0x3e) 1.444897818s ago: executing program 1 (id=3710): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xcdf2, 0x4}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x15) shutdown(r1, 0x1) r2 = accept$packet(r0, 0x0, &(0x7f0000000100)) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8000, 0x8, 0x9, 0x2, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x66, 0x0, 0xf, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x24, 0xd, 0x1, 0x0, [{@loopback, 0x101}, {@private=0xa010100, 0xffffffb7}, {@multicast2, 0x9}, {@loopback, 0xfff}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0x0, [0x351ab200, 0x8, 0x76, 0x5]}, @timestamp_addr={0x44, 0x2c, 0xaa, 0x1, 0x5, [{@rand_addr=0x8000, 0x5}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x7fffffff}]}, @generic={0x44, 0x12, "ae65c3799c950da1211c92b3ced2e552"}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={&(0x7f00000003c0)=""/174, 0xae, 0x0, &(0x7f0000000480)=""/237, 0xed}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x50, &(0x7f0000000200)=""/80, 0x40f00, 0x0, '\x00', r3, @fallback=0x27, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x1, 0xbb6, 0x800}, 0x10, r4, r0, 0x0, &(0x7f00000006c0)=[r5], 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffffd}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000008c0)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x2, 0x0, 0x0, 0x4}, &(0x7f0000000980)=0x98) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b80)={&(0x7f00000009c0)="28462472edecacf77a36a910311baf1ad3405f53548065ec0938c30246598587146c810d9dec79fc56", &(0x7f0000000a00)=""/205, &(0x7f0000000b00)="470b26559940fc3c1ab9c730d2549a415ee44d046ce9120d2e098efd11d94c", &(0x7f0000000b40)="62bb2aa925af54fc1446f05eac70ca650c35", 0x3, r5}, 0x38) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) writev(r5, &(0x7f0000001000)=[{&(0x7f0000000bc0)="51e0e06f15b4bbf6dc7de017c1717f66ec262cf3d12839d5921cbda5f720416f3caf06827f233f7a4b3740e97cd00bf2c153498a516167bfe1974258616428a7503b367eadf6b3fd0e1e97e3427f4a41afcec399b20dcc51925b83186e796792938a56267286696c4375827c73bd8a7c4196e4a805a6726e819879a39464d32e1544f7e17bb9bb30747a08f4ec6d88c0", 0x90}, {&(0x7f0000000c80)="0b84765e61d9ed1b865bbb4cf00dbd8506dd0302ccb08602a2d060cf4e0168ba38221e14d2631341f94871de29801b4e7be960351f27a07d0c25885dc10e924da6d87b68350b771cd9fb3ba1234ffefdb9c9590dbf0708cffb3799a25a922f370e0f75e763c1c06b6dec5727b3f1c55ebc964967c642a5435fecb593008b60f49370a34eb74e8c93f779ad40a06836ddd60a3ddcd3287a22b3b4", 0x9a}, {&(0x7f0000000d40)="ebbc5f87d2dcd2c568343e0e50b5ea6dcf7bb5a2dcdc9e2a8b5cebdd8f8d0f6f593aa4eca384727add826bc4e8d4bbcaf3b6bf9563db5282ceb4e33e37df3ec7457a8aee64edf11aa555e3444efca152b74cc5bae67e68cca47ee2d19930a5b12ab5f666f562caff38714e27f2bb78d7e5c8f5badfbff8bc4fffc625870489b05e9c2fcc2a2b0ff93f96a243c613e7213280d6d445b315ae446c42f9bf27faec6f4ad178a42f84a80d144d74875b316ef22941677919dabb898cdc09e234fea469a98485cd35db1b5df482cc52c929706f704e7f1935cb80a3bdfc8627b488f9088c06bda0e34dd4b054b372687ab2a4d9d8cb3fa6d35f", 0xf7}, {&(0x7f0000000e40)="3be8f38ef430fe14a6a73c167316c85a05e5735fac61b55d35c7ce1480ff7d074eb0e2b43bba61cbd795142035f6d4a6eb27f6e71d604f39aabaa05e7a4ef7be992d35683ba7f01fa990bd9cb1e59e8b59da5e794e7b764bfd0a12a4683d51e63f5f155aee63a501d7161c4d3e4a63e6d64435c2", 0x74}, {&(0x7f0000000ec0)="6133a45da95fd81dd05591a63cfc27a6a862a7c7ac118a18d217349fef961c3bb5c3a2539398526ec1131601518f28b71729dc7ab8219646be0fd65e93550f31662c4d316060f822150839e20f1cf87b8d35c5ded77ab4a9a41338c52e240b61efb06189d0028ba15f96532c21182ad929a8719d2d082e94e5b645f806dd08155608f01dd60375752d61d9fac53bc137277ea4ba0e086bf07d4e372395b2442ffcce700049d57a1f98563d7f15b93f90ec6c443db57742c0e9753b0809672d80c0886dde7be7779c1705d8dc8ae7a8c144cd1b5eef16c9db8bb613da7508a3decdf6b3ce9970d960c13f0e5b", 0xec}, {&(0x7f0000000fc0)="37d6d3cfe6e46ad07190f49015ffc8bdde5aa3b4f3ba78c9a64fc466d144313130914dd628cf233d5b89943d656207f0de653ec5831a2edf3efb", 0x3a}], 0x6) connect$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0xa, @mcast2, 0x8}, 0x1c) r7 = socket$phonet(0x23, 0x2, 0x1) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f00000010c0)=""/61, &(0x7f0000001100)=0x3d) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001140)={'ipvlan1\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000001180)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10) getpeername$qrtr(r0, &(0x7f00000011c0), &(0x7f0000001200)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001280)={0x1000}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) syz_emit_ethernet(0x4f, &(0x7f00000013c0)={@random="2d2795d0b5cc", @empty, @void, {@llc={0x4, {@snap={0xab, 0xaa, "31e1", "cb0fd4", 0x7, "f1828daa23180fc19661ac9dcba4698ad36b1a386b33106d26ea3803365aa3aef63dfa61d48c78a64649220baaad3c0ac20124b38034ff0d"}}}}}, &(0x7f0000001440)={0x0, 0x3, [0xeec, 0xda0, 0x861, 0xdc7]}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x80010, 0xffffffffffffffff, 0xd483d000) 1.357885888s ago: executing program 3 (id=3711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) (async) getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x9, 0x4) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.263963189s ago: executing program 1 (id=3712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010", @ANYBLOB="ecd496655c6c12aa2022e2986b952050bf58d30ee751ef080379188d9a03130ab92091ac689624d63da56e31f3f72b3eb59917364f8c54e417dc3b457b34a585896b78bac2780b3db358955931494cf8deca429df65ca68679820692000f8374c70a2d38f46d9a55a376e3169110ed7741ae32c875d30a96bc1b260100"/138], 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='@\x13^\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0x5, 0x9]}, {0x4, 0x2, 0x2, 0x5}}, 0x1000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80000000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={'team_slave_1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}) 1.188999658s ago: executing program 0 (id=3713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000040)=0x332, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=@newqdisc={0x258, 0x24, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff2}, {0xfff1, 0xe}, {0x1, 0x18}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9f}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x7, 0x800, 0x1, 0x8000, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x8001, 0x6b8, 0x0]}}, {{0x1c, 0x1, {0x8f, 0x1, 0x3ff, 0x200, 0x0, 0x6bc, 0x2, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x1a0a]}}, {{0x1c, 0x1, {0x0, 0xb, 0x40, 0xff, 0x2, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x1, 0x7, 0xf2, 0x0, 0x0, 0x62ec930b, 0x3}}, {0xa, 0x2, [0xf, 0x6, 0x9]}}, {{0x1c, 0x1, {0x99, 0x3, 0x8000, 0xda7, 0x0, 0x6, 0xf3d, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0x6, 0xc]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x95, 0x6, 0x44, 0x1, 0xfd, 0x7fff, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}, {{0x1c, 0x1, {0x7, 0xe, 0xf000, 0x10, 0x1, 0xc41, 0x0, 0x3}}, {0xa, 0x2, [0x100, 0x2, 0x1]}}, {{0x1c, 0x1, {0x0, 0xdb, 0x3, 0xffffffff, 0x1, 0x1, 0x4, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x8, 0x0, 0x5, 0x0, 0x1, 0x6, 0x6, 0x7}}, {0x12, 0x2, [0x0, 0x1, 0x4, 0x1000, 0x2, 0x80, 0x5]}}]}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x787, 0x2, 0x2, 0x3, 0x6, 0x5}}, {0xe, 0x2, [0x1ff, 0x9, 0x5, 0xbf80, 0x1]}}, {{0x1c, 0x1, {0x81, 0xf, 0x400, 0x7f, 0x1, 0x78b, 0x9, 0x8}}, {0x14, 0x2, [0x2, 0x6, 0x300, 0x4, 0x101, 0x810, 0xb, 0x8]}}, {{0xffffff82, 0x1, {0xa, 0x47, 0x21, 0xd5, 0x1, 0x54ee48ab, 0x994, 0x3}}, {0xa, 0x2, [0x6, 0x101, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000980)={0x6, &(0x7f00000008c0)=[{0x9, 0x77, &(0x7f00000004c0)="b153ab9f17368bf370a60913767b3f240f5ba35940ab17421006198404555a49b1ec0f7eda7ada2e3276d6b2fe7e19c5fd551804e2acb679ab8b05258e823e39bf3d63f882f17b9c018d15688890ce41a734a674b46e24406cef0f8cd32bb535cd7a683c99ec64d264c4e491f09be9ee2b898ee2c8fa26", 0x0, 0x1}, {0x3, 0x3d, &(0x7f0000000540)="c9738c85c5959dd68bfa9b5977599ea981edef17da381a4506b0a6750e3dadbb92aa62f3e1f4739aae2f50d8161f7903a0d86fcf20186334be278c9d03"}, {0x4, 0xa6, &(0x7f0000000580)="cd999c0655fb850cc7a3b53fe0c478e9fe4544f6685097a7fed55c3c10300805c12e2b8eadc98474593888c788e9776449558d76c4a3b5d8b651790bd80954fe6290385dd4cd6a7c27a1c4a93d8fc2542062502c13708a6b2221e17d1090bcb9e8f77ecba89a99883bee7e2d2aa36cc5cf7867f88acd9f1a8f87ac6a3a438cc53d0be6b83f6c30f3bf1698bd89c0b5f40d6a05ab3b13a868492f933dac30957fdb9e223d4d77", 0x1}, {0x8, 0x8b, &(0x7f0000000640)="d7a33a34f5be50c0d84ab6e769df60592fd306f765d31eac450a9c74ae77f7823f29e3161160addc1e4a337838c3437adec78ab24e3f94f598e201194eeb5593fdf1da380d5e9524b41e0dfd825a2987288a8710933d647566132b89061f9c68fc5dbf3c70b79a1a0ae51003b4c3c823bbdd8b61e2d536d7381e44d8b1eeec198a7ad93ff2047657c7d7b3", 0x0, 0x1}, {0x2, 0xf6, &(0x7f0000000700)="c4de09f167b396788c35365dee66a18027d69639451acb391bcc99595f49e5a4c77e1f66267e30109c220c42feb8420dc94b01e1ec963865554171abb0133a063591d8e2981b594d4e161ded4b1ac1ec4e84ee865e1ca4fdb518fc6c7fee21db9a973d3124a9414d6ae55ace3662a960c377fc8a7f15aeae6a5a5bfd5abde96f80f6a160547ab111281c9c38ee2f396fea3c16e2a998b37012242716dea2ab1ca2ea2982212170e4e24911108b18940c8bb27c9402c1363ea0bf249d14ad4f1dad69c85f10c08a8428afa18a581337f856b5bd4ac180f44db06f567385afbf80d57c83652711356351b48fc5895a9bf1a327c29ee365", 0x1, 0x1}, {0xffff, 0xa4, &(0x7f0000000800)="d1d0ce22f34d2df811ab03bfce6a51b2dbbd839e87f5966476dd64e6c6414bdcfa64aa7962ded3a21e2d8f0609dd8ac7859d12e6aff8d66f9386d5230a35ebf8c99eb2163f162c3bdbcbdecf67a4ec3cbc9d7b298d78b73de2cdcb947e4318059c7c81c09606082a0f59c8c1e19dea79b9b56270276e50f2300d2db23f174553b994229ac82e4e7cff083d7f621648871c17d457b0e05679680327e94677297451924f71", 0x1}]}) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.180657071s ago: executing program 3 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x72bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x715}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x12}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.095994994s ago: executing program 1 (id=3715): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000100)=0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 1.073944671s ago: executing program 2 (id=3716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000300)) getsockopt$rose(r1, 0x104, 0x6ba05eb0794edd29, 0x0, &(0x7f0000002180)) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r4, 0x0) listen(r5, 0x4) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'vcan0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x7}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x8, 0x40}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'batadv0\x00', 'gre0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x228, 0x290, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2de, 0x5, 0x1, 'snmp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 994.551972ms ago: executing program 3 (id=3717): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000003"], 0x114}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 894.883608ms ago: executing program 2 (id=3718): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r7, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@can_delroute={0x3c, 0x19, 0x300, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6698c13a70ca67e7"}, 0x2}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 891.702459ms ago: executing program 1 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000040) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x37}}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x6, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) 774.294992ms ago: executing program 2 (id=3720): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 753.625108ms ago: executing program 0 (id=3721): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140a, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x800) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4000c840}, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'veth1\x00', @broadcast}) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x62) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000240)=[{0xf, 0xbd, 0x2, 0x10000}, {0x40, 0x5, 0x4, 0x7}, {0x8001, 0xa9, 0x0, 0x9}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xe7de243f0249d383, 0x300) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x31, 0x6, "83af51a1b7c326e57f19d88cdfa1d7d32a819629b46cedbcd0d64066cfa951031b1d04d74a7c3d043f5955deaf"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x72, 0x6, "9c2fdb2cff5bb200437abadad5526a4c98ffc026b9f93ba750ae468c2539b70fa758ccc27b5cd5c6d9fc09d9ce7fc4c4704161d1e732fc510fd96db8f1935bc8a57ac5863faf4ad59b41772d9fa0cde197efee9f8c128ced02e8e5b80e65311e350987919e328e3391130066dcbe"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000ffecdf250700000008004fab6847f5477364290300", @ANYRES32=r9, @ANYBLOB="0c009900010000005b000000"], 0x28}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) bind$tipc(r3, 0x0, 0x0) 714.172308ms ago: executing program 2 (id=3722): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x56}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x2, {0x3}, 0xff}, 0x18) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r10, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x7f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40400c0) 644.275578ms ago: executing program 1 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) syz_emit_ethernet(0xca, &(0x7f0000000240)={@broadcast, @link_local, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x90, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, [@srh, @dstopts={0x12c, 0x9, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x2, [0x6, 0x7, 0x4, 0x1, 0x5, 0xfffffffffffffff8]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0xd, 0xfff, [0xd498]}}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) 643.763462ms ago: executing program 4 (id=3724): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) 611.968865ms ago: executing program 0 (id=3725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x100000000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) r9 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x80, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}]}, 0x54}}, 0x48000) socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14"], 0x18, 0x8800}}], 0x1, 0x40001) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x68, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "9ac1df1fbda8356e59d3da8b53d5616f4a1469085ca67d09fbdefbf5e7fedbd3eb54ae693f19223e43f22298a151d6e40ded49c07302bab805470ad6333a54999c789e2d3c3c4e"}]}, @NFT_MSG_NEWTABLE={0x13c, 0x0, 0xa, 0x89a3669b261c84c5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x30, 0x6, "50bd06d1f9722c75e51223aef17e3a4f5923a44eeaf93e6da9ad38df86a9a5c42c584e7329c9cd5d734a552b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "e6ab0dd53e309105c9edca0a625beb6281a5bf822f39e3164e6f0a04fe2051a404003f62469a3deb4e1515b1f0ccfb1be32abbeaa74e2931"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x87, 0x6, "5a74a264a9df0c79df79046a8c6f76d4d537e64d479dcb5dee10c80fbf5fcf974124950542cf5d06af60b25168c3e73da2513d7420c217d70de46cd1c81bc3828ada991e4c880ad2be08b87827bc40cb435b185f96e0bc308ab053474f834fce01857faeac4aafcbe448689c80d8948db2f0a0311c0be9f519ed51d680ed54c0532993"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x12c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf6, 0x7, 0x1, 0x0, "c4a70c72f1277f0e329cc33f477d04e78ec1e83eb043a421ecc86d1d0280f0c91163ac01c48bce23eb91ab4588ee4a10e3a7b123690472850e60aef3ae054693407ea92c9fe0f01e22e46c0c19434197a086ecdc5f90ef569880e833145b1b8d5fc532cc68e61d925589393a9427aba4601eaeb364f6c35f958893919acb4e1e076d1cfa6c4484433cc79c3873e60c0b080651f26dd39f20408ecc08580153a13b770c2c6aef213bb49b25688f7223e930d175d4539b2715e8755c086a63967aaefdde93e56f4ea1e66d8f46b4c33bc57bda7c17c404d54f826d2b8eba35cc2c920bcd1b3bee7f7136c3b34df723131a43fa"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x328}, 0x1, 0x0, 0x0, 0x4000084}, 0x4040000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)=ANY=[@ANYBLOB="14c30000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 551.185735ms ago: executing program 4 (id=3726): sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019580)=ANY=[], 0x20}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='&\\\x00', 0x3, &(0x7f00000000c0)={@align=0x531, {0x4, 0x0, 0x1, 