last executing test programs: 2.485142611s ago: executing program 0 (id=5307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) write(r1, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10000, 0x18}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000e8d123dc4d3c7986d30c36a3000000000000f5"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x5000001e}) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000080)=0x1ff, 0x4) 2.230994484s ago: executing program 0 (id=5313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r5, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0xc11, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r16, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r18], 0x1c}}, 0x4008054) 2.044939158s ago: executing program 0 (id=5318): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008084) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000680)="6060ca4a8392993b8006", 0xa}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000ec0)="61ddeea300cc8a5ec7875ee0f0e1ef3240697f645ff7072dcf3b3e9c627dcd918020cda9a166f10f6653f272c9a7447bd2c214edceab500ba87f071fd59bf2682e8dabda8bd6d3f461df4eda290c75860078018ed0619a5774d611acadb0502bd53e7eb868c1bfbe52d8262ab55146fb9d2a8dc5770a9f197746edcbdf30e89ac59ebf209785dbf79527381ab353c659f2a2a0565f1f99cee2e39b71a9690e", 0xf8}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f00000005c0)="c4", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000000780)}], 0x6}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bind$can_j1939(r2, &(0x7f0000000540)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365bb884260dd402b5f2bcd6b53868bd8a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="73000000000000000000000000000000000012b1", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0x0) 1.711818128s ago: executing program 3 (id=5323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0)={r1}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x40}}], 0x1, 0x400c404) bind(r3, &(0x7f00000002c0)=@nl=@unspec, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r5], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r6, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000f500000005f37be64a00fcdb0900000000000400000008000500", @ANYRESDEC=r7], 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x24044010) 1.212073398s ago: executing program 4 (id=5331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) (async) recvfrom(r3, 0x0, 0x0, 0x2021, 0x0, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf252400000008000200", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x810) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x47}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "91d12f94bb3a171b61f34ca5d6e61ad9"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r12, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r12) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 1.209814565s ago: executing program 2 (id=5332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000000b0500f0000000000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500010017000000"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050024bd7000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300000c0070000500010001000000"], 0x34}}, 0x4004054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fcdbdf251100000008000300", @ANYRES32=r6, @ANYBLOB="06000700c7000000060aab69126668417c6c81074f68d4783521002c000000"], 0x2c}}, 0x4000000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf25700000000c00990000080000230000000a00060008021100000100000a00060108021104000000000a0006006913ce4a000100060008021100000100000a000600ffff1400ffff0000"], 0x68}, 0x1, 0x0, 0x0, 0xc094}, 0x8005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) write$rfkill(r10, &(0x7f00000004c0)={0xff, 0x5}, 0x8) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r11, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x14) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd28, 0x3, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10000, 0x71}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) 1.192236384s ago: executing program 4 (id=5333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) 1.150205082s ago: executing program 2 (id=5334): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x3b, 0x8, "60c6ec58f9f2147ad5b4cf12427204b377da98542db8727c768f451208cb2ce6c25bb502631b3275284f71b35de62ce493ccaf30224c2b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 1.075577113s ago: executing program 0 (id=5336): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0a0027bd7000ffdbdf25020000ec090001007331000000007068060b88af14cbc058a86b14a7b659a9874b85aed68c8c86af9901915f7f10edcd7f507682f413cc87cf003f8b07dc7f33a9075d710000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400440e1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.06926359s ago: executing program 4 (id=5337): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x6, 0x0, {{0x3d, 0x4, 0x2, 0x18, 0xf4, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x3a, 0x3, [{0x0, 0xa, "ccac4de49de72906"}, {0x6, 0x10, "8b44abfe30c3de49422bd68eaf56"}, {0x2, 0xc, "222bdf5ac77d86176b4f"}, {0x0, 0x4, "c8a3"}, {0x7, 0x7, "ca95719b25"}, {0x6, 0x3, 'P'}]}, @timestamp_addr={0x44, 0x2c, 0xec, 0x1, 0x5, [{@remote, 0xfffffff1}, {@multicast1, 0x7}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x6}, {@empty, 0x3}]}, @end, @lsrr={0x83, 0x23, 0xc3, [@broadcast, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010101, @local]}, @lsrr={0x83, 0x17, 0x86, [@remote, @multicast1, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x16}]}, @timestamp_addr={0x44, 0x3c, 0x35, 0x1, 0x8, [{@empty, 0x7}, {@multicast1, 0x201}, {@local, 0x2}, {@multicast2, 0x6}, {@broadcast, 0x10000}, {@local, 0x80000001}, {@loopback, 0xa}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000180000112dbd7000fbdbdf25801014daff04fd0100040000080006000200000008000f000200000008000200ac14143a080010000900000008000b00080000000c001680080001000a00000006001c004e240000"], 0x58}}, 0x0) 1.010001224s ago: executing program 0 (id=5338): r0 = socket(0x40000000015, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.002337352s ago: executing program 1 (id=5339): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socketpair(0x1a, 0xa, 0x7f, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000200000000000011ffffffff0700000000002e00"], 0x0, 0x2c}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) 998.965522ms ago: executing program 2 (id=5340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 899.71518ms ago: executing program 4 (id=5341): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000000000000006100"], 0x0, 0x2c}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)={'erspan0\x00', &(0x7f0000001540)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x6, 0x2, {{0x2b, 0x4, 0x3, 0x2f, 0xac, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x806}, {@loopback, 0x6}, {@empty, 0x300000}]}, @timestamp_prespec={0x44, 0x1c, 0x7f, 0x3, 0x3, [{@remote, 0x2}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x15}}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x1a, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@multicast1, 0x8}, {@empty, 0x3}]}, @noop, @timestamp={0x44, 0x24, 0xe5, 0x0, 0xa, [0x9, 0x6, 0x0, 0x6, 0x2, 0x8, 0x400, 0x8000]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 889.158941ms ago: executing program 2 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c00000c00018008001600", @ANYRES32=r0, @ANYBLOB="c5d8f094a8583018"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 883.25736ms ago: executing program 1 (id=5343): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000100), 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x5, &(0x7f0000000140)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x200, 0x71, 0x10, 0xb9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x32}, 0x9c) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/108, 0x6c, 0x0, &(0x7f0000000400)=""/167, 0xa7}}, 0x10) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x9}]}}]}, 0x3c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0xe, 0x0, 0x31}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000010000000000000000200000018430000010000000000000000000000180000000100000000000000090000000678040091d7d2058ccd945faf900282000018660000010000000000000000000080042b81ec4f000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000085100000fdffffff1844000006000000000000000000000018310000010000000000000000000000ad762000040000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000240)=""/251, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x8, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x4, 0x2, 0x6, 0x6}, {0x4, 0x3, 0xa, 0x6}, {0x2, 0x2, 0x2, 0xb}, {0x8, 0x5, 0x4, 0x7}, {0x2, 0x4, 0xb, 0x9}, {0x4, 0x3, 0x10, 0x4}, {0x4, 0x2, 0xe, 0x9}, {0x5, 0x2, 0x3}], 0x10, 0xfff}, 0x94) 824.310373ms ago: executing program 3 (id=5344): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000000000000200000008000700"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000010000000000a000000060001003500000108000a00000000db3cf500", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) 823.363384ms ago: executing program 4 (id=5345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 791.699654ms ago: executing program 1 (id=5346): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000003200)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x288380, &(0x7f0000003240)={@align=0x9, {0x2, 0x100, 0x8, 0x9}}, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4884967a3eac458200000010000600000097fb7d", @ANYRES32=0x0, @ANYBLOB="1000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000031c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000003180)={0x3, 'bridge0\x00', {0x6}, 0x6}) syz_emit_ethernet(0x76, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @mcast2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x1, @empty, @empty, [@hopopts={0x0, 0x0, '\x00', [@ra]}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045000038df00000000019078ac1e0001ac1414a204e58f78e00000e0450000000000000000110000ac1414aa0000000017c1b7df60c70000"], 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa1647ab6dcdaaaaaaaaaaaaaa1586dd4500002c000000000011907800040000000400"/59], 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x200, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async) sendmmsg$alg(r0, &(0x7f0000003440), 0x0, 0x48004) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB='\t\r'], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802001ffdffff13f53c1e00feffff915b0000000300000003000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000003080)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b80)={&(0x7f0000000300)={0x1c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) 775.338783ms ago: executing program 3 (id=5347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000140)=0x5, 0x4) r3 = socket(0x25, 0x1, 0x0) close(r3) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000001c0)={@local, @private0={0xfc, 0x0, '\x00', 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240004f5dd05090000000000200000001c140000fe00000100fdff3e5800010000000300091a106bcb60f85fdd10ffa6c7e27a1ca6cfe1d8ee0e7516"], 0x24}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="060006000000004db68ea03e000b6ac75cb3ce0f6000ed", 0x9}, {0x0}], 0x2}}], 0x40000000000014d, 0x41) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x2, {0x0, 0xff, 0x3}, 0x2}, 0x18) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x7800, 0xffffffff, 0x8}}) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000280)={0x0, r1, r6, 0xb2f5, 0x101, '\x00', {0x5b4, 0x6, 0x6, 0x81, 0x400, 0x0, 0x3, 0x9, {0xb1, 0x8}, {0x2, 0xd5}, {0x2, 0xff}, 0xb, 0x80000000, 0x7, 0xe, 0x373, 0x2, 0x0, 0x200, 0x2, 0x8, '\x00', 0x60800000, 0x8, 0x1, 0x4}}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xf}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 278.867809ms ago: executing program 4 (id=5348): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000004c0)={0x11, 0x1b, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'batadv_slave_1\x00', {0x6}, 0xb998}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000640)="06", &(0x7f0000000440)=@tcp=r6, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 273.847802ms ago: executing program 2 (id=5349): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept4(r2, &(0x7f0000000080)=@un=@abs, &(0x7f0000000100)=0x80, 0x81000) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$can_raw(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/255, 0xff}, {&(0x7f0000001240)=""/177, 0xb1}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/225, 0xe1}, {&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/64, 0x40}, {&(0x7f0000001580)=""/198, 0xc6}, {&(0x7f0000001680)=""/57, 0x39}], 0x9, &(0x7f0000001780)=""/233, 0xe9}, 0x141) (async) r4 = socket$inet(0x2, 0x800, 0xa6) connect$inet(r4, &(0x7f00000018c0)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000001900)=0x1) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001940)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000019c0), 0x3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003100)={'erspan0\x00', &(0x7f0000003080)={'gre0\x00', 0x0, 0x40, 0x8, 0x101, 0x1, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x66, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0x80000000}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003180)={'ip_vti0\x00', &(0x7f0000003140)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x6, 0x5, {{0x8, 0x4, 0x3, 0x33, 0x20, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0x30, [@local, @local]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003240)={'syztnl2\x00', &(0x7f00000031c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x9, 0xc8c0, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x10, 0x703, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003600)={'vxcan1\x00', 0x0}) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000003640)={@loopback, 0x0}, &(0x7f0000003680)=0x14) sendmmsg$inet(r4, &(0x7f0000003ec0)=[{{&(0x7f0000001a00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000001a40)="0b3da12e872f5800a231fad1264cf1bfbfcad123bbf1efc277a84d11e47072b23d9f9600409fd01ae4c892d7135242dc2718c4610c3cf1285e4ec91b1554ac6219c6dbba05d481bf15b071c5e81100f141e84fe6a4ed3183fdb4897e8a3f3c5fc64704784e6811c3b9e8fe039e8d353a5697b213d946e9297ffe9c1d1ae4ae702121d74c67e22c8c1cee7c17ccca27c7fee29b910d156d6085d8af6877185a20b6210488bfb8dba94d0f348b4031de4b1912fdc117c163b89bdd137d09", 0xbd}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="54c6f84e65434a3ca5115d6254d2b0003baeb7cc11dc355ff9c98ca104d3de3525a1e14474235446c880b5a58c11e38ed23bc293bee37bc7571b7fe8100512257f2f3fce803b7a74e3d826380f209c4aea4b9b2df2dc0b72a4ac5d1f49b81c630c578e071d7c2cf12a22eaa0070a5767f5c28411d7692048c32e4374275ed49c939153a740545687e014d518ff5988db3f312376e98382ea3d4eb69b865eafd69e618e56370a83acfb75a1acc50ab9c7a4bea79b963936ddcf4843d954f003", 0xbf}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="4e41ea1f20b1b6b765a56fec155dba0e73", 0x11}, {&(0x7f0000001c80)="e52f910fd5ee2077f77c7c540a51edfd663e9892015b7a1f09314ff526e520dc1dda598605f2d8bb54de30f7583e23343b3d036717befba178f9a488dde7753c26d50f0e414c92511ceb485a073375f73e8f423e3d743d180e0c0489047aea23f2c7395ff955aa1db8d0165c950029258375b6606f6efe0950061b67e4486d5caa3b494b72c5f1246b9cb493374e74c5de1a36642478930c16e79aef3ce1e75fd3e2120bfaee1adbf331d8217a5daee02c522f9d1f6340fdfa778519a4676e8e356092233dfab7636f8a24191a7e5310893f755b512fd2928f5151cedf5894906be854e965a1ba08438ec1805ecc0ef0228a1f016c", 0xf5}, {&(0x7f0000001d80)="2a10e7eb5f185dff74cd14cf7d405f75c1961dd0bfe5423a06e620d3f725d5c4642800790894cf773ca29d5eda06d4c9871bf409dd24e8be6a5214af1db706b2013e07b0f6f45c3e18e9ae2589ee0a6384a486c07759ff41064d9d0df1dddda066894cce33b69cec0f98aff86042fcfdd1eab6519838062b54d0125272f716c1de1c89b139a97d32965ab8402c2ec2c5019e6b5fb220ee7fba0c8f1bfc7200a0dc", 0xa1}, {&(0x7f0000001e40)="c897473d527f1e0a42599d34ee5a5bbe4382aa6715796f23ee88c1559d87efbc9d41b4ca5f146334af44e36f3dc8f8c094184b46b56d70b3c087e503fe9c7c01248c23006ea9882e78b53c2a20966ecefbd182b77b0cef5e40cd967c8c55662ba1a7903c3396b27ed50847f5f5d2513c42e7f872d48ccc6d58598091993780a152aa2290f1a16d7e82cec33653bb5f0a", 0x90}, {&(0x7f0000001f00)="4519e868a818a1aa937123b12e3fbbf4310244a604b3b3a525718e4f56f2e1137cefcfa014caf9db20c03fb2fa3dc94ee570985d73fc1155d41ce3dd561f20b4032ba82bb154da61052e20e0dc36b8152305ae5718454ab26b9f0f14e1f05dddb9709ac2d0ff28d03bbfa6264846275c1455c91bd1678fc41d8c2592b5c43e8e86cd94bd5c7f8072ac41f2e35f382ea6", 0x90}, {&(0x7f0000001fc0)="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", 0x1000}], 0xa, &(0x7f0000003280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xa3, 0x0, 0x6, [0x5, 0x48d0, 0x8, 0xc04, 0x915, 0x2, 0x6, 0x8]}, @rr={0x7, 0xf, 0xba, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}, @cipso={0x86, 0x4c, 0x0, [{0x2, 0x10, "cb0d28a51658aa17bae99c3155cf"}, {0x7, 0x8, "df3a102af340"}, {0x1, 0xc, "00aa514061521f85a197"}, {0x1, 0xd, "78d171ff952bae079623e4"}, {0x5, 0x4, "80e6"}, {0x7, 0x8, "71776a1a758f"}, {0x7, 0x9, "6f26ef049faa1e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x98}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x180}}, {{&(0x7f0000003400)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000003440)="39267274008acac09bb2c6b4687bc104a2c4f4d297e2104b3690a06a3c62ff23a9fa909760b97ee668507e717224e34af39e475212d62c090655d8888b4a046f98753db8fe77e63e497f4c31789b5d92b6c9feeb5a80d6903636ae35b3c9734b6e956a42b1cbf963f48d891d6678b4a577478e1df0309ff928a8af72e4b961f6a38efd04e23d3beec2748bc524328bce34c4e67c015aa4f9", 0x98}, {&(0x7f0000003500)="96d65b5a26c9a15b370e415586616a45eefa920fee52f30d2dbb9ad0f27f8cf6d2f8945dae80d29873e5e511578a9fe5863474e8e30c7f4c3e976b61708db4bbf7512d37064e985f7c285cd2225caa61c19086fa507eaa50ed54e444a316a8bfd32a2fa7c470d0dd63cc7ed709275de2292e836f5391aa55097bdbbd8a13da93d0cdd8279a334b742c94b001b5bd4e9f6754abc30114809424ff70d32cd010442a40", 0xa2}], 0x2, &(0x7f00000036c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x5b, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @local, @multicast1, @private=0xa010100, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0xe, [{@local, 0x4}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x871}}], 0xa8}}, {{&(0x7f0000003780)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000038c0)=[{&(0x7f00000037c0)="9075518bef8a0c5f7924fdfaaaca72cd5bcb73c525d645a04f0530dc1dc786eb0bee9cdea1835982b53805bfb240cdd1bea7da760d9871b30f296a57bcf4ed2214c2aa34d4ced917ba5355683f387d547f50a498373b13200fb5b56d9c77204f01b33ec273d19140fdef8e2e94cad6c9b5710d652ccc9300a4e338df33789ce541e8bc000df9007f4f80c6bb3f064eb4d81d7039559d1f46b217a42d2bab84cf9bcfbba0eb05c0de155017d9bc13478df944725a8c5b709a885a54634acc6eeab5749dc462f5ea99fb4bd5e3db7530bb462b5488", 0xd4}], 0x1, &(0x7f0000003900)=[@ip_retopts={{0xcc, 0x0, 0x7, {[@generic={0x44, 0x9, "b27e419c8fd028"}, @timestamp_addr={0x44, 0x1c, 0x7b, 0x1, 0x7, [{@loopback}, {@remote}, {@remote, 0xa}]}, @rr={0x7, 0x27, 0xd0, [@local, @local, @broadcast, @local, @rand_addr=0x64010101, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x65, 0x0, 0x1, [0x1]}, @timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0x7, [{@multicast2, 0x100}, {@remote, 0x100}, {@multicast2, 0x7f4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb77e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x402}, {@private=0xa010102, 0x3}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x27, 