last executing test programs: 2.817383189s ago: executing program 2 (id=5150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x12, 0xb, 0x0, 0x0) 2.481530578s ago: executing program 2 (id=5155): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet(0xa, 0x800, 0x5) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x29, 0x1f, 0x0, 0x48) (async) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x20, 0x5}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x1, 0x3, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5ba3}}}, 0x32) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xe38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.259207472s ago: executing program 2 (id=5160): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000000)='memory.swap.events\x00', 0x40040, &(0x7f0000000080)={@align=0x80000001, {0x7, 0x5, 0x7}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f00000001c0)=0x5}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc8c5}, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 2.004145176s ago: executing program 0 (id=5165): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x101000, &(0x7f00000000c0)={@align=0x100000001, {0x3, 0x5, 0x1fa, 0x9}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x6}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2b, 'blkio'}, {0x2b, 'memory'}, {0x5c, 'memory'}, {0x6, 'memory'}, {0x2b, 'perf_event'}]}, 0x2b) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$ppp(r1, &(0x7f0000000500)="6f0e1dd2a3f1e154a0f7ce592d1aca1260d9cccb26f1aa97d314598e737e2fd15bfd015421b6fea28c54ec4d31eed699ca0d65e1eaa69e29f30d856cc045d76fa203d4d09a658adcb61958f0ce2f90904ec783f111fdf8993fb5389886dc9fefdc6fe2af15fb977e74a4e5599d4f5980b5d7ad00091c6f60545fd1d977996737c179c395e75a796e6dbd64e4e5d5041a787c22f48f5f1b416f850c3acb375b4bf95f89bb35c70ff4519112e64237eee47062ebe3cec09bd63adaa2035f228c85a692204ad01ce80e55cac204f3d5b9f0", 0xd0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x50}}, 0x0) 1.493481867s ago: executing program 4 (id=5177): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x807) 1.310190833s ago: executing program 2 (id=5181): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0xc0080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0xc0080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.306377087s ago: executing program 4 (id=5182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e26, 0xfffffffe, @empty}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x124, r1, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4b5a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xfffff18c, 0x8, 0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff801}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xf2, 0x1, 0xf6ad, 0xb08, 0x101]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa0000}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdf}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x53}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa927}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x24}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x400, 0x7]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x400c002}, 0x20008011) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x48000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008840) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r9, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.126765003s ago: executing program 1 (id=5184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x240, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7e9e}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x80, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x6, @broadcast, 0x1, @value, 0x5247, 0x7, @device_a, 0x4}}, @random_vendor={0xdd, 0x50, "10078341801c4510145e43b8e12f2cc4e811451ae5aa4fb312355804035b610177b61ef88a8a5ecf422b325e698bdea59733c1b421ecdbc2b6c30879a7edb0cb94d9a95b50eac961b1b1ea5a732ab927"}]}, @NL80211_ATTR_IE={0xdc, 0x2a, [@random={0x70, 0xac, "7f5cb65f9d57cd6b6cac01f64d2aafc26a7914fe2e0cdaeff877aaa88dbe43f63e55e31614c3a30d5f55c1d96dc18ed3f38312848683c6902c1face05c151ad83b259a6596f76b0762d7650dab77f983b26248bc9c120abb21c0bd4f40e682e9b4f4611bfa4af8708eec5338ff44d7a2744871c646707cb4ba3c37345428777f463a1a030927ffdd2215cb048ec7404d5be525af4dbd2267961c7e01f531bee7a965ec159a5480a25c1e2755"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x3, @broadcast, 0x6, @value=@device_b, 0xffffffff, 0x9, @device_b, 0x6d}}]}, @NL80211_ATTR_IE={0x33, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x6, {0x1, 0x9, @val=0x1, @void, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, {{}, 0x4, 0x5, @device_a, 0x8, @void, 0x9, 0xefb1, @device_b, 0x7}}]}, @NL80211_ATTR_PROBE_RESP={0x62, 0x91, "54d7eee7c45e9a6d4737e1a51b31f09ac8be7f025700e1d1a018ea3e0292b966b246e4efe0295e9301920c50099c17860fc810cfaf17d1e9758fcc87fa4cd123fd8a86caf4ebdacdc37397db8efa5f3b3cc9cfbc25b98d6128d170aa19d2"}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x8880) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) close(r4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "2200000003c35360"}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r0) 1.102089534s ago: executing program 4 (id=5185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0xa4b6, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x3, 0x20000008, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) (async) close(r4) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0xa4b6, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendto$packet(r2, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x3, 0x20000008, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x0) (async) 1.045225465s ago: executing program 0 (id=5186): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000004000000120000001e00000009f2b6ffa922d71161e7860a595bf69ef03c2f9a0cc208714da988be1c2a0d64dedb5d26d851c30b3a700a8909ce5afebda59e7016ca195f88f2c2abe81b09b79ed458ff695939053c4da5d8551ac64889a4f9ce8d1d4756faa5bd04df54bb2b16c7ee21c6751bf97e29fb408d6c2812d0c753689dd38ac157dff2903eedb7e1b9b16802d1785cda74f828ce21e32c6ce189aa283c670ca98a39d7cbe9641d08c56d3edcec44d02e149ec4dc5b7f6f865c7a8458b91f8183cfcf68ef93d0233bc6ad8693bd52354cca750a6e370fd574f3b3a57f28e3689039df7d7ae9cf68044e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 1.044432483s ago: executing program 2 (id=5188): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2040000, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) splice(r2, 0x0, r2, 0x0, 0x6, 0x3) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=0x7b) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x20000020, 0x0) 861.73017ms ago: executing program 0 (id=5190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e22, 0x9, @mcast2, 0xffffffff}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r4, 0xfffffffffffffffd, 0x0, 0x24040083, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'erspan0\x00', {}, 0x29be}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000140)=0x8) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 764.966018ms ago: executing program 1 (id=5191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="fb3eec5be59fed9451c2e29257126b2f04121b877f9b394cbb0892a22884dfe61da703ddce09c630442533e966c6869c", @ANYRES16=r1, @ANYBLOB="170a28bd7000fedbdf2510000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) 730.070765ms ago: executing program 3 (id=5192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"/297], 0x5c}}, 0x0) 704.075982ms ago: executing program 4 (id=5193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) socketpair(0xb, 0x6, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x44}}, 0x0) (async, rerun: 64) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x30, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) (async) getgid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) r12 = gettid() r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r11, @ANYBLOB="089805000750050008001300", @ANYRES32=r12, @ANYBLOB="1400030076657471315f6d61637674617000003d"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) getgid() (async) sendmmsg$unix(r2, &(0x7f0000000f80), 0x0, 0x4be40) close(r1) 617.269215ms ago: executing program 1 (id=5194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xffffff00, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 576.321815ms ago: executing program 3 (id=5195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ecb303001a05", @ANYRES16=r1, @ANYBLOB="10002dbd7000fedbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b00080000000600110002000000080001007063690011000200303030303a30303a31302e300000000008000b000b00000006001100090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00020000000600110003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x240048c5}, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl(r2, 0x401, &(0x7f0000000100)="a3ac032e2c2821d1fdee4e4bc896bd60f7627b") sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514240cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) syz_emit_ethernet(0xc2, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 550.463497ms ago: executing program 0 (id=5196): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x8880) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 449.292507ms ago: executing program 4 (id=5197): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r2, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 431.985337ms ago: executing program 3 (id=5198): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x604, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x75040e60, @empty, 0x2}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 391.512079ms ago: executing program 1 (id=5199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000079101a00000000009500000000000004"], &(0x7f0000000480)='GPL\x00'}, 0x80) 333.044376ms ago: executing program 4 (id=5200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @private2, 0x3b5d1a97}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, 0x1, 0x8, 0x500, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb3f5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x983a}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', r1, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 321.79982ms ago: executing program 3 (id=5201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) sendmsg$kcm(r1, &(0x7f00000036c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="1d2fd175d58a64fbeeae583e18c6fc8fe29b4d3d89b39189ff8c442a4c7e4329f96ccc329e7f822a0b18651efddc30dfad7d400433bd3266db786f362a2e8274019c2f908ba08bc74a36873a5393693614b6baffe79a48d212fa3abdda4c78c09da50ee29ce9541d13088c5309d2c37072c32f9a1df2cd945f8d8f1250ba482d1c2ca84d7134113ba16feb00dc630b6bd3daa7a261a7bfeec88d29e9deb9990651037e33d312bc90f910911784f762f8c6a54e4a51de7024d4129c0b9bdc21b8a32d1b05d6fe8f34d9a1378aa3129a3bae7d7e26095548088ef0358a2a31e8b62654aa4e45b3bad1af5912c7e3af33dd220391", 0xf3}, {&(0x7f0000000240)="dc13095af2da3f72ffc6fbaa52c5e8ebb6b49657b80b5b9d7e25d5b3352c6af339109874559d12c9849c2ff8e8d33274af21fc7320b0deb724c02a9f8983aa9a6ea4ff275a09fc141d955cac377658124a7d7c59328b80ba3a8cb7d4336a11fc3d16e936bd814cf4a470edc1a7f2edf9cb346c2b1a3820b5a422ad7db3a2295ac6417dd91915e873c92ebaf8a88c97a8312ead0311893003", 0x98}, {&(0x7f0000000300)="65c23cc8f22fbacc47b19b6c12fd568c463df433d5bcbe72b6a0caad11751f865cbbf8b4e9a22dab01d4dac4279170e5549d16ee576dcb064a17fc85957588071b3c2f23211ec5467f1270851467bd13525a554551ba750620a6c5505ed2a6cbc84e07f439f18f", 0x67}, {&(0x7f0000000380)="debbc4a2b07de434b5", 0x9}], 0x4, &(0x7f0000001300)=[{0x1010, 0x111, 0x4, "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"}, {0x100, 0x116, 0xfffffff9, "0d37df0c2e56955623312c4aea888755241c70f8a2308b51f7ef7fbb619466cb725059daa7e5214e4b5b02e3bb0e33bd9038c5a7b7909c5c6dc7807bd5e85a5355c5df32542d4d06cf44f16d749ec2795fedf1058fa5c9ac2eb34920d0eb69d402c6faa2eed3d84d42b8bb44270709a816e5d132443f491a1ff13df936475a1c1ef102f64618a42f523fbb7c71d9c5b681dc08da07b10624486b9cf67b650721b0dcddc8b300e24009e9b304f2a81b07f4a97fa8e5b8dc55a0dde9b741a086a116c8da0273e0c24a16cc35d57307f960b11c295036d72701a3b9c529092d087e78b2053e0d5d10f822cf4a78b0aa4882"}, {0x18, 0x6, 0x1000000, "62fd0f93"}, {0x18, 0x29, 0x3214, "fd096f"}, {0x108, 0x114, 0x81, "4933e9132e89850f66f2a74352bcdea3d8b6d0b2b188f5ea894a8e174bfa38a334a8fcd9db89ebff61971e0124f865d587a6d8d04a7b70353161d3ab6d60a773c69bb3267f754b82d637aebb75984abb5158db1e1e76677d09fe097a715c0ad6a87eb0b7f142e542bc5c2a1c55d14e4a88d70b7ae0f8c2cdfc755a1c1d71ce99fcab74334049c6f848fbfe1d8a85cc19daf44137a7b4e6a00ea6041d7a66a83a32ba0b3472fe31135c29ced7f757529d05ef6e7e0dc6525e5b1947a34aa70693dbed5bcf555af80c5f79681239244cd34b9c30c8dc8ecd236de87657a3a98ccf219f8f3a6c607d4aced6de24c134ec823290c168"}, {0x78, 0x10c, 0x8, "90386ec7fba5171270bb6aa6e4c88218367a2431c9fc0361f4e01d188d5123ba1a015fc22a2afc69eb4018a1eea8db0783058dbee693cba779f83740a34c57ba4f8807b4f0c259d1d09552a25975dbf8b19f63455714bbe541bdd32f1256a097e6951654"}, {0x20, 0x10b, 0x63, "b8779d28fa869f4b963a079c8f7e"}, {0xb8, 0x112, 0x8, "7221bbed7ae9c2e61efc4d45cb451eaa1ec9be439eecf162d20fd29538693eb15cfc85e0d8485dc381c72c70b4417ccc1b50045e1f14ef9b86a4dcc06be058d27cd43b64f44e5551cc4fff78e4d6345d7ba9e83d421b131b6455bcffa02371f795c2ccec915c0f7ffe2dad0b57d0dbf2029413a8d85205847f024e686534707de25d9f25d663680f6633f233f005d22091e86e70e4f126921059496fa97aa64ce30b"}, {0x1010, 0x111, 0x1, "fa9f2f5e66fad393390e1daecaee4940567c5382071c223a3dadbc81d32b9adee216d22215c139d5ca499a64edfbd24d59859e40f5a7af7a7364127f3abf4ce606ed20213bbc4244e7f2bb43b2ed209901d60f8a4af7d1269db377b0775fc4674a8ffb8ad8a4828e98e7496a5ae598016b4abb692cf4006dfe13843b1e2467adb357dfa62e66fb8e5b4aa568992946dd27a584610ed8ac2e7b75e63de60f7ce73b4bd81aa07849958011c023eac8fa74ac241ffb56c4a4e65acca0df343e4afe3648d75798a468d10a0bc2b7b931e7b83fc9cf0c055ebde17fd0a9572185f1bce773fac2db3d77e6c9210a6ea341214d03465fcb2df162d6821e1572665cf57a378508747051f4946bdbfc6ff2392eb10867ffada935d0b1b7fb420930fd7e0aa9d9fefe0504a24fcb25114cba41f39683fa2843de80671e9e4c61d1de112d9c4a5ce6932112bf3ccb961f2c809982771103570b62545e31ecc2fa3e493fac072dcd7e898382377573f56ec6397e13b429a361cb202a46dc0474e0fb09be2aef152630fc27002313c39fab6bd13478a445e0a9129ee435a24f66585ee037514064c7f11a9b16743badc617be5b7589c16755ee4b3b5b66c47f43f7de20380dc6bacbcf3dc5140742d34c2f73ee07d3836775f934541d84411a67ce437fe6a19bf9bb96ea5c0abdddf66f6b30fcfe465d9d3f45779617a16b341f72d7bda2ba052438a4db74152ea4f2963a7ac8225b969da97d9e363d3d85f07b5afa9d9f458682e3590141bddda904bc7fc20c7f65e43f1957e05ca42978b234347780ac75e49b561bba2b4cf14c0fc4df722a2880d616f0a9c99f3f27f78faeb937bba3677d164062be0635e7983f0a71c42d93800284814f85a5a6bc75222f7741f2d45df6cafbc6778d590010269fd9cdf7db0b8374b46726a3d67a9778d51ee62a1e1b7f916502e4cfe1281c940ba90a4c01d1531774523c116d3c12ef24768f1e1fdcd45163dfc6efbeeafeacc8ad51c3b83979117535fb32c681065658884d9756b487da471b289b4face08bbfd0686cc5c4c9417e1ca4c209383852ddac514078e681a87659e6f0e0ac227cf4435d9fb81667294434fa9f18fc897193756fb8122192df750115429f0e4890b232142b8557844f51f05f5ffe9e5d79ae14a147fe3c4c573adc321ed38af39abda2d7b9a1fa782bfa2148ab8e23746b253745ce20a3b85b1f651a1b93d392d28c1eab71ea5570e415ed0bf3d6e79e948113a2c1ab9e29dc8280558a47f5889b347c3182e56ae1f0f33ea4f7f5789f5d8770b8df247856e05b4789386312462d97019f80ad962d82e97165382e1214df8e49f34af808fe2095fdd5be49e2af085deaaf0e31d40578b22ffff1369bef738cc4b70feea84fa042715cfc55d944a501c3598210fafa688359ba0cd1f2fc46e41eb09fbd0628903298b8ba3744e5fe6a9b08c7ca3a4ed696c1954256a42b6674d36395ac7ed132f882f90ea65ad0d5a10664768c958808d9aa5633c7e129af5ef6b1fbcd215140e53c4d691cdb95cce5de10a08d5bd98c9db17349c03ebe130d94607a74a61eb1cfd6955ed933160aa59fff682ab74162d9bd9c575819c40e2c86bb4bb670d8543d172fc9d180ec5b134420212690dd433363dcf9b4c0a8bccfacfddef8ca05370bad6af1e94288643cfa9ae15ffa8e468a24e7c85f5aa2f5e7cfbd43e72aac6ee4a7779b20c7511e51527686cafa8d80701ba37b7abf05df809fdc846c279f013f29bc59f247c18e4c5abc931b721d030768153277ec511ac4e7ee789e8f8c5f6b68299b35ee8607f0ef6ab170111d9ce26ea925f74a340a75faba28a39f8bb1b65db0542d5550f413c6961ccf268f4667f4b4bf90acb1285def9dba2b1370d0240245a6e0a86de880c66277bf9662cf5c8aff56a2552e7279361f89860f044fe583a153f6e3bbb3566a341891dbd063e5c975ae5a62a5a97f14571189bd97b663ef003b66a1a9774041b241a23bbf29449d762d672ef99a6fb58b1e5d73e8171f6681af83a75b665fa7659fd871f500595458f9155dadad9b82c8bb841756adaca4407a9cf22d2e149341a798580ec25cf09a4e82be5bd332f3142224f3d70f00c5a5eb71035a395cb222c2ee4d189340e421b2d192a449ff0539e00b7153784b90a17845bd1ae91c64679b0ecc1275d0d0a157ad4acd1551e33962ba6f32b299b82cf308a65391f42509ecfda9173ee0b54fe7ef1cc8ddb9cad685c41ec6d2b8c3f00a98d552b2ecb772aeb4257cf42ade0e1798dcee51073066207ee72794671545369b8854980e82fee9c3d4e59b107bc6f8f822492f86b900e196620dc9e6ded81c092a3747afe38ae4a712c67061b922c81c8f51086df23c7f62f47ba56592069309fcfbde797f55197a37ff85c992b042ee42bb68fbbf21da45f722c4d6eeb2322c2b67524c9aeaf372c579306b48fc999361005ab4d0def81770ac4cda8bb96bce6e196f1752143bb301360a73dcbf59ab19c029e55a901a8df3852440aad50af459f6e0439ae698db99b8de9d325900d3e7b302b9d9a74fc6bb3af71c486bc11ffe691e67c769035d47efa2ce3d34a7b20d86d431d1a975139dab57689d0f422eb1ab1537755ef2f8e222ce3acef667f7eaef179adb2f103d4084e75c537944051ee4df4071e1d6329c830a03113b3c81cf92c992c8aba2884f869cf8c1d0f34d49165df61dd6cf0726a975bd9a9e68c9ba5395364d9db5f717e2ea72a75f02708a78d1cfd06afb16c4c4d83064e9a9e8376f75159809dc287e86e5096be6a625a9f511d22fd8b3b5165a078d4c9d0d94d2d4e767a4ac73b1097cdd1f6c83623a3dd8419b67118133d79af1e951b9219ac7098925a37172ae9b195671f58b420106801fd14bf9698b82f4de7899a3eb68a20791630c556bb032476482ddadf6f30015c795fa8140a7d47e96e8b796ee807ad19c127cea8df73457ef687328a6ab0c47e286539497c32c30eb3b894fe1d4d3faaa1b705669634b5a6d5fdb463b2512d30c7b02763ddc50b655b8feab278ed33335c279d39b45644f1dc22f0443e3d56187ef9bb4a94ba08e675148a8bf0f1626d028cca29beecef86138aea5373e1c6d3f4ca8fb52da740b0cc981bef8df5fdb7f0135f0e9e23d592bed759b85313dd07df71381cdb10e199760d063dec86fd97bcbd3106f15c3df40e66668a638cc1983caf1885485777ade974235a0f18b454534d7e67375ae7d0083f0e4c21e95a682097abdeba9ae21e3e921377985bc6e7bdff3253f60ad47cbcd2acbd016cff4542c4dffc8312a62b3ad7f764157f45aca9773f299b153215822a122645d9ae9e9ee26b79d8f2e3fcacb27ccd3bf6b362c3d176d218b485071961194443acab43d45010931031c29f7a0b9dc1922d8148ce522513df81747d29e23c0ca25f8f19bfd2c7d31e335061d5af7d7b75169a992589911c846f7f7f605618ad770ba2c5e4586be9a7d109c332f2e169c212e33071a7bb939935f5c685f43c6c316c43e1cf0e30c228566475c3d28b21d54c4076246a3b50a1c37aa125831c3b127dfcccf98a1a31895bf389ddb84ce32608b614fd168a7806b6861ec85f745a62b6a5c15159fd3fd373986ae656d9acdfa8d0bbb1a1257e66930932b4ecfc75d227acd41aab7a6db55bab5d5176a3860a2ebb65bf8d9c1b0d1ae07821f31e1b07e2f36f531a8f426704b450aa9dbc3bd2c66230e8d60996539a984b0c0576aceda408b08783680f9a38026c80b3afcfce6425c17499a6cb9644a81acd44dafd01a37a0aa876762f91176ae2f8a34124044f7940317e8ba74653a246f90829d82c4984c2fe5ec31d4f476e2338055425eaa6a6547ce9cef22e6d77efc0e76693caff53aae0991b9958949b514660b6a55964afa0196c47f5186d4830a8b426c95f2b64bf6fefa4c01abab9ffc5a01f0d3c84eb0f59b3b3c92e68e20714b80bc0d4ececbaef8ccbb82f577742a6e43ef250506e95e4b0688b63a9065732300f2cb0aca0b02cf9cdf08f583c7f4fbb2ad90ccfcf69815bb26bc9e35fb9c3b8010702dbc6f814d812d47274c8c9fc455d2d33bc4756acd181c6ad4ee4bc8fb8d9ee253d2e82c894a4c42145b8c6dd1f8d0ef8a49bb6afb9d75e0a7ea4bf3f3d60a13ccdb96886449639de4c7fe2e2b4a8f07c57402371d7a00134d33cfd0d1ac986fda2ee1832acf864aa2a405ef965d565deefac58947530dbd1c44e8784415997d285ea8aa49d8cef23f0fcf1eb5eb908c14c3821fd05bceb1add11c533726d5904d88e6f82d13f562878df1de0163f9bdff9c48a38f10c392f8a3a1a45ee4d9618ef5acf67b5ad6baa383c1509f621ddd3b81d5e529b1064ee151dfd46e340706e94423da4157290d1c82eca39cd61e4690112d51a685a7fc40a0952025bf64d57099cb8f39b9d3bc7bd6d2d62109b271fc8e0b40e9f50298af893911960afbfd3d98da8b0aa01553a35b9cb036955b996f5e8e033ee030b673a786db3c9955f36a588b6622a278cb9b5cbf625e2b37adfe82378f6225fa354cec491e600dfb0d36fb6a34e012a0715f923d78ac956ac5d6fd3d6ee3c334bff32655c546012b309d79033ec0c74cb13d430df3b2411180bf8475f145b591323dc0bca46c65bbaac4b46d09863355e0285b01a6874a671a88e18cfee0e7875b9dabfd82609ee6bd564ccb2e90c1e4b809dbd621f9a04284ccf33c7a926b7cbc91217fd0c7099eccd27530df77e2479098976546e0d8899e51e445b99fc1a9afe1a08c78e5086b11fddb082c4cf28752a7df9cef2216922c23208e67ca764bb94a9c471d57dd17003fc73c030da577f71024b4a755862f000427f62591925650e409cfc0b1286166637b615e9f1ee925393a9c828dea2a22ef61f0a021485f170096f9fae26e9c64696d0385118f6c2281d88b0e7332e137d2ac66374cfc7c755faa5b39064a77bd97be2ac6b92f06491a809427bd17f1b67958e4fedb35a8f39b883700cabd54de5b550dda3ba95376f93befe8effb6c801fc6ec8b838747a213f72bd35320b942496964b7cd66322a00a29b94dfb6fbd4b81bd613829d7e01fcf1531b36921e6be2749e8552605ebbcc614035bb5895b3905495013b4594f461b4ea9d6db568d72737dc73cd9423303dd37e8ddcdfc56bad467f983c10857ff54883fbd3fc772021cf1609c1a130ee3c0cede78074ba528215ad66b513f35948eff822dc5d8c19452701387cba9f73d2d1ac6b96d06ff17891cd07e3461a29c5ce5bc141f1c09bbbbbf02a59f405dbedd26d1a0495e099f375aeed7a13281cabbaea22186e2f1fcfac3770d8625020d0fc5b91cf61e3e71b26c168a7eae57af0a05bd0c1130b5b0e04bf06a1540043505beb952c016b536093e5700035dea06242594ff5ea09a37c89facc9e24f8a6355170d768bde58f4086d8487b022525505567e2950be7984ebb5a96dacf4fbb4509e5065c4813ddf05866e43be4929b7c8805ad9b77035968fe5e1b349026bd4f625b72e7d4d0f0b8b335bc5b55f0c0db3b55df2cc29d1cb878740f5921c88e5acc6a7c9b168043145e4aa9753e5dc210bcdcb5f11e418dc7b3f42449fca38cf0ae36d8fa66fbddfd8be1a0f9256a81135e4a917402e16ccd80bd1af96a98c20962be7dd8d31ee3bc4a22bba1a5ae4f7835f0c4f71b961f613079bb92f10b3840606140a8476f3346c6d2c8022fb2352a9fbd0db931c847627d846187910f1fb48d23e8bbeb35fabcffa5e04f016b01da4956"}], 