0xfffffffffffffff9}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfffffffc}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000300)="4c24b3cb3609075022e012683589065d9e15dc457d4c3c048ae4958bd762dcf83292ba615122a6d19b85f7ee5e151251e8d1de1531276f67566878e7fe71b9fd02045d", &(0x7f0000000380)=""/57, &(0x7f00000003c0)="4832cc94e8bbb4508b953143fd666701dee620d85a9c01a9554f7a448a093951f955bc84a35e7fa11320463d3b0b29b38abdefe013b5206479a425f6d33f301842031e40c195826cb316d22c3a320d034b993d40d53c3dcba836e812a8e121500284a3268ac17c45f4c05345f3243e283e163192024791cdb9320ec02996e51754c32c0b178c75d9077213a208dd324d099199aee283f63c163a8a4a92ce7ce6e2c9615d1043ba78599b4bce443fd3c75d45d99048578af2", &(0x7f0000000480)="d8e2b51509dd63885c4a7cb949b4a6262c40d1bba5467653992ef8e3f59fd2d27d7f71d46b8cbc1536b10d885234c4b5c97be3b06ef900735bc53ae95394f3cf15209aa1d0007d9b305780e1afc95269", 0x65ea, r1, 0x4}, 0x38) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, r5, 0x0, 0x3, 0x40, 0x5, "fea78d422467d7d540b26ea9eee9a84a4549c4214295fe97ae15572ff9aef19e7c6749e2dda04dd0c31d6eb53529e9a520a232ef4d7e7c7717649fdbb72a09", 0x22}, 0x60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 467.818251ms ago: executing program 1 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003a00010300e801000000000001000000"], 0x14}}, 0x1c110a5e9792ec99) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r4, 0x2}, &(0x7f0000001100)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x6, 0x8, 0x8, 0x0, 0xf, 0xa2, 0xa2, 0x6, 0xd, [0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0x6, 0x9, 0xa, 0xc]}}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000240)={@remote, @initdev, 0x0}, &(0x7f0000000280)=0xc) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0xfd, r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800005362dae5ea790136172e00000000000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf25020000004c000180060002006700000008000501000000000600020033000000060004004e20000006000100020000000600010002000000060004004e210000060002001100000008000800ffff0000e4aab57ea0a091c346183f05499b4aa91a41b5bd9f7f417fd3fd5b8f7694fba6aa27d00f3d15ee3c048e6ae24a8ee55c61742d6fd6f61b517b"], 0x60}, 0x1, 0x0, 0x0, 0x2400c815}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xdc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x5, 0x0, 0x66, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x700, 0xcbcc, 0x8}}) (async) socket$nl_generic(0x10, 0x3, 0x10) 467.015248ms ago: executing program 0 (id=3728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000a80)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2a, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x17d4}, 0x1, 0x0, 0x0, 0x10}, 0x10000840) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010024bd7000fedbdf250200000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r10, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a140000001100010000000000000000000300000b"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000b00)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4000040) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f4050000919eebcdcf9b7b00c95c4e6c799fd2fc5956694c2102bd15e2fb611fc153ed8a26bc2039a0a1b7aba386dedb427ba974babb8f02a0d1e31d5caf32efffba15df", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf254f0000000c009900020000003100000058007a801c000200579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a1c00020024cf4713299967bd15bf44cad1f4d266b29e2a4135a412b21c0002007282cdb224050171ea757aea781d4160e9223cc0312d38d660007a801c0002005f3b5d542091777612684837dbc0ec47ea67acb692453dd20c0003005bd58c80a1143827140002009811fc13340000000000005ab95947000c0003007b0b1387fec3f946140002007410fbfdffffffff00000800000000001c007a800c000300b27375be034408920c00030000e2000000000000"], 0xf4}}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400000000000004d, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@deltclass={0x68, 0x29, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x7, 0x2}, {0x1, 0xfff3}, {0xa, 0xfff1}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xfd, 0x9}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xe1, 0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x240000d5) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 258.173242ms ago: executing program 3 (id=3729): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r1, &(0x7f0000000000)=@can, &(0x7f00000000c0)=0x80) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@deltaction={0x0, 0x31, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xa1}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x36b1}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9c8}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0xfffffffffffffef7, 0x1, [{0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xafef}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3ff}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4024) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xfff6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xf}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x83b9fd92}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xb}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xfffffffc}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x1, 0x80, 0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) sendto$packet(r2, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 0s ago: executing program 3 (id=3730): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000500)="b5") socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x93, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@exit, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x80, 0x1000, &(0x7f0000001480)=""/4096, 0x41100, 0x41, '\x00', 0x0, @fallback=0x37, r2, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x2, 0x2, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r1, r8, r2, r1, r2], &(0x7f0000000800)=[{0x2, 0x5, 0x1, 0x8}], 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x206, 0x0, 0x8}, 0x10) recvmsg(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) kernel console output (not intermixed with test programs): ? futex_unqueue+0x22/0x240 [ 382.129879][T12671] ? is_valid_gup_args+0x11f/0x200 [ 382.129916][T12671] ? get_user_pages_fast+0x4d/0xb0 [ 382.129961][T12671] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 382.130088][T12671] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 382.130148][T12671] iov_iter_get_pages2+0x5e/0xa0 [ 382.130187][T12671] __se_sys_vmsplice+0x7b3/0x1490 [ 382.130244][T12671] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 382.130281][T12671] ? __pfx_futex_wait+0x10/0x10 [ 382.130394][T12671] do_syscall_64+0x14d/0xf80 [ 382.130474][T12671] ? trace_irq_disable+0x3b/0x150 [ 382.130517][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.130556][T12671] ? clear_bhb_loop+0x40/0x90 [ 382.130584][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.130611][T12671] RIP: 0033:0x7f2fe979c799 [ 382.130667][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.130688][T12671] RSP: 002b:00007f2fea6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 382.130741][T12671] RAX: ffffffffffffffda RBX: 00007f2fe9a15fa0 RCX: 00007f2fe979c799 [ 382.130758][T12671] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 382.130773][T12671] RBP: 00007f2fe9832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 382.130787][T12671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 382.130800][T12671] R13: 00007f2fe9a16038 R14: 00007f2fe9a15fa0 R15: 00007ffed3d23fa8 [ 382.130836][T12671] [ 382.390113][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.539529][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.700690][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.721431][T12747] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.792812][T12751] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 383.811958][T12751] syzkaller1: Linktype set failed because interface is up [ 383.842627][T12751] veth1: mtu less than device minimum [ 384.206844][T12771] openvswitch: netlink: IP tunnel dst address not specified [ 384.276227][T12776] __nla_validate_parse: 10 callbacks suppressed [ 384.276248][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1868'. [ 384.304226][T12776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1868'. [ 384.331487][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1868'. [ 384.527304][T12786] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1873'. [ 384.561841][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1872'. [ 384.729083][T12794] tipc: Started in network mode [ 384.734061][T12794] tipc: Node identity ac14140f, cluster identity 4711 [ 384.762525][T12794] tipc: New replicast peer: 255.255.255.255 [ 384.770170][T12794] tipc: Enabled bearer , priority 10 [ 384.777017][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 384.812910][T12794] syzkaller0: entered promiscuous mode [ 384.818907][T12794] syzkaller0: entered allmulticast mode [ 385.195244][T12819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1883'. [ 385.338676][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.450518][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 385.524417][T12838] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 385.888744][ T5995] tipc: Node number set to 2886997007 [ 385.904871][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 386.027800][T12871] syzkaller0: entered promiscuous mode [ 386.046433][T12871] syzkaller0: entered allmulticast mode [ 386.091839][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1900'. [ 386.247920][T12880] validate_nla: 2 callbacks suppressed [ 386.247942][T12880] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 386.265472][T12880] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 387.484671][T12941] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 387.663942][T12951] netlink: 'syz.3.1921': attribute type 2 has an invalid length. [ 387.698178][T12944] bond4: (slave bridge7): Enslaving as a backup interface with an up link [ 387.712909][T12951] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 387.814041][T12949] bond4: (slave bridge8): Enslaving as a backup interface with a down link [ 387.847889][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 387.858370][T12941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.982055][T10125] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 388.876197][T13015] bond4: ARP target 1.0.0.0 is already present [ 388.882941][T13015] bond4: option arp_ip_target: invalid value (1) [ 388.901415][T13015] bond4 (unregistering): Released all slaves [ 389.046293][T13023] syzkaller0: entered promiscuous mode [ 389.075397][T13023] syzkaller0: entered allmulticast mode [ 389.284925][T13031] __nla_validate_parse: 15 callbacks suppressed [ 389.284949][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 389.582961][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 389.597640][T13055] netlink: 'syz.1.1948': attribute type 13 has an invalid length. [ 389.618745][T13055] netlink: 'syz.1.1948': attribute type 58 has an invalid length. [ 389.626724][T13055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1948'. [ 389.682646][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 389.763706][T13063] syzkaller0: entered promiscuous mode [ 389.778946][T13063] syzkaller0: entered allmulticast mode [ 389.794240][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1951'. [ 389.952782][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 390.004178][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 390.153924][T13084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1958'. [ 390.234692][T13090] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 390.408166][T13095] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 390.845904][T13134] delete_channel: no stack [ 390.892560][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1968'. [ 390.941541][T13134] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1968'. [ 391.119149][T13104] lo speed is unknown, defaulting to 1000 [ 391.162808][T13134] delete_channel: no stack [ 391.422985][T13143] syzkaller1: entered allmulticast mode [ 391.442387][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.591980][T13151] îÿ: entered promiscuous mode [ 391.650121][T13171] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 391.721777][T13169] ip6tnl0: Caught tx_queue_len zero misconfig [ 392.525169][T13214] syzkaller0: entered promiscuous mode [ 392.538783][T13214] syzkaller0: entered allmulticast mode [ 392.778649][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.397488][T13232] pim6reg: entered allmulticast mode [ 393.409122][T13236] pim6reg: left allmulticast mode [ 393.686571][T13255] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 393.700956][ T51] block nbd0: Receive control failed (result -32) [ 393.739301][T13252] bridge_slave_1: left allmulticast mode [ 393.748577][T13252] bridge_slave_1: left promiscuous mode [ 393.775295][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.853303][T13252] bridge_slave_0: left allmulticast mode [ 393.859893][T13252] bridge_slave_0: left promiscuous mode [ 393.865895][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.044019][T13272] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 394.286694][T13283] x_tables: duplicate underflow at hook 2 [ 394.312742][T13276] bond4: entered promiscuous mode [ 394.371843][T13288] openvswitch: netlink: Unknown key attributes 2 [ 394.520408][T13294] __nla_validate_parse: 6 callbacks suppressed [ 394.520428][T13294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2009'. [ 394.572839][T13294] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 394.593654][T13291] can: request_module (can-proto-0) failed. [ 394.608971][T13294] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2009'. [ 394.829406][T13304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 394.871392][T13306] erspan1: entered allmulticast mode [ 395.107656][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2017'. [ 395.296898][ T29] lo speed is unknown, defaulting to 1000 [ 395.339379][ T29] syz0: Port: 1 Link DOWN [ 395.493055][T13338] netlink: 'syz.2.2022': attribute type 2 has an invalid length. [ 395.513056][T13338] netlink: 'syz.2.2022': attribute type 2 has an invalid length. [ 395.761040][T13349] tipc: Enabled bearer , priority 10 [ 395.778043][T13350] xt_ecn: cannot match TCP bits for non-tcp packets [ 395.790342][T13348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2025'. [ 396.006696][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 396.031981][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2029'. [ 396.241964][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 396.413701][T13373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.431575][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'. [ 396.440721][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 396.880055][T13397] bond5 (unregistering): Released all slaves [ 396.946730][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2040'. [ 397.114055][T13411] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 397.263585][T13411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.327994][T13418] dvmrp0: entered allmulticast mode [ 397.487422][T13432] openvswitch: netlink: IP tunnel dst address not specified [ 397.537714][T13430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.209148][T13455] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.216865][T13455] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.727997][T13486] syzkaller1: entered promiscuous mode [ 398.763919][T13486] syzkaller1: entered allmulticast mode [ 398.881004][T13497] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 399.229850][T13513] xfrm2: entered allmulticast mode [ 399.904648][T13552] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 399.971345][T13552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.992722][T13555] __nla_validate_parse: 8 callbacks suppressed [ 399.992746][T13555] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2085'. [ 400.267953][T13567] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2088'. [ 400.291961][T13566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 400.360184][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 400.565808][T13582] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 400.609312][T13580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 400.695411][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 400.791964][T13582] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 400.801924][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 400.954257][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2097'. [ 400.972994][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 400.994763][T13600] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2098'. [ 401.022201][T13582] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 401.051166][T13598] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 