last executing test programs: 3.041982171s ago: executing program 4 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x30}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000401500010300000000000000000b000000"], 0x14}}, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000cc0)={&(0x7f00000002c0)=0x40, 0x0, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f0000000c80)}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = socket(0x1a, 0x800, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x40) 2.973277024s ago: executing program 3 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xe0, 0x21, 0x300, 0x2, 0x25dfdbff, {0x2}, [@generic="72ba960a09b4d60bf5f659eabc549ddd4f990219ee3df037e093ad4e4a244eaa478d858ba7d31b9c06c29e9c95a89160c726f3cb6167cadbb0b9630dc93d1f4b8e981447694798d1b12ba222db540bbc14a81486174b7806cd45913a1f955700ffeb294e43e0ba41df0d05672c5dcae74cc30f24fbc5089b093f447bd322966ded3bd9a7d046378ca81ba4041c4ce933e1b599808158f2ace20ec700c1ff6fe057be01d7bd708466cbe94d2705b1481d989e8d85d7d6fbe70bc1847b03ab85dfa11cf886dd50dcd4d2"]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(r1, &(0x7f0000000040)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x81, "f69be62f4ee523f06628b59d85d81b1ebf3341d27af8ae246c4a939fdabe30ca1a138d23265f2dd619ae6da37506a1e65dc2b27de61b04403a6a1753"}, 0x3f) 2.836840338s ago: executing program 2 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="0400c5c0475b2da1952f71127e00004000009500001987751421013c4745b44faf6065c3e5a0fe05633758cfdbefdfa2faa913f5cab0d9e26bb8e20e2899393cb30d53c552d6029830e013b889f3f9e28b4a9df810b2d5ee07b99499689bf025fecfa4ff679ad8e497ec49ea5f180a9b9cc492bbcbe8575e2d284a624b4a675928b77f949233dbfeb3ce9759905276ba2bafa2647c055c0c7081af00fde1e657aff0b56f0f15e36bd9264215539c347b0b3ceb9d371cfbeb6ebfea6ab7fc9cf828c4a6fc0c2f90575f040c83e68d4c9c2e71cd13343ef3488208f60abc73a882571ea29103540a986598add15bcebf4a1d1cd5bb11c363"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/202, &(0x7f0000000240)=0xca) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 2.736876085s ago: executing program 4 (id=2247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES64=r0], 0xc4}}, 0x4c050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000300)={0x10, [0xfffffff9, 0x30c], 0x23a}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x20}) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="13050b7e109faa42bd15b2b7eb1ba743af773fcb3da707f2868e99cd3bb94722cdb0d3508dfc18c21479135695833d191d310e4920ee46ed85298769bbbdf95ea1780a36828ad125184a03804d2d6a7e181d44d74e7641ece0e9d90ee2342ea02f8d", 0x62}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000130001010000000000000000ac141411000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000100010000000000000000000000000000000001000000000000feffffff00000000000000000000000004010500ac1414bb000000000000000000000000000004d22b0000000a000000000000000000000000000000000000000000000003010100058000000200000001000080ff010000000000000000000000000001000004d5320000000a0000006401010100000000000000000000000000000000000248006d060000ffff000005000000ac141418000000000000004000000000000004d42b0000000a000000fe80000000000000000000000000001e0000000005010300000000000200000006000000e0000002000000000000000000000000000004d42b0000000a000000ac1414aa0000000000000000000000000635000005000300f9ffffffff030000d900"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0xb1cde19045e6fe46) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) accept(r2, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80) r6 = socket$kcm(0x2, 0xd, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000080)) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@phonet={0x23, 0x26, 0x7, 0x7f}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000340)="80005b020eaa4da22288a719b2b00d82979eead40d1e1048c1ee390ab497972e0f26a01c90f5080000002e96e425db2663d5851631fc1f2be43b192de59d9e87e75868bfb99837e9bfef5292c4ea5370bde32ee0df7156df02bed080c719b1b50cf93b49685a5b05833db118ae83ae5574680d3a7be206cc9b704822709394aa", 0x80}, {&(0x7f0000001640)="dc730a5282191659550ab67b5bf9633e54df344b77ee7b52b4c5e3e0b428deb2aa1277e7c2a5ea0da4a80b9f871a43988a30174f4743028b5236496d1913a02d1185c5dede8db40714ab5a8bcc177337c79c1318602f4da8e20177357447fe3ffd9bf8779f442e35041e21593fd0202fdb98f290c332eab2404eda5cf3525764d6a7df58996e4ce034b657be4f2217fc4aa81208fc99d6f5789ae7452ff776d478fa6efe2a1f841d100f2ee0ced4265173b918e661cccfd73c5161912f447e810aa09bddae990852b2ff503e3b571c61bf94e09d39f4206b6926b05c3e88b3289117324bcb7ef8617cb18767c01c452280c1d737e8a13626e7eaab5892024173de52372f55ba7eda6722ccf17251c954a7e98ec277fcf56f46d4ea1e868fce06405c4a64defe2eea509d6507c5c40d1a8114fd54784429781df85f477088ceff5fc95aef6e03e359a2937942840f2f1f311943d3fd2344f36c360a2582b45e1f17d9ca69c7fd396a6a6d0f1d52134ae047c88c7766d1e64a37ec752166afccbc5daf245f31fff9d158124ea56f4408024120a4fb6cd3c4a1dab3086013fa57ae1bb659e4c91df86e91b73ae4565966dbacbabe7423b19ecd46909fe4e8918f010773e95abc345cab50d90a8d95d509b8bffe488e7fb7b35cb51cac54dfe909ec28b39a8357db5740a26546e17b35ebf0146207f98bf78636955495ebe369267484c88405b1957543c7b680f8f923e3bd5ea9958a6c3c72586633710bf27b1c3d0891a583dc697c6a7d7fc2aec47afa3d77e8bc486d99845693887722b7482322c93af3ba050b355d633503300b48d561ebefaa1a58e867ffb315ba5b8440b40c933c6bc5ed147d9afd23b2661ee5f2b2ff4b254157434fee2f4e4ec44631c6f5f3beaf4e1d50df8af3438bfc3baa4857ec75fe6ba2338b4c07a17f68b910711a8807fe828920dad94c353fd47787321f4b2fceba1416c5db7009ecae2c55996377a4315db852e7a3ec68e9deb408c16a9afa04ac8da6e69cf92a35fedfec3adf609e56e2fccb98e7120cdbfc76f6e553943bbb961c2ed1cfda8aab76d8f10a63eb8360321810149645c43563c00abb992d9daee6d2806db2952948af3c78a5ee5ef9864324758e2557b772ad620edddcd1e82fde77fcd4e5902edb003778a38c55aa3487c766fa01081af0373efd6aa4e4a071db5c3c311d480f8e95324dbcb3b3221fffd5d6c3ce2280072cac4e945cf521ffe3c2e283c36ee74139f5ecec330f49b0033f862da08b95551388534c4809f013289246c9fc82528bfb8509a9a72146646c6f858d2ddf81e40477e830a334cbdbfca6cd144710575ac189d5a649f9159896b84e81304880263fc27635e02c031c972f9f9d1f8f6289508e81c41e1abe5936ac86773eae47d0a442e8ef7cff049ac2b5c16d729b1a6deff6cea40109ee2084b4159c6286146e01cf3ecdb61ea9f783e3b7de5b26e5a81df44f0bc30d17f76a1a2e2cbd8b9fb6dd85453064eca78706fbd7d14342030c51966bfb068f6c6c86bacf3d774bd61056362369b7ee5ca3bf7f4d9c90569d06d4a16472ef6d68a62371d180f8d3c80787b8150b1a5d49ac8c3c472e2902948bf9a8c88b9dee9aa5dc4c3e4c0143319606b3f02a631bcc921d9cc4ddc02902b70d5cac761582fdab1933c8a42c32858297445b6b9497cb61bc55d785414399dc69442bf4c3e09f91c8102468126ac2bd78a67c88a5951e56f0d9083cb17f97456d71886b289fdb523ae80e2990621a5fc5fad6d8b193192afc6938d37fe02eaf89b5b4037783fe8723e3909bbaa8dbefe57628eef030d8a9349b79f00d6c73c39b5668a2455b4f07b0d6ca5acbc310c35c26b5baa5bd12c4841101ca25e8c19e96cabf259003428984d193bfe4501dff82487bbf90414b0288b48b9f1801f74ce8484086553a4e8ebccf93e3e2548b00c6de5dfe9f8c1b4e78a4de8415211c7843ff5e036914e48dd001ca6d86e17541ee0885a45d861d791cd92124dc301e32ce7f567c7f0d4f54598397c6e5db193af60bc6505ab6f4d9075564e5ec3bc01bb4e4010e1eb7b7cb369318a5a7c14ac688b7d988e9e5df8253aa94e7d7f9acfbb36592af98ef4522967607a9c846d5abcdc1bdd07519b203e581b10bace3ee16e5cfa37dfaf8f7869981f765b300c5322671e55837435efb2ef1f7d8ab11029c79bb1d72e705c96f62831caa398e92b385128c48ce4978e7364f73eaea2d4d6051deebd3d4631748710b8840796db866e07fba3c25959e053f463e065bffbd0df651ec7dc87f61d0b79e51ee252c70f91c2716f7a5ff32d27173aeef09c7fca9f515e9200cb7848669a6d09b0fb5d8f9fe8930c2f0109bea88a8d30eaf8aedc7d75a048b34c9f2a434ec16996fb3407568f1e90e6bdbb10ed3a620281c82e1eddc5b7db5bdc25c174ad9d65db9b54348d3caef1b6c676443077ec242a83b4d436e51427677848bbccf92f7952a0890b3aea38ff6ca648262bf5b54c8d2cbfde2077a37d35373c4cb37ad25dd3d3265855b403a3815c559b4db700738a84cdd2e775266a938d7d5270b525a09426dcf7b43f543c307065cb9486abfcd29d0d300240e7eb5e8a99bb2cf4579044c058d125b28b79c66ed8d13b2a9df0820a71d421b958232bf231cc2e9d0e1f9ae36efa3831f3fddada129956b318e5f5a99f00b5084c95b53f406e2a93cce79b2198a59d0abcf8fde1e7b09976a71f584d1536fc4beaec0c6339a20bc1c68b75fcd8a700f531994cc7fcc7b59bf8b2e9a660029bea9783e49ba6a6dde6789027ca883a7cc39591d42d911d5bb285eec7fd52d874832ce593050f53445d1eb48231d7c3b4bf4f59ffd94fea895f1b6d4c5493a5f3205200f031ab8dce6572139a3eb06f4edcecb9189474ccc219c931219fe4d1a695c4f59efcc909047f316aefaf31365e650db4f8f185a28d1a03a3103ef6982e0d5a5dcb34c28f33050138813fe7ca1c1e2dff4ce9aad8033805025e73b1b72e2ffa5b1945e732795a90f9208e5da43b301eeb9751e1f4bb3e1a88c0ab0d2685ea19127e277108b1888dbc8eded4c751edccd98a4cbdc3d321c26b8a70079dc38bb7ea4f3f566ec1520aaea623c3734ee7efad4566438d966fb22c3b61dda80c1fcd0e2142e4f8319abaeb15b0a601c50d4a11d3d7b8cdce18d5693c9795178bdb55a65d4c6607a7c8bc46ea158cf2b1178f4be69cc3b7ddd18e09bd210e554954f802a68ef393294ab8a268706bfa3501c138ceab5298b83077f3dbb84d9e24f6b838954e65e96a6f7f94dc75c4721e55978bbc15310980e0935beea473681b728c652d41ad429bbc935653a94a2182670cc6f4036afe84e8418e55311e1831bf9b532679366e52e595e8d584dc077b21c37bb77ed124e989ce2b8dfe514519619aa27904a452b9d0debebfada2c155ea264982d3f3059f5d8560599c0ee70839c91b642407eab82ab2173bd3412d504ef57e59181091895f428cb92807e52ca71b0b9f7722622aa47f4d1faa5c05e9f01d97e833dc3bbb4a80a084a4b16b0a11a2ff412445e3518af0609ac54d321238d4539834fcff7e4ed81483ff5c793eac039bbf104ecf79a45cf3f685c80f4a7aee44da9356b92f21fd9258c882f7d4dc95a5d46542207f30d09fce53e2ca51ca888c66365bb19be04e47822f4e48f53b3b3a80cb688556afa5258dc67828176adc8c3e7d3c26a1b719dfbae75f4d51d477fcf8af91296406fbdbcd15a06cf51e78b3f79b35f8881c26b778ca5672ad302752787087e5a42ae4bddabf24bfaa17269393fea7317cbd73fefda635d0deb037e17e4563261a909616a041562af5262916050f0c1b12cd2d109aed9a6f4d4aaa1ec4305a89ec2a48631b06cc43253b82b26d817bdda0352d3ff82cd0e1eff3128bbf593c8dc439071f8f696c0358c6eb2d4c0ee8190523f68ad0926300cdda231392eea3ce4188fd8e4857629b612e4948f1f2add52f2bd09865c43dd42f07790f97bf9b8853da0d03430eca47f51eee698d8d331039449a0d27637b7e95b760e5c8cc3e037a5837285d1f220f50848721c754834666e4a952569c1bb18d1f6d731b320055615a59725016d1844f131d36a85b385969dbfad7941ab3c553ad570df25d849067f7b0f32d4d3c74c844cbe377b97a08c64776d3524e174032268c53e5414142fe0013c79847d7b847eb873bf4e933e80e6c2efb47ce6987da90895f8f3b7d5f00a8b6029566e5159110c6518da5653403aa45c6517c4be5a4cfedfbb711d425be8ef3dcdd9aee36cc163c956fa26ecbeb59a960ab9e40744d21e24f5143e9a043c74b326e11bfb35fc3488c2ba3703d1d9405a6a6403c8f427c39e8c02464d889ae68e042c1ca17d43c9f514373eb46d2e48a91a80469d459a81e2f8dc360949b39b524d264a59db76a1b092ac5cbac42526cbb17a98860ab542036421613fceac3e8afe81eab662c6b64380661fb3f876efcb24ad31ea660d4c8e1abfa7bb78a3a6bc93b86d5158fec39bd445e1f1080a64f43227b9631b0037f5caed04ed0b86b6d04a9ca763eab0eb2cad11167f2fa07efcebee785398cbfd88fdb860297fefa37ec00f82b5ea6534470eab533f57b27603edcfbe99245b8733ed2058b196ef8681075863bf5fcdb6381fa6e5350d3227de183136bccf6f3f7baeac2d8796c716049a201b9459a6637e75e5d6efc7d60d7d62008810d0e09d20ccc762d6c57660720ad728361cac52ea76a3c02050da6ee611d13a3ba0ae6c85eaa7001bf8fd9f409fb1417c29b44d55a3e75ec75c891b485b745756367da8dadf7ce841d353fd0a5128a44f98ef49d1228fffb4328bb5c4e6415f2ca6d957afbe7a1fa4f0984624fb1152b13c54f4e467edf0ab50c1447832ca6f57adcf0d2028972519978c7de9c52448ae6c6373546a12216a5c551cdb3a0b57bf35e0871de0cd176d94d538a4fe5907bc44ca9f680db03df7c63e9d1dbf6c4bd7f0c0d6146de6f559bfd2c2a8d7c1970b1d711abeaf85c1e4150d5cbba6e9cc66e1c892f48c34bb14160e6fa16296acbb3a87e2ffca42ebad6d58b7cb8080b9993d623b5b722cbac6fa523737d4d151e222dc45b6fa221ba3116ad3c589cf9583821a8c0e5b94e51b083f183cbfbfb5a6fc0478c2801094bed09293aafa83b8854e48d9426ae1816203d03d422a776f8c526b056b941680ba1a13ad676e55f098765c8dd5d468dc874f191abaf003e2dd6f70cf6be6fd2e8cd2394161a442ae974bbd37edc19ef63a5eeb14929f7c244ace4e7f9fcd8452ea3ebd582f645eaa5364ae67d775cc52ef179ae01a5d24c1b985eb240883ff810fe384a05d5230436dca9058b927b46bb59b6dfb30d52cbda4d6b35baa594ed8fe6423c7f5d09124b20b5466e4acb373cc6bcbdea6584d4db616cdf43f06a3b3ebb5940b5b8fdae94486370fe0b72b6c6a9d11d677da0336a3fe71a94a07c66c127870552406926a763eaa0f33d653d3b19297ecdb1eed8ef5503953abb541c9f34e2f1e316df67b84163c7f266ead982a86e6972eca1517122cb1c74e2840d14839114e9f42b2883f6cef8cd133f7ed45317a86b83e968b0d45c946037894892d61bdff2b8c2a3f828bdcf6ba13e6192789727ae112e5bed84c9812dad4206553c47a346f06f6d25bc876285e1cb5c6253d3bc7a95709ad4342ae808a667480847bcc5ec75cbd506893dd9be282a2a372a829a89c6ea4e180c2bf75c0a7185fbb77dfe52dfb44846a73e3d384427f", 0x1000}], 0x2, 0x0, 0xfffffffffffffe6c, 0x900}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000540), &(0x7f0000000780)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES8, @ANYRES32=r3], 0xfdef) ioctl$sock_ifreq(r5, 0x8943, &(0x7f00000000c0)={'veth0_virt_wifi\x00', @ifru_flags=0x8000}) socket$inet6(0xa, 0x80000, 0xd) 2.625360026s ago: executing program 2 (id=2248): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3a, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.516064352s ago: executing program 3 (id=2250): connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x7, 0x3, "59112b56ddfe7f7bda44a107233062ee74cf28ebfcb0320ee4c7d8d17cc14b7b280f7435b9aadd91c4352d1a955800b820e2aa74322467478e4c8813a6b8c6", 0xe}, 0x60) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYRESDEC=r1], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x86, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.44542503s ago: executing program 1 (id=2251): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0xa, 0xffe0}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.209250915s ago: executing program 3 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a0101020a010101831b6bffffffff7f000001e0000001640101017f000001640101020000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000bc0001c648a0"], 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000100)='\x00', 0x480, &(0x7f0000000140)={@align=0x1, {0x4, 0x9, 0xf, 0x9}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x5}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xcc, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x20008840) 2.196768674s ago: executing program 1 (id=2253): ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x8, 0x3}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0000000040a03000000000000000000020000060900030073797a300000000008000540fffffffc08000b40000000031c000480080002407b9060790800024044de505d080002405a8fa956740004801400030070696d3672656730000000000000000008000206000000421400030076657468300000000000000000000000080002400957913514000300766c616e3000000000000000000000001400030064756d6d793000000000000000000000080001400000000308000240520fc02c"], 0xc0}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000100060000071a80010061cc", 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40c4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9decce50a79238b3e121fc2ea610193576db16506839376e493af83be783a353d3233afe090102bb7b2ec69c3588a061daaa4a90327770c9828a4bf9c24a6274895cb53b10b15f528e57c092bba254700677d4db913578fe40a4c23f606fa6af19330c9450f2a3ce3fa86f6b5b5abf465214c8eaed2578992dbe2db328fc403aa62b3e6c4cef11c71c71291c95376a1d46e6832759b86d0802ace786c37ab7706ee060bc7eabc25ad358816bb2a356a471c95f50450caa461c511a7f93537c6124924d927c389d6394bb527b4a", @ANYRESOCT=r2], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037042cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="eebf198f9bc1d1d4887afbf7f3fd9776e14966b9a97edca186cdb037d4e63578758be4a6eac5e3a4f876c6e03db30f0d501cf2fdae306470b0b13e43784b439bf639604ad90665fe7147c25828a6119e0a41f30c4d975447866da3c8be3eb0fd1c805583b1e1d2cd0ae2b1651b9a77b24aa6e1ded6bcc773fde0de6b378fa4332af8224d29af964da7c28a86ff7ae04345f5ebcfa88ccd0908600184b3d17317e3a0edabc3cdeaf8c0b2cf801eda239a302add25785417a2470817", @ANYRES16=r5, @ANYBLOB="00042bbd7000fddbdf250000000008000700", @ANYRES32=r2, @ANYBLOB="05000d00180000000800070011a4b54c9dfdf6cb31bda1be01680253fadbd3e62a941701a1d70603c53c55d71050ed7a4b8aed97aa48342053424e0b72be480e751aff010000000000009be583cd108786b0eb44b9072a5bf82d75662f898e18d6e1c2feacf388978e70c8b37a93b61dc7e9459350bd9c0501f059daefd7dee0db9e3ee77f394fc4c5ece5c01651f6319902490c05792beb5d5782fa559e7a0419d5c6c975b85c0d32d4c42dd48bd3cd97b9e10ebe714414d2f83c2ba5b97e4784e49d7e695bef5945468c15", @ANYRES32=r2, @ANYBLOB="14000b002001000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="05000d0022000000"], 0x50}, 0x1, 0x0, 0x0, 0x20014800}, 0x2c800) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r9}, &(0x7f0000000540), &(0x7f0000000740)=r2}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000005c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r11}, 0x8) 2.133761962s ago: executing program 2 (id=2254): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'veth1_to_batadv\x00', @ifru_names='bond_slave_1\x00'}) 2.014225128s ago: executing program 4 (id=2255): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffe, @mcast1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r7}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYRES8=r8, @ANYRESHEX=r8, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x884}, 0x4000800) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0xc3, 0x5, 0x178000, 0x5, 0xffffff81}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff7}]}}}]}, 0x58}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x5c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfc}, @padn]}]}}}}}, 0x0) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f00000003c0)=0x3a2, 0x4) shutdown(r13, 0x1) sendmmsg$inet6(r13, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) syz_emit_ethernet(0x37, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@broadcast, @random="000400", @val={@void, {0x8100, 0x3, 0x1}}, {@canfd={0xd, {{0x4}, 0x1a, 0x1, 0x0, 0x0, "1d57cdaa8424bbf7934bda67578084c5794c186f25f10ec4f5201084213b931055b41f200884ed43189a2304ae414800020000000000007d0bef392d00"}}}}, 0x0) 1.902992554s ago: executing program 3 (id=2256): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x800}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001800050401000000000000000a800000fe0300010000000014000100fd0000000000000000000000000000010800040001000000060015000700000014001680080001000300000008000300fe000000"], 0x54}}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010302000000000000000a000000"], 