0x23a8}, 0x8804) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000580)={@rand_addr, @multicast2, 0x0}, &(0x7f00000005c0)=0xc) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000500)={0x1d, r8, 0x1, {0x1}, 0xff}, 0x18) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @multicast1}, &(0x7f0000000640)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x1, 0x0, {{0x2e, 0x4, 0x1, 0x7, 0xb8, 0x64, 0x0, 0x10, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x43, 0x3, [{0x2, 0x11, "774844732b1b9435562a4c244d12b9"}, {0x6, 0xa, "12f412c0d2766223"}, {0x1, 0xd, "9a9c86e18e2f0abaf1bd96"}, {0x6, 0xc, "f2180115ad74e328d018"}, {0x7, 0x9, "83921c96396f8c"}]}, @lsrr={0x83, 0x23, 0x2e, [@multicast2, @broadcast, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @remote]}, @timestamp={0x44, 0x14, 0xf5, 0x0, 0x7, [0xa87, 0xf4a, 0x9, 0xd]}, @lsrr={0x83, 0x1f, 0xf, [@multicast1, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @multicast1]}, @rr={0x7, 0x7, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) r13 = socket$inet(0x2, 0xa, 0x0) r14 = socket(0x29, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xf0b, 0x1e, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xf}, {0x10, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x54ae6aa4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1b8, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000080)=[{r17, 0x409c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0xc, 0xffe0}, {0x10, 0x9}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x5) 283.217926ms ago: executing program 0 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) (async) 229.224067ms ago: executing program 1 (id=5203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x1a, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x3, 'none\x00', 0xf, 0x7, 0x49}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x5}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x300, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100)="1807a77d8119c41257b2a65a5826c172d7b2cb27ed5098be0e401e570b63265d2f49cc46bbabe0ca3f09fdc7fca4af60772ec540876d1b71229e540f08be24b318c5cc3a6fa550516a739ecf008a07c0047638f8a95f3313e169fb93bcaa81779414d7735faca561ceff81c03ba568c32737dacb7953018c5bbed7e8285c5db6e1b3ec85bc3180fcc5a39530f828654b450771055806aca4", &(0x7f00000001c0)=@udp=r5, 0x2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x26}, 0x10) 199.125132ms ago: executing program 1 (id=5204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x7, 0x4, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xd9}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f00000012c0)=""/4109, 0x100d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cadb7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2ae59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c5e2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff83482dbab3f591dded505630dd9dd4828dde3fd9218fb1d041a26c60a724fd8506ba03a370721c281ff6202410dd078fc15f5c4e02b46fba33e0a772130f9a158a2e403ea61919f461358bee016e4c7c114ba7f4486aa7984fffd4555d71e049b2e933ae820bb5990ac3e27e7ebb101ad67ea47ed363de7dab4fb43769f5eca65b5918a76af8860f4d0d79805d9c08d3e27a8f041615ef85b52e521a90e511fcb303dc0ab19abaf0e37e9725bb596de8d8afecf5e15215a83652f3834bf00bf7bbc82b3c45e78a46e70a54a1925b4bf8392070e9cde0634790e444e4e4ee762db725122865a194d7ba289d9aecbba85da0a5c0de6b71a3cc"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$alg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="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", 0x116}, {&(0x7f0000002300)="efc738a16cc28c4946440ccbad4a5f1d56d06c415fd74d3f7ae7fede9df25861ac370f6d867d6672f8e7024df494ac35bd04b35f68b11663b146746ef3f58b12cfd7cd648c12a75f123d9cf5f9c10bcb48f942b34db9fbddcea5e0c3999da708bc472cd687c8f27748d1839e219628ad9687678201b445a59e0da96ecd38c0ce8bca1acbc78f9a3335e5db0eb0cd454006b4e3a5988e038b05322dad026df32c378b20fd75460e1205020d105c5115d2893e413b8b80e36946d011863b5a21472f1bd0d48b0c58211aff50a91e31112d632b56886d75ee84f49ffe015e33237150d3a3c4d871d348fa8e16f94c9e9d1e08d37c8b58f05f1a7c7133aae433f4564b8120d926c8ed8945d774620ec50deb1b3de7e66655d52f397f1811a024d870a4be151a15908b871992af52db41a28cb43633e1f9727e5373e318da8155d3e00b5b5eb28da52e8d364ec5de7614d8fd52401a6367e32464752d7379aaee4b08445ab9ca96663e47584d7470acf0312c545ffcee66d1903bc965caf4d66faf0c8e82ce4bd9c769d3440aca255e97c95a9810f33244d3963ec5610d0dcf62394ba8241351909acab1c154d1796ab44f683a08b307cc1905573642f6b2ef46e764d7f6d692de0fdefe6363a586f50d385e14b5b4209fd4efd93668ef020eaa8e3a70e6511438f81a2e6236b90628ac919ba9eeb04a9fd736a2681489427fa2fbd7f9fe559db1070fe3876e3217626fa811af2b2e3efb3587b19460f885c277e81a94277bbd3f19d4427538a4d93185e6647c4b8ffba034fe43e288dbb2eaf46299255aa246eb720a58224fc8490ed19cc40edd59552ec36b4645edc4e72e4c0ec8c48be18626f32c6aa982f821c40a0ba2d9b19c18a2e3a6b82e562c11620551de6364cc836ccd438823cbb2be8883a46d1141e136fdef2b1b19b879bd1be9a9993265758044ec33a87c625607ceda2e8245ebd7610b8c779957a1186a1611bd0caf66de3bcfbe904e28bae0174818f47eec3e79d74624b57d0b0dd173bfb5dbc4292e817bb03a0725bf11769fcf53ea95ef538be9a33c841f618fe4bc731cd8c826caec2691aee93ca57624e693947484163b3ae01d947155b499f56d7283b7d82c8000ba4a5457a1b1e40a17b7d4a54b45ebb0e8322e9dc9e2743a030c54f637381f10676d747cf8d1f982285187126b6da1e6fb374a8d87c956f9ad7c0328e8452fb6801e1c4db11dba4fd3ac3c382a05ab7148dcfb2266eac19399469c7aaf60eecbb1a92d6abf4bdda90752059106149645c6f5ea20b66c3ca634145c64b0c86ff46edc2b7d6269df97efd2f3e6fcda4cc9dc636951a9d6f0dc01f51ae273dcfeb66ec749d3cfe7cb11c45a473e126cab55450c5ffa59b3f3afb686f8258200bb8a529faff7f988d632300b890f73d51c60c64f4679cd86cc1f4602089f93ba03a51c846eed467432084f71c38413d0d9d1b83f9605207e9b28142d7bf94c7aedcd19f0fc93d4b95a1fea7babe2cb8de1a1a08f3a2d8d0aa1e718c1460e15329700e9e14c5cffff9c7a62b09df0a025e96ab03fa316e50d5b3b01ca4c5e0c6ac23f9703462e14f5fb6d5c1c2514d714746db1b5a5cee1111640114a9556cc518168b161b13e989e8f9ac51e2c01f7fbefea6ce6a8714c47279093fbb59fb760b7dd3138004343063485b506b120728d22c422324871c34f2dc7c53ce0bbab87bcd3efcf8fd4fa2bce12a10b00bdbb24791758516d02012613dd74caac26a176392ec11250e81d2566b2373a2b6536c3e2f28742cbca11b201934d19b42241d94a9da5b282eff530ddd3ed20318be47e9264b0a8fb0745e78c9c1f612ed03479ae14a176cfe52edb5eb2712c21fae58bf4c4143da57a9ee28acede9f56700bfa0f5c51da975fec9f8141b76cacdbfe69be80a325666cbd8fe458ed7f8965166b120ffb5e28dfbb5b3141cf963fd07548a4a35d2c749ce3adea69e0e0d4fd4158142fb7050d477fc51b2ef7e6f0e09cb8016a9bdfff7a200cd992a71a156339160b5757e163a14246c94fe11a0e210c5946b3147bc6870c9900e102b82e9a66a243a2e23e7ff98f7d9f017301740ac157f804afebf2f5bebbbf68583d86b01daaf02bc086bc2c4ddecf1a30795cb23a37bcff24ac3307545acc9bc7949edb2ea5b851ceb3bf2d34f049f1664100b0fc8ea326000e032bc5e50cdec80803a468e334002cfa7ccbef11f951f7679f403ce0cff42101702999218a15396952a3faa0154764c4359f037414bad967afca45285bd5ab985364e6b8bec744c00b3f95010eda041112ace0f09833c9b1049c36f03cca4e9264485d5784466e4b908b4b6216bd935abf49553dcdd4e48bc39f8b22f9b4bef1339b5121ad34ef3df4051333b8ea4ce83cff7abc863c43440ab6892281bc96fbf848ae9e82cb1a2d791b8bcf98ddb65baada7c08075dfe27cd06aedb0ff458880d600ba5bdb14c0858415c43c0aa6660298a944d568487853e7dac0c955d1268f70874756f6316e6181313f215ed3724ef760d89df82a178b51169506ada831725827c62b80f2e47fdac38b86192f68fe2fe5794f7adeac9c5bfc9e1fa8d5199fd7df202ee6e1ba38d40b7750f900771ea8e4f00d4c25065cf8867dc929c892f8e4652040862d48e8af1a48fc500882e874995c48cace7754bf0be2765be83001958946c8cb794f8813816e505de401d789223bc0af5739045751640272afb39d45d2be00cac743bfbce9a9a7f4b8f55511f3ad26264a09c19f26ed1b45b0fb254f98e5e1473bbccaa21219b327d1bbedab4a4dfdf516259feef632f72f5092bf78d886772e73ed2250f5ec20ac6fa66cf8c2626d3b5973ce9f4f95ead5c8a65db49966de0fd9e9ce97894b764ec3f75093a4f3ec4507e2507256c59a52969fdabfc100e6ae23acf121bb3acf34d190211b4001b632b10a252be0430bd107ee884a0ba16fc50eb717ae36aba0dbb130dc64b5cc21d1fe87856c8787474333c3a793fe81c9b9b56ee41fd2e1f2d6150495dc3379bf66fa4d53f868047b6c50f8c5a4c2ea2a355b5eb1ab3d3f32791b9ffcb08698dbe841f3338be19e5d927dfb14711b4aed2435fc53340162c878bee30d9d7d2409be614240540f7f5702be3e2ba38d8f999a624acdcaef37dabb86d225f35e92691de25bf68e0115e6680107f07380b28254e9df2e54a5179ed064fc9744dcb553b56720171b0325876c9b82d0120add35ac3f38b41fc28b149f944c66555051ca92341a953739a1674fae837bdb8d8d10adf7ef74092f505375c8414d82805176b680908d5c0f6c2a14bd526631c5abeccaf3469e3ae01c4db2371a77219ee109a83d62aef26efff181f240a163bc0cb253405018b69ba8d62ac582cb186c8c89e3c140bffaa4d99fab17975ccd925efab24b6a181773fe1daac55f18ab1e0264f8d1f7aabe395ce80792bb77cbd0b58fcd928ad74f0342876e098c93f9611887022a92e4d9b1da9c911bb7d762bdcdba36f749e16aad0bcf6f8596b2b50fc65a6811b709d9ad6593c2eb9867af3a276de26d6a6f87ec5173ca79e88122bf5151e98dee268fc8a79a4e83f2427a02ed702b0926ecf0b4bb1a3051f0a4d3cf31038fb600c7eb0cedc0d59ac99bff3b31a9065efecca740fcd948fb9c2eb6197b8226c397de7a4c268fa41877ca1618f77ffa93b2e17348301899bb1a5b389422d7364eb1e5ddd0daf2065894cf10886ce0d3920c0a283de54ec57942d456579851ca3590c26f8c360b7cbaa0328c29532aad80b2627b25641e613b38a2accf5881bbbc7086085a8fcf25895da9244c7dd773bff995e159ea3899487f202d97f2977e4527f75ec64a85cb21b120828b2ac24c711ea2b7cba4b0a195a1840aec7d34a4745b42596f186820584b4b75af29fba5b6d3623718efeebf52e848fe48160fbfd5a0f6511649e3e1c58e599c6d9c7597e5e12227e281204921819fbf9e0c9bd16d598aec601bbdc87e8d94225368cb65da83cbb722d79957a7c0bcea91a45f9b52558ccdcd2754da40fc0fbf78abd06c05f1fc7381eb06e4a0afcca6db7cace72aaacdf498cf9ca42c9b3c6615d9df167ef2d1b868e56a9652beea2f72530f24fe373333d9a524ed48e52e51d3784649a9b9a9f1cfdfabd3cdf832b2dda019bb4e1e1e71e75f88cbc3a16a6848ac2385024abb76249841f630008f3805462604d65eebf4e14b6c2ad9f9e2dc2a5a55d7ce5dde8307ac655b4dfcc99d0f050e838d310957915b4fc838f26f2659d72f801e8c62c6477cc33d7f60e659881422ddad61819b93f0f7817acab429b3c7d3923abce00993ada7fd7e5987cab4f4aea02acabad3f27f223c0108f44d8d5833932b4eb427f83f7b336f214293f8adc0ed2cd45d792cc69a84e01f6fe7020f96cd05c1dd792f30f1dec2c21ecf00ca956e4a2c71b52b1c298ae6e319cf845b97b60e07ab82afa30ffe94c16efb971959951746edde9639bb055feebe25611b595e23cade8420a2ee207977ab47dd559f09d17823e6184f83c44b881e4baa5d9abd6e2f8156a1fff943e61eea0e9b2fe26236e8288c5116ae9a8b0f110794f629c800d08729ea2000d56dbe404a747c149b7890bd6ac91319200b7078e2e039a29f45ffac3ecbafbc8b00db9f2e8eeb92ebf0a494bd4616925c9b289522c76f87d2c73342db85cc9a3ff09ae84c2c4b3618ba220bb6442968d9ae9eec02e577412fbedd827678a320b7dd8503d0bab20ca7fe7d982330506fc38eaaa6f1cde45377b08f0b66590b75fd6d390da80d01bf6c6dfc12f3b31312b75d1c6e8c6b86527b4f7c5464465b655b1c76a2b7dc202cf50f88f41bae5d7b8e8c38f3b254628f2418e2fe00b63f8162c60cd95fc9b0b6bba3a0989bbb858d2f1c892713e3bdc1a50bddfbb5c11f242464183ee9b85734b5683c242a264ea415df1284ffd87a36516518a09171cbad0149753e836aa41b27ff441460cf0f0d59ca9c1023b2bac5be5512827d4a64e6d7283e335682f9f4e0ad5471839e447b803c6b43d7daa2709536bc2ab955880cd25d1a50aa78fd646e31b3382426e1e77429d37712968223046698b51362b974a6c6782bfb17f40ade50c82523c1c87b59ba4cab6db7ea321b345133ef90039ddf3465043f05e0c1f0d9322aaf67408cf0c81162c17fd0a3fa195df5b6916b008110e4d713810a268d360a4056d36887765410b420101fc35833c3b0ec5b1990eaafdedcec60154fbbf8665c2ad750b4717235f3eb5f508dbc8d8119b7ccad544ff12b4837de891c0bc17d8316d1faaa1b178de7c335501d42cd03cec3cd364d48d73e1e1c19320f5d9842f746cb3cc10ce0079a9faec3f23ee2cdc84503bd2f86c175d3fd7951c4a7267908aaccde39326f4689eda42da763103ebb2383878851af1679def7bd14a78d6f387bd0042", 0xf11}], 0x2, 0x0, 0x0, 0x20000080}, 0x4000001) 140.237448ms ago: executing program 0 (id=5205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9001e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea318800"}, 0xd8) listen(r0, 0x7c2) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "230100"}, 0x28) writev(r4, &(0x7f0000000280)=[{&(0x7f0000001040)="478c18eb0a51631b3ff7cf4a9ce3a65c69c7cc614964996cbca84d8d9818d829cc74877aeb2f3a202d988e3afca44b26fa582c7b41043d14f8d9398dd6763517d07f247349c5bf8a181d5b38e771ae9fd7e73661f40262f8824f822e8e257a8310e374cd863ecab897b80047d38ba37a9499fc7d471bba5485e0a78983f4b559d1f420b8d88dd971a792643577d5a9534bf0789c4cb2a11959c8c024df5e0d43c8a3762e47baae307dcbffba58faa323e16ddb4851aa7d0b5ffab9220fb408a8a9d56683bdb989ae32fda13ac5c17d992fb8a60e7d9e22c3e3768e87b3d36465984d2d15ab31ae39a5bd06f04cbb951357bfd3f80b73", 0xf6}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', "b7b612000000000000004bbedf976d10", '\x00', "5810000000000001"}, 0x28) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) 41.331131ms ago: executing program 3 (id=5206): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0xfffffffffffffed1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x2, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="f8134b4006e5213b3f6ed2ddfb90e21a1633e719185247d99eea3a14c8d1314d73e0de56e04ee14a3075e2e55a70e6b71df17ac8e4ada6d616d3bc2d155c4570244e46714c89770b1c577f15a9740cdb149234ead86f49393465557e1bf9d7c8471d3dc58fd1a57e4e6ed5f386da456942c96de31d116079c2cd594902", 0x7d}], 0x1) 41.011513ms ago: executing program 2 (id=5207): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x8863, "1f7761"}}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty}, 0x1c) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000000c0)="02188e6154755032009ba16cfd559b4b69ad601687cab91ad818487cb09ffbabdd2bf5ff8586c68870ad27282182c4eaebc9c75bcede15e1aae793f88ddf20cf9c857ec15af0189271f6db47d2162728184d3c9d209f0b82753ba385070c158bf314a923e22b55ec5f7b6944250cf50e8055029bfaaaf5cfcf22754826a9524a2ef40b503bbf33f25ece4adc7e9997c6957d72ba3e4b34b16f3d5a65f8a5dd2fd83f5aaedabcb125698c3637f1a4da239e5d98016b3b") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000003c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, 0x0, 0x0) socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) 0s ago: executing program 3 (id=5208): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0xfe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x0], 0x48) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000003c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000b00)=""/172, 0xac}], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) kernel console output (not intermixed with test programs): 285057][T18134] validate_nla: 1 callbacks suppressed [ 640.285080][T18134] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 640.453554][T18136] netlink: 'syz.2.3308': attribute type 26 has an invalid length. [ 640.474479][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 642.151364][T18136] netlink: 'syz.2.3308': attribute type 26 has an invalid length. [ 642.164539][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 642.266426][T18146] xt_hashlimit: size too large, truncated to 1048576 [ 642.579815][T18159] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3316'. [ 642.679640][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.689746][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.698664][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.708791][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.717121][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.912585][T18162] hsr0 speed is unknown, defaulting to 1000 [ 643.071315][T18177] xt_hashlimit: max too large, truncated to 1048576 [ 643.300433][T18195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3326'. [ 643.310531][T18195] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 643.327393][T18192] tipc: Enabling of bearer rejected, failed to enable media [ 643.338434][T18195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3326'. [ 643.384001][T18195] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3326'. [ 643.452622][T16196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.468557][T18200] x_tables: duplicate underflow at hook 1 [ 643.485654][T16196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 643.539212][T18162] chnl_net:caif_netlink_parms(): no params data found [ 643.586874][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 643.666724][T18204] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 643.731724][T18214] netlink: 'syz.0.3330': attribute type 1 has an invalid length. [ 643.787751][T16196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.798674][T16196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 644.046211][T13274] hid-generic 0005:0C45:0006.0002: item fetching failed at offset 0/1 [ 644.072197][T16196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.092665][T13274] hid-generic 0005:0C45:0006.0002: probe with driver hid-generic failed with error -22 [ 644.105927][T16196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 644.278955][T16196] batman_adv: batadv0: Removing interface: netdevsim0 [ 644.301839][T16196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.352929][T16196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 644.395232][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.412531][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.428605][T18162] bridge_slave_0: entered allmulticast mode [ 644.451181][T18162] bridge_slave_0: entered