0xc5, [@broadcast, @remote, @multicast2, @remote, @remote, @broadcast, @loopback, @remote, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x57}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x118}}, {{&(0x7f0000003a40)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000003a80)="38aeb226c098fb89a2a316f8b7763587cb21c6526741ba8393e9a3f0dc0a90b4df6febf32ca163c5647e298ae1c6a604cb91337c43a9dd9ddc58be6451f70d7f61d2a4919ac448ee19510403815eac8952e865f513b5", 0x56}, {&(0x7f0000003b00)}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)="4fffbed3f47e57b9ff115e577b629f5197bf", 0x12}], 0x4, &(0x7f0000003c00)}}, {{&(0x7f0000003c40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000003c80)="5c1f3ab102bac0155da35b575301e6f507b2a444250a39994f4c2405e1643c2e3f5939a7acb3e40530eba1f9ea3d5f45340b2a40795e17d6cc40945d93f771844165f077b63e4b11f84b593f01ad060d80ed787f246864d50004acfb84bf8ef6fee9a106cca0954653ef", 0x6a}, {&(0x7f0000003d00)="0408d31526", 0x5}], 0x2, &(0x7f0000003d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000003dc0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003e00)="96585e4402fd77554ad8e3fa8266afcfb4c70543304c4da5190e33d335c09a8c183a02428b80cc5fa14fa1750ef2746523c931e0a750852ad758efe599fb5b0124a19893a0935187324c8f8000f59b56c97c3fc66a9e70811ddb80fd6132055421fb591ef7718a", 0x67}], 0x1}}], 0x6, 0x8000) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = accept$inet(r4, 0x0, &(0x7f0000004040)) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x82, &(0x7f0000004080)={'nat\x00', 0x0, 0x0, 0x0, [0xfc, 0x7, 0x53, 0x7, 0x2, 0x1]}, &(0x7f0000004100)=0x78) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000004140), 0x3) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x28, r13, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) (async) sendmsg$sock(r5, &(0x7f0000005380)={&(0x7f00000042c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004340)="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", 0x1000}], 0x1}, 0x20000010) (async) r14 = accept4$inet6(r11, &(0x7f00000053c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000005400)=0x1c, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000005440)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000005540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000005580)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e23, 0x7, 0x4e21, 0x3, 0xa, 0x80, 0x20, 0x32, r7, r15}, {0x6, 0x6, 0x4, 0x8, 0x6, 0x3, 0x9, 0x7a}, {0x4, 0x4, 0x18, 0x483108c8}, 0x7, 0x6e6bb6, 0x2, 0x1, 0x1, 0x2}, {{@in=@local, 0x4d3, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x1, 0x3, 0x4, 0xa4, 0x5, 0x6}}, 0xe8) 273.23025ms ago: executing program 2 (id=5350): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10140, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) close(0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x9, 0x3a}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 270.527402ms ago: executing program 1 (id=5351): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x40010}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000001c0)=0xfff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x27, 0x3, 0x80000000) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000100)=""/87, &(0x7f0000000180)=0x57) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 256.583958ms ago: executing program 3 (id=5352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) (async) connect$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1e) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="dd65ad64b56f00", @ANYRES16=r1, @ANYRESOCT=r1], 0x2c}}, 0x0) 252.861188ms ago: executing program 3 (id=5353): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) 139.245208ms ago: executing program 1 (id=5354): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="b1b5fac140000701feffffff000000b1017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x8814}, 0xc000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) 1.954191ms ago: executing program 0 (id=5355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x3a3, 0x0, 0xffffffffffffffff, 0x7}, 0x50) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.390764ms ago: executing program 3 (id=5356): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x5, 0x45) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x90) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400e5ff", @ANYRES16, @ANYBLOB="100025bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x28, 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x2a) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @broadcast, 'veth1_to_bond\x00'}}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x29, 0x6, 0x40000000) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0x39256e55f1d0c712}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0xfffd, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x5}, {0xc}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000340)={'dvmrp1\x00', @random="a2d998255636"}) r12 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 0s ago: executing program 1 (id=5357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x95, 0x4e21, 0x3ff, 0xa, 0x0, 0x80, 0x87, 0x0, r9}, {0x4, 0xb, 0x2, 0x4, 0x3, 0xc, 0x8, 0xa19}, {0x4, 0xc, 0x2c25097b, 0x5}, 0x4, 0x6e6bb3, 0x2, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0x2b}, 0x2, @in6=@private0, 0x3505, 0x1, 0x1, 0x5, 0x7ff, 0x0, 0xd}}, 0xe8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = getgid() ioctl$TUNSETGROUP(r10, 0x400454ce, r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r13}}, 0x40) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000002440)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r19 = syz_open_procfs$namespace(r16, &(0x7f0000001780)='ns/ipc\x00') r20 = getpid() sendmmsg$unix(r15, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, r18}}}, @cred={{0x1c, 0x1, 0x2, {r20, r17}}}, @rights={{0x18, 0x1, 0x1, [r19, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000080)={0x14, 0x40, 0x99fa027cb0e67c57, 0x70bd29, 0x25dfdbff, "", [@nested={0x4, 0x134}]}, 0x14}, {&(0x7f00000004c0)={0x19c, 0x1f, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@generic="f0865c67e85516bab49bfd9a3b22cf1d874a3f64ee38f7e466ac02f7cce6f535352d806b", @nested={0x14, 0x6f, 0x0, 0x1, [@nested={0x4, 0xef}, @typed={0xc, 0xc7, 0x0, 0x0, @u64=0x1}]}, @nested={0x153, 0x98, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x8d, 0x0, 0x0, @uid}, @nested={0x4, 0xe9}, @generic="9c7fa47f889ceaf799e0b3d8e5228ea54ff79ebcdd8776a9933bdc6a5dd76b1484258b471afeefb6e932275e28d8c53e77963847d89fd0c62f660a392b8c6f5710399030aa8d35716bd3abf8c6a4", @nested={0x4, 0xda}, @nested={0x4, 0x108}, @generic="05250c5ac6d53f03daf81ab551499c742f1c3933e126098daa2278aaee874427b43b8d39218a2ce81b859b694e63b73caf13e3187eaf249e2a44db52dd7ce1520c4e3d0300a1f3e5f575b82b23b83bccd8bc05014f498979f01c6e1b86ee2348fccdd20de8fe4f56de1bff7d195c4fa371e8285f87b9b70a70a6aa6fccd331112afd073718389be39e83c1c977e40b7137aa856c0ff9b955e0f8abd8db98fd48c27b9b843f26dc3294f0384f0b4e928c0bbdb543c379356580f9b2fd1d5dbda06fd3f138a02d783c704e514a9154be4fcb783e72f81dee04e1656c7693", @generic, @typed={0x8, 0xa5, 0x0, 0x0, @fd}]}]}, 0x19c}, {&(0x7f0000000a80)={0x5b0, 0x29, 0x300, 0x70bd27, 0x25dfdbff, "", [@generic="7a8c903909505fbc05ab33ff559c46a56952683e42fd1a1f367b3ca0e0a44e25d5078669a8c6fa73975cc027ad40ba6d063ded376c5d6fe402950dbe0b12e428c6148533378198ba22d2e727335f3fae6eec145a2a0e5c405ea2e2550b9d138887a9e6988a78ae3987c759c03edc69cc8f0b8ab183f065dbdf9c4d3f5cb14f6cbceb7d5600ccf06d2ed0349be173d69b0fd4bf391438a8d1809ee1cc918d5c16cc7f170ae261d3abbdc9d99a796cf8c37e07b2c49e67cb39d68c791c84355d5a6e110a", @nested={0x1e8, 0x8b, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @pid}, @typed={0x8, 0x15c, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xfe}, @generic="0fbe03a59be09284346fb40263f31ca516e7ea21828a0344c871322c232c2bb73fd1e9906aef7ea76addc47cc6a8f779b7070d81eb61d063d7f85933f6c8811e2ca66f74843907574e7e266d523ace0c333a4027115fda576945b05977f93994f8a64df0295fc05a5a4919c38c025bf90303f139cdbd94c7843fa064425e3b977d9bf1f6731a87021d55f5b6e745717b330643251d4b0b407591da15c5cda774d4dcd254eaf0a7f6b38332c575e8eaa02220ed51120a21c35d6deef435058bff15e4f7708d5feda45e02987d67ec8af213d490", @generic="d085729f1f5feeea7fa15a29154680c84dc6cd7a44be182b7f0d6d5fa45789432930a664599da5d8a569fc4ba92e53c6763e6859", @typed={0x4, 0x143}, @typed={0xc, 0x124, 0x0, 0x0, @u64}, @generic="b5bc5cc19674ec4658633b9a7113a86ae3450c55974f4724b1b6a68d18feef3c3b6751c0c7880fcb43c67d3841a168efbf441a9dc1cd1eb57bd4e3ffed123e60ae68013a7a09a3533846d78e42ea1a911d7b764acbc33544837e996db491b5f757c765a8af4a6d81f4ad2adab1956de91f957c82f6d1e0eabf016d8c2895e42a43380f419630bc56015d9e0295d1907d0ba4a37113fa45dd3d36c23eb387691f3452d41f03a656d2", @nested={0x4, 0x2c}, @generic="7daecd49e25e9c3701c1b400d2"]}, @nested={0x1a1, 0xb1, 0x0, 0x1, [@typed={0x6, 0x2a, 0x0, 0x0, @str='#\x00'}, @generic="10732a769c8ba384ad7f16cd95aca4e9ba5683eae5c614878cf16f6784aa716b22a18832b3ca16b628c07b8df5395c635b637c77be2deecc6d8fb6b04522b7460359c7e75e7d5a55c189fffdf68c8564c03a617fca2daaacd64ab1a8f6a4cce2dbe93184aceea1407f18ac70203f628dd920410b63990d43b7ee416c0766e13914f52d52d94520a654e170650dc5acc0d8e5924f1fbef2bafb047959d802bf24eea2b0bd36f9f1499a58d6d2d9ef5c247dcd07e7e421e6b6c2b7f84cae941d7f669ea6750433139bd2fd477d53ebab7d70e951bbf49ccaecf37e", @typed={0x8, 0x63, 0x0, 0x0, @pid}, @generic="83b15927842a6c43ce51767fa7a7c6676751294f2a660f890e6e0c18027252dd196612149074ac6a577ae0b2495711630e86e3995ceac4fbb247f94bdf03ef8df6d1b45287e268d1dc1b15b631f69d351a09e3c78fec6c5613918cd020cb00f158e80f4fff9ccdc2077c1a7256f7c0fb2e0d7b5b7bde1562d7876538796752a1c206c8f51eea9ab6b5", @typed={0x8, 0x148, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xc8}, @generic="5eeb02b83834461bc2c7c1043e8b647ddceb74c62c9946e9103a", @nested={0x4, 0x141}]}, @nested={0xc2, 0x104, 0x0, 0x1, [@generic="353fb2d9324a4272e318999b2976907817cd3076b8f96bde87b0e2a6f13a62cd86e24b69133c5abe92e9dca475a1b69061ef645a142f64cc279b7f3d142fb3b56ae57aeed0715da2fe85132f65407895c5676c737a2ccd85317fbae706482995a7f44865cf3be46bfcc73c5cfa1a3e24b5046e21a76df31da990ccf649b89cb93bf0006a342ebdd80316e2f29f34117ea0", @typed={0xc, 0x6d, 0x0, 0x0, @u64=0xffff}, @generic="664715a29d1b603ae2df97fc622c5082661175e2e6775f003402a578cc", @nested={0x4, 0x9a}]}, @nested={0x8b, 0x9f, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x14f, 0x0, 0x0, @fd=r5}, @generic="111ccfbe01494779c68e240343afcbf00a73a5a5c09ede0a1b587567b95a1b318c7c90270978781d5980386d189fe384fc265db424586f60d88c9ad0c1c55c5779485a3b12ef32afcb6acd10847028cb85b3b162ceda7cefce8c4f4108cb302d6b13a6b27cbfc338fa7205900b8ad2627fb77b225a7c56be8cb170"]}]}, 0x5b0}, {&(0x7f0000001e40)={0x30c, 0x40, 0x4, 0x70bd2b, 0xb, "", [@generic="1d6db6c177328881d9f910ab75ae6372dbd04219198f0fed7d", @generic="d8b14b4eea0eb853422d8b99186dfd354f0c883f5ca4b9d621e378cb151eb852a4c7ff4bdb4c8d107a9592bb5f8e99fe18eab81b0a87b350489775a5f79247819a11301e92b1119b1cbc569d0af9637c25d373926dc0311ba19e40a5a23cec6d14fb0a9ef21cb5048fc5a45dd369c1c3acead03a7c5ce5e4b64a0414a9b1966c46c55ef6348690d4ab5bf91f89e5ca423ca152a1cba57cd437bbce27b900c5658b95191deed2e625eb6a7e5ca84439441c6a762ba1bfab54ab8146ed9fe86102e53697d7155076", @nested={0x21c, 0x113, 0x0, 0x1, [@generic="9c18b90929744e207ec929fa9128c4f22657a9fbbb8a91774dfdec3cf17661669f4eed70a97d7bb21681ed591145ea47ddd7987e7514a94d123223bee9801e3f6c939f854a8be52752535efea0833a46185fba9cc8c0188a4ab50186d9a953f954326c45b8492533baa7f4c17ef1699e9927eefa65ea3591063174271896735c6e14182310fea3cdfd0a2e65229da02bdfedcd83079c92925d0288cb5e10d7ba5f408fce7cd7ce3b36d7529e006b7979d869ccf5f522c82f08888aa1d46f38266c19ec547f56f47431a5b5884486e8cc6859c98017e686be322da66b2529", @nested={0x4, 0xfb}, @generic="e2938421f8186d4a64cae9c54615273ea5f7afa1ea474fda517f410599546b89cfffaa06e6ca8e9a9c19a6317b8cc86ba4b3c0b2a6eb0487babee261a39eb9b13a996111537d7b3350dd31cefd0fb38d9ba8d48f471805864186770571acdf634f0f5df67ffea4b754456bd2f6b5513507936a00ebdeedc779500f1a33fdbb72c370660af3e47841caff2cca526a70e164456fdb40", @generic="d7b3b055f94dd864e55e6a27685b509b97bb3bfb407d71aaddfccf99c3ef668068a7b115552c935d5cb206ed510a630e932ecad0d66a88b98783018bb9148d6ac8bfc24f0924b2048dcbd77eb50810d6f4fe6e9421da5bb818568c9a756b1e588c28fb1f9bbb6630c86640ee4bd71483a45918aae9", @nested={0x4, 0x18}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x138}, @nested={0x4, 0x13c}, @typed={0x6, 0x10d, 0x0, 0x0, @str='^\x00'}, @nested={0x4, 0x136}]}]}, 0x30c}], 0x4, &(0x7f0000002480)=[@rights={{0x1c, 0x1, 0x1, [r3, r0, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r18}}}], 0xc0, 0x20004009}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): sim0 netdevsim3: renamed from eth3 [ 332.716208][T17738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.757847][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 332.779875][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 332.893827][T17738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.929886][T17738] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.974657][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.981880][T14976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.014632][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.021866][T14976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.095738][T17738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.134782][T17778] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3209'. [ 333.146159][T17775] netlink: 'syz.3.3208': attribute type 13 has an invalid length. [ 333.159536][T17775] netlink: 'syz.3.3208': attribute type 58 has an invalid length. [ 333.167386][T17775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3208'. [ 333.220136][T17782] bond2 (unregistering): Released all slaves [ 333.330041][T17775] bond1: entered promiscuous mode [ 333.346753][T17787] macvlan2: entered promiscuous mode [ 333.353043][T17787] macvlan2: entered allmulticast mode [ 333.365247][T17787] bond1: (slave macvlan2): Opening slave failed [ 333.375002][T17795] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3214'. [ 333.521789][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.601646][T17793] syzkaller0: entered promiscuous mode [ 333.624456][T17793] syzkaller0: entered allmulticast mode [ 333.679831][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.681932][T17738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.568903][ T5837] Bluetooth: hci0: command tx timeout [ 334.727308][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.078126][T17738] veth0_vlan: entered promiscuous mode [ 335.102620][T17832] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3224'. [ 335.141080][T17738] veth1_vlan: entered promiscuous mode [ 335.152378][T17832] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 335.228524][T17832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.247460][T17840] macvlan2: entered promiscuous mode [ 335.254090][T17840] macvlan2: entered allmulticast mode [ 335.260779][T17835] netlink: 'syz.2.3225': attribute type 10 has an invalid length. [ 335.261771][T17838] lo: entered promiscuous mode [ 335.275661][T17838] tunl0: entered promiscuous mode [ 335.283660][T17838] gre0: entered promiscuous mode [ 335.293252][T17838] gretap0: entered promiscuous mode [ 335.302183][T17838] erspan0: entered promiscuous mode [ 335.310002][T17838] ip_vti0: entered promiscuous mode [ 335.327871][T17835] team0: Port device dummy0 added [ 335.420889][T17738] veth0_macvtap: entered promiscuous mode [ 335.447559][T17738] veth1_macvtap: entered promiscuous mode [ 335.464182][T17853] netlink: 'syz.4.3228': attribute type 12 has an invalid length. [ 335.534240][T17738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.596813][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 335.637184][T17738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.721563][T17865] team1: entered promiscuous mode [ 335.729522][T17865] team1: entered allmulticast mode [ 335.739868][T14436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.773958][T14436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.816866][T14436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.856420][T14436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.899993][T17872] netlink: 'syz.2.3234': attribute type 5 has an invalid length. [ 335.964100][T17879] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 336.025724][T17890] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 336.033875][T14967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.043702][T14967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.079029][T17890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3237'. [ 336.156438][T17885] tipc: Started in network mode [ 336.163827][T17885] tipc: Node identity 1e269ba21788, cluster identity 4711 [ 336.174385][T17885] tipc: Enabled bearer , priority 0 [ 336.242797][T17885] syzkaller0: entered promiscuous mode [ 336.248667][T17885] syzkaller0: entered allmulticast mode [ 336.260292][T17885] tipc: Resetting bearer [ 336.281140][T14970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.300499][T14970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.315984][T17884] tipc: Resetting bearer [ 336.324568][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 336.511822][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 336.521010][T17919] netlink: 'syz.1.3245': attribute type 5 has an invalid length. [ 336.529674][T17919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3245'. [ 336.653974][ T5837] Bluetooth: hci0: command tx timeout [ 337.719657][T17884] tipc: Disabling bearer [ 337.752899][T17919] geneve4: entered promiscuous mode [ 337.770483][T17919] geneve4: entered allmulticast mode [ 337.832809][ T5875] tipc: Node number set to 162438050 [ 337.844963][T14971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 337.853929][T14971] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 337.875558][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 338.034574][T17945] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 338.043194][T17945] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 338.043555][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3250'. [ 338.071756][T17941] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3249'. [ 338.144926][T17949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3253'. [ 338.291387][T17962] 8021q: VLANs not supported on ip6tnl0 [ 338.411949][T17971] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.445923][T17973] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 338.720688][ T5837] Bluetooth: hci0: command tx timeout [ 338.829449][T18004] netlink: 'syz.2.3273': attribute type 4 has an invalid length. [ 339.054115][T18022] sctp: [Deprecated]: syz.4.3277 (pid 18022) Use of int in maxseg socket option. [ 339.054115][T18022] Use struct sctp_assoc_value instead [ 339.320789][T18041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.346405][T18045] bond3: (slave veth0_to_bond): making interface the new active one [ 339.363446][T18045] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 339.376304][T17916] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 339.405625][T18047] tipc: Enabling of bearer rejected, failed to enable media [ 339.457966][T17916] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 339.664768][T14971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 339.738895][T14970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 339.774960][T14976] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 339.893064][T14975] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 340.338905][T18099] validate_nla: 1 