0x14}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x800}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) (async) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001800050401000000000000000a800000fe0300010000000014000100fd0000000000000000000000000000010800040001000000060015000700000014001680080001000300000008000300fe000000"], 0x54}}, 0x0) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010302000000000000000a000000"], 0x14}}, 0x0) (async) 1.769721311s ago: executing program 0 (id=2257): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.617502117s ago: executing program 1 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100260000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100290000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002a0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002b0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002c0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002d0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002e0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001002f0000000a0002000000000000000000", 0x1e0) write(r1, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100300000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100310000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100320000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100330000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100340000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100350000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100360000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100370000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100380000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100390000000a0002000000000000000000", 0x1e0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="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", 0x1e0) write(r1, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100580000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100590000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001005a0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001005b0000000a0002000000000000000000300000001c00010401000000000000002d0000000100000080000001050001005c0000000a0002000000000000000000", 0xf0) write(r1, &(0x7f0000000000)="1c0000001e00010302000000000000002d00"/28, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x4) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.614712591s ago: executing program 2 (id=2259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) sendto$inet(r0, &(0x7f0000000000)="84d5092072cf31aeaf4109224b1526429eca0111c6fa46dcdb1515f1e38eb0e69f600672155f8c603f1c8c53aeabf09c6f07df1f5382d5df7ced0d710696d88ebcaea9ea8cc347aef1ae64255e2f098d4199871ac09814970ca6d039dd50e545fd7f8f0529e304d08132ea3792dd78cefad0a864534007ba3dcc9a7d0ef7ed83632ce7dc93c570e62b4c66e8ab6272dde9162e59cbf3689539ab969b72dd69ddd748dfb1a31c6a1f8d4663621fee405a0d4d513c307e9dbf48799917b43b8f4698a8a8216ce84736c3c274a9edcf9e6ef2a33fcf3ccaa1358d9a37f76575ca35d412b02e78d66de9d23159422d3aae2cec60d9851a", 0xf5, 0x4004000, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x0, @loopback, 0x4e23, 0x800, 'rr\x00', 0x38, 0xfffffffc, 0x21}, 0x2c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r2, &(0x7f0000000140)='}{*]@#7^\x00', 0x4d2102, &(0x7f0000000180)={@align=0x6, {0x41, 0x40, 0x6, 0x1}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x400}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x4, 'sh\x00', 0x12, 0x0, 0x76}, {@loopback, 0x15, 0x2, 0x1, 0x8}}, 0x44) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x80000000) 1.438518231s ago: executing program 0 (id=2260): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000006000000020000000a000006040000000d000000090600000000000000f561fb00ea02811bc5a2d829000000000001000000010000000f000000060000000700000000000080060000000e0000000200000007000000010000006f0b00000f0000004e"], 0x0, 0x7a}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) 1.188891532s ago: executing program 1 (id=2261): r0 = socket(0x10, 0x2, 0x0) r1 = accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x40800) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001a}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000000800", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) listen(r2, 0x7) (async, rerun: 64) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) (async, rerun: 64) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) (async) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010000000000000000000000000000000000000000000c0003006272696467653000140012800b000200627269646765000000000000"], 0x40}}, 0x0) 1.152122701s ago: executing program 2 (id=2262): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, 0x3ed, 0x20, 0x70bd2d, 0x25dfdbff, "358ebfeedf4d5d9639967df864b0477753a135d7138c02ee01723ac11235e8252a95c3448191af36e6b7c368a461b7c628de9c584b6685717b17b1143ca34d76e78c256e3da07604198752b918ed0cd0ff7342055b3473cb7c7d79eeafff8c7458cfc5d2a5bcdfc52ef28f5438d523f379eb1a5470a77096b3156c13030cb25205c8b378483231013b9f2cef10d2faa5e797c27ebcba28bc6dc08a226fb7aa375d68aae7d8fea22200ef15bb8b534b172620a6570ab691b72311b55bf2c7fac069aa7110f1c21bafe25fb3b98c4a37ec858d8c65fc8a595d869d7c361668ae57", ["", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x48011) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x2, 0xfffffffd, {0x2, 0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) 1.149510378s ago: executing program 0 (id=2263): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000100a80)=@bpf_tracing={0x1a, 0x21, &(0x7f0000100700)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xe, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x2}], &(0x7f0000100840)='GPL\x00', 0x2, 0xd9, &(0x7f0000100880)=""/217, 0x40f00, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000100980)={0xa, 0x2}, 0x8, 0x10, &(0x7f00001009c0)={0x1, 0x8, 0x7, 0x400}, 0x10, 0xf93d, 0xffffffffffffffff, 0x3, &(0x7f0000100a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000100a40)=[{0x3, 0x3, 0x5, 0xc}, {0x5, 0x1, 0x7, 0xc}, {0x2, 0x3, 0x9, 0x1}], 0x10, 0x3a1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5b, 0x0, &(0x7f0000000280)="be59a8cac3236ec110a5275353c502f6dc9bc796405a8cce107118b4431d658f3d28d144a724fc810c02c3d916954ab24e445e64e51e08ba6286ad2df617fbd2c85441cf6c9b5121803d1b1b5e009c544d4f2f92c8095f71c670e2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x25, 0x0, r2, 0xb2e, '\x00', r4, r3, 0x5, 0x5, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 1.086714105s ago: executing program 4 (id=2264): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xa, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xffe0}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40410d1}, 0x844) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400e5ffff0200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a48001280110001006272696467655f736c61766500000000300005800400180005001e00070000000500090001000000080025008000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, 0x0, 0x0) (async) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=r11, @ANYBLOB="010028bd7000fcdbdf251b00000008000300f516edc86ea35dc4a8ec592762ab8bb0d032a9a7771ca1e0c89739f297c4b6f2bc52d4dab03c355083abad1bf2684c0a", @ANYRES32=0x0, @ANYBLOB="10002e800c0004000201aaaaaaaaaaaa10002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r10, @ANYRES32=0x0], 0x44}}, 0x20000040) getpeername(r5, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10, 0xb, 0x5}}}}]}, 0x40}}, 0x0) 958.3604ms ago: executing program 2 (id=2265): r0 = socket(0x1d, 0x3, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x9}}]}}]}, 0x3c}}, 0x0) r2 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a01080000000000000000000009000100737b7a300000000014000000020a01040000000000000920000000020a01010000000000000000070000060900010073797a300000000014c8000010000100000000e4ffffff000084000ab1e2a7aaeebff73a4f3a7ac885e750c3a745352a42052aa9d7ec26daf63033c54d797c88678f612e83a0a8cd1043883263f63e5a50d11986f28045d74ffd0000"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 809.685318ms ago: executing program 0 (id=2266): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@netkit}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x89e1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@netkit}, 0x1c) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) (async) socket(0xa, 0x3, 0x3a) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) listen(r2, 0x0) (async) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0x200, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x89e1, 0x0) (async) 766.813534ms ago: executing program 3 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450300b000674000002f9078ac1e0101ffffffff0000883e009c907801000000030000001729126607ec01523d392540578d6e124da9a7a95ce7a975a2e32ab1cb11d139b1b01d89323be226f1f917e9749234f5cf9e2771ba4654512b292f7e41bb549e43d2f7423a736f6fb15828a8c285a9ee93f4495b810a92445062eea52348ec785a9c8211b11a2bfa05323ed8de2edc896e70684b076cf4038e68a01440fb7c638000"/190], 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xa000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x31, 0x24, &(0x7f0000000040)="da3e9de06943b5b6d2c138c74a1689c0685a582149a2ae6b2506ca3e4091a960662928fe551d1b32168c4332761a7da4af", &(0x7f0000000080)=""/36, 0x9f2, 0x0, 0xa6, 0xee, &(0x7f00000000c0)="b9e6aaf1464a0abc80853a21c88c8939aa535fb1decd03116778ef83cb27af48b2cc584cef20f20f443e39b550eb294ff19af22e4b3b3749923728cdbebdbdc229e778a8ec45585865da200079102eed313ec22f1f145c29fe068d43d088a2ea9012e777406661bf9be21706f2235c4bfe69c20d70a95ebcd74bb4f25647faa5ff31e161b8933ba6b6b79d7b24c45168433a98d7a6cc0fb077a3f1ce215d9172b95eb553d059", &(0x7f0000000340)="877c885a32923178e9786fe31c8ffa38c3679ad2b65c12f2823ed71a25aaafb82567918c0f647208e91f202624a283c65cc0fcd05c8abcc5c5eb602b73c52545981890392398a70d9b64091394ea348d2fdcb0d15a212ee143ed3b823ac8f1699e9717927be4a5930d0080d9e260fb6f2ecf337469eb6c1488a7f3518f4419703e8884255d45236268148a2a68bf4e924f0b41bcda8609b37c2dd00d8e0486995d1312218368ec1140e01516743838892ab1a6911364d4cb893f230cda9f5758887a96c40350fb102b1db9e682eada3641abf474f8a81ee15d4398a5501e3c874a3f218738f360dbdcb8c26a7e56", 0x6, 0x0, 0x5}, 0x50) 582.174245ms ago: executing program 1 (id=2268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000b00)=0x2, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32, @ANYBLOB="80"], 0x30}}, 0x1) (rerun: 64) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000440)="b388c65db98cb7156037a023b2cf613cd13f7fe6a9b61c92d653c5408968284ca1", 0x21}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000141, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x703d2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (rerun: 32) 493.312602ms ago: executing program 4 (id=2269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)) (rerun: 32) 492.79645ms ago: executing program 0 (id=2270): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, &(0x7f00000004c0)="2fac6458d9", 0x5, 0x28000080, &(0x7f0000000580)={0xa, 0x4e24, 0x49, @local, 0x8}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) pipe(&(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="52b52adc281570e40233be4c0d561fe4c48c5eb969a292c9c8edc8480e3326afb3895520894dbb28b0f980e0392081a0a03a1aed70b39d5efd20d78ba13984e390dc72252fb1941a4998c688889e1be9f0809b70bf961e3a774a2613c82c80761f03566c7c5d6d2c1155ae22c31cbb8920a57fbab88deb2c4315", @ANYBLOB="6ad135e26068adfb027602c20c48987bfe5979e4f3adc07500e16c5561f3d42976c97f53fe41e4839144ca4112c3d516e25140f80d9b5285f161f3f5580ef1f7721296c788", @ANYBLOB="79adebebae3179fcb33add4ce1a9e0dff1aa5e3da0ec0f0c6b770600150007", @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x2400c001}, 0x10) 418.083218ms ago: executing program 3 (id=2271): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x95, @empty, 0x8}}, 0x2, 0xffff}, &(0x7f0000000540)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000095000000f9ffffff1840000002000000000000000000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611290000800000085000071ae0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = getpid() sendmsg$unix(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r10 = getgid() sendmmsg$unix(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="a81ed9b3758425e8e64b1b86566ee0b7b8acd1dd68a9fd3c940e2bf4a880054a932bf5faf1df7fa8101240438df2de30a609760dbc6de332f5d63d67b0ed75acd2eb55eee925a2f7a9a15553b199c7b917afd7f1ce592671fa415504e710e0bb9ce696d3d4b8ca2aa3b7b319b742565004ff1f7a03052479e5ff0a1c65b8a1594c25a664baf68e2a5bc5355a118beb46e963495b1bf4a27c95b0e7340559f6b04ae8e45d052b5b2064ff12f777f17061ef2c899da6c465b4d3e01b9c3b00", 0xbe}, {&(0x7f0000000500)="9896112a633ca6b88736d3c54fadd06f37a5857286471f4b0c54e410a6e05fe9a58dc5ba2a7269a83ca5525f291d7147a506cd5a21852d6a212608287196587decb7195c4d1a581767cc1a1e97012e71fe3d86e2ea96074210411bcb05828619aa284da24788882b3923e4144eab9d8062eb9a8b9111d15610172b8daf9e2f1551d71250156776ce2facdceda9c4c94ed72932311db08afd4e8602421b997d49cf5d27e5663190b68a0c5a792951223e3205b640ff69e0aaf0cf920f7f412c7d13554107d9627e33fd46d5ae6ee4e5", 0xcf}, {&(0x7f0000000600)="74ee5d3aed7a1bea999b4763222bd2e8fc79e8b219a3c1be8b817b63d4deb8df7cd8bc19c352aa1dee", 0x29}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40000}}], 0x1, 0x24000041) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r11) write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) 288.198384ms ago: executing program 4 (id=2272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb0000001801"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc86}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000406004001c002b8008000800", @ANYRES32=r1, @ANYBLOB="080003000a00000008000100bbf2e0d571b9a1d973e3dc97a5f1ef7337e7148f0a40a1abae223bad4c3051d4dbbd7eb4", @ANYRES32, @ANYBLOB="08000d00190d0000"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001280), 0x400000000000067, 0x40008) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x2, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000600)={{&(0x7f0000000340)=[{0x9, 0xd1f, 0x101, {0xf3b, 0x2}, 0xbc, 0x7000, 0x4}, {0x2, 0x0, 0x9, {0xf, 0xff}, 0xa, 0x2, 0xffffffff}], 0x2, 0x40, 0xfff8, 0x8}, {&(0x7f0000000440)=[{0x6, 0x324}, {0x0, 0x200}, {0x8, 0x7}, {0x1ff, 0x6}, {0x400, 0x4}], 0x5, 0x10, 0x7, 0x3ff}, {&(0x7f00000004c0)=[0x81c], 0x1, 0x8, 0x8, 0x80}, {&(0x7f0000000500)=[{0x0, 0x2, 0x0, 0x722a, 0x39}], 0x1, 0x28, 0x1aeb, 0x7}, {&(0x7f0000000580)=[0x2, 0xbac9], 0x2, 0x8, 0x3, 0x400}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0x6}, {0xfff8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000001000000100000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000000000e00cd68b00000019769430ec73dd4947000000000000"], 0x50) 41.438019ms ago: executing program 0 (id=2273): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x903b6f1537c12dda}, 0x8000) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x180000000) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x180000000) 0s ago: executing program 1 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): to HW filter on device team0 [ 123.528778][ T7441] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.582771][ T5618] Bluetooth: hci4: command 0x0405 tx timeout [ 125.192278][ T7370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.556971][ T7466] virt_wifi0: entered allmulticast mode [ 125.824953][ T7493] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 125.829493][ T7494] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 126.091422][ T7516] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 126.192466][ T7516] bond2: entered promiscuous mode [ 126.192935][ T7516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.260236][ T7540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.260254][ T7540] IPv6: NLM_F_CREATE should be set when creating new route [ 126.282966][ T7518] bond2: (slave bridge2): making interface the new active one [ 126.282991][ T7518] bridge2: entered promiscuous mode [ 126.284588][ T7518] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 126.386831][ T7537] __nla_validate_parse: 61 callbacks suppressed [ 126.386877][ T7537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.442'. [ 126.517853][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.444'. [ 126.726819][ T7571] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 126.867755][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 126.868146][ T7578] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 127.166888][ T7591] ip6gre1: entered allmulticast mode [ 127.170491][ T7519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.360405][ T7604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.361576][ T7604] bridge0: port 3(bond3) entered blocking state [ 127.361744][ T7604] bridge0: port 3(bond3) entered disabled state [ 127.361876][ T7604] bond3: entered allmulticast mode [ 127.364433][ T7604] bond3: entered promiscuous mode [ 127.492247][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 127.921606][ T7648] syzkaller0: create flow: hash 1415968841 index 2 [ 127.952624][ T7519] syzkaller0: tun_net_xmit 76 [ 127.952799][ T7519] syzkaller0: tun_net_xmit 48 [ 127.981408][ T10] syzkaller0: tun_net_xmit 76 [ 128.090884][ T7642] syzkaller0: delete flow: hash 1415968841 index 2 [ 128.093357][ T5621] syzkaller0: tun_net_xmit 76 [ 128.463430][ T7676] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 130.356734][ T7687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.472'. [ 130.598736][ T7706] ip_tables: iptables: counters copy to user failed while replacing table [ 131.042734][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 131.043865][ T7726] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 131.043882][ T7726] netlink: 228 bytes leftover after parsing attributes in process `syz.4.485'. [ 131.181824][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 131.262587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.660662][ T7759] netlink: 80 bytes leftover after parsing attributes in process `syz.4.495'. [ 131.808220][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.808681][ T7767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.892994][ T7775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.500'. [ 131.897809][ T7776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.897844][ T7776] IPv6: NLM_F_CREATE should be set when creating new route [ 131.897867][ T7776] IPv6: NLM_F_CREATE should be set when creating new route [ 131.976287][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 131.986807][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 132.048833][ T7782] bond0: entered promiscuous mode [ 132.048857][ T7782] bond_slave_0: entered promiscuous mode [ 132.049075][ T7782] bond_slave_1: entered promiscuous mode [ 132.069617][ T7782] batadv0: entered promiscuous mode [ 132.082934][ T7782] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 132.106839][ T7782] bond0: left promiscuous mode [ 132.106861][ T7782] bond_slave_0: left promiscuous mode [ 132.108255][ T7782] bond_slave_1: left promiscuous mode [ 132.127695][ T7782] batadv0: left promiscuous mode [ 132.301341][ T7794] Bluetooth: hci0: unsupported parameter 5161 [ 132.301366][ T7794] Bluetooth: hci0: unsupported parameter 8192 [ 132.301381][ T7794] Bluetooth: hci0: unsupported parameter 5161 [ 132.301393][ T7794] Bluetooth: hci0: unsupported parameter 8192 [ 132.406958][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.510'. [ 132.450735][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 132.463980][ T7804] netlink: 128 bytes leftover after parsing attributes in process `syz.2.509'. [ 132.920122][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'. [ 132.952844][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 133.026446][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026528][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.524358][ T7844] netlink: 288 bytes leftover after parsing attributes in process `syz.0.525'. [ 134.283607][ T7849] syzkaller0: entered promiscuous mode [ 134.283632][ T7849] syzkaller0: entered allmulticast mode [ 136.599796][ T7894] netlink: 'syz.0.535': attribute type 5 has an invalid length. [ 136.749793][ T7906] __nla_validate_parse: 4 callbacks suppressed [ 136.749813][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 136.774002][ T7906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.537'. [ 136.803933][ T7906] bond4 (unregistering): Released all slaves [ 136.821537][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.821562][ T7909] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 136.821574][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.822207][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.939949][ T7857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.175379][ T5618] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 137.381295][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.381431][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.381533][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.383892][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.384372][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.384490][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.384602][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.384704][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.384801][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.386184][ T7938] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.420822][ T7944] netlink: 244 bytes leftover after parsing attributes in process `syz.2.552'. [ 137.694023][ T7942] netlink: 8183 bytes leftover after parsing attributes in process `syz.4.550'. [ 137.889864][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 137.990275][ T7972] netlink: 168 bytes leftover after parsing attributes in process `syz.2.560'. [ 138.105008][ T7977] gtp1: entered promiscuous mode [ 138.105031][ T7977] gtp1: entered allmulticast mode [ 138.233812][ T7959] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 138.233847][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.364205][ T7996] netlink: 752 bytes leftover after parsing attributes in process `syz.2.566'. [ 138.453503][ T7993] gre1: entered promiscuous mode [ 138.453530][ T7993] gre1: entered allmulticast mode [ 138.717525][ T8009] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 138.720541][ T8009] bond4 (unregistering): Released all slaves [ 139.284580][ T8042] netlink: 'syz.4.573': attribute type 1 has an invalid length. [ 140.001831][ T8077] smc: net device team0 applied user defined pnetid SYZ2 [ 140.015576][ T8075] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 140.065236][ T8075] team0: Port device vlan0 added [ 140.072618][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.117851][ T8080] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 140.267409][ T8092] bond3: left allmulticast mode [ 140.271577][ T8092] bond3: left promiscuous mode [ 140.284256][ T8092] bridge0: port 3(bond3) entered disabled state [ 140.315320][ T8092] bridge_slave_1: left allmulticast mode [ 140.315358][ T8092] bridge_slave_1: left promiscuous mode [ 140.315608][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.354609][ T8092] bridge_slave_0: left allmulticast mode [ 140.354636][ T8092] bridge_slave_0: left promiscuous mode [ 140.354863][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.454872][ T8105] netlink: 'syz.2.590': attribute type 21 has an invalid length. [ 140.507466][ T8105] netlink: 'syz.2.590': attribute type 5 has an invalid length. [ 140.648821][ T8116] netlink: 'syz.3.593': attribute type 21 has an invalid length. [ 140.648896][ T8116] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 140.657820][ T8119] netlink: 'syz.3.593': attribute type 21 has an invalid length. [ 140.657893][ T8119] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 140.829963][ T8129] veth3: entered allmulticast mode [ 140.867737][ T8136] veth5: entered allmulticast mode [ 141.038950][ T8144] syzkaller0: entered promiscuous mode [ 141.038974][ T8144] syzkaller0: entered allmulticast mode [ 141.764250][ T8187] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 141.856603][ T8183] syzkaller0: entered promiscuous mode [ 141.856620][ T8183] syzkaller0: entered allmulticast mode [ 142.027906][ T8205] __nla_validate_parse: 21 callbacks suppressed [ 142.027929][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.616'. [ 144.023517][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 144.162691][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 144.162927][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 144.240464][ T8229] netlink: 256 bytes leftover after parsing attributes in process `syz.3.621'. [ 144.240488][ T8229] validate_nla: 2 callbacks suppressed [ 144.240498][ T8229] netlink: 'syz.3.621': attribute type 9 has an invalid length. [ 144.343566][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 144.418014][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.420147][ T8258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.420168][ T8258] IPv6: NLM_F_CREATE should be set when creating new route [ 144.420448][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.469148][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.472167][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.493472][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 144.571575][ T8237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.798814][ T8280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.633'. [ 145.053047][ T8285] smc: removing net device team0 with user defined pnetid SYZ2 [ 145.136678][ T8285] team0 (unregistering): Port device team_slave_0 removed [ 145.144309][ T8296] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 145.162323][ T8285] team0 (unregistering): Port device team_slave_1 removed [ 145.226463][ T8303] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 145.350428][ T8312] netlink: 'syz.2.639': attribute type 6 has an invalid length. [ 145.450368][ T8302] syzkaller1: entered promiscuous mode [ 145.450392][ T8302] syzkaller1: entered allmulticast mode [ 146.569778][ T8377] syzkaller0: entered promiscuous mode [ 146.569802][ T8377] syzkaller0: entered allmulticast mode [ 147.223823][ T8405] IPVS: set_ctl: invalid protocol: 51 172.30.0.2:20004 [ 147.224099][ T8405] x_tables: duplicate underflow at hook 1 [ 147.296971][ T8407] __nla_validate_parse: 7 callbacks suppressed [ 147.296987][ T8407] netlink: 84 bytes leftover after parsing attributes in process `syz.3.662'. [ 147.297000][ T8407] netlink: 84 bytes leftover after parsing attributes in process `syz.3.662'. [ 147.297283][ T8407] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 147.424349][ T7515] IPVS: starting estimator thread 0... [ 147.425432][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 147.425862][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.665'. [ 147.512333][ T8415] IPVS: using max 54 ests per chain, 129600 per kthread [ 147.734515][ T8428] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 148.185705][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 148.213158][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 148.456262][ T8462] netlink: 260 bytes leftover after parsing attributes in process `syz.0.678'. [ 148.476253][ T8462] netlink: 260 bytes leftover after parsing attributes in process `syz.0.678'. [ 148.634442][ T8473] vlan0: entered promiscuous mode [ 148.665282][ T8477] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 148.844765][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 148.844888][ T8463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.965175][ T8463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.187434][ T8504] netlink: 'syz.0.685': attribute type 6 has an invalid length. [ 149.187453][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 149.498212][ T5277] veth0_vlan: left promiscuous mode [ 149.550028][ T9] veth0_vlan: entered promiscuous mode [ 151.148269][ T8571] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 151.257970][ T8571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.278273][ T8590] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.320780][ T8571] bond3: (slave bridge3): making interface the new active one [ 151.329142][ T8571] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 151.333454][ T8595] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 151.357229][ T8597] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 151.423296][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.428643][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.531336][ T8604] sctp: [Deprecated]: syz.4.703 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.531336][ T8604] Use struct sctp_sack_info instead [ 151.732430][ T8622] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 151.838673][ T8628] nft_compat: unsupported protocol 0 [ 151.871931][ T8629] wg1 speed is unknown, defaulting to 1000 [ 152.627748][ T8667] __nla_validate_parse: 7 callbacks suppressed [ 152.627767][ T8667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.720'. [ 152.627784][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 152.799235][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.721'. [ 152.816193][ T8671] netlink: 576 bytes leftover after parsing attributes in process `syz.4.721'. [ 154.630975][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 154.631134][ T8683] netlink: 6 bytes leftover after parsing attributes in process `syz.1.724'. [ 154.959968][ T8708] syzkaller0: entered promiscuous mode [ 154.959991][ T8708] syzkaller0: entered allmulticast mode [ 156.019912][ T8743] netlink: 'syz.2.738': attribute type 49 has an invalid length. [ 156.300805][ T8743] ip6gretap0: entered promiscuous mode [ 156.300831][ T8743] ip6gretap0: entered allmulticast mode [ 156.616128][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 156.701186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.846514][ T8778] netlink: 92 bytes leftover after parsing attributes in process `syz.1.743'. [ 157.578475][ T8799] netlink: 'syz.1.751': attribute type 12 has an invalid length. [ 157.659658][ T8803] netlink: 'syz.0.752': attribute type 28 has an invalid length. [ 157.659696][ T8803] netlink: 'syz.0.752': attribute type 3 has an invalid length. [ 157.659708][ T8803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.752'. [ 158.186512][ T8816] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 158.456612][ T8816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.484784][ T8822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.491859][ T8825] 8021q: VLANs not supported on wg2 [ 159.443811][ T8856] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 159.444234][ T8858] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 159.559186][ T8855] netlink: 128 bytes leftover after parsing attributes in process `syz.4.764'. [ 159.559209][ T8855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 159.700210][ T8873] bridge0: port 3(wlan0) entered blocking state [ 159.704125][ T8873] bridge0: port 3(wlan0) entered disabled state [ 159.771963][ T8863] netlink: 'syz.3.765': attribute type 5 has an invalid length. [ 160.015990][ T8887] ip_tables: iptables: counters copy to user failed while replacing table [ 160.018002][ T8887] vlan1: entered allmulticast mode [ 160.018021][ T8887] veth0_vlan: entered allmulticast mode [ 160.141452][ T8892] raw_sendmsg: syz.0.770 forgot to set AF_INET. Fix it! [ 160.358667][ T8900] tipc: Enabling of bearer rejected, failed to enable media [ 160.715696][ T8911] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 160.830465][ T8915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.871542][ T8923] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 160.876079][ T37] IPVS: starting estimator thread 0... [ 160.917261][ T8911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.971964][ T8925] IPVS: using max 31 ests per chain, 74400 per kthread [ 161.141833][ T8913] bond4: (slave veth0_to_bond): making interface the new active one [ 161.193007][ T8913] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.319480][ T8918] bond4: entered promiscuous mode [ 161.319506][ T8918] veth0_to_bond: entered promiscuous mode [ 161.319714][ T8918] bond4: entered allmulticast mode [ 161.319725][ T8918] veth0_to_bond: entered allmulticast mode [ 161.337765][ T8930] netlink: 'syz.1.779': attribute type 3 has an invalid length. [ 161.357860][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 161.383669][ T8908] syzkaller0: entered promiscuous mode [ 161.383692][ T8908] syzkaller0: entered allmulticast mode [ 161.540595][ T8936] netlink: 'syz.4.778': attribute type 2 has an invalid length. [ 161.838981][ T8931] dvmrp8: entered allmulticast mode [ 161.846926][ T8942] veth0_to_batadv: entered allmulticast mode [ 162.062195][ T8947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.781'. [ 162.230299][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 162.438347][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.786'. [ 162.487835][ T7512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.487866][ T7512] syzkaller0: tun_net_xmit 76 [ 162.488161][ T7512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.488175][ T7512] syzkaller0: tun_net_xmit 48 [ 162.520532][ T8964] syzkaller0: create flow: hash 1415968841 index 2 [ 162.525293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.525315][ T9] syzkaller0: tun_net_xmit 76 [ 162.662400][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.662425][ T9] syzkaller0: tun_net_xmit 76 [ 162.686693][ T8971] syzkaller0: delete flow: hash 1415968841 index 2 [ 163.154402][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 163.398164][ T9008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.793'. [ 163.647246][ T9015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.673648][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 164.105220][ T9041] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 164.105242][ T9041] netlink: 224 bytes leftover after parsing attributes in process `syz.0.800'. [ 164.826662][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.878633][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.162429][ T7528] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162480][ T7528] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162514][ T7528] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162548][ T7528] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.504165][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 165.587505][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 165.671400][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 165.681682][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.814'. [ 165.686851][ T9094] netlink: 80 bytes leftover after parsing attributes in process `syz.2.812'. [ 165.703736][ T9090] 8021q: VLANs not supported on ip_vti0 [ 165.704676][ T9098] 8021q: VLANs not supported on ip_vti0 [ 165.717416][ T9102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.814'. [ 166.269268][ T9126] netlink: 'syz.0.816': attribute type 32 has an invalid length. [ 166.379951][ T9125] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 166.673044][ T9141] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 166.850828][ T9148] tipc: Enabled bearer , priority 10 [ 166.859464][ T9148] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 166.877416][ T9145] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 166.895044][ T9148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.292970][ T9159] netlink: 'syz.1.826': attribute type 34 has an invalid length. [ 167.551779][ T9173] syzkaller1: entered promiscuous mode [ 167.551800][ T9173] syzkaller1: entered allmulticast mode [ 167.563638][ T382] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 167.563841][ T382] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 167.593294][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 167.672168][ T9053] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 167.947798][ T9190] IPv6: sit1: Disabled Multicast RS [ 167.975851][ T5738] tipc: Node number set to 1549899768 [ 