401.061852][T13598] team0: Port device batadv1 added [ 401.214249][T13582] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 401.930626][T13638] netlink: Conntrack attr has 3 unknown bytes [ 402.409560][T13663] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 402.671978][T13663] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 402.817067][T13678] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 402.985825][T13687] netlink: 'syz.4.2123': attribute type 19 has an invalid length. [ 403.029223][T13687] netlink: 'syz.4.2123': attribute type 19 has an invalid length. [ 403.658195][T13722] tap0: tun_chr_ioctl cmd 1074025676 [ 403.665524][T13722] tap0: owner set to 0 [ 403.932713][T13731] syzkaller0: entered promiscuous mode [ 403.944309][T13731] syzkaller0: entered allmulticast mode [ 403.955603][T13731] 0: reclassify loop, rule prio 0, protocol 800 [ 404.696334][T13784] netlink: 'syz.3.2149': attribute type 6 has an invalid length. [ 405.019159][T13802] openvswitch: netlink: IP tunnel dst address not specified [ 405.029132][T13802] netlink: 'syz.3.2157': attribute type 24 has an invalid length. [ 405.232047][T13813] __nla_validate_parse: 22 callbacks suppressed [ 405.232071][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 405.264390][T13806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 405.276068][T13813] bond6: option coupled_control: invalid value (115) [ 405.296993][T13813] bond6 (unregistering): Released all slaves [ 405.337253][T13820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2162'. [ 405.351719][T13823] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2162'. [ 405.522940][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 405.577920][T13829] vxcan2: entered allmulticast mode [ 405.716685][T13835] ip6tnl0: Caught tx_queue_len zero misconfig [ 405.842774][T13849] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2168'. [ 405.926881][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 406.084516][T13862] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2171'. [ 406.107537][T13865] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 406.147536][T13866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.211923][T13865] bond5: (slave lo): Enslaving as an active interface with an up link [ 406.224780][T13865] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 406.252942][T13866] veth1_virt_wifi: entered promiscuous mode [ 406.490475][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.541217][T13883] ip6tnl2: entered allmulticast mode [ 406.725782][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 406.789442][T13894] vcan0 (unregistering): left allmulticast mode [ 406.824845][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2182'. [ 406.992338][T13911] dvmrp0: entered allmulticast mode [ 407.025416][T13911] dvmrp8: entered allmulticast mode [ 407.103227][T13911] pimreg: left allmulticast mode [ 407.108715][T13911] dvmrp8: left allmulticast mode [ 407.197970][T13925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 407.256796][T13925] bond8: option fail_over_mac: invalid value (16) [ 407.267576][T13929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.290726][T13925] bond8 (unregistering): Released all slaves [ 407.294195][T13929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.310050][T13929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.361875][T13934] validate_nla: 1 callbacks suppressed [ 407.361897][T13934] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 407.376868][T13909] dvmrp0: left allmulticast mode [ 407.438180][T13934] bond5: entered promiscuous mode [ 407.443532][T13934] bond5: entered allmulticast mode [ 407.452872][T13934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.498666][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.825434][T13953] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 407.848964][T13953] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 409.166796][T14029] dvmrp6: entered allmulticast mode [ 409.262331][T14030] bond6: option xmit_hash_policy: invalid value (64) [ 409.272426][T14030] bond6 (unregistering): Released all slaves [ 409.406942][T14050] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 409.490373][T14050] 8021q: adding VLAN 0 to HW filter on device bond8 [ 409.512511][T14055] vlan2: entered promiscuous mode [ 409.517587][T14055] bond8: entered promiscuous mode [ 409.523156][T14055] vlan2: entered allmulticast mode [ 409.528326][T14055] bond8: entered allmulticast mode [ 409.563617][T14050] bond8: (slave bridge1): making interface the new active one [ 409.571949][T14050] bridge1: entered promiscuous mode [ 409.577557][T14050] bridge1: entered allmulticast mode [ 409.587270][T14050] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 410.178336][T14096] syzkaller0: entered promiscuous mode [ 410.208679][T14096] syzkaller0: entered allmulticast mode [ 410.482433][T14116] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 410.506040][T14122] __nla_validate_parse: 73 callbacks suppressed [ 410.506063][T14122] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2242'. [ 410.540575][T14122] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 410.661701][T14127] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.672379][T14127] bond9: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 410.683411][T14135] netlink: 'syz.0.2243': attribute type 21 has an invalid length. [ 410.693958][T14127] bond9: (slave vxcan3): making interface the new active one [ 410.704466][T14127] bond9: (slave vxcan3): Enslaving as an active interface with an up link [ 410.723949][T14135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2243'. [ 410.766400][T14133] syzkaller0: entered promiscuous mode [ 410.775471][T14133] syzkaller0: entered allmulticast mode [ 410.794725][T14139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2248'. [ 410.998047][T14146] netlink: 'syz.4.2249': attribute type 10 has an invalid length. [ 411.006672][T14150] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2251'. [ 411.030315][T14146] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.037550][T14146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.045207][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.052460][T14146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.066038][T14146] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 411.123104][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2250'. [ 411.132529][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 411.229466][T14153] bridge4: entered promiscuous mode [ 411.252537][T14153] bridge4: entered allmulticast mode [ 411.354972][T14161] bridge5: entered promiscuous mode [ 411.383116][T14161] bridge5: entered allmulticast mode [ 411.402237][T14160] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 411.452944][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 411.566068][T14178] netlink: 'syz.2.2257': attribute type 1 has an invalid length. [ 411.596960][T14178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2257'. [ 411.632999][T14178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2257'. [ 411.850073][T14191] gtp0: entered promiscuous mode [ 411.855116][T14191] gtp0: entered allmulticast mode [ 411.915826][T14195] delete_channel: no stack [ 412.274930][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 413.094899][T14269] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 413.264003][T14280] xt_hashlimit: invalid interval [ 413.305172][T14278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.516954][ T13] tipc: Subscription rejected, illegal request [ 414.530502][T14333] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 414.997267][T14354] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 415.050132][T14354] netlink: 'syz.3.2309': attribute type 7 has an invalid length. [ 415.090507][T14354] netlink: 'syz.3.2309': attribute type 7 has an invalid length. [ 415.608273][T14391] netlink: 'syz.2.2319': attribute type 8 has an invalid length. [ 415.672144][T14396] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 415.689812][T14396] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 415.812470][T14409] xt_policy: output policy not valid in PREROUTING and INPUT [ 415.841180][T14405] bond5: option mode: invalid value (133) [ 415.851563][T14411] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 415.861105][T14405] bond5 (unregistering): Released all slaves [ 415.980501][T14416] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 415.994873][T14405] netlink: 'syz.2.2322': attribute type 29 has an invalid length. [ 416.119672][T14420] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 416.209944][T14422] __nla_validate_parse: 8 callbacks suppressed [ 416.209964][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 416.325755][T14429] sctp: [Deprecated]: syz.0.2331 (pid 14429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.325755][T14429] Use struct sctp_sack_info instead [ 416.425226][T14431] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.731385][T14453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.171931][T14476] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2344'. [ 417.252146][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.322044][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.400289][T14488] bridge0: port 3(veth0_to_bridge) entered blocking state [ 417.407679][T14488] bridge0: port 3(veth0_to_bridge) entered listening state [ 417.415256][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.422493][T14488] bridge0: port 2(bridge_slave_1) entered listening state [ 417.429971][T14488] bridge0: port 1(1¾x9ÿ) entered blocking state [ 417.436471][T14488] bridge0: port 1(1¾x9ÿ) entered listening state [ 417.491703][T14488] 8021q: adding VLAN 0 to HW filter on device .` [ 417.539638][T14488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.574417][ T5823] lo speed is unknown, defaulting to 1000 [ 417.582316][ T5823] syz0: Port: 1 Link ACTIVE [ 417.933019][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 417.943088][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 417.991412][T14516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 418.619085][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 418.682436][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2368'. [ 418.700378][T14558] IPVS: Unknown mcast interface: vcan0 [ 418.738370][T14555] xt_l2tp: v2 tid > 0xffff: 1114244 [ 418.944173][T14570] validate_nla: 4 callbacks suppressed [ 418.944194][T14570] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 419.060328][T14574] syzkaller0: entered promiscuous mode [ 419.065929][T14574] syzkaller0: entered allmulticast mode [ 419.421726][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 432.460148][ C1] bridge0: port 1(1¾x9ÿ) entered learning state [ 432.467983][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 437.578784][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.849425][T14580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2376'. [ 437.859538][T14584] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 437.873201][T14586] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2377'. [ 437.883170][T14584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.892216][T14586] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2377'. [ 437.892243][T14586] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2377'. [ 437.939956][T14589] openvswitch: netlink: EtherType 50a is less than min 600 [ 437.983674][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 438.043508][T14581] : entered promiscuous mode [ 438.109575][T14600] netlink: 'syz.2.2382': attribute type 1 has an invalid length. [ 438.169406][T14600] IPVS: length: 39 != 24 [ 438.364644][T14614] syzkaller0: entered promiscuous mode [ 438.394383][T14614] syzkaller0: entered allmulticast mode [ 438.403196][T14616] xt_l2tp: v2 doesn't support IP mode [ 438.891749][T14634] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 438.924076][T14634] netlink: 5956 bytes leftover after parsing attributes in process `syz.0.2390'. [ 439.070689][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'. [ 439.138148][T14653] team0 (unregistering): Port device team_slave_0 removed [ 439.185289][T14653] team0 (unregistering): Port device team_slave_1 removed [ 439.255095][T14644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.496519][T14683] syzkaller0: entered promiscuous mode [ 439.513943][T14683] syzkaller0: entered allmulticast mode [ 440.159961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.250044][T14714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 440.262471][T14714] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 440.271457][T14714] gretap2: entered promiscuous mode [ 440.276909][T14714] gretap2: entered allmulticast mode [ 440.438572][T14724] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 440.476807][T14722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 440.855607][T14743] syzkaller0: entered promiscuous mode [ 440.871777][T14743] syzkaller0: entered allmulticast mode [ 441.363790][T14763] netlink: 'syz.0.2424': attribute type 1 has an invalid length. [ 441.372071][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 442.406829][T14753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2423'. [ 442.929900][T14800] __nla_validate_parse: 6 callbacks suppressed [ 442.929925][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 443.088995][T14807] netlink: 'syz.4.2437': attribute type 21 has an invalid length. [ 443.103967][T14810] ip6tnl0: Caught tx_queue_len zero misconfig [ 443.112370][T14807] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.121392][T14807] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 443.131883][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2437'. [ 443.449937][T14826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2441'. [ 444.193752][T14873] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2453'. [ 444.212589][T14873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'. [ 444.258960][T14873] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 444.266755][T14873] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2453'. [ 444.462923][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2457'. [ 444.473036][T14888] netlink: 'syz.1.2457': attribute type 7 has an invalid length. [ 444.482665][T14888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2457'. [ 444.572269][T14891] sch_fq: defrate 0 ignored. [ 444.996889][T14914] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 [ 445.021033][T14917] x_tables: unsorted underflow at hook 1 [ 445.033072][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2468'. [ 445.086837][T14923] netlink: 'syz.3.2470': attribute type 2 has an invalid length. [ 445.296243][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 445.325031][T14939] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 445.394433][T14939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.407094][T14945] IPVS: set_ctl: invalid protocol: 12 172.20.20.31:20000 [ 445.420387][T14945] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 445.466663][T14939] bond6: (slave veth0_to_bond): making interface the new active one [ 445.485412][T14939] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 445.567800][T14948] bond6: entered promiscuous mode [ 445.576162][T14948] veth0_to_bond: entered promiscuous mode [ 445.582719][T14948] bond6: entered allmulticast mode [ 445.587884][T14948] veth0_to_bond: entered allmulticast mode [ 445.612938][T14952] syz_tun: entered promiscuous mode [ 445.795860][T14965] xt_limit: Overflow, try lower: 271964/0 [ 446.559662][T15005] tunl0: Caught tx_queue_len zero misconfig [ 446.652611][T15005] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 446.999891][T15033] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 447.035583][T15034] syzkaller0: entered promiscuous mode [ 447.059128][T15034] syzkaller0: entered allmulticast mode [ 447.188989][T15041] veth0: Caught tx_queue_len zero misconfig [ 447.235616][T15041] netlink: 'syz.3.2500': attribute type 3 has an invalid length. [ 447.433543][T15058] C: renamed from lo (while UP) [ 447.447111][T15058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.685220][T15068] syzkaller0: entered promiscuous mode [ 447.691234][T15068] syzkaller0: entered allmulticast mode [ 447.818600][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.825938][ C1] bridge0: topology change detected, propagating [ 447.832766][ C1] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 447.839352][ C1] bridge0: topology change detected, propagating [ 447.959683][T15076] __nla_validate_parse: 