last executing test programs: 6.563045463s ago: executing program 2 (id=2275): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000680)={0x0, 0x1, 0x1, [0x0, 0xc00f, 0x9, 0xffffffffffffffff, 0x1], [0xffff, 0x7, 0x9, 0x1000, 0x75, 0x8, 0x0, 0x3, 0x1, 0x3b, 0x7fffffff, 0x2, 0x6, 0x2e9, 0xe, 0x9, 0x4bc9, 0xb0, 0x9, 0xfffffffffffffffd, 0xffffffff, 0x2, 0x0, 0x427b, 0x4, 0xfffffffffffffffe, 0x1, 0x7, 0x1, 0x8, 0xff, 0x5, 0x8, 0xfd, 0x9, 0x6, 0x1, 0x0, 0x6, 0x3, 0x8, 0x9, 0x10, 0x6, 0x1, 0x2, 0x8, 0x1, 0x36a5, 0x2, 0x1, 0x8000000000000000, 0xdd18, 0x80, 0x3, 0x4, 0x7, 0x7, 0x1000000000008, 0x0, 0x9, 0x4, 0xe, 0x4d2f8583, 0x3, 0xffffffff, 0xfffffffffffffffc, 0x4, 0x0, 0x9, 0x3, 0x7, 0x7, 0x9, 0x8001, 0xffffffff, 0x0, 0x792, 0x6, 0x122, 0x4, 0x3, 0x400000000000007, 0xa2a, 0xa, 0x3, 0x2, 0xffffffffffff7334, 0xfffffffffffffff8, 0x5, 0x1, 0x2, 0x3, 0x5, 0x5, 0x6, 0x40, 0x0, 0x4d, 0x5f35, 0x7, 0x1, 0xef, 0x7, 0x3ff, 0x3, 0x0, 0x2, 0x40, 0x80, 0x8, 0x6, 0x5, 0x2, 0xf0de, 0xffffffff, 0x7fffffffffffffff, 0xf, 0xcda, 0xd, 0x2]}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @bcast, @netrom={'nr', 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 6.055800372s ago: executing program 2 (id=2279): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=r3, @ANYRESHEX=r3], 0x38}}, 0x24000894) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xa5d9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2713, 0x0, &(0x7f0000000280)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000900), 0x40000000000002a, 0x40000161, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @random="0100ee210110"}) 5.707535737s ago: executing program 2 (id=2283): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@delchain={0x11ac, 0x65, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0x0, 0xf}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @filter_kind_options=@f_bpf={{0x8}, {0x1168, 0x2, [@TCA_BPF_POLICE={0x49c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0xc, 0x40, 0x3f, {0xd, 0x1, 0x1, 0x80, 0xf, 0x8}, {0xd, 0x2, 0x3ff, 0x8, 0xfff}, 0x2e9e, 0x4, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x2, 0xea73, 0x7fff, {0x1, 0x2, 0x8, 0x1, 0x6, 0xffffffb1}, {0xfa, 0x1, 0x8, 0x7, 0x3}, 0xf, 0x6, 0x2e5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x7fff, 0x9, 0x8, 0x2, 0x7, 0x8, 0x40, 0x9, 0x2, 0xfffffff9, 0x4, 0x7fff, 0x9, 0x1, 0x5, 0xff, 0xfff, 0x7, 0x8, 0xfff, 0x401, 0x4, 0x10001, 0x7639, 0x726, 0xfffffff2, 0x3, 0x10, 0x2d, 0x6, 0x0, 0x5, 0x3c, 0x3, 0x2, 0x7310c30c, 0x8, 0x2, 0x401, 0xa1, 0x1, 0x7, 0x81, 0x100, 0x7, 0x8, 0x10001, 0x3ff, 0x80, 0x40, 0x6, 0x5, 0x4, 0xfffffffb, 0x4, 0x2, 0x2, 0x4, 0xc, 0x9876, 0x200, 0x3, 0x1000, 0x100, 0x800, 0x7f, 0x2, 0xffff, 0x401, 0x100, 0x5, 0x1, 0x403, 0x0, 0x0, 0x4, 0x5, 0xff, 0x100, 0x7b, 0x1, 0x2, 0x4, 0x80, 0x7, 0x1, 0xf, 0x4, 0x6, 0x1, 0x80000001, 0x3, 0x6de9, 0x200, 0x3, 0x7ff, 0xd, 0xfff, 0x2, 0x8, 0xff, 0xd, 0x10000, 0x5, 0xdb, 0x93a, 0x6, 0x6, 0x2, 0x8, 0x6, 0x100, 0x2b6, 0x82, 0xfc3f2a8c, 0x5, 0xbc7, 0xa29, 0x9, 0x7fffffff, 0x8, 0xd, 0xc, 0x8, 0x4, 0x28, 0x2, 0x6, 0x8, 0x1, 0x7, 0x8, 0x400, 0xfffff000, 0x7, 0xb5, 0x5, 0xb, 0x0, 0x3, 0x2, 0x7, 0x8, 0x8, 0x31, 0xa, 0x1, 0xc, 0x79, 0x7fffffff, 0x8, 0x3, 0x7, 0x1, 0x2, 0x3, 0xbb8e, 0x5f, 0x5, 0x9, 0x7, 0x4, 0x10001, 0x7ff, 0x9, 0x80000000, 0x80, 0x5, 0xc, 0xe6e, 0x8000, 0x0, 0x5, 0x4, 0x7, 0x80000000, 0xe49b, 0x10000, 0x97, 0x8000, 0x9, 0x1, 0x7, 0x7, 0x6, 0xec20, 0x278, 0x9, 0x5, 0x4000000, 0x8, 0x5, 0xa00, 0x2, 0x100, 0x8, 0x3, 0x0, 0x1, 0x5, 0x488, 0x9, 0x3, 0x2, 0x1000, 0xfff, 0x2, 0x6, 0x998, 0x3, 0x0, 0x5, 0x2, 0x80, 0x1, 0x3, 0x4, 0x5, 0x99f, 0x0, 0x5, 0x2, 0x9, 0x7, 0x101, 0x13, 0x0, 0x2, 0x5, 0x4, 0x1, 0x8, 0x1, 0x10001, 0x46, 0x39e, 0x9, 0x4, 0xa, 0x81, 0x3ff, 0x8000, 0x8, 0x2, 0x8, 0xeb9f, 0xfffffffb, 0x9, 0x0, 0xfffffff8, 0x7fffffff, 0x7, 0xff, 0x4]}]}, @TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x20000000, 0x9, 0x4, 0xe93, {0x97, 0x2, 0x99, 0x10, 0xc, 0x7fffffff}, {0x40, 0x1, 0x4, 0x3, 0xa5, 0xb46}, 0x4, 0x7, 0x7f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x3, 0x9, 0x1, 0x2, 0x8, 0x3, 0x3, 0x25711ffd, 0x6, 0xd6bb, 0x2, 0x5, 0x4, 0x2, 0xfffffffb, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x2, 0x5, 0x0, 0x7, 0x6, 0x4, 0x80000000, 0x8000, 0x15c0, 0x2, 0x101, 0x9, 0x3, 0xd297, 0x0, 0xffff8001, 0xcf, 0x1, 0x2, 0xd283, 0x0, 0x80000000, 0x101, 0x5, 0x4, 0x3, 0x977, 0x5, 0xcd, 0xfffff801, 0x8, 0x0, 0x6, 0xe0, 0x2762, 0x40, 0x3, 0x8000, 0x8001, 0x0, 0x8, 0x3, 0x4, 0x10, 0x8, 0x5, 0x3ff, 0x6, 0x80, 0x5, 0x4, 0x8, 0x0, 0xa, 0x7, 0xabaa, 0x1, 0x9, 0x9, 0x7, 0x80f9, 0x8, 0xa76, 0xb, 0x8, 0xd, 0x8, 0x9eff, 0xb, 0x7ec, 0x7fffffff, 0xffffa1cb, 0x2, 0x7, 0x5a11b7b5, 0x9, 0x4, 0x4, 0x2, 0x3, 0xfd7b, 0x80000000, 0x5, 0x10001, 0x10, 0x6, 0x10001, 0x751, 0x3000000, 0x1, 0x5, 0x58c4be7d, 0x80000000, 0x20, 0x0, 0x70b4, 0xffff8000, 0x5, 0x9, 0x7, 0x9, 0xb49, 0xe, 0x4, 0x6, 0x4, 0x748e, 0x1, 0x3, 0xfff, 0x7, 0x7f, 0xf, 0x8, 0x80000001, 0x8, 0x80, 0xb, 0x7, 0x8, 0x80000000, 0x72, 0x9, 0x7f, 0x2, 0xa4c, 0x410d, 0x0, 0x1, 0x2, 0xfffffff8, 0x10, 0x7b7, 0x71, 0x4, 0x2, 0x400, 0x9, 0x9, 0xdc2e, 0x81, 0x9, 0x3, 0x2000000, 0xb23, 0x6, 0x7, 0xb, 0xc847, 0x4, 0x3, 0x3, 0x480, 0xff, 0x8, 0x4, 0x3, 0x8291, 0x0, 0x0, 0x400, 0x3, 0x3, 0x2, 0x8, 0x0, 0x7, 0x55, 0x5, 0xfffffff8, 0x8, 0x5, 0x10, 0x1, 0x6, 0x0, 0x7fffffff, 0x9, 0xe, 0x6, 0x5, 0x7, 0x0, 0x8, 0x8, 0x5, 0x2, 0x8, 0x6, 0x6, 0x4, 0xd51, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0xdd1, 0x6, 0x4, 0x401, 0x2, 0x2d, 0xba74, 0xf20, 0x6, 0x41e7, 0x8, 0x5, 0xffffffff, 0x6, 0x1, 0x9, 0xd51, 0xfff, 0x7f, 0x6, 0x1, 0x5, 0x400, 0xfff, 0xc, 0x3, 0x23ad, 0x2, 0xfd7e, 0x489, 0x10, 0x1ff, 0x80000000, 0x6, 0x1, 0x400]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2, 0x4, 0x8, 0xe}, {0x8000, 0x5, 0x5}, {0x9, 0xff, 0xa1, 0x8}, {0x7, 0xe7, 0x5, 0xb}]}}, @TCA_BPF_POLICE={0x834, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x453f, 0x0, 0x0, 0x0, 0x8, 0x80000001, 0x1, 0x50000000, 0x653, 0x6, 0x7020, 0x2, 0x2, 0x77d, 0x800, 0x1, 0x1, 0x3, 0x2, 0x2, 0x2, 0x0, 0x9, 0x39, 0x1, 0x0, 0x4, 0xfff, 0x4, 0x3, 0x1, 0xc81f, 0x4, 0x8001, 0x4, 0x1, 0xc, 0xb341, 0xfffffffc, 0x4, 0x3610, 0x1, 0x80000000, 0x7fff, 0xffff0001, 0x7ff, 0x94, 0x5, 0x10, 0x3, 0x1d, 0x6, 0x8e54, 0x4f58, 0xf48, 0x2, 0xfffffffa, 0x401, 0x7fff, 0x9, 0x8, 0x6, 0xe, 0x5, 0x7fff, 0x0, 0x1ff, 0xffff, 0x4, 0xfffffff8, 0x2, 0x6, 0x3, 0x0, 0x1, 0x201, 0x10001, 0xa0ba, 0x7, 0x2, 0x9, 0xfff, 0x80000000, 0x2, 0x5, 0x9, 0x7964, 0x9, 0x6, 0x80000000, 0xfa, 0x2, 0x101, 0xf, 0x9, 0x1ff, 0xffff, 0x2, 0x6, 0x5, 0x7a58, 0xa, 0xfffffffe, 0xfff, 0x4, 0xaa, 0x847, 0x4, 0xdc09, 0xc0ea, 0x4, 0xfff, 0x7fffffff, 0xffffff21, 0xa3, 0x6, 0x71e6, 0x8000, 0x100, 0xcfeb, 0x8, 0x800, 0x7fff, 0x9, 0x8000, 0x4bec0000, 0x0, 0x2, 0x10000, 0x4, 0x4, 0x40, 0x9, 0x3, 0x7, 0xfff, 0x6, 0xf, 0x4, 0xa, 0x5, 0x5, 0x4811, 0x3, 0x401, 0x6, 0x7f27, 0x24, 0x5, 0x8, 0xfffffff3, 0x7, 0x0, 0x1c, 0x1, 0x3, 0x9, 0xff, 0x401, 0x5, 0x0, 0x8, 0x8, 0xa4, 0x8, 0x2, 0xf, 0x7, 0x0, 0x4, 0x7, 0xfffffff7, 0x650f, 0xd, 0x2, 0x84b, 0x3, 0x800, 0xe, 0x2981, 0xd, 0x4, 0x4, 0x2, 0x10, 0x8, 0xffffffff, 0xffffffff, 0x5f, 0x1, 0xf, 0x3, 0x8001, 0xac7a, 0xf, 0x8, 0x80000000, 0x69a, 0x3ff, 0x4, 0x1fc, 0x7, 0x2, 0x8, 0xfffffffd, 0x6, 0xfffff45a, 0xfffffffb, 0x1, 0x2, 0xfffffff9, 0xed, 0x9, 0x6, 0x2, 0x7, 0x0, 0x6, 0x83b, 0x10, 0x6, 0x400000, 0x2, 0xb83, 0x80000001, 0x4, 0xfff, 0xff, 0x4, 0x5, 0x1, 0x0, 0x2, 0xc, 0x8, 0xc, 0x66, 0x4, 0xfd90, 0xb, 0x7fff, 0x3, 0x0, 0xe, 0x1, 0x1, 0x1, 0x8, 0x3a48, 0x7, 0x5, 0x80000000, 0x2, 0x7, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x81, 0x1000, 0x4, 0xffffffff, 0x6, 0x81, 0x7f, 0x1, 0x0, 0x7, 0x9, 0xfffffffc, 0x3, 0x2, 0xfffffffe, 0x1000, 0x0, 0x9, 0x5, 0x2, 0x5, 0x5, 0x81, 0x8, 0xffff, 0x40, 0xa8f7, 0x6, 0x7, 0xfffff3dc, 0xe0, 0x0, 0x3, 0xaf, 0xfffffffe, 0xfffffff9, 0x4, 0x3ff, 0x0, 0x7, 0x7fff, 0x200, 0x8, 0xc, 0xffffffff, 0x7, 0x7e528d99, 0x9, 0x5, 0x2, 0x7, 0x4, 0x8, 0x1, 0xb, 0x6, 0x0, 0x3, 0x4, 0x9, 0x5, 0x1, 0xf, 0xbe, 0x400, 0x641, 0x6, 0xaaa, 0xcf06, 0xa, 0x1, 0x4, 0x5, 0x52152d08, 0x5, 0x0, 0x74b2, 0x4, 0x31d3, 0x1000, 0x4, 0x800, 0xfffe0000, 0x6, 0x2, 0xf, 0x5, 0x5, 0x8, 0x5a6, 0x4, 0xe9, 0x2, 0x4, 0x9, 0x7f84, 0x9, 0xfff, 0xd72, 0x6, 0x1, 0x3, 0x40, 0x3, 0x2, 0xfffffff9, 0xe, 0x6, 0xc, 0x9, 0x7f, 0x1ff, 0xa53, 0x1, 0xfffffffb, 0x3, 0x8, 0x3, 0xa, 0xfffffff7, 0x0, 0xb09, 0x0, 0x80000001, 0x902, 0xff, 0x6, 0x40, 0x8, 0x3ff, 0x8, 0xe7, 0x200, 0x5, 0x2, 0x173e, 0x7fffffff, 0x8, 0x4, 0x4a, 0xf97d, 0x5, 0x5, 0x7fffffff, 0xeb, 0x4, 0x4, 0x401, 0xffff4dea, 0x5, 0x101, 0x0, 0x3, 0x3, 0x3, 0x7fff, 0x6, 0x6, 0x3, 0x0, 0x2, 0x80000000, 0x10000, 0x0, 0x80000001, 0xce6, 0x3ff, 0xd807, 0x80000000, 0x2d, 0xffff, 0x0, 0x0, 0x224cdbdb, 0x2, 0x5, 0x0, 0x4, 0x4, 0x80000000, 0x6, 0x530, 0x2, 0x10001, 0x1000, 0x4, 0x4, 0x2, 0x3e3, 0x8, 0xc1c, 0xc19, 0x40, 0x81, 0x1, 0x1000, 0x24af, 0x100, 0x3, 0x3, 0xff, 0x4, 0x2, 0x9, 0x5, 0x7, 0x17, 0x2, 0x4, 0x3, 0x0, 0xb9, 0xa3, 0x100, 0x9, 0x9, 0x6, 0x400, 0x4856, 0xfffffffb, 0x10000, 0x1, 0x288, 0x400, 0x8000, 0x3, 0x7ff, 0x36753be7, 0x2, 0xfffffffb, 0x8001, 0x4, 0x81, 0x401, 0x8, 0x7, 0xc, 0x11e, 0x19, 0x80000000, 0xc4e4, 0x8, 0xfffff800, 0x7, 0x9, 0xd, 0x6, 0x3, 0xdcbe, 0x2, 0x8, 0x5, 0x8, 0x5, 0xf15]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x9, 0xb1, 0x1, 0x80000000}, {0x0, 0x40, 0xff, 0x8}]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf1}}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x20004}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="85100000020000003057feff0900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009d24e0ff080000007439040000000000"], &(0x7f0000000180)='GPL\x00', 0xa, 0x15, &(0x7f0000000240)=""/21, 0x41000, 0x47, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x3, 0x4, 0x1}, {0x2, 0x3, 0x4}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xc, 0x4}], 0x10, 0x6}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x1ff00000, @mcast2, 0x2590}}, {{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x7fff}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x44}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x80, @remote, 0x9}, 0x1c) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, r4, 0x19, 0x0, @val=@perf_event={0x4}}, 0x18) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2d, 0x1, 0x6, 0x5, 0x2, @local, @private2, 0x1, 0x20, 0x8, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x5, 0xfffffffd, 0x68, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0xfe9, 0x7}}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x260008e8}, 0x804) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async) r8 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="03150000040000000a000100000000000000000055f5e7df0874923b2dc12a3ef3e1643828484519f0f34097f719abf53c29fb6e2b775495397bb2d62d6a5f5052edcad799cd2e2f6cc38dc2b2c6571885a6fb1c96c38b447ebef58a2ae1cd13e7e82b2c5862211bdce2dbbcc8d82c716bdec00dcfc7b64aebb54dd0df0764a5a02f02cf2e908a2702ea221c7cce23709603dddbb11fbb2f3e66627c23d00ebe57194dc1c6f956f6037023394b881b86644df46706fc18c9c02a5986e89fd5c3"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40810) (async) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) 5.479851277s ago: executing program 2 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x29, 0x5, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000680)={{r2}, 0x0, 0x1a, @unused=[0x3, 0x7995, 0x7, 0x504], @subvolid=0x7f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) 5.343106477s ago: executing program 2 (id=2288): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf4e) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100)=[{r8, 0x400}], 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x805, 0x5, 0x1, 0xc}, 0xe, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000100000400088010000c8006000b"], 0x3c}}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80800) 4.12518041s ago: executing program 2 (id=2297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x4, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfa, {0x7, 0x0, 0x0, r4, 0x2, 0x1c4, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000340)='^'}, 0x20) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@empty, 0x14, r8}) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xc3b, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) 2.991808191s ago: executing program 4 (id=2307): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) bind$can_raw(r0, &(0x7f0000000100), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004005a"], 0x4c}}, 0x4040810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0xe, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r12, 0x1, 0xd8, 0x6, @remote}, 0x14) 2.958776486s ago: executing program 3 (id=2309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0010000100"/17, @ANYRES32=0x0, @ANYBLOB="0000000000010000180016801400018010000600d74500004c0300000100000008001b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 2.862989205s ago: executing program 3 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001c00)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x3, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000280)="6cc972dc6b71506671a28cda2d180847ff95c9144d0f24fd0d6645e679d32c13acff66", 0x23}, {&(0x7f0000001a00)="dd66da089c0d5cb8b0648c83fd663a86dc7012cc1dd67cfe2bc9d309995269ba6557c045f62f7a3f56b10b5dd3c8cfcf3aac07ee25f71c8d79c4f1684d377b22fb8b498ea568baa528970d54b312c97768601997a8feff0fd791f064d2535670f76bc2f6ac8fd778b190029f16a44fb21985e4f5b1c1b0b3f4a8b2c468aa82b7364137df9a7f9716afb9da9f0293779dff62f3f2bf46343c791c", 0x9a}, {&(0x7f00000002c0)="55ec5c2a8c2ebad7b0c38ebef266b873611afb165ffd99942a1d436bf16f12f40092f2ba5dd5ef79757ad59db42f9d2f935a131b3867440052080b6ff12455b01cf5f8847dd6b3e0333d6484a59c91a48ec999a9c8a0b2dfaf2baca4551ecae8d324b67106ddee0df5c0dc045cf92a82163de660edb3642a59ad", 0x7a}, {&(0x7f0000000400)="d91aa7777002b5957bfa657beb206add355b6212bce779f849f04e8df86ba2884996ddf1e6fdab68dd706a7f6cee4ee8d8c7dd66e84617c06d432dc7397e051fb924fd174616779d9538eac1fa053474fd871abf51c0dc7cb0e33ed1", 0x5c}, {&(0x7f0000001ac0)="2a049fc0b69b60899265bba540aeec4900fa5470a2ea3271d8161522e46a2e97a2ba7f11a36736733497cb6e59bf18ab88edae517bb825eda8f7d0f630c39d338f6a97719900d27488ac335dd64692cd7038d29aa26186866492c46544878ceec2f51d2fea3953e3dc6ec6de8a02bd", 0x6f}, {&(0x7f0000001b40)="7a811df135d11300ad6c98", 0xb}], 0x7}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x2ec, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_KEYS={0x12c, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "da268b"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x14, 0x4, "af8f027757eb52bb19d8397c0b1588d2"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "075d9a43502159763ef9260209"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "df344c0197"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b8aef1c642ea047f11ee12bb31"}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c359a756d5"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2eb12ebd29cb2a54878c7c014"}]}]}, @NL80211_ATTR_KEYS={0xfc, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "db6c44b29623e8e2f9beb44b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "35f82509ee6703a1374feca39d"}, @NL80211_KEY_SEQ={0x9, 0x4, "64a619e08f"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x9, 0x4, "8126bdfc71"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1165abc673914d203e66fcc9a2"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "383941a91c"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "af9af0468d"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "70fe995e5c378ded197647"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x2, 0x5, 0x0, {0x81, 0x7, 0x0, 0xd, 0x0, 0x1, 0x0, 0x3}, 0x1, 0xfffffff0, 0xc}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x2, 0x5, 0x0, {0xffffffffffffffff, 0xc, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x4}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1ff}, @NL80211_ATTR_BSS_BASIC_RATES={0x1e, 0x24, [{0x2}, {0x30, 0x1}, {0x16, 0x1}, {0x6}, {0x36}, {0x12}, {0x24, 0x1}, {0x18}, {0x9}, {0x1d}, {0x6c}, {0x30}, {0x2}, {0x16, 0x1}, {0x3}, {0x36, 0x1}, {0x6c}, {0x18, 0x1}, {0x2}, {0xc, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x18}, {0x36, 0x1}, {0x6c}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x800}, 0x8d0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) getpeername(r0, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000006c0)=0x80) 2.75980871s ago: executing program 3 (id=2313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000000c91ccd4c5c02ebeec58880f86d414d8c8dd7a3a957326bef6c8b3ba4b883a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x4}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000640)={r7, 0x8}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1}, 0x14}}, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r10, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x5c, r9, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xd55e}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20040011) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r12 = socket$inet6(0xa, 0x805, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000080)={r14, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000540)={r14, 0xf0, 0x4, [0x5, 0x401, 0x6, 0x5]}, &(0x7f0000000580)=0x10) 2.707809672s ago: executing program 4 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x70}}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x70}}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 2.56244965s ago: executing program 1 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8004, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d04001c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a5400300001d2300000009"}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "b3ed3f3eff5dc97c0e6617a580210ec9809bfa714677994cee3213c83202ca3f", "c36db0aa77ffea8b5303ccd0e06692e1", {"0ee9ef2f500c2a6b0d0400156feac886", "fa0e64385c7c64b5a387c641f2aafe69"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000240), &(0x7f0000000380)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8004, 0x4) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d04001c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a5400300001d2300000009"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "b3ed3f3eff5dc97c0e6617a580210ec9809bfa714677994cee3213c83202ca3f", "c36db0aa77ffea8b5303ccd0e06692e1", {"0ee9ef2f500c2a6b0d0400156feac886", "fa0e64385c7c64b5a387c641f2aafe69"}}}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000240), &(0x7f0000000380)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) (async) close(r0) (async) 2.539943646s ago: executing program 4 (id=2316): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x3}, 