promiscuous mode [ 644.485759][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.504041][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.534295][T18162] bridge_slave_1: entered allmulticast mode [ 644.542410][T18162] bridge_slave_1: entered promiscuous mode [ 644.722388][T18162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.768075][T18162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.794153][ T5831] Bluetooth: hci4: command tx timeout [ 644.859743][T18271] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.973249][T18277] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 645.007117][T18162] team0: Port device team_slave_0 added [ 645.040859][T18271] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 645.058543][T18162] team0: Port device team_slave_1 added [ 645.310833][T18287] ip6t_srh: unknown srh invflags 4000 [ 645.319096][T16196] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 645.346052][T16196] bond9 (unregistering): (slave ip6erspan1): Releasing active interface [ 645.517986][T16196] bond6 (unregistering): (slave geneve2): Releasing active interface [ 645.576043][T16196] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 645.761743][T16196] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 645.771382][T16196] bond0 (unregistering): Released all slaves [ 645.783378][T16196] bond1 (unregistering): Released all slaves [ 645.801243][T16196] bond2 (unregistering): Released all slaves [ 645.817602][T16196] bond3 (unregistering): Released all slaves [ 645.838242][T16196] bond4 (unregistering): Released all slaves [ 645.855910][T16196] bond5 (unregistering): Released all slaves [ 645.872980][T16196] bond6 (unregistering): Released all slaves [ 645.897369][T16196] bond7 (unregistering): Released all slaves [ 645.919331][T16196] bond8 (unregistering): Released all slaves [ 645.935993][T16196] bond9 (unregistering): Released all slaves [ 645.951268][T16196] bond10 (unregistering): Released all slaves [ 646.004119][T18162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.024027][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.084137][T18162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.141301][T18162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.164703][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.234902][T18162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.320064][T16196] tipc: Left network mode [ 646.420284][T18300] can: request_module (can-proto-4) failed. [ 646.457164][T18162] hsr_slave_0: entered promiscuous mode [ 646.465893][T18162] hsr_slave_1: entered promiscuous mode [ 646.472647][T18162] debugfs: 'hsr0' already exists in 'hsr' [ 646.478896][T18162] Cannot create hsr debugfs directory [ 646.714771][T18320] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 646.826283][T18326] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 646.875517][ T5831] Bluetooth: hci4: command tx timeout [ 647.135193][T18346] nbd: must specify at least one socket [ 647.251105][T18345] __nla_validate_parse: 2 callbacks suppressed [ 647.251128][T18345] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3365'. [ 647.338919][T18360] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3364'. [ 647.414186][T18364] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 647.725924][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 647.815420][T18377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.958281][ T5831] Bluetooth: hci4: command tx timeout [ 649.448916][T18381] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 649.984085][T16196] hsr_slave_0: left promiscuous mode [ 650.172952][T18425] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3378'. [ 650.849189][T18423] syzkaller1: entered promiscuous mode [ 650.856754][T18423] syzkaller1: entered allmulticast mode [ 650.908403][T18428] syzkaller0: entered promiscuous mode [ 650.922066][T18428] syzkaller0: entered allmulticast mode [ 650.988612][T18453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.039640][ T5831] Bluetooth: hci4: command tx timeout [ 652.750366][T18451] tipc: Started in network mode [ 652.764159][T18451] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 652.774284][T18451] tipc: Enabled bearer , priority 24 [ 653.033355][T18467] bond0: option ad_select: unable to set because the bond device is up [ 653.067473][T18475] bond0: option ad_select: unable to set because the bond device is up [ 653.232953][T18471] netlink: 'syz.0.3385': attribute type 5 has an invalid length. [ 653.419342][T18479] team0: Cannot enslave team device to itself [ 653.444719][T18479] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.3386'. [ 653.485773][T18162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 653.563347][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.636338][T18162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.671755][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.722166][T18501] gtp0: entered promiscuous mode [ 653.729171][T18501] gtp0: entered allmulticast mode [ 653.739896][T18162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.782001][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.819552][T18162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.846612][T18513] x_tables: duplicate underflow at hook 1 [ 653.890513][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.929868][T16196] IPVS: stop unused estimator thread 0... [ 653.974140][T18518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.983156][T13273] tipc: Node number set to 10005162 [ 654.024624][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3392'. [ 654.038486][T18530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3394'. [ 654.068931][T18528] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3394'. [ 654.081733][T18527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3393'. [ 654.137569][T18518] veth7: entered promiscuous mode [ 654.142758][T18518] veth7: entered allmulticast mode [ 654.342120][T18162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.359214][T18540] Bluetooth: MGMT ver 1.23 [ 654.391269][T18162] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.427257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.434566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.506118][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.513378][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.530108][T18549] syzkaller0: entered promiscuous mode [ 654.543947][T18549] syzkaller0: entered allmulticast mode [ 654.578743][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3399'. [ 654.980015][T18578] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3404'. [ 657.515386][T18626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3409'. [ 657.926354][ T9081] bond3 (unregistering): (slave gretap1): Releasing active interface [ 657.948469][ T9081] bond10 (unregistering): (slave gretap2): Releasing active interface [ 657.956810][ T9081] gretap2 (unregistering): left promiscuous mode [ 657.963169][ T9081] gretap2 (unregistering): left allmulticast mode [ 657.996989][ T9081] bond12 (unregistering): (slave geneve3): Releasing active interface [ 658.005351][ T9081] geneve3 (unregistering): left allmulticast mode [ 658.020607][ T9081] bond5 (unregistering): (slave geneve2): Releasing active interface [ 658.158727][ T9081] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 658.433433][ T9081] bond0 (unregistering): Released all slaves [ 658.446038][ T9081] bond1 (unregistering): Released all slaves [ 658.464597][ T9081] bond2 (unregistering): Released all slaves [ 658.483216][ T9081] bond3 (unregistering): Released all slaves [ 658.500857][ T9081] bond4 (unregistering): Released all slaves [ 658.521464][ T9081] bond5 (unregistering): Released all slaves [ 658.537172][ T9081] bond6 (unregistering): Released all slaves [ 658.552528][ T9081] bond7 (unregistering): Released all slaves [ 658.574907][ T9081] bond8 (unregistering): Released all slaves [ 658.590021][ T9081] bond9 (unregistering): Released all slaves [ 658.609205][ T9081] bond10 (unregistering): Released all slaves [ 658.638294][ T9081] bond11 (unregistering): Released all slaves [ 658.658654][ T9081] bond12 (unregistering): Released all slaves [ 658.675944][ T9081] bond13 (unregistering): (slave vxcan2): Releasing backup interface [ 658.688828][ T9081] bond13 (unregistering): Released all slaves [ 658.710066][ T9081] bond14 (unregistering): Released all slaves [ 658.765925][T18642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3410'. [ 658.954903][ T9081] : left promiscuous mode [ 659.009139][T18630] hsr0 speed is unknown, defaulting to 1000 [ 659.109135][T18658] bond2: entered promiscuous mode [ 659.124221][T18658] bond2: entered allmulticast mode [ 659.130014][T18658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.156596][T18162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.196572][ T9081] : left promiscuous mode [ 659.346788][ T9081] tipc: Disabling bearer [ 659.380418][ T9081] tipc: Left network mode [ 659.457120][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.484635][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.507261][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.557721][T18162] veth0_vlan: entered promiscuous mode [ 659.599807][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.624388][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.638751][ T9066] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.660750][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 659.670214][ T9066] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.722765][ T9066] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.745542][T18680] atomic_op ffff888054059198 conn xmit_atomic 0000000000000000 [ 659.758161][ T9066] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.786976][T18162] veth1_vlan: entered promiscuous mode [ 659.802613][T18682] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3422'. [ 659.955688][T18162] veth0_macvtap: entered promiscuous mode [ 660.089480][T18162] veth1_macvtap: entered promiscuous mode [ 660.202582][T18162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.242879][T18697] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 660.284033][T18697] syzkaller1: linktype set to 823 [ 660.331929][ T9081] hsr_slave_0: left promiscuous mode [ 660.359000][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'. [ 660.390528][ T9081] hsr_slave_1: left promiscuous mode [ 660.404847][ T9081] hsr0: left allmulticast mode [ 660.417803][ T9081] veth1_vlan: left promiscuous mode [ 660.425102][ T9081] veth0_vlan: left promiscuous mode [ 660.774196][ T9081] team0 (unregistering): Port device batadv1 removed [ 661.081778][T18727] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 661.187559][T18162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.229638][T16193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.272095][T16193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.297732][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.322063][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.575243][T18739] hsr0 speed is unknown, defaulting to 1000 [ 661.704556][ T9066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.744364][ T9066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.781539][ T9066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.821100][ T9066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.108834][T18760] syzkaller0: entered promiscuous mode [ 662.126648][ T9081] IPVS: stop unused estimator thread 0... [ 662.136547][T18760] syzkaller0: entered allmulticast mode [ 662.157945][T18757] TC_ACT_REPEAT abuse ? [ 662.722160][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 662.731947][T18800] netlink: 'syz.1.3454': attribute type 2 has an invalid length. [ 662.793187][T18795] hsr0 speed is unknown, defaulting to 1000 [ 663.019969][T18817] syzkaller0: entered promiscuous mode [ 663.046321][T18820] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 663.056903][T18817] syzkaller0: entered allmulticast mode [ 663.234077][T18822] tipc: MTU too low for tipc bearer [ 663.263468][T18822] syzkaller0: entered promiscuous mode [ 663.439473][T18839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.433001][T18862] tipc: Started in network mode [ 664.439655][T18862] tipc: Node identity ac14140f, cluster identity 4711 [ 664.454620][T18862] tipc: New replicast peer: 255.255.255.255 [ 664.475130][T18862] tipc: Enabled bearer , priority 10 [ 664.766420][T18880] __nla_validate_parse: 4 callbacks suppressed [ 664.766441][T18880] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3479'. [ 665.088655][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'. [ 665.129584][T18903] veth0_macvtap: left promiscuous mode [ 665.547218][T18926] bond0: (slave gre0): refused to change device type [ 665.603849][ T796] tipc: Node number set to 2886997007 [ 666.008889][T18960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3502'. [ 666.072566][T18964] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 666.094979][T18964] sock: sock_timestamping_bind_phc: sock not bind to device [ 666.156114][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3503'. [ 666.207397][T18970] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 666.227869][T18971] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 666.270268][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 666.280176][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 666.289627][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 666.300851][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 666.328115][T18970] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3505'. [ 666.445699][T18982] openvswitch: netlink: Flow actions attr not present in new flow. [ 666.604928][T18992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 666.809876][T19010] syzkaller0: entered promiscuous mode [ 666.816727][T19010] syzkaller0: entered allmulticast mode [ 666.983555][T19017] netlink: 'syz.1.3517': attribute type 3 has an invalid length. [ 667.063459][T19020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.096071][T19024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 667.220466][T19027] netlink: 'syz.2.3522': attribute type 2 has an invalid length. [ 667.660856][T19050] netlink: 'syz.2.3526': attribute type 1 has an invalid length. [ 668.271470][T19091] netlink: 'syz.2.3536': attribute type 33 has an invalid length. [ 668.319732][T19095] netlink: 'syz.1.3539': attribute type 29 has an invalid length. [ 668.343384][T19095] netlink: 'syz.1.3539': attribute type 29 has an invalid length. [ 668.766224][T19116] xt_ipcomp: unknown flags 1D [ 669.191994][T19137] openvswitch: netlink: Unknown nsh attribute 0 [ 669.593774][T19159] vlan1: entered allmulticast mode [ 669.611174][T19159] veth0_vlan: entered allmulticast mode [ 669.657289][T19160] xt_hashlimit: size too large, truncated to 1048576 [ 670.300669][T19200] __nla_validate_parse: 17 callbacks suppressed [ 670.300689][T19200] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3566'. [ 670.344222][T19200] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 672.463467][T19188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3564'. [ 672.475591][T19192] netlink: 'syz.0.3566': attribute type 29 has an invalid length. [ 672.591374][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 672.602159][T19209] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 672.721759][T19218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3571'. [ 672.816203][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 672.892884][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 673.023072][T19225] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.230897][T19252] veth0_to_bond: entered allmulticast mode [ 673.596669][T19274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 673.642607][T19281] openvswitch: netlink: Invalid VLAN frame [ 674.018418][T19298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.061845][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'. [ 674.170100][T19310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.177436][T19310] IPv6: NLM_F_CREATE should be set when creating new route [ 674.184790][T19310] IPv6: NLM_F_CREATE should be set when creating new route [ 674.217340][T19314] batadv1: entered allmulticast mode [ 674.237628][T19309] veth0: entered promiscuous mode [ 674.243643][T19311] veth0: left promiscuous mode [ 674.249396][T19309] netlink: 294 bytes leftover after parsing attributes in process `syz.1.3596'. [ 674.260852][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.401208][T19318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3598'. [ 674.571102][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 674.842630][T19344] hsr0 speed is unknown, defaulting to 1000 [ 675.062212][T19349] can: request_module (can-proto-4) failed. [ 675.071704][T19349] tipc: Enabled bearer , priority 0 [ 675.252116][T19349] syzkaller0: entered promiscuous mode [ 675.258191][T19349] syzkaller0: entered allmulticast mode [ 675.276615][T19349] tipc: Resetting bearer [ 675.391269][T19348] tipc: Resetting bearer [ 675.450229][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'. [ 675.615568][T19378] netlink: 'syz.3.3615': attribute type 1 has an invalid length. [ 675.797675][T19386] netlink: 'syz.4.3616': attribute type 1 has an invalid length. [ 677.552439][T19348] tipc: Disabling bearer [ 677.619284][T19369] geneve2: entered promiscuous mode [ 677.625164][T19369] geneve2: entered allmulticast mode [ 677.861821][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 677.887543][T19400] netlink: 'syz.2.3619': attribute type 64 has an invalid length. [ 677.895767][T19400] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3619'. [ 678.093094][T19417] syzkaller1: entered promiscuous mode [ 678.111116][T19417] syzkaller1: entered allmulticast mode [ 678.145708][T19421] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3627'. [ 678.293213][T19423] syzkaller0: entered promiscuous mode [ 678.450609][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 678.620514][T19442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3635'. [ 678.875075][T19427] batadv_slave_0: Caught tx_queue_len zero misconfig [ 679.033229][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.043327][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3636'. [ 679.055169][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.063139][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3636'. [ 679.072953][T19463] netlink: 'syz.2.3638': attribute type 1 has an invalid length. [ 679.124918][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.132861][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3636'. [ 679.142653][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.151396][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3636'. [ 679.162922][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.172079][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.181295][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.190203][T19454] netlink: 'syz.3.3636': attribute type 3 has an invalid length. [ 679.220707][T19463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.377092][T19481] Bluetooth: MGMT ver 1.23 [ 679.381634][T19481] Bluetooth: hci1: too big key_count value 32778 [ 679.685460][T19501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.698623][T19501] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 680.458380][T19553] __nla_validate_parse: 32 callbacks suppressed [ 680.458402][T19553] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3666'. [ 680.646290][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 680.662342][T19564] openvswitch: netlink: IP tunnel dst address not specified [ 680.755272][T19567] openvswitch: netlink: Message has 1 unknown bytes. [ 680.768063][T19565] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.790797][T19567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.824119][T19565] bond3: (slave lo): Enslaving as an active interface with an up link [ 680.861505][T19565] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 680.979455][T19570] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 681.194994][T19575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3676'. [ 681.538272][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3680'. [ 681.613700][ T9066] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.725816][T16196] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.743025][T16196] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.786155][T16196] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.905370][T19610] ip6tnl0: Caught tx_queue_len zero misconfig [ 682.215155][T19619] syzkaller0: entered promiscuous mode [ 682.244394][T19619] syzkaller0: entered allmulticast mode [ 682.459788][T19630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3694'. [ 682.634564][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 682.707513][T19655] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 682.752270][T19651] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3698'. [ 682.916065][T19668] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3703'. [ 682.932551][T19671] netlink: 'syz.0.3704': attribute type 11 has an invalid length. [ 682.974883][T19671] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3704'. [ 683.055267][T19674] netlink: 'syz.0.3704': attribute type 11 has an invalid length. [ 683.079965][T19674] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3704'. [ 683.775990][T19724] validate_nla: 30 callbacks suppressed [ 683.776015][T19724] netlink: 'syz.4.3717': attribute type 4 has an invalid length. [ 683.816985][T19728] netlink: 'syz.3.3718': attribute type 21 has an invalid length. [ 683.878943][T19724] bond0: entered promiscuous mode [ 683.935718][T19724] bond_slave_0: entered promiscuous mode [ 683.971567][T19724] bond_slave_1: entered promiscuous mode [ 684.000559][T19724] gretap0: entered promiscuous mode [ 684.022587][T19724] hsr1: entered promiscuous mode [ 684.074157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.399728][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.468765][T19754] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 684.538299][T19761] sctp: [Deprecated]: syz.2.3724 (pid 19761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.538299][T19761] Use struct sctp_sack_info instead [ 684.673467][T16198] nci: nci_rx_work: unknown MT 0x1 [ 684.753292][T19780] netlink: 'syz.1.3729': attribute type 2 has an invalid length. [ 684.774041][T19780] netlink: 'syz.1.3729': attribute type 11 has an invalid length. [ 684.891374][T19790] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 684.902335][T19790] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 684.917510][T19793] xt_l2tp: v2 doesn't support IP mode [ 685.274588][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 685.434089][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.755616][T19798] hsr0 speed is unknown, defaulting to 1000 [ 685.834593][T19803] __nla_validate_parse: 4 callbacks suppressed [ 685.834616][T19803] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3736'. [ 685.850855][T19803] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 685.886861][T19804] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3735'. [ 685.921759][T19807] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3737'. [ 685.980880][T19811] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 686.061043][T19816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.069914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.100444][T19810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.113393][T16191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.129744][T19810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.280566][T19826] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 686.294504][T19826] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3742'. [ 686.307107][T19826] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 686.316400][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.326580][T19828] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3742'. [ 686.457888][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 686.467989][T19832] bridge_slave_1: left promiscuous mode [ 686.476689][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.487828][T19832] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.528887][T19832] bridge_slave_0: left allmulticast mode [ 686.545081][T19832] bridge_slave_0: left promiscuous mode [ 686.562560][T19832] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.289202][T19757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.838058][T19846] syzkaller0: entered promiscuous mode [ 687.856752][T19846] syzkaller0: entered allmulticast mode [ 691.674750][T13273] net_ratelimit: 7 callbacks suppressed [ 691.674774][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.400459][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.714023][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.676334][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.686806][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.754383][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.797660][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.834988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.714383][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.874357][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.914164][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.954839][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.754071][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.993981][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.035341][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.074258][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.798487][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.114059][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.275757][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.914177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.924775][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.154853][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.194402][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.236321][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.959208][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.274269][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.314771][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.354009][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.994588][T13255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.394015][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.435470][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.935516][T19870] netlink: 'syz.0.3749': attribute type 21 has an invalid length. [ 712.051563][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3750'. [ 712.092556][T19880] team0 (unregistering): Port device team_slave_0 removed [ 712.142280][T19880] team0 (unregistering): Port device team_slave_1 removed [ 712.179148][T19888] kthread_run failed with err -4 [ 712.204002][T19867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.293946][T19897] netlink: 'syz.2.3757': attribute type 2 has an invalid length. [ 712.324000][T19897] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3757'. [ 712.494354][T16196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.504480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.517919][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.745188][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3765'. [ 713.593934][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.634186][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.674460][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.825779][T19927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.228965][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 716.274115][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 716.367043][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 716.428899][T19968] team0 (unregistering): Port device team_slave_0 removed [ 716.458841][T19968] team0 (unregistering): Port device team_slave_1 removed [ 716.682892][T20003] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 716.695296][T20006] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 716.718086][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.727115][T20003] netlink: 'syz.0.3783': attribute type 2 has an invalid length. [ 716.793247][T20003] netlink: 'syz.0.3783': attribute type 4 has an invalid length. [ 716.849248][T20013] sctp: [Deprecated]: syz.3.3786 (pid 20013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.849248][T20013] Use struct sctp_sack_info instead [ 716.869374][T20013] sctp: [Deprecated]: syz.3.3786 (pid 20013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.869374][T20013] Use struct sctp_sack_info instead [ 716.882489][T20011] syzkaller0: entered promiscuous mode [ 716.892627][T20011] syzkaller0: entered allmulticast mode [ 717.079379][T20022] sctp: [Deprecated]: syz.3.3789 (pid 20022) Use of int in maxseg socket option. [ 717.079379][T20022] Use struct sctp_assoc_value instead [ 717.158505][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 717.267429][T20027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'. [ 717.754278][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.646106][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.655259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.797356][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.047255][T19969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.088833][T20026] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3791'. [ 719.199892][T20031] netlink: 'syz.2.3792': attribute type 8 has an invalid length. [ 719.276976][T20036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3793'. [ 719.287163][T20033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3794'. [ 719.339649][T20036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3793'. [ 719.487980][T20045] tipc: Started in network mode [ 719.492946][T20045] tipc: Node identity 9e4fee41db24, cluster identity 5 [ 719.515195][T20045] tipc: Enabled bearer , priority 0 [ 719.539899][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 719.566556][T20040] syzkaller0: MTU too low for tipc bearer [ 719.572376][T20040] tipc: Disabling bearer [ 719.620297][T20058] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 719.658305][T20058] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 719.833886][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.190887][T20095] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3811'. [ 720.276070][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.286953][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.296479][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.310813][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.324745][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.340115][T20102] netlink: 'syz.0.3813': attribute type 12 has an invalid length. [ 720.348529][T20102] netlink: 'syz.0.3813': attribute type 29 has an invalid length. [ 720.357130][T20102] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3813'. [ 720.366512][T20102] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3813'. [ 720.701098][T20120] netlink: 'syz.4.3818': attribute type 13 has an invalid length. [ 721.299921][T20147] macvtap1: entered allmulticast mode [ 721.330678][T20147] veth0_macvtap: entered allmulticast mode [ 721.367713][T20149] tipc: Started in network mode [ 721.382709][T20149] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 721.399695][T20147] netlink: 'syz.3.3826': attribute type 1 has an invalid length. [ 721.405547][T20149] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 721.421943][T20160] netlink: 'syz.0.3829': attribute type 39 has an invalid length. [ 721.436212][T20149] tipc: Enabled bearer , priority 10 [ 721.744620][T20177] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 722.029010][T20188] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20001 [ 722.071060][T20194] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 722.158355][T20197] gretap2: entered promiscuous mode [ 722.165133][T20197] batman_adv: batadv0: Adding interface: gretap2 [ 722.171643][T20197] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 722.195532][T20197] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 722.295068][T20210] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.303894][T20210] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.312908][T13255] IPVS: starting estimator thread 0... [ 722.414963][T20212] IPVS: using max 26 ests per chain, 62400 per kthread [ 722.569266][T13255] tipc: Node number set to 1 [ 722.628515][T20226] netlink: 'syz.2.3849': attribute type 1 has an invalid length. [ 722.704659][T20232] __nla_validate_parse: 3 callbacks suppressed [ 722.704682][T20232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3851'. [ 722.801919][T20232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.809276][T20232] IPv6: NLM_F_CREATE should be set when creating new route [ 722.854050][T20232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3851'. [ 722.956263][T13270] net_ratelimit: 61 callbacks suppressed [ 722.956288][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.205428][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 723.581183][T20279] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3866'. [ 723.858232][T20295] syzkaller0: entered promiscuous mode [ 723.867357][T20295] syzkaller0: entered allmulticast mode [ 723.957911][T20301] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 723.966383][T20301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3872'. [ 723.976647][T20301] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.994738][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.185508][T20312] team0: No ports can be present during mode change [ 724.414252][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.422815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.484888][T20331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.600247][T20343] tipc: Enabled bearer , priority 10 [ 724.754823][T20354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3885'. [ 725.039366][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.101454][T20373] ip6gretap0: entered promiscuous mode [ 725.163925][T20375] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3894'. [ 725.319944][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 725.344766][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 725.475644][T20392] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 725.675135][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.683608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.704836][T20398] hsr0 speed is unknown, defaulting to 1000 [ 725.960905][T20420] IPv6: NLM_F_CREATE should be specified when creating new route [ 726.015530][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3907'. [ 726.055665][T20422] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 726.076530][T20422] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 726.082864][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.385775][T20438] bond_slave_1: entered promiscuous mode [ 726.391519][T20438] bond_slave_1: entered allmulticast mode [ 726.582694][T20451] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 727.077525][T20480] syzkaller0: entered promiscuous mode [ 727.103387][T20480] syzkaller0: entered allmulticast mode [ 727.180479][T20480] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 727.214132][T20480] syzkaller1: Linktype set failed because interface is up [ 727.264265][T19862] syzkaller1: tun_net_xmit 90 [ 727.418747][T20493] syzkaller0: entered promiscuous mode [ 727.426623][T20493] syzkaller0: entered allmulticast mode [ 727.609763][T20501] bond4: option lp_interval: invalid value (0) [ 727.666127][T20501] bond4: option lp_interval: allowed values 1 - 2147483647 [ 727.698738][T20501] bond4 (unregistering): Released all slaves [ 727.778079][T20509] __nla_validate_parse: 7 callbacks suppressed [ 727.778103][T20509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3935'. [ 727.843103][T20501] bond4: option lp_interval: invalid value (0) [ 727.895329][T20501] bond4: option lp_interval: allowed values 1 - 2147483647 [ 727.914392][T20501] bond4 (unregistering): Released all slaves [ 728.040893][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 728.076985][T20521] : entered promiscuous mode [ 728.122160][T20501] bond4: option lp_interval: invalid value (0) [ 728.129108][T20501] bond4: option lp_interval: allowed values 1 - 2147483647 [ 728.146589][T20526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3941'. [ 728.158593][T13270] net_ratelimit: 2 callbacks suppressed [ 728.158615][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.179548][T20501] bond4 (unregistering): Released all slaves [ 728.201869][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'. [ 728.338169][T20501] bond4: option lp_interval: invalid value (0) [ 728.357720][T20501] bond4: option lp_interval: allowed values 1 - 2147483647 [ 728.368113][T20501] bond4 (unregistering): Released all slaves [ 728.403273][T20539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 728.411492][T20534] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 728.481854][T20537] bond4: (slave gretap3): making interface the new active one [ 728.491213][T20537] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 728.605478][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 728.623893][T20534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3943'. [ 728.641909][T20545] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 728.650069][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3943'. [ 728.657746][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3945'. [ 728.741359][T20553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.751456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.777541][T20557] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3945'. [ 728.936463][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'. [ 728.947729][T20562] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 