last executing test programs: 9.493181574s ago: executing program 4 (id=2701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x20000890) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 9.492289898s ago: executing program 1 (id=2702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000100007b8af8ff0000ebffbea200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) sendmmsg$inet(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002680)='y', 0x1}], 0x1}}], 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x8, 0xffff, 0x65, @loopback, @mcast1, 0x20, 0x700, 0xb8, 0x7}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8001, 0x6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x40080) close(0x3) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x15, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0xb0abc2ec80b84c55, 0x10, {0x0, 0xea60}, {0x0, 0xea60}, {0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "52ddfb8fdb7e392e"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="a9ad84164dba808e989fd68875266520b3b04ddeb30bf1c3804842017e01de46c83623b55859d54beb66a52ae8069ff26d91eb7e551e077f5162511777934edc25d652f315d422ace4c0151c1de777d14ecf02002e614b1f40"], 0x40}}, 0x48010) 7.943394186s ago: executing program 2 (id=2706): socket$nl_route(0x10, 0x3, 0x0) close(0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a00008030144e5de9154f75c1eb31395d5db9b9e0dc77d548e23e2a246d9cefe85917d993e7c4466ad12b944d71a950568d64a8db99a0307b18647d4f18ac0c4e6d89b10ae88a3e362afad339f3d24a56d03525e322d734cbb7c9599e82849ae64980463693c6aca15b68c8974065446e92e7a238d17a7102270842", @ANYRES32=r0, @ANYRESDEC=r3], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x78, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfc55}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x28}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 6.407110591s ago: executing program 4 (id=2709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f0000000080)='#\x00', 0x12000, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x7]}, {0x95c2, 0xfffd, 0x5, 0xeddc}}, 0xffffff91, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2c}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x32, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1e, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed300000000e5004041006232a5ff8a27"}}}}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r1, &(0x7f0000000080)='#\x00', 0x12000, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x7]}, {0x95c2, 0xfffd, 0x5, 0xeddc}}, 0xffffff91, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) (async) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) (async) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2c}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x32, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1e, 0x0, @gue={{0x1, 0x0, 0x0, 0xff, 0x100, @void}, "b68ed300000000e5004041006232a5ff8a27"}}}}, 0x40) (async) 6.355246876s ago: executing program 0 (id=2710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x3, 0x0, 0x5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18113d195ff7dc5c4040510000", @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009", 0x29}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x9, 0xb3a, 0x12, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7800, 0x10, 0x7, 0x8000}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc14b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x1f, &(0x7f0000000400)=""/31, 0x41000, 0x68, '\x00', r7, 0x25, r0, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r0, r0, r9, r0, r0, r0], &(0x7f00000005c0)=[{0x0, 0x5, 0x10, 0xa}, {0x5, 0x5, 0xf, 0x3}], 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3400000010000108fdffffff0000000000000000", @ANYRES32=r10, @ANYBLOB="0000001af9db3bf593b7409d4c4a74566abbe4001080000014001af20a0002800c0001800800170101000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 5.613202155s ago: executing program 3 (id=2711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000001ff800000000000000e2004000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x3d24e2145c2ccc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e010100000000000000000100"], 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x21, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r0, r0, &(0x7f0000000000)=0x224a40000000000, 0x8) 4.991851599s ago: executing program 1 (id=2712): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) close(r2) (async) close(r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x40, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5817cd1317223ccff37e2f4d2e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44151}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x384, r0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0xa4, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x21, 0x0, @random="558d67017ea3f89f2674bdb8e76e4e9227071f020a3b9b8d162b5a7ddd"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x12, 0x0, @random="9da222d229f35e4949861a8a5f17"}, {0x14, 0x0, @random="cdfe190f8244e0fb278fa5b333d13eae"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x16b, 0x2a, [@supported_rates={0x1, 0x8, [{0x4}, {0x6, 0x1}, {0x2, 0x1}, {0x30}, {0x48}, {0x12}, {0x30}, {0x3}]}, @fast_bss_trans={0x37, 0xed, {0x72, 0x8, "190f92c26c961beddc1fe93080bc3421", "4b336a2258dc4e9269339219c246284ebb6848cd2b0ca496ca867773e4298370", "5a971a0e41e3f86c45f3b86622e04dabc9e0b53324ea8487e61249230f637d28", [{0x3, 0x10, "6d46617fc02f6eb9bc28119ec0bb86db"}, {0x3, 0xd, "9de4802d262a5dfa6d0132ccfe"}, {0x3}, {0x0, 0x13, "76fcdbd984d4fa9a6f3ffcfc82a617eaa78fed"}, {0x3, 0xd, "12bd843feef531ab31a737cd00"}, {0x1, 0x23, "48d2f1d8fa21984dc83bf4b05740b1acaf4545c45f4ac7cc0250f5ef3a8a41a5bfdb6c"}, {0x3, 0x1e, "7088680c44f04cdd35812a57fa291dfbe9a306d2ceeb0df6b12e2626d024"}, {0x2, 0xd, "61adf47a912aa870c0bdd894be"}]}}, @link_id={0x65, 0x12, {@random="be1b14a9fdf2", @broadcast, @device_b}}, @random_vendor={0xdd, 0x34, "28e75de73760a78842fb6a7f7031d9c922764b6589396ffa42ff2cb7b6b447f242b2b8d46189150a7e2fc57a0dd94186b1c675b3"}, @challenge={0x10, 0x1, 0xc7}, @random={0x9c, 0x1f, "5470805f2522c5a1e56f297edbfbe1655fb3b682a4335ebdd6a5bdcbf8880b"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mesh_id={0x72, 0x6}, @preq={0x82, 0x67, {{0x1, 0x1}, 0x7, 0x4, 0x7fff, @device_b, 0x6f8f, @void, 0xf, 0x8, 0x7, [{{}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @broadcast, 0x80}, {{0x0, 0x0, 0x1}, @broadcast, 0x60d8}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @broadcast, 0x81}, {{0x1, 0x0, 0x1}, @device_a, 0x8001}]}}, @ibss={0x6, 0x2, 0x200}, @challenge={0x10, 0x1, 0xd}, @preq={0x82, 0x62, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x2, 0x30, 0x7a, @device_b, 0x7, @value=@broadcast, 0x9, 0x9, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x74}, {{0x1}, @broadcast, 0x1800000}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1}, @broadcast}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xac1, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e4, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf545}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3c}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7651}]}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x349}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeba09c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf80}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000004}, 0x8880) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x84a00, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000004, 0x11, r8, 0xe6caa000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0) 4.452822572s ago: executing program 0 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="266ce8f78f6db5066e0a843041bbca9b3acf89d4c23fdaf8e51d4d1d796526fcedaf9dbd319ac33b2305ee1ffd4d3e3d8e7d683d7d7a3c0c9192d08d2fd90863c3f358fd27ea27b8e3006cb5eccc03182c2406100182dd06f601be1b45", @ANYRES32=r0, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x14000943}, 0x0) 4.229212711s ago: executing program 3 (id=2714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.91024962s ago: executing program 0 (id=2715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x16, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x16, @void}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) (async) 3.776947456s ago: executing program 4 (id=2716): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 3.609721256s ago: executing program 2 (id=2717): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x4000080) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f00000000c0)=""/199, 0xc7}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6}, 0x94) 3.311393341s ago: executing program 0 (id=2718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}], 0x1, 0x2090) write(r1, &(0x7f0000001e00)="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", 0x3dd) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800020001000000080001"], 0x120}}, 0x0) 3.150192699s ago: executing program 3 (id=2719): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) unshare(0x2c060000) (async) unshare(0x24020400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r2, r2, 0x0, 0x4) (async) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/95, 0x5f}], 0x3, &(0x7f00000004c0)=""/34, 0x22}, 0x40000000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f0000001880)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, 0x0, &(0x7f0000000380)) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xb}, @empty, @remote, 0x3, 0x3, 0x4, 0x400, 0x8, 0x820220, r8}) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x18, r4, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.021038182s ago: executing program 1 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @local}, &(0x7f00000001c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x5, 0x3, 0x48, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x700, 0xb0000, 0xd}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x80, 0x5, 0xc640, {{0x26, 0x4, 0x3, 0x15, 0x98, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @loopback, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xc9, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x8001}, {@local, 0x8}, {@rand_addr=0x64010101, 0x824b}, {@remote, 0x7}]}, @ssrr={0x89, 0xb, 0xb2, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0xd, "5b345ff7a4e8142bd58c32"}]}, @cipso={0x86, 0x28, 0x3, [{0x7, 0x8, "e9802a352b9f"}, {0x1, 0x9, "9bebbe3c7ed821"}, {0x7, 0x11, "4bad998a9835d4f043c5be291eaedb"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) (async) r15 = socket(0x200000000000011, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r16, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.915905493s ago: executing program 2 (id=2721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 2.883643148s ago: executing program 4 (id=2722): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='$'], 0x28, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x40, 0x800}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x1d, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r3, 0x5, 0x0, @val=@tcx={@void, @value=r0, @void, @void, r8}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000040), 0x9) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='$'], 0x28, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x40, 0x800}}], 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x1d, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r3, 0x5, 0x0, @val=@tcx={@void, @value=r0, @void, @void, r8}}, 0x1c) (async) 2.569336237s ago: executing program 3 (id=2723): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x30}}, 0x0) 2.225766305s ago: executing program 1 (id=2724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x1, 0x80, 0x6, 0xe94, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0xc, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@end]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0xffffff97, 0x4, 0x8, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x80000000, 0xab6b, 0x10001, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x94, &(0x7f0000000200)=""/148, 0x40f00, 0x10, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r2, 0x1, r3, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000640)=[{0x5, 0x2, 0xf, 0x2}, {0x4, 0x4, 0x10, 0x8}, {0x4, 0x2, 0xc, 0x5}, {0x3, 0x3, 0x4, 0xb}, {0x1, 0x1, 0xa, 0x8}, {0x4, 0x2, 0xc, 0x3}], 0x10, 0xffff0001}, 0x94) 2.130245898s ago: executing program 3 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f0000000240)) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x27}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) (rerun: 64) 1.808824988s ago: executing program 4 (id=2726): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) close(0x3) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c00", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r8, 0x700, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 1.760742998s ago: executing program 0 (id=2727): r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.748834668s ago: executing program 2 (id=2728): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x46c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b1cdf1d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc5ba}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5fc8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd0d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x92a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x759}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff57e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x22c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x45, 0x3, "01e4f08a028b081e4ccba3a7b72fbb4d8dc743d4228998a3fdd84d5ac7d5312ed76d3fd29a6b3639e0f4ef8133fef7ab821b7491f25dfe5137e85a70dab66e3300"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c0d36e8aca3608dddd5736378e7255f7493d3f4c1f27b5fe1fe2258a5576eedc76"}}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "7145b7f0bb61e4c93a1da161b676d4d919223b55c744333157303499b6252589cbbcf5b06c4226421f68d9668145a54578f581c70b5d417c779ffac88b99e43bcf01630729524b0c04d8b26e6cc00516792b3819d5dc503300b86f9cef1a697a50b7fa2aea943e59d4358f858c02f64087779a2d790d09b3bd18d4917c4d00ee3d6fa132f7194aa4675deaec669311bd0d001459f63ff225e77f9676feb2f1fe5179776646103efaac4ce11a8e1ded87388905cf4a299bf177"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "be0de966a5a4a866ea8fa1dd7cd33ad222e3b19cacf08cffb0c0a93f056618246f2330d5bbc479c5c6ab4557dce82ddd8601"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "1a551bc3f832b48c54c8e5e4dc8f87ce063ff9c8d9ed555d344cbab00d6d36c62811071b5ca195eae4e6886f48ff81d4ebb724b888d5c18c690b5b07794f0e3bf3f62b4ef543f26d9bede2d0ebeb306121b3922443cfbf5bab5a2e91d59063a33c2f2264d18c756ee41c25b15b2cb9bee5c2ad97436eabf1022faf69ee19eab661"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20000081}, 0x801) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x100}, 0x10) 1.64462365s ago: executing program 1 (id=2729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x200, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5b4580c61224a6cd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xeb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x64, 0x9}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f3d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x48000}, 0x802) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x10, 0x10, 0x80, 0x8, 0x8, 0x8, 0x7}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x280c0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'wlan0\x00', {}, 0xffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 829.975561ms ago: executing program 2 (id=2730): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x2, @short}, 0x14) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1", 0xc}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xfffffffffffffe8e, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a01010000af00000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c000540000000f7"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7ab60ae2ab1975bf2282b57499b6cfefff9971d5aed55a6bf6e926bf850e0885ad87fef7eb54b732e1531e05bf981101b7fb43", @ANYRES8=r1, @ANYRESHEX=r0], 0x10}}], 0x1, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 670.866888ms ago: executing program 3 (id=2731): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 541.362716ms ago: executing program 0 (id=2732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x8529, 0x8, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0xff, 0x0, 0xf, [0x5d, 0x66fb, 0xfffffff8]}, @end, @timestamp={0x44, 0x24, 0x3b, 0x0, 0x5, [0x49c, 0x6, 0x9, 0x10001, 0x3, 0xfffffffa, 0x6, 0x7]}]}}}}}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ldst={0x3, 0x0, 0x3, 0x2, 0x9, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x57c0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @exit, @generic={0xfa, 0x2, 0x7, 0x0, 0x4}, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', r6, @fallback=0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000380)=[{0x1, 0x2, 0xf, 0x2}, {0x3, 0x4, 0xb, 0xc}, {0x0, 0x5, 0xc, 0x4}, {0x0, 0x2, 0xa, 0xb}, {0x3, 0x7f, 0xb, 0x3}], 0x10, 0x4}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000004c0)=0x0) write$cgroup_pid(r2, &(0x7f0000000500)=r12, 0x12) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) (async) r13 = accept4(r11, 0x0, 0x0, 0x800) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) 257.733988ms ago: executing program 2 (id=2733): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00018005"], 0xbc}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 224.121957ms ago: executing program 1 (id=2734): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2d63707561636374202b70696473202d6d656d6f7279202d626c6b696f202b68756765746c62202b68756765746c60202d68756765746c622090d964f120e6f458f9fde3938a938dbb6f4d694cd204801eb7cd8cea6c1d3b488845e55dad2a63966700569a71a8c357af819a7e370eca58f14dac7eebfb53f2b68bfa7cea9a3169ad96c2"], 0x39) 0s ago: executing program 4 (id=2735): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="91b882b09a5bbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac141426030490781200183f25000fff00800000000100000a01010164010100e249a263d40e4f1e"], 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x2, 0x3, 0x80, 0x4, 0x317, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @remote, @broadcast, @dev={0xfe, 0x80, '\x00', 0x41}}}, 0x3e) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) kernel console output (not intermixed with test programs): [ 150.132559][ T8204] bond5: left promiscuous mode [ 150.158264][ T6697] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.170983][ T6697] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.196780][ T6697] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.206039][ T6697] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.385858][ T6708] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.411777][ T6708] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.440048][ T6708] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.475909][ T6708] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.534240][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 150.938486][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.971646][ T8275] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 151.001442][ T8275] netlink: 152 bytes leftover after parsing attributes in process `syz.2.697'. [ 151.041099][ T8277] bond2: Removing last arp target with arp_interval on [ 151.048907][ T8281] netlink: 'syz.0.701': attribute type 3 has an invalid length. [ 151.057436][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 151.066669][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.701'. [ 151.101864][ T8278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.702'. [ 151.112821][ T8278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.702'. [ 151.133045][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 151.858767][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 152.432810][ T8341] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 152.462929][ T8348] xt_bpf: check failed: parse error [ 154.061741][ T8393] syzkaller0: entered promiscuous mode [ 154.088707][ T8393] syzkaller0: entered allmulticast mode [ 154.487834][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 156.069481][ T8444] netlink: zone id is out of range [ 156.127462][ T8444] netlink: zone id is out of range [ 156.180318][ T8444] netlink: zone id is out of range [ 156.232347][ T8444] netlink: zone id is out of range [ 156.266639][ T8444] netlink: zone id is out of range [ 156.290894][ T8444] netlink: zone id is out of range [ 156.318324][ T8444] netlink: zone id is out of range [ 156.379264][ T8444] netlink: zone id is out of range [ 156.435397][ T8444] netlink: zone id is out of range [ 156.483674][ T8444] netlink: zone id is out of range [ 156.880109][ T8476] netlink: 'syz.3.760': attribute type 5 has an invalid length. [ 156.939808][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 157.004097][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 157.134580][ T8485] syzkaller0: entered promiscuous mode [ 157.168430][ T8485] syzkaller0: entered allmulticast mode [ 157.621865][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 158.292871][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 158.397464][ T6705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.427757][ T6705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.435651][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.787945][ T8547] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 158.892546][ T8548] netlink: 192 bytes leftover after parsing attributes in process `syz.1.780'. [ 158.932646][ T8547] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 158.962699][ T8547] netlink: 228 bytes leftover after parsing attributes in process `syz.1.780'. [ 159.260907][ T8555] syzkaller0: entered promiscuous mode [ 159.299736][ T8555] syzkaller0: entered allmulticast mode [ 159.304950][ T8560] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 159.341521][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 159.355700][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.374736][ T8558] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 159.398430][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 159.413565][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 159.465430][ T8565] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 159.515521][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.558055][ T8567] netlink: 'syz.4.786': attribute type 7 has an invalid length. [ 159.602537][ T8567] netlink: 140 bytes leftover after parsing attributes in process `syz.4.786'. [ 159.637233][ T8565] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 159.681672][ T8565] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 159.758164][ T8565] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 160.159938][ T8586] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 160.716003][ T8617] netlink: 'syz.1.795': attribute type 10 has an invalid length. [ 160.822304][ T8617] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 160.950850][ T6697] IPVS: starting estimator thread 0... [ 161.045312][ T8632] IPVS: using max 28 ests per chain, 67200 per kthread [ 162.635548][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.594530][ T8694] __nla_validate_parse: 1 callbacks suppressed [ 163.594575][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.816'. [ 164.453798][ T8715] syzkaller0: entered promiscuous mode [ 164.487644][ T8715] syzkaller0: entered allmulticast mode [ 164.540369][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.602670][ T8716] bridge_slave_0 (unregistering): left allmulticast mode [ 164.626758][ T8716] bridge_slave_0 (unregistering): left promiscuous mode [ 164.654312][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.389304][ T8738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 166.063314][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 166.118106][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 166.178772][ T8759] netlink: 'syz.3.832': attribute type 3 has an invalid length. [ 166.342724][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 166.588197][ T8766] syzkaller0: entered promiscuous mode [ 166.593960][ T8766] syzkaller0: entered allmulticast mode [ 169.418137][ T8797] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 170.053664][ T8824] gtp0: entered promiscuous mode [ 170.100417][ T8824] gtp0: entered allmulticast mode [ 170.189013][ T8825] tipc: Started in network mode [ 170.206566][ T8825] tipc: Node identity 2003, cluster identity 4711 [ 170.246095][ T8825] tipc: Node number set to 8195 [ 170.284108][ T8836] syzkaller1: entered allmulticast mode [ 170.318726][ T8836] nbd: couldn't find device at index 15663104 [ 170.449181][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 170.520879][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 170.530170][ T8839] macvtap1: entered promiscuous mode [ 170.562133][ T8839] macvtap1: entered allmulticast mode [ 170.587233][ T8839] veth1_vlan: entered allmulticast mode [ 170.914498][ T8857] xt_hashlimit: size too large, truncated to 1048576 [ 170.927510][ T8855] xt_hashlimit: size too large, truncated to 1048576 [ 170.973509][ T8854] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.859'. [ 171.002958][ T8854] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 171.030652][ T8854] 0ªX¹¦Dö»: entered allmulticast mode [ 171.033534][ T8859] x_tables: duplicate underflow at hook 3 [ 171.355438][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.670889][ T8873] batadv_slave_0: entered promiscuous mode [ 171.714538][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 171.733347][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.784269][ T8873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.834000][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 171.892603][ T8876] bond0: entered allmulticast mode [ 171.905445][ T8876] bond_slave_0: entered allmulticast mode [ 171.924053][ T8876] bond_slave_1: entered allmulticast mode [ 172.462404][ T8879] team0: Port device team_slave_0 removed [ 172.928852][ T8912] batadv0: entered promiscuous mode [ 172.960720][ T8912] macsec1: entered promiscuous mode [ 173.030791][ T8912] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 173.072994][ T8912] batadv0: left promiscuous mode [ 173.640035][ T8937] netlink: 280 bytes leftover after parsing attributes in process `syz.3.879'. [ 173.663693][ T8937] netlink: 5 bytes leftover after parsing attributes in process `syz.3.879'. [ 173.673999][ T8937] netlink: 11744 bytes leftover after parsing attributes in process `syz.3.879'. [ 173.740413][ T8949] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 173.951642][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 173.981965][ T8951] netlink: 52 bytes leftover after parsing attributes in process `syz.2.883'. [ 174.315637][ T24] net_ratelimit: 13 callbacks suppressed [ 174.315660][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.795567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.196185][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.355785][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.396085][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.435623][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.757753][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.235969][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.476286][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.517301][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.555984][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.957688][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.596566][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.604787][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.637103][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.675559][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.996039][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.716472][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.808369][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.817911][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.756708][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.078019][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.795550][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.835736][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.995427][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.875645][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.116290][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.915658][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.956479][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.196272][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.836511][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.844901][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.996284][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.035790][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.077446][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.397405][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.406668][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.877530][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.116392][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.156429][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.876415][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.196577][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.753282][ T8968] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.888'. [ 197.787180][ T8969] xt_bpf: check failed: parse error [ 197.910007][ T8969] netlink: 'syz.3.887': attribute type 21 has an invalid length. [ 197.966375][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.887'. [ 197.971982][ T8969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.984640][ T8969] IPv6: NLM_F_CREATE should be set when creating new route [ 197.991965][ T8969] IPv6: NLM_F_CREATE should be set when creating new route [ 197.999247][ T8969] IPv6: NLM_F_CREATE should be set when creating new route [ 198.169468][ T8992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 198.235690][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.588389][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 198.648768][ T9002] netlink: 'syz.0.895': attribute type 30 has an invalid length. [ 198.818355][ T9008] netlink: 'syz.1.896': attribute type 15 has an invalid length. [ 198.875739][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.885574][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.948606][ T9015] Bluetooth: MGMT ver 1.23 [ 199.259947][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 199.275870][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.402889][ T9024] netlink: 256 bytes leftover after parsing attributes in process `syz.3.901'. [ 199.454132][ T9024] netlink: 256 bytes leftover after parsing attributes in process `syz.3.901'. [ 199.897193][ T9045] netlink: 'syz.3.908': attribute type 29 has an invalid length. [ 199.982443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.318446][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.429281][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.914'. [ 200.799695][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.013292][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 201.138156][ T9099] netlink: 'syz.2.924': attribute type 7 has an invalid length. [ 201.162657][ T9101] netlink: 'syz.2.924': attribute type 34 has an invalid length. [ 201.188617][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 201.296820][ T6710] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.320249][ T6710] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.355819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.365091][ T6710] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.404617][ T6710] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.017254][ T9128] netlink: 'syz.2.930': attribute type 3 has an invalid length. [ 202.056674][ T9116] tc_dump_action: action bad kind [ 202.379929][ T9139] netlink: 'syz.0.936': attribute type 9 has an invalid length. [ 202.421468][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.512255][ T9143] xt_hashlimit: size too large, truncated to 1048576 [ 202.737574][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.908117][ T9155] netlink: 'syz.2.941': attribute type 11 has an invalid length. [ 203.104469][ T9164] __nla_validate_parse: 5 callbacks suppressed [ 203.104489][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 203.239340][ T9169] netlink: 'syz.2.944': attribute type 13 has an invalid length. [ 203.304255][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.2.944'. [ 203.305269][ T9169] gretap0: refused to change device tx_queue_len [ 203.391923][ T9169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.437237][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.456892][ T9170] macvtap1: entered promiscuous mode [ 203.462615][ T9170] macvtap1: entered allmulticast mode [ 203.480641][ T9170] veth1_vlan: entered allmulticast mode [ 203.823340][ T9185] netlink: 'syz.2.948': attribute type 3 has an invalid length. [ 204.143189][ T9194] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.951'. [ 204.477255][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.638654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.785923][ T9222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.958'. [ 205.444979][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.962'. [ 205.540887][ T9240] openvswitch: netlink: IP tunnel dst address not specified [ 205.659612][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.758489][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.917692][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.978263][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 206.059003][ T9260] hsr_slave_0: left promiscuous mode [ 206.101596][ T9260] hsr_slave_1: left promiscuous mode [ 206.327059][ T9271] netlink: 'syz.0.973': attribute type 2 has an invalid length. [ 206.335010][ T9271] netlink: 'syz.0.973': attribute type 2 has an invalid length. [ 206.432389][ T9276] ip6gre1: entered promiscuous mode [ 206.524282][ T9276] netlink: 'syz.4.974': attribute type 2 has an invalid length. [ 206.692872][ T9282] tipc: Started in network mode [ 206.715282][ T9282] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 206.726458][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.804620][ T9291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.818000][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 206.825057][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 206.831172][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 206.837598][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 206.966169][ T9288] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 207.214922][ T9288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.359231][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 207.427048][ T9323] ip_tables: iptables: counters copy to user failed while replacing table [ 207.618619][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 207.653781][ T9329] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 207.811483][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 207.858315][ T9347] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 208.269118][ T9358] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 208.296769][ T9360] block nbd0: not configured, cannot reconfigure [ 208.654570][ T9376] IPVS: Unknown mcast interface: vcan0 [ 208.668772][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 208.785300][ T9378] openvswitch: netlink: Flow key attr not present in new flow. [ 208.922024][ T9381] geneve1: entered promiscuous mode [ 208.938265][ T9381] geneve1: entered allmulticast mode [ 208.988053][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'. [ 209.298869][ T9397] x_tables: duplicate underflow at hook 2 [ 209.413493][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 209.493527][ T9404] ip_tables: iptables: counters copy to user failed while replacing table [ 221.915370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.382458][ T9432] x_tables: duplicate underflow at hook 2 [ 233.420290][ T9441] x_tables: duplicate underflow at hook 2 [ 233.427126][ T9433] ipvlan2: entered allmulticast mode [ 233.433174][ T9433] virt_wifi0: entered allmulticast mode [ 233.458402][ T9433] batman_adv: batadv0: Adding interface: ipvlan2 [ 233.473577][ T9433] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.511834][ T9433] batman_adv: batadv0: Interface activated: ipvlan2 [ 233.985826][ T9465] can: request_module (can-proto-0) failed. [ 233.997631][ T9467] can: request_module (can-proto-0) failed. [ 234.514122][ T9479] IPv6: sit1: Disabled Multicast RS [ 234.612495][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 234.662506][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 234.694671][ T9495] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 235.071793][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 235.688780][ T9538] netlink: 'syz.3.1038': attribute type 5 has an invalid length. [ 235.713650][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 235.734271][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 235.784340][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 236.218072][ T9556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1042'. [ 236.324453][ T9560] x_tables: duplicate underflow at hook 2 [ 236.441605][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 236.454488][ T9560] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 236.497494][ T9567] netlink: 'syz.2.1044': attribute type 21 has an invalid length. [ 236.555359][ T9567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1044'. [ 236.665403][ T9567] netlink: 'syz.2.1044': attribute type 5 has an invalid length. [ 236.747860][ T9567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1044'. [ 237.470700][ T9584] tipc: Enabling of bearer rejected, failed to enable media [ 237.789674][ T9601] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 237.920438][ T9601] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.930537][ T9599] syzkaller0: entered promiscuous mode [ 237.938548][ T9599] syzkaller0: entered allmulticast mode [ 237.947906][ T9599] tipc: Started in network mode [ 237.952914][ T9599] tipc: Node identity 2e9e949b4358, cluster identity 4711 [ 237.964829][ T9599] tipc: Enabled bearer , priority 0 [ 238.141393][ T9605] bond5: (slave veth1): Enslaving as an active interface with a down link [ 238.171876][ T9599] tipc: Resetting bearer [ 238.339517][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 238.374044][ T9601] bond5: (slave batadv1): making interface the new active one [ 238.388676][ T9601] batadv1: entered promiscuous mode [ 238.396658][ T9601] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 238.438172][ T9597] tipc: Resetting bearer [ 238.444994][ T9619] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 238.590600][ T9597] tipc: Disabling bearer [ 240.253587][ T9685] 8021q: VLANs not supported on lo [ 240.290860][ T9687] sock: sock_timestamping_bind_phc: sock not bind to device [ 240.811395][ T9697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 240.956464][ T9697] __nla_validate_parse: 9 callbacks suppressed [ 240.956486][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 241.478709][ T9724] netlink: 'syz.1.1088': attribute type 11 has an invalid length. [ 241.653304][ T9726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1089'. [ 242.068398][ T9737] openvswitch: netlink: IPv4 tun info is not correct [ 242.102933][ T9736] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.1094'. [ 242.547057][ T9755] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 242.594094][ T9755] veth1_macvtap: left promiscuous mode [ 242.653823][ T9755] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 242.710618][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1099'. [ 242.808800][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 243.008739][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'. [ 243.136603][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 243.615326][ T5612] block nbd0: Receive control failed (result -32) [ 243.938600][ T9798] bond6: Unable to set down delay as MII monitoring is disabled [ 243.941995][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 244.023818][ T9798] bond6 (unregistering): Released all slaves [ 244.253350][ T9791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.714864][ T9828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1118'. [ 244.922944][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 245.247330][ T9837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.423171][ T9888] __nla_validate_parse: 4 callbacks suppressed [ 246.423193][ T9888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1136'. [ 246.587616][ T9898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1136'. [ 246.779581][ T9888] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1136'. [ 246.823260][ T30] audit: type=1800 audit(1787777340.579:5): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name=0A dev="tmpfs" ino=1177 res=0 errno=0 [ 246.825406][ T9888] netlink: 'syz.1.1136': attribute type 5 has an invalid length. [ 246.861672][ T9896] bond6: entered promiscuous mode [ 246.969942][ T9888] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1136'. [ 247.265073][ T9875] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 247.824061][ T9925] netlink: 'syz.0.1145': attribute type 2 has an invalid length. [ 247.872842][ T9925] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1145'. [ 248.080687][ T9931] bridge2: entered allmulticast mode [ 248.370020][ T9937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1150'. [ 248.423385][ T9937] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1150'. [ 248.504944][ T9937] netlink: 'syz.2.1150': attribute type 6 has an invalid length. [ 248.539428][ T9937] netlink: 'syz.2.1150': attribute type 5 has an invalid length. [ 248.618148][ T9937] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1150'. [ 248.736416][ T9951] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 248.745561][ T9951] nbd: error processing sock list [ 248.984270][ T9942] bond7: option fail_over_mac: invalid value (16) [ 249.038868][ T9942] bond7 (unregistering): Released all slaves [ 249.297456][ T9956] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 249.592798][ T9962] ipt_REJECT: ECHOREPLY no longer supported. [ 249.725977][ T6705] batadv1: left promiscuous mode [ 249.886903][ T9971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1163'. [ 250.164515][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1166'. [ 250.747104][ T9996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.844115][ T9998] netlink: 'syz.3.1170': attribute type 21 has an invalid length. [ 251.081285][ T30] audit: type=1800 audit(1787777344.839:6): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1172" name="memory.events" dev="tmpfs" ino=1152 res=0 errno=0 [ 251.144409][T10007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.308214][T10002] syzkaller0: entered promiscuous mode [ 251.322281][T10002] syzkaller0: entered allmulticast mode [ 251.404422][T10009] dvmrp1: entered allmulticast mode [ 252.017752][T10031] netlink: 'syz.1.1179': attribute type 32 has an invalid length. [ 252.029454][T10030] netlink: 'syz.1.1179': attribute type 32 has an invalid length. [ 252.089919][T10031] __nla_validate_parse: 3 callbacks suppressed [ 252.089948][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 252.118415][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 252.227667][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1176'. [ 254.710806][T10030] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 254.797280][T10031] bond2: option coupled_control: invalid value (192) [ 254.820425][T10031] bond2 (unregistering): Released all slaves [ 255.255603][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 255.333008][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 255.602673][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 255.619994][T10079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1183'. [ 255.851176][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084831][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 256.136797][T10086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.520055][T10087] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 256.602530][T10087] bond4 (unregistering): Released all slaves [ 256.913517][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 256.952718][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 257.374405][T10124] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 257.386111][T10134] tipc: Enabling of bearer rejected, failed to enable media [ 257.395801][T10124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 257.859210][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 258.012331][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 258.264806][T10156] netlink: 'syz.2.1205': attribute type 3 has an invalid length. [ 258.586179][T10161] macsec1: entered promiscuous mode [ 259.435204][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 259.673066][T10195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.741741][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 259.790427][T10218] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1223'. [ 260.065827][T10228] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 261.108313][T10274] sctp: [Deprecated]: syz.3.1240 (pid 10274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.108313][T10274] Use struct sctp_sack_info instead [ 261.642253][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 262.027577][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 262.073973][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 262.117865][T10302] netlink: 'syz.0.1247': attribute type 9 has an invalid length. [ 262.453734][T10319] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 262.631441][T10317] netlink: Failed to add ¦â—k\ helper -22 [ 262.654522][T10317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.916475][T10324] netlink: 'syz.1.1252': attribute type 4 has an invalid length. [ 262.957912][T10324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1252'. [ 263.260035][T10324] .`: renamed from bond0 (while UP) [ 263.399760][T10340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.441015][T10340] bridge0: port 3(bond7) entered blocking state [ 263.481860][T10352] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'. [ 263.556020][T10340] bridge0: port 3(bond7) entered disabled state [ 263.614401][T10340] bond7: entered allmulticast mode [ 263.739353][T10340] bond7: entered promiscuous mode [ 263.809299][T10358] IPv6: Can't replace route, no match found [ 263.844588][T10358] IPv6: Can't replace route, no match found [ 263.956242][T10358] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1260'. [ 264.358582][T10369] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1264'. [ 264.453886][T10369] netlink: 'syz.4.1264': attribute type 3 has an invalid length. [ 264.494552][T10369] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 264.541814][T10369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1264'. [ 264.780318][T10379] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 264.889657][T10379] bond4 (unregistering): Released all slaves [ 264.953782][T10391] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.1268'. [ 265.543035][T10406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1275'. [ 265.568628][T10406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1275'. [ 265.663302][T10410] vxcan0: tx address claim with different name [ 265.673123][T10406] gretap0: entered promiscuous mode [ 265.699848][T10406] gretap0: entered allmulticast mode [ 266.287896][T10434] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 266.458905][T10442] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1283'. [ 266.705082][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 267.553284][T10474] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 267.985247][T10487] __nla_validate_parse: 1 callbacks suppressed [ 267.985267][T10487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'. [ 268.292474][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 268.381819][T10500] veth1_virt_wifi: mtu less than device minimum [ 268.500883][T10500] team0: Port device dummy0 removed [ 268.771681][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1300'. [ 269.567254][T10541] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 269.843736][T10558] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 270.747889][T10578] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 270.859488][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'. [ 270.889933][T10582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1318'. [ 271.025978][T10582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1318'. [ 271.219437][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 271.302386][T10598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 271.558907][T10607] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.561881][ T6701] IPVS: starting estimator thread 0... [ 271.599583][T10608] xt_hashlimit: size too large, truncated to 1048576 [ 271.625257][T10604] can: request_module (can-proto-0) failed. [ 271.644864][T10608] xt_hashlimit: max too large, truncated to 1048576 [ 271.687129][T10608] xt_hashlimit: overflow, rate too high: 0 [ 271.696844][T10609] IPVS: using max 27 ests per chain, 64800 per kthread [ 271.760557][T10583] hsr_slave_1 (unregistering): left promiscuous mode [ 271.812070][T10607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1325'. [ 272.621086][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 273.384153][T10642] netlink: 'syz.1.1336': attribute type 2 has an invalid length. [ 273.421522][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 273.638185][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'. [ 274.108693][T10675] Bluetooth: MGMT ver 1.23 [ 274.122959][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 274.181705][T10675] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 275.089280][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 275.257281][T10714] netlink: 'syz.4.1357': attribute type 142 has an invalid length. [ 275.894925][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 276.112983][T10738] netlink: 'syz.0.1365': attribute type 39 has an invalid length. [ 276.184067][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 276.219489][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 276.698678][T10760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1374'. [ 276.896115][T10768] bridge0: left promiscuous mode [ 276.960588][T10768] 8021q: adding VLAN 0 to HW filter on device .` [ 277.284252][T10768] veth1_macvtap: left promiscuous mode [ 277.313254][T10785] sctp: [Deprecated]: syz.4.1378 (pid 10785) Use of int in maxseg socket option. [ 277.313254][T10785] Use struct sctp_assoc_value instead [ 277.336399][T10768] veth1_macvtap: entered promiscuous mode [ 277.361852][T10768] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 277.480382][T10768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.623178][T10768] gretap0: left promiscuous mode [ 277.704302][T10789] team0: Device ipvlan0 failed to register rx_handler [ 277.953852][ T6709] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.992854][T10807] macvlan0: entered promiscuous mode [ 278.002501][ T5767] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.270215][T10815] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1386'. [ 278.289633][ T6701] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.296395][T10814] Cannot find add_set index 0 as target [ 278.316430][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 278.612111][T10829] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1389'. [ 278.754605][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1388'. [ 278.843267][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 278.955610][ T5767] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 279.360219][ T6701] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 279.424428][ T6701] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 279.458922][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 279.495744][T10848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1393'. [ 279.715510][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 280.187290][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 280.271621][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 280.921807][T10891] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 281.692927][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 281.733523][T10907] x_tables: duplicate underflow at hook 2 [ 282.075406][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.244066][T10917] netlink: 'syz.1.1416': attribute type 2 has an invalid length. [ 282.637565][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 282.677659][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 282.741480][ T6705] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 283.755502][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 284.042638][T10957] __nla_validate_parse: 3 callbacks suppressed [ 284.042659][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'. [ 284.849593][T10984] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 284.924638][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 284.958225][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 285.140055][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 285.195746][T10993] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 285.196395][T10997] xt_CONNSECMARK: invalid mode: 0 [ 285.298444][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 285.847962][T11016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1440'. [ 285.945228][T11016] netlink: 'syz.0.1440': attribute type 9 has an invalid length. [ 285.967703][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 286.016842][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 286.239185][T11007] syzkaller1: entered promiscuous mode [ 286.344065][T11007] syzkaller1: entered allmulticast mode [ 286.432363][T11023] netlink: 'syz.0.1442': attribute type 2 has an invalid length. [ 286.477135][T11023] netlink: 'syz.0.1442': attribute type 8 has an invalid length. [ 286.530675][T11023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1442'. [ 286.565467][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.843227][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 287.225890][T11044] netlink: 'syz.2.1451': attribute type 12 has an invalid length. [ 287.478185][T11051] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 287.578326][T11051] netlink: 'syz.0.1452': attribute type 2 has an invalid length. [ 288.143415][T11070] netlink: 'syz.2.1458': attribute type 4 has an invalid length. [ 288.180940][T11071] netlink: 'syz.2.1458': attribute type 4 has an invalid length. [ 288.326378][T11070] .`: renamed from bond0 (while UP) [ 289.583078][T11099] __nla_validate_parse: 5 callbacks suppressed [ 289.583101][T11099] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1467'. [ 289.705253][T11099] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1467'. [ 290.001381][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 290.052333][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 290.384369][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 290.395359][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.441214][T11119] netlink: 'syz.1.1473': attribute type 16 has an invalid length. [ 290.467854][T11120] vlan2: entered allmulticast mode [ 290.903726][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 291.143211][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 291.273638][T11143] netlink: 'syz.1.1481': attribute type 10 has an invalid length. [ 291.402812][T11150] IPv6: sit3: Disabled Multicast RS [ 291.470534][T11150] sit3: entered allmulticast mode [ 291.617610][T11160] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 291.854365][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 291.914163][T11160] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.953117][T11160] .`: (slave team0): Enslaving as an active interface with an up link [ 292.236959][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 292.316751][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 292.368141][T11186] netlink: 'syz.3.1493': attribute type 28 has an invalid length. [ 292.381959][T11186] netlink: 'syz.3.1493': attribute type 3 has an invalid length. [ 292.390973][T11186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1493'. [ 292.434509][T11181] tipc: Invalid UDP bearer configuration [ 292.434569][T11181] tipc: Enabling of bearer rejected, failed to enable media [ 293.310908][T11226] netlink: 'syz.0.1504': attribute type 2 has an invalid length. [ 293.427914][T11225] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 294.114804][T11252] openvswitch: netlink: Actions may not be safe on all matching packets [ 294.500858][T11269] trusted_key: syz.1.1518 sent an empty control message without MSG_MORE. [ 294.541196][T11266] syzkaller0: entered promiscuous mode [ 294.558742][T11269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 294.562408][T11266] syzkaller0: entered allmulticast mode [ 295.491944][T11309] geneve2: entered promiscuous mode [ 295.558006][T11316] nbd: must specify at least one socket [ 295.558200][ T6709] IPVS: starting estimator thread 0... [ 295.677266][T11318] IPVS: using max 25 ests per chain, 60000 per kthread [ 295.913433][T11324] __nla_validate_parse: 3 callbacks suppressed [ 295.913454][T11324] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1532'. [ 296.032219][T11330] netlink: 'syz.0.1534': attribute type 8 has an invalid length. [ 296.209349][T11327] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 296.289368][T11327] bond8 (unregistering): Released all slaves [ 296.312302][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 296.367144][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 296.757594][ T6699] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.787854][ T6699] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.906212][ T6699] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.953494][ T6699] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.005652][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 297.077421][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 297.140637][T11354] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 297.184637][T11354] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 297.213703][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 297.259667][T11354] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 297.302075][T11361] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 297.322047][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 297.400246][T11363] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 297.411811][T11358] netlink: Failed to add @ helper -22 [ 297.455538][T11358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.682758][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.062272][T11370] syzkaller0: entered promiscuous mode [ 298.079640][T11370] syzkaller0: entered allmulticast mode [ 298.166864][T11389] vcan0: entered promiscuous mode [ 298.190471][T11389] vcan0: entered allmulticast mode [ 302.062711][T11395] pim6reg: entered allmulticast mode [ 302.110626][T11397] pim6reg: left allmulticast mode [ 302.355616][T11442] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 302.365112][T11443] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 302.454110][T11442] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 302.455647][T11443] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 302.716559][T11463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1564'. [ 302.761577][T11461] netlink: 'syz.4.1562': attribute type 1 has an invalid length. [ 302.900803][T11459] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1561'. [ 303.276582][T11479] sctp: [Deprecated]: syz.2.1568 (pid 11479) Use of int in max_burst socket option. [ 303.276582][T11479] Use struct sctp_assoc_value instead [ 303.603183][T11499] netlink: 'syz.0.1575': attribute type 4 has an invalid length. [ 303.603443][T11498] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1573'. [ 303.658824][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1573'. [ 303.674605][T11499] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1575'. [ 303.704828][T11500] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 303.919417][T11499] .`: renamed from bond0 (while UP) [ 304.176965][T11505] bond2 (unregistering): Released all slaves [ 304.214792][T11515] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 304.272838][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'. [ 304.275011][T11517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1580'. [ 304.535904][T11519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.578208][T11531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1583'. [ 304.668049][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'. [ 304.867971][T11536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1585'. [ 304.914763][T11540] netlink: 'syz.4.1586': attribute type 3 has an invalid length. [ 304.963621][T11540] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 305.002362][T11544] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 305.192870][T11544] bond10: entered promiscuous mode [ 305.213046][T11544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.519388][T11556] x_tables: duplicate underflow at hook 1 [ 305.904832][T11571] Cannot find del_set index 3 as target [ 306.549853][T11595] netlink: 'syz.4.1601': attribute type 58 has an invalid length. [ 306.711555][T11599] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 306.738718][T11602] syzkaller0: entered promiscuous mode [ 306.756460][T11602] syzkaller0: entered allmulticast mode [ 307.035881][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.064282][T11612] sctp: [Deprecated]: syz.2.1606 (pid 11612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.064282][T11612] Use struct sctp_sack_info instead [ 307.160489][T11612] tls_set_device_offload_rx: netdev not found [ 307.199432][T11616] macvlan0: entered promiscuous mode [ 307.383525][T11624] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 307.446123][T11624] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 307.633744][T11627] bond0: entered promiscuous mode [ 307.694468][T11627] batadv0: entered promiscuous mode [ 307.729187][T11631] __nla_validate_parse: 3 callbacks suppressed [ 307.729208][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1612'. [ 307.752245][T11627] debugfs: 'hsr0' already exists in 'hsr' [ 307.774459][T11627] Cannot create hsr debugfs directory [ 307.808971][T11627] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 307.987235][T11627] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 308.333587][T11653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.350672][T11654] FAULT_INJECTION: forcing a failure. [ 308.350672][T11654] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.392027][T11654] CPU: 1 UID: 0 PID: 11654 Comm: syz.2.1616 Not tainted syzkaller #0 PREEMPT(full) [ 308.392055][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.392066][T11654] Call Trace: [ 308.392074][T11654] [ 308.392082][T11654] dump_stack_lvl+0xe8/0x150 [ 308.392115][T11654] should_fail_ex+0x410/0x560 [ 308.392153][T11654] _copy_to_user+0x31/0xb0 [ 308.392176][T11654] simple_read_from_buffer+0xe1/0x170 [ 308.392209][T11654] proc_fail_nth_read+0x1bb/0x230 [ 308.392241][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.392281][T11654] ? rw_verify_area+0x24a/0x4c0 [ 308.392306][T11654] ? tun_chr_write_iter+0x18a/0x200 [ 308.392355][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.392383][T11654] vfs_read+0x213/0xa80 [ 308.392415][T11654] ? __pfx___mutex_lock+0x10/0x10 [ 308.392440][T11654] ? __pfx_vfs_read+0x10/0x10 [ 308.392469][T11654] ? __fget_files+0x2a/0x420 [ 308.392499][T11654] ? __fget_files+0x3a2/0x420 [ 308.392523][T11654] ? __fget_files+0x2a/0x420 [ 308.392557][T11654] ksys_read+0x150/0x270 [ 308.392587][T11654] ? __pfx_ksys_read+0x10/0x10 [ 308.392626][T11654] do_syscall_64+0x166/0x520 [ 308.392648][T11654] ? trace_irq_disable+0x3b/0x140 [ 308.392672][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.392691][T11654] ? clear_bhb_loop+0x70/0xc0 [ 308.392714][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.392732][T11654] RIP: 0033:0x7f55c4d5e90e [ 308.392751][T11654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.392766][T11654] RSP: 002b:00007f55c5d1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.392787][T11654] RAX: ffffffffffffffda RBX: 00007f55c5d206c0 RCX: 00007f55c4d5e90e [ 308.392801][T11654] RDX: 000000000000000f RSI: 00007f55c5d200a0 RDI: 0000000000000015 [ 308.392813][T11654] RBP: 00007f55c5d20090 R08: 0000000000000000 R09: 0000000000000000 [ 308.392824][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.392835][T11654] R13: 00007f55c5026128 R14: 00007f55c5026090 R15: 00007ffe6eb165a8 [ 308.392867][T11654] [ 308.799336][ T5612] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 308.806977][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 308.863991][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 309.589450][T11685] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1626'. [ 309.598927][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 309.784723][T11679] bond8: Removing last ns target with arp_interval on [ 310.391759][T11701] syzkaller0: entered promiscuous mode [ 310.404627][T11724] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 310.408508][T11701] syzkaller0: entered allmulticast mode [ 310.644750][T11694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.930553][T11736] netlink: 'syz.3.1634': attribute type 21 has an invalid length. [ 310.989392][T11736] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1634'. [ 311.036605][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 311.089952][T11741] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1634'. [ 311.271421][T11748] atomic_op ffff8880543449e0 conn xmit_atomic 0000000000000000 [ 311.478696][T11753] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 311.524983][T11753] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1641'. [ 311.564990][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 311.614652][T11754] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 311.649542][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 311.661228][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 311.691903][T11754] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 311.993377][T11771] netlink: 'syz.2.1645': attribute type 83 has an invalid length. [ 312.869068][T11810] __nla_validate_parse: 20 callbacks suppressed [ 312.869090][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'. [ 313.200718][T11824] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 313.233344][T11824] netlink: 'syz.1.1659': attribute type 3 has an invalid length. [ 313.251307][T11818] bond0: option fail_over_mac: invalid value (16) [ 313.259369][T11824] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1659'. [ 313.270125][T11824] NCSI netlink: No device for ifindex 813332851 [ 313.279668][T11818] bond0 (unregistering): Released all slaves [ 313.808661][T11842] xt_TCPMSS: Only works on TCP SYN packets [ 314.329321][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 314.489395][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 314.746770][T11865] gretap0: left promiscuous mode [ 315.400988][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 317.272251][T11878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.287170][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.924608][T11927] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 318.342810][T11950] bond9: option min_links: invalid value (18446744073709551614) [ 318.361439][T11950] bond9: option min_links: allowed values 0 - 2147483647 [ 318.381075][T11950] bond9 (unregistering): Released all slaves [ 318.423732][T11953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.444422][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 318.953530][T11972] syzkaller0: entered promiscuous mode [ 318.982676][T11972] syzkaller0: entered allmulticast mode [ 319.419784][T11994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.470735][T11998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.756703][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 320.321145][T12019] IPVS: Unknown mcast interface: vcan0 [ 320.574104][T12033] syzkaller0: entered promiscuous mode [ 320.620466][T12033] syzkaller0: entered allmulticast mode [ 320.816775][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 321.386664][T12058] netlink: 'syz.2.1718': attribute type 2 has an invalid length. [ 321.920261][T12068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.069818][T12072] erspan0: entered promiscuous mode [ 322.113666][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 322.348711][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.500774][T12086] syzkaller0: entered promiscuous mode [ 322.522437][T12086] syzkaller0: entered allmulticast mode [ 323.068218][T12098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1732'. [ 323.103167][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 323.217588][T12116] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1737'. [ 323.438307][T12123] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 323.448873][T12124] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 323.518748][T12121] bond9: entered promiscuous mode [ 323.529521][T12123] team0: Device vxcan1 is of different type [ 323.547908][T12124] team0: Device vxcan1 is of different type [ 323.670670][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 323.690271][T12126] macvlan3: entered promiscuous mode [ 323.701069][T12126] macvlan3: entered allmulticast mode [ 323.728604][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1741'. [ 323.738198][T12126] bond9: (slave macvlan3): Opening slave failed [ 323.990856][T12140] openvswitch: netlink: VLAN attribute unexpected. [ 324.426437][T12151] bridge0: port 3(veth0) entered blocking state [ 324.457515][T12151] bridge0: port 3(veth0) entered disabled state [ 324.474938][T12154] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.505596][T12151] veth0: entered allmulticast mode [ 324.527244][T12159] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 324.538697][T12151] veth0: entered promiscuous mode [ 324.578816][T12151] bridge0: port 3(veth0) entered blocking state [ 324.585356][T12151] bridge0: port 3(veth0) entered forwarding state [ 325.008836][T12168] openvswitch: netlink: Unknown key attributes 1 [ 325.043081][T12168] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1749'. [ 325.080469][T12168] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 325.186034][T12168] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.231270][T12168] bond0: (slave team0): Enslaving as an active interface with an up link [ 325.318924][T12182] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 325.777573][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 326.122491][T12198] bond4: entered promiscuous mode [ 326.149070][T12198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.754040][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 326.754048][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 326.858337][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 326.885213][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1766'. [ 326.941261][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 327.126557][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.136091][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.144112][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.152182][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.160242][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.169754][T12202] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 327.240727][T12208] tipc: Enabling of bearer rejected, failed to enable media [ 327.275670][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 328.597147][T12290] veth0_to_bond: entered allmulticast mode [ 328.736545][T12304] xt_l2tp: invalid flags combination: 0 [ 328.749341][T12304] netlink: 'syz.2.1784': attribute type 2 has an invalid length. [ 328.772519][T12304] netlink: 'syz.2.1784': attribute type 8 has an invalid length. [ 328.801981][T12304] __nla_validate_parse: 3 callbacks suppressed [ 328.802001][T12304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1784'. [ 329.043772][T12310] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 329.066758][T12310] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1786'. [ 329.107580][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1786'. [ 329.343625][T12321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1791'. [ 329.499513][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 329.697094][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 329.785695][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 330.259564][T12346] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1797'. [ 330.271809][T12343] Bluetooth: hci0: unsupported parameter 5161 [ 330.277834][T12346] 0·: renamed from hsr0 [ 330.306231][T12343] Bluetooth: hci0: unsupported parameter 8192 [ 330.308693][T12346] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.338117][T12343] Bluetooth: hci0: unsupported parameter 5161 [ 330.390155][T12346] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.412134][T12343] Bluetooth: hci0: unsupported parameter 8192 [ 330.412632][T12346] 0·: entered allmulticast mode [ 330.440764][T12351] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1799'. [ 330.468143][T12346] hsr_slave_0: entered allmulticast mode [ 330.482693][T12346] hsr_slave_1: entered allmulticast mode [ 330.526827][T12346] net_ratelimit: 50 callbacks suppressed [ 330.526847][T12346] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 330.623490][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 331.383035][T12376] syzkaller0: entered promiscuous mode [ 331.389254][T12376] syzkaller0: entered allmulticast mode [ 331.567224][T12389] pim6reg1: entered promiscuous mode [ 331.590531][T12389] pim6reg1: entered allmulticast mode [ 335.503417][T12416] __nla_validate_parse: 3 callbacks suppressed [ 335.503440][T12416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1812'. [ 335.745960][T12426] batadv_slave_0: entered promiscuous mode [ 335.771329][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 335.795352][T12428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.017455][T12428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.118037][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 336.246973][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 336.469149][T12452] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1821'. [ 336.506192][T12454] x_tables: duplicate underflow at hook 3 [ 336.526123][T12452] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 336.553933][T12452] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1821'. [ 336.586907][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 337.810742][T12497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.824409][T12490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1828'. [ 338.261073][T12516] team0: entered promiscuous mode [ 338.267472][T12516] team_slave_1: entered promiscuous mode [ 338.282427][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'. [ 338.299410][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'. [ 339.540313][T12550] geneve2: entered promiscuous mode [ 340.377828][T12574] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 340.453861][T12574] bond5 (unregistering): Released all slaves [ 340.602802][T12593] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 340.640041][T12593] __nla_validate_parse: 5 callbacks suppressed [ 340.640137][T12593] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1858'. [ 340.965445][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.612583][T12620] netlink: 'syz.3.1866': attribute type 83 has an invalid length. [ 342.191432][T12632] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 342.882047][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 343.299211][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 343.669181][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1882'. [ 344.288624][T12683] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 344.573470][T12688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1889'. [ 344.609898][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1891'. [ 345.484055][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 345.718270][T12718] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 345.835176][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 345.867715][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 345.927050][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1901'. [ 347.153749][T12781] ip_tables: iptables: counters copy to user failed while replacing table [ 347.221873][T12784] ip_tables: iptables: counters copy to user failed while replacing table [ 347.543659][T12791] syzkaller1: entered promiscuous mode [ 347.562148][T12791] syzkaller1: entered allmulticast mode [ 347.909367][T12809] syzkaller0: entered promiscuous mode [ 347.933113][T12809] syzkaller0: entered allmulticast mode [ 348.383985][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 348.430558][T12821] tipc: Invalid UDP bearer configuration [ 348.430624][T12821] tipc: Enabling of bearer rejected, failed to enable media [ 348.925190][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1930'. [ 352.365666][T12854] tipc: Enabling of bearer rejected, failed to enable media [ 352.447396][T12860] lo speed is unknown, defaulting to 1000 [ 352.602038][T12860] lo speed is unknown, defaulting to 1000 [ 352.653556][T12860] lo speed is unknown, defaulting to 1000 [ 352.703994][T12880] netlink: 'syz.1.1938': attribute type 2 has an invalid length. [ 352.877781][T12894] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.904039][T12895] Bluetooth: hci0: unsupported parameter 5161 [ 352.933820][T12893] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1942'. [ 352.960402][T12895] Bluetooth: hci0: unsupported parameter 8192 [ 353.007065][T12895] Bluetooth: hci0: unsupported parameter 5161 [ 353.057812][T12895] Bluetooth: hci0: unsupported parameter 8192 [ 353.840735][T12860] infiniband syz1: set active [ 353.847816][ T5767] lo speed is unknown, defaulting to 1000 [ 353.868986][T12860] infiniband syz1: added lo [ 354.039880][T12860] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 354.101872][T12860] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 354.127538][T12860] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 354.173955][T12927] Cannot find add_set index 2 as target [ 354.304491][T12860] RDS/IB: syz1: added [ 354.318745][T12860] smc: adding ib device syz1 with port count 1 [ 354.342866][T12860] smc: ib device syz1 port 1 has no pnetid [ 354.360747][ T5767] lo speed is unknown, defaulting to 1000 [ 354.396017][T12860] lo speed is unknown, defaulting to 1000 [ 354.405924][T12933] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1951'. [ 354.710395][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1952'. [ 354.992068][T12860] lo speed is unknown, defaulting to 1000 [ 355.269129][T12860] lo speed is unknown, defaulting to 1000 [ 355.538457][T12860] lo speed is unknown, defaulting to 1000 [ 355.667086][T12882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.936344][T12949] ip_tables: iptables: counters copy to user failed while replacing table [ 356.064122][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 356.131771][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 356.261754][T12860] lo speed is unknown, defaulting to 1000 [ 356.510312][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1959'. [ 357.004790][T12967] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1961'. [ 357.295096][T12981] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1965'. [ 357.296119][T12975] IPv6: sit1: Disabled Multicast RS [ 357.373684][T12975] sit1: entered allmulticast mode [ 357.485253][T12990] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 357.518091][T12990] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 357.846656][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'. [ 357.857832][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'. [ 357.859313][T13002] netlink: Setting conntrack mark requires 'commit' flag. [ 357.922616][T13002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.948235][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1971'. [ 358.307296][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 358.569534][T13027] IPVS: length: 239 != 24 [ 358.593594][T13025] xt_hashlimit: size too large, truncated to 1048576 [ 358.614972][T13022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.754440][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 358.809768][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 359.022579][T13041] nbd: illegal input index -1 [ 359.408642][T13050] veth0: entered promiscuous mode [ 359.557069][T13049] veth0: left promiscuous mode [ 359.582212][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 359.641363][T13061] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1984'. [ 359.681714][T13061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1984'. [ 359.864790][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 360.092584][T13081] netlink: 'syz.0.1992': attribute type 3 has an invalid length. [ 360.107412][T13081] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1992'. [ 360.158970][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1991'. [ 360.609561][T13096] xt_cgroup: path and classid specified [ 361.288596][T13127] tap0: tun_chr_ioctl cmd 2148553947 [ 362.076697][T13152] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 362.158882][T13152] geneve4: entered promiscuous mode [ 362.183589][T13152] geneve4: entered allmulticast mode [ 362.387306][T13173] hsr_slave_1 (unregistering): left promiscuous mode [ 363.354319][T13198] __nla_validate_parse: 14 callbacks suppressed [ 363.354341][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 363.554668][T13212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.806093][T13217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2026'. [ 363.890025][T13224] syzkaller0: entered promiscuous mode [ 363.899298][T13224] syzkaller0: entered allmulticast mode [ 364.014569][T13221] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2028'. [ 364.051583][T13221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.114546][T13228] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 364.123843][T13228] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 364.359508][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 364.443430][T13237] bridge0: port 4(batadv1) entered blocking state [ 364.461947][T13237] bridge0: port 4(batadv1) entered disabled state [ 364.481494][T13237] batadv1: entered allmulticast mode [ 364.535712][T13237] batadv1: entered promiscuous mode [ 364.576765][T13242] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2033'. [ 364.614648][T13247] netlink: 'syz.4.2036': attribute type 11 has an invalid length. [ 364.751558][T13241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2033'. [ 364.849545][T13247] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2036'. [ 364.905439][ T6714] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 364.915297][ T6714] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 365.406799][T13269] syzkaller0: entered promiscuous mode [ 365.424849][T13269] syzkaller0: entered allmulticast mode [ 366.012044][T13281] bond2: option lacp_rate: invalid value (124) [ 366.094978][T13281] bond2 (unregistering): Released all slaves [ 366.577149][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 366.596437][T13307] vcan0: entered promiscuous mode [ 366.601832][T13307] vcan0: entered allmulticast mode [ 366.643776][T13302] veth0: entered promiscuous mode [ 369.969063][T13319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.052069][T13301] veth0: left promiscuous mode [ 370.513140][T13328] macvlan0: left promiscuous mode [ 370.606815][T13328] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 370.670835][T13343] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2066'. [ 370.687208][T13328] bond1: left promiscuous mode [ 370.694197][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 370.704911][T13328] gretap1: left promiscuous mode [ 370.722881][T13328] macvtap1: left promiscuous mode [ 370.735793][ T986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.831698][T13341] bond0: Error: CAN devices cannot be enslaved [ 371.287887][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 371.385379][ T5613] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 371.446461][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 371.674121][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2077'. [ 371.692539][T13371] syzkaller0: entered promiscuous mode [ 371.712638][T13371] syzkaller0: entered allmulticast mode [ 371.843117][T13385] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2078'. [ 371.910640][T13387] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2078'. [ 371.989271][T13389] sctp: [Deprecated]: syz.2.2079 (pid 13389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.989271][T13389] Use struct sctp_sack_info instead [ 372.357384][T13377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.195288][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 373.432410][T13433] syzkaller0: entered promiscuous mode [ 373.455861][T13433] syzkaller0: entered allmulticast mode [ 373.721038][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 373.773979][T13450] netlink: 'syz.2.2092': attribute type 3 has an invalid length. [ 374.373828][T13466] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2096'. [ 375.252083][T13498] syzkaller0: entered promiscuous mode [ 375.274189][T13498] syzkaller0: entered allmulticast mode [ 375.371685][T13504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.210234][T13538] __nla_validate_parse: 3 callbacks suppressed [ 376.210255][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 376.268048][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 376.303524][T13548] sctp: [Deprecated]: syz.4.2116 (pid 13548) Use of int in max_burst socket option deprecated. [ 376.303524][T13548] Use struct sctp_assoc_value instead [ 376.679367][T13560] syzkaller0: entered promiscuous mode [ 376.690179][T13560] syzkaller0: entered allmulticast mode [ 376.717885][T13566] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.733492][T13561] syzkaller0: entered promiscuous mode [ 376.741665][T13561] syzkaller0: entered allmulticast mode [ 376.767779][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 376.922122][T13571] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2125'. [ 377.087982][T13572] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 377.209823][T13576] netlink: 'syz.0.2126': attribute type 9 has an invalid length. [ 377.488557][T13586] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2130'. [ 377.536314][T13588] vxcan0: tx address claim with dest, not broadcast [ 377.581031][T13588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.152445][T13606] batman_adv: batadv0: Adding interface: gretap2 [ 378.178767][T13606] batman_adv: batadv0: The MTU of interface gretap2 is too small (1412) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.246491][T13606] batman_adv: batadv0: Interface activated: gretap2 [ 378.382300][T13616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2137'. [ 378.556780][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 378.720640][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.738048][T13622] x_tables: duplicate underflow at hook 1 [ 378.771908][T13631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2141'. [ 378.806702][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'. [ 379.287529][ T6684] tipc: Subscription rejected, illegal request [ 379.318018][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 379.772870][T13661] bond6: option min_links: invalid value (18446744073709551614) [ 379.798047][T13661] bond6: option min_links: allowed values 0 - 2147483647 [ 379.859130][T13661] bond6 (unregistering): Released all slaves [ 380.591115][T13684] netlink: 'syz.1.2153': attribute type 12 has an invalid length. [ 380.669868][T13684] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 381.097777][T13701] netlink: 'syz.2.2155': attribute type 21 has an invalid length. [ 381.220813][T13701] netlink: 'syz.2.2155': attribute type 5 has an invalid length. [ 381.263775][T13701] netlink: 'syz.2.2155': attribute type 6 has an invalid length. [ 381.363068][T13701] __nla_validate_parse: 6 callbacks suppressed [ 381.363088][T13701] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2155'. [ 381.595418][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'. [ 383.020456][T13770] geneve3: entered promiscuous mode [ 383.543932][T13798] bond4: entered allmulticast mode [ 383.599458][T13805] tipc: Enabled bearer , priority 0 [ 383.663024][T13796] bond4: left allmulticast mode [ 383.905015][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 384.110922][T13820] netlink: 'syz.1.2188': attribute type 4 has an invalid length. [ 384.141632][T13820] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2188'. [ 384.215324][T13827] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 384.287407][T13827] netlink: 'syz.1.2188': attribute type 3 has an invalid length. [ 384.411263][T13827] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2188'. [ 384.835900][ T10] tipc: Node number set to 2035774871 [ 384.925800][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 384.954118][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 384.983641][T13851] tap0: tun_chr_ioctl cmd 1074025676 [ 384.994297][T13851] tap0: owner set to 0 [ 385.023491][T13846] syz_tun: entered promiscuous mode [ 385.047603][T13846] syz_tun: left promiscuous mode [ 385.971788][T13892] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2207'. [ 386.346344][T13903] xt_hashlimit: size too large, truncated to 1048576 [ 386.356505][T13904] xt_hashlimit: size too large, truncated to 1048576 [ 386.387195][T13903] openvswitch: netlink: VLAN attribute unexpected. [ 386.973109][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 387.370545][T13942] netlink: Conntrack attr has 1 unknown bytes [ 387.397218][T13942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.435056][T13944] netlink: 'syz.1.2222': attribute type 17 has an invalid length. [ 387.466910][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 387.482111][T13945] netlink: 'syz.2.2223': attribute type 3 has an invalid length. [ 387.502682][T13945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2223'. [ 387.523096][T13944] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2222'. [ 387.583115][T13949] syzkaller1: entered promiscuous mode [ 387.586169][T13945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.635508][T13949] syzkaller1: entered allmulticast mode [ 387.873826][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2227'. [ 388.570568][T13983] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2234'. [ 388.656945][T13982] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 388.812830][T13985] x_tables: duplicate underflow at hook 1 [ 388.820975][T13990] ip6t_REJECT: ECHOREPLY is not supported [ 389.059915][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 389.351294][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 389.442469][T14018] openvswitch: netlink: Missing key (keys=50, expected=80) [ 389.621333][T14011] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 389.648121][T14011] bond6 (unregistering): Released all slaves [ 391.354961][T14071] syzkaller0: entered promiscuous mode [ 391.369550][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 391.375473][T14071] syzkaller0: entered allmulticast mode [ 391.385296][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 392.205133][T14093] lo speed is unknown, defaulting to 1000 [ 392.406705][T14107] __nla_validate_parse: 1 callbacks suppressed [ 392.406728][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2267'. [ 392.624583][T14115] macvlan0: entered promiscuous mode [ 393.153408][T14130] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 393.168673][T14132] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 393.435416][T14140] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2275'. [ 393.760241][T14149] netlink: 'syz.4.2276': attribute type 16 has an invalid length. [ 393.830689][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2276'. [ 393.863336][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 393.911105][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2276'. [ 394.037065][T14159] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20003 [ 394.101890][T14162] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 394.190409][T14165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.220014][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 394.372594][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 394.441991][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'. [ 395.285907][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 396.033959][T14197] xt_l2tp: v2 sid > 0xffff: 1114112 [ 396.065738][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 396.077463][T14202] netlink: 'syz.3.2290': attribute type 21 has an invalid length. [ 396.111363][T14202] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 396.651139][T14218] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 396.769590][T14226] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 396.872366][T14228] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.927588][T14228] syzkaller1: linktype set to 823 [ 396.962304][T14229] syzkaller1: tun_chr_ioctl cmd 3489698878 [ 397.001295][T14228] syzkaller1: tun_chr_ioctl cmd 3489698833 [ 397.024136][T14228] syzkaller1: tun_chr_ioctl cmd 3489698878 [ 397.165208][T14241] bond0: option ad_select: unable to set because the bond device is up [ 397.407517][T14248] netlink: 'syz.2.2306': attribute type 32 has an invalid length. [ 397.443446][T14248] __nla_validate_parse: 3 callbacks suppressed [ 397.443466][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 397.785345][T14248] bond6: option coupled_control: invalid value (192) [ 397.991470][T14248] bond6 (unregistering): Released all slaves [ 398.254823][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 398.393268][T14278] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2312'. [ 398.410057][ T5613] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 398.431692][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 398.995512][ T5767] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 399.159878][T14294] netlink: NAT attribute has 4 unknown bytes [ 399.197333][T14294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.239154][T14296] netlink: 'syz.1.2321': attribute type 49 has an invalid length. [ 399.422694][T14309] IPVS: length: 24 != 122904 [ 399.464291][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.855668][T14296] ip6gretap0: entered promiscuous mode [ 399.869544][T14296] ip6gretap0: entered allmulticast mode [ 400.249857][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2330'. [ 400.417516][T14330] netlink: NAT attribute has 4 unknown bytes [ 400.433169][T14330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.534065][T14334] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 400.585009][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 400.591310][T14334] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2333'. [ 400.682189][T14343] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 401.004831][T14321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.402455][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 401.499007][T14366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.509958][T14366] bridge0: port 4(bond5) entered blocking state [ 401.517261][T14366] bridge0: port 4(bond5) entered disabled state [ 401.524105][T14366] bond5: entered allmulticast mode [ 401.535649][T14366] bond5: entered promiscuous mode [ 401.541704][T14366] bridge0: port 4(bond5) entered blocking state [ 401.548260][T14366] bridge0: port 4(bond5) entered forwarding state [ 401.581337][ T6684] bridge0: port 4(bond5) entered disabled state [ 401.959834][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 402.144352][T14393] netlink: 'syz.1.2345': attribute type 11 has an invalid length. [ 402.213586][T14393] netlink: 'syz.1.2345': attribute type 11 has an invalid length. [ 402.294924][T14393] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2345'. [ 402.437818][T14402] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 402.724222][T14415] __nla_validate_parse: 65 callbacks suppressed [ 402.724246][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 406.376500][T14410] tipc: Enabling of bearer rejected, failed to enable media [ 406.933515][T14455] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2358'. [ 406.952367][T14442] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.017178][T14442] gretap3: entered promiscuous mode [ 407.030154][T14460] netlink: 'syz.2.2356': attribute type 10 has an invalid length. [ 407.035184][T14455] openvswitch: netlink: Flow key attr not present in new flow. [ 407.062334][T14442] gretap3: entered allmulticast mode [ 407.110802][T14460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2356'. [ 407.147174][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2358'. [ 407.172667][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 407.193339][T14460] team0: entered allmulticast mode [ 407.227634][T14460] team_slave_0: entered allmulticast mode [ 407.269601][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 407.300962][T14460] team_slave_1: entered allmulticast mode [ 407.363648][T14460] bridge0: port 3(team0) entered blocking state [ 407.418784][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 407.430348][T14460] bridge0: port 3(team0) entered disabled state [ 407.464194][T14460] team0: entered promiscuous mode [ 407.474789][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'. [ 407.489445][T14460] team_slave_0: entered promiscuous mode [ 407.507333][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 407.518329][T14460] team_slave_1: entered promiscuous mode [ 407.574841][T14460] bridge0: port 3(team0) entered blocking state [ 407.581440][T14460] bridge0: port 3(team0) entered forwarding state [ 407.654809][T14465] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 407.702780][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 407.773102][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 408.169156][T14496] x_tables: duplicate underflow at hook 1 [ 408.193596][T14484] syzkaller0: entered promiscuous mode [ 408.208692][T14496] xt_TCPMSS: Only works on TCP SYN packets [ 408.221246][T14484] syzkaller0: entered allmulticast mode [ 408.522190][T14512] ip_tables: iptables: counters copy to user failed while replacing table [ 408.549851][T14511] openvswitch: netlink: IP tunnel dst address not specified [ 409.435393][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 409.443567][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.604526][T14531] netlink: 'syz.1.2377': attribute type 11 has an invalid length. [ 409.612766][T14531] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2377'. [ 409.863203][T14539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2379'. [ 413.035972][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 413.109964][T14560] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2385'. [ 413.132923][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2383'. [ 413.608605][T14578] SET target dimension over the limit! [ 413.800971][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 414.357718][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2396'. [ 414.414704][T14593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2396'. [ 414.493748][T14597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2395'. [ 414.555887][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.788326][T14610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2400'. [ 414.909378][T14616] lo: entered promiscuous mode [ 414.989849][T14616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.059208][ T24] lo speed is unknown, defaulting to 1000 [ 415.093673][ T24] syz1: Port: 1 Link DOWN [ 415.110747][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'. [ 415.253393][ T204] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 415.324612][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2407'. [ 415.329716][T14622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.344001][T14620] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 415.397947][ T5767] lo speed is unknown, defaulting to 1000 [ 415.471598][T14636] ip6gre3: entered promiscuous mode [ 415.503379][T14636] ip6gre3: entered allmulticast mode [ 415.920621][T14649] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 416.356765][T14671] netlink: 'syz.2.2418': attribute type 5 has an invalid length. [ 416.702297][T14678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 416.817201][T14681] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 417.503952][T14722] netlink: 'syz.0.2425': attribute type 26 has an invalid length. [ 417.528537][T14722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.549739][T14711] bond6: entered promiscuous mode [ 417.569001][T14711] bond6: entered allmulticast mode [ 417.654499][T14717] bond6 (unregistering): Released all slaves [ 417.818091][T14710] syzkaller0: entered promiscuous mode [ 417.880634][T14710] syzkaller0: entered allmulticast mode [ 417.987772][T14724] tipc: Enabling of bearer rejected, failed to enable media [ 418.846100][T14755] syzkaller0: entered promiscuous mode [ 418.904482][T14755] syzkaller0: entered allmulticast mode [ 418.924325][T14759] netlink: 'syz.3.2433': attribute type 2 has an invalid length. [ 418.988841][T14763] __nla_validate_parse: 8 callbacks suppressed [ 418.988897][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 419.093584][T14759] : entered promiscuous mode [ 419.246617][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 419.418207][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 419.474488][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 419.507573][T14784] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 419.797313][T14799] netlink: 'syz.4.2443': attribute type 30 has an invalid length. [ 419.805449][T14799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2443'. [ 419.954319][T14791] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 420.013557][T14791] bond2 (unregistering): Released all slaves [ 420.088326][T14802] : renamed from bond0 [ 420.450495][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 421.140752][T14836] sctp: [Deprecated]: syz.2.2453 (pid 14836) Use of int in maxseg socket option. [ 421.140752][T14836] Use struct sctp_assoc_value instead [ 421.627726][T14854] tipc: Enabled bearer , priority 0 [ 421.673093][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2457'. [ 421.740348][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2457'. [ 422.182983][T14877] syzkaller1: entered promiscuous mode [ 422.224861][T14877] syzkaller1: entered allmulticast mode [ 422.338337][T14885] veth0: entered promiscuous mode [ 422.374606][T14885] veth0: left promiscuous mode [ 422.400315][T14894] netlink: NAT attribute has 5 unknown bytes [ 422.452152][T14894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.828118][T14903] netlink: 'syz.4.2471': attribute type 4 has an invalid length. [ 423.079991][T14914] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2472'. [ 423.494443][T14914] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 423.614072][T14914] 0ªX¹¦Dö»: entered allmulticast mode [ 424.396621][T14932] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2482'. [ 424.457221][T14940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2482'. [ 428.156644][T15007] netlink: 'syz.0.2503': attribute type 2 has an invalid length. [ 428.363249][T15007] bridge0: port 5(veth1_to_bridge) entered blocking state [ 428.418169][T15007] bridge0: port 5(veth1_to_bridge) entered disabled state [ 428.531782][T15007] veth1_to_bridge: entered allmulticast mode [ 428.756158][T15007] veth1_to_bridge: entered promiscuous mode [ 428.829292][T15007] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.049173][T15007] bridge0: port 5(veth1_to_bridge) entered blocking state [ 429.057693][T15007] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 429.231607][T15017] netlink: 'syz.4.2507': attribute type 5 has an invalid length. [ 429.452623][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 429.772802][T15034] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.853685][T15033] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2511'. [ 430.133921][T15040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2512'. [ 430.327981][T15048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2513'. [ 430.989054][T15068] netlink: 'syz.3.2520': attribute type 2 has an invalid length. [ 431.003497][T15066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 431.747001][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2524'. [ 431.877831][T15086] openvswitch: netlink: IPv4 frag type 91 is out of range max 2 [ 432.540182][T15106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.674926][T15115] netlink: 'syz.0.2529': attribute type 32 has an invalid length. [ 432.681184][T15112] netlink: NAT attribute has 4 unknown bytes [ 432.694692][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 432.736334][T15112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.324381][T15115] bond6: Setting coupled_control to off (0) [ 433.608217][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 433.901465][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 434.175857][T15141] pimreg3: entered allmulticast mode [ 434.567304][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2539'. [ 434.760807][T15146] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 434.834547][T15146] bond2 (unregistering): Released all slaves [ 435.458116][T15170] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 435.504199][T15166] IPv6: sit2: Disabled Multicast RS [ 435.537893][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 436.216215][T15181] pim6reg1: entered promiscuous mode [ 436.240749][T15181] pim6reg1: entered allmulticast mode [ 436.375139][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 436.422321][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2549'. [ 436.595507][ T6709] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.610063][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 436.876443][T15200] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 437.124863][ T6702] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.226317][ T6696] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.278547][ T6696] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.731189][T15207] gretap0: entered promiscuous mode [ 437.754318][T15208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.814476][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 437.895577][T15207] gretap0: left promiscuous mode [ 437.998970][T15211] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.2554'. [ 438.242940][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.254392][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.295523][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.309751][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.486758][T15223] netlink: 'syz.4.2559': attribute type 1 has an invalid length. [ 438.733255][T15227] Cannot find set identified by id 65534 to match [ 438.882717][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.894438][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.912574][ T6687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.947527][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.957399][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.177906][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.633009][T15276] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2573'. [ 440.689807][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2573'. [ 442.233219][T15305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2580'. [ 442.534662][T15308] netlink: 'syz.0.2581': attribute type 10 has an invalid length. [ 442.632770][T15308] batman_adv: batadv0: Interface deactivated: dummy0 [ 442.823854][T15308] batman_adv: batadv0: Removing interface: dummy0 [ 443.000932][T15308] team0: Port device dummy0 added [ 443.048842][T15317] tipc: Enabling of bearer rejected, media not registered [ 443.145717][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2583'. [ 443.171971][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 443.259034][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 443.421787][T15328] net_ratelimit: 10 callbacks suppressed [ 443.421941][T15328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.557680][T15336] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 443.678261][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.727170][T15336] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 444.005195][ T6711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.048251][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.072514][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.647380][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.700487][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.847356][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.857944][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.195835][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.814510][T15365] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 447.354090][T15398] netlink: 'syz.3.2602': attribute type 13 has an invalid length. [ 447.776370][T15399] 8021q: adding VLAN 0 to HW filter on device bond10 [ 447.784986][T15399] bridge0: port 1(bond10) entered blocking state [ 448.019658][T15399] bridge0: port 1(bond10) entered disabled state [ 448.125412][T15399] bond10: entered allmulticast mode [ 448.197510][T15399] bond10: entered promiscuous mode [ 448.235702][T15399] bridge0: port 1(bond10) entered blocking state [ 448.243275][T15399] bridge0: port 1(bond10) entered forwarding state [ 448.477393][ T187] net_ratelimit: 3 callbacks suppressed [ 448.477415][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.639671][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 449.034030][ T6699] bridge0: port 1(bond10) entered disabled state [ 449.092161][T15391] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 449.184957][T15391] syzkaller0: entered promiscuous mode [ 449.192034][T15391] syzkaller0: entered allmulticast mode [ 449.208794][T15416] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2608'. [ 449.224352][T15416] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2608'. [ 449.290635][T15437] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2613'. [ 449.360406][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.550364][T15439] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2614'. [ 449.761404][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.771740][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.787220][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.403966][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.423171][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.456772][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.564160][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.617579][T15454] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 450.795008][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 450.886134][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.949730][T15463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2617'. [ 451.062849][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2617'. [ 451.551899][T15475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2621'. [ 451.589097][T15475] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2621'. [ 451.854296][T15486] xt_hashlimit: overflow, try lower: 3/0 [ 452.257414][T15488] bond7: Invalid ad_actor_system MAC address. [ 452.323340][T15488] bond7: option ad_actor_system: invalid value (1) [ 452.389868][T15488] bond7 (unregistering): Released all slaves [ 452.572392][T15475] netlink: 'syz.2.2621': attribute type 2 has an invalid length. [ 453.690936][T15500] net_ratelimit: 2 callbacks suppressed [ 453.690989][T15500] ip_tables: iptables: counters copy to user failed while replacing table [ 453.838220][T15505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 453.995936][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.036488][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.152271][T15512] __nla_validate_parse: 2 callbacks suppressed [ 455.152327][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2633'. [ 455.536051][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.665467][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.739281][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.135190][T15540] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 456.154292][T15542] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 456.184020][ T6711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.193171][ T6711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.228015][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.559853][T15542] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 456.596002][T15540] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 457.315656][T15533] syzkaller1: entered promiscuous mode [ 457.388188][T15533] syzkaller1: entered allmulticast mode [ 457.771259][T15565] netlink: 'syz.4.2643': attribute type 4 has an invalid length. [ 458.246415][T15567] netlink: 'syz.4.2643': attribute type 4 has an invalid length. [ 458.401273][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2644'. [ 458.571178][ T5613] lo speed is unknown, defaulting to 1000 [ 458.648612][ T5613] syz1: Port: 1 Link ACTIVE [ 458.770612][ T5613] lo speed is unknown, defaulting to 1000 [ 458.894127][ T5613] net_ratelimit: 7 callbacks suppressed [ 458.894171][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.068883][T15572] IPv6: sit1: Disabled Multicast RS [ 459.473180][T15580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.967405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.370980][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 461.058219][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.061988][T15593] veth0_macvtap: left promiscuous mode [ 461.921181][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.930059][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.975940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.009333][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.077630][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.125739][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.088954][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2670'. [ 464.166421][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.537095][T15671] x_tables: duplicate underflow at hook 3 [ 464.758688][T15679] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 464.846369][T15683] netlink: 'syz.1.2671': attribute type 20 has an invalid length. [ 465.026838][T15683] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.253498][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.337249][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.382175][T15679] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 466.066097][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2678'. [ 466.316100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.556454][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 466.576528][T15702] syzkaller0: entered promiscuous mode [ 466.604103][T15702] syzkaller0: entered allmulticast mode [ 466.711715][T15724] netlink: 'syz.1.2684': attribute type 10 has an invalid length. [ 467.376703][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.676321][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.684529][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.694361][ T6696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.717235][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.726286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.403926][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.443829][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.475788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.528990][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.251216][T15724] .