168.044358][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.239139][ T9203] bridge4: entered promiscuous mode [ 168.239165][ T9203] bridge4: entered allmulticast mode [ 168.386073][ T9051] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 168.796457][ T9219] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 169.210168][ T9221] bond3: (slave bridge5): making interface the new active one [ 169.228438][ T9221] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 169.613501][ T9247] __nla_validate_parse: 6 callbacks suppressed [ 169.613521][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 169.820773][ T9251] sctp: [Deprecated]: syz.0.850 (pid 9251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.820773][ T9251] Use struct sctp_sack_info instead [ 169.906132][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 169.957244][ T9267] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 170.012518][ T9270] netlink: 44 bytes leftover after parsing attributes in process `syz.0.855'. [ 170.034738][ T9267] bond5: entered promiscuous mode [ 170.038494][ T9267] bond5: entered allmulticast mode [ 170.038947][ T9267] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.374427][ T9280] No such timeout policy "s" [ 170.374445][ T9280] netlink: Failed to associated timeout policy 's' [ 170.587672][ T9282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.587857][ T9285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.815682][ T9295] netlink: 'syz.0.860': attribute type 33 has an invalid length. [ 171.006083][ T9309] recent_mt_check: 55 callbacks suppressed [ 171.006105][ T9309] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 171.006507][ T9309] netlink: 576 bytes leftover after parsing attributes in process `syz.3.863'. [ 171.147807][ T9295] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 171.232553][ T9295] bond6 (unregistering): Released all slaves [ 171.783001][ T9317] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 171.783030][ T9317] netlink: 224 bytes leftover after parsing attributes in process `syz.2.865'. [ 171.901122][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 172.067044][ T9328] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 172.111892][ T9328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 172.597268][ T9361] Bluetooth: hci0: unsupported parameter 5135 [ 172.597292][ T9361] Bluetooth: hci0: unsupported parameter 8192 [ 172.597331][ T9361] Bluetooth: hci0: unsupported parameter 5135 [ 172.597343][ T9361] Bluetooth: hci0: unsupported parameter 8192 [ 172.598727][ T9358] batman_adv: batadv0: Adding interface: syzkaller0 [ 172.598744][ T9358] batman_adv: batadv0: Interface activated: syzkaller0 [ 173.157630][ T9371] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.277813][ T9380] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.509318][ T9393] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 174.069107][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.887'. [ 174.094353][ T9416] netlink: zone id is out of range [ 174.094369][ T9416] netlink: zone id is out of range [ 174.094376][ T9416] netlink: zone id is out of range [ 174.094382][ T9416] netlink: zone id is out of range [ 174.094389][ T9416] netlink: zone id is out of range [ 174.094395][ T9416] netlink: zone id is out of range [ 174.094405][ T9416] netlink: zone id is out of range [ 174.169849][ T9422] IPVS: ip_vs_edit_dest(): server weight less than zero [ 174.358819][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 174.772970][ T9444] netlink: 72 bytes leftover after parsing attributes in process `syz.3.893'. [ 174.800584][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 174.896880][ T9449] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 174.896973][ T9449] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 175.829237][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.829261][ T9483] netlink: 176 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.829305][ T9483] netlink: 'syz.1.901': attribute type 5 has an invalid length. [ 175.841497][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.841518][ T9483] netlink: 176 bytes leftover after parsing attributes in process `syz.1.901'. [ 175.841558][ T9483] netlink: 'syz.1.901': attribute type 5 has an invalid length. [ 176.793176][ T9511] can: request_module (can-proto-0) failed. [ 176.917048][ T9523] net_ratelimit: 1005 callbacks suppressed [ 176.917093][ T9523] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 176.972258][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.913'. [ 177.095077][ T9525] veth3: entered promiscuous mode [ 177.095100][ T9525] veth3: entered allmulticast mode [ 177.425894][ T9535] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 177.526961][ T9535] bond4: entered promiscuous mode [ 177.536862][ T9535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.756176][ T9535] bond4: (slave bridge6): making interface the new active one [ 177.762392][ T9535] bridge6: entered promiscuous mode [ 177.764655][ T9535] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 177.985518][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 178.105979][ T4932] Bluetooth: hci4: link tx timeout [ 178.106144][ T4932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.121550][ T9543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.187196][ T4932] Bluetooth: hci4: link tx timeout [ 178.187215][ T4932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.199608][ T9547] vlan3: entered promiscuous mode [ 178.199628][ T9547] bond6: entered promiscuous mode [ 178.199788][ T9547] vlan3: entered allmulticast mode [ 178.199800][ T9547] bond6: entered allmulticast mode [ 178.215422][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 178.781721][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 180.141804][ T4932] Bluetooth: hci4: command 0x0405 tx timeout [ 180.381129][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 180.734831][ T9638] __nla_validate_parse: 1 callbacks suppressed [ 180.734851][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 180.998209][ T9649] xt_MASQUERADE: bad MAP_IPS. [ 181.192629][ T9662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.495751][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'. [ 181.718243][ T9670] batman_adv: batadv0: Adding interface: syzkaller0 [ 181.718269][ T9670] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.718298][ T9670] batman_adv: batadv0: Interface activated: syzkaller0 [ 181.772331][ T9669] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 181.928908][ T9669] batman_adv: batadv0: Removing interface: syzkaller0 [ 182.538775][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 182.988858][ T9711] netlink: 'syz.4.954': attribute type 21 has an invalid length. [ 182.988880][ T9711] netlink: 128 bytes leftover after parsing attributes in process `syz.4.954'. [ 182.988952][ T9711] netlink: 3 bytes leftover after parsing attributes in process `syz.4.954'. [ 183.177099][ T9717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 183.177996][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'. [ 183.199831][ T9706] lo speed is unknown, defaulting to 1000 [ 183.200810][ T9707] tipc: Enabling of bearer rejected, failed to enable media [ 183.200826][ T9706] lo speed is unknown, defaulting to 1000 [ 183.260309][ T9706] lo speed is unknown, defaulting to 1000 [ 183.271216][ T9706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 183.271252][ T9706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 183.271288][ T9706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 183.300556][ T9706] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 183.582846][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.583582][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.741608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.742476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.780443][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'. [ 183.859236][ T9706] lo speed is unknown, defaulting to 1000 [ 184.629321][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.629622][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.667232][ T9071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.399764][ T9706] lo speed is unknown, defaulting to 1000 [ 186.408942][ T9706] lo speed is unknown, defaulting to 1000 [ 186.423445][ T9706] lo speed is unknown, defaulting to 1000 [ 186.437019][ T9706] lo speed is unknown, defaulting to 1000 [ 186.451611][ T9737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.451633][ T9737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 186.687525][ T9737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.687546][ T9737] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 186.701652][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.799502][ T9762] netlink: 193 bytes leftover after parsing attributes in process `syz.3.967'. [ 186.799984][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 186.870470][ T9737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.870492][ T9737] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 186.879906][ T9762] bond0: (slave team0): Releasing backup interface [ 186.943268][ T9762] team0 (unregistering): left allmulticast mode [ 186.943293][ T9762] team_slave_0: left allmulticast mode [ 186.943598][ T9762] team_slave_1: left allmulticast mode [ 186.943912][ T9762] dummy0: left allmulticast mode [ 186.996520][ T9737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.996542][ T9737] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.022787][ T9762] team0 (unregistering): Port device team_slave_0 removed [ 187.070326][ T9762] team0 (unregistering): Port device team_slave_1 removed [ 187.080655][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 187.100725][ T9762] team0 (unregistering): Port device dummy0 removed [ 187.108972][ T9737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.108992][ T9737] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.473996][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 187.666376][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.714883][ T9785] syzkaller0: entered promiscuous mode [ 187.714905][ T9785] syzkaller0: entered allmulticast mode [ 187.741682][ T9071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.894069][ T9798] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 188.058794][ T9801] syzkaller1: entered promiscuous mode [ 188.058817][ T9801] syzkaller1: entered allmulticast mode [ 188.308149][ T9807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 188.506937][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.506984][ T9819] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 188.506997][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.634387][ T9819] geneve2: entered promiscuous mode [ 188.634412][ T9819] geneve2: entered allmulticast mode [ 188.675815][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 188.781705][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.897987][ T9837] team0: Cannot enslave team device to itself [ 189.423781][ T9851] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.464646][ T9854] syzkaller0: left promiscuous mode [ 189.464820][ T9854] syzkaller0: left allmulticast mode [ 189.776949][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 189.798899][ T9873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.926018][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.059285][ T9884] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1002'. [ 190.444191][ T9896] vlan3: entered promiscuous mode [ 190.444214][ T9896] hsr0: entered promiscuous mode [ 190.446118][ T9896] vlan3: entered allmulticast mode [ 190.446137][ T9896] hsr0: entered allmulticast mode [ 190.446149][ T9896] hsr_slave_0: entered allmulticast mode [ 190.446164][ T9896] hsr_slave_1: entered allmulticast mode [ 190.621134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.623008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.777895][ T9955] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 192.222590][ T9985] __nla_validate_parse: 4 callbacks suppressed [ 192.222612][ T9985] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1027'. [ 192.863385][T10004] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 192.890782][T10004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1033'. [ 192.941385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.941599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.941776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.941992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.184017][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.240091][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 193.506431][T10025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.016619][T10050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.143472][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 194.469484][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.543405][T10067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.835117][T10095] bond0: (slave team0): Releasing backup interface [ 194.840885][T10103] netlink: 'syz.1.1057': attribute type 9 has an invalid length. [ 194.964341][T10095] ¾x9ÿ: left allmulticast mode [ 194.964367][T10095] ¾x9ÿ: left promiscuous mode [ 194.985665][T10095] bridge0: port 1(1¾x9ÿ) entered disabled state [ 195.035156][T10095] bridge_slave_1: left allmulticast mode [ 195.035182][T10095] bridge_slave_1: left promiscuous mode [ 195.035366][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.151998][T10095] bond0: (slave ªªªªª»): Releasing backup interface [ 195.258343][T10095] bond0: (slave bond_slave_1): Releasing backup interface [ 195.400873][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 195.402370][T10095] team0: Port device team_slave_0 removed [ 195.448836][T10095] team0: Port device team_slave_1 removed [ 195.467027][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.467053][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.504460][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.504623][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.553936][T10095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.622865][T10129] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 195.751574][T10132] netlink: NAT attribute has 4 unknown bytes [ 195.751611][T10132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.005015][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 196.008526][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 196.141216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.141435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.141645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.141916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.142098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.707120][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 196.877478][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 197.551950][T10208] geneve3: entered promiscuous mode [ 198.000589][T10229] netlink: 'syz.4.1092': attribute type 10 has an invalid length. [ 198.048224][T10229] team0: Port device dummy0 added [ 198.311099][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 198.779518][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 198.794703][T10260] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 198.899453][T10260] bond8: entered promiscuous mode [ 198.907890][T10260] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.065234][T10261] ipvlan2: entered allmulticast mode [ 199.065255][T10261] bond8: entered allmulticast mode [ 199.071380][T10261] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.071400][T10261] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 199.071413][T10261] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 199.097112][T10261] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.261203][ C1] net_ratelimit: 6 callbacks suppressed [ 199.261224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.261463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.261677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.261852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.263293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.263341][T10278] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1104'. [ 199.334686][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 199.702944][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 200.044573][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 200.338207][T10314] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1114'. [ 200.342291][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 200.342313][T10314] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1114'. [ 200.548562][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 200.555516][T10318] x_tables: duplicate underflow at hook 3 [ 200.603580][T10326] xfrm0: entered promiscuous mode [ 200.603603][T10326] xfrm0: entered allmulticast mode [ 200.774326][T10333] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1117'. [ 201.077151][T10351] x_tables: duplicate underflow at hook 3 [ 201.253555][T10335] Cannot find add_set index 0 as target [ 201.303959][T10335] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 201.796367][T10373] xt_hl: Unknown TTL match mode: 255 [ 201.898093][T10380] xt_NFQUEUE: number of total queues is 0 [ 202.461220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.461413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.461586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.461752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.461906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.070172][T10405] veth4: entered promiscuous mode [ 203.070194][T10405] veth4: entered allmulticast mode [ 203.680021][T10437] gretap0: entered promiscuous mode [ 203.783947][T10441] __nla_validate_parse: 41 callbacks suppressed [ 203.783967][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 204.340756][T10456] bond4 (unregistering): Released all slaves [ 204.712052][ C0] net_ratelimit: 1 callbacks suppressed [ 204.712073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.714963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.737070][ T31] audit: type=1804 audit(1790006222.509:2): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1160" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1152 res=1 errno=0 [ 204.749913][ T31] audit: type=1800 audit(1790006222.509:3): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1160" name="cgroup.controllers" dev="tmpfs" ino=1152 res=0 errno=0 [ 205.393044][ T31] audit: type=1107 audit(1790006223.169:4): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 205.398461][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1165'. [ 205.454580][T10482] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 205.590374][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'. [ 205.661201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.661450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.661706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.661912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.662097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.662286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.735344][T10482] bond4 (unregistering): Released all slaves [ 205.908298][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1170'. [ 206.319165][T10512] bond5: option fail_over_mac: invalid value (16) [ 206.333996][T10512] bond5 (unregistering): Released all slaves [ 206.373347][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 206.394368][T10517] syzkaller1: entered promiscuous mode [ 206.394390][T10517] syzkaller1: entered allmulticast mode [ 206.555395][T10523] bridge0: port 4(vlan5) entered blocking state [ 206.556272][T10523] bridge0: port 4(vlan5) entered disabled state [ 206.568768][T10523] vlan5: entered allmulticast mode [ 206.568789][T10523] geneve0: entered allmulticast mode [ 206.592312][T10523] vlan5: entered promiscuous mode [ 206.592337][T10523] geneve0: entered promiscuous mode [ 206.646979][T10536] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 206.717383][T10538] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1180'. [ 206.717848][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 206.845416][T10540] macvlan1: entered allmulticast mode [ 206.909441][T10540] veth1_vlan: entered allmulticast mode [ 206.941130][T10540] bond9: (slave macvlan1): Enslaving as an active interface with an up link [ 206.965443][T10544] TCP: TCP_TX_DELAY enabled [ 207.124285][T10542] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 207.226291][T10553] xt_hashlimit: size too large, truncated to 1048576 [ 207.275456][T10555] xt_hashlimit: size too large, truncated to 1048576 [ 207.557092][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 207.674921][T10568] syzkaller0: entered promiscuous mode [ 207.674984][T10568] syzkaller0: entered allmulticast mode [ 208.085606][T10586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1189'. [ 208.285720][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1190'. [ 208.781235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.781425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.974255][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.838218][ T5752] net_ratelimit: 2 callbacks suppressed [ 209.838240][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.686238][T10630] syz_tun: entered promiscuous mode [ 211.901207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.901431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.901619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.901805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.901989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.902383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.984347][T10649] openvswitch: netlink: Unknown key attributes 1 [ 211.985873][T10650] __nla_validate_parse: 2 callbacks suppressed [ 211.985889][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 212.047383][T10647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1203'. [ 212.068485][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 212.102580][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1202'. [ 212.418728][T10669] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 212.498685][T10673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.500022][T10673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.535306][T10669] 8021q: adding VLAN 0 to HW filter on device bond10 [ 212.652040][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'. [ 212.971151][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 213.074986][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 213.075022][T10686] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 213.075035][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 213.152577][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 213.522356][T10708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1216'. [ 213.853341][T10717] netlink: 'syz.2.1219': attribute type 83 has an invalid length. [ 214.847422][T10770] sctp: [Deprecated]: syz.2.1230 (pid 10770) Use of int in maxseg socket option. [ 214.847422][T10770] Use struct sctp_assoc_value instead [ 214.945831][ C0] net_ratelimit: 5 callbacks suppressed [ 214.945862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.021238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.021484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.021681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.021873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.124409][T10776] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 215.345535][T10781] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 215.375678][T10780] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 215.659560][T10799] ip_tables: iptables: counters copy to user failed while replacing table [ 215.730426][T10788] ovs-s: entered promiscuous mode [ 215.906438][T10791] openvswitch: ovs-s: Dropping previously announced user features [ 216.008757][T10801] syzkaller1: entered promiscuous mode [ 216.008931][T10801] syzkaller1: entered allmulticast mode [ 216.035428][T10808] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 216.455701][T10842] netlink: 'syz.2.1248': attribute type 2 has an invalid length. [ 216.632428][T10842] : entered promiscuous mode [ 216.989485][T10852] openvswitch: netlink: Missing valid actions attribute. [ 216.989518][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.041499][T10858] __nla_validate_parse: 70 callbacks suppressed [ 217.041519][T10858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1253'. [ 217.042673][T10858] bond0: Error: CAN devices cannot be enslaved [ 217.199531][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1255'. [ 217.242528][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1254'. [ 217.335259][T10882] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1253'. [ 217.386881][T10882] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 217.386905][T10882] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1253'. [ 217.795852][T10886] sctp: [Deprecated]: syz.0.1256 (pid 10886) Use of int in max_burst socket option. [ 217.795852][T10886] Use struct sctp_assoc_value instead [ 218.003100][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 218.141190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.255534][T10900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 218.255625][T10900] netlink: 'syz.0.1261': attribute type 7 has an invalid length. [ 218.255638][T10900] netlink: 'syz.0.1261': attribute type 8 has an invalid length. [ 218.255650][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 218.597235][T10900] 8021q: adding VLAN 0 to HW filter on device bond11 [ 218.729861][T10925] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1264'. [ 218.819418][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1264'. [ 219.612442][T10953] IPv6: Can't replace route, no match found [ 220.071519][ T5752] net_ratelimit: 7 callbacks suppressed [ 220.071539][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.074857][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.074965][ T7528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.076931][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.079609][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.421211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.421415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.421582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.421747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.423224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.615073][T11057] Bluetooth: hci0: unsupported parameter 5161 [ 221.615095][T11057] Bluetooth: hci0: unsupported parameter 8192 [ 221.615107][T11057] Bluetooth: hci0: unsupported parameter 5161 [ 221.615118][T11057] Bluetooth: hci0: unsupported parameter 8192 [ 221.826514][T11067] netlink: 'syz.2.1297': attribute type 5 has an invalid length. [ 222.345616][T11096] netlink: 'syz.3.1304': attribute type 32 has an invalid length. [ 222.345637][T11096] __nla_validate_parse: 7 callbacks suppressed [ 222.345647][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 222.499939][T11096] bond5: option coupled_control: invalid value (192) [ 222.510034][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'. [ 222.541720][T11096] bond5 (unregistering): Released all slaves [ 222.735104][T11098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1302'. [ 222.835290][T11104] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.1306'. [ 223.125058][T11117] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 223.270511][T11116] tipc: Enabling of bearer rejected, failed to enable media [ 223.288284][T11119] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 223.483883][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 223.483904][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 223.946890][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 223.946944][T11156] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1317'. [ 224.382419][T11178] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 224.420080][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 224.424344][T11177] IPVS: stopping master sync thread 11178 ... [ 224.701443][T11186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.899695][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.942537][T11197] x_tables: duplicate entry at hook 4 [ 224.949935][T11198] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1323'. [ 224.977763][T11198] 0·: renamed from hsr0 [ 225.821589][ T84] net_ratelimit: 9 callbacks suppressed [ 225.821608][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.821779][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.905011][ T9071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.919308][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.943695][T11211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.980406][T11198] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.980432][T11198] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.029109][T11198] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 226.192653][T11214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.889452][T11243] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.141036][T11250] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 227.176591][T11250] bond4 (unregistering): Released all slaves [ 227.226393][T11257] No such timeout policy "s" [ 227.226410][T11257] netlink: Failed to associated timeout policy 's' [ 227.564240][T11270] __nla_validate_parse: 4 callbacks suppressed [ 227.564259][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 227.595541][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 227.661304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.661508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.661707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.661885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.783321][T11279] xt_ecn: cannot match TCP bits for non-tcp packets [ 227.988350][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 228.041272][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 228.172663][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 228.360145][T11304] xt_NFQUEUE: number of total queues is 0 [ 228.661390][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 228.863001][T11315] netlink: 'syz.1.1352': attribute type 21 has an invalid length. [ 228.863025][T11315] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1352'. [ 228.863096][T11315] netlink: 'syz.1.1352': attribute type 5 has an invalid length. [ 228.863107][T11315] netlink: 'syz.1.1352': attribute type 6 has an invalid length. [ 228.863118][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1352'. [ 228.945644][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 229.046954][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 229.452491][T11334] lo: entered promiscuous mode [ 229.452667][T11334] lo: entered allmulticast mode [ 229.908178][T11350] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 230.051564][T11355] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 230.926248][T11384] tipc: Enabling of bearer rejected, failed to enable media [ 231.680847][T11418] netlink: 'syz.0.1384': attribute type 3 has an invalid length. [ 231.705523][T11418] net_ratelimit: 10 callbacks suppressed [ 231.705543][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.705839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.709194][T11418] x_tables: duplicate underflow at hook 1 [ 231.894870][T11425] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 232.103848][T11440] ip_tables: iptables: counters copy to user failed while replacing table [ 232.221214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.222099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.372180][T11446] xt_NETMAP: bad rangesize 37. [ 232.501089][T11446] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 232.861735][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 232.899615][T11462] netlink: 'syz.0.1396': attribute type 2 has an invalid length. [ 233.246534][T11475] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 233.983290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.983484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.983651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.983828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.983989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.220626][T11498] macvlan0: entered promiscuous mode [ 234.552992][T11507] __nla_validate_parse: 9 callbacks suppressed [ 234.553011][T11507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'. [ 234.985689][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 235.100063][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 235.307756][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 235.422608][T11534] netlink: 'syz.0.1415': attribute type 3 has an invalid length. [ 235.890052][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1421'. [ 236.088814][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 236.154773][T11559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1425'. [ 236.157130][T11559] netlink: 'syz.2.1425': attribute type 8 has an invalid length. [ 236.516991][T11569] netlink: 'syz.4.1427': attribute type 1 has an invalid length. [ 236.812837][T11574] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 236.812938][T11574] syzkaller1: Refused to change device type [ 237.111486][ C0] net_ratelimit: 5 callbacks suppressed [ 237.113054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.113363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.113582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.113811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.114014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.059683][T11611] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 238.059705][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 238.147521][T11607] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.214009][T11622] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 238.302485][T11622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.335303][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.336857][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.336980][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.405636][T11624] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 238.408758][T11622] bond6: (slave geneve2): making interface the new active one [ 238.410658][T11622] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 238.430701][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.432024][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.432146][T11607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.437728][ T7514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.440954][ T7512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.440993][ T7512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.441024][ T7512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.658088][T11626] syzkaller0: entered promiscuous mode [ 238.658111][T11626] syzkaller0: entered allmulticast mode [ 239.054293][T11650] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1446'. [ 239.407183][T11659] sctp: [Deprecated]: syz.2.1449 (pid 11659) Use of int in max_burst socket option. [ 239.407183][T11659] Use struct sctp_assoc_value instead [ 239.434768][T11648] : renamed from wg0 [ 239.529367][T11660] dvmrp8: entered allmulticast mode [ 239.760052][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 239.921096][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.118244][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 240.301330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.301553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.301740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.301929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.747848][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 