callbacks suppressed [ 340.338923][T18099] netlink: 'syz.3.3297': attribute type 6 has an invalid length. [ 340.424066][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.432700][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.441497][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.451724][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.466788][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.975349][T18133] netlink: 'syz.0.3303': attribute type 3 has an invalid length. [ 341.011037][T18133] __nla_validate_parse: 7 callbacks suppressed [ 341.011056][T18133] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3303'. [ 341.755335][T18103] chnl_net:caif_netlink_parms(): no params data found [ 341.904159][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3308'. [ 342.277225][T18103] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.319150][T18103] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.326413][T18103] bridge_slave_0: entered allmulticast mode [ 342.351991][T18103] bridge_slave_0: entered promiscuous mode [ 342.387944][T18103] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.418798][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.436688][T18103] bridge_slave_1: entered allmulticast mode [ 342.454452][T18103] bridge_slave_1: entered promiscuous mode [ 342.558208][ T5837] Bluetooth: hci2: command tx timeout [ 342.620228][T18103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.632712][T18103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.732371][T18103] team0: Port device team_slave_0 added [ 342.761528][T18103] team0: Port device team_slave_1 added [ 342.844892][T18103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.866787][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.926782][T18103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.950851][T18103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.957807][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.988889][T18103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.008963][T18228] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3320'. [ 343.304510][T18244] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 343.414331][T18103] hsr_slave_0: entered promiscuous mode [ 343.441267][T18103] hsr_slave_1: entered promiscuous mode [ 343.447497][T18103] debugfs: 'hsr0' already exists in 'hsr' [ 343.454255][T18103] Cannot create hsr debugfs directory [ 343.493750][T18266] IPVS: rr: FWM 3 0x00000003 - no destination available [ 343.767121][T18270] netlink: 'syz.2.3332': attribute type 8 has an invalid length. [ 343.896799][T18103] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.007423][T18103] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.043082][T18293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.094987][T18103] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.218106][T18299] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 344.294446][T18299] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3340'. [ 344.354107][T18103] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 344.638617][ T5837] Bluetooth: hci2: command tx timeout [ 344.687301][T18330] netlink: 'syz.0.3346': attribute type 1 has an invalid length. [ 344.719013][T18103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.729434][T18334] netlink: 'syz.3.3348': attribute type 11 has an invalid length. [ 344.737328][T18335] netlink: 'syz.3.3348': attribute type 11 has an invalid length. [ 344.748734][T18103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.756536][T18103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.774133][T18103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.796475][T18103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.831036][T18103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.854191][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'. [ 344.860086][T18103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.871596][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 344.885167][T18103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.042369][T18351] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 345.142194][T18103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.207873][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 345.224150][T18103] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.304184][T14976] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.332060][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 345.341349][T14976] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.360068][T14976] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.384677][T14971] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.387872][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 345.391874][T14971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.411545][T14971] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.418735][T14971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.432317][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 345.442262][T14976] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.523689][T18368] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 345.935360][T18401] netlink: 'syz.2.3367': attribute type 4 has an invalid length. [ 346.125247][T18410] __nla_validate_parse: 1 callbacks suppressed [ 346.125265][T18410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3370'. [ 346.143198][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.263575][T18414] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 346.276980][T18414] netlink: 396 bytes leftover after parsing attributes in process `syz.3.3372'. [ 346.300215][T18416] netlink: 'syz.4.3373': attribute type 1 has an invalid length. [ 346.313456][T18103] veth0_vlan: entered promiscuous mode [ 346.327099][T18103] veth1_vlan: entered promiscuous mode [ 346.370953][T18103] veth0_macvtap: entered promiscuous mode [ 346.412509][T18423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.456472][T18425] pim6reg: entered allmulticast mode [ 346.463166][T18425] pim6reg: left allmulticast mode [ 346.493645][T18103] veth1_macvtap: entered promiscuous mode [ 346.553571][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.577774][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.627752][T14971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.668692][T14971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.701900][T14971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.718638][ T5837] Bluetooth: hci2: command tx timeout [ 346.752206][T14971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.830197][T18454] netlink: 'syz.2.3384': attribute type 2 has an invalid length. [ 346.839636][T18455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3384'. [ 346.857726][T18454] vþ: entered promiscuous mode [ 346.863535][T18457] ip6t_srh: unknown srh invflags 4000 [ 346.902424][T14976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.911097][T14976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.984659][T14977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.002744][T14977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.265367][T18476] netlink: 'syz.2.3389': attribute type 1 has an invalid length. [ 347.534492][T18483] bond4: entered promiscuous mode [ 347.546447][T18483] bond4: entered allmulticast mode [ 347.553463][T18483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.588066][T18488] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3393'. [ 347.706722][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3395'. [ 347.805434][T18506] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.849576][T18512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3399'. [ 347.901480][T18506] bond5: (slave lo): Enslaving as an active interface with an up link [ 347.964518][T18506] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 348.369074][T18523] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.376735][T18523] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.510815][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.524417][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.604152][T18535] netlink: 'syz.0.3405': attribute type 1 has an invalid length. [ 348.615054][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.623465][T18536] netlink: 'syz.0.3405': attribute type 1 has an invalid length. [ 348.632255][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.641937][T14976] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.680496][T14976] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.700886][T18550] netlink: 'syz.2.3408': attribute type 24 has an invalid length. [ 348.710556][T14976] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.725289][T14976] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.799211][ T5837] Bluetooth: hci2: command tx timeout [ 349.163057][ T29] audit: type=1800 audit(1776144855.091:4): pid=18573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3417" name="memory.events" dev="tmpfs" ino=256 res=0 errno=0 [ 349.181423][T18573] syzkaller0: entered promiscuous mode [ 349.220467][T18573] syzkaller0: entered allmulticast mode [ 349.322249][T18591] Bluetooth: MGMT ver 1.23 [ 349.369341][T18591] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3421'. [ 349.692857][T18608] netlink: 'syz.1.3424': attribute type 32 has an invalid length. [ 349.705007][T18608] netlink: 776 bytes leftover after parsing attributes in process `syz.1.3424'. [ 349.902678][T18621] netlink: 'syz.0.3430': attribute type 1 has an invalid length. [ 349.937408][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 349.950446][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 350.218907][T18644] netlink: 'syz.1.3437': attribute type 11 has an invalid length. [ 350.534695][T18676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.837356][T18703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.971950][T18717] xt_ipcomp: unknown flags 1D [ 351.287405][T18734] validate_nla: 2 callbacks suppressed [ 351.287417][T18734] netlink: 'syz.0.3458': attribute type 12 has an invalid length. [ 351.304310][T18734] netlink: 'syz.0.3458': attribute type 29 has an invalid length. [ 351.312270][T18734] __nla_validate_parse: 4 callbacks suppressed [ 351.312283][T18734] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3458'. [ 351.327874][T18734] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3458'. [ 353.706136][T18696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.732303][T18714] netlink: 'syz.0.3458': attribute type 1 has an invalid length. [ 353.749366][T18714] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3458'. [ 353.765012][T18714] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3458'. [ 353.776538][T18714] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3458'. [ 353.832921][T18742] netlink: 'syz.1.3466': attribute type 16 has an invalid length. [ 353.844175][T18742] netlink: 'syz.1.3466': attribute type 17 has an invalid length. [ 354.018747][T18742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.061119][T18747] sctp: [Deprecated]: syz.3.3465 (pid 18747) Use of int in maxseg socket option. [ 354.061119][T18747] Use struct sctp_assoc_value instead [ 354.181878][T18747] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 354.201722][T18747] bond6 (unregistering): Released all slaves [ 354.227026][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'. [ 354.602026][T18779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3476'. [ 354.930030][T18800] Bluetooth: MGMT ver 1.23 [ 354.973717][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'. [ 354.985617][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'. [ 357.443089][T18771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.645671][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 358.075630][T18836] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 358.088086][ T5936] hid (null): global environment stack underflow [ 358.106253][ T5936] hid-generic 0005:04F3:0004.0002: global environment stack underflow [ 358.116808][T18839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3492'. [ 358.132707][ T5936] hid-generic 0005:04F3:0004.0002: item 0 0 1 11 parsing failed [ 358.159664][ T5936] hid-generic 0005:04F3:0004.0002: probe with driver hid-generic failed with error -22 [ 358.469160][T18859] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 358.557190][T18867] Cannot find del_set index 0 as target [ 358.566167][T18870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.648193][T18872] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.663161][T18861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3499'. [ 358.809740][ T5888] IPVS: starting estimator thread 0... [ 358.826993][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 358.898504][T18885] IPVS: using max 27 ests per chain, 64800 per kthread [ 358.969436][T18893] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3512'. [ 359.005459][T18898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3513'. [ 359.016184][T18891] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 359.025733][T18891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.078673][T18900] netlink: 'syz.3.3512': attribute type 8 has an invalid length. [ 359.103898][T18893] veth3: entered allmulticast mode [ 359.130264][T18897] bridge0: port 3(syz_tun) entered blocking state [ 359.157230][T18897] bridge0: port 3(syz_tun) entered disabled state [ 359.164742][T18897] syz_tun: entered allmulticast mode [ 359.172457][T18897] syz_tun: entered promiscuous mode [ 359.179344][T18897] bridge0: port 3(syz_tun) entered blocking state [ 359.186195][T18897] bridge0: port 3(syz_tun) entered forwarding state [ 359.209269][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3517'. [ 359.286711][T18909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3518'. [ 359.441532][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 359.476609][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 360.524600][T18995] netlink: 'syz.3.3546': attribute type 21 has an invalid length. [ 360.524619][T18996] netlink: 'syz.2.3545': attribute type 3 has an invalid length. [ 360.611124][T18995] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 360.797513][T19010] bond1: option mode: invalid value (133) [ 360.823547][T19010] bond1 (unregistering): Released all slaves [ 360.952363][T19022] netlink: 'syz.4.3551': attribute type 21 has an invalid length. [ 361.132754][T19033] netlink: 'syz.4.3551': attribute type 11 has an invalid length. [ 361.564472][T19056] syz_tun: Device is already in use. [ 361.821025][T19081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.285680][T19100] sctp: [Deprecated]: syz.1.3571 (pid 19100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.285680][T19100] Use struct sctp_sack_info instead [ 362.364627][T19104] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 362.373752][T19100] sctp: [Deprecated]: syz.1.3571 (pid 19100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.373752][T19100] Use struct sctp_sack_info instead [ 362.390519][T19104] syzkaller1: Linktype set failed because interface is up [ 363.062434][T19153] __nla_validate_parse: 14 callbacks suppressed [ 363.062452][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3587'. [ 363.227808][T19167] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.315714][T19158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.348586][T19158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.436227][T19166] team0 (unregistering): Port device team_slave_0 removed [ 363.474770][T19166] team0 (unregistering): Port device team_slave_1 removed [ 363.551883][T19158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.573790][T19158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.633136][T19195] Cannot find add_set index 0 as target [ 363.643130][T19195] netlink: 'syz.1.3596': attribute type 1 has an invalid length. [ 363.653157][T19158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.672076][T19195] netlink: 'syz.1.3596': attribute type 1 has an invalid length. [ 363.684481][T19158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.812358][T19158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.823677][T19158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.897972][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3597'. [ 363.899980][T19207] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3598'. [ 363.928366][T19207] netlink: Conntrack attr has 4 unknown bytes [ 363.931631][T19157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.969919][T19208] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 364.057474][T14977] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.072847][T14977] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.180710][T14976] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.208235][T14976] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.257046][T14976] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.277983][T19225] xt_TCPMSS: Only works on TCP SYN packets [ 364.288972][T14976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.340218][T14976] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.368987][T14976] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.424000][T19232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.561489][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 364.589332][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 364.623287][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 364.624380][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3611'. [ 365.043446][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 365.066584][T19266] netlink: 'syz.0.3617': attribute type 5 has an invalid length. [ 365.106535][T19266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3617'. [ 365.131135][T19275] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 365.242167][T19275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.266760][T19282] batadv0: entered promiscuous mode [ 365.273192][T19282] macsec1: entered promiscuous mode [ 365.282038][T19282] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 365.305145][T19282] batadv0: left promiscuous mode [ 365.378631][T19281] bond1: (slave veth0_to_bond): making interface the new active one [ 365.405940][T19281] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 365.467513][T19275] bond1: entered promiscuous mode [ 365.506352][T19275] veth0_to_bond: entered promiscuous mode [ 365.528873][T19275] bond1: entered allmulticast mode [ 365.541450][T19275] veth0_to_bond: entered allmulticast mode [ 365.759289][T19313] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3626'. [ 366.360052][T19356] H: renamed from dummy0 [ 366.397946][T19362] xt_policy: neither incoming nor outgoing policy selected [ 366.886269][T19387] netlink: 'syz.4.3645': attribute type 1 has an invalid length. [ 367.300008][T19414] bridge0: port 3(ipvlan2) entered blocking state [ 367.310086][T19414] bridge0: port 3(ipvlan2) entered disabled state [ 367.324410][T19414] ipvlan2: entered allmulticast mode [ 367.330812][T19414] bridge0: entered allmulticast mode [ 367.339518][T19414] ipvlan2: left allmulticast mode [ 367.344560][T19414] bridge0: left allmulticast mode [ 367.547370][T19429] netlink: 'syz.1.3656': attribute type 29 has an invalid length. [ 367.722085][T19441] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 367.817805][T19441] bond6: entered promiscuous mode [ 367.834375][T19441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.388681][T19488] syzkaller0: entered promiscuous mode [ 