`: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 472.312164][T15724] .`: (slave virt_wifi0): Error -95 calling set_mac_address [ 472.557246][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.241393][T15741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.364191][T15741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.455884][ T6709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.480817][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.491220][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.543579][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.602830][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.752100][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2692'. [ 474.086386][T15741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.242390][T15741] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.333773][T15741] veth0_vlan: left promiscuous mode [ 474.452659][T15741] veth0_vlan: entered promiscuous mode [ 474.609575][T15741] veth1_macvtap: left promiscuous mode [ 474.631919][T15741] veth0_macvtap: left promiscuous mode [ 474.646038][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.659081][T15741] veth0_macvtap: entered promiscuous mode [ 474.694628][T15741] veth1_macvtap: entered promiscuous mode [ 474.777709][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.800970][T15741] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 474.813552][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.832826][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.847530][T15741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.926108][T15741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.943447][T15741] gretap0: entered promiscuous mode [ 474.964848][T15741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.982967][T15741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.002636][T15741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.027245][T15741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.040675][T15741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.074398][T15741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.101460][T15741] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.121645][T15741] 8021q: adding VLAN 0 to HW filter on device bond11 [ 475.158348][T15741] bridge0: port 4(batadv1) entered blocking state [ 475.167696][T15741] bridge0: port 4(batadv1) entered forwarding state [ 475.180102][T15741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 475.204090][T15741] 8021q: adding VLAN 0 to HW filter on device bond12 [ 475.299129][T15745] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 475.317180][T15745] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.497106][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.507100][ T6702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.534926][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.545020][ T6702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.679051][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.932452][T15747] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 475.945508][ T6702] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.985130][ T6702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.015119][ T6702] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.141942][T15756] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.171527][T15756] gretap2: entered promiscuous mode [ 476.225525][T15756] gretap2: entered allmulticast mode [ 476.284882][ T6696] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.370043][ T6696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.440643][T15776] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 476.448066][ T6696] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.559417][ T6687] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.621128][ T6687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.645162][ T6687] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 476.759631][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 476.762455][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.142481][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.244617][ T6692] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.299209][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.333689][ T5767] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.343837][ T6692] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.550092][ T6692] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.634567][ T6692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.758405][ T6692] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 477.792328][ T5613] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.818568][T15795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2701'. [ 477.910057][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.056965][ T6687] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 478.132854][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.204549][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 478.316095][ T5767] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 478.554983][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.809634][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.974069][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.081084][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.655894][T15796] net_ratelimit: 67 callbacks suppressed [ 479.655949][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.013729][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.113934][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.200019][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.319621][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.426055][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.549500][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.626314][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.717173][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.760014][T15822] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2709'. [ 480.771003][T15796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.799385][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2710'. [ 481.269367][T15824] bridge0: port 5(veth1_to_bridge) entered disabled state [ 481.280438][T15824] bridge0: port 3(veth0) entered disabled state [ 481.287905][T15824] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.296303][T15824] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.435545][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.764546][T15827] syzkaller1: entered promiscuous mode [ 481.852267][T15827] syzkaller1: entered allmulticast mode [ 482.426206][T15835] sctp: [Deprecated]: syz.0.2713 (pid 15835) Use of int in max_burst socket option. [ 482.426206][T15835] Use struct sctp_assoc_value instead [ 484.268548][T15871] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2718'. [ 484.970836][ T6699] net_ratelimit: 18 callbacks suppressed [ 484.970858][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.984752][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.032928][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.041120][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.618472][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 485.774127][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.642075][ T6696] ------------[ cut here ]------------ [ 486.650797][ T6696] wlan0: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:01 on 5 GHz band [ 486.666259][ T6696] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:22/6696 [ 486.680026][ T6696] Modules linked in: [ 486.686388][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 486.697418][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.708992][ T6696] Workqueue: events_unbound cfg80211_wiphy_work [ 486.716332][ T6696] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 486.723763][ T6696] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 a8 32 74 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 85 2d 74 f6 48 [ 486.746137][ T6696] RSP: 0018:ffffc9001b0874a0 EFLAGS: 00010293 [ 486.753191][ T6696] RAX: ffffffff8b52dfa8 RBX: ffffffff906a98f0 RCX: 0000000000000005 [ 486.762362][ T6696] RDX: ffff888033e03ac4 RSI: ffff888068465938 RDI: ffffffff906a98f0 [ 486.771510][ T6696] RBP: ffffc9001b087610 R08: ffff888068472ac7 R09: 1ffff1100d08e558 [ 486.780683][ T6696] R10: dffffc0000000000 R11: ffffed100d08e559 R12: ffff888033e03ac4 [ 486.789863][ T6696] R13: 0000000000000001 R14: ffff888068465938 R15: dffffc0000000000 [ 486.799028][ T6696] FS: 0000000000000000(0000) GS:ffff888125021000(0000) knlGS:0000000000000000 [ 486.809264][ T6696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.816833][ T6696] CR2: 00007efe2f409fe8 CR3: 0000000056eca000 CR4: 00000000003526f0 [ 486.826010][ T6696] Call Trace: [ 486.829903][ T6696] [ 486.833408][ T6696] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 486.840462][ T6696] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 486.847569][ T6696] invoke_tx_handlers_late+0xb5/0x1830 [ 486.854648][ T6696] ? sta_info_get+0x2ec/0x300 [ 486.860182][ T6696] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 486.866874][ T6696] ieee80211_tx+0x2d7/0x4b0 [ 486.872046][ T6696] ? __pfx_ieee80211_tx+0x10/0x10 [ 486.877335][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.887164][ T6696] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 486.893554][ T6696] ? ieee80211_xmit+0x2e5/0x3c0 [ 486.899180][ T6696] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 486.906094][ T6696] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 486.912778][ T6696] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 486.920122][ T6696] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 486.927292][ T6696] ieee80211_scan_work+0x488/0x1ab0 [ 486.933303][ T6696] cfg80211_wiphy_work+0x29e/0x420 [ 486.939222][ T6696] ? process_scheduled_works+0xa1a/0x14c0 [ 486.945943][ T6696] process_scheduled_works+0xa88/0x14c0 [ 486.952345][ T6696] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.959250][ T6696] ? assign_work+0x3cf/0x5d0 [ 486.964546][ T6696] worker_thread+0xa47/0xfb0 [ 486.969956][ T6696] kthread+0x38b/0x480 [ 486.974680][ T6696] ? __pfx_worker_thread+0x10/0x10 [ 486.980582][ T6696] ? __pfx_kthread+0x10/0x10 [ 486.985889][ T6696] ret_from_fork+0x514/0xb70 [ 486.991265][ T6696] ? __pfx_ret_from_fork+0x10/0x10 [ 486.997165][ T6696] ? __switch_to+0xc89/0x1420 [ 487.002563][ T6696] ? __pfx_kthread+0x10/0x10 [ 487.007879][ T6696] ret_from_fork_asm+0x1a/0x30 [ 487.013480][ T6696] [ 487.017051][ T6696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.024362][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 487.033950][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.044044][ T6696] Workqueue: events_unbound cfg80211_wiphy_work [ 487.050339][ T6696] Call Trace: [ 487.053639][ T6696] [ 487.056590][ T6696] vpanic+0x56d/0xa60 [ 487.060645][ T6696] ? __pfx__printk+0x10/0x10 [ 487.065262][ T6696] ? __pfx_vpanic+0x10/0x10 [ 487.069789][ T6696] ? is_bpf_text_address+0x292/0x2b0 [ 487.075142][ T6696] ? is_bpf_text_address+0x26/0x2b0 [ 487.080383][ T6696] panic+0xc5/0xd0 [ 487.084136][ T6696] ? __pfx_panic+0x10/0x10 [ 487.088590][ T6696] ? ret_from_fork_asm+0x1a/0x30 [ 487.093565][ T6696] __warn+0x315/0x4c0 [ 487.097580][ T6696] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 487.103429][ T6696] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 487.109260][ T6696] __report_bug+0x276/0x570 [ 487.113906][ T6696] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 487.119750][ T6696] ? __pfx___report_bug+0x10/0x10 [ 487.124822][ T6696] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 487.130661][ T6696] report_bug_entry+0x19b/0x290 [ 487.135551][ T6696] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 487.141399][ T6696] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 487.147256][ T6696] handle_bug+0xce/0x200 [ 487.151678][ T6696] exc_invalid_op+0x1a/0x50 [ 487.156218][ T6696] asm_exc_invalid_op+0x1a/0x20 [ 487.161129][ T6696] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 487.167572][ T6696] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 a8 32 74 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 85 2d 74 f6 48 [ 487.187219][ T6696] RSP: 0018:ffffc9001b0874a0 EFLAGS: 00010293 [ 487.193326][ T6696] RAX: ffffffff8b52dfa8 RBX: ffffffff906a98f0 RCX: 0000000000000005 [ 487.201327][ T6696] RDX: ffff888033e03ac4 RSI: ffff888068465938 RDI: ffffffff906a98f0 [ 487.209324][ T6696] RBP: ffffc9001b087610 R08: ffff888068472ac7 R09: 1ffff1100d08e558 [ 487.217330][ T6696] R10: dffffc0000000000 R11: ffffed100d08e559 R12: ffff888033e03ac4 [ 487.225342][ T6696] R13: 0000000000000001 R14: ffff888068465938 R15: dffffc0000000000 [ 487.233347][ T6696] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 487.239218][ T6696] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 487.245323][ T6696] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 487.251518][ T6696] invoke_tx_handlers_late+0xb5/0x1830 [ 487.257010][ T6696] ? sta_info_get+0x2ec/0x300 [ 487.261734][ T6696] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 487.267578][ T6696] ieee80211_tx+0x2d7/0x4b0 [ 487.272115][ T6696] ? __pfx_ieee80211_tx+0x10/0x10 [ 487.277185][ T6696] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 487.282677][ T6696] ? ieee80211_xmit+0x2e5/0x3c0 [ 487.287554][ T6696] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 487.293560][ T6696] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 487.299397][ T6696] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 487.305765][ T6696] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 487.311971][ T6696] ieee80211_scan_work+0x488/0x1ab0 [ 487.317217][ T6696] cfg80211_wiphy_work+0x29e/0x420 [ 487.322356][ T6696] ? process_scheduled_works+0xa1a/0x14c0 [ 487.328105][ T6696] process_scheduled_works+0xa88/0x14c0 [ 487.333715][ T6696] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.339733][ T6696] ? assign_work+0x3cf/0x5d0 [ 487.344353][ T6696] worker_thread+0xa47/0xfb0 [ 487.349009][ T6696] kthread+0x38b/0x480 [ 487.353119][ T6696] ? __pfx_worker_thread+0x10/0x10 [ 487.358260][ T6696] ? __pfx_kthread+0x10/0x10 [ 487.362885][ T6696] ret_from_fork+0x514/0xb70 [ 487.367514][ T6696] ? __pfx_ret_from_fork+0x10/0x10 [ 487.372657][ T6696] ? __switch_to+0xc89/0x1420 [ 487.377361][ T6696] ? __pfx_kthread+0x10/0x10 [ 487.381981][ T6696] ret_from_fork_asm+0x1a/0x30 [ 487.386803][ T6696] [ 487.390106][ T6696] Kernel Offset: disabled [ 487.394429][ T6696] Rebooting in 86400 seconds..