241.199441][T11721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1470'. [ 241.482707][T11737] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1474'. [ 241.621754][T11737] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 243.060434][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 243.392270][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 243.408655][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 243.421120][ C1] net_ratelimit: 5 callbacks suppressed [ 243.421138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.421329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.421544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.421740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.735980][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 243.835884][T11811] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 244.306022][T11812] syz.1.1490 (11812) used greatest stack depth: 16544 bytes left [ 244.339194][T11830] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 244.347493][T11836] Cannot find add_set index 2 as target [ 244.367123][T11830] syzkaller0: entered promiscuous mode [ 244.367145][T11830] syzkaller0: entered allmulticast mode [ 244.399693][T11815] syz.1.1490 (11815) used greatest stack depth: 15744 bytes left [ 244.722758][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 244.886583][T11851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.888679][T11851] __nla_validate_parse: 1 callbacks suppressed [ 244.888696][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 244.934024][T11846] veth5: entered allmulticast mode [ 245.117813][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 245.117848][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 245.120814][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 245.120844][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 246.225029][T11904] netlink: 380 bytes leftover after parsing attributes in process `syz.4.1515'. [ 246.440331][T11918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1517'. [ 246.621227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.621402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.621582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.621751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.621915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.733643][T11923] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1518'. [ 246.754089][T11914] netlink: 'syz.0.1517': attribute type 29 has an invalid length. [ 247.206068][ T5618] block nbd0: Receive control failed (result -32) [ 247.209546][ T4932] block nbd0: Receive control failed (result -32) [ 247.755455][T11973] tipc: Can't bind to reserved service type 0 [ 247.805953][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 247.805988][T11969] netlink: 'syz.0.1529': attribute type 11 has an invalid length. [ 247.806001][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 247.809618][T11969] netlink: 'syz.0.1529': attribute type 11 has an invalid length. [ 248.123830][T11986] netlink: 'syz.2.1534': attribute type 3 has an invalid length. [ 248.806744][T12011] net_ratelimit: 2 callbacks suppressed [ 248.806764][T12011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.125625][T12024] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 249.222044][T12028] openvswitch: netlink: Invalid VLAN frame [ 249.495153][T12039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.500011][T12043] sctp: [Deprecated]: syz.2.1552 (pid 12043) Use of int in maxseg socket option. [ 249.500011][T12043] Use struct sctp_assoc_value instead [ 249.501651][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.609858][T12047] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 249.685827][T12051] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.706356][T12051] xt_hashlimit: size too large, truncated to 1048576 [ 249.741230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.741464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.741617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.741785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.741973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.794769][T12047] bond4: entered promiscuous mode [ 249.795218][T12047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.812912][T12055] xt_hashlimit: size too large, truncated to 1048576 [ 250.333359][T12067] xt_hashlimit: size too large, truncated to 1048576 [ 250.333606][T12067] xt_hashlimit: max too large, truncated to 1048576 [ 250.336017][T12067] xt_hashlimit: overflow, rate too high: 0 [ 250.742849][T12075] __nla_validate_parse: 6 callbacks suppressed [ 250.742870][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1560'. [ 250.743071][T12076] xt_nat: multiple ranges no longer supported [ 250.821056][ T31] audit: type=1800 audit(1790006268.589:5): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1561" name="memory.events" dev="tmpfs" ino=1572 res=0 errno=0 [ 250.830570][ T31] audit: type=1804 audit(1790006268.599:6): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1561" name="/newroot/302/memory.events" dev="tmpfs" ino=1572 res=1 errno=0 [ 251.282131][T12090] netlink: 'syz.3.1562': attribute type 16 has an invalid length. [ 251.282153][T12090] netlink: 'syz.3.1562': attribute type 17 has an invalid length. [ 251.558984][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 251.580844][T12090] lo: left promiscuous mode [ 251.580877][T12090] lo: left allmulticast mode [ 251.678722][T12090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.696042][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.727285][T12095] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1564'. [ 251.727312][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1564'. [ 251.778767][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.800187][T12090] vlan0: left promiscuous mode [ 251.807970][T12090] macvlan0: left promiscuous mode [ 251.821311][T12090] veth1_macvtap: left promiscuous mode [ 251.822577][T12090] veth0_macvtap: left promiscuous mode [ 251.823830][T12090] veth0_macvtap: entered promiscuous mode [ 251.825069][T12090] veth1_macvtap: entered promiscuous mode [ 251.859610][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.869019][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.870177][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.886926][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.900269][T12090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.910497][T12090] vlan2: left allmulticast mode [ 251.910519][T12090] bond0: left allmulticast mode [ 251.910531][T12090] bond_slave_0: left allmulticast mode [ 251.910546][T12090] bond_slave_1: left allmulticast mode [ 251.910565][T12090] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 251.946438][T12090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.947534][T12090] ip6gre1: left allmulticast mode [ 251.949143][T12090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.964922][T12090] veth3: left promiscuous mode [ 251.964945][T12090] veth3: left allmulticast mode [ 251.984140][T12090] vlan3: left promiscuous mode [ 251.984177][T12090] 0·: left promiscuous mode [ 251.984411][T12090] vlan3: left allmulticast mode [ 251.984421][T12090] 0·: left allmulticast mode [ 251.984432][T12090] hsr_slave_0: left allmulticast mode [ 251.984445][T12090] hsr_slave_1: left allmulticast mode [ 252.024526][T12090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.026933][T12090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.047457][ T5752] lo speed is unknown, defaulting to 1000 [ 252.052439][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.053911][ T37] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 252.076798][ T5752] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 252.095722][ T37] bond5: (slave veth0_to_bond): making interface the new active one [ 252.125350][ T37] bond5: active interface up! [ 252.345388][ T84] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.362933][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.395548][ T84] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.395766][ T84] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.397417][T12100] netlink: 9212 bytes leftover after parsing attributes in process `syz.2.1566'. [ 252.401892][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.442714][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.480232][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.836094][T12119] syzkaller0: entered promiscuous mode [ 252.836118][T12119] syzkaller0: entered allmulticast mode [ 252.861346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.922096][ T984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.898316][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 254.292818][T12133] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 254.435593][T12151] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 254.780727][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 254.996589][T12151] bond5 (unregistering): Released all slaves [ 255.054268][ T5618] block nbd1: Receive control failed (result -107) [ 255.606672][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 255.607546][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 255.905848][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981195][ C1] net_ratelimit: 4 callbacks suppressed [ 255.981237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.981459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.981650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.981833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.982016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.982201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.301158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.216056][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 259.059125][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 259.102623][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.181235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.181436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.181614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.443984][T12291] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1612'. [ 259.483408][T12291] gretap0: entered promiscuous mode [ 259.505044][T12284] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1612'. [ 259.525952][T12284] 0ªî{X¹¦: renamed from gretap0 [ 259.551675][T12284] 0ªî{X¹¦: left promiscuous mode [ 259.551698][T12284] 0ªî{X¹¦: entered allmulticast mode [ 260.346701][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 260.435298][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 260.871876][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1622'. [ 260.935690][T12350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1624'. [ 260.988666][T12347] IPv6: NLM_F_REPLACE set, but no existing node found! [ 261.012880][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 261.359433][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 261.530036][T12376] netlink: 'syz.1.1633': attribute type 10 has an invalid length. [ 261.607765][T12376] team0: Port device dummy0 added [ 261.748947][T12390] net_ratelimit: 3 callbacks suppressed [ 261.748971][T12390] netlink: Unknown conntrack attr (type=8198, max=9) [ 261.749001][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.807817][T12385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.884249][T12389] vlan4: entered promiscuous mode [ 261.884271][T12389] bond6: entered promiscuous mode [ 261.884434][T12389] vlan4: entered allmulticast mode [ 261.884446][T12389] bond6: entered allmulticast mode [ 262.057032][T12395] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.309319][T12403] __nla_validate_parse: 5 callbacks suppressed [ 262.309346][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 262.309366][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 262.381428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.381691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.381972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.382210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.382468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.382716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.838629][T12426] netlink: 'syz.0.1643': attribute type 32 has an invalid length. [ 262.838650][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 262.958638][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18 [ 263.053516][T12426] bond13: option coupled_control: invalid value (2) [ 263.127268][T12438] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1646'. [ 263.128803][T12426] bond13 (unregistering): Released all slaves [ 263.250636][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1648'. [ 263.629420][T12461] SET target dimension over the limit! [ 263.630567][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 264.061147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.221126][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.494763][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 264.509606][T12495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1661'. [ 264.850171][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1666'. [ 265.159817][T12511] xt_hashlimit: size too large, truncated to 1048576 [ 265.180255][T12514] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1668'. [ 265.226636][T12516] C: renamed from lo (while UP) [ 265.274277][T12514] netlink: 'syz.4.1668': attribute type 4 has an invalid length. [ 265.315730][T12516] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.713551][T12528] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 266.114359][T12549] netlink: 'syz.2.1676': attribute type 9 has an invalid length. [ 266.832044][T12567] net_ratelimit: 8 callbacks suppressed [ 266.832067][T12567] ip_tables: iptables: counters copy to user failed while replacing table [ 267.331951][T12573] netlink: 'syz.1.1684': attribute type 11 has an invalid length. [ 267.507462][T12582] __nla_validate_parse: 6 callbacks suppressed [ 267.507483][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'. [ 267.507507][T12582] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 267.845350][T12600] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1687'. [ 267.875994][T12600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.948506][T12604] wg1 speed is unknown, defaulting to 1000 [ 268.136555][T12601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.711567][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.863450][T12639] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 268.941343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.941585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.941783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.021226][T12642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1701'. [ 269.031638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.559921][T12670] bridge0: port 4(veth1_to_bridge) entered blocking state [ 269.560111][T12670] bridge0: port 4(veth1_to_bridge) entered disabled state [ 269.560349][T12670] veth1_to_bridge: entered allmulticast mode [ 269.583674][T12670] veth1_to_bridge: entered promiscuous mode [ 270.063639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.383404][T12721] netlink: 'syz.4.1714': attribute type 8 has an invalid length. [ 271.405639][T12721] bond0: option miimon: invalid value (18446744071829782528) [ 271.405664][T12721] bond0: option miimon: allowed values 0 - 2147483647 [ 271.784536][T12639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.054271][T12727] Bluetooth: hci0: unsupported parameter 5161 [ 272.054294][T12727] Bluetooth: hci0: unsupported parameter 8192 [ 272.054304][T12727] Bluetooth: hci0: unsupported parameter 5161 [ 272.054314][T12727] Bluetooth: hci0: unsupported parameter 8192 [ 272.151000][ C0] net_ratelimit: 1 callbacks suppressed [ 272.151023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.187728][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 272.308005][T12737] can: request_module (can-proto-0) failed. [ 272.528499][T12745] Bluetooth: hci0: unsupported parameter 5135 [ 272.528522][T12745] Bluetooth: hci0: unsupported parameter 8192 [ 272.528533][T12745] Bluetooth: hci0: unsupported parameter 5135 [ 272.528543][T12745] Bluetooth: hci0: unsupported parameter 8192 [ 272.704794][T12749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.755566][T12760] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1726'. [ 272.759408][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1726'. [ 272.959068][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'. [ 272.959102][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1728'. [ 272.993292][T12773] netlink: 'syz.1.1730': attribute type 11 has an invalid length. [ 273.101120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.101343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.101532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.170811][T12776] ip6t_rt: unknown flags 36 [ 273.335788][T12780] syzkaller0: entered promiscuous mode [ 273.335811][T12780] syzkaller0: entered allmulticast mode [ 273.421112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.445258][T12786] netlink: 'syz.4.1734': attribute type 64 has an invalid length. [ 273.445282][T12786] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1734'. [ 273.468818][T12785] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 273.707967][T12802] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 273.740534][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 273.741423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.872721][T12806] netlink: 'syz.1.1738': attribute type 10 has an invalid length. [ 273.937041][T12803] bond7: Invalid ad_actor_system MAC address. [ 273.937063][T12803] bond7: option ad_actor_system: invalid value (1) [ 273.973580][T12803] bond7 (unregistering): Released all slaves [ 274.030044][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 