28 callbacks suppressed [ 447.959703][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2511'. [ 448.135245][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 448.214708][T15094] netlink: 'syz.4.2518': attribute type 62 has an invalid length. [ 448.447101][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 448.483559][T15113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.767056][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 448.847560][T15133] tipc: Failed to remove unknown binding: 66,0,0/7:846698111/846698112 [ 448.859172][T15133] tipc: Failed to remove unknown binding: 66,0,0/7:846698111/846698112 [ 448.900264][T15130] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 448.921679][T15130] bond7 (unregistering): Released all slaves [ 449.380514][T15153] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 449.403337][T15156] syzkaller0: entered promiscuous mode [ 449.409827][T15156] syzkaller0: entered allmulticast mode [ 449.717534][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.738207][T15171] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 449.789567][T15171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.839631][T15171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.846906][T15171] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 449.861999][T15171] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 449.930464][T15177] netlink: 'syz.4.2543': attribute type 1 has an invalid length. [ 449.951519][T15173] veth9: entered promiscuous mode [ 449.963011][T15173] bond7: (slave veth9): Enslaving as an active interface with a down link [ 449.993960][T15179] vlan4: entered allmulticast mode [ 449.999707][T15179] bond7: entered allmulticast mode [ 450.044210][T15177] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 450.437724][T15211] netlink: 'syz.3.2550': attribute type 2 has an invalid length. [ 450.463204][T15211] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2550'. [ 450.538864][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2552'. [ 450.548086][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2552'. [ 450.723395][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2555'. [ 450.784441][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 450.829625][T15223] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.829798][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 451.078379][T15240] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 451.123845][T15243] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 451.304224][T15243] 8021q: adding VLAN 0 to HW filter on device bond10 [ 451.709122][T15268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.721930][T15268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 451.763877][T15273] netlink: 'syz.3.2569': attribute type 21 has an invalid length. [ 451.852397][T15268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.872490][T15268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 451.896448][T15251] lo speed is unknown, defaulting to 1000 [ 452.013581][T15282] reject_tg6_check: 23 callbacks suppressed [ 452.013604][T15282] ip6t_REJECT: ECHOREPLY is not supported [ 452.055218][T15268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.068128][T15268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 452.313911][T15268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.357012][T15268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 452.640753][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 452.663152][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.744964][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 452.771378][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.797074][T10124] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 452.815512][T10124] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.864114][T10124] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 452.872970][T10124] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.884857][T15315] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 452.894634][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.901893][T15315] bridge0: port 2(bridge_slave_1) entered listening state [ 452.912502][T15315] bridge0: entered allmulticast mode [ 452.919914][T15315] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 453.097322][T15319] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 453.109746][T15319] bond8 (unregistering): Released all slaves [ 453.190494][ T30] audit: type=1800 audit(1772685460.325:5): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2586" name="memory.events" dev="tmpfs" ino=2633 res=0 errno=0 [ 453.236205][ T30] audit: type=1804 audit(1772685460.345:6): pid=15326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2586" name="/newroot/514/memory.events" dev="tmpfs" ino=2633 res=1 errno=0 [ 453.727579][T15340] __nla_validate_parse: 44 callbacks suppressed [ 453.727602][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 453.811366][T15340] team0: Port device dummy0 removed [ 454.006197][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2593'. [ 454.043603][T15356] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2596'. [ 454.309835][T15371] netlink: 473 bytes leftover after parsing attributes in process `syz.4.2599'. [ 456.331771][T15379] tipc: Enabled bearer , priority 10 [ 456.424872][T15396] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2604'. [ 456.838741][T15428] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2613'. [ 457.592437][T15472] sctp: [Deprecated]: syz.3.2626 (pid 15472) Use of int in max_burst socket option. [ 457.592437][T15472] Use struct sctp_assoc_value instead [ 457.717297][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2627'. [ 457.860568][T15485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2630'. [ 458.016381][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 458.171554][T15469] lo speed is unknown, defaulting to 1000 [ 458.547475][T15518] openvswitch: netlink: EtherType 50a is less than min 600 [ 458.584499][T15516] dvmrp12: entered allmulticast mode [ 458.603852][T15516] dvmrp0: left allmulticast mode [ 458.609140][T15516] dvmrp12: left allmulticast mode [ 458.689810][T15522] ip6t_REJECT: ECHOREPLY is not supported [ 458.836725][T15529] syz_tun: entered allmulticast mode [ 458.999942][T15536] netlink: 'syz.0.2645': attribute type 11 has an invalid length. [ 459.020883][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 459.120530][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 459.141921][T15544] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 459.267409][T15544] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 459.503414][ T51] block nbd1: Receive control failed (result -32) [ 459.569172][T15559] nbd1: detected capacity change from 0 to 127 [ 459.600837][T14605] block nbd1: Dead connection, failed to find a fallback [ 459.648679][T14605] block nbd1: shutting down sockets [ 459.662942][T14605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.721068][T14605] Buffer I/O error on dev nbd1, logical block 0, async page read [ 459.752354][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2657'. [ 459.764931][T14605] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.798576][T14605] Buffer I/O error on dev nbd1, logical block 1, async page read [ 459.806442][T14605] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.824329][T14605] Buffer I/O error on dev nbd1, logical block 2, async page read [ 459.833075][T14605] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.844485][T14605] Buffer I/O error on dev nbd1, logical block 3, async page read [ 459.873752][T15588] IPv6: addrconf: prefix option has invalid lifetime [ 459.880564][T15588] IPv6: addrconf: prefix option has invalid lifetime [ 459.896726][T14605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.942699][T14605] Buffer I/O error on dev nbd1, logical block 0, async page read [ 459.973849][T14605] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 459.999819][T14605] Buffer I/O error on dev nbd1, logical block 1, async page read [ 460.015445][T14605] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 460.035257][T14605] Buffer I/O error on dev nbd1, logical block 2, async page read [ 460.062563][T14605] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 460.101468][T15596] syzkaller0: entered promiscuous mode [ 460.110430][T14605] Buffer I/O error on dev nbd1, logical block 3, async page read [ 460.126482][T15596] syzkaller0: entered allmulticast mode [ 460.133999][T14605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 460.165427][T14605] Buffer I/O error on dev nbd1, logical block 0, async page read [ 460.184597][T14605] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 460.202686][T14605] Buffer I/O error on dev nbd1, logical block 1, async page read [ 460.231873][T14605] ldm_validate_partition_table(): Disk read failed. [ 460.242493][T14605] Dev nbd1: unable to read RDB block 0 [ 460.249551][T14605] nbd1: unable to read partition table [ 460.265088][T15603] syz_tun: entered allmulticast mode [ 460.267309][T14605] ldm_validate_partition_table(): Disk read failed. [ 460.294092][T14605] Dev nbd1: unable to read RDB block 0 [ 460.307100][T14605] nbd1: unable to read partition table [ 460.340652][T15608] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 460.381647][T15603] team0: Port device team_slave_0 removed [ 460.415785][T15603] team0: Port device team_slave_1 removed [ 460.424270][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.432765][T15603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.442330][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.450156][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.461699][T15603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.486069][T15615] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 460.592555][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 460.773394][T15627] block nbd3: not configured, cannot reconfigure [ 460.796238][T15628] vlan2: entered allmulticast mode [ 460.809013][T15628] hsr0: entered allmulticast mode [ 460.820047][T15628] hsr_slave_0: entered allmulticast mode [ 460.831636][T15631] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2673'. [ 460.835329][T15628] hsr_slave_1: entered allmulticast mode [ 460.934482][T15636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2677'. [ 460.981118][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 461.293946][T15662] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 461.309741][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 461.337944][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 461.817945][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 461.910343][T15700] xt_hashlimit: invalid rate [ 462.102866][ T51] block nbd2: Receive control failed (result -32) [ 462.326570][T15732] syzkaller1: entered promiscuous mode [ 462.333389][T15732] syzkaller1: entered allmulticast mode [ 462.832058][T15757] vlan1: entered allmulticast mode [ 462.843230][T15757] veth0_vlan: entered allmulticast mode [ 462.956788][T15765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.977899][T15765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.429851][T15788] syzkaller0: entered promiscuous mode [ 463.450011][T15788] syzkaller0: entered allmulticast mode [ 463.580756][T15801] syzkaller0: entered promiscuous mode [ 463.586303][T15801] syzkaller0: entered allmulticast mode [ 464.012687][T15822] bond6: option all_slaves_active: invalid value (222) [ 464.042056][T15822] bond6 (unregistering): Released all slaves [ 464.090785][T15827] netlink: 'syz.2.2730': attribute type 13 has an invalid length. [ 464.318953][T15847] tipc: Invalid UDP bearer configuration [ 464.319012][T15847] tipc: Enabling of bearer rejected, failed to enable media [ 464.388836][T15847] pim6reg1: entered promiscuous mode [ 464.411194][T15847] pim6reg1: entered allmulticast mode [ 464.432275][T15855] __nla_validate_parse: 7 callbacks suppressed [ 464.432296][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2740'. [ 464.469170][T15855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2740'. [ 464.612861][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 464.681290][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2744'. [ 464.772942][T15872] tipc: Resetting bearer [ 464.794067][T15874] team0: Device gtp2 is up. Set it down before adding it as a team port [ 464.994843][T15887] netlink: 'syz.2.2751': attribute type 10 has an invalid length. [ 465.020891][T15887] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2751'. [ 465.142354][T15894] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 465.353560][T15910] netlink: 'syz.4.2758': attribute type 29 has an invalid length. [ 465.411065][T15913] netlink: 'syz.4.2758': attribute type 29 has an invalid length. [ 465.430546][T15911] netlink: 'syz.4.2758': attribute type 29 has an invalid length. [ 465.706356][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 466.264147][T15972] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2774'. [ 466.385770][T15979] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 466.572475][T15985] sctp: [Deprecated]: syz.4.2780 (pid 15985) Use of int in maxseg socket option. [ 466.572475][T15985] Use struct sctp_assoc_value instead [ 466.649536][T15988] dvmrp0: entered allmulticast mode [ 466.667524][T15989] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 466.803144][T15997] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2784'. [ 467.120285][T16015] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20000 [ 467.217689][T16018] team0: No ports can be present during mode change [ 467.299259][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 468.063411][T16065] netlink: 'syz.1.2809': attribute type 1 has an invalid length. [ 468.558556][T16098] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 468.566352][T16098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2822'. [ 468.774081][T16112] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 469.943383][T16174] __nla_validate_parse: 1 callbacks suppressed [ 469.943405][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 469.960091][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 470.459706][T16202] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2866'. [ 470.534674][T16209] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 470.543134][T16209] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2868'. [ 470.564564][T16209] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 470.580983][T16209] netlink: 'syz.4.2868': attribute type 8 has an invalid length. [ 470.628253][T16209] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2868'. [ 470.640259][T16209] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2868'. [ 470.788046][T16225] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2871'. [ 471.122085][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 471.163160][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 471.515439][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2883'. [ 471.646328][T16265] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 471.687807][T16265] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 471.703830][T16265] team0: Failed to send options change via netlink (err -105) [ 471.712191][T16265] team0: Port device batadv2 added [ 471.778044][T16275] openvswitch: netlink: IP tunnel dst address not specified [ 471.841694][T16275] block nbd3: Unsupported socket: should be TCP or UNIX. [ 471.870363][T16277] veth1_to_team: entered promiscuous mode [ 471.884226][T16277] macvtap1: entered promiscuous mode [ 471.890037][T16277] macvtap1: entered allmulticast mode [ 471.895814][T16277] veth1_to_team: entered allmulticast mode [ 472.084037][T16289] netlink: 'syz.1.2891': attribute type 21 has an invalid length. [ 472.119800][T16289] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.152409][T16298] netlink: 'syz.1.2891': attribute type 21 has an invalid length. [ 472.854437][T16340] gre1: entered promiscuous mode [ 472.860255][T16340] gre1: entered allmulticast mode [ 473.334969][T16369] team0: Caught tx_queue_len zero misconfig [ 473.396826][T16371] syzkaller0: entered promiscuous mode [ 473.405627][T16371] syzkaller0: entered allmulticast mode [ 473.652727][T16380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.102730][T16400] syzkaller0: entered promiscuous mode [ 474.108280][T16400] syzkaller0: entered allmulticast mode [ 474.258942][ T9121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.277268][ T9121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.290054][ T9121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.306025][ T9121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.314495][ T9121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.371267][T16414] xt_CT: No such helper "syz1" [ 474.377932][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.385771][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.394327][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.406287][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.429007][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.695282][T16431] openvswitch: netlink: IP tunnel dst address not specified [ 474.825234][T16433] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 474.996884][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.024040][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.047677][T16447] netlink: 'syz.0.2933': attribute type 5 has an invalid length. [ 475.073960][T16447] __nla_validate_parse: 18 callbacks suppressed [ 475.073982][T16447] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2933'. [ 475.103935][T16405] lo speed is unknown, defaulting to 1000 [ 475.162940][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.188584][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.283826][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.308917][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.463276][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.473651][T16460] xt_CT: No such helper "syz0" [ 475.500854][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.603179][T16410] lo speed is unknown, defaulting to 1000 [ 475.748568][T16473] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2941'. [ 476.107316][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2945'. [ 476.116379][ T12] bridge_slave_1: left allmulticast mode [ 476.116465][ T12] bridge_slave_1: left promiscuous mode [ 476.119873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.172662][ T12] bridge_slave_0: left allmulticast mode [ 476.186373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.394039][T16501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2946'. [ 476.407732][T16501] openvswitch: netlink: IP tunnel dst address not specified [ 476.456920][ T12] dvmrp0 (unregistering): left allmulticast mode [ 476.463551][ T51] Bluetooth: hci5: command tx timeout [ 476.504299][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 476.513362][ T12] bridge0 (unregistering): left allmulticast mode [ 476.879190][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.889070][ T12] bond_slave_0: left allmulticast mode [ 476.898041][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.907393][ T12] bond_slave_1: left allmulticast mode [ 476.915629][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 476.926532][ T12] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 476.934382][ T12] bond0 (unregistering): Released all slaves [ 476.945962][ T12] bond1 (unregistering): Released all slaves [ 476.961281][ T12] bond2 (unregistering): Released all slaves [ 476.976289][ T12] bond3 (unregistering): Released all slaves [ 476.996221][ T12] bond4 (unregistering): Released all slaves [ 477.018142][ T12] bond5 (unregistering): (slave lo): Releasing backup interface [ 477.027346][ T12] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 477.040127][ T12] bond5 (unregistering): Released all slaves [ 477.055263][ T12] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 477.064174][ T12] veth0_to_bond: left promiscuous mode [ 477.070482][ T12] veth0_to_bond: left allmulticast mode [ 477.078098][ T12] bond6 (unregistering): Released all slaves [ 477.094324][ T12] bond7 (unregistering): (slave veth9): Releasing active interface [ 477.105927][ T12] bond7 (unregistering): Released all slaves [ 477.317890][T16507] syzkaller0: entered promiscuous mode [ 477.354042][T16507] syzkaller0: entered allmulticast mode [ 477.369678][T16410] chnl_net:caif_netlink_parms(): no params data found [ 477.420594][ T12] : left promiscuous mode [ 477.775313][T16540] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 477.800499][T16542] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2951'. [ 478.543425][ T51] Bluetooth: hci5: command tx timeout [ 479.262262][ T12] tipc: Disabling bearer [ 479.269988][ T12] tipc: Left network mode [ 479.724809][T16576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.770555][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 479.801042][T16586] netlink: 'syz.0.2962': attribute type 3 has an invalid length. [ 479.809467][T16586] netlink: 'syz.0.2962': attribute type 3 has an invalid length. [ 479.861681][T16410] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.874203][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.884355][T16410] bridge_slave_0: entered allmulticast mode [ 479.893274][T16410] bridge_slave_0: entered promiscuous mode [ 479.947576][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.967867][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.982722][T16590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 479.991239][T16410] bridge_slave_1: entered allmulticast mode [ 480.019050][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 480.036854][T16410] bridge_slave_1: entered promiscuous mode [ 480.235650][T16410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.283196][T16410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.326526][T16609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.393321][T16410] team0: Port device team_slave_0 added [ 480.413837][T16410] team0: Port device team_slave_1 added [ 480.455993][T16627] xt_hashlimit: invalid interval [ 480.566942][T16410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.586566][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.619422][ T9121] Bluetooth: hci5: command tx timeout [ 480.677015][T16410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.712924][T16637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2971'. [ 480.741785][T16410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.763599][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.855284][T16410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.064326][T16655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2976'. [ 481.164071][T16410] hsr_slave_0: entered promiscuous mode [ 481.178155][T16410] hsr_slave_1: entered promiscuous mode [ 481.209808][T16410] debugfs: 'hsr0' already exists in 'hsr' [ 481.215605][T16410] Cannot create hsr debugfs directory [ 481.668993][T16675] tipc: Bearer : already 2 bearers with priority 10 [ 481.699502][T16675] tipc: Bearer : trying with adjusted priority [ 481.706613][T16675] tipc: Enabling of bearer rejected, failed to enable media [ 481.921800][T16682] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.929194][T16682] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.006717][T16704] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 482.084664][T16682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.105136][T16682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.153743][T16682] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 482.278146][T16685] syzkaller0: entered promiscuous mode [ 482.285239][T16685] syzkaller0: entered allmulticast mode [ 482.306470][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 482.333015][ T12] hsr_slave_0: left promiscuous mode [ 482.339788][ T12] hsr_slave_1: left promiscuous mode [ 482.347273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.358270][ T12] veth1_macvtap: left promiscuous mode [ 482.367634][ T12] veth0_macvtap: left promiscuous mode [ 482.373534][ T12] veth1_vlan: left promiscuous mode [ 482.382517][ T12] veth0_vlan: left promiscuous mode [ 482.409629][T16711] netlink: 'syz.2.2984': attribute type 13 has an invalid length. [ 482.698809][ T9121] Bluetooth: hci5: command tx timeout [ 482.866003][T16689] syzkaller0: entered promiscuous mode [ 482.875692][T16689] syzkaller0: entered allmulticast mode [ 482.883088][T10124] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.892413][T10124] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.901177][T10124] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 33365 - 0 [ 484.536727][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2990'. [ 485.830078][T16711] veth0_macvtap: left promiscuous mode [ 485.835712][T16711] macvtap0: entered allmulticast mode [ 485.844907][T16711] macvtap0: refused to change device tx_queue_len [ 485.851703][T10124] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.861384][T10124] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.870881][T10124] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 33365 - 0 [ 485.881829][T16725] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2987'. [ 485.921335][T16725] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2987'. [ 485.959008][T16725] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2987'. [ 486.014768][T10124] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.030830][T10124] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.046530][T10124] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 33365 - 0 [ 486.092388][T10124] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.109886][T10124] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.128137][T10124] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 33365 - 0 [ 486.254878][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 486.407001][T16752] pim6reg1: entered promiscuous mode [ 486.413773][ T12] IPVS: stop unused estimator thread 0... [ 486.428381][T16752] pim6reg1: entered allmulticast mode [ 486.466355][T16756] netlink: 'syz.1.2997': attribute type 9 has an invalid length. [ 486.488652][T16756] netlink: 'syz.1.2997': attribute type 11 has an invalid length. [ 486.526946][T16756] netlink: 'syz.1.2997': attribute type 12 has an invalid length. [ 486.572222][T16756] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2997'. [ 486.600217][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 487.039123][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 487.173169][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 487.332051][T16796] netlink: 61 bytes leftover after parsing attributes in process `syz.4.3006'. [ 487.535495][T16793] bond11: (slave vcan0): refused to change device type [ 487.671661][T16809] bond6: entered promiscuous mode [ 487.681573][T16809] bond6: entered allmulticast mode [ 487.689440][T16809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.845781][T16410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.870291][T16410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.893662][T16410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.972420][T16410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.001390][T16826] syzkaller0: entered promiscuous mode [ 488.007057][T16826] syzkaller0: entered allmulticast mode [ 488.077816][T16834] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 488.147024][T16834] gretap2: entered promiscuous mode [ 488.162992][T16834] bond6: (slave gretap2): making interface the new active one [ 488.174157][T16834] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 488.239550][T16834] macvlan2: entered promiscuous mode [ 488.245009][T16834] macvlan2: entered allmulticast mode [ 488.252055][T16834] bond6: entered promiscuous mode [ 488.258207][T16834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 488.266580][T16834] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 488.285156][T16834] bond6: left promiscuous mode [ 488.378754][T16849] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 488.402414][T16849] netlink: 'syz.0.3016': attribute type 3 has an invalid length. [ 488.434862][T16410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.477665][T16849] netlink: 'syz.0.3016': attribute type 7 has an invalid length. [ 488.491724][T16410] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.502879][T16849] netlink: 'syz.0.3016': attribute type 8 has an invalid length. [ 488.519127][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.526355][T10124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.530304][T16849] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3016'. [ 488.557886][T16859] xt_hashlimit: invalid rate [ 488.562826][T16849] NCSI netlink: No device for ifindex 813332851 [ 488.575274][T16859] netlink: 'syz.2.3018': attribute type 28 has an invalid length. [ 488.581895][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.590419][T10124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.599777][T16859] netlink: 'syz.2.3018': attribute type 3 has an invalid length. [ 488.971486][T16880] syzkaller1: entered promiscuous mode [ 488.977024][T16880] syzkaller1: entered allmulticast mode [ 489.053579][ T9121] block nbd3: Receive control failed (result -32) [ 489.299233][T16898] bridge_slave_0: invalid flags given to default FDB implementation [ 489.380404][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.465286][T16903] nft_compat: unsupported protocol 0 [ 489.557982][T16410] veth0_vlan: entered promiscuous mode [ 489.698737][T16410] veth1_vlan: entered promiscuous mode [ 489.813854][T16928] Bluetooth: MGMT ver 1.23 [ 489.895848][T16924] hsr_slave_0 (unregistering): left promiscuous mode [ 490.101585][T16410] veth0_macvtap: entered promiscuous mode [ 490.167082][T16410] veth1_macvtap: entered promiscuous mode [ 490.257877][T16410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.305676][T16410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.345791][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.385576][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.416939][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.430774][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.500980][T16965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.647015][T10124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.668267][T10124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.743236][T10124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.764677][T10124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.261546][T16994] __nla_validate_parse: 6 callbacks suppressed [ 491.261570][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 491.412756][T16998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3050'. [ 491.485061][T17001] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3051'. [ 491.529917][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.540558][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.549529][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.559560][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.567216][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.610876][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3051'. [ 491.829236][T17016] validate_nla: 3 callbacks suppressed [ 491.829260][T17016] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 491.879082][T17016] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3054'. [ 491.888102][T17016] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3054'. [ 491.989209][T17016] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3054'. [ 492.121105][T17030] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 492.160496][T17030] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 492.348180][T17039] xt_CT: No such helper "syz1" [ 492.491293][T17046] bond12: entered promiscuous mode [ 492.585143][T17003] lo speed is unknown, defaulting to 1000 [ 492.674115][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 493.074800][T17003] chnl_net:caif_netlink_parms(): no params data found [ 493.284580][T17087] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3067'. [ 493.448363][T17101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3070'. [ 493.623342][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.633335][T17111] netlink: 'syz.4.3071': attribute type 1 has an invalid length. [ 493.648810][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.664969][T17003] bridge_slave_0: entered allmulticast mode [ 493.689769][T17003] bridge_slave_0: entered promiscuous mode [ 493.804426][ T9121] Bluetooth: hci1: command tx timeout [ 493.856096][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.873924][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.888123][T17003] bridge_slave_1: entered allmulticast mode [ 493.907631][T17003] bridge_slave_1: entered promiscuous mode [ 494.018200][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.050625][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.136998][T10124] tipc: Subscription rejected, illegal request [ 494.154131][T17137] syzkaller0: entered allmulticast mode [ 494.167503][T17003] team0: Port device team_slave_0 added [ 494.177617][T17003] team0: Port device team_slave_1 added [ 494.190216][T17137] syzkaller0 (unregistering): left allmulticast mode [ 494.291486][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.305868][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.333421][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.348115][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.356673][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.383745][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.567751][T17003] hsr_slave_0: entered promiscuous mode [ 494.581906][T17003] hsr_slave_1: entered promiscuous mode [ 494.888280][T17177] xt_hashlimit: size too large, truncated to 1048576 [ 494.895392][T17179] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.085450][T17003] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.144405][T17003] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.301873][T17003] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.341507][T17003] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.497620][T17003] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.537888][T17003] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.653147][T17211] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.696408][T17211] syzkaller0: entered promiscuous mode [ 495.724998][T17211] syzkaller0: entered allmulticast mode [ 495.760992][T17003] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.785032][T17003] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.819237][ T9121] Bluetooth: hci1: command tx timeout [ 495.923804][T17221] syzkaller1: entered promiscuous mode [ 495.938588][T17221] syzkaller1: entered allmulticast mode [ 496.476151][T17238] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 496.633099][T17003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.701498][T17003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.769618][T17251] xt_TCPMSS: Only works on TCP SYN packets [ 496.830919][T17240] syzkaller0: entered promiscuous mode [ 496.836533][T17240] syzkaller0: entered allmulticast mode [ 496.849380][T17003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.892269][T17003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.259972][T17260] __nla_validate_parse: 47 callbacks suppressed [ 497.259993][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 497.276728][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 497.287303][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3110'. [ 497.339753][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 497.366552][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 497.899757][ T9121] Bluetooth: hci1: command tx timeout [ 498.787882][T17259] sch_tbf: burst 12 is lower than device ipvlan0 mtu (1514) ! [ 498.796442][T17229] lo speed is unknown, defaulting to 1000 [ 499.198256][T17003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.242560][T17003] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.461283][T17287] netlink: 'syz.0.3115': attribute type 16 has an invalid length. [ 499.487448][T17287] netlink: 'syz.0.3115': attribute type 17 has an invalid length. [ 499.586003][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.593299][T10124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.630379][T17287] bridge0: left allmulticast mode [ 499.648577][T17287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.731713][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.738920][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.809763][T17269] lo speed is unknown, defaulting to 1000 [ 499.871684][T17295] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3117'. [ 499.906039][T17295] 8021q: VLANs not supported on ip_vti0 [ 499.979137][ T9121] Bluetooth: hci1: command tx timeout [ 500.079703][T17311] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 500.208275][T17311] 8021q: adding VLAN 0 to HW filter on device bond13 [ 500.294352][T17318] bond13: (slave ip6erspan0): making interface the new active one [ 500.320312][T17318] bond13: (slave ip6erspan0): Enslaving as an active interface with an up link [ 501.904973][ T30] audit: type=1800 audit(1772685509.035:7): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3124" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 501.905732][T17330] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 501.963469][T17330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 501.993144][T17003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.007480][T17330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 502.084252][T17339] netlink: 'syz.4.3126': attribute type 7 has an invalid length. [ 502.233463][T17003] veth0_vlan: entered promiscuous mode [ 502.276113][T17003] veth1_vlan: entered promiscuous mode [ 502.336719][T17350] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 502.371618][T17003] veth0_macvtap: entered promiscuous mode [ 502.378473][T17350] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3128'. [ 502.410795][T17003] veth1_macvtap: entered promiscuous mode [ 502.418177][T17350] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3128'. [ 502.449876][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 502.523701][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.587341][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.621510][T10125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.706238][T10125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.737715][T10125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.757189][T10125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.947516][ T332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.987754][ T332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.107832][ T332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.138500][ T332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.563408][T17402] syzkaller0: entered promiscuous mode [ 503.588931][T17402] syzkaller0: entered allmulticast mode [ 503.590994][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 503.639389][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 503.665514][ T332] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.684684][ T332] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.724669][ T332] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.805920][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.815884][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.835127][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.844366][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.852781][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.885680][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'. [ 503.941842][ T332] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.989146][T17416] bridge_slave_1: left allmulticast mode [ 504.015447][T17416] bridge_slave_1: left promiscuous mode [ 504.041787][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.131709][T17416] bridge_slave_0: left allmulticast mode [ 504.137824][T17416] bridge_slave_0: left promiscuous mode [ 504.160482][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.178924][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3146'. [ 504.373867][ T5836] syz_tun (unregistering): left allmulticast mode [ 504.481707][T17437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3149'. [ 504.533190][T17440] sctp: [Deprecated]: syz.4.3151 (pid 17440) Use of int in max_burst socket option. [ 504.533190][T17440] Use struct sctp_assoc_value instead [ 504.582813][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3150'. [ 504.622914][T17441] netlink: 'syz.3.3150': attribute type 10 has an invalid length. [ 504.708988][T17441] team0 (unregistering): Port device team_slave_0 removed [ 504.740246][T17441] team0 (unregistering): Port device team_slave_1 removed [ 505.086478][T17464] netlink: 'syz.3.3158': attribute type 3 has an invalid length. [ 505.188034][T17415] lo speed is unknown, defaulting to 1000 [ 505.629958][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3166'. [ 505.777164][T17415] chnl_net:caif_netlink_parms(): no params data found [ 505.902741][ T9121] Bluetooth: hci3: command tx timeout [ 506.028035][T17514] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 506.076363][T17517] SET target dimension over the limit! [ 506.127035][T17415] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.171154][T17415] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.189210][T17415] bridge_slave_0: entered allmulticast mode [ 506.196889][T17415] bridge_slave_0: entered promiscuous mode [ 506.272708][T17522] veth3: entered allmulticast mode [ 506.284455][T17415] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.294287][T17415] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.305169][T17415] bridge_slave_1: entered allmulticast mode [ 506.313783][T17415] bridge_slave_1: entered promiscuous mode [ 506.430813][T17533] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 506.475417][T17415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.520327][T17415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.673781][T17415] team0: Port device team_slave_0 added [ 506.706343][T17415] team0: Port device team_slave_1 added [ 506.806608][T17545] veth1_macvtap: renamed from veth0_vlan [ 506.945524][T17415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.979229][T17415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.033344][T17415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.061617][T17415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.069758][T17415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.097036][T17415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.110803][T17568] netlink: 'syz.4.3186': attribute type 23 has an invalid length. [ 507.243449][T17415] hsr_slave_0: entered promiscuous mode [ 507.252729][T17415] hsr_slave_1: entered promiscuous mode [ 507.260829][T17415] debugfs: 'hsr0' already exists in 'hsr' [ 507.266744][T17415] Cannot create hsr debugfs directory [ 507.456084][T17582] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 507.490985][T17583] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 507.530386][T17582] tipc: Enabling of bearer rejected, failed to enable media [ 507.612369][T17591] __nla_validate_parse: 5 callbacks suppressed [ 507.612390][T17591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3193'. [ 507.685192][T17591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3193'. [ 507.817600][T17415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 507.834535][T17415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.982724][ T9121] Bluetooth: hci3: command tx timeout [ 508.043888][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3198'. [ 508.067231][T17415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 508.095202][T17415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 508.284775][T17415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 508.316420][T17415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 508.440693][T17415] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 508.511817][T17415] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 508.821920][ T5488] veth1_macvtap: left promiscuous mode [ 508.897018][ T5488] veth1_macvtap: entered promiscuous mode [ 509.005479][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 509.117403][T17661] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 509.125965][ T5880] IPVS: starting estimator thread 0... [ 509.165939][T17415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.173485][T17666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3212'. [ 509.193457][T17415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.206461][T17415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.244826][T17415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.251793][T17662] IPVS: using max 27 ests per chain, 64800 per kthread [ 509.272646][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3210'. [ 509.489579][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 509.546410][T17415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.597971][T17415] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.641206][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.648493][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.709506][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.716736][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.740983][T17696] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 509.840816][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 510.068517][ T51] Bluetooth: hci3: command tx timeout [ 510.232923][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 510.450315][T17415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.545740][T17415] veth0_vlan: entered promiscuous mode [ 510.575209][T17415] veth1_vlan: entered promiscuous mode [ 510.613305][T17732] syzkaller1: entered promiscuous mode [ 510.628849][T17732] syzkaller1: entered allmulticast mode [ 510.666440][T17415] veth0_macvtap: entered promiscuous mode [ 510.700518][T17415] veth1_macvtap: entered promiscuous mode [ 510.738935][T17415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.772417][T17415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.811998][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.827363][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.850376][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.873441][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.139319][ T51] Bluetooth: hci3: command tx timeout [ 513.392426][T17726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.534122][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.558645][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.657888][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.688886][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.827262][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 514.011763][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'. [ 514.038899][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'. [ 514.347400][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 514.455865][T17809] veth0_macvtap: left promiscuous mode [ 514.634578][ T9121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.644650][ T9121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.654790][ T9121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.667984][ T9121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.676190][ T9121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.922251][T17822] syzkaller0: entered promiscuous mode [ 514.927798][T17822] syzkaller0: entered allmulticast mode [ 515.041893][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 515.100424][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 515.109734][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 515.404247][T17848] tipc: Trying to set illegal importance in message [ 515.552409][T17819] lo speed is unknown, defaulting to 1000 [ 515.567471][T17858] tipc: Failed to obtain node identity [ 515.609434][T17858] tipc: Enabling of bearer rejected, failed to enable media [ 515.640169][T17861] tipc: Failed to obtain node identity [ 515.645807][T17861] tipc: Enabling of bearer rejected, failed to enable media [ 515.889271][T17872] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 515.963343][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3261'. [ 516.070767][T17882] netlink: 'syz.1.3263': attribute type 3 has an invalid length. [ 516.345984][T17819] chnl_net:caif_netlink_parms(): no params data found [ 516.365478][T17903] netlink: 'syz.2.3268': attribute type 21 has an invalid length. [ 516.442194][T17903] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 516.456555][T17903] bond1 (unregistering): Released all slaves [ 516.594778][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3269'. [ 516.711967][ T51] Bluetooth: hci2: command tx timeout [ 516.872242][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.882407][T17819] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.907012][T17819] bridge_slave_0: entered allmulticast mode [ 516.958839][T17819] bridge_slave_0: entered promiscuous mode [ 516.984937][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.996228][T17819] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.004486][T17819] bridge_slave_1: entered allmulticast mode [ 517.020651][T17819] bridge_slave_1: entered promiscuous mode [ 517.031515][T17935] syzkaller0: entered promiscuous mode [ 517.042966][T17935] syzkaller0: entered allmulticast mode [ 517.155711][T17819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.187614][T17819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.265478][T17819] team0: Port device team_slave_0 added [ 517.276122][T17819] team0: Port device team_slave_1 added [ 517.388307][T17819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.412828][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.462358][T17819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.476609][T17819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.484101][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.510737][T17819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.711005][T17948] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3280'. [ 517.782592][T17819] hsr_slave_0: entered promiscuous mode [ 517.800980][T17819] hsr_slave_1: entered promiscuous mode [ 517.831851][T17819] debugfs: 'hsr0' already exists in 'hsr' [ 517.837660][T17819] Cannot create hsr debugfs directory [ 518.026455][T17966] syzkaller0: entered promiscuous mode [ 518.032192][T17966] syzkaller0: entered allmulticast mode [ 518.267792][T17982] netlink: 'syz.3.3288': attribute type 4 has an invalid length. [ 518.309479][T17982] netlink: 'syz.3.3288': attribute type 4 has an invalid length. [ 518.434026][T17994] netlink: 'syz.0.3292': attribute type 1 has an invalid length. [ 518.780161][ T51] Bluetooth: hci2: command tx timeout [ 518.816471][T17819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.884145][T18020] netlink: 'syz.1.3298': attribute type 6 has an invalid length. [ 518.895085][T17819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 518.900544][T18020] netlink: 'syz.1.3298': attribute type 6 has an invalid length. [ 518.935542][T17819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 518.964798][T17819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.040477][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 519.086430][T18035] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3300'. [ 519.170505][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3301'. [ 519.283812][T17819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.366743][T17819] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.394414][T18045] syzkaller1: entered promiscuous mode [ 519.401257][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 519.408929][T18045] syzkaller1: entered allmulticast mode [ 519.433566][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 519.482902][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.490165][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.523674][T18049] xt_CT: No such helper "snmp_trap" [ 519.578252][T18052] bond1: entered promiscuous mode [ 519.591896][T18052] bond1: entered allmulticast mode [ 519.600414][T18052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.631794][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.639029][T10127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.771706][T18062] netlink: 'syz.0.3309': attribute type 4 has an invalid length. [ 519.789974][T18058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.817608][T18062] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3309'. [ 520.214810][T18074] "syz.2.3313" (18074) uses obsolete ecb(arc4) skcipher [ 520.420151][T18097] netlink: 'syz.2.3317': attribute type 21 has an invalid length. [ 520.428033][T18097] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.453639][T17819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.707507][T18109] 8021q: adding VLAN 0 to HW filter on device bond15 [ 520.733276][T18117] Bluetooth: MGMT ver 1.23 [ 520.859109][ T51] Bluetooth: hci2: command tx timeout [ 520.918712][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 520.989758][T18131] netlink: 'syz.3.3323': attribute type 22 has an invalid length. [ 520.997641][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 521.074727][T18131] netlink: 'syz.3.3323': attribute type 22 has an invalid length. [ 521.139488][T18143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.154828][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 521.279316][T18147] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 521.463121][T17819] veth0_vlan: entered promiscuous mode [ 521.517884][T17819] veth1_vlan: entered promiscuous mode [ 521.540394][T18161] : entered promiscuous mode [ 521.595860][T17819] veth0_macvtap: entered promiscuous mode [ 521.610469][T17819] veth1_macvtap: entered promiscuous mode [ 521.672944][T17819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.716109][T17819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.775289][ T163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.810875][ T163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.842700][T18172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3333'. [ 521.858376][ T163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.877672][ T163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.076683][T10125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.116467][T10125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.226255][ T332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.268927][ T332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.347081][T18194] openvswitch: netlink: Flow key attr not present in new flow. [ 522.508067][T18204] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 522.574404][T18208] Bluetooth: MGMT ver 1.23 [ 522.765007][T18213] veth3: entered allmulticast mode [ 522.790502][T18223] delete_channel: no stack [ 522.939839][ T51] Bluetooth: hci2: command tx timeout [ 523.352616][ T9121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.366017][ T9121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.374996][ T9121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.388035][ T9121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.395949][ T9121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.693552][ T5830] syz_tun (unregistering): left allmulticast mode [ 523.764687][T18268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.788958][T18265] netlink: 'syz.3.3359': attribute type 2 has an invalid length. [ 523.993628][T18275] !: renamed from dummy0 (while UP) [ 524.321475][T18245] lo speed is unknown, defaulting to 1000 [ 524.906987][T18315] __nla_validate_parse: 5 callbacks suppressed [ 524.907008][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 524.977045][T18321] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 524.998555][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 525.022097][T18321] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3369'. [ 525.097535][T18245] chnl_net:caif_netlink_parms(): no params data found [ 525.109711][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 525.180470][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3369'. [ 525.416063][T18245] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.426279][T18245] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.445694][T18245] bridge_slave_0: entered allmulticast mode [ 525.458547][T18245] bridge_slave_0: entered promiscuous mode [ 525.510014][ T9121] Bluetooth: hci4: command tx timeout [ 525.563136][T18245] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.572438][T18245] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.589605][T18245] bridge_slave_1: entered allmulticast mode [ 525.596071][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.621328][T18245] bridge_slave_1: entered promiscuous mode [ 525.741777][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.751270][T18245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.778695][T18350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.825490][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.870436][T18350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.942751][T18362] syz_tun: entered promiscuous mode [ 525.960733][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 526.006477][T18245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.059327][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.137914][T18245] team0: Port device team_slave_0 added [ 526.165406][T18245] team0: Port device team_slave_1 added [ 526.232847][T18245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.240171][T18245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.268841][T18245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.282092][T18245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.289701][T18245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.338451][T18245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.572990][T18400] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 526.593584][T18245] hsr_slave_0: entered promiscuous mode [ 526.602213][T18245] hsr_slave_1: entered promiscuous mode [ 526.610405][T18245] debugfs: 'hsr0' already exists in 'hsr' [ 526.628022][T18245] Cannot create hsr debugfs directory [ 526.859108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.027855][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.037431][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.063503][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.121037][T18418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.148799][T18418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.189787][T18418] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3391'. [ 527.209231][T18418] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3391'. [ 527.401721][T18245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.578828][ T9121] Bluetooth: hci4: command tx timeout [ 527.663091][T18245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.833244][T18461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3400'. [ 527.875946][T18245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.888240][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3400'. [ 527.935294][T18465] ipt_REJECT: ECHOREPLY no longer supported. [ 528.100866][T18245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.125456][T18474] netlink: 'syz.4.3403': attribute type 32 has an invalid length. [ 528.161677][T18471] tipc: Started in network mode [ 528.172570][T18471] tipc: Node identity e60710bcc9cd, cluster identity 4711 [ 528.185265][T18471] tipc: Enabled bearer , priority 0 [ 528.343792][T18471] syzkaller0: entered promiscuous mode [ 528.359541][T18471] syzkaller0: entered allmulticast mode [ 528.379384][T18471] tipc: Resetting bearer [ 528.537230][ T332] tipc: Resetting bearer [ 528.614941][T18470] tipc: Resetting bearer [ 529.051636][T18505] xt_hashlimit: max too large, truncated to 1048576 [ 529.668509][ T9121] Bluetooth: hci4: command tx timeout [ 530.363737][T18470] tipc: Disabling bearer [ 530.407293][T18505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 530.422376][T18505] gretap1: entered promiscuous mode [ 530.427650][T18505] gretap1: entered allmulticast mode [ 530.470061][ T5823] tipc: Node number set to 801771708 [ 530.710820][T18245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.777216][T18245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.825622][T18245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.868943][T18245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.146031][T18245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.222740][T18245] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.260132][T14310] net_ratelimit: 28 callbacks suppressed [ 531.260155][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.317450][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.324693][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.391641][T18518] veth1_macvtap: left promiscuous mode [ 531.412046][T18518] macsec0: entered promiscuous mode [ 531.429629][T18518] macsec0: entered allmulticast mode [ 531.439134][T18554] __nla_validate_parse: 3 callbacks suppressed [ 531.439153][T18554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3417'. [ 531.463730][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.471014][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.508655][T18526] veth1_macvtap: entered promiscuous mode [ 531.519056][T18526] veth1_macvtap: entered allmulticast mode [ 531.547049][T18526] macsec0: left promiscuous mode [ 531.561090][T18526] macsec0: left allmulticast mode [ 531.576673][T18526] veth1_macvtap: left allmulticast mode [ 531.667868][T18544] lo speed is unknown, defaulting to 1000 [ 531.751019][ T9121] Bluetooth: hci4: command tx timeout [ 531.842180][T18245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.933233][T18558] syzkaller0: entered promiscuous mode [ 531.951067][T18558] syzkaller0: entered allmulticast mode [ 532.001129][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3418'. [ 532.060618][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.212974][T18568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3421'. [ 532.302351][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.310907][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.319334][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.338829][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.347742][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.602151][T18245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.670305][T18581] syzkaller0: entered promiscuous mode [ 532.686139][T18581] syzkaller0: entered allmulticast mode [ 532.823216][T18245] veth0_vlan: entered promiscuous mode [ 532.871433][T18245] veth1_vlan: entered promiscuous mode [ 532.946056][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.038077][T18593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.133324][T18245] veth0_macvtap: entered promiscuous mode [ 533.160995][T18245] veth1_macvtap: entered promiscuous mode [ 533.208139][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 533.237278][T18245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.261673][T18245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.401220][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.422080][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.434838][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.452757][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.470035][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.514499][T18606] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3428'. [ 533.553533][T18606] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3428'. [ 533.619771][T18606] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3428'. [ 533.923982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.943621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.095019][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.108614][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.427885][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3441'. [ 534.441445][T18631] syzkaller0: entered promiscuous mode [ 534.449330][T18631] syzkaller0: entered allmulticast mode [ 534.458254][T18635] netlink: 'syz.0.3441': attribute type 3 has an invalid length. [ 534.521982][T18640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3442'. [ 534.684301][T18644] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3444'. [ 534.918934][T18651] xt_hashlimit: size too large, truncated to 1048576 [ 534.968332][T18659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.163514][T18676] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 535.402173][T18687] syzkaller0: entered promiscuous mode [ 535.436512][T18687] syzkaller0: entered allmulticast mode [ 535.812965][T18708] bond2: entered promiscuous mode [ 536.508987][T18749] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 536.516683][T18749] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 536.541879][T14310] net_ratelimit: 14 callbacks suppressed [ 536.541901][T14310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.570861][T18719] lo speed is unknown, defaulting to 1000 [ 536.621991][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.880949][T18763] syzkaller0: entered promiscuous mode [ 536.887257][T18763] syzkaller0: entered allmulticast mode [ 536.916526][T18766] __nla_validate_parse: 8 callbacks suppressed [ 536.916547][T18766] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3477'. [ 536.947546][T18766] xt_policy: neither incoming nor outgoing policy selected [ 537.093980][T18766] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 537.115869][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.125338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.156827][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.167461][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.176476][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.542079][T18791] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 537.587439][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.610096][T18791] team0: Port device 0! added [ 