729.194121][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.506649][T20578] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 730.236381][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.337331][T20610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 730.575724][T20621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.586709][T20621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.596616][T20621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.624168][T20621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.639595][T20625] dvmrp0: entered allmulticast mode [ 730.805930][T20635] netlink: 'syz.4.3966': attribute type 9 has an invalid length. [ 730.998544][T20645] macsec1: entered promiscuous mode [ 731.004491][T20644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 732.624913][T20695] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 732.744859][T20689] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 732.785048][T20701] 8021q: VLANs not supported on sit0 [ 733.346404][T20721] netlink: 'syz.2.3992': attribute type 1 has an invalid length. [ 733.359386][T13270] net_ratelimit: 41 callbacks suppressed [ 733.359410][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.497076][T20726] bond2: (slave gretap1): making interface the new active one [ 733.547158][T20726] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 733.758641][T20743] __nla_validate_parse: 6 callbacks suppressed [ 733.758662][T20743] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3991'. [ 733.900319][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 733.943042][T20743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3991'. [ 734.010151][T20761] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4003'. [ 734.048124][T20762] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 734.183436][T20768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.192479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.243125][T20765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4006'. [ 734.394543][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.451790][T20773] syzkaller1: entered promiscuous mode [ 734.485587][T20773] syzkaller1: entered allmulticast mode [ 734.547069][T20780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4012'. [ 734.556813][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 734.628253][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4011'. [ 734.657450][T20784] tipc: Bearer : already 2 bearers with priority 10 [ 734.695466][T20784] tipc: Bearer : trying with adjusted priority [ 734.702728][T20784] tipc: Enabling of bearer rejected, failed to enable media [ 734.739798][T20781] netlink: 'syz.4.4011': attribute type 32 has an invalid length. [ 734.747921][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 734.781115][T20781] bond5: option coupled_control: invalid value (192) [ 734.805633][T20781] bond5 (unregistering): Released all slaves [ 735.008464][T20803] bridge2: entered promiscuous mode [ 735.024170][T20803] bridge2: entered allmulticast mode [ 735.119091][T20809] tipc: Enabling of bearer rejected, failed to enable media [ 735.161109][T20814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4020'. [ 735.226674][T20815] syz_tun: entered allmulticast mode [ 735.295955][T20815] batadv_slave_0: entered allmulticast mode [ 735.404928][T20813] syz_tun: left allmulticast mode [ 735.435712][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.957925][T20850] x_tables: duplicate underflow at hook 2 [ 736.235794][T20865] netlink: 'syz.4.4033': attribute type 11 has an invalid length. [ 736.243836][T20865] netlink: 'syz.4.4033': attribute type 11 has an invalid length. [ 736.474171][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.659438][T20882] gre1: entered promiscuous mode [ 736.685725][T20884] netlink: 'syz.2.4039': attribute type 13 has an invalid length. [ 737.040188][T20884] veth0_macvtap: left promiscuous mode [ 737.053384][T20884] macvtap0: entered allmulticast mode [ 737.083454][T20884] macvtap0: refused to change device tx_queue_len [ 737.104696][T20886] syzkaller0: entered promiscuous mode [ 737.135833][T20886] syzkaller0: entered allmulticast mode [ 737.157355][T20908] openvswitch: netlink: Message has 12 unknown bytes. [ 737.386060][T20916] 8021q: VLANs not supported on ip_vti0 [ 737.468558][ T10] IPVS: starting estimator thread 0... [ 737.523110][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.574043][T20923] IPVS: using max 29 ests per chain, 69600 per kthread [ 737.623712][ T29] audit: type=1107 audit(1775849785.288:5): pid=20926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$3g#PizwQ33a3ӷ/g/' [ 737.648458][T20922] hsr0 speed is unknown, defaulting to 1000 [ 737.703437][T20932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.766441][T20935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.999708][T20949] netlink: 'syz.0.4053': attribute type 3 has an invalid length. [ 738.169724][T20954] hsr0 speed is unknown, defaulting to 1000 [ 738.359313][T20965] SET target dimension over the limit! [ 738.375226][T20965] netlink: 'syz.4.4058': attribute type 4 has an invalid length. [ 738.424694][T20965] 8021q: VLANs not supported on lo [ 738.474478][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.482848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.555125][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.588115][T20982] ipt_rpfilter: unknown options [ 738.591443][T20980] openvswitch: netlink: IPv4 tunnel dst address is zero [ 739.599339][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.664715][T21040] __nla_validate_parse: 9 callbacks suppressed [ 739.664741][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 739.712950][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 739.760128][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.768667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.777695][T21040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4071'. [ 739.799930][T21040] bridge_slave_0: entered allmulticast mode [ 739.827122][T21047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4074'. [ 739.830033][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 739.852883][T21040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4071'. [ 739.866256][T21049] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4073'. [ 739.905559][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 739.924123][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 740.009567][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.009919][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 740.018616][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.018676][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.018723][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.186272][T21061] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 740.370822][T21069] syzkaller0: entered promiscuous mode [ 740.388642][T21069] syzkaller0: entered allmulticast mode [ 740.415573][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.422169][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.428564][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.434894][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.441234][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.447569][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.453900][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.460193][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.466520][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.472813][T21069] tc action pedit 'at' offset 257 out of bounds [ 740.479271][T21069] 0: reclassify loop, rule prio 0, protocol 800 [ 740.560398][T21069] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 740.588525][T21069] netlink: 'syz.2.4079': attribute type 2 has an invalid length. [ 740.634217][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.750033][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.774749][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.784584][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.797239][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.834388][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.860817][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 740.885709][T21078] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 741.012321][T21102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.164445][T21106] bond5: entered promiscuous mode [ 741.171265][T21106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.473486][T21112] bond5: (slave bridge1): making interface the new active one [ 741.486843][T21112] bridge1: entered promiscuous mode [ 741.521103][T21112] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 741.667564][T21129] bond4: invalid ARP target 0.0.0.0 specified for addition [ 741.676825][T21129] bond4: option arp_ip_target: invalid value (0) [ 741.716642][T21129] bond4 (unregistering): Released all slaves [ 741.808051][T21096] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 742.156715][T21163] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 742.170481][T21163] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 742.180850][T21163] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 742.363335][T21169] bond1: entered promiscuous mode [ 742.369692][T21169] bond1: entered allmulticast mode [ 742.378578][T21169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.592166][T21189] syzkaller0: entered promiscuous mode [ 742.599337][T21189] syzkaller0: entered allmulticast mode [ 742.702849][T21194] syzkaller0: entered promiscuous mode [ 742.708585][T21194] syzkaller0: entered allmulticast mode [ 742.828167][T21203] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 743.389749][T21230] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.409656][T21230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.417005][T21230] IPv6: NLM_F_CREATE should be set when creating new route [ 743.424334][T21230] IPv6: NLM_F_CREATE should be set when creating new route [ 743.431594][T21230] IPv6: NLM_F_CREATE should be set when creating new route [ 743.692161][T21248] net_ratelimit: 15 callbacks suppressed [ 743.692182][T21248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.725682][T21248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.745527][T21248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.773261][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.787553][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.815287][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.832201][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.864963][T21256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.875557][T21248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.885544][T21248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.200063][T21278] syzkaller0: entered promiscuous mode [ 744.209553][T21278] syzkaller0: entered allmulticast mode [ 744.220935][T21278] SET target dimension over the limit! [ 744.482599][T16192] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.495341][T16192] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.514182][T16192] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.533273][T16192] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.967200][T21319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.460824][T21356] __nla_validate_parse: 80 callbacks suppressed [ 745.460855][T21356] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4167'. [ 745.499887][T21358] sctp: [Deprecated]: syz.1.4168 (pid 21358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.499887][T21358] Use struct sctp_sack_info instead [ 745.688469][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4170'. [ 745.964357][T21385] x_tables: ip_tables: REDIRECT target: only valid in nat table, not /dev/ppp [ 746.063456][T21394] validate_nla: 6 callbacks suppressed [ 746.063477][T21394] netlink: 'syz.4.4178': attribute type 1 has an invalid length. [ 746.202270][T21400] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 746.210993][T21400] bond5: option packets_per_slave: allowed values 0 - 65535 [ 746.222748][T21400] bond5 (unregistering): Released all slaves [ 746.271849][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 746.317288][T21412] netlink: 'syz.0.4183': attribute type 4 has an invalid length. [ 746.327017][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 746.344180][T21412] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4183'. [ 746.451479][T21412] .`: renamed from bond0 (while UP) [ 746.638717][T21429] netlink: 'syz.3.4189': attribute type 10 has an invalid length. [ 746.671379][T21429] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.4189'. [ 746.700238][T21429] x_tables: duplicate underflow at hook 1 [ 746.787863][T21436] IPv6: NLM_F_REPLACE set, but no existing node found! [ 747.116619][T21459] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4198'. [ 747.275961][T21464] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 747.284008][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 747.303285][T21464] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 748.957273][ T10] net_ratelimit: 38 callbacks suppressed [ 748.957294][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.035910][T21483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4205'. [ 749.761058][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4218'. [ 749.849202][T21518] bond0 (unregistering): left promiscuous mode [ 749.864180][T21518] bond_slave_0: left promiscuous mode [ 749.882414][T21518] bond_slave_1: left promiscuous mode [ 749.968575][T21518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.003430][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.025485][T21518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.046458][T21518] bond0 (unregistering): Released all slaves [ 750.582926][T21555] __nla_validate_parse: 3 callbacks suppressed [ 750.582950][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4226'. [ 750.656101][T21557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.783993][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'. [ 750.815652][T21569] netlink: 'syz.2.4231': attribute type 5 has an invalid length. [ 750.840337][T21569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4231'. [ 751.034168][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.082415][T13272] IPVS: starting estimator thread 0... [ 751.121174][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4236'. [ 751.158167][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4238'. [ 751.205114][T21590] IPVS: using max 25 ests per chain, 60000 per kthread [ 751.226714][T21599] netlink: 10796 bytes leftover after parsing attributes in process `syz.0.4240'. [ 751.247596][T21599] openvswitch: netlink: Flow key attr not present in new flow. [ 751.278057][T21599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4240'. [ 751.400244][T21602] netlink: 'syz.3.4239': attribute type 4 has an invalid length. [ 751.617053][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 751.887787][T21638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.937785][T21642] netlink: zone id is out of range [ 751.944175][T21644] netlink: zone id is out of range [ 751.949434][T21642] netlink: zone id is out of range [ 751.955218][T21644] netlink: zone id is out of range [ 751.960524][T21644] netlink: zone id is out of range [ 751.966657][T21642] netlink: zone id is out of range [ 752.990591][T21689] syzkaller0: entered promiscuous mode [ 752.996615][T21689] syzkaller0: entered allmulticast mode [ 753.156790][T21695] sit0: entered promiscuous mode [ 753.203378][T21695] netlink: 'syz.1.4265': attribute type 1 has an invalid length. [ 753.260802][T21695] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4265'. [ 753.446277][T21710] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4267'. [ 753.485513][T21710] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 754.157316][T13272] net_ratelimit: 292 callbacks suppressed [ 754.157338][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.240863][T21755] netlink: 'syz.4.4279': attribute type 8 has an invalid length. [ 754.308469][T21752] hsr_slave_0: left promiscuous mode [ 754.317508][T21752] hsr_slave_1: left promiscuous mode [ 754.824703][T21782] veth9: entered promiscuous mode [ 754.829907][T21782] veth9: entered allmulticast mode [ 755.193953][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.514427][T21817] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 755.514672][T21811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.808807][T21842] __nla_validate_parse: 12 callbacks suppressed [ 755.808829][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 755.876254][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 755.977878][T21851] tipc: Enabling of bearer rejected, failed to enable media [ 755.978358][T21849] sctp: [Deprecated]: syz.1.4306 (pid 21849) Use of int in max_burst socket option. [ 755.978358][T21849] Use struct sctp_assoc_value instead [ 755.998609][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'. [ 756.015564][T21854] IPVS: Unknown mcast interface: rose0 [ 756.031254][T21852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4307'. [ 756.162792][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4310'. [ 756.229348][T21865] : renamed from hsr0 (while UP) [ 756.236914][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.285388][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 756.368476][T21872] netlink: 'syz.4.4313': attribute type 4 has an invalid length. [ 756.678757][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'. [ 756.767909][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4320'. [ 756.813195][T21904] 8021q: adding VLAN 0 to HW filter on device bond7 [ 756.847583][T21908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4322'. [ 756.914199][T21913] netlink: 'syz.0.4321': attribute type 62 has an invalid length. [ 757.101216][T21919] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 757.117884][T21922] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4326'. [ 757.128495][T21922] openvswitch: netlink: Missing key (keys=40, expected=100) [ 757.223046][T21921] bond4 (unregistering): Released all slaves [ 757.262522][T21919] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 757.275564][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.407923][T21937] hsr_slave_0 (unregistering): left promiscuous mode [ 757.576061][T21950] netlink: 'syz.4.4332': attribute type 2 has an invalid length. [ 757.677793][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.704050][T21950] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 757.756342][T21950] bond0 (unregistering): Released all slaves [ 758.047279][T21982] H: renamed from dummy0 (while UP) [ 758.118851][T21988] syzkaller0: entered promiscuous mode [ 758.179294][T21988] 0: reclassify loop, rule prio 0, protocol 800 [ 758.330820][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.339670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.384070][T22002] : entered promiscuous mode [ 758.716027][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.966045][T22041] netlink: 'syz.2.4361': attribute type 1 has an