0x0) recvmmsg(r9, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)}, 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r10 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0xffffffffffffffef}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/53, 0x35, 0xffffffc0}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x23, &(0x7f0000000000)=0x6b4, 0x35) 2.419913456s ago: executing program 0 (id=2317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000340)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000003bc0000000000000", @ANYRES32=r1, @ANYBLOB='[\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04000000000000000400e3ffffffffffffff00"/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) getsockopt$MRT(r5, 0x0, 0xd1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000e79b9453fc9e23f", @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0xa, 0x0, 0x0, 0x1, [@generic='\x00\x00\x00\x00\x00\x00']}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000000)) 2.241905054s ago: executing program 1 (id=2318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x400884c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0x1, 0x1, 0x2}}]}}]}, 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x8000) 2.224106002s ago: executing program 0 (id=2319): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x9, 0x20}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) (async) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.163569613s ago: executing program 3 (id=2320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff8b, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) (async) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe800000000000001f400000000000bb", @ANYRES32=r2, @ANYBLOB="00000000180000000000000029000000370000003c23000000000000"], 0x40}}], 0x1, 0x4000005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x1e4, 0x2c, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x6}, {0x4, 0xf}, {0xffe0, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_nat={0x184, 0xf, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x7, 0x3, 0xe}, @broadcast, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x74, 0x3ff, 0x3, 0x6, 0x4}, @empty, @multicast1, 0x20430c9fd3fa313f}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x5, 0xb, 0x5}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0xe3, 0x6, "ce472fa080d8f89a92f385b155dc2f5ea92f3471b0b32233c05f84fb350d4d766bc2fd9790a6c5f831d1a8252a1aebc28c73a5090d4a416bf46100a133beb71ec78a43b9ede8d3861e5abd34939716bc784f42604e1fce449b5eb06f556a4d14ae373633915c247d1d16240d4977affa73486f83b6ed088bb52adaf58316887015aef025c428b10f0d3514b755e5084dc3a2074142569bd707f74474e7bef2661ab9ff7bf0bfa446cdefab46cc4eddfbb38a0da358489fbcf8b51d2ea16e3e1ea3c1e34ad2e7ba3e18c171c8b286cc5dacb6ab8a96e9f9b68b404bc9adcc33"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x38, &(0x7f00000000c0)=0x86, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010142, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.103168339s ago: executing program 4 (id=2321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2.078429344s ago: executing program 3 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="34000000120001000001000000000000100000000c0000000000000014"], 0x34}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000840)={{r1}, "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"}) close(r5) r6 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x60) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b91f, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x5}}}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.023854878s ago: executing program 0 (id=2323): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000100003050000000000000000000000003908e2346ed9092ec387cb6a63f5425c9b328b69d7d8a16d0e04db4b4d5b942a37783213726bb2b75b3cf608990dfe122cf9e60bcc8e1559a752215581271377393861b778f8509384c9d0c286fcbaa5e1c31d37b9ff9972c0b0aa0187071c1eac6631a6962dfaa769cddb47edeaf2c840851586e74b47fb449941b63dfad650927c0d973f6d6984ff7e723c9c7c49b74cf0d899b1a9c3013e836340b5b37ac27bb1e3426bbc538b382e0066933ecf54268eeb15fc9b608c82f77af20f5c66d4d9797433f8d9302d5abb7403abe5be330dcdf527380942c7d7f947", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.934887108s ago: executing program 1 (id=2324): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x2}]}, 0x34}}, 0x4000) 1.906400287s ago: executing program 4 (id=2325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002007379db675aed542325725e"], 0x64}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0037006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a6dc95}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4989}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 1.791036598s ago: executing program 1 (id=2326): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x64, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}}, 0x0) 1.718432055s ago: executing program 3 (id=2327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffa) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000010000000000000", @ANYRES32, @ANYBLOB="b446"], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/123) 1.707437172s ago: executing program 0 (id=2328): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r3, 0x400442c9, 0x200000f3) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r4, r1, 0x4, r1}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x1410, 0x108, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b67882710531e284ae80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f460976f2c0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a776", 0xd1}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f0000005740)="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", 0x452}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449", 0x416}], 0x7}}], 0x1, 0x40040) 1.599962353s ago: executing program 1 (id=2329): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.56283007s ago: executing program 0 (id=2330): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 81.868318ms ago: executing program 0 (id=2331): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r1, 0x0) (async, rerun: 64) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x10161, 0x0, 0x0) (async) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x76, 0x7, 0x646, 0x4, 0x8000000000000001, 0x8, 0x2e, 0x9}, &(0x7f0000000180)={0x2, 0x800, 0x4, 0x300000, 0x7fffffffffffffff, 0xc, 0x5, 0x5}, &(0x7f0000000300)={0x7, 0x7, 0x0, 0x3a5f, 0x0, 0x5, 0x6, 0x3}, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0xe93f6000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r10, &(0x7f0000000500)=""/4096, 0x1000) (async, rerun: 32) splice(r9, 0x0, r11, 0x0, 0x400000008000f28, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fddbdf25040000001800018014000400fe80000000000000000000000000003408000200070000003800018008000300ac141440060088000200000008000300a41414aa08000300e00000021400090000000000000000000000000000000000050005000300000008000400013a050a"], 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40011) (rerun: 32) 81.478657ms ago: executing program 4 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x3, 0xf}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xb}]}}]}, 0x3c}}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=2333): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) r3 = socket(0x1f, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff23, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x24044800}, 0x844) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r7, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000080)}}], 0x2, 0x4000) recvmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f0000000240)=@ax25={{}, [@default, @default, @null, @rose, @netrom, @rose, @rose, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000005c0)=""/147, 0x93}], 0x5}, 0x40000103) kernel console output (not intermixed with test programs): 209] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 88.385377][ T6204] netlink: zone id is out of range [ 88.412602][ T6208] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 88.430851][ T6208] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.439390][ T6204] netlink: zone id is out of range [ 88.448979][ T6209] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.499489][ T6204] netlink: del zone limit has 4 unknown bytes [ 88.578733][ T6223] syz.4.83 uses obsolete (PF_INET,SOCK_PACKET) [ 88.586717][ T6217] netlink: 'syz.0.82': attribute type 29 has an invalid length. [ 88.624103][ T6217] netlink: 'syz.0.82': attribute type 29 has an invalid length. [ 88.848847][ T6236] Bluetooth: MGMT ver 1.23 [ 88.854493][ T6232] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.250749][ T6263] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 89.533416][ T6272] gretap1: entered promiscuous mode [ 89.598653][ T6276] macvlan2: entered promiscuous mode [ 89.640260][ T6286] netlink: 104 bytes leftover after parsing attributes in process `syz.1.97'. [ 89.650314][ T6276] macvlan2: entered allmulticast mode [ 89.792432][ T6294] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 90.128249][ T6307] gre0: entered promiscuous mode [ 90.137808][ T6307] gre0: entered allmulticast mode [ 90.224052][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 90.592770][ T6325] netlink: 96 bytes leftover after parsing attributes in process `syz.3.107'. [ 90.658125][ T6325] 8021q: VLANs not supported on ip6_vti0 [ 91.073287][ T6346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.115'. [ 92.190198][ T6382] netlink: 'syz.1.122': attribute type 39 has an invalid length. [ 92.601718][ T6395] __nla_validate_parse: 1 callbacks suppressed [ 92.601735][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.755996][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.836328][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.917260][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.974319][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.983993][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 92.993405][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.003014][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.061225][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.110465][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.540883][ T6427] pim6reg1: entered promiscuous mode [ 93.557334][ T6427] pim6reg1: entered allmulticast mode [ 93.723960][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a27400: rx timeout, send abort [ 93.733253][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a27800: rx timeout, send abort [ 93.741877][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a27400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.757287][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a27800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.855837][ T6444] xt_hashlimit: size too large, truncated to 1048576 [ 93.892037][ T6439] sctp: [Deprecated]: syz.2.139 (pid 6439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.892037][ T6439] Use struct sctp_sack_info instead [ 93.997784][ T6441] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 94.280892][ T6455] bond2: entered promiscuous mode [ 94.352364][ T6455] bond2: entered allmulticast mode [ 94.371295][ T6455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.426342][ T6473] tipc: Enabling of bearer rejected, failed to enable media [ 95.137213][ T6525] x_tables: duplicate underflow at hook 2 [ 95.198157][ T6526] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 95.545755][ T6547] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 95.568949][ T6547] dummy0: entered promiscuous mode [ 95.575758][ T6544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.583067][ T6544] IPv6: NLM_F_CREATE should be set when creating new route [ 95.596997][ T6547] bridge0: port 3(dummy0) entered blocking state [ 95.614580][ T6547] bridge0: port 3(dummy0) entered disabled state [ 95.621953][ T6547] dummy0: entered allmulticast mode [ 95.633168][ T6547] bridge0: port 3(dummy0) entered blocking state [ 95.639922][ T6547] bridge0: port 3(dummy0) entered forwarding state [ 96.152674][ T6581] batadv_slave_1: entered promiscuous mode [ 96.186578][ T6579] netlink: 'syz.2.179': attribute type 83 has an invalid length. [ 96.236786][ T6580] netlink: 'syz.2.179': attribute type 3 has an invalid length. [ 96.261053][ T6578] batadv_slave_1: left promiscuous mode [ 96.571071][ T6603] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 96.795675][ T6615] tipc: Started in network mode [ 96.830442][ T6615] tipc: Node identity 5ec498cc7c8b, cluster identity 4711 [ 96.846189][ T6615] tipc: Enabled bearer , priority 0 [ 96.917037][ T6623] syzkaller0: entered promiscuous mode [ 96.928215][ T6623] syzkaller0: entered allmulticast mode [ 96.949890][ T6626] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 96.963471][ T6626] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 96.977459][ T6615] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 97.002819][ T6615] tipc: Resetting bearer [ 97.012554][ T6614] tipc: Resetting bearer [ 97.025326][ T6614] tipc: Disabling bearer [ 97.392480][ T6650] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 97.417283][ T6651] netlink: 'syz.4.199': attribute type 1 has an invalid length. [ 97.910477][ T6686] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 98.018853][ T6686] netlink: 'syz.0.209': attribute type 11 has an invalid length. [ 98.028174][ T6695] sctp: [Deprecated]: syz.2.213 (pid 6695) Use of int in maxseg socket option. [ 98.028174][ T6695] Use struct sctp_assoc_value instead [ 98.179367][ T6700] __nla_validate_parse: 40 callbacks suppressed [ 98.179385][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 98.295229][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 98.449238][ T6714] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.714902][ T6726] netlink: 'syz.1.224': attribute type 2 has an invalid length. [ 98.728936][ T6730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.223'. [ 98.768534][ T6730] block nbd0: not configured, cannot reconfigure [ 98.778923][ T6726] : entered promiscuous mode [ 98.809040][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 98.818003][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 98.863083][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 98.882342][ T1153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.882395][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 98.904030][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 98.951306][ T1153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.981748][ T1153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.113848][ T1153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.147510][ T6749] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 99.293614][ T6754] bond1: (slave gretap1): making interface the new active one [ 99.303517][ T6754] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.763637][ T6787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.243'. [ 99.774116][ T6789] IPVS: sh: FWM 3 0x00000003 - no destination available [ 100.197406][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'. [ 100.216216][ T6811] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 100.527207][ T6824] syzkaller1: entered promiscuous mode [ 100.543852][ T6824] syzkaller1: entered allmulticast mode [ 100.914052][ T6835] validate_nla: 1 callbacks suppressed [ 100.914068][ T6835] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 101.285715][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.317437][ T6866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.518930][ T6876] netlink: zone id is out of range [ 101.524083][ T6876] netlink: zone id is out of range [ 101.564309][ T6876] netlink: set zone limit has 8 unknown bytes [ 101.588621][ T6880] openvswitch: netlink: Message has 4 unknown bytes. [ 102.025678][ T6907] netlink: 'syz.2.272': attribute type 11 has an invalid length. [ 102.072057][ T6907] netlink: 'syz.2.272': attribute type 11 has an invalid length. [ 102.586990][ T6937] netlink: 'syz.1.284': attribute type 4 has an invalid length. [ 102.730541][ T6937] pimreg: entered allmulticast mode [ 103.041625][ T6958] netlink: 'syz.0.290': attribute type 11 has an invalid length. [ 103.755309][ T7003] netlink: 'syz.3.301': attribute type 12 has an invalid length. [ 103.770855][ T6995] geneve2: entered promiscuous mode [ 103.813218][ T6995] geneve2: entered allmulticast mode [ 103.856739][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 103.881809][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 103.927916][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 103.963846][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 104.074299][ T7018] __nla_validate_parse: 13 callbacks suppressed [ 104.074316][ T7018] netlink: 260 bytes leftover after parsing attributes in process `syz.3.306'. [ 104.176423][ T7024] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 104.191639][ T7029] netlink: 360 bytes leftover after parsing attributes in process `syz.2.302'. [ 104.235521][ T7024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.305'. [ 104.359208][ T7037] netlink: 'syz.4.308': attribute type 29 has an invalid length. [ 104.367787][ T7024] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 104.406013][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 104.534292][ T7038] bond2: Unable to set down delay as MII monitoring is disabled [ 104.645266][ T7038] bond2 (unregistering): Released all slaves [ 104.960378][ T7061] sctp: [Deprecated]: syz.0.312 (pid 7061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.960378][ T7061] Use struct sctp_sack_info instead [ 105.008468][ T7024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.047724][ T7039] macvlan2: entered promiscuous mode [ 105.053999][ T7039] macvlan2: entered allmulticast mode [ 105.078717][ T7039] bond1: entered allmulticast mode [ 105.084004][ T7039] bond1: entered promiscuous mode [ 105.093305][ T7039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.132164][ T7039] team0: Port device macvlan2 added [ 105.147720][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 105.168842][ T7070] dvmrp1: entered allmulticast mode [ 105.234159][ T7074] geneve3: entered promiscuous mode [ 105.247461][ T7074] geneve3: entered allmulticast mode [ 105.299543][ T7074] netlink: 'syz.4.315': attribute type 2 has an invalid length. [ 105.364001][ T7074] 9: entered promiscuous mode [ 105.584142][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 105.620682][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 105.653816][ T7093] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 