368.394203][T19488] syzkaller0: entered allmulticast mode [ 368.406411][T19494] __nla_validate_parse: 11 callbacks suppressed [ 368.406432][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 368.424206][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3676'. [ 368.435202][T19494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3677'. [ 368.496477][T19488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.149549][T19554] tunl0: entered promiscuous mode [ 369.166071][T19554] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 369.184330][T19554] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3690'. [ 369.216076][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 369.243972][T19560] netlink: 'syz.4.3692': attribute type 1 has an invalid length. [ 369.265164][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 369.285974][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 369.307027][T19560] netlink: 'syz.4.3692': attribute type 1 has an invalid length. [ 369.316573][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 369.443950][T19571] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 369.474501][T19563] nbd4: detected capacity change from 0 to 63 [ 369.475938][T19571] bond1: entered promiscuous mode [ 369.487134][T19571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.493987][ T5837] block nbd4: Receive control failed (result -32) [ 369.499343][ T5830] block nbd4: Receive control failed (result -32) [ 369.509210][T19571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3694'. [ 369.511208][T17892] block nbd4: Send control failed (result -32) [ 369.530553][T17892] block nbd4: Request send failed, requeueing [ 369.542519][ T5159] block nbd4: Dead connection, failed to find a fallback [ 369.553863][T19571] bond1: (slave bridge1): making interface the new active one [ 369.562541][ T5159] block nbd4: shutting down sockets [ 369.568470][ T5159] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.578710][ T5159] Buffer I/O error on dev nbd4, logical block 0, async page read [ 369.587753][T17892] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.599064][T17892] Buffer I/O error on dev nbd4, logical block 1, async page read [ 369.608101][T17892] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.620876][T19571] bridge1: entered promiscuous mode [ 369.622341][T17892] Buffer I/O error on dev nbd4, logical block 2, async page read [ 369.634698][T17892] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.644434][T17892] Buffer I/O error on dev nbd4, logical block 3, async page read [ 369.653587][T17892] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.663913][T17892] Buffer I/O error on dev nbd4, logical block 0, async page read [ 369.671969][T17892] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.682138][T17892] Buffer I/O error on dev nbd4, logical block 1, async page read [ 369.691137][T17892] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.700706][T17892] Buffer I/O error on dev nbd4, logical block 2, async page read [ 369.708876][T17892] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.711473][T19571] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 369.718447][T17892] Buffer I/O error on dev nbd4, logical block 3, async page read [ 369.718539][T17892] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.718564][T17892] Buffer I/O error on dev nbd4, logical block 0, async page read [ 369.718602][T17892] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.718625][T17892] Buffer I/O error on dev nbd4, logical block 1, async page read [ 369.719585][T17892] ldm_validate_partition_table(): Disk read failed. [ 369.847956][T17892] Dev nbd4: unable to read RDB block 0 [ 369.868474][T19582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3696'. [ 369.892983][T17892] nbd4: unable to read partition table [ 369.945802][T17892] ldm_validate_partition_table(): Disk read failed. [ 369.967139][T17892] Dev nbd4: unable to read RDB block 0 [ 369.989259][T17892] nbd4: unable to read partition table [ 370.211959][T19606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.448330][T19628] gretap0: entered promiscuous mode [ 370.454275][T19628] vlan2: entered promiscuous mode [ 370.863971][T19659] tipc: Enabling of bearer rejected, failed to enable media [ 370.894650][T19662] syzkaller0: entered promiscuous mode [ 370.900969][T19662] syzkaller0: entered allmulticast mode [ 371.121716][T19678] sctp: [Deprecated]: syz.2.3724 (pid 19678) Use of int in max_burst socket option. [ 371.121716][T19678] Use struct sctp_assoc_value instead [ 371.174026][T19684] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 371.307032][T19695] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 371.847248][T19731] x_tables: duplicate underflow at hook 1 [ 372.493954][T19779] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 372.752320][T19796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.759980][T19800] lo: Caught tx_queue_len zero misconfig [ 372.801344][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.891850][T19811] Bluetooth: MGMT ver 1.23 [ 373.004692][T19817] netlink: 'syz.3.3767': attribute type 64 has an invalid length. [ 373.032565][T19818] netlink: 'syz.3.3767': attribute type 64 has an invalid length. [ 373.202083][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.336790][T19841] openvswitch: netlink: IPv4 tun info is not correct [ 373.347306][T19841] IPv6: Can't replace route, no match found [ 373.494788][T19849] __nla_validate_parse: 18 callbacks suppressed [ 373.494808][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 373.657430][T19863] netlink: 'syz.3.3782': attribute type 23 has an invalid length. [ 373.686907][T19866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3784'. [ 373.692409][T19867] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3783'. [ 373.719257][T19869] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3782'. [ 373.822122][T19863] netlink: 'syz.3.3782': attribute type 21 has an invalid length. [ 373.830118][T19863] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.837915][T19863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.845163][T19863] IPv6: NLM_F_CREATE should be set when creating new route [ 373.852426][T19863] IPv6: NLM_F_CREATE should be set when creating new route [ 373.859672][T19863] IPv6: NLM_F_CREATE should be set when creating new route [ 373.877714][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.940501][T19877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3787'. [ 373.950600][T19877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.064389][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 374.113070][T19880] openvswitch: netlink: Flow key attr not present in new flow. [ 374.152982][T19886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 374.164780][T19886] openvswitch: netlink: Flow key attr not present in new flow. [ 374.677607][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3793'. [ 374.690948][T19893] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.694760][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3793'. [ 374.968245][ T5837] Bluetooth: hci2: command 0x0405 tx timeout [ 374.968327][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 374.991645][T19918] syzkaller0: entered promiscuous mode [ 374.997152][T19918] syzkaller0: entered allmulticast mode [ 375.031880][T19927] atomic_op ffff888043bc6198 conn xmit_atomic 0000000000000000 [ 375.194704][T19937] gtp0: entered promiscuous mode [ 375.200579][T19937] gtp0: entered allmulticast mode [ 375.220697][T19941] netlink: 'syz.4.3806': attribute type 4 has an invalid length. [ 375.278569][ C0] net_ratelimit: 2 callbacks suppressed [ 375.278589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.740422][T19965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3812'. [ 375.921436][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.990925][T10316] syz_tun: tun_net_xmit 110 [ 375.999976][T19977] bridge_slave_0: left allmulticast mode [ 376.005654][T19977] bridge_slave_0: left promiscuous mode [ 376.088396][T19977] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.141862][T19977] bridge_slave_1: left allmulticast mode [ 376.162152][T19977] bridge_slave_1: left promiscuous mode [ 376.167957][T19977] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.199960][T19977] bond0: (slave bond_slave_0): Releasing backup interface [ 376.212060][T19977] bond0: (slave bond_slave_1): Releasing backup interface [ 376.242554][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.285055][T19977] team0: Port device team_slave_0 removed [ 376.301421][T19977] team0: Port device team_slave_1 removed [ 376.309523][T19977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.317000][T19977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.327534][T19977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.335514][T19977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.349882][T19977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.482683][T19993] netlink: 'syz.0.3821': attribute type 21 has an invalid length. [ 376.515764][T19995] netlink: 'syz.1.3822': attribute type 83 has an invalid length. [ 376.541624][T19995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.690201][T20004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.798719][ T5875] syz_tun: tun_net_xmit 110 [ 376.888613][ T5875] syz_tun: tun_net_xmit 90 [ 376.959038][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.985594][T20016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.036582][T20019] syz_tun: tun_net_xmit 86 [ 377.079957][T20020] syzkaller0: entered promiscuous mode [ 377.085502][T20020] syzkaller0: entered allmulticast mode [ 377.175583][T20023] syz_tun: tun_net_xmit 42 [ 377.471151][T20033] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 377.479667][T20037] netlink: 'syz.0.3837': attribute type 12 has an invalid length. [ 377.492180][T20033] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 377.508505][T20033] team0: Failed to send options change via netlink (err -105) [ 377.526751][T20033] team0: Port device batadv1 added [ 377.535529][T20039] netlink: 'syz.2.3838': attribute type 21 has an invalid length. [ 377.582340][T20042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.589636][T20042] IPv6: NLM_F_CREATE should be set when creating new route [ 377.596338][T20037] bond2: option primary_reselect: invalid value (255) [ 377.596865][T20042] IPv6: NLM_F_CREATE should be set when creating new route [ 377.620179][T20037] bond2 (unregistering): Released all slaves [ 377.679577][ T5875] syz_tun: tun_net_xmit 90 [ 377.806872][T20047] x_tables: unsorted underflow at hook 2 [ 377.823484][T20047] 8021q: VLANs not supported on ip6_vti0 [ 377.840512][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.857787][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.078435][ C0] syz_tun: tun_net_xmit 86 [ 378.187253][T20072] netlink: 'syz.2.3849': attribute type 13 has an invalid length. [ 378.213993][T20072] veth0_macvtap: left promiscuous mode [ 378.220103][T20072] macvtap0: entered allmulticast mode [ 378.235074][T20072] macvtap0: refused to change device tx_queue_len [ 378.238466][ C1] syz_tun: tun_net_xmit 42 [ 378.464723][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.499011][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.505821][T20091] __nla_validate_parse: 47 callbacks suppressed [ 378.505838][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3859'. [ 378.515519][T20083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.542509][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.550140][T20083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.620267][T20093] pimreg40: entered allmulticast mode [ 378.625888][T20099] netlink: 'syz.1.3858': attribute type 1 has an invalid length. [ 378.719088][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'. [ 378.827186][T20120] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3866'. [ 379.010689][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3869'. [ 379.030509][T20133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3868'. [ 379.118892][ C0] syz_tun: tun_net_xmit 86 [ 379.136819][T20140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3872'. [ 379.156895][T20139] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3871'. [ 379.200059][T20139] netlink: 'syz.1.3871': attribute type 1 has an invalid length. [ 379.278285][ C1] syz_tun: tun_net_xmit 42 [ 379.317748][T20144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3875'. [ 379.525135][T20161] x_tables: ip_tables: udp match: only valid for protocol 17 [ 379.553151][T20164] netlink: 'syz.4.3877': attribute type 1 has an invalid length. [ 379.606582][T20164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.647214][T20170] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.662405][T20155] bond2: (slave veth0_to_bond): making interface the new active one [ 379.679439][T20155] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 379.831886][T20164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.843035][T20164] bond2: (slave bond3): Enslaving as an active interface with a down link [ 379.852752][T20181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3877'. [ 379.912965][T20188] tipc: Started in network mode [ 379.917936][T20188] tipc: Node identity ac14140f, cluster identity 4711 [ 379.930762][T20188] tipc: New replicast peer: 255.255.255.255 [ 379.938058][T20188] tipc: Enabled bearer , priority 10 [ 379.963985][T20188] pim6reg: entered allmulticast mode [ 379.987746][T20188] pim6reg: left allmulticast mode [ 380.292151][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'. [ 380.883371][ T5875] net_ratelimit: 64 callbacks suppressed [ 380.883389][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.108568][T20229] syzkaller0: entered promiscuous mode [ 381.114093][T20229] syzkaller0: entered allmulticast mode [ 381.121791][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.138099][ T24] tipc: Node number set to 2886997007 [ 381.423087][T20268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.433835][T20268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.160436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.617236][T20253] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 382.639046][T20275] netlink: 'syz.0.3912': attribute type 2 has an invalid length. [ 382.806295][T20282] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.846807][T20282] bridge_slave_0 (unregistering): left allmulticast mode [ 382.882719][T20282] bridge_slave_0 (unregistering): left promiscuous mode [ 382.932736][T20282] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.200568][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.376063][ T1147] nci: nci_rsp_packet: unknown rsp opcode 0xa05 [ 383.918900][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.241770][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.282248][T20329] __nla_validate_parse: 13 callbacks suppressed [ 384.282262][T20329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3926'. [ 385.278600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.016336][T20301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.228850][T20336] netlink: 'syz.1.3929': attribute type 1 has an invalid length. [ 386.255270][T20336] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3929'. [ 386.319060][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.400775][T20351] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3931'. [ 386.706135][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3939'. [ 386.786444][T20372] Unsupported ieee802154 address type: 0 [ 386.796533][T20372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3940'. [ 386.820030][T20372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3940'. [ 386.977704][T20385] xt_nfacct: accounting object `syz1' does not exist [ 386.980734][T20381] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 386.996976][T20381] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 387.406751][T20406] syzkaller0: entered allmulticast mode [ 387.414959][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3951'. [ 387.433432][T20406] ipvlan2: entered allmulticast mode [ 387.439127][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.449872][T20406] syz_tun: entered allmulticast mode [ 387.505800][T20408] netlink: 'syz.2.3950': attribute type 1 has an invalid length. [ 387.625912][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.636033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.687487][T20421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 387.694688][T20421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 387.717967][T20421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 387.724674][T20421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 387.770883][T20421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 387.777354][T20421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 388.209847][T20441] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 388.233741][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3960'. [ 388.261518][T20441] syz_tun: tun_net_xmit 86 [ 388.592613][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'. [ 388.609005][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'. [ 389.080793][T20478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.114818][T20480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.196673][T20478] s5ÿÿø: renamed from vlan1 (while UP) [ 389.278397][ C0] syz_tun: tun_net_xmit 86 [ 389.437502][T20499] tls_set_device_offload: netdev not found [ 389.467860][T20489] netlink: 'syz.1.3973': attribute type 21 has an invalid length. [ 389.484777][T20499] __nla_validate_parse: 2 callbacks suppressed [ 389.484795][T20499] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3979'. [ 389.508546][T20485] netlink: 'syz.1.3973': attribute type 21 has an invalid length. [ 389.516378][T20485] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.548944][T20489] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.582346][T20489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.589619][T20489] IPv6: NLM_F_CREATE should be set when creating new route [ 389.596889][T20489] IPv6: NLM_F_CREATE should be set when creating new route [ 389.604161][T20489] IPv6: NLM_F_CREATE should be set when creating new route [ 389.613065][T20485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.776366][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 389.860341][T20519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3983'. [ 390.318945][ C0] syz_tun: tun_net_xmit 86 [ 391.331225][T20535] syz_tun: tun_net_xmit 86 [ 391.360367][ C0] syz_tun: tun_net_xmit 86 [ 391.399634][T20539] netlink: 'syz.1.3988': attribute type 1 has an invalid length. [ 391.435294][T20542] xt_CONNSECMARK: invalid mode: 0 [ 391.448912][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 391.503050][T20553] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 391.520214][ T24] net_ratelimit: 3999 callbacks suppressed [ 391.520234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.624326][T20563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.633438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.660765][T20563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3992'. [ 391.860051][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.869673][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.878093][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.886738][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.895676][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.908576][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.917459][T20578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.970450][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3999'. [ 