invalid length. [ 759.059339][T22041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.108493][T22046] bond3: (slave veth3): Enslaving as an active interface with a down link [ 759.140642][T22041] macvlan2: entered promiscuous mode [ 759.158999][T22041] macvlan2: entered allmulticast mode [ 759.166073][T22041] bond3: entered promiscuous mode [ 759.178714][T22041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 759.213449][T22041] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 759.259858][T22041] bond3: left promiscuous mode [ 759.480596][T22074] tipc: Bearer : already 2 bearers with priority 10 [ 759.529644][T22074] tipc: Bearer : trying with adjusted priority [ 759.552059][T22074] tipc: Enabling of bearer rejected, failed to enable media [ 759.581177][T22079] geneve0: entered promiscuous mode [ 759.586927][T22079] geneve0: entered allmulticast mode [ 759.594232][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.603579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.751329][T22086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.760652][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.791584][T22086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.813953][T22086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.022211][T22097] bond4: entered promiscuous mode [ 760.029237][T22097] bond4: entered allmulticast mode [ 760.036473][T22097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 760.350501][T22119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.361824][T22119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.475767][T22125] netlink: 'syz.0.4382': attribute type 3 has an invalid length. [ 760.780970][T22141] netlink: 'syz.4.4385': attribute type 9 has an invalid length. [ 760.794221][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.916151][T19862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.097342][T22148] __nla_validate_parse: 20 callbacks suppressed [ 761.097378][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 761.098771][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4388'. [ 761.298704][T22161] netem: incorrect gi model size [ 761.323687][T22161] netem: change failed [ 761.365051][T22163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4393'. [ 762.116844][T22187] netlink: 18 bytes leftover after parsing attributes in process `syz.1.4401'. [ 762.417305][T22212] syzkaller0: entered promiscuous mode [ 762.438387][T22212] syzkaller0: entered allmulticast mode [ 762.681267][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4411'. [ 762.871113][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4412'. [ 762.910293][T22246] x_tables: duplicate underflow at hook 1 [ 762.935664][T22248] tipc: Failed to remove unknown binding: 66,0,0/0:3307784757/3307784758 [ 762.955181][T22248] tipc: Failed to remove unknown binding: 66,0,0/0:3307784757/3307784758 [ 763.116038][T22258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4417'. [ 763.298142][T22267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4420'. [ 763.371505][T22267] tipc: Enabling of bearer rejected, failed to enable media [ 763.471114][T22279] vlan2: entered promiscuous mode [ 763.478754][T22279] geneve1: entered promiscuous mode [ 763.484605][T22279] vlan2: entered allmulticast mode [ 763.489954][T22279] geneve1: entered allmulticast mode [ 763.642784][T22289] hsr0 speed is unknown, defaulting to 1000 [ 763.666397][T22283] C: Caught tx_queue_len zero misconfig [ 763.785964][T22292] syzkaller1: entered promiscuous mode [ 763.808118][T22292] syzkaller1: entered allmulticast mode [ 763.879196][T22300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4427'. [ 763.952626][T22300] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 763.971137][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'. [ 763.998259][T22300] 8021q: adding VLAN 0 to HW filter on device bond8 [ 764.007682][T22304] hsr_slave_0: left promiscuous mode [ 764.030550][T22304] hsr_slave_1: left promiscuous mode [ 764.129791][T22300] bond8: (slave veth0_to_bond): making interface the new active one [ 764.148726][T22300] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 764.240870][T22306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 764.250888][T22306] bond8: (slave bond9): Enslaving as an active interface with a down link [ 764.818270][T22348] netlink: 'syz.2.4438': attribute type 21 has an invalid length. [ 764.858523][T22348] netlink: 'syz.2.4438': attribute type 1 has an invalid length. [ 764.902337][T22353] netlink: 'syz.0.4440': attribute type 11 has an invalid length. [ 764.918257][T22353] net_ratelimit: 15 callbacks suppressed [ 764.918281][T22353] openvswitch: netlink: EtherType 50a is less than min 600 [ 764.961485][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.976579][T22356] netlink: 'syz.3.4442': attribute type 1 has an invalid length. [ 765.130129][T22368] xfrm1: entered promiscuous mode [ 765.143908][T22368] xfrm1: entered allmulticast mode [ 765.261603][T22377] xt_policy: too many policy elements [ 765.357523][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.366191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.527092][T22389] bond10 (unregistering): Released all slaves [ 765.996881][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.070949][T22416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.199440][T22416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.331633][T22416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.369161][T22426] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 766.396323][T22423] __nla_validate_parse: 10 callbacks suppressed [ 766.396347][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4462'. [ 766.426236][T22416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.474609][T22423] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 766.569290][ T9066] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.650006][ T9066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.661499][ T9066] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.670619][ T9066] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.938579][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 766.990308][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4472'. [ 767.036268][T13272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.115374][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4470'. [ 767.173464][T22469] syzkaller0: entered promiscuous mode [ 767.218485][T22469] syzkaller0: entered allmulticast mode [ 767.297258][T22479] netlink: 'syz.4.4478': attribute type 10 has an invalid length. [ 767.327218][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4476'. [ 767.346866][T22476] syzkaller0: entered promiscuous mode [ 767.352460][T22476] syzkaller0: entered allmulticast mode [ 767.502448][T22480] team0: Port device team_slave_0 removed [ 767.547044][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'. [ 767.568913][T22486] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4479'. [ 767.800078][T22499] netlink: 'syz.4.4484': attribute type 21 has an invalid length. [ 767.823294][T22502] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 767.836612][T22504] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4483'. [ 767.838510][T22502] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4482'. [ 767.924726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.934666][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.076384][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.192594][T22522] delete_channel: no stack [ 768.278705][T22528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4491'. [ 769.104839][T22576] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 769.186026][T22579] netlink: 'syz.2.4506': attribute type 33 has an invalid length. [ 769.212340][T22576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 769.288560][T22587] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 769.321229][T22587] bond10: entered promiscuous mode [ 769.327700][T22587] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.365241][T22587] bond10: (slave bridge3): making interface the new active one [ 769.375571][T22587] bridge3: entered promiscuous mode [ 769.395888][T22587] bridge3: left promiscuous mode [ 769.684966][T22610] xt_TCPMSS: Only works on TCP SYN packets [ 769.715180][T22610] netlink: 'syz.1.4515': attribute type 13 has an invalid length. [ 769.757622][T22610] veth0_macvtap: left promiscuous mode [ 769.786230][T22610] macvtap0: entered allmulticast mode [ 769.815745][T22610] macvtap0: refused to change device tx_queue_len [ 770.078645][T22638] net_ratelimit: 3 callbacks suppressed [ 770.078665][T22638] openvswitch: netlink: Key type 72 is out of range max 32 [ 770.154267][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.274636][T22648] netlink: 'syz.3.4526': attribute type 1 has an invalid length. [ 770.344133][T22648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.377969][T22650] hsr0 speed is unknown, defaulting to 1000 [ 770.738815][T22676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.747319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.854836][T22683] IPv6: addrconf: prefix option has invalid lifetime [ 770.908290][T22683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.115787][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.124619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.165229][T22697] bridge0: port 3(syz_tun) entered blocking state [ 771.172643][T22697] bridge0: port 3(syz_tun) entered disabled state [ 771.188375][T22697] syz_tun: entered allmulticast mode [ 771.194834][T13270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.210990][T22697] syz_tun: entered promiscuous mode [ 771.236039][T22700] netlink: 'syz.1.4537': attribute type 11 has an invalid length. [ 771.251555][T22700] netlink: 'syz.1.4537': attribute type 4 has an invalid length. [ 771.259866][T22702] bridge2: entered promiscuous mode [ 771.268389][T22702] bridge2: entered allmulticast mode [ 771.284141][T22700] netlink: 'syz.1.4537': attribute type 5 has an invalid length. [ 771.309051][T22702] bridge3: entered promiscuous mode [ 771.312556][T22700] netlink: 'syz.1.4537': attribute type 6 has an invalid length. [ 771.316947][T22702] bridge3: entered allmulticast mode [ 771.432632][T22711] hsr0: entered promiscuous mode [ 771.438847][T22711] macvlan2: entered allmulticast mode [ 771.444819][T22711] hsr0: entered allmulticast mode [ 771.449904][T22711] hsr_slave_0: entered allmulticast mode [ 771.460983][T22711] hsr_slave_1: entered allmulticast mode [ 771.473013][T22713] __nla_validate_parse: 8 callbacks suppressed [ 771.473037][T22713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4539'. [ 771.618799][T22723] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4543'. [ 771.692583][T22723] veth5: entered promiscuous mode [ 771.706080][T22723] veth5: entered allmulticast mode [ 771.793708][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4547'. [ 771.806212][T22733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4547'. [ 771.822855][T22733] geneve3: entered promiscuous mode [ 771.832781][T22733] geneve3: entered allmulticast mode [ 771.999342][T22740] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 772.025405][T22743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 772.188723][T22760] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 772.225043][T22761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4550'. [ 772.299537][T22771] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4557'. [ 772.310852][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'. [ 772.329804][T22771] netlink: 'syz.3.4557': attribute type 1 has an invalid length. [ 772.348310][T22771] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4557'. [ 772.509718][T22782] x_tables: duplicate underflow at hook 2 [ 772.734076][T22792] netlink: 'syz.4.4563': attribute type 33 has an invalid length. [ 772.909129][T22792] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 772.930902][T22792] bond0 (unregistering): Released all slaves [ 772.976782][T22795] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 773.618939][T22827] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4573'. [ 773.643935][T22834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.651468][T22834] IPv6: NLM_F_CREATE should be set when creating new route [ 773.736363][T22839] raw_sendmsg: syz.4.4578 forgot to set AF_INET. Fix it! [ 774.081000][T22864] tipc: Enabling of bearer rejected, already enabled [ 775.189790][T22908] x_tables: duplicate underflow at hook 2 [ 775.293797][T22916] validate_nla: 4 callbacks suppressed [ 775.293821][T22916] netlink: 'syz.4.4591': attribute type 1 has an invalid length. [ 775.355408][ T10] net_ratelimit: 6 callbacks suppressed [ 775.355437][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.416435][T22916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.631213][T22938] netlink: 'syz.2.4599': attribute type 6 has an invalid length. [ 775.692545][T22941] netlink: 'syz.3.4600': attribute type 1 has an invalid length. [ 775.700862][T22941] netlink: 'syz.3.4600': attribute type 4 has an invalid length. [ 775.944542][T19862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.060256][T19862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.133780][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.172907][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.394079][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.740835][T22984] sit0: left promiscuous mode [ 776.875029][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.883458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.291635][ T5894] IPVS: starting estimator thread 0... [ 777.316452][T22984] bridge_slave_0: left allmulticast mode [ 777.383957][T23015] IPVS: using max 25 ests per chain, 60000 per kthread [ 777.432182][T22984] bond_slave_1: left promiscuous mode [ 777.439205][T22984] bond_slave_1: left allmulticast mode [ 777.459855][T13263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.483372][T22984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.816184][T22984] macvtap0: left allmulticast mode [ 777.840861][T22984] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 777.878294][T22984] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 777.894955][T22984] bond1: left promiscuous mode [ 777.899891][T22984] bond1: left allmulticast mode [ 777.907354][T22984] macvlan2: left promiscuous mode [ 777.912722][T22984] macvlan2: left allmulticast mode [ 777.923061][T22984] bond2: left promiscuous mode [ 777.931401][T22984] bond2: left allmulticast mode [ 777.989634][T22984] bond5: left promiscuous mode [ 778.003983][T22984] bridge1: left promiscuous mode [ 778.026700][T22984] vlan2: left promiscuous mode [ 778.031803][T22984] geneve1: left promiscuous mode [ 778.037545][T22984] vlan2: left allmulticast mode [ 778.042575][T22984] geneve1: left allmulticast mode [ 778.057031][T22984] bond10: left promiscuous mode [ 778.065386][T22984] veth5: left promiscuous mode [ 778.070320][T22984] veth5: left allmulticast mode [ 778.097340][T23014] __nla_validate_parse: 18 callbacks suppressed [ 778.097365][T23014] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4621'. [ 778.128511][T23019] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 778.170680][T16198] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.239368][T16198] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.255916][T23029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.274609][T16198] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.310116][T16198] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.340865][T23049] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4625'. [ 778.352723][T23047] netlink: 'syz.2.4624': attribute type 1 has an invalid length. [ 778.377562][T16198] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.393318][T16198] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.405484][T23053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4627'. [ 778.425734][T23055] netlink: 'syz.3.4625': attribute type 10 has an invalid length. [ 778.444427][T16198] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.454207][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4625'. [ 778.473381][T16198] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.705328][T23068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4631'. [ 778.772251][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 778.781323][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 778.907038][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4634'. [ 779.240133][T23100] bond5: entered promiscuous mode [ 779.246235][T23100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.338824][T23109] netlink: 'syz.4.4641': attribute type 1 has an invalid length. [ 779.625044][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4647'. [ 779.635066][T23127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4648'. [ 780.041090][T23152] sch_fq: defrate 0 ignored. [ 780.225648][T23162] bond_slave_0: entered promiscuous mode [ 780.234142][T23158] tipc: Enabled bearer , priority 0 [ 780.278147][T23161] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 780.294897][T23161] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 780.374763][T23178] bond_slave_0: left promiscuous mode [ 780.387955][T23183] +: renamed from syzkaller0 [ 780.400127][T23183] tipc: Disabling bearer [ 780.555900][T23041] net_ratelimit: 12 callbacks suppressed [ 780.555931][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.866737][T23207] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 781.028078][T23215] netlink: 'syz.4.4668': attribute type 15 has an invalid length. [ 781.040474][T23206] syzkaller0: entered promiscuous mode [ 781.057149][T23206] syzkaller0: entered allmulticast mode [ 781.124076][T16195] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 781.140066][T23215] netlink: 'syz.4.4668': attribute type 15 has an invalid length. [ 781.159940][T16195] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 781.237704][T16195] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 781.285098][T16195] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 781.594968][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.638475][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.657322][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.665878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.278404][T16196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.288647][T23040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.304911][T23026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.448490][T23256] netlink: 'syz.2.4679': attribute type 2 has an invalid length. [ 783.578894][T23264] : renamed from team_slave_1 (while UP) [ 783.628421][T23267] syzkaller0: entered promiscuous mode [ 783.630979][T23264] __nla_validate_parse: 7 callbacks suppressed [ 783.631033][T23264] netlink: 1712 bytes leftover after parsing attributes in process `syz.3.4681'. [ 783.677183][T23040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.842159][T23290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4684'. [ 783.983934][T23305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4684'. [ 784.126452][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'. [ 784.442258][T23277] netlink: 'syz.2.4684': attribute type 3 has an invalid length. [ 784.452802][T23277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4684'. [ 784.506771][T23315] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 784.662247][T23306] syzkaller0: entered promiscuous mode [ 784.691520][T23306] syzkaller0: entered allmulticast mode [ 784.718646][T23325] netlink: 'syz.2.4688': attribute type 1 has an invalid length. [ 784.836672][T23333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4691'. [ 785.755062][T23041] net_ratelimit: 4 callbacks suppressed [ 785.755086][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.795676][T23040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.838186][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.949412][T23370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4696'. [ 788.039480][T23371] hsr0 speed is unknown, defaulting to 1000 [ 788.260098][T23383] netlink: 'syz.2.4699': attribute type 8 has an invalid length. [ 788.314539][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.323494][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.334018][T23026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.397441][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.405883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.627408][T23405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4706'. [ 788.875980][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.217612][T23430] "syz.0.4712" (23430) uses obsolete ecb(arc4) skcipher [ 789.914210][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.954710][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.963000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.971833][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.994159][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.036015][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.074252][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.154392][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.163240][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.171441][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.180104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.154216][T23041] net_ratelimit: 2 callbacks suppressed [ 796.154238][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.718728][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.727181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.194770][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.236043][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.274315][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.914193][T16196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.922486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.314334][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.355885][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.394292][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.474782][T16196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.483190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.433947][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.755927][T23026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.475988][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.035899][T16191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.044496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.514161][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.555099][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.595310][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.234622][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.242972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.635498][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.674216][T23041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.154238][ T9079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.162537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.713974][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.757935][T23036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.815939][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4721'. [ 812.072958][T23468] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 812.258448][T23477] netlink: 'syz.2.4727': attribute type 4 has an invalid length. [ 812.419727][T23488] syz_tun: entered allmulticast mode [ 812.426314][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4731'. [ 812.633263][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4735'. [ 812.951150][T23527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4739'. [ 813.095193][T23538] : renamed from virt_wifi0 [ 813.354510][T23025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.776568][T23570] hsr0 speed is unknown, defaulting to 1000 [ 813.797775][T23573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4750'. [ 813.902378][T23574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4750'. [ 814.001351][T23582] netlink: 'syz.2.4755': attribute type 1 has an invalid length. [ 814.016234][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4755'. [ 814.027077][T23582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4755'. [ 814.119962][T23589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4756'. [ 814.279595][T23594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4757'. [ 814.508444][T23606] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.533428][T23606] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.547684][T23606] .` (unregistering): Released all slaves [ 814.818091][T23619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.033201][T23633] bond6: option fail_over_mac: invalid value (16) [ 815.050416][T23633] bond6 (unregistering): Released all slaves [ 815.447587][T23655] hsr0 speed is unknown, defaulting to 1000 [ 815.480481][T23661] netlink: 'syz.3.4778': attribute type 11 has an invalid length. [ 815.483487][T23663] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 815.489284][T23661] netlink: 'syz.3.4778': attribute type 11 has an invalid length. [ 815.559716][T23667] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 815.623241][T23667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.751570][T23671] bond4: (slave veth7): Enslaving as an active interface with a down link [ 815.914208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.923104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.931590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.940048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.041996][T23678] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 816.762522][T23690] netlink: 'syz.1.4786': attribute type 4 has an invalid length. [ 817.206973][T23731] nbd: illegal input index 2958377 [ 817.334869][T23735] syzkaller0: entered promiscuous mode [ 817.340411][T23735] syzkaller0: entered allmulticast mode [ 817.672596][T23756] sctp: [Deprecated]: syz.1.4803 (pid 23756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 817.672596][T23756] Use struct sctp_sack_info instead [ 817.840058][T23764] netlink: 'syz.2.4808': attribute type 13 has an invalid length. [ 817.848228][T23764] netlink: 'syz.2.4808': attribute type 58 has an invalid length. [ 817.856745][T23764] __nla_validate_parse: 11 callbacks suppressed [ 817.856767][T23764] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4808'. [ 817.898797][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4809'. [ 818.027489][T23768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4809'. [ 818.093401][T23773] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4811'. [ 818.329441][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 818.688323][T23818] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4822'. [ 818.825349][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4823'. [ 818.918461][T23825] syzkaller0: entered promiscuous mode [ 819.033878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.042459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.051124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.059615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.068156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.076633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.108858][T23833] sctp: [Deprecated]: syz.3.4826 (pid 23833) Use of int in maxseg socket option. [ 819.108858][T23833] Use struct sctp_assoc_value instead [ 819.516044][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4830'. [ 820.922732][T23834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4828'. [ 820.950178][T23846] lo: entered promiscuous mode [ 820.959070][T23846] lo: left promiscuous mode [ 821.332305][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 821.365891][T23878] : entered promiscuous mode [ 821.397686][T23880] Cannot find add_set index 65532 as target [ 822.234103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.242341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.250590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.258775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.844364][T23958] veth1: Caught tx_queue_len zero misconfig [ 822.975732][T23966] tipc: Enabled bearer , priority 0 [ 823.008813][T23966] syzkaller0: entered promiscuous mode [ 823.024859][T23967] tipc: Resetting bearer [ 823.059606][T23965] tipc: Resetting bearer [ 823.108725][T23965] tipc: Disabling bearer [ 823.331161][T23974] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 823.372379][T23974] bond5 (unregistering): Released all slaves [ 823.483067][T23994] __nla_validate_parse: 72 callbacks suppressed [ 823.483091][T23994] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4874'. [ 823.541469][T23974] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 823.561850][T23974] bond5 (unregistering): Released all slaves [ 823.760990][T23974] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 823.795255][T23974] bond5 (unregistering): Released all slaves [ 823.825490][T24008] rdma_op ffff88802c7079f0 conn xmit_rdma 0000000000000000 [ 823.833344][T24008] rdma_op ffff88807adb21f0 conn xmit_rdma 0000000000000000 [ 823.841668][T24008] rdma_op ffff88807adb69f0 conn xmit_rdma 0000000000000000 [ 823.849466][T24008] rdma_op ffff88807adb59f0 conn xmit_rdma 0000000000000000 [ 823.857296][T24008] rdma_op ffff88807adb49f0 conn xmit_rdma 0000000000000000 [ 823.868797][T24008] rdma_op ffff88807adb61f0 conn xmit_rdma 0000000000000000 [ 823.880077][T24008] rdma_op ffff88807adb41f0 conn xmit_rdma 0000000000000000 [ 823.888715][T24008] rdma_op ffff88807adb31f0 conn xmit_rdma 0000000000000000 [ 823.957234][T23974] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 823.971741][T23974] bond5 (unregistering): Released all slaves [ 824.046293][T24018] xfrm2: entered promiscuous mode [ 824.051408][T24018] xfrm2: entered allmulticast mode [ 824.189732][T24021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4880'. [ 824.271929][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4881'. [ 824.407200][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 824.416501][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 824.461451][T24029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4882'. [ 824.708167][T24051] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4887'. [ 824.760630][T24052] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4887'. [ 824.965545][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'. [ 825.127025][T24051] bond0: (slave batadv0): Releasing backup interface [ 825.205763][T24051] bond0: (slave bond_slave_0): Releasing backup interface [ 825.222294][T24051] bond0: (slave bond_slave_1): Releasing backup interface [ 825.251569][T24051] team0: Port device team_slave_0 removed [ 825.270946][T24051] team0: Port device 26 removed [ 825.282877][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4895'. [ 825.282900][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.321206][T24051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.338304][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.362751][T24051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.411574][T24051] tipc: Resetting bearer [ 825.448099][T24051] veth0_macvtap: left allmulticast mode [ 825.477026][T24051] bond4: (slave veth7): Releasing active interface [ 825.514297][T16191] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.522737][T16191] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.555261][ T9079] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.633884][ T9079] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.657902][T24091] tunl0: Caught tx_queue_len zero misconfig [ 825.833139][T24108] netlink: 'syz.4.4903': attribute type 4 has an invalid length. [ 825.899606][T24087] syzkaller0: entered promiscuous mode [ 825.941586][T24087] syzkaller0: entered allmulticast mode [ 828.547340][T24161] __nla_validate_parse: 2 callbacks suppressed [ 828.547365][T24161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4913'. [ 828.565904][T24165] xt_hashlimit: size too large, truncated to 1048576 [ 828.614444][T24169] netlink: 'syz.3.4916': attribute type 1 has an invalid length. [ 828.626567][T24170] netlink: 'syz.4.4915': attribute type 1 has an invalid length. [ 828.633069][T24169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4916'. [ 828.725814][T24175] netlink: 'syz.2.4913': attribute type 39 has an invalid length. [ 828.776064][T24164] xt_hashlimit: size too large, truncated to 1048576 [ 828.796356][T24170] bond6: entered promiscuous mode [ 828.808788][T24170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.941569][T24170] bond6: (slave bridge4): making interface the new active one [ 828.951192][T24170] bridge4: entered promiscuous mode [ 828.973199][T24170] bridge4: left promiscuous mode [ 829.441204][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 829.494907][T24213] IPVS: set_ctl: invalid protocol: 8768 255.255.255.255:20003 [ 829.696257][T24220] syzkaller0: entered promiscuous mode [ 829.701820][T24220] syzkaller0: entered allmulticast mode [ 829.716617][T24223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4930'. [ 829.808443][T24238] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 830.007416][T24249] netlink: 'syz.4.4938': attribute type 3 has an invalid length. [ 830.048826][T24253] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4939'. [ 830.058761][T24249] netlink: 'syz.4.4938': attribute type 3 has an invalid length. [ 830.068491][T24251] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4937'. [ 830.091581][T24251] bridge_slave_1: default FDB implementation only supports local addresses [ 830.251215][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4943'. [ 830.620548][T24290] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 830.897512][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4954'. [ 831.223909][T24329] netlink: 'syz.1.4958': attribute type 1 has an invalid length. [ 831.231729][T24329] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4958'. [ 831.252988][T24333] net_ratelimit: 10 callbacks suppressed [ 831.253013][T24333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.298612][T24337] netlink: 'syz.1.4958': attribute type 21 has an invalid length. [ 831.377859][T24337] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 831.409412][T24337] bond11 (unregistering): Released all slaves [ 831.795036][T24362] xt_hashlimit: size too large, truncated to 1048576 [ 831.850165][T24361] nbd: couldn't find a device at index 1048580 [ 831.970243][T24371] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4970'. [ 832.288865][T24393] Cannot find add_set index 2 as target [ 832.299218][T24393] netlink: 'syz.1.4976': attribute type 1 has an invalid length. [ 832.412305][T24399] bond3: (slave lo): Releasing backup interface [ 832.449507][T24399] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 832.466697][T24399] bond8: (slave veth0_to_bond): Releasing active interface [ 832.496116][T24399] bond8: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 832.534858][T24399] bond0: (slave bond_slave_0): Releasing backup interface [ 832.548605][T24399] bond0: (slave bond_slave_1): Releasing backup interface [ 832.584077][T24399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.604689][T24399] bond5: (slave bridge1): Releasing backup interface [ 832.626512][T24399] bond8: (slave bond9): Releasing active interface [ 832.689025][T24406] pim6reg1: entered promiscuous mode [ 832.694582][T24406] pim6reg1: entered allmulticast mode [ 833.117480][T24440] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 833.256265][T24446] netlink: 'syz.3.4994': attribute type 105 has an invalid length. [ 833.788637][T24476] netlink: 'syz.1.5005': attribute type 1 has an invalid length. [ 833.878018][T24479] syzkaller0: entered promiscuous mode [ 833.883972][T24479] syzkaller0: entered allmulticast mode [ 833.968504][T24483] netlink: 'syz.1.5008': attribute type 39 has an invalid length. [ 834.291488][T24488] vlan1 (unregistering): left allmulticast mode [ 834.301021][T24491] netlink: 'syz.1.5011': attribute type 39 has an invalid length. [ 834.306245][T24488] veth0_vlan: left allmulticast mode [ 834.346892][T24491] __nla_validate_parse: 16 callbacks suppressed [ 834.346914][T24491] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5011'. [ 834.365714][T24491] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 834.439063][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5014'. [ 834.459266][T24493] syzkaller0: entered promiscuous mode [ 834.465233][T24493] syzkaller0: entered allmulticast mode [ 834.502555][T24495] vlan3: entered allmulticast mode [ 834.514326][T24495] erspan0: entered allmulticast mode [ 834.582313][T24502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5017'. [ 834.616190][T24502] netlink: 'syz.3.5017': attribute type 16 has an invalid length. [ 834.625347][T24502] netlink: 'syz.3.5017': attribute type 17 has an invalid length. [ 836.330518][T24502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.340129][T24502] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.353248][T24502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 836.702631][T24543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5026'. [ 837.049100][T24563] netlink: 'syz.4.5032': attribute type 1 has an invalid length. [ 837.207853][T24569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5034'. [ 837.221507][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5034'. [ 837.234512][T24569] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5034'. [ 837.254787][T24569] netlink: 'syz.3.5034': attribute type 3 has an invalid length. [ 837.275092][T24569] netlink: 'syz.3.5034': attribute type 2 has an invalid length. [ 837.282905][T24569] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5034'. [ 837.317968][T24570] netdevsim netdevsim0: Direct firmware load for % failed with error -2 [ 837.328267][T24570] netdevsim netdevsim0: Falling back to sysfs fallback for: % [ 837.380864][T24581] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5033'. [ 837.568662][T24593] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5038'. [ 837.772293][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.785607][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.798687][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.807558][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.816743][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.825712][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.843298][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.852068][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.861247][T24601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.870675][T24609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 837.950939][T24611] netlink: 'syz.2.5044': attribute type 9 has an invalid length. [ 838.082596][T24619] tipc: Enabling of bearer rejected, media not registered [ 838.402537][T24635] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 838.413943][T24635] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 838.422126][T24635] netlink: 'syz.2.5053': attribute type 8 has an invalid length. [ 838.518062][T24638] netlink: 'syz.2.5054': attribute type 10 has an invalid length. [ 870.328911][T24655] netlink: 'syz.3.5059': attribute type 11 has an invalid length. [ 870.338858][T24655] __nla_validate_parse: 7 callbacks suppressed [ 870.338881][T24655] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5059'. [ 870.495919][T24664] tipc: Enabled bearer , priority 0 [ 870.561473][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5057'. [ 870.800039][T24664] syzkaller0: entered promiscuous mode [ 870.816038][T24664] syzkaller0: entered allmulticast mode [ 870.836466][T24664] tipc: Resetting bearer [ 870.880731][T24661] tipc: Resetting bearer [ 870.898017][T24687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5064'. [ 872.991094][T24661] tipc: Disabling bearer [ 873.030043][T23036] tipc: Node number set to 1164701249 [ 873.146324][T24715] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5071'. [ 873.235978][T24716] netlink: 'syz.4.5071': attribute type 2 has an invalid length. [ 873.276160][T24716] : entered promiscuous mode [ 873.297739][T24715] netlink: 'syz.4.5071': attribute type 1 has an invalid length. [ 873.352552][T24722] : renamed from hsr0 (while UP) [ 873.378355][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 873.444304][T24725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5074'. [ 873.972673][T24767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.002460][T24767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.019372][T24767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.034229][T24767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.280549][T24792] net_ratelimit: 5 callbacks suppressed [ 874.280571][T24792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.583140][T24804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5091'. [ 874.606525][T24804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5091'. [ 874.718962][T24810] IPv6: sit3: Disabled Multicast RS [ 874.922734][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 874.947807][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 874.982666][T24828] bond5: Unable to set down delay as MII monitoring is disabled [ 874.994406][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.006315][T24828] bond5 (unregistering): Released all slaves [ 875.012968][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.022198][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.078841][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.108973][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.162299][T24824] netlink: 'syz.3.5098': attribute type 142 has an invalid length. [ 875.315375][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5103'. [ 875.380879][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5103'. [ 875.451125][T24850] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5105'. [ 875.475804][T24843] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5103'. [ 876.214852][T24891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5116'. [ 876.420009][T24899] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 876.436823][T24902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5119'. [ 876.446027][T24899] bond5: (slave lo): Enslaving as an active interface with an up link [ 876.454578][T24899] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 876.557925][T24907] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5122'. [ 876.625906][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5119'. [ 876.713109][T24918] bond0: entered promiscuous mode [ 876.724948][T24918] bond_slave_0: entered promiscuous mode [ 876.764227][T24918] bond_slave_1: entered promiscuous mode [ 876.804031][T24918] batadv0: entered promiscuous mode [ 876.832557][T24918] debugfs: 'hsr0' already exists in 'hsr' [ 876.852804][T24926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'. [ 876.872729][T24918] Cannot create hsr debugfs directory [ 876.878730][T24918] hsr0: entered promiscuous mode [ 876.883928][T24918] hsr0: entered allmulticast mode [ 876.902094][T24918] bond0: entered allmulticast mode [ 876.912042][T24918] bond_slave_0: entered allmulticast mode [ 876.932180][T24918] bond_slave_1: entered allmulticast mode [ 876.949248][T24918] batadv0: entered allmulticast mode [ 876.965452][T24918] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 876.974702][T24918] bond0: left promiscuous mode [ 876.979674][T24918] bond_slave_0: left promiscuous mode [ 876.987003][T24918] bond_slave_1: left promiscuous mode [ 876.994396][T24918] batadv0: left promiscuous mode [ 877.026242][T24917] bond0: entered promiscuous mode [ 877.031400][T24917] bond_slave_0: entered promiscuous mode [ 877.054367][T24917] bond_slave_1: entered promiscuous mode [ 877.063890][T24917] batadv0: entered promiscuous mode [ 877.072022][T24917] debugfs: 'hsr0' already exists in 'hsr' [ 877.081484][T24917] Cannot create hsr debugfs directory [ 877.088047][T24917] hsr0: entered promiscuous mode [ 877.093442][T24917] hsr0: entered allmulticast mode [ 877.100447][T24917] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 877.109569][T24917] bond0: left promiscuous mode [ 877.116018][T24917] bond_slave_0: left promiscuous mode [ 877.122180][T24917] bond_slave_1: left promiscuous mode [ 877.129662][T24917] batadv0: left promiscuous mode [ 877.157886][T24930] tipc: Enabled bearer , priority 10 [ 877.167166][T24932] tipc: Enabling of bearer rejected, already enabled [ 877.427708][T24949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5132'. [ 877.488806][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5132'. [ 877.498212][T24951] NCSI netlink: No device for ifindex 813332851 [ 877.506666][T24905] delete_channel: no stack [ 877.542778][T24944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.673161][T24952] bond6: (slave ip6gretap1): making interface the new active one [ 877.682941][T24952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.692227][T24952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.700393][T24952] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 877.794443][T24963] bond0: (slave wlan1): Opening slave failed [ 878.056401][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.088977][T24979] hsr0 speed is unknown, defaulting to 1000 [ 878.095744][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.115757][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.128603][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.172124][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.183035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.734406][T24999] macsec2: entered promiscuous mode [ 878.739950][T24999] bridge0: entered promiscuous mode [ 878.746693][T24999] macsec2: entered allmulticast mode [ 878.752246][T24999] bridge0: entered allmulticast mode [ 878.800089][T24999] bridge0: port 4(macsec2) entered blocking state [ 878.846895][T24999] bridge0: port 4(macsec2) entered disabled state [ 878.935374][T24999] bridge0: left allmulticast mode [ 878.940725][T24999] bridge0: left promiscuous mode [ 879.020967][T25015] validate_nla: 61 callbacks suppressed [ 879.020984][T25015] netlink: 'syz.3.5149': attribute type 2 has an invalid length. [ 879.037462][T25010] bridge0: entered promiscuous mode [ 879.042749][T25010] bridge0: entered allmulticast mode [ 879.062056][T25019] tipc: Resetting bearer [ 879.108474][T25026] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 879.120635][T25026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.190191][T25015] 9: entered promiscuous mode [ 879.597576][T25051] openvswitch: netlink: Multiple metadata blocks provided [ 879.615824][T25051] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 879.773214][T25067] netlink: 'syz.0.5165': attribute type 11 has an invalid length. [ 879.876658][T25077] team_slave_1: Caught tx_queue_len zero misconfig [ 879.925141][T25079] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 880.118528][T25094] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 880.522182][T25124] netlink: 'syz.2.5181': attribute type 7 has an invalid length. [ 880.530607][T25123] netlink: 'syz.4.5182': attribute type 9 has an invalid length. [ 880.560486][T25124] netlink: 'syz.2.5181': attribute type 7 has an invalid length. [ 880.728621][T25138] ipt_REJECT: TCP_RESET invalid for non-tcp [ 880.736109][T25136] syzkaller0: entered promiscuous mode [ 880.741657][T25136] syzkaller0: entered allmulticast mode [ 881.325595][T25177] policy can only be matched on NF_INET_PRE_ROUTING [ 881.325619][T25177] unable to load match [ 881.494964][T25192] xt_CONNSECMARK: invalid mode: 0 [ 881.538959][T25192] geneve2: entered promiscuous mode [ 881.544563][T25192] geneve2: entered allmulticast mode [ 881.556595][T25192] xt_CONNSECMARK: invalid mode: 0 [ 881.731765][T25197] ================================================================== [ 881.739915][T25197] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 881.747802][T25197] Read of size 8 at addr ffff888033343a60 by task syz.1.5204/25197 [ 881.755769][T25197] [ 881.758152][T25197] CPU: 0 UID: 0 PID: 25197 Comm: syz.1.5204 Not tainted syzkaller #0 PREEMPT(full) [ 881.758182][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 881.758197][T25197] Call Trace: [ 881.758206][T25197] [ 881.758215][T25197] dump_stack_lvl+0xe8/0x150 [ 881.758252][T25197] print_report+0xba/0x230 [ 881.758280][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 881.758314][T25197] kasan_report+0x117/0x150 [ 881.758344][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 881.758384][T25197] af_alg_pull_tsgl+0x1c6/0x740 [ 881.758426][T25197] skcipher_recvmsg+0x5df/0x1140 [ 881.758462][T25197] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 881.758487][T25197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 881.758531][T25197] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 881.758557][T25197] ? security_socket_recvmsg+0x7e/0x2c0 [ 881.758585][T25197] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 881.758609][T25197] sock_recvmsg+0x172/0x1b0 [ 881.758634][T25197] sock_read_iter+0x251/0x320 [ 881.758669][T25197] ? __pfx_sock_read_iter+0x10/0x10 [ 881.758709][T25197] ? bpf_lsm_file_permission+0x9/0x20 [ 881.758736][T25197] ? security_file_permission+0x75/0x260 [ 881.758771][T25197] vfs_read+0x582/0xa70 [ 881.758800][T25197] ? __pfx_vfs_read+0x10/0x10 [ 881.758830][T25197] ? __fget_files+0x2a/0x420 [ 881.758856][T25197] ksys_read+0x150/0x270 [ 881.758881][T25197] ? __pfx_ksys_read+0x10/0x10 [ 881.758912][T25197] do_syscall_64+0x14d/0xf80 [ 881.758942][T25197] ? trace_irq_disable+0x3b/0x150 [ 881.758962][T25197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.758984][T25197] ? clear_bhb_loop+0x40/0x90 [ 881.759009][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.759032][T25197] RIP: 0033:0x7f33dbf9c819 [ 881.759053][T25197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.759073][T25197] RSP: 002b:00007f33dce45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.759098][T25197] RAX: ffffffffffffffda RBX: 00007f33dc215fa0 RCX: 00007f33dbf9c819 [ 881.759116][T25197] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000006 [ 881.759131][T25197] RBP: 00007f33dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 881.759146][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.759159][T25197] R13: 00007f33dc216038 R14: 00007f33dc215fa0 R15: 00007ffe99697dd8 [ 881.759188][T25197] [ 881.759196][T25197] [ 881.764305][T25207] syzkaller0: entered promiscuous mode [ 881.768686][T25197] Allocated by task 25197: [ 881.768712][T25197] kasan_save_track+0x3e/0x80 [ 881.805771][T25207] syzkaller0: entered allmulticast mode [ 881.808870][T25197] __kasan_kmalloc+0x93/0xb0 [ 881.808905][T25197] __kmalloc_noprof+0x35c/0x760 [ 881.952815][T25211] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 881.961000][T25197] sock_kmalloc+0xd6/0x160 [ 881.961041][T25197] skcipher_recvmsg+0x54d/0x1140 [ 881.961065][T25197] sock_recvmsg+0x172/0x1b0 [ 881.961084][T25197] sock_read_iter+0x251/0x320 [ 881.961122][T25197] vfs_read+0x582/0xa70 [ 882.060400][T25197] ksys_read+0x150/0x270 [ 882.064683][T25197] do_syscall_64+0x14d/0xf80 [ 882.069436][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.075359][T25197] [ 882.077791][T25197] The buggy address belongs to the object at ffff888033343a40 [ 882.077791][T25197] which belongs to the cache kmalloc-32 of size 32 [ 882.091784][T25197] The buggy address is located 0 bytes to the right of [ 882.091784][T25197] allocated 32-byte region [ffff888033343a40, ffff888033343a60) [ 882.106261][T25197] [ 882.108636][T25197] The buggy address belongs to the physical page: [ 882.115064][T25197] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33343 [ 882.123948][T25197] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 882.131086][T25197] page_type: f5(slab) [ 882.135102][T25197] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 882.143715][T25197] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 882.152315][T25197] page dumped because: kasan: bad access detected [ 882.158769][T25197] page_owner tracks the page as allocated [ 882.164502][T25197] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 209333120579, free_ts 209333004669 [ 882.184343][T25197] post_alloc_hook+0x231/0x280 [ 882.189176][T25197] get_page_from_freelist+0x24dc/0x2580 [ 882.194758][T25197] __alloc_frozen_pages_noprof+0x18d/0x380 [ 882.200604][T25197] allocate_slab+0x77/0x660 [ 882.205138][T25197] refill_objects+0x331/0x3c0 [ 882.209856][T25197] __pcs_replace_empty_main+0x2e6/0x730 [ 882.215460][T25197] __kmalloc_cache_noprof+0x392/0x660 [ 882.220861][T25197] kmem_cache_free+0x15b/0x630 [ 882.225654][T25197] __sk_destruct+0x614/0x880 [ 882.230282][T25197] inet_release+0x143/0x190 [ 882.234854][T25197] sock_close+0xc3/0x240 [ 882.239148][T25197] __fput+0x44f/0xa70 [ 882.243160][T25197] fput_close_sync+0x11f/0x240 [ 882.247993][T25197] __x64_sys_close+0x7e/0x110 [ 882.252710][T25197] do_syscall_64+0x14d/0xf80 [ 882.257339][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.263259][T25197] page last free pid 5835 tgid 5835 stack trace: [ 882.269608][T25197] __free_frozen_pages+0xc2b/0xdb0 [ 882.274748][T25197] vfree+0x25a/0x400 [ 882.278662][T25197] do_arpt_get_ctl+0xdef/0x1100 [ 882.283549][T25197] nf_getsockopt+0x26e/0x290 [ 882.288182][T25197] ip_getsockopt+0x19e/0x230 [ 882.292804][T25197] do_sock_getsockopt+0x2d3/0x3f0 [ 882.297853][T25197] __x64_sys_getsockopt+0x1a4/0x240 [ 882.303104][T25197] do_syscall_64+0x14d/0xf80 [ 882.307735][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.313657][T25197] [ 882.316004][T25197] Memory state around the buggy address: [ 882.321647][T25197] ffff888033343900: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 882.329731][T25197] ffff888033343980: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 882.337846][T25197] >ffff888033343a00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 882.345937][T25197] ^ [ 882.353268][T25197] ffff888033343a80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 882.361370][T25197] ffff888033343b00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 882.369449][T25197] ================================================================== [ 882.385166][T25197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 882.392459][T25197] CPU: 1 UID: 0 PID: 25197 Comm: syz.1.5204 Not tainted syzkaller #0 PREEMPT(full) [ 882.401872][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 882.411974][T25197] Call Trace: [ 882.415302][T25197] [ 882.418291][T25197] vpanic+0x56c/0xa60 [ 882.422364][T25197] ? __pfx_vpanic+0x10/0x10 [ 882.426941][T25197] ? __pfx___schedule+0x10/0x10 [ 882.431864][T25197] panic+0xc5/0xd0 [ 882.435642][T25197] ? __pfx_panic+0x10/0x10 [ 882.440136][T25197] ? preempt_schedule_common+0x82/0xd0 [ 882.445663][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 882.450764][T25197] check_panic_on_warn+0x89/0xb0 [ 882.455763][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 882.460872][T25197] end_report+0x73/0x180 [ 882.465174][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 882.470246][T25197] kasan_report+0x128/0x150 [ 882.474837][T25197] ? af_alg_pull_tsgl+0x1c6/0x740 [ 882.479922][T25197] af_alg_pull_tsgl+0x1c6/0x740 [ 882.484824][T25197] skcipher_recvmsg+0x5df/0x1140 [ 882.489851][T25197] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 882.495256][T25197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 882.500234][T25197] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 882.505550][T25197] ? security_socket_recvmsg+0x7e/0x2c0 [ 882.511132][T25197] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 882.516547][T25197] sock_recvmsg+0x172/0x1b0 [ 882.521083][T25197] sock_read_iter+0x251/0x320 [ 882.525795][T25197] ? __pfx_sock_read_iter+0x10/0x10 [ 882.531034][T25197] ? bpf_lsm_file_permission+0x9/0x20 [ 882.536455][T25197] ? security_file_permission+0x75/0x260 [ 882.542131][T25197] vfs_read+0x582/0xa70 [ 882.546320][T25197] ? __pfx_vfs_read+0x10/0x10 [ 882.551030][T25197] ? __fget_files+0x2a/0x420 [ 882.555665][T25197] ksys_read+0x150/0x270 [ 882.559956][T25197] ? __pfx_ksys_read+0x10/0x10 [ 882.564781][T25197] do_syscall_64+0x14d/0xf80 [ 882.569413][T25197] ? trace_irq_disable+0x3b/0x150 [ 882.574499][T25197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.580614][T25197] ? clear_bhb_loop+0x40/0x90 [ 882.585345][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.591267][T25197] RIP: 0033:0x7f33dbf9c819 [ 882.595715][T25197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.615447][T25197] RSP: 002b:00007f33dce45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 882.623911][T25197] RAX: ffffffffffffffda RBX: 00007f33dc215fa0 RCX: 00007f33dbf9c819 [ 882.631918][T25197] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000006 [ 882.639920][T25197] RBP: 00007f33dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 882.647926][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.655959][T25197] R13: 00007f33dc216038 R14: 00007f33dc215fa0 R15: 00007ffe99697dd8 [ 882.663975][T25197] [ 882.667629][T25197] Kernel Offset: disabled [ 882.671999][T25197] Rebooting in 86400 seconds..