105.789545][ T5918] IPVS: starting estimator thread 0... [ 105.795546][ T7106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.321'. [ 105.824588][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 105.877330][ T7108] IPVS: using max 32 ests per chain, 76800 per kthread [ 105.894599][ T7093] netlink: 'syz.0.319': attribute type 14 has an invalid length. [ 105.933642][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 106.221621][ T7102] gre1: entered promiscuous mode [ 106.226966][ T7102] gre1: entered allmulticast mode [ 106.234764][ T7130] veth0_to_bond: entered allmulticast mode [ 106.444109][ T7142] x_tables: duplicate underflow at hook 1 [ 106.957688][ T7167] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 106.967575][ T7168] openvswitch: netlink: Missing key (keys=40, expected=100) [ 107.030398][ T7170] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 107.104580][ T7170] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.147952][ T7170] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.254606][ T7185] tc_dump_action: action bad kind [ 107.370044][ T7196] syzkaller0: entered promiscuous mode [ 107.375548][ T7196] syzkaller0: entered allmulticast mode [ 107.527085][ T7202] netlink: 'syz.3.345': attribute type 23 has an invalid length. [ 108.055651][ T7231] openvswitch: netlink: Unknown nsh attribute 0 [ 108.062218][ T7231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.300984][ T7243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.417827][ T7243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.443115][ T7243] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.484027][ T7243] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 108.593600][ T7258] bond3: Unable to set down delay as MII monitoring is disabled [ 108.631481][ T7258] bond3 (unregistering): Released all slaves [ 109.015432][ T7298] netlink: 'syz.4.370': attribute type 13 has an invalid length. [ 109.029762][ T7298] gretap0: refused to change device tx_queue_len [ 109.042770][ T7298] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.295383][ T7313] __nla_validate_parse: 13 callbacks suppressed [ 109.295402][ T7313] netlink: 256 bytes leftover after parsing attributes in process `syz.1.373'. [ 109.549092][ T7320] sch_fq: defrate 1024 ignored. [ 109.695383][ T7322] netlink: 'syz.4.376': attribute type 13 has an invalid length. [ 109.775329][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 109.798116][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 109.954163][ T7322] geneve2: left promiscuous mode [ 109.959593][ T7322] geneve2: left allmulticast mode [ 109.971010][ T7322] geneve3: left promiscuous mode [ 109.977877][ T7322] geneve3: left allmulticast mode [ 109.988094][ T5844] Bluetooth: hci1: command tx timeout [ 110.061486][ T7324] bridge0: port 3(vlan2) entered blocking state [ 110.096816][ T7324] bridge0: port 3(vlan2) entered disabled state [ 110.103400][ T7324] vlan2: entered allmulticast mode [ 110.112322][ T7324] bridge0: entered allmulticast mode [ 110.127529][ T7324] vlan2: left allmulticast mode [ 110.132421][ T7324] bridge0: left allmulticast mode [ 110.145867][ T7346] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003 [ 110.226933][ T7337] syzkaller0: entered promiscuous mode [ 110.240574][ T7337] syzkaller0: entered allmulticast mode [ 110.261406][ T7350] tipc: Started in network mode [ 110.282541][ T7350] tipc: Node identity 2a6b79c69815, cluster identity 4711 [ 110.309072][ T7350] tipc: Enabled bearer , priority 0 [ 110.343054][ T7332] tipc: Resetting bearer [ 110.398109][ T7332] tipc: Disabling bearer [ 110.652195][ T7369] syzkaller1: entered promiscuous mode [ 110.659098][ T7369] syzkaller1: entered allmulticast mode [ 110.768803][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 110.908267][ T7394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.391'. [ 111.228460][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 111.404991][ T7419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 111.491329][ T7427] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 111.552268][ T7415] netlink: 172 bytes leftover after parsing attributes in process `syz.1.400'. [ 111.582049][ T7427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.622570][ T7430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 111.663539][ T7431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.815902][ T7427] can: request_module (can-proto-0) failed. [ 112.440805][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 112.499816][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 112.553324][ T7493] delete_channel: no stack [ 112.614664][ T7500] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.621508][ T7500] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.886660][ T7504] sctp: [Deprecated]: syz.4.418 (pid 7504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.886660][ T7504] Use struct sctp_sack_info instead [ 113.541114][ T7542] netlink: 'syz.2.426': attribute type 11 has an invalid length. [ 113.818455][ T7548] netlink: 284 bytes leftover after parsing attributes in process `syz.1.428'. [ 114.180231][ T7564] veth1_macvtap: left promiscuous mode [ 114.237057][ T7569] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 114.249461][ T7569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.283550][ T7572] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 114.392943][ T7572] syzkaller0: entered promiscuous mode [ 114.413753][ T7572] syzkaller0: entered allmulticast mode [ 114.434165][ T7584] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 114.461025][ T7573] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 114.475105][ T7573] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 114.488286][ T7573] bond4: (slave xfrm1): making interface the new active one [ 114.498581][ T7573] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 114.551525][ T7584] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.567623][ T7584] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.585167][ T7584] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 114.624449][ T7590] __nla_validate_parse: 2 callbacks suppressed [ 114.624466][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.437'. [ 114.751650][ T7594] netlink: 'syz.4.438': attribute type 15 has an invalid length. [ 114.760918][ T7594] netlink: 'syz.4.438': attribute type 8 has an invalid length. [ 114.809233][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 114.819641][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 114.921591][ T7600] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 114.927643][ T7602] sch_fq: defrate 1024 ignored. [ 114.937204][ T7600] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 114.938709][ T7602] FAULT_INJECTION: forcing a failure. [ 114.938709][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.963338][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.4.442 Not tainted syzkaller #0 PREEMPT(full) [ 114.963361][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.963377][ T7602] Call Trace: [ 114.963383][ T7602] [ 114.963391][ T7602] dump_stack_lvl+0x189/0x250 [ 114.963424][ T7602] ? __pfx____ratelimit+0x10/0x10 [ 114.963447][ T7602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.963468][ T7602] ? __pfx__printk+0x10/0x10 [ 114.963486][ T7602] ? __might_fault+0xb0/0x130 [ 114.963520][ T7602] should_fail_ex+0x414/0x560 [ 114.963549][ T7602] _copy_from_user+0x2d/0xb0 [ 114.963571][ T7602] ___sys_sendmsg+0x158/0x2a0 [ 114.963593][ T7602] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.963656][ T7602] ? __fget_files+0x2a/0x420 [ 114.963680][ T7602] ? __fget_files+0x3a0/0x420 [ 114.963726][ T7602] __sys_sendmmsg+0x227/0x430 [ 114.963750][ T7602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.963783][ T7602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.963837][ T7602] ? ksys_write+0x22a/0x250 [ 114.963866][ T7602] ? __pfx_ksys_write+0x10/0x10 [ 114.963901][ T7602] __x64_sys_sendmmsg+0xa0/0xc0 [ 114.963925][ T7602] do_syscall_64+0xfa/0xfa0 [ 114.963953][ T7602] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.963974][ T7602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.963991][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 114.964011][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.964026][ T7602] RIP: 0033:0x7f41b798f6c9 [ 114.964050][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.964062][ T7602] RSP: 002b:00007f41b879c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.964080][ T7602] RAX: ffffffffffffffda RBX: 00007f41b7be5fa0 RCX: 00007f41b798f6c9 [ 114.964092][ T7602] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 114.964103][ T7602] RBP: 00007f41b879c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.964113][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.964127][ T7602] R13: 00007f41b7be6038 R14: 00007f41b7be5fa0 R15: 00007ffd6018e788 [ 114.964157][ T7602] [ 115.253814][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 115.453584][ T7616] sctp: [Deprecated]: syz.3.446 (pid 7616) Use of int in maxseg socket option. [ 115.453584][ T7616] Use struct sctp_assoc_value instead [ 115.511482][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.518153][ T7622] netlink: 184 bytes leftover after parsing attributes in process `syz.2.448'. [ 115.519940][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.690716][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.710198][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.719241][ T30] audit: type=1800 audit(1763521221.119:2): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="memory.events" dev="tmpfs" ino=438 res=0 errno=0 [ 115.888797][ T7613] bond1: left allmulticast mode [ 115.893771][ T7613] bond1: left promiscuous mode [ 115.899263][ T7613] macvlan2: left promiscuous mode [ 115.904345][ T7613] macvlan2: left allmulticast mode [ 115.940281][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.949365][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.974910][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.985742][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.070337][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 116.081656][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 116.175884][ T7646] sch_fq: defrate 1024 ignored. [ 116.308240][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 116.337880][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 116.470774][ T7658] sch_fq: defrate 1024 ignored. [ 116.484111][ T7658] FAULT_INJECTION: forcing a failure. [ 116.484111][ T7658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.536451][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.4.457 Not tainted syzkaller #0 PREEMPT(full) [ 116.536474][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.536483][ T7658] Call Trace: [ 116.536490][ T7658] [ 116.536497][ T7658] dump_stack_lvl+0x189/0x250 [ 116.536524][ T7658] ? __pfx____ratelimit+0x10/0x10 [ 116.536546][ T7658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.536567][ T7658] ? __pfx__printk+0x10/0x10 [ 116.536598][ T7658] should_fail_ex+0x414/0x560 [ 116.536626][ T7658] _copy_from_user+0x2d/0xb0 [ 116.536645][ T7658] __copy_msghdr+0x3c5/0x5b0 [ 116.536667][ T7658] ___sys_sendmsg+0x1a5/0x2a0 [ 116.536688][ T7658] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.536736][ T7658] ? __fget_files+0x2a/0x420 [ 116.536751][ T7658] ? __fget_files+0x3a0/0x420 [ 116.536776][ T7658] __sys_sendmmsg+0x227/0x430 [ 116.536797][ T7658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.536822][ T7658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.536861][ T7658] ? ksys_write+0x22a/0x250 [ 116.536884][ T7658] ? __pfx_ksys_write+0x10/0x10 [ 116.536910][ T7658] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.536930][ T7658] do_syscall_64+0xfa/0xfa0 [ 116.536950][ T7658] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.536972][ T7658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.536988][ T7658] ? clear_bhb_loop+0x60/0xb0 [ 116.537008][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.537024][ T7658] RIP: 0033:0x7f41b798f6c9 [ 116.537038][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.537051][ T7658] RSP: 002b:00007f41b879c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.537069][ T7658] RAX: ffffffffffffffda RBX: 00007f41b7be5fa0 RCX: 00007f41b798f6c9 [ 116.537080][ T7658] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 116.537090][ T7658] RBP: 00007f41b879c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.537100][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.537110][ T7658] R13: 00007f41b7be6038 R14: 00007f41b7be5fa0 R15: 00007ffd6018e788 [ 116.537138][ T7658] [ 116.543162][ T7663] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 116.674159][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 116.679591][ T7660] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 116.792030][ T7672] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 116.803404][ T7673] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 116.950974][ T7670] bridge_slave_1: left allmulticast mode [ 116.968085][ T7670] bridge_slave_1: left promiscuous mode [ 116.975255][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.000095][ T7670] bridge_slave_0: left allmulticast mode [ 117.030742][ T7670] bridge_slave_0: left promiscuous mode [ 117.048418][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.294416][ T7693] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 117.313431][ T7693] team0: Port device geneve0 added [ 117.337390][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.353914][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.373182][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.396064][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.520750][ T7704] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 117.562845][ T7706] sch_fq: defrate 1024 ignored. [ 117.572835][ T7706] FAULT_INJECTION: forcing a failure. [ 117.572835][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.586149][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) [ 117.586173][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.586182][ T7706] Call Trace: [ 117.586190][ T7706] [ 117.586197][ T7706] dump_stack_lvl+0x189/0x250 [ 117.586224][ T7706] ? __pfx____ratelimit+0x10/0x10 [ 117.586245][ T7706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.586265][ T7706] ? __pfx__printk+0x10/0x10 [ 117.586282][ T7706] ? __might_fault+0xb0/0x130 [ 117.586315][ T7706] should_fail_ex+0x414/0x560 [ 117.586344][ T7706] _copy_from_user+0x2d/0xb0 [ 117.586365][ T7706] ____sys_sendmsg+0x2fe/0x830 [ 117.586390][ T7706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.586424][ T7706] ? import_iovec+0x74/0xa0 [ 117.586448][ T7706] ___sys_sendmsg+0x21f/0x2a0 [ 117.586468][ T7706] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.586521][ T7706] ? __fget_files+0x2a/0x420 [ 117.586536][ T7706] ? __fget_files+0x3a0/0x420 [ 117.586561][ T7706] __sys_sendmmsg+0x227/0x430 [ 117.586584][ T7706] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.586611][ T7706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.586651][ T7706] ? ksys_write+0x22a/0x250 [ 117.586675][ T7706] ? __pfx_ksys_write+0x10/0x10 [ 117.586702][ T7706] __x64_sys_sendmmsg+0xa0/0xc0 [ 117.586720][ T7706] do_syscall_64+0xfa/0xfa0 [ 117.586744][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.586759][ T7706] ? asm_common_interrupt+0x26/0x40 [ 117.586773][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 117.586793][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.586809][ T7706] RIP: 0033:0x7ffb5ef8f6c9 [ 117.586824][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.586842][ T7706] RSP: 002b:00007ffb5fe9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.586860][ T7706] RAX: ffffffffffffffda RBX: 00007ffb5f1e5fa0 RCX: 00007ffb5ef8f6c9 [ 117.586872][ T7706] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 117.586883][ T7706] RBP: 00007ffb5fe9d090 R08: 0000000000000000 R09: 0000000000000000 [ 117.586893][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.586903][ T7706] R13: 00007ffb5f1e6038 R14: 00007ffb5f1e5fa0 R15: 00007ffe12ab2ad8 [ 117.586932][ T7706] [ 118.008434][ T7724] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.324572][ T7750] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 118.335750][ T7748] sctp: [Deprecated]: syz.2.485 (pid 7748) Use of int in maxseg socket option. [ 118.335750][ T7748] Use struct sctp_assoc_value instead [ 118.351195][ T7750] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 120.010819][ T7760] __nla_validate_parse: 10 callbacks suppressed [ 120.010837][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 120.251305][ T7803] bond3: (slave bond_slave_1): Device is not our slave [ 120.266201][ T7803] bond3: option active_slave: invalid value (bond_slave_1) [ 120.282946][ T7803] bond3 (unregistering): Released all slaves [ 120.353566][ T7818] netlink: 192 bytes leftover after parsing attributes in process `syz.1.498'. [ 120.505708][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 120.698509][ T7841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.500'. [ 121.217296][ T7866] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 121.305332][ T7871] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 121.324126][ T7869] sch_fq: defrate 1024 ignored. [ 121.386338][ T7864] netlink: 'syz.4.508': attribute type 11 has an invalid length. [ 121.827520][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 121.921781][ T7891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.196218][ T5844] Bluetooth: hci4: link tx timeout [ 122.202335][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.502962][ T7947] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 122.694744][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 122.924582][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 123.755873][ T7947] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.772035][ T7935] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 123.803907][ T7944] team_slave_0: entered promiscuous mode [ 123.809838][ T7944] team_slave_1: entered promiscuous mode [ 123.837619][ T7944] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 123.923593][ T5844] Bluetooth: hci4: link tx timeout [ 123.930983][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.939062][ T5844] Bluetooth: hci4: link tx timeout [ 123.944295][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.952303][ T5844] Bluetooth: hci4: link tx timeout [ 123.959327][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.998380][ T7972] netlink: 'syz.4.532': attribute type 33 has an invalid length. [ 124.008691][ T7968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.530'. [ 124.019728][ T7968] netlink: 'syz.0.530': attribute type 23 has an invalid length. [ 124.096856][ T7972] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 124.110376][ T7972] bond3 (unregistering): Released all slaves [ 124.154234][ T7980] netlink: 'syz.3.534': attribute type 178 has an invalid length. [ 124.229277][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 124.319396][ T7988] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 124.330623][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.537'. [ 124.658923][ T8004] sch_fq: defrate 1024 ignored. [ 124.676502][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 124.911008][ T8025] x_tables: unsorted underflow at hook 2 [ 125.187935][ T8040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.553'. [ 125.274990][ T8047] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 125.318586][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 125.444901][ T8056] openvswitch: netlink: IP tunnel dst address not specified [ 125.514274][ T8059] sch_fq: defrate 1024 ignored. [ 125.531413][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 125.559228][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 125.724691][ T8054] syzkaller0: entered promiscuous mode [ 125.732097][ T8054] syzkaller0: entered allmulticast mode [ 125.753731][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 125.771160][ T8071] netlink: 'syz.0.565': attribute type 30 has an invalid length. [ 125.784262][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 126.081760][ T8089] netlink: 'syz.4.570': attribute type 8 has an invalid length. [ 127.008376][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 127.054715][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.064038][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.288979][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 127.317374][ T8107] block nbd0: Unsupported socket: should be TCP or UNIX. [ 127.341339][ T8106] sch_fq: defrate 1024 ignored. [ 127.426345][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 127.888112][ T8098] IPVS: sh: FWM 3 0x00000003 - no destination available [ 127.888112][ T8130] IPVS: sh: FWM 3 0x00000003 - no destination available [ 128.157572][ T8137] netlink: 'syz.1.579': attribute type 13 has an invalid length. [ 128.165404][ T8137] netlink: 'syz.1.579': attribute type 58 has an invalid length. [ 128.195105][ T8137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.579'. [ 128.448048][ T8146] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 129.511628][ T8154] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 129.671322][ T8159] bond3 (unregistering): Released all slaves [ 129.829949][ T8183] netlink: 'syz.4.592': attribute type 29 has an invalid length. [ 129.869593][ T8184] netlink: 'syz.4.592': attribute type 29 has an invalid length. [ 129.896782][ T8186] netlink: 'syz.2.591': attribute type 11 has an invalid length. [ 130.134209][ T8203] syzkaller0: entered promiscuous mode [ 130.159043][ T8203] syzkaller0: entered allmulticast mode [ 130.336100][ T8216] __nla_validate_parse: 6 callbacks suppressed [ 130.336118][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 130.367312][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 130.809792][ T8245] sctp: [Deprecated]: syz.2.608 (pid 8245) Use of int in max_burst socket option. [ 130.809792][ T8245] Use struct sctp_assoc_value instead [ 130.843045][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 130.862991][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 130.886706][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 130.894282][ T8256] netlink: 56 bytes leftover after parsing attributes in process `syz.1.611'. [ 130.895495][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 130.924744][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 130.974396][ T1015] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.004763][ T1015] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.083355][ T1015] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.113396][ T1015] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.354040][ T8284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.555414][ T8285] IPVS: Unknown mcast interface: vcan0 [ 132.700449][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 132.719434][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 132.858191][ T8323] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 132.875346][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.886386][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.953919][ T8328] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 132.989516][ T8328] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 133.055114][ T8328] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 133.075201][ T8328] bond2 (unregistering): Released all slaves [ 134.391399][ T8414] netlink: 'syz.2.650': attribute type 21 has an invalid length. [ 134.410241][ T8410] syzkaller0: entered promiscuous mode [ 134.415752][ T8410] syzkaller0: entered allmulticast mode [ 134.444275][ T8410] netlink: 'syz.1.651': attribute type 4 has an invalid length. [ 135.063567][ T8450] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.075815][ T8450] xt_SECMARK: invalid mode: 9 [ 135.266235][ T8459] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 135.511204][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 135.553679][ T8477] __nla_validate_parse: 14 callbacks suppressed [ 135.553696][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 135.643975][ T8480] netlink: 81 bytes leftover after parsing attributes in process `syz.0.675'. [ 135.874142][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 135.892614][ T8498] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 136.024723][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.681'. [ 136.076887][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.681'. [ 136.092454][ T8506] block nbd3: NBD_DISCONNECT [ 136.763387][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 136.837156][ T8556] tipc: Trying to set illegal importance in message [ 136.894491][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 137.072065][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.079843][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.158694][ T8582] pimreg: left allmulticast mode [ 137.209199][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 137.364507][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.703'. [ 137.389471][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'. [ 138.284566][ T8634] syzkaller0: entered promiscuous mode [ 138.300413][ T8634] syzkaller0: entered allmulticast mode [ 138.439724][ T1015] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 140.620675][ T8711] netlink: 'syz.4.735': attribute type 4 has an invalid length. [ 140.634703][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 140.832192][ T8720] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.739'. [ 140.851621][ T8728] trusted_key: syz.4.740 sent an empty control message without MSG_MORE. [ 140.860812][ T8720] openvswitch: netlink: Message has 6 unknown bytes. [ 141.041975][ T8738] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.744'. [ 141.055887][ T8739] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 141.063730][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 141.135133][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'. [ 141.241445][ T8743] team0: Device wireguard0 is of different type [ 141.257831][ T8756] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 141.444967][ T8766] xt_l2tp: invalid flags combination: 8 [ 141.448425][ T8756] gretap1: entered promiscuous mode [ 141.492986][ T8756] bond3: (slave gretap1): making interface the new active one [ 141.533804][ T8756] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 141.568728][ T8771] netlink: zone id is out of range [ 141.578382][ T8769] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 141.587030][ T8771] netlink: zone id is out of range [ 141.592161][ T8771] netlink: zone id is out of range [ 141.600452][ T8771] netlink: zone id is out of range [ 141.609281][ T8771] netlink: zone id is out of range [ 141.614529][ T8771] netlink: zone id is out of range [ 141.620046][ T8771] netlink: zone id is out of range [ 141.625526][ T8771] netlink: zone id is out of range [ 141.652675][ T8771] netlink: zone id is out of range [ 141.858813][ T8788] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 141.946431][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'. [ 142.011643][ T8788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.108799][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'. [ 142.117949][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 142.160717][ T8807] veth3: entered promiscuous mode [ 142.197207][ T8807] bond3: (slave veth3): Enslaving as an active interface with a down link [ 142.218171][ T8812] syzkaller0: entered promiscuous mode [ 142.223924][ T8812] syzkaller0: entered allmulticast mode [ 142.427229][ T8830] netlink: 14 bytes leftover after parsing attributes in process `syz.0.774'. [ 142.669109][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 142.725184][ T8862] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.736931][ T8830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.749518][ T8863] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 142.757862][ T8830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.758892][ T8863] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 142.776558][ T8830] bond0 (unregistering): Released all slaves [ 142.824591][ T8850] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.869389][ T8871] netlink: 'syz.4.783': attribute type 21 has an invalid length. [ 142.991453][ T8873] netlink: 'syz.0.784': attribute type 11 has an invalid length. [ 143.074581][ T8878] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 143.159076][ T8878] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 143.620726][ T8908] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 144.142873][ T8941] bond0: option lp_interval: invalid value (0) [ 144.149397][ T8941] bond0: option lp_interval: allowed values 1 - 2147483647 [ 144.158778][ T8941] bond0 (unregistering): Released all slaves [ 144.244814][ T8944] bond5: entered promiscuous mode [ 144.263908][ T8944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.359549][ T8947] bridge0: port 3(veth0_to_bridge) entered blocking state [ 144.392645][ T8947] bridge0: port 3(veth0_to_bridge) entered disabled state [ 144.417885][ T8947] veth0_to_bridge: entered allmulticast mode [ 144.439139][ T8947] veth0_to_bridge: entered promiscuous mode [ 144.878126][ T8996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.088048][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.108705][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.119070][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.141825][ T8980] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.164450][ T8980] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.229740][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.260764][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.278932][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.289337][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 145.304206][ T8980] hsr0 speed is unknown, defaulting to 1000 [ 146.093189][ T9149] __nla_validate_parse: 12 callbacks suppressed [ 146.093207][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 146.340918][ T9157] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.833'. [ 146.389205][ T9157] x_tables: duplicate underflow at hook 2 [ 146.710084][ T9169] delete_channel: no stack [ 146.778304][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 146.787633][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 146.816857][ T9187] validate_nla: 2 callbacks suppressed [ 146.816874][ T9187] netlink: 'syz.4.841': attribute type 9 has an invalid length. [ 146.988646][ T9192] tipc: Can't bind to reserved service type 1 [ 147.361405][ T9212] tipc: Started in network mode [ 147.384221][ T9212] tipc: Node identity b61164701e47, cluster identity 4711 [ 147.416337][ T9212] tipc: Enabled bearer , priority 0 [ 147.442191][ T9215] syzkaller0: entered promiscuous mode [ 147.458421][ T9215] syzkaller0: entered allmulticast mode [ 147.500171][ T9217] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.848'. [ 147.699599][ T9223] tipc: Resetting bearer [ 147.742503][ T9210] tipc: Resetting bearer [ 147.786358][ T9210] tipc: Disabling bearer [ 147.936199][ T9236] vlan2: entered allmulticast mode [ 148.071495][ T9248] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 148.110523][ T9245] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 148.123664][ T9245] bond3 (unregistering): Released all slaves [ 148.254152][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.270920][ T9253] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 148.282711][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'. [ 148.351512][ T9257] bond0: (slave ip6gretap1): making interface the new active one [ 148.375841][ T9257] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.702289][ T9297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 148.713408][ T9294] net_ratelimit: 1 callbacks suppressed [ 148.713425][ T9294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.041425][ T9318] geneve2: entered promiscuous mode [ 149.082021][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 149.109008][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 149.139109][ T9322] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 149.146567][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 149.155635][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 149.165557][ T9326] netlink: 'syz.4.872': attribute type 13 has an invalid length. [ 149.173327][ T9318] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.182259][ T9327] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 149.204605][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.229108][ T9322] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.253549][ T9330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.874'. [ 149.300865][ T9327] bond4: entered promiscuous mode [ 149.317871][ T9327] bond4: entered allmulticast mode [ 149.331435][ T9327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.371915][ T9326] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 149.392530][ T10] hsr0 speed is unknown, defaulting to 1000 [ 149.728216][ T9338] syzkaller0: entered promiscuous mode [ 149.754068][ T9338] syzkaller0: entered allmulticast mode [ 149.923160][ T9351] syzkaller1: entered promiscuous mode [ 149.946063][ T9351] syzkaller1: entered allmulticast mode [ 150.160522][ T9376] SET target dimension over the limit! [ 151.916943][ T9429] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 152.072188][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 152.079376][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 152.090790][ T9438] netlink: 'syz.4.901': attribute type 30 has an invalid length. [ 152.117417][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 152.407492][ T9463] sch_fq: defrate 1024 ignored. [ 152.868197][ T9477] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 152.994179][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 152.994619][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 153.023477][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 153.160452][ T9508] lo speed is unknown, defaulting to 1000 [ 153.170028][ T9508] lo speed is unknown, defaulting to 1000 [ 153.178177][ T9508] lo speed is unknown, defaulting to 1000 [ 153.208339][ T9508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.240521][ T9508] lo speed is unknown, defaulting to 1000 [ 153.249268][ T9508] lo speed is unknown, defaulting to 1000 [ 153.256693][ T9508] lo speed is unknown, defaulting to 1000 [ 153.263587][ T9508] lo speed is unknown, defaulting to 1000 [ 153.272528][ T9508] lo speed is unknown, defaulting to 1000 [ 153.842447][ T9519] netlink: 'syz.3.923': attribute type 23 has an invalid length. [ 153.961346][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 154.110390][ T9542] xt_hashlimit: invalid rate [ 154.183853][ T9553] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 154.194266][ T9551] netlink: 100 bytes leftover after parsing attributes in process `syz.2.934'. [ 154.219559][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'. [ 154.229277][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'. [ 154.586786][ T9582] netlink: 'syz.3.945': attribute type 29 has an invalid length. [ 154.736799][ T9589] netlink: 'syz.4.946': attribute type 21 has an invalid length. [ 154.797271][ T9589] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 154.810937][ T9589] bond3 (unregistering): Released all slaves [ 154.932943][ T9605] hsr0 speed is unknown, defaulting to 1000 [ 154.940301][ T9610] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 154.969131][ T9612] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 154.973956][ T9605] lo speed is unknown, defaulting to 1000 [ 155.083455][ T9618] netlink: 'syz.1.952': attribute type 21 has an invalid length. [ 155.338520][ T5946] lo speed is unknown, defaulting to 1000 [ 155.344417][ T5946] syz2: Port: 1 Link ACTIVE [ 155.434730][ T5946] lo speed is unknown, defaulting to 1000 [ 155.435194][ T1168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.450288][ T5946] syz2: Port: 1 Link DOWN [ 155.478264][ T1168] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 155.489831][ T1168] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.499550][ T1168] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 155.635293][ T1168] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.648064][ T1168] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 155.682188][ T1168] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.753334][ T1168] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 155.929828][ T9667] syzkaller0: entered promiscuous mode [ 155.935346][ T9667] syzkaller0: entered allmulticast mode [ 156.086111][ T9672] gretap0: refused to change device tx_queue_len [ 156.122540][ T9672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.297003][ T9686] syzkaller0: entered promiscuous mode [ 156.320314][ T9686] syzkaller0: entered allmulticast mode [ 156.690206][ T9715] sch_fq: defrate 1024 ignored. [ 156.777193][ T9724] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 156.987934][ T9734] bridge_slave_1 (unregistering): left allmulticast mode [ 157.005293][ T9734] bridge_slave_1 (unregistering): left promiscuous mode [ 