274.187586][T12806] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 274.578057][T12834] netlink: 'syz.1.1746': attribute type 9 has an invalid length. [ 274.578079][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 274.580074][T12835] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1747'. [ 274.776740][T12838] geneve3: entered promiscuous mode [ 274.778741][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 274.876450][T12838] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 274.942173][T12825] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 275.008611][T12827] netlink: zone id is out of range [ 275.788649][T12875] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.918020][T12883] bond7: (slave geneve3): making interface the new active one [ 275.934223][T12883] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 276.018196][T12879] netlink: 'syz.1.1756': attribute type 49 has an invalid length. [ 276.698753][T12905] team0 (unregistering): Port device dummy0 removed [ 276.851385][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.876382][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.611551][T12940] netlink: 'syz.3.1769': attribute type 7 has an invalid length. [ 277.653518][T12931] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 277.684701][T12942] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 277.741111][ C0] net_ratelimit: 1728 callbacks suppressed [ 277.741134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.889578][T12942] bond13: entered promiscuous mode [ 277.904783][T12942] 8021q: adding VLAN 0 to HW filter on device bond13 [ 277.985495][T12956] __nla_validate_parse: 69 callbacks suppressed [ 277.985519][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'. [ 277.987473][T12956] veth1_macvtap: left promiscuous mode [ 278.298577][T12966] netlink: 'syz.1.1777': attribute type 10 has an invalid length. [ 278.309772][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.781046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.075107][T13002] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1788'. [ 279.215879][T13006] ip_tables: iptables: counters copy to user failed while replacing table [ 279.501265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.501466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.501639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.821030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.863169][T13039] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 280.181494][ T31] audit: type=1800 audit(1790006297.959:7): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1799" name=680B20 dev="tmpfs" ino=1696 res=0 errno=0 [ 280.221527][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.283869][ T31] audit: type=1800 audit(1790006298.059:8): pid=13059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1799" name=680B20 dev="tmpfs" ino=1696 res=0 errno=0 [ 280.660673][T13071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1801'. [ 280.728231][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1801'. [ 280.728265][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1801'. [ 281.958202][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'. [ 281.958245][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1809'. [ 282.367821][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 282.420849][T13115] syzkaller0: entered promiscuous mode [ 282.420879][T13115] syzkaller0: entered allmulticast mode [ 282.530019][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 282.864401][T13129] syzkaller0: left promiscuous mode [ 282.864423][T13129] syzkaller0: left allmulticast mode [ 283.423502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.654918][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 283.659799][T13149] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 283.746412][T13171] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1828'. [ 283.864583][T13149] bond14: entered promiscuous mode [ 283.866244][T13149] 8021q: adding VLAN 0 to HW filter on device bond14 [ 283.974283][T13159] bond14: (slave bridge4): making interface the new active one [ 283.974310][T13159] bridge4: entered promiscuous mode [ 283.975915][T13159] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 283.981154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.981409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.981625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.981842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.275715][T13180] xfrm1: entered promiscuous mode [ 284.275746][T13180] xfrm1: entered allmulticast mode [ 284.462922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.506481][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 284.558622][T13187] wg1 speed is unknown, defaulting to 1000 [ 284.903350][T13200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1838'. [ 284.920638][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 284.936480][T13196] syzkaller0: entered promiscuous mode [ 284.936503][T13196] syzkaller0: entered allmulticast mode [ 285.157290][T13207] vxcan1: entered allmulticast mode [ 285.263007][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 285.501016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.537530][T13224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.807185][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1846'. [ 286.401760][T13148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.543725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.591759][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 286.737289][T13260] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.737654][T13260] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.889859][T13263] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 286.956338][T13266] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 286.957428][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 287.298517][T13275] C: renamed from lo (while UP) [ 288.232178][T13214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.257112][T13282] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1860'. [ 288.611764][T13288] net_ratelimit: 3 callbacks suppressed [ 288.611783][T13288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.621051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.780062][T13288] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.059716][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1867'. [ 289.590815][T13336] netlink: 'syz.3.1871': attribute type 21 has an invalid length. [ 289.661217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.741272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.741488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.741682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.741873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.827694][T13336] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 289.883899][T13336] bond8 (unregistering): Released all slaves [ 290.039727][T13355] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1874'. [ 290.137771][T13354] batman_adv: batadv0: Adding interface: macvtap1 [ 290.137788][T13354] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.137809][T13354] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 290.223744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.680859][T13371] netlink: 'syz.0.1881': attribute type 61 has an invalid length. [ 290.701073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.834375][T13371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1881'. [ 290.895103][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1881'. [ 291.166238][T13384] netlink: NAT attribute has 8 unknown bytes [ 291.288631][T13384] tipc: Enabled bearer , priority 0 [ 291.303173][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1886'. [ 291.474800][T13396] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 291.474827][T13396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1889'. [ 291.626325][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 291.645000][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 291.647713][T13396] dummy0: entered promiscuous mode [ 291.647890][T13396] dummy0: entered allmulticast mode [ 291.748939][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 291.783281][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 293.452595][T13446] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 293.492712][T13443] x_tables: duplicate underflow at hook 1 [ 293.570001][T13450] tipc: Invalid UDP bearer configuration [ 293.570048][T13450] tipc: Enabling of bearer rejected, failed to enable media [ 293.875834][T13454] netlink: 'syz.1.1905': attribute type 6 has an invalid length. [ 294.193575][T13463] netlink: 'syz.0.1909': attribute type 9 has an invalid length. [ 294.252874][T13468] net_ratelimit: 3 callbacks suppressed [ 294.252893][T13468] netlink: Invalid conntrack timeout [ 294.252917][T13468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.320315][T13462] netlink: 'syz.2.1908': attribute type 10 has an invalid length. [ 294.729084][T13478] __nla_validate_parse: 31 callbacks suppressed [ 294.729106][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 294.816580][T13476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.850762][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 294.850786][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1913'. [ 294.941170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.941392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.941618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.941810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.016196][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 295.539918][T13499] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 295.539941][T13499] netlink: 'syz.2.1920': attribute type 2 has an invalid length. [ 295.581323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.666484][T13503] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 295.666508][T13503] netlink: 'syz.2.1920': attribute type 2 has an invalid length. [ 296.070358][T13513] bond0: (slave veth0_to_bond): Releasing backup interface [ 296.239174][T13513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.383038][T13521] bond15: entered allmulticast mode [ 296.386447][T13521] 8021q: adding VLAN 0 to HW filter on device bond15 [ 296.416001][T13508] tipc: Enabling of bearer rejected, failed to enable media [ 296.621630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.870771][T13536] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1926'. [ 296.886213][T13536] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1926'. [ 296.886237][T13536] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1926'. [ 296.887037][T13537] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1926'. [ 297.046869][T13535] xt_CT: No such helper "pptp" [ 298.020517][T13566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1933'. [ 298.020544][T13566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1933'. [ 298.369919][T13574] IPv6: Can't replace route, no match found [ 298.939709][T13602] bridge_slave_1: default FDB implementation only supports local addresses [ 299.741078][ C0] net_ratelimit: 2 callbacks suppressed [ 299.741106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.125149][T13626] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 300.152764][T13629] __nla_validate_parse: 3 callbacks suppressed [ 300.152783][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 300.157685][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1949'. [ 300.399529][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 300.433784][T13637] netlink: 'syz.4.1952': attribute type 3 has an invalid length. [ 300.588186][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1952'. [ 300.621640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.621857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.622052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.622251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.699911][T13642] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 300.702643][T13642] dummy0: left promiscuous mode [ 300.702822][T13642] dummy0: left allmulticast mode [ 300.773639][T13644] tipc: Enabling of bearer rejected, failed to enable media [ 300.780999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.978217][T13645] bridge0: port 4(veth1_to_bridge) entered blocking state [ 300.978334][T13645] bridge0: port 4(veth1_to_bridge) entered listening state [ 300.980178][T13645] bridge0: port 3(veth0) entered blocking state [ 300.980307][T13645] bridge0: port 3(veth0) entered listening state [ 300.980542][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.980661][T13645] bridge0: port 2(bridge_slave_1) entered listening state [ 300.980948][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.981090][T13645] bridge0: port 1(bridge_slave_0) entered listening state [ 301.532437][T13659] syzkaller0: entered promiscuous mode [ 301.532620][T13659] syzkaller0: entered allmulticast mode [ 301.776346][T13667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.991121][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 302.018912][T13676] veth1_to_bond: entered allmulticast mode [ 302.203327][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 302.207802][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 302.299130][T13693] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 302.299157][T13693] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1967'. [ 302.419799][T13676] veth1_to_bond (unregistering): left allmulticast mode [ 302.478980][T13698] netlink: 'syz.1.1969': attribute type 21 has an invalid length. [ 302.504924][T13676] bond0: (slave bond_slave_1): Releasing backup interface [ 302.506346][T13676] bond_slave_1 (unregistering): left allmulticast mode [ 302.640849][T13698] netlink: 'syz.1.1969': attribute type 6 has an invalid length. [ 302.652255][T13698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1969'. [ 302.806756][T13706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1970'. [ 303.027411][ C0] bridge0: port 4(veth1_to_bridge) entered blocking state [ 303.233907][T13715] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1974'. [ 303.263400][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.265133][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.318358][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.940115][T13741] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 303.940142][T13741] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 303.975692][T13741] netlink: 'syz.2.1983': attribute type 4 has an invalid length. [ 304.420200][T13763] netlink: 'syz.0.1990': attribute type 11 has an invalid length. [ 304.440169][T13750] bond8: entered allmulticast mode [ 304.464916][T13759] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 304.745618][T13758] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.764520][T13758] bond9: entered allmulticast mode [ 304.765560][T13758] bond8: (slave bond9): Enslaving as an active interface with an up link [ 304.920248][T13750] bond8 (unregistering): (slave bond9): Releasing backup interface [ 304.926075][T13750] bond9: left allmulticast mode [ 305.028078][T13750] bond8 (unregistering): Released all slaves [ 305.086785][T13766] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 305.113844][ C0] net_ratelimit: 6 callbacks suppressed [ 305.113868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.292250][T13782] tunl0: entered promiscuous mode [ 305.313745][T13782] netlink: 'syz.4.1994': attribute type 4 has an invalid length. [ 305.313769][T13782] __nla_validate_parse: 11 callbacks suppressed [ 305.313780][T13782] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1994'. [ 305.316026][T13788] xt_NFQUEUE: number of total queues is 0 [ 305.501049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.973571][T13828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2005'. [ 306.253182][T13832] syzkaller1: entered promiscuous mode [ 306.253350][T13832] syzkaller1: entered allmulticast mode [ 306.384684][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.541039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.287688][T13863] ip6t_REJECT: ECHOREPLY is not supported [ 307.329503][T13861] ip_tables: iptables: counters copy to user failed while replacing table [ 307.581271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.784992][T13887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.925848][T13890] syzkaller0: left promiscuous mode [ 307.925872][T13890] syzkaller0: left allmulticast mode [ 308.272716][T13899] lo: entered promiscuous mode [ 308.297606][T13901] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 308.309616][T13899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.697142][T13910] x_tables: duplicate underflow at hook 2 [ 309.039932][T13929] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2033'. [ 309.112702][T13927] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 309.207101][T13934] syzkaller0: Caught tx_queue_len zero misconfig [ 309.335629][T13949] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2035'. [ 309.429305][T13943] netlink: 'syz.3.2037': attribute type 11 has an invalid length. [ 309.545099][T13956] x_tables: duplicate underflow at hook 2 [ 309.599056][T13959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2039'. [ 309.798129][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 309.798168][T13967] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 309.798184][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 309.904020][T13955] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 309.926899][T13955] bond8 (unregistering): Released all slaves [ 310.301320][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.508875][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 310.883672][T14008] netlink: 'syz.0.2051': attribute type 64 has an invalid length. [ 310.886488][T14009] netlink: 'syz.0.2051': attribute type 64 has an