537.615366][T18797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 537.632916][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 537.638230][T18797] openvswitch: netlink: Flow key attribute not present in set flow. [ 537.707240][T18797] netlink: 'syz.2.3487': attribute type 4 has an invalid length. [ 537.760341][T18802] netlink: 'syz.2.3487': attribute type 4 has an invalid length. [ 537.796979][T18800] ip6t_srh: unknown srh invflags 4000 [ 537.867086][T18805] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.985655][T18806] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 537.993863][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3488'. [ 538.062997][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.501210][T18831] netlink: 'syz.1.3494': attribute type 24 has an invalid length. [ 538.990155][T18862] sctp: [Deprecated]: syz.2.3505 (pid 18862) Use of int in maxseg socket option. [ 538.990155][T18862] Use struct sctp_assoc_value instead [ 539.213321][T18871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.687095][T18893] tipc: Started in network mode [ 539.693706][T18893] tipc: Node identity 9afb03ae8fc, cluster identity 4711 [ 539.701713][T18893] tipc: Enabled bearer , priority 0 [ 539.822854][T18894] syzkaller0: entered promiscuous mode [ 539.843765][T18894] syzkaller0: entered allmulticast mode [ 539.869649][T18894] tipc: Resetting bearer [ 539.928917][T18911] netlink: 'syz.4.3515': attribute type 1 has an invalid length. [ 539.937302][T18894] tipc: Resetting bearer [ 539.943291][T18911] netlink: 'syz.4.3515': attribute type 2 has an invalid length. [ 540.125161][T18914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3517'. [ 541.780116][T18894] tipc: Disabling bearer [ 541.793078][T14489] tipc: Node number set to 356189102 [ 542.001008][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.030565][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.056265][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 542.088570][ T163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.124601][ T163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.211937][T18951] netlink: 'syz.3.3525': attribute type 1 has an invalid length. [ 542.249272][T18951] netlink: 'syz.3.3525': attribute type 2 has an invalid length. [ 542.280959][T18966] vcan1: entered promiscuous mode [ 542.286427][T18966] vcan1: entered allmulticast mode [ 542.300583][T14316] net_ratelimit: 9 callbacks suppressed [ 542.300604][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.454896][T18969] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 542.483939][T18969] bond2 (unregistering): Released all slaves [ 542.700762][T14489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.855903][T18991] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3534'. [ 543.180124][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.209765][T19007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3536'. [ 543.241774][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.280496][T19007] bridge_slave_0 (unregistering): left allmulticast mode [ 543.300549][T19007] bridge_slave_0 (unregistering): left promiscuous mode [ 543.321784][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.340127][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.821471][ T332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.829692][ T332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.838878][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.850359][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.939886][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.741940][T18987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.932652][T19069] openvswitch: netlink: Duplicate or invalid key (type 0). [ 546.029409][T19079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3550'. [ 546.081126][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.089036][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.346451][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 547.662484][ T5823] net_ratelimit: 4 callbacks suppressed [ 547.662506][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.064966][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.301768][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.625613][T19131] netlink: 62741 bytes leftover after parsing attributes in process `syz.4.3560'. [ 548.792056][T19158] netlink: 484 bytes leftover after parsing attributes in process `syz.2.3569'. [ 549.100937][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.179526][T19179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.337425][T19189] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3580'. [ 549.356323][T19189] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 549.368522][T19189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3580'. [ 549.398892][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3580'. [ 549.402737][T19191] sctp: [Deprecated]: syz.3.3581 (pid 19191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.402737][T19191] Use struct sctp_sack_info instead [ 549.441446][T19189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3580'. [ 549.464630][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 549.581625][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.590331][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.598512][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.608337][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.652244][T19202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.698256][T19205] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3586'. [ 549.765812][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 549.917770][T19214] netlink: 'syz.2.3589': attribute type 7 has an invalid length. [ 549.954909][T19214] netlink: 'syz.2.3589': attribute type 27 has an invalid length. [ 550.096664][T19225] geneve2: entered promiscuous mode [ 550.103474][T19225] geneve2: entered allmulticast mode [ 550.239576][T19227] netlink: 'syz.3.3594': attribute type 13 has an invalid length. [ 550.288690][T19237] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 550.435716][T19244] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3600'. [ 550.745888][T14315] hid-generic 0005:16C0:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 550.982698][T19275] sctp: [Deprecated]: syz.3.3609 (pid 19275) Use of int in maxseg socket option. [ 550.982698][T19275] Use struct sctp_assoc_value instead [ 551.003404][T19274] xt_hashlimit: size too large, truncated to 1048576 [ 551.378229][T19293] netlink: 'syz.3.3613': attribute type 2 has an invalid length. [ 551.752771][T19277] lo speed is unknown, defaulting to 1000 [ 552.123114][T19319] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 552.859491][T14315] net_ratelimit: 12 callbacks suppressed [ 552.859511][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.003039][T19355] syz_tun: entered allmulticast mode [ 553.057292][T19355] syz_tun (unregistering): left allmulticast mode [ 553.108016][T19358] netlink: 'syz.2.3635': attribute type 1 has an invalid length. [ 553.147651][T19358] syzkaller1: entered promiscuous mode [ 553.153273][T19358] syzkaller1: entered allmulticast mode [ 553.267570][T19371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.276537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.898824][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.925979][T19407] __nla_validate_parse: 12 callbacks suppressed [ 553.926000][T19407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3647'. [ 554.039989][T19407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3647'. [ 554.314256][T19421] bridge0: port 1(syz_tun) entered blocking state [ 554.349330][T19421] bridge0: port 1(syz_tun) entered disabled state [ 554.369749][T19421] syz_tun: entered allmulticast mode [ 554.379863][T19421] syz_tun: entered promiscuous mode [ 554.386592][T19421] bridge0: port 1(syz_tun) entered blocking state [ 554.393534][T19421] bridge0: port 1(syz_tun) entered forwarding state [ 554.401689][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.410549][T19409] lo speed is unknown, defaulting to 1000 [ 554.599513][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 554.624371][T19426] syzkaller0: entered promiscuous mode [ 554.635337][T19426] syzkaller0: entered allmulticast mode [ 554.947038][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.020923][T19454] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 555.036904][T19453] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 555.179557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.198506][T19457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3662'. [ 555.234539][T19459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3663'. [ 555.296847][T19458] syz_tun: entered promiscuous mode [ 555.320940][T19458] macvtap1: entered promiscuous mode [ 555.340403][T10128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.349373][T14489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.358591][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.377381][T19458] syz_tun: left promiscuous mode [ 555.621363][T19479] 8021q: VLANs not supported on gre0 [ 555.663310][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3668'. [ 555.704661][T19479] nbd: must specify at least one socket [ 555.721142][T19479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.741884][T19479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.757260][T19479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.765299][T19479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.066816][T19504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'. [ 556.453951][T19530] netlink: 'syz.1.3684': attribute type 4 has an invalid length. [ 556.471891][T19529] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3685'. [ 556.608735][T19534] "syz.0.3686" (19534) uses obsolete ecb(arc4) skcipher [ 556.681108][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 556.710172][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'. [ 556.723728][T19541] vlan2: entered promiscuous mode [ 556.749071][T19541] vlan2: entered allmulticast mode [ 556.754567][T19541] hsr_slave_1: entered allmulticast mode [ 556.894180][T19554] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 557.058577][T19554] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.105725][T19554] gretap2: entered promiscuous mode [ 557.145564][T19554] gretap2: entered allmulticast mode [ 557.963650][T19615] netlink: 'syz.4.3702': attribute type 10 has an invalid length. [ 557.997529][T19615] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.004826][T19615] bridge0: port 2(bridge_slave_1) entered listening state [ 558.051355][T19615] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 558.459390][T14315] net_ratelimit: 147 callbacks suppressed [ 558.459411][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.542493][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.626554][T19654] vlan3: entered promiscuous mode [ 558.632169][T19654] bridge0: entered promiscuous mode [ 558.637763][T19654] vlan3: entered allmulticast mode [ 558.643316][T19654] bridge0: entered allmulticast mode [ 558.696943][T19658] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 558.776594][T19652] ipvlan2: entered allmulticast mode [ 558.784219][T19652] batadv_slave_1: entered allmulticast mode [ 558.794871][T19652] batman_adv: batadv0: Adding interface: ipvlan2 [ 558.803486][T19652] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.835563][T19652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.848305][T19652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.863692][T19652] batman_adv: batadv0: Interface activated: ipvlan2 [ 558.883312][T19660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.952364][T19664] netlink: 'syz.1.3719': attribute type 4 has an invalid length. [ 559.185352][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.300654][T19691] __nla_validate_parse: 3 callbacks suppressed [ 559.300675][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 559.320339][T19691] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 559.334407][T19691] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3726'. [ 559.499268][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.541514][T19695] syzkaller0: entered promiscuous mode [ 559.547339][T19695] syzkaller0: entered allmulticast mode [ 559.758086][T19698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.769319][T19699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.781243][T19698] [ 559.783975][T19698] ============================= [ 559.789603][T19698] WARNING: suspicious RCU usage [ 559.794597][T19698] syzkaller #0 Not tainted [ 559.799122][T19698] ----------------------------- [ 559.804069][T19698] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 559.812738][T19698] [ 559.812738][T19698] other info that might help us debug this: [ 559.812738][T19698] [ 559.824854][T19698] [ 559.824854][T19698] rcu_scheduler_active = 2, debug_locks = 1 [ 559.833406][T19698] 1 lock held by syz.3.3730/19698: [ 559.839728][T19698] #0: ffffffff8e7604d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 559.852033][T19698] [ 559.852033][T19698] stack backtrace: [ 559.857972][T19698] CPU: 1 UID: 0 PID: 19698 Comm: syz.3.3730 Not tainted syzkaller #0 PREEMPT(full) [ 559.858001][T19698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.858015][T19698] Call Trace: [ 559.858024][T19698] [ 559.858033][T19698] dump_stack_lvl+0xe8/0x150 [ 559.858074][T19698] lockdep_rcu_suspicious+0x13f/0x1d0 [ 559.858114][T19698] get_callchain_entry+0x2b6/0x3c0 [ 559.858186][T19698] get_perf_callchain+0xd5/0x880 [ 559.858227][T19698] ? __pfx_get_perf_callchain+0x10/0x10 [ 559.858283][T19698] __bpf_get_stack+0x445/0xab0 [ 559.858334][T19698] ? __pfx___bpf_get_stack+0x10/0x10 [ 559.858384][T19698] bpf_get_stack+0x33/0x50 [ 559.858414][T19698] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 559.858436][T19698] bpf_get_stack_raw_tp+0x1a9/0x220 [ 559.858487][T19698] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 559.858528][T19698] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 559.858564][T19698] bpf_prog_test_run_syscall+0x318/0x4c0 [ 559.858597][T19698] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 559.858625][T19698] ? __fget_files+0x2a/0x420 [ 559.858663][T19698] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 559.858692][T19698] bpf_prog_test_run+0x2c7/0x340 [ 559.858732][T19698] __sys_bpf+0x643/0x950 [ 559.858769][T19698] ? __pfx___sys_bpf+0x10/0x10 [ 559.858827][T19698] ? rcu_is_watching+0x15/0xb0 [ 559.858870][T19698] __x64_sys_bpf+0x7c/0x90 [ 559.858903][T19698] do_syscall_64+0x14d/0xf80 [ 559.858940][T19698] ? trace_irq_disable+0x3b/0x150 [ 559.858974][T19698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.858997][T19698] ? clear_bhb_loop+0x40/0x90 [ 559.859025][T19698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.859047][T19698] RIP: 0033:0x7effe699c799 [ 559.859068][T19698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.859087][T19698] RSP: 002b:00007effe78dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 559.859110][T19698] RAX: ffffffffffffffda RBX: 00007effe6c16090 RCX: 00007effe699c799 [ 559.859126][T19698] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 559.859140][T19698] RBP: 00007effe6a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 559.859154][T19698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.859167][T19698] R13: 00007effe6c16128 R14: 00007effe6c16090 R15: 00007fff8c4c6f08 [ 559.859202][T19698] [ 560.469557][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.479356][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.505264][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.584768][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.207490][T19679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.662290][T14313] net_ratelimit: 3 callbacks suppressed [ 563.662312][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.619233][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.700123][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.738785][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.222708][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.233010][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.242173][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.258910][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.660202][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.299227][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.781242][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.339240][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog