last executing test programs: 4.58370317s ago: executing program 2 (id=2511): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001600010a000000000100000002000000100022800c0008800800e300", @ANYRES32=0x0, @ANYBLOB="83c705f9d7d4de1107d149c921629e6886ce9a3cf659fa6625491283bcb29c8aa05237f47ecb69157ab840f1401ca755d2416c1b7ee5b91216e70c595ce6a0ca317f73fee7e0fb9f7e1864056643bb5ad9fecb65a7e62da0c341f103018b417ea7c6a1e0bb53c3018a75aeb02019771a0eb3cc8aca02ad898a1bceac5c4ce0a329e4459b1bfcc856ee2063dee95e325a47c73bb5a731192ff9c16e845ba44510292cc754701c28d69cb3694371a5d6218488809a91a8eebcc18fd04feb7206be62f2a6e2"], 0x24}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async, rerun: 64) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="70000000010201020000000000000000020000025c000a80580002802c000180140000000000000000000000000000000000000114000400fe800000eaffffffffffffff000000aa0c00028005000100060000001400018008000100e000000108000200640101020600034000030000"], 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) (async) socket$netlink(0x10, 0x3, 0x0) 3.210220057s ago: executing program 0 (id=2524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) 2.991382001s ago: executing program 0 (id=2527): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0xfc, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x84, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x1e, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0xf7, "996e6b391762f8101845f8b884ca48e7a6ceddf87794eae3094ac0494fe93a9030a4d0638936c3baf0b4dd2387c6e206a3d92280da482026ebb4e5e67f868fb899de34221645bf9644c8be53ee64343b3c5c078f75398c06925a5c4b811426b5505c57303ef742146e42b688927530924f0c08e52255141cf1598cbe18be8af0a661e768639b2c350a067cba5c9ed48b3210beef73d01159871beba46c0dc09c9d25c96381eace9c042965b2b977bfcfce15c0aa8c9266f96b36d54c86148a336d6d2e8c3fd418bf94d741ca43af693862ad24d31dc74ae4489ec0ee3e49b89ec4ebcddc8358c64a04aa29fc79cc772eb2c9f5f780fa79"}, &(0x7f0000000080)=0xff) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0xf7, "996e6b391762f8101845f8b884ca48e7a6ceddf87794eae3094ac0494fe93a9030a4d0638936c3baf0b4dd2387c6e206a3d92280da482026ebb4e5e67f868fb899de34221645bf9644c8be53ee64343b3c5c078f75398c06925a5c4b811426b5505c57303ef742146e42b688927530924f0c08e52255141cf1598cbe18be8af0a661e768639b2c350a067cba5c9ed48b3210beef73d01159871beba46c0dc09c9d25c96381eace9c042965b2b977bfcfce15c0aa8c9266f96b36d54c86148a336d6d2e8c3fd418bf94d741ca43af693862ad24d31dc74ae4489ec0ee3e49b89ec4ebcddc8358c64a04aa29fc79cc772eb2c9f5f780fa79"}, &(0x7f0000000080)=0xff) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x4, 0x844c}, 0xc) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x48c01) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.681586505s ago: executing program 2 (id=2531): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x40000000015, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="09000000010000", 0x7) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r3, 0x0, 0x0, 0x24044041, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) sendmsg$kcm(r4, &(0x7f0000002bc0)={&(0x7f0000002500)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x3d8}, 0xc801) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'netdevsim0\x00', {}, 0x8001}) r8 = socket(0x15, 0x5, 0x0) socket$caif_stream(0x25, 0x1, 0x3) getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.582521585s ago: executing program 0 (id=2534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000180)=""/56, 0x38}], 0x2, 0x0, 0xc}}], 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r8) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_ifreq(r9, 0x89b1, &(0x7f0000000240)={'macvtap0\x00', @ifru_data=0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2.4036005s ago: executing program 3 (id=2537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {}, [{0xf9, 0x1, [@m_xt={0x110, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xc4, 0x6, "286a94f4e14beb084c99dae709c351adc8cab22923a37861cfe86658f320ba887e5828b35bc61b6aed21ef47903c360113fff2ade33fa3ad6cbfe1fb0be30daad11c8591bb5facff1d522b2856c1cf72253512d1a2190ea9ac8a783ade006a341c87e6a5a4e0a2b6f5545d96e93a183befcdf3d7af624e0a00465227afef2f86519d0091ccc0ae34fc69bcd8a22cd2cf1af4644d1993bdc3eae657e01cc9264a53346454cc31b59f5e235a3010d59b03da66892760a28c7e0a839c8b85b1f59a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x0, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x59e}]}, {0x0, 0x6, "0d6884d9f22194477c7a1b7a4aee0a92ae59bf6b4da2a4ac0a4e077050ffbe64071924a078d4cd9537344ef681f944e7a6cb8c3b0d1d7ec9711a6dfca366394529610dee2bb14b056117"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}, @m_skbedit={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x5, 0xe58d}]}, {0x0, 0x6, "fe6a4b6835b449dc052637c753e1dda678c36f3005fa44d65d01afb09b5813c657672ee7c49f8c387fac770be3618c18f9fc9d7ef3612514ba78c352a34a7a4395cdc8922488d2bd2b4ad8982d40d08c8f4ced9d3177f3832c7b38798edc33b3eeddada71054392c05d8148a6dd26109344749df834ba36fad984752883c3b46646e0caa501a1ffd6f7b862b39f394140afdd160fa03155c4ee232dabd186974"}, {}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x158}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) 2.391465319s ago: executing program 2 (id=2538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0, 0x24008090}, 0x40000) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f00000000c0)=""/35, 0x23}, {0x0}], 0x3}, 0x1021) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="70f990db1d722feae594fe627d38026ad86fb9ce2a9597efaaeaa6734c595329813a93a5002d"], 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x1, 0x4, 0x4f}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x10000, 0x1c7, 0x12d61, 0x12d58}}, 0x44) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.194407224s ago: executing program 2 (id=2540): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x11, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xcde2, 0xb, 0x1}}}}]}, 0x40}}, 0x44050) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rxrpc_peer\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) unshare(0x6a040000) openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050300000000000000000700000008000300", @ANYRES16=r8], 0x1c}}, 0x40004) 1.820182138s ago: executing program 0 (id=2543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='xprtrdma_marshal\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x9, 'gretap0\x00', {0x6719}, 0x5}) unshare(0x22020600) unshare(0x2a020400) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c4f00100085060000000600"/30, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x440c1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r12 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) getsockname$packet(r12, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x43) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES16=r13, @ANYRES32=0x0, @ANYBLOB="acabc1057af74c23c8398576e1dd85d7d98197e55d657425e1ff6876bd5bd8b81846ca15fde6fd5c12e31d45ce30c02a78b65fe11185263cc4d6cebe20545582488bf49c65eb5f901fcb4d56b7e76c8aa882dd5b62d69b6a2cc5e026315b7b9e7be1c2d3fee95d69eeb1ea90cbc751d4d23146e75a741addd3702ff5b3077443e8a008f85d25a8d189e63f6b271e4f68c29d0c2c3377ca4b5faa1ee0217944a704b38e8f3bf124", @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.681106756s ago: executing program 1 (id=2546): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0x0, 0xd}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x2000009, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x5, 0xf, 0x2, 0x80000001, 0x81, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0x200, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0x10, 0x20001000, 0x4, 0x2, 0x401, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0x8, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x10000008, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x20, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x6, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc02, 0x5, 0x2, 0x4, 0x401, 0x4, 0x9, 0x1, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x5, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0xa, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x4, 0x8, 0x53, 0xca9, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x5, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x7ffd, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x7fffffff, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) sendto$packet(r9, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r12, @ANYRESDEC=r3, @ANYBLOB="000000000000e3a6ed7300"/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r12, @ANYRESDEC=r3, @ANYBLOB="000000000000e3a6ed7300"/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000600000208000000018d3c6b3725d200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000600000208000000018d3c6b3725d200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000206010200000000000000000000000005000100070000000900020073797a31000000000500050005000000040004000000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.479505351s ago: executing program 4 (id=2547): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b000000000900000000000040b877a7625e57e295d8ce520433bd00007c53b72e1aad00000000", 0x30, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) 1.346118088s ago: executing program 3 (id=2548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@end]}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x8a) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.318057726s ago: executing program 4 (id=2549): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x101, 0xfffb}, 0x8) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000068000100000000000000000002000000000000000600070008000000100008801c000100000000000000000008000500", @ANYRES32=r4], 0x38}}, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x400000}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000100)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x316, 0x9200000000000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r6, 0x0, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'hsr0\x00', 0x200}) close(0x3) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000001c0)) 1.300112977s ago: executing program 0 (id=2550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.234056863s ago: executing program 1 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.211432936s ago: executing program 1 (id=2552): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e0000001000000000000000000000000000d9f"], 0x38}}, 0x40000) 1.014040644s ago: executing program 3 (id=2553): r0 = socket(0x1d, 0x2, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x1d, 0x2, 0x6) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (async) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18) (async) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 954.082586ms ago: executing program 1 (id=2554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000004", @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900f7e10000420000001c005e800800060001040000080005006300000008000700a8040000"], 0x44}}, 0x0) 891.303623ms ago: executing program 1 (id=2555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600000000000000000000000000000000000000b8b4ff2c4edf318a1dc628be3b71ec5beb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600000000000000000000000000000000000000b8b4ff2c4edf318a1dc628be3b71ec5beb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="c7f65c98fc86a3ee51708907cfcb", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="c7f65c98fc86a3ee51708907cfcb", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$rose(r5, 0x104, 0x2, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) (async) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000004000000030000000400000002000100", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000460000b6b8dcd6b8c7385c9b944ddb38daf863b54413b39f64d4ab7e4da5c91fe2cbec931cbad61e7a2c58194659b26c1b5be38f0b579204da505914811b15ad6262ac21e07cc18a7dac0d960a815ce9d6ef76d48c06262b3f58a071b43a249aaff459", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0500000001000000030000000300"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r10 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x5, 0x0}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000003300)="ac", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xc, 0x4e27, 0x8, 0x4, 0x4102, 0xffffffffffffffff, 0xfffffe01, '\x00', r9, r5, 0x0, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x20, 0x11, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb3}}, @call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, @fallback=0x30, r5, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x7}, 0x10, r11, r5, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 698.792986ms ago: executing program 3 (id=2556): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x4}]}]}, 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xf8, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x414ad02a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36aa18dd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xf8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 553.741184ms ago: executing program 1 (id=2557): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0xffff, 0x2}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x29}}, {{0x1c, 0x1, {0x6, 0x1c, 0x1c, 0x3, 0x1, 0x8, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd22, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, 0x11413, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xb}, {0x2, 0xc}, {0xf, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @local}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x154, r8, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "0c09a9dd885efac85ed09d41040a4954029e33f9db9729f7295d8ebf7854197d5a25622c44f43d947d53e7ee092bd9d31fe541e036e65f66986206d113968e8437e28c190f13dd0419a19a2c04cde613c6b1e5660f5967065246100c1eaa7f74b640d0bea126c2f0d479947169a85e32d15fd8dc5e96a7ecf4e7454e70bfdcbde2c6f98faa2eef6f7ba512d9afe2f17a5f2661919f1e73815c14bf451ea2a165653f4b6fc77c946f28a827d8da89c908c199494d9d9c98fed8c18021534597d170890c53d1e9f1e84828fc588041d750"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 413.19817ms ago: executing program 4 (id=2558): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 365.600277ms ago: executing program 4 (id=2559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0, 0x3}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0xfe, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="31000000bf3f9f802c001280110001006272696467655f736c617665000000001400058008002200", @ANYRES32=r7, @ANYBLOB="080003"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002d00)={'erspan0\x00', &(0x7f0000002c80)={'gre0\x00', 0x0, 0x8, 0x7, 0xf, 0xa453, {{0xf, 0x4, 0x3, 0x3a, 0x3c, 0x67, 0x0, 0xb, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xf, 0xaf, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_addr={0x44, 0xc, 0x13, 0x1, 0x8, [{@local, 