invalid length. [ 310.913827][T14008] bridge0: port 4(veth1_to_bridge) entered disabled state [ 310.914015][T14008] bridge0: port 3(veth0) entered disabled state [ 310.914174][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.914320][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.317047][T14029] gre1: entered promiscuous mode [ 311.397480][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 311.443682][T14040] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2059'. [ 311.930006][T14062] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2064'. [ 311.930271][T14062] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2064'. [ 311.957452][T14062] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2064'. [ 311.957727][T14062] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2064'. [ 311.999172][T14040] gretap0: entered promiscuous mode [ 312.104967][T14068] netlink: 'syz.0.2065': attribute type 12 has an invalid length. [ 312.109614][T14068] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2065'. [ 312.476562][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.479078][T14077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.637900][T14078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2066'. [ 312.977603][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 313.168321][T14101] bond0: entered promiscuous mode [ 313.168344][T14101] bond_slave_0: entered promiscuous mode [ 313.206673][T14101] batadv0: entered promiscuous mode [ 313.218156][T14104] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 313.265707][T14101] bond0: left promiscuous mode [ 313.265731][T14101] bond_slave_0: left promiscuous mode [ 313.283145][T14101] batadv0: left promiscuous mode [ 313.823088][T14120] netlink: 'syz.1.2080': attribute type 4 has an invalid length. [ 314.224349][T14141] vcan0: entered allmulticast mode [ 314.379685][T14144] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 315.349311][T14161] IPVS: length: 8 != 1152 [ 315.606615][T14178] __nla_validate_parse: 6 callbacks suppressed [ 315.606637][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 315.606655][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 315.606845][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 315.606861][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 315.974986][T14184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2097'. [ 316.123670][T14206] veth0: entered promiscuous mode [ 316.266773][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 316.301873][T14201] veth0: left promiscuous mode [ 316.329404][T14216] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 316.329425][T14216] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2107'. [ 316.329457][T14216] NCSI netlink: No device for ifindex 0 [ 316.425748][T14216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.726011][T14218] erspan0: entered promiscuous mode [ 316.726173][T14218] erspan0: entered allmulticast mode [ 316.840101][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2115'. [ 317.103459][T14244] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 317.176849][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 317.345771][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506605][T14261] openvswitch: netlink: IP tunnel dst address not specified [ 317.506641][T14261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.769279][T14270] netlink: 'syz.4.2125': attribute type 49 has an invalid length. [ 317.900261][T14273] geneve3: entered allmulticast mode [ 318.499554][T14290] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2134'. [ 319.065314][T14310] macvtap1: entered promiscuous mode [ 319.065523][T14310] macvtap1: entered allmulticast mode [ 319.065537][T14310] veth1_vlan: entered allmulticast mode [ 319.480670][T14337] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 319.480694][T14337] netlink: 'syz.0.2143': attribute type 268 has an invalid length. [ 319.656094][T14344] netlink: 'syz.4.2145': attribute type 4 has an invalid length. [ 320.989355][T14405] __nla_validate_parse: 8 callbacks suppressed [ 320.989375][T14405] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2160'. [ 320.989387][T14405] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2160'. [ 321.306917][T14400] netlink: 'syz.4.2161': attribute type 2 has an invalid length. [ 321.320859][T14414] 8021q: VLANs not supported on gre0 [ 321.332124][T14396] syzkaller1: entered promiscuous mode [ 321.332147][T14396] syzkaller1: entered allmulticast mode [ 321.788682][T14426] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 323.481925][T14484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'. [ 323.616402][T14492] sctp: [Deprecated]: syz.3.2185 (pid 14492) Use of int in maxseg socket option. [ 323.616402][T14492] Use struct sctp_assoc_value instead [ 323.979417][T14499] tipc: Started in network mode [ 323.979449][T14499] tipc: Node identity 6ea236331855, cluster identity 4711 [ 323.979597][T14499] tipc: Enabled bearer , priority 0 [ 324.009040][T14499] syzkaller0: entered promiscuous mode [ 324.009061][T14499] syzkaller0: entered allmulticast mode [ 324.233145][T14503] tipc: Resetting bearer [ 324.580561][T14498] tipc: Resetting bearer [ 324.683972][T14498] tipc: Disabling bearer [ 325.037799][T14519] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2192'. [ 325.037857][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 325.038866][T14518] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2192'. [ 325.038898][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 325.169773][T14522] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 325.622327][T14528] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2198'. [ 325.684987][T14539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'. [ 325.685214][T14539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'. [ 325.982104][T14553] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 326.434258][T14574] netlink: 'syz.1.2204': attribute type 10 has an invalid length. [ 326.438645][T14566] __nla_validate_parse: 3 callbacks suppressed [ 326.438665][T14566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2203'. [ 326.449437][T14574] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 326.457032][T14573] openvswitch: netlink: VLAN attribute unexpected. [ 326.495646][T14574] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 326.495704][T14574] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 326.840831][T14581] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 326.850796][T14581] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 326.871239][T14589] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 326.871260][T14589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2206'. [ 326.871327][T14589] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2206'. [ 326.872903][T14582] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 326.872921][T14582] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2206'. [ 326.875677][T14582] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2206'. [ 326.887352][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 327.095041][T14592] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 327.104064][T14594] netlink: 'syz.1.2207': attribute type 21 has an invalid length. [ 327.258760][T14606] siw: device registration error -23 [ 327.310055][T14603] siw: device registration error -23 [ 327.669936][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2216'. [ 327.837310][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2217'. [ 328.130338][T14632] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 328.130364][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 328.130377][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 328.495389][T14642] netlink: 'syz.4.2228': attribute type 5 has an invalid length. [ 328.558293][T14642] team0: entered promiscuous mode [ 328.558317][T14642] team_slave_0: entered promiscuous mode [ 328.558571][T14642] team_slave_1: entered promiscuous mode [ 328.558819][T14642] dummy0: entered promiscuous mode [ 328.559010][T14642] team0: entered allmulticast mode [ 328.559021][T14642] team_slave_0: entered allmulticast mode [ 328.559034][T14642] team_slave_1: entered allmulticast mode [ 328.559046][T14642] dummy0: entered allmulticast mode [ 328.579732][T14643] netlink: 'syz.4.2228': attribute type 5 has an invalid length. [ 328.806102][T14651] veth0: left allmulticast mode [ 328.806443][T14651] veth0: left promiscuous mode [ 328.809501][T14651] bridge0: port 3(veth0) entered disabled state [ 328.926925][T14651] bridge_slave_0: left allmulticast mode [ 328.926952][T14651] bridge_slave_0: left promiscuous mode [ 328.927187][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.993846][T14651] veth1_to_bridge: left allmulticast mode [ 328.993874][T14651] veth1_to_bridge: left promiscuous mode [ 328.994087][T14651] bridge0: port 4(veth1_to_bridge) entered disabled state [ 329.052512][T14656] x_tables: duplicate underflow at hook 3 [ 329.052599][T14656] x_tables: duplicate underflow at hook 3 [ 329.052671][T14656] x_tables: duplicate underflow at hook 3 [ 329.052749][T14656] x_tables: duplicate underflow at hook 3 [ 329.052819][T14656] x_tables: duplicate underflow at hook 3 [ 329.052889][T14656] x_tables: duplicate underflow at hook 3 [ 329.052959][T14656] x_tables: duplicate underflow at hook 3 [ 329.053032][T14656] x_tables: duplicate underflow at hook 3 [ 329.053102][T14656] x_tables: duplicate underflow at hook 3 [ 329.053172][T14656] x_tables: duplicate underflow at hook 3 [ 329.062047][T14651] bridge_slave_1: left allmulticast mode [ 329.062258][T14651] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.206624][T14651] bond4: (slave veth0_to_bond): Releasing active interface [ 329.206663][T14651] veth0_to_bond: left promiscuous mode [ 329.206881][T14651] veth0_to_bond: left allmulticast mode [ 329.283285][T14651] bond0: (slave bond_slave_0): Releasing backup interface [ 329.306281][T14651] bond_slave_0: left allmulticast mode [ 329.365458][T14651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.365485][T14651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.402818][T14651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.746026][T14680] netlink: 'syz.2.2239': attribute type 1 has an invalid length. [ 329.810066][T14673] nbd: must specify a device to reconfigure [ 329.966091][T14678] 8021q: adding VLAN 0 to HW filter on device bond16 [ 329.967711][T14680] can: request_module (can-proto-0) failed. [ 329.990647][T14678] bond16: entered allmulticast mode [ 330.002979][T14678] bond0: (slave bond16): Enslaving as an active interface with an up link [ 330.007381][T14697] openvswitch: netlink: VLAN attribute unexpected. [ 330.035594][T14684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.048075][T14684] bond7: (slave bond8): making interface the new active one [ 330.055740][T14684] bond7: (slave bond8): Enslaving as an active interface with an up link [ 330.319804][T14707] netlink: 'syz.4.2243': attribute type 21 has an invalid length. [ 331.108980][T14727] batman_adv: batadv0: Adding interface: macvtap2 [ 331.108999][T14727] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.109023][T14727] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 331.144225][T14736] netlink: 'syz.2.2254': attribute type 11 has an invalid length. [ 331.144246][T14736] netlink: 'syz.2.2254': attribute type 11 has an invalid length. [ 331.235643][T14738] C: entered promiscuous mode [ 331.236202][T14738] C: left promiscuous mode [ 331.553832][T14740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.824537][T14761] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 331.917905][T14765] __nla_validate_parse: 13 callbacks suppressed [ 331.917927][T14765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2260'. [ 331.917943][T14765] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2260'. [ 331.917957][T14765] netlink: 'syz.0.2260': attribute type 5 has an invalid length. [ 331.917969][T14765] netlink: 'syz.0.2260': attribute type 6 has an invalid length. [ 331.917979][T14765] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2260'. [ 331.918244][T14766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2260'. [ 331.918260][T14766] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2260'. [ 331.918272][T14766] netlink: 'syz.0.2260': attribute type 5 has an invalid length. [ 331.918283][T14766] netlink: 'syz.0.2260': attribute type 6 has an invalid length. [ 331.918293][T14766] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2260'. [ 332.298414][T14775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2261'. [ 332.310569][T14769] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.469629][T14788] can: request_module (can-proto-0) failed. [ 333.075474][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 333.286461][T14820] [ 333.290441][T14820] ============================= [ 333.295421][T14820] WARNING: suspicious RCU usage [ 333.300303][T14820] syzkaller #0 Not tainted [ 333.304786][T14820] ----------------------------- [ 333.309640][T14820] net/netfilter/nf_conntrack_netlink.c:3395 suspicious rcu_dereference_check() usage! [ 333.319260][T14820] [ 333.319260][T14820] other info that might help us debug this: [ 333.319260][T14820] [ 333.329551][T14820] [ 333.329551][T14820] rcu_scheduler_active = 2, debug_locks = 1 [ 333.337729][T14820] locks held by syz.0.2273/14820: 2, last CPU#1: [ 333.344155][T14820] #0: ffffffff9aeec320 (nfnl_subsys_ctnetlink_exp){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 333.355048][T14820] #1: ffffffff8ea74d58 (nf_conntrack_expect_lock){+.-.}-{3:3}, at: nf_ct_expect_iterate_net+0x38/0x180 [ 333.366277][T14820] [ 333.366277][T14820] stack backtrace: [ 333.372251][T14820] CPU: 1 UID: 0 PID: 14820 Comm: syz.0.2273 Not tainted syzkaller #0 PREEMPT(full) [ 333.381651][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.391740][T14820] Call Trace: [ 333.395027][T14820] [ 333.397951][T14820] dump_stack_lvl+0xe8/0x150 [ 333.402542][T14820] lockdep_rcu_suspicious+0x140/0x1d0 [ 333.407913][T14820] expect_iter_name+0xfb/0x100 [ 333.412674][T14820] nf_ct_expect_iterate_net+0xf2/0x180 [ 333.418119][T14820] ? __pfx_expect_iter_name+0x10/0x10 [ 333.423487][T14820] ctnetlink_del_expect+0x45d/0x640 [ 333.428686][T14820] ? __pfx_ctnetlink_del_expect+0x10/0x10 [ 333.434427][T14820] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 333.439485][T14820] ? unwind_get_return_address+0x4d/0x90 [ 333.445119][T14820] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 333.450326][T14820] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.455813][T14820] netlink_rcv_skb+0x226/0x4a0 [ 333.460598][T14820] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.466053][T14820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.471353][T14820] ? bpf_lsm_capable+0x9/0x20 [ 333.476020][T14820] ? security_capable+0x7e/0x2c0 [ 333.480959][T14820] nfnetlink_rcv+0x2b9/0x28c0 [ 333.485690][T14820] ? __dev_queue_xmit+0x29b/0x3820 [ 333.490811][T14820] ? __local_bh_enable_ip+0xd6/0x140 [ 333.496091][T14820] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.501288][T14820] ? __dev_queue_xmit+0x29b/0x3820 [ 333.506399][T14820] ? __local_bh_enable_ip+0xd6/0x140 [ 333.511677][T14820] ? __dev_queue_xmit+0x29b/0x3820 [ 333.516779][T14820] ? __dev_queue_xmit+0x1edc/0x3820 [ 333.521970][T14820] ? do_syscall_64+0x166/0x520 [ 333.526724][T14820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.532785][T14820] ? __dev_queue_xmit+0x29b/0x3820 [ 333.537891][T14820] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.542999][T14820] ? __pfx___dev_queue_xmit+0x10/0x10 [ 333.548372][T14820] ? ref_tracker_free+0x689/0x830 [ 333.553388][T14820] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.559138][T14820] ? __skb_clone+0x449/0x6c0 [ 333.563748][T14820] ? skb_clone+0x246/0x3a0 [ 333.568190][T14820] ? __netlink_deliver_tap+0x811/0x860 [ 333.573655][T14820] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.578941][T14820] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.584136][T14820] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.589336][T14820] netlink_unicast+0x7bd/0x940 [ 333.594100][T14820] netlink_sendmsg+0x813/0xb40 [ 333.598864][T14820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.604151][T14820] ? apparmor_socket_sendmsg+0x98/0x360 [ 333.609693][T14820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.615059][T14820] sock_sendmsg_nosec+0x13a/0x180 [ 333.620207][T14820] ____sys_sendmsg+0x54e/0x850 [ 333.625006][T14820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.630311][T14820] ? import_iovec+0x73/0xa0 [ 333.634888][T14820] ___sys_sendmsg+0x2a5/0x360 [ 333.639572][T14820] ? __lock_acquire+0x747/0x2de0 [ 333.644503][T14820] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.649695][T14820] ? futex_wait+0x2a2/0x390 [ 333.654231][T14820] ? __fget_files+0x2a/0x420 [ 333.658812][T14820] ? __fget_files+0x3a2/0x420 [ 333.663891][T14820] __x64_sys_sendmsg+0x1b1/0x290 [ 333.669229][T14820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.674722][T14820] do_syscall_64+0x166/0x520 [ 333.679310][T14820] ? trace_irq_disable+0x3b/0x140 [ 333.684328][T14820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.690395][T14820] ? clear_bhb_loop+0x70/0xc0 [ 333.695073][T14820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.700977][T14820] RIP: 0033:0x7f914159e159 [ 333.705416][T14820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.725120][T14820] RSP: 002b:00007f913f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.733704][T14820] RAX: ffffffffffffffda RBX: 00007f9141825fa0 RCX: 00007f914159e159 [ 333.741671][T14820] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000004 [ 333.749629][T14820] RBP: 00007f914163506b R08: 0000000000000000 R09: 0000000000000000 [ 333.757587][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.765541][T14820] R13: 00007f9141826038 R14: 00007f9141825fa0 R15: 00007ffffcc564e8 [ 333.773515][T14820] [ 333.865166][T14826] netdevsim netdevsim1 netdevsim0: entered promiscuous mode