157.013740][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.038749][ T9739] veth0: entered promiscuous mode [ 157.059244][ T9746] geneve3: entered promiscuous mode [ 157.065480][ T9746] geneve3: entered allmulticast mode [ 157.073578][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.091125][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.101098][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.110416][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.229514][ T9750] validate_nla: 6 callbacks suppressed [ 157.229530][ T9750] netlink: 'syz.0.994': attribute type 11 has an invalid length. [ 157.256204][ T9750] sctp: [Deprecated]: syz.0.994 (pid 9750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.256204][ T9750] Use struct sctp_sack_info instead [ 157.463914][ T9770] IPVS: set_ctl: invalid protocol: 94 172.20.20.23:0 [ 157.635344][ T9776] macvtap0: mtu less than device minimum [ 157.711732][ T9731] veth0: left promiscuous mode [ 157.746633][ T9778] xt_TCPMSS: Only works on TCP SYN packets [ 157.854883][ T9788] __nla_validate_parse: 13 callbacks suppressed [ 157.854899][ T9788] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1006'. [ 158.034225][ T9802] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1009'. [ 158.087159][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 158.302964][ T9817] sctp: [Deprecated]: syz.4.1015 (pid 9817) Use of int in maxseg socket option. [ 158.302964][ T9817] Use struct sctp_assoc_value instead [ 158.402889][ T9826] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 159.551837][ T9826] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 159.667272][ T9834] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1016'. [ 159.851591][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 159.867075][ T9858] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 159.875391][ T9858] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1023'. [ 159.912548][ T9858] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 159.973370][ T9863] ip6gre1: entered allmulticast mode [ 160.081132][ T9874] netlink: 'syz.2.1028': attribute type 10 has an invalid length. [ 160.117546][ T9874] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1028'. [ 160.280311][ T9887] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 160.438835][ T9887] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 160.560000][ T9908] nbd: must specify a size in bytes for the device [ 160.587912][ T9909] nbd: must specify a device to reconfigure [ 160.612942][ T9909] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.646836][ T9909] team0: Cannot enslave team device to itself [ 160.753839][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 160.757148][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1037'. [ 160.773338][ T9917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 160.794701][ T9915] netlink: 'syz.2.1037': attribute type 8 has an invalid length. [ 161.178389][ T9936] veth7: entered promiscuous mode [ 161.464715][ T9960] netlink: 'syz.3.1052': attribute type 5 has an invalid length. [ 161.532282][ T9960] netlink: 'syz.3.1052': attribute type 5 has an invalid length. [ 161.554908][ T9971] netlink: 'syz.1.1053': attribute type 3 has an invalid length. [ 161.754655][ T9978] tipc: Started in network mode [ 161.783218][ T9978] tipc: Node identity 6a2d1c72472c, cluster identity 4711 [ 161.818229][ T9978] tipc: Enabled bearer , priority 0 [ 161.840962][ T9987] syzkaller0: entered promiscuous mode [ 161.862246][ T9987] syzkaller0: entered allmulticast mode [ 161.941929][ T9995] bridge0: entered promiscuous mode [ 161.966175][ T9995] macsec2: entered promiscuous mode [ 161.986862][ T9995] macsec2: entered allmulticast mode [ 161.995852][ T9995] bridge0: entered allmulticast mode [ 162.014112][ T9995] bridge0: port 1(macsec2) entered blocking state [ 162.051885][ T9995] bridge0: port 1(macsec2) entered disabled state [ 162.113435][ T9995] bridge0: left allmulticast mode [ 162.148028][ T9995] bridge0: left promiscuous mode [ 162.266688][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.296178][T10008] bridge_slave_1: left allmulticast mode [ 162.312157][T10008] bridge_slave_1: left promiscuous mode [ 162.322531][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.355710][T10008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 162.391434][T10010] tipc: Resetting bearer [ 162.536784][ T9976] tipc: Resetting bearer [ 162.605129][T10033] x_tables: duplicate entry at hook 1 [ 162.613582][ T9976] tipc: Disabling bearer [ 163.093534][T10059] tipc: Enabled bearer , priority 0 [ 163.120791][T10059] syzkaller0: entered promiscuous mode [ 163.157634][T10059] syzkaller0: entered allmulticast mode [ 163.181546][T10058] __nla_validate_parse: 6 callbacks suppressed [ 163.181560][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 163.204326][T10069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.290857][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 163.324436][T10077] validate_nla: 2 callbacks suppressed [ 163.324453][T10077] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 163.333601][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 163.389174][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 163.399021][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 163.480497][T10059] tipc: Resetting bearer [ 163.480725][T10086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1080'. [ 163.540376][T10059] tipc: Disabling bearer [ 163.549386][T10091] netlink: 294 bytes leftover after parsing attributes in process `syz.4.1083'. [ 163.559467][T10091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.803166][T10109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1087'. [ 163.992757][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.009250][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.169827][T10120] tipc: MTU too low for tipc bearer [ 164.184646][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.208122][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.220720][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.253903][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.694492][T10157] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 164.895881][T10169] TCP: TCP_TX_DELAY enabled [ 165.151148][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 165.368909][T10193] vlan2: entered promiscuous mode [ 165.375055][T10193] geneve1: entered promiscuous mode [ 165.381995][T10193] vlan2: entered allmulticast mode [ 165.389852][T10193] geneve1: entered allmulticast mode [ 165.399010][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'. [ 166.134523][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.142967][T10217] batadv_slave_0: entered allmulticast mode [ 166.321880][T10234] IPVS: length: 239 != 24 [ 166.427043][T10238] sctp: [Deprecated]: syz.3.1122 (pid 10238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.427043][T10238] Use struct sctp_sack_info instead [ 166.868846][T10269] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 166.925611][T10269] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 166.938854][T10269] batadv0: entered promiscuous mode [ 166.944157][T10269] batadv0: entered allmulticast mode [ 166.952316][T10269] bridge0: port 4(batadv0) entered blocking state [ 166.972519][T10269] bridge0: port 4(batadv0) entered disabled state [ 167.126665][ T1015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 167.137204][ T1015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 167.230021][T10294] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 167.655163][T10329] sctp: [Deprecated]: syz.1.1148 (pid 10329) Use of int in max_burst socket option. [ 167.655163][T10329] Use struct sctp_assoc_value instead [ 167.808662][T10345] netlink: 'syz.4.1153': attribute type 2 has an invalid length. [ 167.825530][T10344] netlink: 'syz.4.1153': attribute type 2 has an invalid length. [ 167.967492][T10356] IPv6: Can't replace route, no match found [ 168.085400][T10366] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.350686][T10384] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 168.545298][T10398] __nla_validate_parse: 11 callbacks suppressed [ 168.545317][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 168.574773][T10404] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 168.593276][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 168.617859][T10403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.647591][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 168.673016][T10404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.749253][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 168.782977][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1173'. [ 168.793510][T10419] unsupported nlmsg_type 40 [ 168.801132][T10421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1171'. [ 168.844860][T10420] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1172'. [ 169.154807][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 169.261934][T10449] netlink: 'syz.4.1180': attribute type 8 has an invalid length. [ 169.278532][T10431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.322841][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 169.492978][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.508323][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.527891][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.567705][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.592231][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.629300][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.632413][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 169.726574][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.749664][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.790279][T10470] netlink: 'syz.2.1186': attribute type 6 has an invalid length. [ 169.876960][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.885723][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.895824][T10470] netlink: 'syz.2.1186': attribute type 6 has an invalid length. [ 169.917775][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.930517][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.434362][T10510] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 170.448640][T10510] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 170.542149][T10516] openvswitch: netlink: Duplicate key (type 1). [ 170.542149][T10518] openvswitch: netlink: Duplicate key (type 1). [ 170.578901][T10520] tipc: Enabling of bearer rejected, failed to enable media [ 170.977214][T10544] hsr0 speed is unknown, defaulting to 1000 [ 170.990642][T10544] lo speed is unknown, defaulting to 1000 [ 171.728055][T10599] x_tables: ip6_tables: TEE.1 target: invalid size 40 (kernel) != (user) 240 [ 171.738478][T10593] hsr0 speed is unknown, defaulting to 1000 [ 171.746983][T10593] lo speed is unknown, defaulting to 1000 [ 171.755095][T10603] sctp: [Deprecated]: syz.3.1227 (pid 10603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.755095][T10603] Use struct sctp_sack_info instead [ 172.058273][T10618] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 172.070307][T10618] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 172.263193][T10632] netlink: 'syz.1.1237': attribute type 15 has an invalid length. [ 172.923322][T10673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.261430][T10690] netlink: 'syz.3.1251': attribute type 3 has an invalid length. [ 173.265363][T10663] infiniband !yz!: set down [ 173.274990][T10663] infiniband !yz!: added team_slave_0 [ 173.333664][T10663] RDS/IB: !yz!: added [ 173.343982][T10663] smc: adding ib device !yz! with port count 1 [ 173.366654][T10663] smc: ib device !yz! port 1 has no pnetid [ 173.513598][T10701] vlan3: entered promiscuous mode [ 173.520872][T10701] geneve1: entered promiscuous mode [ 173.528554][T10701] vlan3: entered allmulticast mode [ 173.537213][T10701] geneve1: entered allmulticast mode [ 173.603938][T10711] __nla_validate_parse: 11 callbacks suppressed [ 173.603957][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 174.039162][T10726] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 174.102207][T10727] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.124331][T10727] bond4 (unregistering): Released all slaves [ 174.157571][T10726] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 174.294539][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 174.657859][T10753] tc_dump_action: action bad kind [ 174.808577][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1272'. [ 174.876149][T10766] netlink: 'syz.0.1273': attribute type 6 has an invalid length. [ 175.143165][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 175.164130][T10780] netlink: 'syz.2.1278': attribute type 7 has an invalid length. [ 175.199990][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 175.234443][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 175.257920][T10780] netlink: 'syz.2.1278': attribute type 7 has an invalid length. [ 175.277751][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 175.288628][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 175.477226][T10797] netlink: 'syz.2.1283': attribute type 13 has an invalid length. [ 175.614608][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 175.731911][T10797] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 175.783207][T10808] hsr_slave_0: left promiscuous mode [ 175.790473][T10808] hsr_slave_1: left promiscuous mode [ 175.998713][T10820] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 176.089774][T10826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.204523][T10828] sctp: [Deprecated]: syz.4.1290 (pid 10828) Use of int in maxseg socket option. [ 176.204523][T10828] Use struct sctp_assoc_value instead [ 176.212121][T10829] : entered promiscuous mode [ 176.297973][T10836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'. [ 176.501835][T10840] syzkaller0: entered promiscuous mode [ 176.508197][T10840] syzkaller0: entered allmulticast mode [ 176.514714][T10844] veth0: entered promiscuous mode [ 177.759421][T10842] veth0: left promiscuous mode [ 178.025433][T10871] netlink: 'syz.1.1302': attribute type 13 has an invalid length. [ 178.043286][T10882] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 178.056643][T10871] netlink: 'syz.1.1302': attribute type 17 has an invalid length. [ 178.167417][T10871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.193142][T10871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.209851][ T43] lo speed is unknown, defaulting to 1000 [ 178.228054][ T43] syz2: Port: 1 Link ACTIVE [ 178.531815][T10909] netlink: 'syz.0.1310': attribute type 33 has an invalid length. [ 178.554601][ T1168] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.564290][ T1168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.645431][T10916] __nla_validate_parse: 8 callbacks suppressed [ 178.645448][T10916] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1311'. [ 179.887367][ T1168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.896693][ T1168] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.920048][T10922] vlan0: entered promiscuous mode [ 179.928535][T10922] vlan0: entered allmulticast mode [ 179.933686][T10922] veth0_vlan: entered allmulticast mode [ 180.106784][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 180.457710][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 180.480611][T10962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.481742][T10964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1327'. [ 180.587450][T10967] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 180.913542][T10989] netlink: 'syz.2.1335': attribute type 10 has an invalid length. [ 180.923371][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1335'. [ 180.964809][T10989] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 180.993216][T10993] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 181.007473][T10989] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 181.019273][T10989] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 181.079483][T10996] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1338'. [ 181.113348][T10996] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1338'. [ 181.135007][T10995] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1338'. [ 181.153819][T10995] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1338'. [ 181.175770][T11005] openvswitch: netlink: Missing key (keys=40, expected=80) [ 181.190305][T11000] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1338'. [ 181.269880][T11005] bond6: Removing last arp target with arp_interval on [ 181.533293][T11030] sch_fq: defrate 1024 ignored. [ 182.120301][T11079] syz.0.1365 uses old SIOCAX25GETINFO [ 182.144206][T11081] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 182.431152][T11099] sch_fq: defrate 1024 ignored. [ 182.802352][T11119] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 182.992085][T11131] syzkaller0: entered promiscuous mode [ 183.004539][T11131] syzkaller0: entered allmulticast mode [ 183.038238][T11119] gretap2: entered promiscuous mode [ 183.047841][T11119] bond4: (slave gretap2): making interface the new active one [ 183.057136][T11119] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 183.124590][T11133] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 183.132562][T11133] syzkaller0: Linktype set failed because interface is up [ 183.518573][T11180] block nbd0: not configured, cannot reconfigure [ 183.526332][T11180] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 183.541376][T11180] block nbd0: not configured, cannot reconfigure [ 184.821824][T11207] __nla_validate_parse: 10 callbacks suppressed [ 184.821841][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1395'. [ 184.872444][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 184.897691][T11208] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 184.905721][T11208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1396'. [ 184.925752][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 184.945214][T11216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.997547][T11216] bond0: (slave rose0): Enslaving as an active interface with an up link [ 185.452704][T11249] block nbd3: not configured, cannot reconfigure [ 185.694903][T11251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 185.708980][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 185.725169][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 185.725178][ T1015] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.744323][ T44] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.754976][ T44] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.764909][ T44] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.963990][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1413'. [ 186.244571][T11282] pimreg: entered allmulticast mode [ 186.275208][T11285] pimreg: left allmulticast mode [ 186.431362][T11295] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.464751][T11297] vlan2: entered promiscuous mode [ 186.477735][T11297] vlan2: entered allmulticast mode [ 186.482979][T11297] hsr_slave_1: entered allmulticast mode [ 186.664420][T11306] IPv6: NLM_F_REPLACE set, but no existing node found! [ 186.696689][T11306] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 186.707388][T11306] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 186.955836][T11317] syzkaller0: entered promiscuous mode [ 186.968164][T11317] syzkaller0: entered allmulticast mode [ 186.985003][T11317] vlan3: entered allmulticast mode [ 187.124448][T11320] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.328616][T11333] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 187.341945][T11334] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 187.362966][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 187.372370][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 187.393402][T11333] x_tables: unsorted underflow at hook 3 [ 187.598339][T11344] xt_CT: No such helper "snmp_trap" [ 188.097258][T11368] bridge0: port 1(ipvlan2) entered blocking state [ 188.104740][T11368] bridge0: port 1(ipvlan2) entered disabled state [ 188.114042][T11368] ipvlan2: entered allmulticast mode [ 188.130448][T11368] bridge0: entered allmulticast mode [ 188.136877][T11374] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 188.149124][T11368] ipvlan2: left allmulticast mode [ 188.154243][T11368] bridge0: left allmulticast mode [ 188.203685][T11378] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 188.360972][T11383] pim6reg: entered allmulticast mode [ 188.393511][T11391] netlink: 'syz.1.1454': attribute type 3 has an invalid length. [ 189.346789][T11439] netlink: 'syz.1.1465': attribute type 2 has an invalid length. [ 189.522249][T11453] sctp: [Deprecated]: syz.0.1469 (pid 11453) Use of int in maxseg socket option. [ 189.522249][T11453] Use struct sctp_assoc_value instead [ 189.826522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.851996][T11476] __nla_validate_parse: 11 callbacks suppressed [ 189.852014][T11476] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1477'. [ 189.945600][T11481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1478'. [ 190.175546][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 190.541833][T11498] netlink: 484 bytes leftover after parsing attributes in process `syz.0.1483'. [ 190.835028][T11522] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1490'. [ 190.893680][T11522] xt_policy: neither incoming nor outgoing policy selected [ 191.064851][T11544] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1496'. [ 191.064851][T11542] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1496'. [ 191.064925][T11542] openvswitch: netlink: Message has 6 unknown bytes. [ 191.081429][T11544] openvswitch: netlink: Message has 6 unknown bytes. [ 191.138583][T11544] netlink: 'syz.0.1496': attribute type 83 has an invalid length. [ 191.167980][T11553] openvswitch: netlink: Key 4 has unexpected len 36 expected 12 [ 191.182841][T11551] netlink: 'syz.0.1496': attribute type 83 has an invalid length. [ 191.364819][T11563] delete_channel: no stack [ 191.447864][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 191.480511][T11567] tipc: Enabled bearer , priority 0 [ 191.488236][T11567] syzkaller0: entered promiscuous mode [ 191.493736][T11567] syzkaller0: entered allmulticast mode [ 191.605843][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 191.673613][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 191.688593][T11579] tipc: Resetting bearer [ 191.827313][T11591] sch_fq: defrate 1024 ignored. [ 191.890280][ T5896] IPVS: starting estimator thread 0... [ 191.965801][T11608] netlink: 'syz.1.1513': attribute type 32 has an invalid length. [ 192.007558][T11602] IPVS: using max 32 ests per chain, 76800 per kthread [ 192.042855][T11612] delete_channel: no stack [ 192.047632][T11612] delete_channel: no stack [ 192.052296][T11612] delete_channel: no stack [ 192.056965][T11612] delete_channel: no stack [ 192.061631][T11612] delete_channel: no stack [ 192.066504][T11612] delete_channel: no stack [ 192.070395][T11608] bond7: option coupled_control: invalid value (52) [ 192.071655][T11612] delete_channel: no stack [ 192.083070][T11612] delete_channel: no stack [ 192.087747][T11612] delete_channel: no stack [ 192.092462][T11612] delete_channel: no stack [ 192.097444][T11612] delete_channel: no stack [ 192.102131][T11612] delete_channel: no stack [ 192.111762][T11612] delete_channel: no stack [ 192.116511][T11612] delete_channel: no stack [ 192.121981][T11612] delete_channel: no stack [ 192.128054][T11612] delete_channel: no stack [ 192.133390][T11608] bond7 (unregistering): Released all slaves [ 192.136428][T11612] delete_channel: no stack [ 192.144085][T11612] delete_channel: no stack [ 192.150219][T11612] delete_channel: no stack [ 192.155156][T11612] delete_channel: no stack [ 192.160347][T11612] delete_channel: no stack [ 192.167887][T11612] delete_channel: no stack [ 192.191676][T11612] delete_channel: no stack [ 192.197211][T11612] delete_channel: no stack [ 192.201826][T11612] delete_channel: no stack [ 192.213909][T11612] delete_channel: no stack [ 192.219707][T11612] delete_channel: no stack [ 192.224664][T11612] delete_channel: no stack [ 192.230698][T11612] delete_channel: no stack [ 192.235371][T11612] delete_channel: no stack [ 192.240773][T11612] delete_channel: no stack [ 192.251720][T11612] delete_channel: no stack [ 192.266284][T11612] delete_channel: no stack [ 192.287686][T11612] delete_channel: no stack [ 192.316051][T11612] delete_channel: no stack [ 192.326792][T11612] delete_channel: no stack [ 192.341673][T11612] delete_channel: no stack [ 192.367360][T11612] delete_channel: no stack [ 192.387716][T11612] delete_channel: no stack [ 192.403472][T11637] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 192.406805][T11612] delete_channel: no stack [ 192.437134][T11612] delete_channel: no stack [ 192.445456][T11612] delete_channel: no stack [ 192.476379][T11612] delete_channel: no stack [ 192.486612][T11566] tipc: Resetting bearer [ 192.493540][T11612] delete_channel: no stack [ 192.507976][T11612] delete_channel: no stack [ 192.531241][T11612] delete_channel: no stack [ 192.548513][T11566] tipc: Disabling bearer [ 192.552478][T11612] delete_channel: no stack [ 192.578085][T11612] delete_channel: no stack [ 192.598419][T11612] delete_channel: no stack [ 192.617871][T11612] delete_channel: no stack [ 192.631363][T11612] delete_channel: no stack [ 192.645698][T11612] delete_channel: no stack [ 192.670883][T11612] delete_channel: no stack [ 192.675690][T11612] delete_channel: no stack [ 192.691676][T11612] delete_channel: no stack [ 192.711911][T11612] delete_channel: no stack [ 192.720922][T11612] delete_channel: no stack [ 192.725676][T11612] delete_channel: no stack [ 192.761601][T11652] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 192.781033][T11612] delete_channel: no stack [ 192.785697][T11612] delete_channel: no stack [ 192.802837][T11650] veth1_to_bond: entered allmulticast mode [ 192.815294][T11612] delete_channel: no stack [ 192.832510][T11612] delete_channel: no stack [ 192.859272][T11612] delete_channel: no stack [ 192.863901][T11612] delete_channel: no stack [ 192.873479][T11612] delete_channel: no stack [ 192.980047][T11650] bond0: (slave bond_slave_1): Releasing backup interface [ 193.080552][T11669] sch_fq: defrate 1024 ignored. [ 193.360583][T11670] syzkaller0: entered promiscuous mode [ 193.391657][T11670] syzkaller0: entered allmulticast mode [ 194.132901][ T43] IPVS: starting estimator thread 0... [ 194.238127][T11708] IPVS: using max 32 ests per chain, 76800 per kthread [ 194.311788][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.816119][T11707] lo: entered allmulticast mode [ 194.836163][T11706] lo: left allmulticast mode [ 195.101484][T11729] netlink: 'syz.3.1543': attribute type 39 has an invalid length. [ 195.177486][T11732] xt_hashlimit: max too large, truncated to 1048576 [ 195.215144][T11733] tipc: Enabled bearer , priority 0 [ 195.237543][T11733] syzkaller0: entered promiscuous mode [ 195.241909][T11737] __nla_validate_parse: 3 callbacks suppressed [ 195.241925][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 195.243035][T11733] syzkaller0: entered allmulticast mode [ 195.301930][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 195.311417][T11736] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 195.311437][T11736] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1546'. [ 195.312385][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 195.338549][T11737] bridge_slave_1: left allmulticast mode [ 195.348673][T11737] bridge_slave_1: left promiscuous mode [ 195.388587][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.418383][T11737] bridge_slave_0: left promiscuous mode [ 195.424192][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.595631][T11731] tipc: Resetting bearer [ 195.647044][T11731] tipc: Disabling bearer [ 196.206912][T11786] netlink: 'syz.4.1555': attribute type 13 has an invalid length. [ 196.259116][T11789] netlink: 'syz.4.1555': attribute type 13 has an invalid length. [ 196.260531][T11786] batadv_slave_0: left allmulticast mode [ 196.333740][T11786] ip6gre1: left allmulticast mode [ 196.340611][T11786] vlan3: left promiscuous mode [ 196.345386][T11786] geneve1: left promiscuous mode [ 196.353484][T11786] vlan3: left allmulticast mode [ 196.360824][T11786] geneve1: left allmulticast mode [ 196.369803][T11786] gretap2: left promiscuous mode [ 196.482026][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1559'. [ 196.548727][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 196.566589][T11796] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 196.599795][T11796] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1560'. [ 196.695650][T11811] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1561'. [ 196.729266][T11807] hsr0 speed is unknown, defaulting to 1000 [ 196.749745][T11807] lo speed is unknown, defaulting to 1000 [ 196.885618][T11823] netlink: 'syz.1.1564': attribute type 39 has an invalid length. [ 197.101770][T11832] netlink: 'syz.4.1567': attribute type 26 has an invalid length. [ 197.419660][T11845] netlink: 'syz.0.1573': attribute type 21 has an invalid length. [ 197.444577][T11850] bond0: (slave bond_slave_0): Releasing backup interface [ 197.470537][T11850] bond0: (slave bond_slave_1): Releasing backup interface [ 197.492483][T11850] team0: Port device team_slave_0 removed [ 197.514098][T11850] team0: Port device team_slave_1 removed [ 197.522974][T11850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.531987][T11850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.540495][T11850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.557357][T11852] lo: Caught tx_queue_len zero misconfig [ 197.572778][T11852] netem: incorrect ge model size [ 197.586225][T11852] netem: change failed [ 197.637751][T11862] netlink: 'syz.2.1577': attribute type 29 has an invalid length. [ 197.652212][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 197.956358][T11882] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.1582'. [ 198.344034][T11898] netlink: 'syz.0.1588': attribute type 2 has an invalid length. [ 198.578542][T11887] infiniband sy: set down [ 198.583141][T11887] infiniband sy: added bond_slave_0 [ 198.592453][T11887] sy: rxe_create_cq: returned err = -12 [ 198.608435][T11887] infiniband sy: Couldn't create ib_mad CQ [ 198.622475][T11887] infiniband sy: Couldn't open port 1 [ 198.672868][T11887] RDS/IB: sy: added [ 198.680390][T11887] smc: adding ib device sy with port count 1 [ 198.689097][T11887] smc: ib device sy port 1 has no pnetid [ 198.941903][T11935] sch_fq: defrate 1024 ignored. [ 199.015242][T11938] sctp: [Deprecated]: syz.4.1600 (pid 11938) Use of int in maxseg socket option. [ 199.015242][T11938] Use struct sctp_assoc_value instead [ 199.206706][T11944] netlink: 'syz.3.1603': attribute type 22 has an invalid length. [ 199.337877][T11944] netlink: 'syz.3.1603': attribute type 22 has an invalid length. [ 199.763693][ T5896] IPVS: starting estimator thread 0... [ 199.856504][T11967] IPVS: using max 34 ests per chain, 81600 per kthread [ 199.874336][T11970] tipc: Started in network mode [ 199.889914][T11970] tipc: Node identity 9a372fa07fcc, cluster identity 4711 [ 199.917070][T11970] tipc: Enabled bearer , priority 0 [ 200.009742][T11974] syzkaller0: entered promiscuous mode [ 200.015247][T11974] syzkaller0: entered allmulticast mode [ 200.040850][T11970] tipc: Resetting bearer [ 200.056490][T11969] tipc: Resetting bearer [ 200.095674][T11969] tipc: Disabling bearer [ 200.142252][T11978] sch_fq: defrate 1024 ignored. [ 200.181082][ T1015] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.309635][ T1015] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.346338][ T1015] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.355078][ T1015] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.517581][T11997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.550463][T11996] sit1: entered promiscuous mode [ 200.555449][T11996] sit1: entered allmulticast mode [ 200.943004][T12019] __nla_validate_parse: 9 callbacks suppressed [ 200.943020][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 200.968105][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 201.045727][T12019] netem: change failed [ 201.217022][T12033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 201.507695][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 201.508895][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 201.516650][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 201.550674][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 201.564509][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 201.642970][T12064] netlink: 'syz.4.1642': attribute type 13 has an invalid length. [ 201.684306][T12064] netlink: 'syz.4.1642': attribute type 58 has an invalid length. [ 201.697252][T12064] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1642'. [ 202.301389][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 202.865419][T12144] netlink: 'syz.1.1660': attribute type 21 has an invalid length. [ 202.874672][T12144] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1660'. [ 203.004927][T12149] lo: entered allmulticast mode [ 203.185275][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1664'. [ 203.358027][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 203.519453][T12181] ipt_rpfilter: unknown options [ 203.620741][T12188] netlink: 'syz.0.1676': attribute type 12 has an invalid length. [ 203.758412][T12195] netlink: zone id is out of range [ 203.763567][T12195] netlink: zone id is out of range [ 203.796601][T12195] netlink: zone id is out of range [ 203.801843][T12195] netlink: zone id is out of range [ 204.054553][T12214] macvtap1: entered promiscuous mode [ 204.060109][T12214] vlan0: entered promiscuous mode [ 204.086730][T12214] macvtap1: entered allmulticast mode [ 204.092719][T12214] vlan0: entered allmulticast mode [ 204.099580][T12214] veth0_vlan: entered allmulticast mode [ 204.114275][T12216] macvtap2: entered promiscuous mode [ 204.120389][T12216] macvtap2: entered allmulticast mode [ 204.687025][T12262] netlink: 'syz.3.1696': attribute type 3 has an invalid length. [ 204.840626][T12272] veth0: entered promiscuous mode [ 205.165026][T12271] veth0: left promiscuous mode [ 205.186206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.903061][T12338] bond8 (unregistering): Released all slaves [ 206.041911][T12347] netlink: 'syz.4.1716': attribute type 11 has an invalid length. [ 206.078884][T12349] tipc: Enabled bearer , priority 0 [ 206.166888][T12353] tipc: Resetting bearer [ 206.280858][T12360] dvmrp1: left allmulticast mode [ 206.780283][T12393] __nla_validate_parse: 8 callbacks suppressed [ 206.780301][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 206.887236][T12348] tipc: Disabling bearer [ 207.087474][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 207.134012][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 207.153488][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 207.340826][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1740'. [ 207.597082][T12439] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1743'. [ 208.147920][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 208.467882][T12436] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 208.480676][T12436] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 208.580253][T12495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.649610][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 208.709864][T12504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1764'. [ 209.025550][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 209.071619][T12526] xt_ecn: cannot match TCP bits for non-tcp packets [ 209.433979][T12549] netlink: 'syz.0.1781': attribute type 12 has an invalid length. [ 209.443069][T12549] netlink: 'syz.0.1781': attribute type 29 has an invalid length. [ 209.541020][T12557] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 209.551700][T12560] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 209.584334][T12557] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 209.597164][T12557] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 210.034594][T12585] bond3 (unregistering): Released all slaves [ 210.129392][T12597] siw: device registration error -23 [ 210.838553][T12623] syzkaller0: entered allmulticast mode [ 211.552205][T12668] sctp: [Deprecated]: syz.0.1823 (pid 12668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.552205][T12668] Use struct sctp_sack_info instead [ 211.968143][T12701] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 211.976585][T12701] __nla_validate_parse: 13 callbacks suppressed [ 211.976600][T12701] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1832'. [ 211.996174][T12701] netlink: 'syz.4.1832': attribute type 4 has an invalid length. [ 212.360361][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 212.380571][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'. [ 212.455493][T12724] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 212.469133][T12724] bond5 (unregistering): Released all slaves [ 212.713163][T12736] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1844'. [ 212.769574][T12743] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 212.774634][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'. [ 212.790329][T12742] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 212.796980][T12741] dummy0: left allmulticast mode [ 212.807740][T12741] dummy0: left promiscuous mode [ 212.812802][T12741] bridge0: port 3(dummy0) entered disabled state [ 212.822290][T12741] bridge_slave_0: left allmulticast mode [ 212.828020][T12741] bridge_slave_0: left promiscuous mode [ 212.833778][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.900238][T12742] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 213.189557][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 213.235269][T12776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.280471][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1856'. [ 213.494356][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 213.508752][T12796] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1861'. [ 213.658361][T12808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'. [ 213.918595][ T36] tipc: Subscription rejected, illegal request [ 214.050587][T12834] syzkaller1: entered promiscuous mode [ 214.081219][T12834] syzkaller1: entered allmulticast mode [ 214.285272][T12853] xt_ecn: cannot match TCP bits for non-tcp packets [ 214.378283][T12864] tc_dump_action: action bad kind [ 214.463643][T12863] ip6erspan0: entered promiscuous mode [ 214.612970][T12877] siw: device registration error -23 [ 214.661920][T12881] pim6reg1: entered promiscuous mode [ 214.676313][T12881] pim6reg1: entered allmulticast mode [ 214.799810][ T5844] Bluetooth: hci4: link tx timeout [ 214.805045][ T5844] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 214.978421][T12904] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 215.700997][T12899] validate_nla: 1 callbacks suppressed [ 215.701017][T12899] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 216.220802][T12953] netlink: 'syz.4.1904': attribute type 12 has an invalid length. [ 216.245005][T12953] netlink: 'syz.4.1904': attribute type 29 has an invalid length. [ 216.267281][T12953] netlink: 'syz.4.1904': attribute type 2 has an invalid length. [ 216.293476][T12958] tipc: New replicast peer: 255.255.255.255 [ 216.302535][T12958] tipc: Enabled bearer , priority 10 [ 216.747261][T12989] Unsupported ieee802154 address type: 0 [ 216.875061][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 216.998552][T13012] __nla_validate_parse: 14 callbacks suppressed [ 216.998570][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1919'. [ 217.025325][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 217.035199][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1919'. [ 217.087754][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1918'. [ 217.099370][T13013] IPVS: Error connecting to the multicast addr [ 217.113916][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1918'. [ 217.129555][T13008] IPVS: Error connecting to the multicast addr [ 217.217206][T13022] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 217.245361][T13022] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1922'. [ 217.340209][T13025] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1924'. [ 217.374077][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 217.419104][ T5896] tipc: Node number set to 575641804 [ 217.835008][T13056] netlink: 'syz.2.1933': attribute type 2 has an invalid length. [ 217.850023][T13059] raw_sendmsg: syz.0.1932 forgot to set AF_INET. Fix it! [ 217.856088][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 217.884439][T13056] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1933'. [ 218.234154][ T1168] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 218.492198][T13109] xt_l2tp: v2 doesn't support IP mode [ 218.927089][T13124] : entered promiscuous mode [ 219.160611][T13135] ieee802154 phy1 wpan1: encryption failed: -126 [ 219.582512][T13150] block nbd0: not configured, cannot reconfigure [ 220.271962][T13209] netlink: 'syz.0.1976': attribute type 27 has an invalid length. [ 220.378595][T13214] tipc: Enabled bearer , priority 0 [ 220.421613][T13214] syzkaller0: entered promiscuous mode [ 220.441030][T13214] syzkaller0: entered allmulticast mode [ 220.479453][T13214] tipc: Resetting bearer [ 220.494435][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.512376][T13213] tipc: Resetting bearer [ 220.537923][T13213] tipc: Disabling bearer [ 221.633707][T13288] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 222.125651][T13301] __nla_validate_parse: 12 callbacks suppressed [ 222.125742][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1998'. [ 223.020624][T13296] erspan0: entered promiscuous mode [ 223.034887][T13296] vlan4: entered promiscuous mode [ 223.081654][ T5953] lo speed is unknown, defaulting to 1000 [ 223.096161][ T5953] syz2: Port: 1 Link DOWN [ 223.176829][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.185367][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.215331][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.226198][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.234329][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.243014][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.251493][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.260368][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.269252][T13305] netlink: 'syz.1.2001': attribute type 83 has an invalid length. [ 223.455064][T13325] : entered promiscuous mode [ 223.462699][T13324] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 223.602408][T13336] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2010'. [ 223.818267][T13336] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2010'. [ 223.975475][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2016'. [ 224.001773][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2016'. [ 224.042657][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 224.139161][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 224.432893][T13391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2030'. [ 224.457779][T13391] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 224.538725][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2031'. [ 224.540681][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 224.927550][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.202204][T13442] syzkaller0: entered promiscuous mode [ 225.207923][T13442] syzkaller0: entered allmulticast mode [ 225.361760][T13439] syzkaller0: entered promiscuous mode [ 225.369259][T13439] syzkaller0: entered allmulticast mode [ 225.907630][T13488] dvmrp0: entered allmulticast mode [ 225.914344][T13488] dvmrp0: left allmulticast mode [ 225.968781][T13492] tipc: Enabled bearer , priority 0 [ 225.979761][T13492] syzkaller0: entered promiscuous mode [ 225.987491][T13492] syzkaller0: entered allmulticast mode [ 226.008408][T13491] tipc: Resetting bearer [ 226.048318][T13491] tipc: Disabling bearer [ 226.218255][T13504] ipt_REJECT: ECHOREPLY no longer supported. [ 226.890578][T13557] validate_nla: 28 callbacks suppressed [ 226.890597][T13557] netlink: 'syz.0.2080': attribute type 24 has an invalid length. [ 227.173138][T13566] __nla_validate_parse: 8 callbacks suppressed [ 227.173155][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2082'. [ 227.298486][T13572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.324853][T13576] nbd: socks must be embedded in a SOCK_ITEM attr [ 227.371361][T13582] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 227.387829][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2085'. [ 227.464484][T13582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.483794][T13590] netlink: 'syz.3.2089': attribute type 21 has an invalid length. [ 227.690410][T13590] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 227.775191][T13590] bond8 (unregistering): Released all slaves [ 227.918979][T13609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.926322][T13609] IPv6: NLM_F_CREATE should be set when creating new route [ 227.981480][T13611] nft_compat: unsupported protocol 0 [ 228.226517][T13618] nbd0: detected capacity change from 0 to 127 [ 228.247872][T13625] netlink: 'syz.0.2099': attribute type 2 has an invalid length. [ 228.273141][ T5844] block nbd0: Receive control failed (result -32) [ 228.281823][ T5847] block nbd0: Send control failed (result -32) [ 228.295379][ T5847] block nbd0: Request send failed, requeueing [ 228.318477][ T11] block nbd0: Dead connection, failed to find a fallback [ 228.325718][ T11] block nbd0: shutting down sockets [ 228.331426][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.344685][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.352917][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.363083][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.371769][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.381194][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 228.389146][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.398246][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 228.406215][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.415261][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.423263][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.432488][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.440536][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.449889][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read [ 228.457911][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.467668][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read [ 228.475669][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.489785][T13640] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2102'. [ 228.508147][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 228.527905][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.587695][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read [ 228.620669][ T5847] ldm_validate_partition_table(): Disk read failed. [ 228.650076][ T5847] Dev nbd0: unable to read RDB block 0 [ 228.669205][ T5847] nbd0: unable to read partition table [ 228.695261][ T5847] ldm_validate_partition_table(): Disk read failed. [ 228.731685][ T5847] Dev nbd0: unable to read RDB block 0 [ 228.751480][T13657] syzkaller0: entered promiscuous mode [ 228.758178][T13657] syzkaller0: entered allmulticast mode [ 228.766953][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 228.770211][ T5847] nbd0: unable to read partition table [ 228.820969][T13658] gtp0: entered promiscuous mode [ 228.878560][T13658] gtp0: entered allmulticast mode [ 228.909947][T13664] syzkaller0: entered promiscuous mode [ 228.915515][T13664] syzkaller0: entered allmulticast mode [ 228.943430][T13664] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 229.270475][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 229.438728][T13694] netlink: 'syz.4.2120': attribute type 10 has an invalid length. [ 229.445061][T13691] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 229.458426][T13691] bond8: option packets_per_slave: allowed values 0 - 65535 [ 229.468179][T13694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2120'. [ 229.480630][T13691] bond8 (unregistering): Released all slaves [ 229.602740][T13694] geneve0: entered promiscuous mode [ 229.610220][T13694] team0: Port device geneve0 added [ 229.630888][T13701] C: renamed from team_slave_0 [ 229.647054][T13701] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 229.672811][T13701] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.761275][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2123'. [ 229.993057][T13723] netlink: 'syz.4.2129': attribute type 10 has an invalid length. [ 230.023601][T13723] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2129'. [ 230.042121][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 230.088626][T13730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.139669][T13730] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.163100][T13730] gretap2: entered promiscuous mode [ 230.174738][T13737] nbd: must specify at least one socket [ 230.181260][T13730] gretap2: entered allmulticast mode [ 230.192329][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 230.207578][T13740] 8021q: VLANs not supported on ip6_vti0 [ 230.591317][T13765] veth0: entered promiscuous mode [ 230.599345][T13765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.721737][T13772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.333070][T13806] 8021q: VLANs not supported on ip_vti0 [ 231.605911][T13823] gre0: left promiscuous mode [ 231.624362][T13823] gre0: left allmulticast mode [ 231.661165][T13823] batadv0: left allmulticast mode [ 231.669346][T13823] batadv0: left promiscuous mode [ 231.674776][T13823] bridge0: port 4(batadv0) entered disabled state [ 231.691353][T13823] veth0_to_bridge: left allmulticast mode [ 231.707001][T13823] veth0_to_bridge: left promiscuous mode [ 231.723289][T13823] bridge0: port 3(veth0_to_bridge) entered disabled state [ 231.758931][T13823] bridge_slave_0: left promiscuous mode [ 231.764751][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.789006][T13823] bridge_slave_1: left allmulticast mode [ 231.794682][T13823] bridge_slave_1: left promiscuous mode [ 231.803141][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.815898][T13831] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 231.839232][T13823] team0: Port device C removed [ 231.848757][T13823] team0: Port device team_slave_1 removed [ 231.857526][T13823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.868712][T13823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.980478][T13831] gretap1: entered promiscuous mode [ 232.111489][T13847] netlink: 'syz.3.2161': attribute type 21 has an invalid length. [ 232.158805][T13809] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.293947][T13860] vlan3: entered promiscuous mode [ 232.302957][T13860] bridge0: entered promiscuous mode [ 232.332048][T13859] lo: left allmulticast mode [ 232.340790][T13859] __nla_validate_parse: 8 callbacks suppressed [ 232.340807][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 232.750927][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 232.799331][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 233.027225][T13891] Bluetooth: MGMT ver 1.23 [ 233.032911][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 233.045048][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'. [ 233.059459][T13891] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2175'. [ 233.075084][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'. [ 233.172778][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2178'. [ 233.309367][T13912] netlink: 'syz.2.2180': attribute type 8 has an invalid length. [ 233.366230][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 233.441781][T13912] bond0: entered promiscuous mode [ 233.454238][T13912] bond_slave_0: entered promiscuous mode [ 233.470759][T13912] bond_slave_1: entered promiscuous mode [ 233.489837][T13912] geneve1: entered promiscuous mode [ 233.503954][T13912] team0: entered promiscuous mode [ 233.516849][T13912] team_slave_0: entered promiscuous mode [ 233.526872][T13912] team_slave_1: entered promiscuous mode [ 233.533085][T13912] bridge_slave_1: entered promiscuous mode [ 233.543066][T13912] gretap0: entered promiscuous mode [ 233.550479][T13912] debugfs: 'hsr0' already exists in 'hsr' [ 233.556685][T13912] Cannot create hsr debugfs directory [ 233.562403][T13912] hsr0: entered promiscuous mode [ 233.727304][ T1153] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.751760][ T1153] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.874807][ T1153] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.915202][ T1153] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.950912][T13949] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 234.265609][T13971] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 234.320922][T13981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2201'. [ 234.340481][T13971] netlink: 'syz.1.2197': attribute type 18 has an invalid length. [ 234.355573][T13971] netlink: 'syz.1.2197': attribute type 18 has an invalid length. [ 234.439349][T13989] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 234.528853][T13987] netem: unknown loss type 0 [ 234.533825][T13987] netem: change failed [ 234.611020][T13995] bond6: (slave bridge7): making interface the new active one [ 234.622907][T13995] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 234.724955][T14006] netlink: 'syz.3.2211': attribute type 75 has an invalid length. [ 234.799361][T13998] veth7: entered promiscuous mode [ 234.829817][T14006] syzkaller0: entered promiscuous mode [ 234.835410][T14006] syzkaller0: entered allmulticast mode [ 234.894920][T14016] openvswitch: netlink: IP tunnel dst address not specified [ 234.968302][T14017] netlink: 'syz.3.2211': attribute type 13 has an invalid length. [ 234.992467][T14017] gretap0: refused to change device tx_queue_len [ 235.012555][T14017] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.240809][T14032] IPVS: Unknown mcast interface: netpci0 [ 235.266565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.333553][T14040] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 235.368075][T14040] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 235.533792][T14047] ipip1: entered promiscuous mode [ 235.787508][T14067] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 235.849037][T14071] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 235.858701][T14071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.157056][T14087] can: request_module (can-proto-4) failed. [ 236.189321][T14085] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 236.499612][T14104] SET target dimension over the limit! [ 237.009233][T14138] hsr0 speed is unknown, defaulting to 1000 [ 237.020842][T14138] lo speed is unknown, defaulting to 1000 [ 237.165335][T14149] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 237.380151][T14161] __nla_validate_parse: 18 callbacks suppressed [ 237.380180][T14161] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2260'. [ 237.396735][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 237.409389][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 237.585129][T14164] syzkaller0: entered promiscuous mode [ 237.610428][T14164] syzkaller0: entered allmulticast mode [ 237.670407][T14171] netlink: 'syz.1.2263': attribute type 4 has an invalid length. [ 237.847820][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 237.898388][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2264'. [ 237.931392][T14177] netlink: zone id is out of range [ 237.941625][T14177] netlink: zone id is out of range [ 237.953763][T14177] netlink: zone id is out of range [ 237.959159][T14177] netlink: zone id is out of range [ 237.964450][T14177] netlink: zone id is out of range [ 238.271715][T14195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2270'. [ 238.305485][T14194] netlink: 'syz.2.2268': attribute type 29 has an invalid length. [ 238.321268][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 238.381022][T14195] bond5 (unregistering): Released all slaves [ 238.656623][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 238.774163][T14214] vlan4: entered promiscuous mode [ 238.795120][T14214] vlan4: entered allmulticast mode [ 238.830423][T14214] hsr_slave_1: entered allmulticast mode [ 238.935626][T14223] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.044109][T14214] bond7: option resend_igmp: invalid value (32767) [ 239.055002][T14214] bond7: option resend_igmp: allowed values 0 - 255 [ 239.064975][T14214] bond7 (unregistering): Released all slaves [ 239.191936][T14223] ip6gre2: entered allmulticast mode [ 239.220031][T14216] hsr0 speed is unknown, defaulting to 1000 [ 239.241611][T14216] lo speed is unknown, defaulting to 1000 [ 239.248328][T14227] hsr0 speed is unknown, defaulting to 1000 [ 239.265352][T14227] lo speed is unknown, defaulting to 1000 [ 239.360717][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 239.655087][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 239.719037][T14247] xfrm2: entered promiscuous mode [ 239.744251][T14247] xfrm2: entered allmulticast mode [ 240.139775][T14265] tipc: Enabled bearer , priority 0 [ 240.160816][T14265] syzkaller0: entered promiscuous mode [ 240.168308][T14265] syzkaller0: entered allmulticast mode [ 240.224773][T14269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.327522][T14270] tipc: Resetting bearer [ 240.381802][T14275] netlink: 'syz.3.2292': attribute type 10 has an invalid length. [ 240.431789][T14275] netlink: 'syz.3.2292': attribute type 10 has an invalid length. [ 241.067035][T14264] tipc: Resetting bearer [ 241.116558][T14264] tipc: Disabling bearer [ 241.684840][T14306] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.798039][T14308] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 242.155728][T14314] syz_tun: entered allmulticast mode [ 242.199727][T14313] syz_tun: left allmulticast mode [ 242.385409][T14322] syzkaller0: entered promiscuous mode [ 242.403088][T14322] syzkaller0: entered allmulticast mode [ 242.578120][T14332] netlink: 'syz.1.2311': attribute type 13 has an invalid length. [ 242.586597][T14332] netlink: 'syz.1.2311': attribute type 17 has an invalid length. [ 242.636842][T14332] net_ratelimit: 7 callbacks suppressed [ 242.636852][T14332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.664778][T10124] lo speed is unknown, defaulting to 1000 [ 242.672122][T10124] syz2: Port: 1 Link ACTIVE [ 242.712023][T14338] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 242.759901][T14344] __nla_validate_parse: 5 callbacks suppressed [ 242.759918][T14344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 242.799523][T14338] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.821111][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 242.865185][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 242.934008][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 242.967143][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 243.000188][T14344] veth0_to_bond: left allmulticast mode [ 243.013214][T14344] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 243.030705][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 243.040121][T14351] 8021q: VLANs not supported on ip6gre0 [ 243.059875][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 243.087680][T14346] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 243.145107][T14358] netlink: 'syz.3.2320': attribute type 22 has an invalid length. [ 243.169590][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 243.181746][T14358] netlink: 'syz.3.2320': attribute type 22 has an invalid length. [ 243.190234][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 243.327431][T14371] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.356438][T14372] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.378259][T14370] tipc: Enabled bearer , priority 0 [ 243.388272][T14375] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.390850][T14370] syzkaller0: entered promiscuous mode [ 243.404437][T14370] syzkaller0: entered allmulticast mode [ 243.430532][T14370] tipc: Resetting bearer [ 243.436806][T14372] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.477403][T14368] tipc: Resetting bearer [ 243.508259][T14368] tipc: Disabling bearer [ 243.519170][T14371] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.529878][T14375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2323'. [ 243.540516][T14379] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2325'. [ 243.542450][T14383] bond_slave_0: Caught tx_queue_len zero misconfig [ 244.024027][T14379] team_slave_0: left promiscuous mode [ 244.030303][T14379] team_slave_1: left promiscuous mode [ 244.036057][T14379] geneve0: left promiscuous mode [ 244.340116][T14379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.141250][T14379] ip6erspan0: left promiscuous mode [ 245.167838][T14379] ipip1: left promiscuous mode [ 245.176896][T14379] vlan4: left promiscuous mode [ 245.181907][T14379] vlan4: left allmulticast mode [ 245.190093][T14379] hsr_slave_1: left allmulticast mode [ 245.225857][T14397] tap0: tun_chr_ioctl cmd 2148553947 [ 245.323360][ T938] hsr0 speed is unknown, defaulting to 1000 [ 245.323423][ T44] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.340207][ T938] syz1: Port: 1 Link DOWN [ 245.345160][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.354773][T14405] [ 245.357113][T14405] ====================================================== [ 245.364136][T14405] WARNING: possible circular locking dependency detected [ 245.371171][T14405] syzkaller #0 Not tainted [ 245.375602][T14405] ------------------------------------------------------ [ 245.375985][ T44] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.382613][T14405] syz.1.2333/14405 is trying to acquire lock: [ 245.382624][T14405] ffff88807ecaba18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 245.409750][T14405] [ 245.409750][T14405] but task is already holding lock: [ 245.417133][T14405] ffff8880245fad58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 245.427000][T14405] [ 245.427000][T14405] which lock already depends on the new lock. [ 245.427000][T14405] [ 245.431223][ T44] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 245.437395][T14405] [ 245.437395][T14405] the existing dependency chain (in reverse order) is: [ 245.437405][T14405] [ 245.437405][T14405] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 245.437440][T14405] lock_acquire+0x120/0x360 [ 245.468582][T14405] _raw_spin_lock+0x2e/0x40 [ 245.473609][T14405] sch_direct_xmit+0x153/0x4b0 [ 245.478886][T14405] __dev_queue_xmit+0x1857/0x3b50 [ 245.484416][T14405] ip6_finish_output2+0xfb3/0x1480 [ 245.490033][T14405] ip6_output+0x340/0x550 [ 245.494867][T14405] NF_HOOK+0x9e/0x380 [ 245.499356][T14405] mld_sendpack+0x8d4/0xe60 [ 245.504398][T14405] mld_ifc_work+0x83e/0xd60 [ 245.509407][T14405] process_scheduled_works+0xae1/0x17b0 [ 245.515479][T14405] worker_thread+0x8a0/0xda0 [ 245.520571][T14405] kthread+0x711/0x8a0 [ 245.525149][T14405] ret_from_fork+0x4bc/0x870 [ 245.530241][T14405] ret_from_fork_asm+0x1a/0x30 [ 245.535506][T14405] [ 245.535506][T14405] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 245.545831][T14405] validate_chain+0xb9b/0x2140 [ 245.551112][T14405] __lock_acquire+0xab9/0xd20 [ 245.556306][T14405] lock_acquire+0x120/0x360 [ 245.561347][T14405] _raw_spin_lock+0x2e/0x40 [ 245.566373][T14405] __dev_queue_xmit+0x22b7/0x3b50 [ 245.571919][T14405] ip6_finish_output2+0xfb3/0x1480 [ 245.577561][T14405] ip6_output+0x340/0x550 [ 245.582415][T14405] ip6_send_skb+0x1d5/0x390 [ 245.587426][T14405] icmp6_send+0x12c6/0x1940 [ 245.592472][T14405] ip6_link_failure+0x3b/0x4c0 [ 245.597744][T14405] ip_tunnel_xmit+0x175b/0x2390 [ 245.603104][T14405] __gre_xmit+0x19a/0x240 [ 245.607949][T14405] erspan_xmit+0xa04/0x1220 [ 245.612961][T14405] dev_hard_start_xmit+0x2d7/0x830 [ 245.618579][T14405] sch_direct_xmit+0x241/0x4b0 [ 245.623856][T14405] __qdisc_run+0xaa0/0x1540 [ 245.628865][T14405] __dev_queue_xmit+0x1056/0x3b50 [ 245.634397][T14405] ip6_finish_output2+0xfb3/0x1480 [ 245.640019][T14405] ip6_output+0x340/0x550 [ 245.644858][T14405] ip6_mr_output+0x4e9/0x1100 [ 245.650217][T14405] rawv6_send_hdrinc+0xe16/0x17a0 [ 245.655769][T14405] rawv6_sendmsg+0x12ee/0x1830 [ 245.661078][T14405] __sock_sendmsg+0x19c/0x270 [ 245.666270][T14405] ____sys_sendmsg+0x505/0x830 [ 245.671548][T14405] ___sys_sendmsg+0x21f/0x2a0 [ 245.676761][T14405] __x64_sys_sendmsg+0x19b/0x260 [ 245.682203][T14405] do_syscall_64+0xfa/0xfa0 [ 245.687215][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.693614][T14405] [ 245.693614][T14405] other info that might help us debug this: [ 245.693614][T14405] [ 245.703909][T14405] Possible unsafe locking scenario: [ 245.703909][T14405] [ 245.711339][T14405] CPU0 CPU1 [ 245.716687][T14405] ---- ---- [ 245.722035][T14405] lock(&qdisc_xmit_lock_key#4); [ 245.727051][T14405] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 245.736670][T14405] lock(&qdisc_xmit_lock_key#4); [ 245.744206][T14405] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 245.751306][T14405] [ 245.751306][T14405] *** DEADLOCK *** [ 245.751306][T14405] [ 245.759434][T14405] 10 locks held by syz.1.2333/14405: [ 245.764700][T14405] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 245.774435][T14405] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 245.783822][T14405] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 245.792857][T14405] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 245.802772][T14405] #4: ffff8880245fad58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 245.813030][T14405] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 245.822153][T14405] #6: ffff88802f5b0a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 245.831548][T14405] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 245.840766][T14405] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 245.849810][T14405] #9: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 245.859712][T14405] [ 245.859712][T14405] stack backtrace: [ 245.865599][T14405] CPU: 1 UID: 0 PID: 14405 Comm: syz.1.2333 Not tainted syzkaller #0 PREEMPT(full) [ 245.865615][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.865627][T14405] Call Trace: [ 245.865633][T14405] [ 245.865641][T14405] dump_stack_lvl+0x189/0x250 [ 245.865664][T14405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.865681][T14405] ? __pfx__printk+0x10/0x10 [ 245.865695][T14405] ? print_lock_name+0xde/0x100 [ 245.865709][T14405] print_circular_bug+0x2ee/0x310 [ 245.865727][T14405] check_noncircular+0x134/0x160 [ 245.865744][T14405] validate_chain+0xb9b/0x2140 [ 245.865760][T14405] ? lockdep_unlock+0x89/0x120 [ 245.865783][T14405] __lock_acquire+0xab9/0xd20 [ 245.865797][T14405] ? __dev_queue_xmit+0x22b7/0x3b50 [ 245.865812][T14405] lock_acquire+0x120/0x360 [ 245.865824][T14405] ? __dev_queue_xmit+0x22b7/0x3b50 [ 245.865839][T14405] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 245.865856][T14405] ? check_noncircular+0xe0/0x160 [ 245.865873][T14405] _raw_spin_lock+0x2e/0x40 [ 245.865889][T14405] ? __dev_queue_xmit+0x22b7/0x3b50 [ 245.865902][T14405] __dev_queue_xmit+0x22b7/0x3b50 [ 245.865922][T14405] ? __dev_queue_xmit+0x27b/0x3b50 [ 245.865942][T14405] ? neigh_resolve_output+0x438/0x750 [ 245.865961][T14405] ? __pfx___dev_queue_xmit+0x10/0x10 [ 245.865976][T14405] ? read_seqbegin+0x122/0x250 [ 245.865992][T14405] ? neigh_resolve_output+0x438/0x750 [ 245.866008][T14405] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.866026][T14405] ? read_seqbegin+0x1ac/0x250 [ 245.866042][T14405] ? __pfx_read_seqbegin+0x10/0x10 [ 245.866058][T14405] ? __local_bh_enable_ip+0x12d/0x1c0 [ 245.866073][T14405] ? eth_header+0x11b/0x200 [ 245.866086][T14405] ? __asan_memcpy+0x40/0x70 [ 245.866110][T14405] ip6_finish_output2+0xfb3/0x1480 [ 245.866133][T14405] ? __pfx_ip6_finish_output2+0x10/0x10 [ 245.866152][T14405] ? ip6_mtu+0x7d/0x490 [ 245.866167][T14405] ? ip6_mtu+0x38c/0x490 [ 245.866183][T14405] ? ip6_finish_output+0x2ef/0x4e0 [ 245.866198][T14405] ? ip6_output+0x126/0x550 [ 245.866214][T14405] ip6_output+0x340/0x550 [ 245.866230][T14405] ? ip6_send_skb+0x10f/0x390 [ 245.866247][T14405] ip6_send_skb+0x1d5/0x390 [ 245.866266][T14405] icmp6_send+0x12c6/0x1940 [ 245.866280][T14405] ? icmp6_send+0x1e9/0x1940 [ 245.866299][T14405] ? __pfx_icmp6_send+0x10/0x10 [ 245.866311][T14405] ? __lock_acquire+0xab9/0xd20 [ 245.866330][T14405] ? ip6_neigh_lookup+0x14e/0x470 [ 245.866345][T14405] ? ip6_neigh_lookup+0x14e/0x470 [ 245.866357][T14405] ? ip6_neigh_lookup+0x397/0x470 [ 245.866371][T14405] ? ip6_neigh_lookup+0x14e/0x470 [ 245.866384][T14405] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 245.866399][T14405] ip6_link_failure+0x3b/0x4c0 [ 245.866420][T14405] ip_tunnel_xmit+0x175b/0x2390 [ 245.866439][T14405] ? desc_read+0x1b8/0x3f0 [ 245.866453][T14405] ? ip_tunnel_xmit+0x110/0x2390 [ 245.866471][T14405] ? _prb_read_valid+0xa07/0xa90 [ 245.866485][T14405] ? console_flush_all+0x13a/0xb10 [ 245.866503][T14405] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 245.866520][T14405] ? gre_build_header+0x31c/0xa40 [ 245.866540][T14405] ? __pfx_gre_build_header+0x10/0x10 [ 245.866556][T14405] ? __console_unlock+0x14c/0x1a0 [ 245.866571][T14405] ? __pfx___console_unlock+0x10/0x10 [ 245.866587][T14405] ? __pfx_skb_network_protocol+0x10/0x10 [ 245.866602][T14405] __gre_xmit+0x19a/0x240 [ 245.866620][T14405] ? __pfx___gre_xmit+0x10/0x10 [ 245.866635][T14405] ? __asan_memset+0x22/0x50 [ 245.866651][T14405] ? erspan_build_header+0x19c/0x370 [ 245.866671][T14405] erspan_xmit+0xa04/0x1220 [ 245.866691][T14405] ? __pfx_erspan_xmit+0x10/0x10 [ 245.866708][T14405] ? __lock_acquire+0xab9/0xd20 [ 245.866722][T14405] dev_hard_start_xmit+0x2d7/0x830 [ 245.866742][T14405] sch_direct_xmit+0x241/0x4b0 [ 245.866761][T14405] ? __pfx_sch_direct_xmit+0x10/0x10 [ 245.866778][T14405] ? gred_dequeue+0x4a6/0x680 [ 245.866796][T14405] __qdisc_run+0xaa0/0x1540 [ 245.866819][T14405] __dev_queue_xmit+0x1056/0x3b50 [ 245.866833][T14405] ? register_lock_class+0x51/0x320 [ 245.866848][T14405] ? __dev_queue_xmit+0x27b/0x3b50 [ 245.866866][T14405] ? __pfx___dev_queue_xmit+0x10/0x10 [ 245.866881][T14405] ? read_seqbegin+0x122/0x250 [ 245.866897][T14405] ? neigh_resolve_output+0x438/0x750 [ 245.866914][T14405] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.866931][T14405] ? read_seqbegin+0x1ac/0x250 [ 245.866947][T14405] ? __pfx_read_seqbegin+0x10/0x10 [ 245.866963][T14405] ? __local_bh_enable_ip+0x12d/0x1c0 [ 245.866976][T14405] ? eth_header+0x11b/0x200 [ 245.866989][T14405] ? __asan_memcpy+0x40/0x70 [ 245.867012][T14405] ip6_finish_output2+0xfb3/0x1480 [ 245.867034][T14405] ? __pfx_ip6_finish_output2+0x10/0x10 [ 245.867052][T14405] ? ip6_mtu+0x7d/0x490 [ 245.867068][T14405] ? ip6_mtu+0x38c/0x490 [ 245.867083][T14405] ? ip6_finish_output+0x2ef/0x4e0 [ 245.867099][T14405] ? ip6_output+0x126/0x550 [ 245.867115][T14405] ip6_output+0x340/0x550 [ 245.867132][T14405] ip6_mr_output+0x4e9/0x1100 [ 245.867153][T14405] ? ip6_mr_output+0x1ca/0x1100 [ 245.867171][T14405] ? __pfx_ip6_mr_output+0x10/0x10 [ 245.867191][T14405] ? ip6t_do_table+0x1db/0x1560 [ 245.867210][T14405] ? __pfx_ip6t_do_table+0x10/0x10 [ 245.867231][T14405] ? skb_dst+0x4f/0xd0 [ 245.867244][T14405] ? dst_output+0x17b/0x1c0 [ 245.867256][T14405] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 245.867269][T14405] rawv6_send_hdrinc+0xe16/0x17a0 [ 245.867287][T14405] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 245.867300][T14405] ? txopt_get+0x335/0x3f0 [ 245.867312][T14405] ? __pfx_dst_output+0x10/0x10 [ 245.867324][T14405] ? __pfx_txopt_get+0x10/0x10 [ 245.867339][T14405] rawv6_sendmsg+0x12ee/0x1830 [ 245.867357][T14405] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 245.867377][T14405] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.867395][T14405] ? sock_rps_record_flow+0x19/0x410 [ 245.867451][T14405] ? inet_sendmsg+0x2f4/0x370 [ 245.867462][T14405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.867476][T14405] __sock_sendmsg+0x19c/0x270 [ 245.867494][T14405] ____sys_sendmsg+0x505/0x830 [ 245.867510][T14405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.867526][T14405] ? import_iovec+0x74/0xa0 [ 245.867542][T14405] ___sys_sendmsg+0x21f/0x2a0 [ 245.867556][T14405] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.867580][T14405] ? __fget_files+0x2a/0x420 [ 245.867592][T14405] ? __fget_files+0x3a0/0x420 [ 245.867607][T14405] __x64_sys_sendmsg+0x19b/0x260 [ 245.867621][T14405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.867640][T14405] ? do_syscall_64+0xbe/0xfa0 [ 245.867660][T14405] do_syscall_64+0xfa/0xfa0 [ 245.867677][T14405] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.867693][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.867706][T14405] ? clear_bhb_loop+0x60/0xb0 [ 245.867720][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.867734][T14405] RIP: 0033:0x7fee4018f6c9 [ 245.867753][T14405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.867767][T14405] RSP: 002b:00007fee41014038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.867781][T14405] RAX: ffffffffffffffda RBX: 00007fee403e5fa0 RCX: 00007fee4018f6c9 [ 245.867791][T14405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 245.867799][T14405] RBP: 00007fee40211f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.867808][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.867816][T14405] R13: 00007fee403e6038 R14: 00007fee403e5fa0 R15: 00007ffce69613d8 [ 245.867832][T14405] [ 245.876364][ T44] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.877413][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.895979][ T44] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.612667][ T44] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.628256][ T1104] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.651264][ T1104] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.665290][ T1104] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 246.674709][ T1104] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.683948][ T1104] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.693172][ T1104] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0