0xef9}]}, @noop, @generic={0x88, 0x5, "571a8b"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002e00)={'erspan0\x00', &(0x7f0000002d40)={'syztnl2\x00', 0x0, 0x80, 0x784a, 0x3, 0x2556, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x65, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x76, [@loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x18, 0x42, 0x0, 0x1, [0xedf, 0x3a81, 0xfffff001, 0x8, 0x9]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x6, 0x10, "55a5ba668ad86cac2c066a45d911"}, {0x3, 0x6, "376a7f7e"}]}, @timestamp={0x44, 0x10, 0xd6, 0x0, 0x7, [0x6, 0x4, 0x1]}, @rr={0x7, 0x17, 0x11, [@rand_addr=0x64010101, @multicast2, @broadcast, @rand_addr=0x64010102, @remote]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="5ccf4135a9b3ea1b09f43c43ebe6be10a9131e898e0bfcf9ae271b8e217d60c2b8212bcac69b40499b5479134dbae86a719c05c67338e0d045a89f1a673dd010574ccf87334bacc3b519865c78d7490690569eb1265da74297ca476e2078cab32b67efd5e5b626db", 0x68}, {&(0x7f00000000c0)="93ccfcca9c524b0c8387754a22f12456fe7760f755ec6ed3f1ad6625212bc7a0a12a00b383ef74f344c503b1e8be13095f9593326e809242d1dfd3e7e753e9f17f3bb8e867788fb1692faebf40a43a7b0d2d4084a68767253032627955f86403528eaf28a402947b674df3eb810645bbb14b86eae0332b024c854dc5fe03db4dda23362fe44ac4df5e968905ca9b0b2ed37d49a78ddcfdfb3cf2003a3d1f51e392d57ec1d8664d71dfc63f34886bea389ca7c83ccfa2e25b68c7c48453c7e34acb5657c7c60c2a7b76a3dac393f21d93b635", 0xd2}, {&(0x7f00000001c0)="69c1af3a2f9a1b1830bb763150fb16f29cf4de381f0e6338d66a6a5852f253d970cefeef3440ac1931858a6cd2e1d8cd73e0d4658ccced60a8573045b5a94c027ea3701d5962948778adcbdb4ed41a4f20622fa50e8be2bbc041b61cb351fc028b66fc6b5970118b5bbbdeced0261d3e6c4fbf6a92a8ab8ab0570b4d0f4bd9e1d228875b60436151f81a7c64abc219cf68d2c003a8da55c3bd29bef4631e39a8cef2f92424c5d8d3b33960d5a6141b28dbab52c0c455a84906d685e4522ea7f9", 0xc0}, {&(0x7f0000000280)="4b34bb6ce79c77", 0x7}, {&(0x7f0000000380)="a69fc3a98412dc4eacbbb32a978e3d162c6f23063b5e66c95af7ad1c6f714daa448e31f470341a1f7ee9a30d5e443c232f7c3f7fd284f64099b035a21db20c253a2be14de5cfb2439b7e2df87bbe6fb3086473c1de2988eb0a296d2d12ad563e1102fded8e588dfb30395b404d13abe933a491ef9fab9a01cd1688b5216a7eff", 0x80}, {&(0x7f0000000400)="9f8469e4553a33d93018c733191ee5729bf0e963f0bb4e98d5469e2ef4fd588c59291723c900b2a855a329ff479bd948a65c25a520b983f1c383ebd84ad9e82b2ddfab0ed0aa6652764e18f3c5a218053e3cc46d6acdfb808a5dcbe9f416a2281cc137bf28d6ae96e6bd98f568d8839bbb1d7d3293ac3cfb33f756c19c3b951f88ff1c37f9f4fc11211784a626054d262bcfb5443ec701b4182de91ded3ed071b782a3ab59b5dcfdf2d820bcd49424c25cf7bcba67e57dec7f5a38677353", 0xbe}, {&(0x7f00000002c0)}, {&(0x7f00000004c0)="8046634c40d1f12f55cdc808df4921c2b27ed99d7fdc0d93ed74e1", 0x1b}], 0x8, &(0x7f0000000580)}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000600)="517f83013e8a186a03b0fab1bb6b154e75c46008a548d7a043445d7c7f4ebf99", 0x20}, {&(0x7f0000000640)="6394a749172f2f1182677a28097154f32402409ff02047d7c85b57194c637619e42de00ffce120694d287bc2b1720d192b48f4c9a08197dc67cf9efc05716432deff422a67c8dff239676ee1d3f84c89bcc240", 0x53}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="8e182d902f39610a52c58b691c8517f0ea7b880fda3e36ed533f45650d751d6848105a7c7b5a46f42c9e7c3069", 0x2d}, {&(0x7f0000000780)="f9ebd25d1e948abfddd6224d3c26e69e64b1a6c77131898f3653adc7d1efbdff6dafb7810f0f2e83c2053e8b961a4c61790baa66d6ed2d00c3b9b772d6f490718cf225706f6e3103340e1a24c05c98e7051e99874abfcdaf04c9b35899adacd5151463179e3a22905f82c73c997ff079843f6256e726f903265855fcda6f26ab624f010235fc9e4cdf5216fd1f93a2d360910314149bc12037b096dd022345c557b4e4147c9dd15931418bf92f85b158edd416c37e", 