392.165887][T20593] syz_tun: tun_net_xmit 86 [ 392.229815][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 392.398355][ C0] syz_tun: tun_net_xmit 86 [ 392.402867][ C0] syz_tun: tun_net_xmit 86 [ 392.466592][T20609] syzkaller1: entered promiscuous mode [ 392.485654][T20609] syzkaller1: entered allmulticast mode [ 392.656362][T20618] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4013'. [ 392.759244][T20620] netlink: 'syz.2.4014': attribute type 21 has an invalid length. [ 392.776528][T20620] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4014'. [ 393.126796][T20648] ieee802154 phy1 wpan1: encryption failed: -90 [ 393.191172][T20648] netlink: 'syz.1.4023': attribute type 21 has an invalid length. [ 393.200317][ C0] syz_tun: tun_net_xmit 86 [ 393.213150][T20651] No such timeout policy "syz0" [ 393.243837][T20653] netlink: 'syz.1.4023': attribute type 21 has an invalid length. [ 393.402990][T20648] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 393.438361][ C0] syz_tun: tun_net_xmit 86 [ 393.442862][ C0] syz_tun: tun_net_xmit 86 [ 393.458020][T20648] bond2 (unregistering): Released all slaves [ 393.537685][T20653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4023'. [ 393.812745][T20655] syzkaller0: entered promiscuous mode [ 393.819423][T20655] syzkaller0: entered allmulticast mode [ 393.880005][T20673] syzkaller0: entered promiscuous mode [ 394.239919][ C0] syz_tun: tun_net_xmit 86 [ 395.375794][T20696] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 396.721991][T20715] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 396.730280][T20715] __nla_validate_parse: 3 callbacks suppressed [ 396.730297][T20715] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4039'. [ 396.883297][T20726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4043'. [ 397.015103][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 397.859930][T20790] netlink: 'syz.0.4060': attribute type 11 has an invalid length. [ 397.867820][T20790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4060'. [ 397.922585][T20796] netlink: 'syz.3.4063': attribute type 15 has an invalid length. [ 397.922624][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4061'. [ 397.948941][T20796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4063'. [ 397.974099][T20798] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4057'. [ 397.983912][T20798] bridge0: port 3(syz_tun) entered disabled state [ 397.991320][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.998840][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.057441][T20805] netlink: 'syz.2.4064': attribute type 2 has an invalid length. [ 398.101448][T20798] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4057'. [ 398.129762][T20798] bridge0: port 3(syz_tun) entered blocking state [ 398.136389][T20798] bridge0: port 3(syz_tun) entered forwarding state [ 398.143382][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.150567][T20798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.157997][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.165174][T20798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.233687][T20798] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4057'. [ 398.247090][T20798] bridge0: port 3(syz_tun) entered disabled state [ 398.253791][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.261034][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.320157][ C0] syz_tun: tun_net_xmit 86 [ 398.332626][T10316] hid (null): global environment stack underflow [ 398.342425][T10316] hid-generic 0005:04F3:0004.0003: global environment stack underflow [ 398.362207][T10316] hid-generic 0005:04F3:0004.0003: item 0 0 1 11 parsing failed [ 398.371136][T10316] hid-generic 0005:04F3:0004.0003: probe with driver hid-generic failed with error -22 [ 398.446699][T20824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4068'. [ 398.627989][T20845] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 398.636203][T20845] netlink: 'syz.4.4075': attribute type 3 has an invalid length. [ 398.974981][T20864] IPVS: Scheduler module ip_vs_sip not found [ 399.035289][T20873] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 399.219503][T20882] netlink: 'syz.3.4086': attribute type 1 has an invalid length. [ 399.359510][ C0] syz_tun: tun_net_xmit 86 [ 399.364996][ C0] syz_tun: tun_net_xmit 86 [ 399.410995][T20888] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 399.471693][T20895] netlink: 'syz.4.4093': attribute type 16 has an invalid length. [ 399.483389][T20895] netlink: 'syz.4.4093': attribute type 17 has an invalid length. [ 399.811071][T20906] netlink: 'syz.3.4095': attribute type 1 has an invalid length. [ 399.954386][T20913] bond8: (slave bridge4): making interface the new active one [ 399.964515][T20913] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 400.162044][T20918] bond4: option min_links: invalid value (18446744073709551614) [ 400.171591][T20918] bond4: option min_links: allowed values 0 - 2147483647 [ 400.196950][T20918] bond4 (unregistering): Released all slaves [ 400.276407][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.309907][T20930] netlink: 'syz.0.4102': attribute type 2 has an invalid length. [ 400.332511][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.398386][ C0] syz_tun: tun_net_xmit 86 [ 400.403080][ C0] syz_tun: tun_net_xmit 86 [ 401.049440][T20974] net_ratelimit: 28 callbacks suppressed [ 401.049459][T20974] netlink: zone id is out of range [ 401.076539][T20974] netlink: zone id is out of range [ 401.092644][T20974] netlink: zone id is out of range [ 401.097863][T20974] netlink: zone id is out of range [ 401.104998][T20974] netlink: zone id is out of range [ 401.111858][T20974] netlink: zone id is out of range [ 401.117728][T20974] netlink: zone id is out of range [ 401.144560][T20974] netlink: zone id is out of range [ 401.177344][T20974] netlink: zone id is out of range [ 401.193130][T20974] netlink: zone id is out of range [ 401.438394][ C0] syz_tun: tun_net_xmit 86 [ 401.443550][ C0] syz_tun: tun_net_xmit 86 [ 401.753061][T21012] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.799554][T21012] bond2: (slave lo): Enslaving as an active interface with an up link [ 401.841993][T21031] __nla_validate_parse: 9 callbacks suppressed [ 401.842012][T21031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4132'. [ 402.006708][T21045] vlan3: entered allmulticast mode [ 402.141898][T21059] validate_nla: 1 callbacks suppressed [ 402.141918][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.164965][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.171345][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4142'. [ 402.191773][T21059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4140'. [ 402.202869][T21061] syzkaller0: entered promiscuous mode [ 402.208793][T21061] syzkaller0: entered allmulticast mode [ 402.332823][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.341212][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.357997][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.384653][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.403234][T21059] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 402.478429][ C0] syz_tun: tun_net_xmit 86 [ 402.622518][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 402.684218][T21098] netlink: 'syz.0.4154': attribute type 10 has an invalid length. [ 402.725846][T21084] hsr_slave_1 (unregistering): left promiscuous mode [ 402.754123][T21105] netlink: 'syz.0.4154': attribute type 10 has an invalid length. [ 402.764680][T21105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4154'. [ 402.777949][T21098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.788489][T21098] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 402.812963][T21103] macsec2: entered promiscuous mode [ 402.857623][T21105] batadv0: entered promiscuous mode [ 402.861559][T21108] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 402.880357][T21105] batadv0: entered allmulticast mode [ 402.890722][T21105] bond0: (slave batadv0): Releasing backup interface [ 402.930065][T21105] bridge0: port 1(batadv0) entered blocking state [ 402.947824][T21105] bridge0: port 1(batadv0) entered disabled state [ 403.034971][T19607] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.070106][T19607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.121073][T19607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.151812][T19607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.275996][T21134] netlink: 'syz.1.4161': attribute type 1 has an invalid length. [ 403.291531][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4163'. [ 403.324109][T21134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4161'. [ 403.345554][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 403.413268][T21140] macvtap1: entered allmulticast mode [ 403.419556][T21140] veth0_macvtap: entered allmulticast mode [ 403.462796][T19607] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 403.473351][T19607] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 403.518346][ C0] syz_tun: tun_net_xmit 86 [ 403.536797][T21149] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4168'. [ 403.584472][T21154] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4170'. [ 403.593260][T21156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.603667][T21154] vlan2: entered promiscuous mode [ 405.780594][T21264] pimreg: entered allmulticast mode [ 406.256196][T21291] batman_adv: batadv0: Adding interface: dummy0 [ 406.286948][T21291] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.319322][T21291] batman_adv: batadv0: Interface activated: dummy0 [ 407.121661][T21335] __nla_validate_parse: 18 callbacks suppressed [ 407.121680][T21335] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4229'. [ 407.154665][T21337] net_ratelimit: 70 callbacks suppressed [ 407.154684][T21337] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 407.171604][T21340] validate_nla: 3 callbacks suppressed [ 407.171622][T21340] netlink: 'syz.3.4231': attribute type 9 has an invalid length. [ 407.324830][T21356] x_tables: duplicate underflow at hook 1 [ 407.455869][T21366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4236'. [ 407.476335][T21366] bridge: RTM_NEWNEIGH with invalid ether address [ 407.497720][T21366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4236'. [ 407.573014][T21373] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4236'. [ 407.590331][ T5875] IPVS: starting estimator thread 0... [ 407.818214][T21375] IPVS: using max 55 ests per chain, 132000 per kthread [ 407.919622][ C0] syz_tun: tun_net_xmit 86 [ 407.937400][T21344] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 407.949911][T21344] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 407.977655][T21344] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.995988][T21344] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 408.124268][T21344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.133513][T21344] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 408.142578][T21396] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 408.161595][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4242'. [ 408.215199][T21344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.225002][T21344] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 408.879442][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 408.926329][T21428] netlink: 'syz.2.4249': attribute type 2 has an invalid length. [ 408.958384][ C0] syz_tun: tun_net_xmit 86 [ 408.981632][T21428] netlink: 'syz.2.4249': attribute type 2 has an invalid length. [ 409.189477][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 409.200991][T21447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4256'. [ 409.214895][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 409.225970][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4256'. [ 409.271595][T21448] SET target dimension over the limit! [ 409.280052][T21445] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 409.998638][ C0] syz_tun: tun_net_xmit 86 [ 410.030811][T21502] netlink: 'syz.2.4272': attribute type 1 has an invalid length. [ 410.206885][T21503] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.231543][T21503] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 410.353981][T21502] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 410.634295][T21533] xt_hashlimit: size too large, truncated to 1048576 [ 411.075066][T21552] openvswitch: netlink: Unknown nsh attribute 0 [ 411.148942][T21551] bond3: Removing last arp target with arp_interval on [ 411.392715][T21574] nbd: must specify a device to reconfigure [ 411.498230][T21577] netlink: 'syz.3.4292': attribute type 2 has an invalid length. [ 411.534474][T21577] xt_TCPMSS: Only works on TCP SYN packets [ 411.901315][T21569] netlink: 'syz.2.4291': attribute type 1 has an invalid length. [ 412.082803][T21568] lec:lec_atm_close: lec0: Shut down! [ 412.174306][T21605] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.209591][T21605] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.009505][T21605] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.019884][T21605] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.264891][T21626] kthread_run failed with err -4 [ 415.349698][T21605] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.381022][T21605] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.394763][T21636] Cannot find del_set index 4 as target [ 415.502604][T21605] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.519351][T21605] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.539015][T21646] x_tables: duplicate underflow at hook 2 [ 415.632745][T21651] __nla_validate_parse: 11 callbacks suppressed [ 415.632763][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4308'. [ 415.712305][T14971] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.731814][T14971] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.791558][T21661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 415.814493][T14968] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.848046][T14968] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.896497][T14439] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.916045][T14439] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.973246][T14440] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.986181][T14440] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.039914][T21670] netlink: 'syz.3.4313': attribute type 1 has an invalid length. [ 416.177329][T21670] 8021q: adding VLAN 0 to HW filter on device bond9 [ 416.406591][T21676] bond9: (slave veth5): Enslaving as an active interface with a down link [ 416.442706][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 416.497387][T21687] bond3: (slave veth0_to_bond): Releasing active interface [ 416.512276][T21687] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 416.530860][T21696] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4319'. [ 416.543450][T21696] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4319'. [ 416.598807][T21670] bond9: (slave veth7): Enslaving as an active interface with a down link [ 416.608854][T21670] netlink: 'syz.3.4313': attribute type 1 has an invalid length. [ 416.616605][T21670] netlink: 'syz.3.4313': attribute type 2 has an invalid length. [ 416.641401][T21718] nbd: couldn't find a device at index 0 [ 416.716014][T21670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4313'. [ 416.808754][T21724] syzkaller1: entered promiscuous mode [ 416.814269][T21724] syzkaller1: entered allmulticast mode [ 416.831227][T21728] nbd: must specify a device to reconfigure [ 416.874759][T21730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4327'. [ 416.892985][T21725] syz_tun: tun_net_xmit 86 [ 416.923859][T21733] IPVS: Unknown mcast interface: team0 [ 416.938489][T21734] IPVS: Unknown mcast interface: team0 [ 417.255746][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4333'. [ 417.320531][T21750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4333'. [ 417.425649][T21773] xt_hashlimit: size too large, truncated to 1048576 [ 417.632291][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4333'. [ 417.731254][T21750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4333'. [ 417.919519][ C0] syz_tun: tun_net_xmit 86 [ 418.306439][T21816] netlink: 'syz.2.4347': attribute type 2 has an invalid length. [ 418.968446][ C0] syz_tun: tun_net_xmit 86 [ 419.537603][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.736640][T21826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 419.810091][ T5936] lec:lec_start_xmit: lec0:No lecd attached [ 419.823575][T21839] netlink: 'syz.3.4354': attribute type 1 has an invalid length. [ 419.884063][T21839] bond10: entered promiscuous mode [ 419.889618][T21839] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.934822][T21849] ipvlan2: entered allmulticast mode [ 419.956202][T21849] bond10: entered allmulticast mode [ 420.018866][T21839] ipvlan3: entered allmulticast mode [ 420.066240][T21849] bond10: (slave bridge5): making interface the new active one [ 420.075768][T21849] bridge5: entered promiscuous mode [ 420.082197][T21849] bridge5: entered allmulticast mode [ 420.082875][T21863] netlink: 'syz.4.4361': attribute type 1 has an invalid length. [ 420.089520][T21849] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 420.219256][T21863] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 420.535233][T21893] xt_hashlimit: size too large, truncated to 1048576 [ 420.686688][T21900] bridge_slave_0 (unregistering): left allmulticast mode [ 420.693991][T21900] bridge_slave_0 (unregistering): left promiscuous mode [ 420.712110][T21900] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.820096][T21905] syzkaller0: entered allmulticast mode [ 420.862624][T21905] syzkaller0 (unregistering): left allmulticast mode [ 420.941760][T21916] __nla_validate_parse: 12 callbacks suppressed [ 420.941781][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 420.982242][T21916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4374'. [ 421.196558][T21933] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 421.656191][T21968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4383'. [ 422.011500][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4387'. [ 422.115389][T21999] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4391'. [ 422.164332][T22000] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4391'. [ 422.199592][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4391'. [ 422.360909][T22014] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4395'. [ 422.412106][T22014] Cannot find set identified by id 1 to match [ 422.554763][T22023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4397'. [ 422.579201][T22024] Cannot find add_set index 65532 as target [ 422.622361][T22023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4397'. [ 422.920712][T22044] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.995433][T22044] bond4: (slave lo): Enslaving as an active interface with an up link [ 423.013464][T22061] ipt_REJECT: ECHOREPLY no longer supported. [ 423.055498][T22044] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 423.193111][T22070] : renamed from bond0 (while UP) [ 423.635499][T22099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.646838][T22101] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 424.558587][ C0] syz_tun: tun_net_xmit 86 [ 424.619921][T22145] netlink: 'syz.3.4426': attribute type 5 has an invalid length. [ 424.828118][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 424.836952][ C0] lec:lec_tx_timeout: lec0 [ 424.842216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.444048][T22201] vlan2: entered allmulticast mode [ 425.459816][T22201] bond0: entered allmulticast mode [ 425.476952][T22201] bond_slave_0: entered allmulticast mode [ 425.489320][T22201] bond_slave_1: entered allmulticast mode [ 425.555796][T22211] syz_tun: tun_net_xmit 86 [ 425.598392][ C0] syz_tun: tun_net_xmit 86 [ 425.649179][T22221] delete_channel: no stack [ 426.226063][T22269] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20004 [ 426.412225][T22285] netlink: 'syz.4.4456': attribute type 39 has an invalid length. [ 426.494467][T22285] hsr_slave_1 (unregistering): left promiscuous mode [ 426.503507][T22292] __nla_validate_parse: 16 callbacks suppressed [ 426.503534][T22292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4458'. [ 426.568429][ C0] syz_tun: tun_net_xmit 86 [ 426.573435][T22296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.628687][T22299] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4460'. [ 426.638326][ C0] syz_tun: tun_net_xmit 86 [ 426.664415][T22294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4459'. [ 426.726409][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4460'. [ 427.160620][T22332] syzkaller1: entered promiscuous mode [ 427.166345][T22332] syzkaller1: entered allmulticast mode [ 427.608353][ C0] syz_tun: tun_net_xmit 86 [ 427.677546][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 427.682941][T22376] netlink: 'syz.2.4483': attribute type 16 has an invalid length. [ 427.687091][T22374] netlink: 'syz.4.4482': attribute type 6 has an invalid length. [ 427.703555][T22376] netlink: 'syz.2.4483': attribute type 17 has an invalid length. [ 427.709285][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4482'. [ 427.764861][T22376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.794231][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 427.803665][T22374] netlink: 'syz.4.4482': attribute type 6 has an invalid length. [ 427.811827][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4482'. [ 427.901371][T22385] TCP: TCP_TX_DELAY enabled [ 428.056753][T22399] veth0_to_bridge: entered promiscuous mode [ 428.066130][T22399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4491'. [ 428.079743][T22399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4491'. [ 428.093143][T22398] veth0_to_bridge: left promiscuous mode [ 428.137370][T22402] delete_channel: no stack [ 428.169998][T22405] macvtap1: entered promiscuous mode [ 428.175766][T22405] macvtap1: entered allmulticast mode [ 428.182640][T22405] veth1_vlan: entered allmulticast mode [ 428.196870][T22405] macvtap2: entered promiscuous mode [ 428.203200][T22405] macvtap2: entered allmulticast mode [ 428.306714][T22410] netlink: 'syz.0.4495': attribute type 21 has an invalid length. [ 428.343457][T22410] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.373427][T22410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.380727][T22410] IPv6: NLM_F_CREATE should be set when creating new route [ 428.388006][T22410] IPv6: NLM_F_CREATE should be set when creating new route [ 428.395268][T22410] IPv6: NLM_F_CREATE should be set when creating new route [ 428.504490][T22421] bond0: entered promiscuous mode [ 428.510788][T22421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.768813][T22444] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 428.925585][T22452] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 428.955080][T22456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.992072][T22459] syzkaller1: entered promiscuous mode [ 429.017565][T22459] syzkaller1: entered allmulticast mode [ 429.047518][T22456] bridge0: port 2(batadv2) entered blocking state [ 429.054416][T22456] bridge0: port 2(batadv2) entered disabled state [ 429.067314][T22456] batadv2: entered allmulticast mode [ 429.075429][T22456] batadv2: entered promiscuous mode [ 429.104491][T22463] syzkaller1: entered promiscuous mode [ 429.110151][T22463] syzkaller1: entered allmulticast mode [ 429.424096][T22484] netlink: 'syz.1.4518': attribute type 3 has an invalid length. [ 429.467844][T22486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.491808][T22486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.501191][T22486] bond0 (unregistering): Released all slaves [ 429.539138][T19599] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 429.548497][T19599] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 429.636189][T22495] x_tables: duplicate underflow at hook 1 [ 429.747094][T22503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.816951][T14971] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.827171][T14971] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.836289][T14971] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.858146][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 429.866189][ C0] lec:lec_tx_timeout: lec0 [ 429.871350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.893566][T14971] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.922315][T22509] tipc: Started in network mode [ 429.937397][T22509] tipc: Node identity ac14140f, cluster identity 4711 [ 429.954350][T22509] tipc: Enabled bearer , priority 10 [ 430.011118][T22514] vlan3: entered promiscuous mode [ 430.106700][T22522] syzkaller0: entered promiscuous mode [ 430.112445][T22522] syzkaller0: entered allmulticast mode [ 430.204355][T22528] netlink: 'syz.4.4534': attribute type 1 has an invalid length. [ 430.264690][T22528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.276483][T22533] netlink: 'syz.0.4536': attribute type 4 has an invalid length. [ 430.314267][T22533] netlink: 'syz.0.4536': attribute type 4 has an invalid length. [ 430.745015][T22553] wireguard0: entered promiscuous mode [ 430.750659][T22553] wireguard0: entered allmulticast mode [ 431.012838][T22565] vcan1: entered promiscuous mode [ 431.021072][T22565] vcan1: entered allmulticast mode [ 431.079621][T10316] tipc: Node number set to 2886997007 [ 431.712176][T22613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.152916][T22625] syz_tun: tun_net_xmit 42 [ 433.198456][ C0] syz_tun: tun_net_xmit 42 [ 433.934110][T22569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.238260][ C0] syz_tun: tun_net_xmit 42 [ 434.250551][T22656] tipc: Enabled bearer , priority 0 [ 434.299821][T22656] syzkaller0: entered promiscuous mode [ 434.305330][T22656] syzkaller0: entered allmulticast mode [ 434.312366][T22656] tipc: Resetting bearer [ 434.343571][T22655] tipc: Resetting bearer [ 434.466814][T22667] __nla_validate_parse: 10 callbacks suppressed [ 434.466833][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4569'. [ 434.888233][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 434.896337][ C0] lec:lec_tx_timeout: lec0 [ 434.901418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.846986][T22655] tipc: Disabling bearer [ 436.180481][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4577'. [ 436.346818][T22698] bridge3: port 1(veth3) entered blocking state [ 436.357992][T22698] bridge3: port 1(veth3) entered disabled state [ 436.365505][T22711] openvswitch: netlink: Invalid VLAN frame [ 436.373089][T22698] veth3: entered allmulticast mode [ 436.382323][T22698] veth3: entered promiscuous mode [ 436.416726][T22709] bridge3: port 2(veth5) entered blocking state [ 436.426742][T22709] bridge3: port 2(veth5) entered disabled state [ 436.455878][T22709] veth5: entered allmulticast mode [ 436.483886][T22709] veth5: entered promiscuous mode [ 436.583239][T22698] bridge3: port 3(veth7) entered blocking state [ 436.633381][T22698] bridge3: port 3(veth7) entered disabled state [ 436.643755][T22698] veth7: entered allmulticast mode [ 436.653815][T22698] veth7: entered promiscuous mode [ 437.101085][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4591'. [ 437.298027][T22780] syz_tun: tun_net_xmit 86 [ 437.313487][T22780] syz_tun: tun_net_xmit 86 [ 437.614053][T22801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4600'. [ 437.642490][T22801] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4600'. [ 437.670405][T22801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4600'. [ 437.707584][T22806] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4601'. [ 437.742422][T22806] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 437.801493][T22806] team0: Port device vxcan1 added [ 437.963425][T22820] bridge0: port 3(gretap0) entered blocking state [ 437.988941][T22820] bridge0: port 3(gretap0) entered disabled state [ 437.995597][T22820] gretap0: entered allmulticast mode [ 438.013404][T22820] bridge0: port 3(gretap0) entered blocking state [ 438.019999][T22820] bridge0: port 3(gretap0) entered forwarding state [ 438.113787][T22829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4606'. [ 438.306385][T22836] batadv0: entered promiscuous mode [ 438.318404][ C1] syz_tun: tun_net_xmit 86 [ 438.320684][T22836] macsec1: entered promiscuous mode [ 438.323074][ C1] syz_tun: tun_net_xmit 86 [ 438.329645][T22836] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 438.359516][T22836] batadv0: left promiscuous mode [ 438.452874][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4611'. [ 438.654531][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 439.294436][T22905] sctp: [Deprecated]: syz.2.4625 (pid 22905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.294436][T22905] Use struct sctp_sack_info instead [ 439.359885][ C1] syz_tun: tun_net_xmit 86 [ 439.364601][ C1] syz_tun: tun_net_xmit 86 [ 439.761965][T22924] netlink: 'syz.2.4630': attribute type 4 has an invalid length. [ 439.771591][T22922] __nla_validate_parse: 3 callbacks suppressed [ 439.771608][T22922] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4632'. [ 439.855800][T22931] syzkaller1: entered promiscuous mode [ 439.908126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.916195][ C0] lec:lec_tx_timeout: lec0 [ 439.927931][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.928680][T22931] syzkaller1: entered allmulticast mode [ 439.941141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.991801][T22936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4634'. [ 440.064834][T22943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4636'. [ 440.495363][T22937] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.503032][T22937] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.977446][T22937] veth1_vlan: left allmulticast mode [ 441.073944][T22973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4639'. [ 441.099158][T22973] openvswitch: netlink: Flow key attr not present in new flow. [ 441.120508][T14439] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.139272][T14439] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.159717][T14439] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.180223][T22975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4640'. [ 441.211721][T14439] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.331160][T22991] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 441.617226][T23006] 8021q: VLANs not supported on ip_vti0 [ 441.723951][T23002] syzkaller0: entered promiscuous mode [ 441.729674][T23002] syzkaller0: entered allmulticast mode [ 441.779835][T23002] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4649'. [ 441.796480][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4652'. [ 441.870747][T23023] tipc: Failed to remove unknown binding: 66,1,1/0:2916297238/2916297240 [ 441.882424][T23023] tipc: Failed to remove unknown binding: 66,1,1/0:2916297238/2916297240 [ 441.923316][T23026] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 441.989911][T23026] siw: device registration error -23 [ 443.160094][T23023] ip6gretap1: entered promiscuous mode [ 443.165617][T23023] ip6gretap1: entered allmulticast mode [ 443.295271][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4658'. [ 443.470615][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4661'. [ 443.491054][T23045] bond4: option min_links: invalid value (18446744073709551614) [ 443.499455][T23045] bond4: option min_links: allowed values 0 - 2147483647 [ 443.521044][T23045] bond4 (unregistering): Released all slaves [ 443.549551][T23053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4664'. [ 443.561606][T23054] nbd: must specify a device to reconfigure [ 443.591240][T23051] openvswitch: netlink: IPv4 tun info is not correct [ 443.766725][T23063] syzkaller0: entered promiscuous mode [ 443.775922][T23063] syzkaller0: entered allmulticast mode [ 443.810117][T23069] bond6: invalid ARP target 0.0.0.0 specified for addition [ 443.817350][T23069] bond6: option arp_ip_target: invalid value (0) [ 443.825944][T23069] bond6 (unregistering): Released all slaves [ 443.964030][T23077] netlink: 'syz.3.4671': attribute type 1 has an invalid length. [ 444.942721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.950795][ C0] lec:lec_tx_timeout: lec0 [ 444.955421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.620748][T23107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.629746][T23107] bridge0: port 3(bond0) entered blocking state [ 445.637415][T23107] bridge0: port 3(bond0) entered disabled state [ 445.644924][T23107] bond0: entered allmulticast mode [ 445.653541][T23107] bond0: entered promiscuous mode [ 445.703522][T23113] __nla_validate_parse: 4 callbacks suppressed [ 445.703539][T23113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4682'. [ 445.766886][T23118] veth0: entered promiscuous mode [ 445.774580][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 445.789529][T23114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4682'. [ 445.877014][T23117] veth0: left promiscuous mode [ 446.356779][T23164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4695'. [ 446.597375][T23179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4699'. [ 446.614453][T23179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4699'. [ 447.102824][T23204] netlink: 'syz.0.4708': attribute type 13 has an invalid length. [ 447.213645][T15907] syz_tun: tun_net_xmit 110 [ 447.393341][T23225] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4713'. [ 447.423431][T23225] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4713'. [ 447.537983][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4717'. [ 447.556033][T23238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.914246][T23261] syz_tun: entered allmulticast mode [ 447.999995][T15907] syz_tun: tun_net_xmit 110 [ 448.035510][T23212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.201633][T23268] SET target dimension over the limit! [ 448.328720][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 448.552221][T23299] netlink: 'syz.2.4731': attribute type 1 has an invalid length. [ 448.723029][T23312] openvswitch: netlink: Key 11 has unexpected len 4 expected 2 [ 448.967026][T23331] geneve2: entered promiscuous mode [ 448.999449][T19604] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54590 - 0 [ 449.023446][T19604] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54590 - 0 [ 449.040340][T19604] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54590 - 0 [ 449.058717][T19604] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54590 - 0 [ 449.177239][T23343] netlink: 'syz.2.4743': attribute type 10 has an invalid length. [ 449.191896][T23343] team0: Device vxcan1 is of different type [ 449.581944][T23356] syzkaller0: entered promiscuous mode [ 449.598019][T23356] syzkaller0: entered allmulticast mode [ 449.968108][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 449.976180][ C0] lec:lec_tx_timeout: lec0 [ 449.981100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.050819][T23376] 8021q: VLANs not supported on ip6gre0 [ 450.529147][T23399] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 450.529813][T23405] netlink: 'syz.0.4761': attribute type 16 has an invalid length. [ 450.560167][T23399] bond4 (unregistering): Released all slaves [ 450.626399][T23405] netlink: 'syz.0.4761': attribute type 17 has an invalid length. [ 450.712568][T23398] bridge0: port 3(gretap0) entered disabled state [ 450.849589][T23406] tipc: New replicast peer: 255.255.255.255 [ 450.860827][T23406] tipc: Enabled bearer , priority 10 [ 450.887288][T23405] tunl0: left promiscuous mode [ 450.899628][T23408] __nla_validate_parse: 7 callbacks suppressed [ 450.899644][T23408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4760'. [ 450.902458][T23405] bridge0: port 3(gretap0) entered blocking state [ 450.921305][T23405] bridge0: port 3(gretap0) entered forwarding state [ 451.016786][T23405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.033176][ T5875] syz_tun: tun_net_xmit 110 [ 451.093059][T23417] bond3: entered allmulticast mode [ 451.459033][ T8395] syz_tun: tun_net_xmit 110 [ 451.513693][T23428] can: request_module (can-proto-5) failed. [ 451.585797][T23443] netlink: 'syz.0.4772': attribute type 5 has an invalid length. [ 451.774703][ T5830] block nbd5: Receive control failed (result -107) [ 451.799383][T23450] nbd5: detected capacity change from 0 to 127 [ 451.824148][T23455] netlink: 'syz.0.4776': attribute type 2 has an invalid length. [ 451.846232][T21692] block nbd5: Dead connection, failed to find a fallback [ 451.879392][T21692] block nbd5: shutting down sockets [ 451.908371][T21692] blk_print_req_error: 138 callbacks suppressed [ 451.908387][T21692] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 451.954915][T21692] buffer_io_error: 138 callbacks suppressed [ 451.954931][T21692] Buffer I/O error on dev nbd5, logical block 0, async page read [ 451.986516][T23465] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4778'. [ 452.017128][T21692] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.035644][T21692] Buffer I/O error on dev nbd5, logical block 1, async page read [ 452.043856][T23465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4778'. [ 452.054529][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4780'. [ 452.062942][T21692] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.066242][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'. [ 452.082541][T21692] Buffer I/O error on dev nbd5, logical block 2, async page read [ 452.147141][T21692] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.162625][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4782'. [ 452.171810][T21692] Buffer I/O error on dev nbd5, logical block 3, async page read [ 452.247722][T21692] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.288466][T21692] Buffer I/O error on dev nbd5, logical block 0, async page read [ 452.303172][T23478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4784'. [ 452.318377][T21692] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.336218][T21692] Buffer I/O error on dev nbd5, logical block 1, async page read [ 452.397416][T21692] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.424577][T21692] Buffer I/O error on dev nbd5, logical block 2, async page read [ 452.461064][T21692] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.494384][T21692] Buffer I/O error on dev nbd5, logical block 3, async page read [ 452.516739][T21692] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.567104][T21692] Buffer I/O error on dev nbd5, logical block 0, async page read [ 452.591269][T21692] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.660846][T21692] Buffer I/O error on dev nbd5, logical block 1, async page read [ 452.706254][T21692] ldm_validate_partition_table(): Disk read failed. [ 452.739733][T21692] Dev nbd5: unable to read RDB block 0 [ 452.760254][T21692] nbd5: unable to read partition table [ 452.795215][T21692] ldm_validate_partition_table(): Disk read failed. [ 452.816666][T21692] Dev nbd5: unable to read RDB block 0 [ 452.836679][T21692] nbd5: unable to read partition table [ 453.634448][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4811'. [ 453.951720][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4816'. [ 454.383588][T23614] netlink: 'syz.4.4823': attribute type 7 has an invalid length. [ 454.485164][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 455.004928][T23641] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 455.272566][T23655] netlink: 'syz.1.4837': attribute type 1 has an invalid length. [ 455.353648][T23655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.366894][T23655] netlink: 'syz.1.4837': attribute type 1 has an invalid length. [ 455.389409][T23655] netlink: 'syz.1.4837': attribute type 2 has an invalid length. [ 455.421956][T23665] xt_HMARK: spi-set and port-set can't be combined [ 455.670205][T23681] syzkaller0: entered promiscuous mode [ 455.680248][T23681] syzkaller0: entered allmulticast mode [ 455.918148][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 455.926237][ C0] lec:lec_tx_timeout: lec0 [ 455.932463][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.941253][T23692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.041398][T23699] sctp: [Deprecated]: syz.1.4850 (pid 23699) Use of int in max_burst socket option. [ 456.041398][T23699] Use struct sctp_assoc_value instead [ 456.317183][T23715] __nla_validate_parse: 9 callbacks suppressed [ 456.317200][T23715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4854'. [ 456.334719][T23715] bridge0: port 3(gretap0) entered disabled state [ 456.350477][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 456.514496][T23725] lo: Caught tx_queue_len zero misconfig [ 456.725302][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4863'. [ 456.744938][T23747] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4862'. [ 456.796037][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 456.841944][T23750] openvswitch: netlink: IP tunnel dst address not specified [ 456.945788][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 457.001953][T23757] syzkaller0: entered promiscuous mode [ 457.019973][T23757] syzkaller0: entered allmulticast mode [ 457.051697][T23763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4869'. [ 457.104442][T23769] bond5: option miimon: invalid value (18446744073709551585) [ 457.115143][T23769] bond5: option miimon: allowed values 0 - 2147483647 [ 457.125103][T23769] bond5 (unregistering): Released all slaves [ 457.139349][T23779] netlink: 'syz.3.4869': attribute type 1 has an invalid length. [ 457.306331][T23779] 8021q: adding VLAN 0 to HW filter on device bond11 [ 457.322247][T14439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.330793][T14439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.339983][T22966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.355345][T23763] macvlan4: entered promiscuous mode [ 457.360756][T23763] macvlan4: entered allmulticast mode [ 457.379038][T22966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.533982][T23801] tipc: Started in network mode [ 457.568059][T23801] tipc: Node identity 2e1022a13b6b, cluster identity 4711 [ 457.604157][T23801] tipc: Enabled bearer , priority 0 [ 457.623067][T23797] syzkaller0: entered promiscuous mode [ 457.630218][T23797] syzkaller0: entered allmulticast mode [ 457.696485][T23816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.716760][T23812] lo: left promiscuous mode [ 457.729134][T23812] tunl0: left promiscuous mode [ 457.734821][T23812] gre0: left promiscuous mode [ 457.753347][T23812] ip_vti0: left promiscuous mode [ 457.774875][T23812] bridge0: port 3(syz_tun) entered blocking state [ 457.779528][T22966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.781431][T23812] bridge0: port 3(syz_tun) entered forwarding state [ 457.796674][T23812] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.803876][T23812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.822088][T23812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.913651][T23801] tipc: Disabling bearer [ 457.964889][T23833] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 458.011456][T23835] netlink: 'syz.2.4887': attribute type 1 has an invalid length. [ 458.040730][T23835] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4887'. [ 458.060451][T23835] netlink: 'syz.2.4887': attribute type 1 has an invalid length. [ 458.079652][T23835] netlink: 'syz.2.4887': attribute type 8 has an invalid length. [ 458.098631][T23835] netlink: 606 bytes leftover after parsing attributes in process `syz.2.4887'. [ 458.121236][T23835] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4887'. [ 458.182564][T23848] netlink: 'syz.3.4892': attribute type 2 has an invalid length. [ 458.191670][T23848] netlink: 'syz.3.4892': attribute type 2 has an invalid length. [ 458.901605][T23864] Cannot find map_set index 65533 as target [ 459.504394][T23901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.071197][T23912] sctp: [Deprecated]: syz.1.4911 (pid 23912) Use of int in max_burst socket option. [ 460.071197][T23912] Use struct sctp_assoc_value instead [ 460.894105][T23927] ip6tnl0: Caught tx_queue_len zero misconfig [ 460.958134][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 460.966195][ C0] lec:lec_tx_timeout: lec0 [ 460.971880][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.976195][T23934] netlink: 'syz.4.4918': attribute type 16 has an invalid length. [ 461.004625][T23934] netlink: 'syz.4.4918': attribute type 17 has an invalid length. [ 461.084690][T23934] bridge0: port 3(syz_tun) entered disabled state [ 461.160089][T23934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.475693][T23964] __nla_validate_parse: 5 callbacks suppressed [ 461.475712][T23964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4923'. [ 461.758241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.237741][T23992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4930'. [ 463.392117][T24009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4936'. [ 463.579506][T24018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4939'. [ 463.588913][T24024] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.602669][T24025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.608553][T24024] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 463.619498][T24018] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4939'. [ 463.663745][T24024] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 463.800215][T24044] netlink: 'syz.1.4945': attribute type 1 has an invalid length. [ 463.812731][T24044] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.4945'. [ 463.843832][T24044] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4945'. [ 463.916161][T24044] netlink: 'syz.1.4945': attribute type 1 has an invalid length. [ 463.983446][T24044] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.4945'. [ 464.014881][T24044] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4945'. [ 464.364808][T24077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4953'. [ 464.381425][T24077] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 464.564765][T24094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.056466][T24097] batman_adv: batadv0: Interface deactivated: dummy0 [ 465.690243][T24097] veth0_macvtap: left allmulticast mode [ 465.864554][T14439] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.898731][T14439] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.928718][T14439] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.938048][T14439] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.013160][T14439] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.041080][T14439] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.055599][T14439] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.058407][T24150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.073681][T14439] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.082961][T24151] netlink: 'syz.4.4974': attribute type 29 has an invalid length. [ 466.083806][T24151] netlink: 'syz.4.4974': attribute type 29 has an invalid length. [ 466.259554][T24152] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.302082][T24167] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.313923][T24167] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 466.322781][T24167] gretap1: entered promiscuous mode [ 466.330600][T24167] gretap1: entered allmulticast mode [ 466.523378][T24183] __nla_validate_parse: 9 callbacks suppressed [ 466.523399][T24183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4981'. [ 466.534277][T24179] xt_hashlimit: size too large, truncated to 1048576 [ 466.575810][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'. [ 466.798208][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 466.806243][ C0] lec:lec_tx_timeout: lec0 [ 466.818707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 466.963457][T24211] netlink: 'syz.1.4985': attribute type 3 has an invalid length. [ 466.989860][T24211] netlink: 'syz.1.4985': attribute type 1 has an invalid length. [ 467.007892][T24211] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4985'. [ 467.034487][T24207] netlink: 'syz.3.4983': attribute type 24 has an invalid length. [ 467.083287][T24215] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4984'. [ 467.398856][T24229] netlink: 'syz.2.4988': attribute type 2 has an invalid length. [ 467.711538][T24247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4993'. [ 467.885600][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 468.107105][T24269] x_tables: duplicate underflow at hook 1 [ 468.265959][T24279] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5004'. [ 468.410874][T24292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.542734][T24294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5010'. [ 468.667542][T24300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 468.677803][T24300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 469.304545][T24324] bond0: Caught tx_queue_len zero misconfig [ 469.371263][T24323] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.472296][T24330] xt_hashlimit: invalid interval [ 469.535451][T24334] syzkaller1: entered promiscuous mode [ 469.549052][T24334] syzkaller1: entered allmulticast mode [ 469.755844][T24349] tipc: Started in network mode [ 469.784252][T24349] tipc: Node identity ac14140f, cluster identity 4711 [ 469.811896][T24349] tipc: New replicast peer: 255.255.255.255 [ 469.830195][T24349] tipc: Enabled bearer , priority 10 [ 469.843542][T24347] netlink: 'syz.4.5025': attribute type 2 has an invalid length. [ 470.223029][T24370] syzkaller0: entered promiscuous mode [ 470.230113][T24370] syzkaller0: entered allmulticast mode [ 470.286502][T24379] netlink: 'syz.1.5036': attribute type 29 has an invalid length. [ 470.328019][T24384] netlink: 'syz.1.5036': attribute type 29 has an invalid length. [ 470.361197][T24385] bond0: Caught tx_queue_len zero misconfig [ 470.638602][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.955979][ T5875] tipc: Node number set to 2886997007 [ 471.069916][T24418] syzkaller0: entered promiscuous mode [ 471.086341][T24418] syzkaller0: entered allmulticast mode [ 471.255132][T24430] xt_connbytes: Forcing CT accounting to be enabled [ 471.680175][T24459] __nla_validate_parse: 10 callbacks suppressed [ 471.680196][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5059'. [ 471.710710][T24459] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5059'. [ 471.828110][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 471.836196][ C0] lec:lec_tx_timeout: lec0 [ 471.841648][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.851938][T24473] netlink: 'syz.3.5062': attribute type 1 has an invalid length. [ 471.861935][T24473] netlink: 'syz.3.5062': attribute type 7 has an invalid length. [ 471.873489][T24473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5062'. [ 472.089497][T24491] ip6gre1: entered allmulticast mode [ 472.650865][T24531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5079'. [ 472.732129][T24530] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 472.762991][T24530] bond12 (unregistering): Released all slaves [ 472.836440][T24546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5084'. [ 472.869413][T24535] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 472.885158][T24535] bond12 (unregistering): Released all slaves [ 472.900436][T24551] netlink: 'syz.2.5086': attribute type 1 has an invalid length. [ 472.947296][T24551] bond4: entered promiscuous mode [ 472.978453][T24551] bond4: entered allmulticast mode [ 472.983964][T24551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.992621][T24546] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5084'. [ 473.076899][T24551] bridge4: entered promiscuous mode [ 473.092674][T24551] bridge4: entered allmulticast mode [ 473.112230][T24551] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 473.164094][T24551] bridge5: entered promiscuous mode [ 473.178844][T24551] bridge5: entered allmulticast mode [ 473.180308][T14440] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 473.240522][T24551] bond4: (slave bridge5): Enslaving as a backup interface with a down link [ 473.328736][T19599] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 473.342070][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'. [ 473.353082][T24575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5092'. [ 473.388964][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'. [ 473.410136][T24580] netlink: 'syz.4.5094': attribute type 1 has an invalid length. [ 473.429322][T24584] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5095'. [ 473.443386][T24584] netlink: Unknown conntrack attr (0) [ 473.496194][T24580] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.791745][T24599] netlink: 'syz.2.5097': attribute type 8 has an invalid length. [ 474.284891][T24615] erspan0: entered allmulticast mode [ 475.554990][T24675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.567679][T24675] vcan0: entered allmulticast mode [ 475.681010][T24686] openvswitch: netlink: IP tunnel TTL not specified. [ 476.014706][T24701] openvswitch: netlink: Flow key attr not present in new flow. [ 476.296776][T24712] netlink: 'syz.3.5134': attribute type 1 has an invalid length. [ 476.682970][T24748] netlink: 'syz.1.5144': attribute type 1 has an invalid length. [ 476.771491][T24748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.848565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 476.856620][ C0] lec:lec_tx_timeout: lec0 [ 476.861678][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 477.041644][T24773] __nla_validate_parse: 9 callbacks suppressed [ 477.041661][T24773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5149'. [ 477.110969][T24774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5149'. [ 477.136190][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5150'. [ 477.159609][T24782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.172843][T24780] xfrm0: entered promiscuous mode [ 477.177889][T24780] xfrm0: entered allmulticast mode [ 477.561908][T24790] syzkaller0: entered promiscuous mode [ 477.622040][T24790] syzkaller0: entered allmulticast mode [ 478.093542][T24837] netlink: 'syz.1.5166': attribute type 10 has an invalid length. [ 479.294060][T24823] C: renamed from lo (while UP) [ 479.300871][T24823] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 479.425589][T24845] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 479.457513][T24845] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5170'. [ 479.682264][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5173'. [ 479.973595][T24893] xt_l2tp: v2 doesn't support IP mode [ 480.063334][T24901] Cannot find add_set index 46338 as target [ 480.198005][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5190'. [ 480.242151][T24929] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5190'. [ 480.269217][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5191'. [ 480.473741][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 480.491189][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5192'. [ 480.527693][T24960] netlink: 'syz.1.5197': attribute type 1 has an invalid length. [ 480.537038][T24960] netlink: 'syz.1.5197': attribute type 2 has an invalid length. [ 480.739545][T24977] 8021q: VLANs not supported on ip6_vti0 [ 481.003590][T25001] syzkaller0: entered promiscuous mode [ 481.011602][T25001] syzkaller0: entered allmulticast mode [ 481.355662][T25024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.567262][T25028] syzkaller0: entered allmulticast mode [ 481.655316][T25028] pimreg: left allmulticast mode [ 481.868139][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.876235][ C0] lec:lec_tx_timeout: lec0 [ 481.881093][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 482.018030][T25052] netlink: 'syz.2.5222': attribute type 8 has an invalid length. [ 482.030916][T25052] netlink: 'syz.2.5222': attribute type 10 has an invalid length. [ 482.040782][T25051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.116838][T25057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.124505][T25057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.133843][T25057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.141676][T25057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.360571][T25066] x_tables: duplicate underflow at hook 1 [ 482.367950][T25064] netlink: 'syz.3.5226': attribute type 4 has an invalid length. [ 482.376307][T25064] __nla_validate_parse: 11 callbacks suppressed [ 482.376323][T25064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5226'. [ 482.540083][T25074] netlink: 'syz.4.5232': attribute type 2 has an invalid length. [ 482.582587][T25073] wireguard0: entered promiscuous mode [ 482.589051][T25073] wireguard0: entered allmulticast mode [ 482.601872][T25073] team0: Device wireguard0 is of different type [ 482.622658][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 482.635863][T25085] 8021q: VLANs not supported on gre0 [ 482.714093][T25085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5234'. [ 482.865716][T25099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5238'. [ 483.064061][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5242'. [ 483.094359][T25106] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 483.144191][T25106] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 483.586098][T25136] syzkaller0: entered promiscuous mode [ 483.594952][T25136] syzkaller0: entered allmulticast mode [ 483.627271][T25152] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5253'. [ 483.657074][T25152] netlink: 'syz.3.5253': attribute type 1 has an invalid length. [ 483.749832][T25160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5253'. [ 485.450547][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'. [ 485.607031][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5265'. [ 485.625005][T25214] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5268'. [ 486.888130][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.896174][ C0] lec:lec_tx_timeout: lec0 [ 486.901095][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 487.278299][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.908146][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 491.916173][ C0] lec:lec_tx_timeout: lec0 [ 491.920858][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 496.928773][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 496.936805][ C0] lec:lec_tx_timeout: lec0 [ 496.941599][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.362115][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.948204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 501.956230][ C0] lec:lec_tx_timeout: lec0 [ 501.961482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.968790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 506.976841][ C0] lec:lec_tx_timeout: lec0 [ 506.981382][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.878114][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5900 ms [ 512.886250][ C0] lec:lec_tx_timeout: lec0 [ 512.892035][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 517.898434][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 517.906457][ C0] lec:lec_tx_timeout: lec0 [ 517.910995][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 520.558280][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.918269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.926308][ C0] lec:lec_tx_timeout: lec0 [ 522.931473][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.938741][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.946746][ C0] lec:lec_tx_timeout: lec0 [ 527.951356][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.959133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.967168][ C0] lec:lec_tx_timeout: lec0 [ 532.971926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 538.798170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 538.806194][ C0] lec:lec_tx_timeout: lec0 [ 538.811816][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 543.818093][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 543.826119][ C0] lec:lec_tx_timeout: lec0 [ 543.831215][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 548.848647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 548.856687][ C0] lec:lec_tx_timeout: lec0 [ 548.861560][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.024909][T25252] netlink: 'syz.0.5271': attribute type 1 has an invalid length. [ 549.034948][T25252] __nla_validate_parse: 1 callbacks suppressed [ 549.034962][T25252] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5271'. [ 549.079675][T25259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5274'. [ 549.305483][T25276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.501517][T25271] netlink: 'syz.1.5278': attribute type 1 has an invalid length. [ 549.510011][T25271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5278'. [ 549.532607][T25291] veth13: entered allmulticast mode [ 549.566876][T25291] pim6reg527: entered allmulticast mode [ 549.691082][T25304] netlink: 'syz.2.5285': attribute type 1 has an invalid length. [ 549.721649][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5285'. [ 549.747112][T25307] syzkaller0: entered promiscuous mode [ 549.757916][T25307] syzkaller0: entered allmulticast mode [ 550.051538][T25335] netlink: 'syz.0.5292': attribute type 1 has an invalid length. [ 550.106383][T25335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.141447][T25339] bond4: (slave geneve2): making interface the new active one [ 550.170614][T25339] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 550.184751][T25341] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5291'. [ 550.201931][T24936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.221350][T24936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.238268][T24939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.247073][T24939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.290100][T25350] netlink: 'syz.2.5296': attribute type 21 has an invalid length. [ 550.314633][T25350] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.424582][T25356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5298'. [ 550.486016][T25362] netlink: 'syz.2.5300': attribute type 18 has an invalid length. [ 550.510855][T25362] netlink: 'syz.2.5300': attribute type 18 has an invalid length. [ 550.510983][T24939] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.533032][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5301'. [ 550.550393][T24939] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.564600][T25364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5301'. [ 550.763124][T24939] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.789015][T24939] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.807219][T25368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5303'. [ 550.807386][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5301'. [ 551.305610][T25428] xt_cgroup: invalid path, errno=-2 [ 551.330286][T25429] netlink: 'syz.0.5318': attribute type 1 has an invalid length. [ 551.362516][T25429] netlink: 'syz.0.5318': attribute type 1 has an invalid length. [ 551.389885][T25429] netlink: 'syz.0.5318': attribute type 8 has an invalid length. [ 552.564724][T25514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.854862][T25535] bond7 (unregistering): Released all slaves [ 553.245859][T25551] [ 553.248231][T25551] ====================================================== [ 553.255261][T25551] WARNING: possible circular locking dependency detected [ 553.262290][T25551] syzkaller #0 Not tainted [ 553.266704][T25551] ------------------------------------------------------ [ 553.273724][T25551] syz.0.5355/25551 is trying to acquire lock: [ 553.279792][T25551] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 553.288958][T25551] [ 553.288958][T25551] but task is already holding lock: [ 553.296327][T25551] ffff88813fe3ccc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 553.305876][T25551] [ 553.305876][T25551] which lock already depends on the new lock. [ 553.305876][T25551] [ 553.316282][T25551] [ 553.316282][T25551] the existing dependency chain (in reverse order) is: [ 553.325294][T25551] [ 553.325294][T25551] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 553.332954][T25551] __might_fault+0xcb/0x130 [ 553.337989][T25551] _copy_from_iter+0x100/0x1670 [ 553.343378][T25551] tcp_sendmsg_locked+0x2151/0x5490 [ 553.349121][T25551] tcp_sendmsg+0x2f/0x50 [ 553.353888][T25551] sock_write_iter+0x406/0x4f0 [ 553.359169][T25551] vfs_write+0x61d/0xb90 [ 553.363923][T25551] ksys_write+0x150/0x270 [ 553.368761][T25551] do_syscall_64+0x14d/0xf80 [ 553.373864][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.380264][T25551] [ 553.380264][T25551] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 553.387901][T25551] lock_sock_nested+0x48/0x100 [ 553.393174][T25551] inet_shutdown+0x6a/0x390 [ 553.398201][T25551] nbd_mark_nsock_dead+0x2e9/0x560 [ 553.403829][T25551] recv_work+0x1c7f/0x1d90 [ 553.408757][T25551] process_scheduled_works+0xb6e/0x18c0 [ 553.414816][T25551] worker_thread+0xa53/0xfc0 [ 553.419918][T25551] kthread+0x388/0x470 [ 553.424495][T25551] ret_from_fork+0x51e/0xb90 [ 553.429593][T25551] ret_from_fork_asm+0x1a/0x30 [ 553.434875][T25551] [ 553.434875][T25551] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 553.442518][T25551] __mutex_lock+0x19f/0x1300 [ 553.447630][T25551] nbd_queue_rq+0x37b/0x1100 [ 553.452736][T25551] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 553.458801][T25551] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 553.465649][T25551] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 553.472140][T25551] blk_mq_run_hw_queue+0x348/0x4f0 [ 553.477760][T25551] blk_mq_dispatch_list+0xd16/0xe10 [ 553.483474][T25551] blk_mq_flush_plug_list+0x48d/0x570 [ 553.489361][T25551] __blk_flush_plug+0x3ed/0x4d0 [ 553.494736][T25551] __submit_bio+0x28d/0x580 [ 553.499749][T25551] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 553.505890][T25551] block_read_full_folio+0x599/0x830 [ 553.511689][T25551] filemap_read_folio+0x137/0x3b0 [ 553.517237][T25551] do_read_cache_folio+0x358/0x590 [ 553.522998][T25551] read_part_sector+0xb6/0x2b0 [ 553.528487][T25551] adfspart_check_ICS+0xa5/0xa40 [ 553.533935][T25551] bdev_disk_changed+0x7ba/0x1550 [ 553.539476][T25551] blkdev_get_whole+0x380/0x510 [ 553.544851][T25551] bdev_open+0x31e/0xd30 [ 553.549611][T25551] blkdev_open+0x470/0x610 [ 553.554555][T25551] do_dentry_open+0x785/0x14e0 [ 553.559836][T25551] vfs_open+0x3b/0x340 [ 553.564427][T25551] path_openat+0x2e08/0x3860 [ 553.569529][T25551] do_file_open+0x23e/0x4a0 [ 553.574554][T25551] do_sys_openat2+0x113/0x200 [ 553.579754][T25551] __x64_sys_openat+0x138/0x170 [ 553.585122][T25551] do_syscall_64+0x14d/0xf80 [ 553.590231][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.596641][T25551] [ 553.596641][T25551] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 553.603858][T25551] __mutex_lock+0x19f/0x1300 [ 553.608971][T25551] nbd_queue_rq+0xc6/0x1100 [ 553.613987][T25551] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 553.620045][T25551] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 553.626888][T25551] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 553.633468][T25551] blk_mq_run_hw_queue+0x348/0x4f0 [ 553.639095][T25551] blk_mq_dispatch_list+0xd16/0xe10 [ 553.644809][T25551] blk_mq_flush_plug_list+0x48d/0x570 [ 553.650694][T25551] __blk_flush_plug+0x3ed/0x4d0 [ 553.656057][T25551] __submit_bio+0x28d/0x580 [ 553.661077][T25551] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 553.667219][T25551] block_read_full_folio+0x599/0x830 [ 553.673020][T25551] filemap_read_folio+0x137/0x3b0 [ 553.678551][T25551] do_read_cache_folio+0x358/0x590 [ 553.684174][T25551] read_part_sector+0xb6/0x2b0 [ 553.689447][T25551] adfspart_check_ICS+0xa5/0xa40 [ 553.694900][T25551] bdev_disk_changed+0x7ba/0x1550 [ 553.700452][T25551] blkdev_get_whole+0x380/0x510 [ 553.705814][T25551] bdev_open+0x31e/0xd30 [ 553.710564][T25551] blkdev_open+0x470/0x610 [ 553.715493][T25551] do_dentry_open+0x785/0x14e0 [ 553.720767][T25551] vfs_open+0x3b/0x340 [ 553.725344][T25551] path_openat+0x2e08/0x3860 [ 553.730446][T25551] do_file_open+0x23e/0x4a0 [ 553.735457][T25551] do_sys_openat2+0x113/0x200 [ 553.740649][T25551] __x64_sys_openat+0x138/0x170 [ 553.746018][T25551] do_syscall_64+0x14d/0xf80 [ 553.751123][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.757522][T25551] [ 553.757522][T25551] -> #3 (set->srcu){.+.+}-{0:0}: [ 553.764634][T25551] __synchronize_srcu+0xca/0x300 [ 553.770081][T25551] elevator_switch+0x1e8/0x7a0 [ 553.775352][T25551] elevator_change+0x2cc/0x450 [ 553.780628][T25551] elevator_set_default+0x36c/0x430 [ 553.786332][T25551] blk_register_queue+0x366/0x430 [ 553.791872][T25551] __add_disk+0x677/0xd50 [ 553.796719][T25551] add_disk_fwnode+0xfb/0x480 [ 553.801909][T25551] nbd_dev_add+0x72c/0xb50 [ 553.806836][T25551] nbd_init+0x168/0x1f0 [ 553.811505][T25551] do_one_initcall+0x250/0x8d0 [ 553.816799][T25551] do_initcall_level+0x104/0x190 [ 553.822254][T25551] do_initcalls+0x59/0xa0 [ 553.827093][T25551] kernel_init_freeable+0x2a6/0x3e0 [ 553.832801][T25551] kernel_init+0x1d/0x1d0 [ 553.837638][T25551] ret_from_fork+0x51e/0xb90 [ 553.842737][T25551] ret_from_fork_asm+0x1a/0x30 [ 553.848026][T25551] [ 553.848026][T25551] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 553.855841][T25551] __mutex_lock+0x19f/0x1300 [ 553.860943][T25551] elevator_change+0x1b3/0x450 [ 553.866214][T25551] elevator_set_none+0xb5/0x140 [ 553.871574][T25551] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 553.877896][T25551] nbd_start_device+0x17f/0xb10 [ 553.883256][T25551] nbd_genl_connect+0x165b/0x1cf0 [ 553.888568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 553.888785][T25551] genl_family_rcv_msg_doit+0x22a/0x330 [ 553.896747][ C0] lec:lec_tx_timeout: lec0 [ 553.902784][T25551] genl_rcv_msg+0x61c/0x7a0 [ 553.902806][T25551] netlink_rcv_skb+0x232/0x4b0 [ 553.902824][T25551] genl_rcv+0x28/0x40 [ 553.908086][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 553.912213][T25551] netlink_unicast+0x80f/0x9b0 [ 553.933070][T25551] netlink_sendmsg+0x813/0xb40 [ 553.938344][T25551] ____sys_sendmsg+0x972/0x9f0 [ 553.943633][T25551] ___sys_sendmsg+0x2a5/0x360 [ 553.948822][T25551] __x64_sys_sendmsg+0x1bd/0x2a0 [ 553.954273][T25551] do_syscall_64+0x14d/0xf80 [ 553.959376][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.965773][T25551] [ 553.965773][T25551] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 553.974365][T25551] blk_alloc_queue+0x546/0x680 [ 553.979638][T25551] __blk_mq_alloc_disk+0x197/0x390 [ 553.985260][T25551] nbd_dev_add+0x499/0xb50 [ 553.990184][T25551] nbd_init+0x168/0x1f0 [ 553.994856][T25551] do_one_initcall+0x250/0x8d0 [ 554.000132][T25551] do_initcall_level+0x104/0x190 [ 554.005585][T25551] do_initcalls+0x59/0xa0 [ 554.010421][T25551] kernel_init_freeable+0x2a6/0x3e0 [ 554.016125][T25551] kernel_init+0x1d/0x1d0 [ 554.020965][T25551] ret_from_fork+0x51e/0xb90 [ 554.026065][T25551] ret_from_fork_asm+0x1a/0x30 [ 554.031345][T25551] [ 554.031345][T25551] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 554.038543][T25551] __lock_acquire+0x15a5/0x2cf0 [ 554.043918][T25551] lock_acquire+0xf0/0x2e0 [ 554.048842][T25551] fs_reclaim_acquire+0x71/0x100 [ 554.054287][T25551] prepare_alloc_pages+0x152/0x650 [ 554.059909][T25551] __alloc_frozen_pages_noprof+0x12f/0x380 [ 554.066225][T25551] alloc_pages_mpol+0x232/0x4a0 [ 554.071587][T25551] alloc_pages_noprof+0xa8/0x1a0 [ 554.077036][T25551] pte_alloc_one+0x22/0x370 [ 554.082052][T25551] do_pte_missing+0x12c2/0x3490 [ 554.087412][T25551] handle_mm_fault+0x1bec/0x3310 [ 554.092864][T25551] do_user_addr_fault+0x75b/0x1340 [ 554.098495][T25551] exc_page_fault+0x6a/0xc0 [ 554.103513][T25551] asm_exc_page_fault+0x26/0x30 [ 554.108871][T25551] rep_movs_alternative+0xf/0x90 [ 554.114313][T25551] _copy_from_user+0x7a/0xb0 [ 554.119413][T25551] copy_from_sockptr+0x48/0x70 [ 554.124682][T25551] ip_mroute_setsockopt+0x4a8/0xff0 [ 554.130386][T25551] do_ip_setsockopt+0xf1e/0x2ea0 [ 554.135836][T25551] ip_setsockopt+0x66/0x110 [ 554.140851][T25551] do_sock_setsockopt+0x17c/0x1b0 [ 554.146391][T25551] __x64_sys_setsockopt+0x13d/0x1b0 [ 554.152104][T25551] do_syscall_64+0x14d/0xf80 [ 554.157213][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.163620][T25551] [ 554.163620][T25551] other info that might help us debug this: [ 554.163620][T25551] [ 554.173830][T25551] Chain exists of: [ 554.173830][T25551] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 554.173830][T25551] [ 554.186332][T25551] Possible unsafe locking scenario: [ 554.186332][T25551] [ 554.193766][T25551] CPU0 CPU1 [ 554.199118][T25551] ---- ---- [ 554.204467][T25551] rlock(&mm->mmap_lock); [ 554.208873][T25551] lock(sk_lock-AF_INET); [ 554.215797][T25551] lock(&mm->mmap_lock); [ 554.222631][T25551] lock(fs_reclaim); [ 554.226598][T25551] [ 554.226598][T25551] *** DEADLOCK *** [ 554.226598][T25551] [ 554.234723][T25551] 2 locks held by syz.0.5355/25551: [ 554.239902][T25551] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x12e/0xff0 [ 554.249557][T25551] #1: ffff88813fe3ccc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 554.259463][T25551] [ 554.259463][T25551] stack backtrace: [ 554.265347][T25551] CPU: 1 UID: 0 PID: 25551 Comm: syz.0.5355 Not tainted syzkaller #0 PREEMPT(full) [ 554.265365][T25551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 554.265378][T25551] Call Trace: [ 554.265384][T25551] [ 554.265393][T25551] dump_stack_lvl+0xe8/0x150 [ 554.265414][T25551] print_circular_bug+0x2e1/0x300 [ 554.265439][T25551] check_noncircular+0x12e/0x150 [ 554.265464][T25551] __lock_acquire+0x15a5/0x2cf0 [ 554.265485][T25551] ? __lock_acquire+0x6b5/0x2cf0 [ 554.265506][T25551] ? __lock_acquire+0x6b5/0x2cf0 [ 554.265525][T25551] ? __lock_acquire+0x6b5/0x2cf0 [ 554.265551][T25551] lock_acquire+0xf0/0x2e0 [ 554.265569][T25551] ? prepare_alloc_pages+0x152/0x650 [ 554.265588][T25551] ? unwind_next_frame+0xa5/0x23c0 [ 554.265612][T25551] fs_reclaim_acquire+0x71/0x100 [ 554.265630][T25551] ? prepare_alloc_pages+0x152/0x650 [ 554.265647][T25551] prepare_alloc_pages+0x152/0x650 [ 554.265668][T25551] __alloc_frozen_pages_noprof+0x12f/0x380 [ 554.265690][T25551] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 554.265710][T25551] ? __pfx_policy_nodemask+0x10/0x10 [ 554.265731][T25551] ? update_load_avg+0x1b0/0x1ec0 [ 554.265750][T25551] alloc_pages_mpol+0x232/0x4a0 [ 554.265771][T25551] alloc_pages_noprof+0xa8/0x1a0 [ 554.265791][T25551] pte_alloc_one+0x22/0x370 [ 554.265814][T25551] do_pte_missing+0x12c2/0x3490 [ 554.265837][T25551] handle_mm_fault+0x1bec/0x3310 [ 554.265865][T25551] ? handle_mm_fault+0xee/0x3310 [ 554.265890][T25551] ? __pfx_handle_mm_fault+0x10/0x10 [ 554.265920][T25551] ? lock_mm_and_find_vma+0xa7/0x340 [ 554.265937][T25551] do_user_addr_fault+0x75b/0x1340 [ 554.265963][T25551] exc_page_fault+0x6a/0xc0 [ 554.265984][T25551] asm_exc_page_fault+0x26/0x30 [ 554.266001][T25551] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 554.266019][T25551] Code: c4 10 e9 94 48 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 554.266034][T25551] RSP: 0018:ffffc900033b7ab0 EFLAGS: 00050202 [ 554.266047][T25551] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 554.266058][T25551] RDX: 0000000000000001 RSI: 0000200000000480 RDI: ffffc900033b7c10 [ 554.266069][T25551] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 554.266078][T25551] R10: dffffc0000000000 R11: fffff52000676f82 R12: ffff88804337c000 [ 554.266089][T25551] R13: dffffc0000000000 R14: ffffc900033b7c10 R15: 0000200000000480 [ 554.266107][T25551] _copy_from_user+0x7a/0xb0 [ 554.266126][T25551] copy_from_sockptr+0x48/0x70 [ 554.266143][T25551] ip_mroute_setsockopt+0x4a8/0xff0 [ 554.266163][T25551] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 554.266188][T25551] do_ip_setsockopt+0xf1e/0x2ea0 [ 554.266213][T25551] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 554.266235][T25551] ? aa_sk_perm+0x6d5/0x900 [ 554.266260][T25551] ? __pfx_aa_sk_perm+0x10/0x10 [ 554.266281][T25551] ? __fget_files+0x2a/0x420 [ 554.266294][T25551] ? aa_sock_opt_perm+0xff/0x1a0 [ 554.266309][T25551] ip_setsockopt+0x66/0x110 [ 554.266330][T25551] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 554.266347][T25551] do_sock_setsockopt+0x17c/0x1b0 [ 554.266368][T25551] __x64_sys_setsockopt+0x13d/0x1b0 [ 554.266389][T25551] do_syscall_64+0x14d/0xf80 [ 554.266410][T25551] ? trace_irq_disable+0x3b/0x150 [ 554.266423][T25551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.266438][T25551] ? clear_bhb_loop+0x40/0x90 [ 554.266455][T25551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.266469][T25551] RIP: 0033:0x7f6bc4f9c819 [ 554.266484][T25551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.266497][T25551] RSP: 002b:00007f6bc5de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.266512][T25551] RAX: ffffffffffffffda RBX: 00007f6bc5215fa0 RCX: 00007f6bc4f9c819 [ 554.266522][T25551] RDX: 00000000000000d1 RSI: 0000000000000000 RDI: 0000000000000005 [ 554.266531][T25551] RBP: 00007f6bc5032c91 R08: 0000000000000004 R09: 0000000000000000 [ 554.266546][T25551] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 554.266556][T25551] R13: 00007f6bc5216038 R14: 00007f6bc5215fa0 R15: 00007ffceceed118 [ 554.266574][T25551] [ 558.898620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 558.906733][ C0] lec:lec_tx_timeout: lec0 [ 558.911233][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.800547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22