0xb5}, {&(0x7f0000000840)="4db372c93e95557beb38825140a43e62f7c6764386ad528d2951d1d28e47e55e03606f6e7c937d7257a63cf790e2e1b7ae7bc4d304f6cebe4c1020a8c85e30fa713f17903ff5a04a47f31e2a27e1adbd43459241d2824513f1be583c2a1a14141ca8c01763de4f03609b70cf9e20c86f4ccf4816a0558b781deae14b2d4c0b627b18c6dac62b3ad4609542a35bd3fe4f184860de77241bbb4041366437712249311e2c076290cd506aa8caf23d26bcc087258688edbe6f09ccd2cfcafc1b26a2eb98ea3a8fac46f3d8b55be29d4b72", 0xcf}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="08cee0a87a5ab127979dd75ebc316c1693f3c3c21f7643616240a01c83f1183859032e7679b9a0e4bf95a89119bbb2db0ed664fcc5b2777ef121170d9e3a60ae5f338254d75835a467adbb8eedbddd36a499fdd839dcc3654de4035f4d134a60991f0839156efa2ccdcb8f35ce9441ce302b537ba48b1f8c09195228016e694ad814aff9e462", 0x86}], 0x8, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}], 0x40}}, {{&(0x7f0000001ac0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000001b00)="3f1578d8bc956b26c6a3d3799a38aebe11d318d498f4a43693c347c9c9fd4dae2de2f6e92517587c58a51988fec05ed822215fcf353924ad3979a117edca6468026a4ad4ad3d2ade320700018510a74010183442f2d36cd5ab9b1007f988683df3be2c3d063848", 0x67}, {&(0x7f0000001b80)="88c7710989ddfbb6f86011e84eb06d44946c3ba21528afb4fb980709cd6df223a039148b2bb98715665294a57684cc0ad15cf2567b88b1dd", 0x38}, {&(0x7f0000001bc0)="bb19b191e0d0f813ee0730dc02522d924adab472d53d3d902eb6469a33c4a7dcbe2ade795458a709ef6e98b1e5bb640ce3dc2d040889e2bc204046e07e03d28503e1a5975a0ee1d6911d59ab1062fbdfbd5186", 0x53}, {&(0x7f0000001c40)="d57e56701de4547abb747b183574653bc766ea85ab124be630a677c048199875293254c7d20d6c7c46252bc496a4fb6d32b39447cf4340edf3a01a9d1290fdd9511669db6d874c039d7e6e982730827d9378013b41904fa3da573c02befd53baa6e7f3931c7a490ead205c0247491f695a8c1579dada1e6f84611d2c402b2534402eb3203f3fb187f75429387217d919e745d7906421a1984fdbf6fc0406492db41b42bae6ef0db879f77815c0ff40b65fe2df680cc829920b47a898be2c0219632367acdcea82fc41f19d4842081a0d16791ad1bba0f688a5184e5f57c01ec4ad66eb45fb02af9daa76b71ae45d1fa74574781c092212e7956716fb60b216144cae7defcff44c3ac201a9a6e7c8228fe63ba9da81f1de33d61f327578f170a6827228fc8899878047dcad3d1715a3562591d2cf909f782ca6a256c012c54fdf6ce2631962098f4b904804061c54479b05f26b80f2aaee388bbc06234d690417dea869697a5708285f70c263c862d1cc54df96b2a4ef931ea6a2c492960b90e83358d9c3a7bdd108959cba9a85e544ae32018d8b42619f81bc3179d672ecb9f107b1a93f92ce6c75468d06d52f0c074bb3c5c283cbfe234fab4d634ec15c1047afe74a1c5ccbf5679944902f16f7b5c98a6dad45a892e3e20d2a404db6879c8749b88e4380709c8f90afe5bc527a6058d83892a5cd106902314fed3ce7ef2f7b999cf000cee6e9553a5081c88c41830f283bb5adccd2477acd0cdc5e19bc055f1f15f1f075b5b68610954a10eecc4a17b071e1c1ae6d55ec8d2bb8db42209e861245d218af0ea34bb1aa84fb586dd330b6feffbdc4726c8a2a4e9a8b9f70291c1a5c6388654625a9ad07d43c98b2a5cb7dc82d147cc53d39ced6300a7c60d8faffa9a668bf116bd943d1665b379178c39cc89fa907e7aac4a8af39cc2a82bf95c49bddfa138f643cff2bc9a007f4694d6908ecead0e27247cd8390c4d382c7ad33a759dffe140dd16f074fab97e0c66bd4c46125f77b3b79c8b771d05a3b2bf6f83e8dec855919da373762b26590a184cc2149f2642209eb6a87aceac29ca815731bf27894dac9e3f9aa65ad3c27a58e5e7905fdc9f779f49de3e93ff58e5ae6328fe891984ece896b6a551f6634ca1bd93ae7ad916c3e5c9e5ef5a1d00d91f77e9cb7ddc45d0aff6244469c3961c8e4fb8b61dc3ac2f538b2c8a5e5ad6e8220de33edceb210ad2e8cd4f48153c2ff0f57c437e57a447afcc9df7c4d2e0859273ea5c4b6ae034685157c14482020b7fd8cd2793608373e127c999279218671e5a500e102b296333b0cadb55521711ec4872f1ccfa501c8f0f9064e160a0b0b47f5d2726741d80ad2b88fe65927a44f1c8cc959fdcf9132b373349ae5b628c9fac3ae8808e2c883d0158251f6b69eea5ef785c9cf4e24dbd60bb10dd49e1f81a8357660dbc1d1984f79705cdcf7c9e75bdb369ebd77b82974305df9260a4c6f5476a89561c8be5e13382d12ff37aa58e553dfd590247b30dbb3abb80ba703bc14d4677d681d2dfbcf0c841b471b31656a2f104184ee2d5f3c4f4f802d8b69dd6281eb8c2fc22317308933903226307eab5b94e1baa1f98a7a3b69330e3e59221e2449b5ac9b30ca8a9213f06b1a78200a992066722404f0d3b0ce585668bfa7c9435fea2944ab82efbd0195eae7f4b727e3a5bea5751f215e89a73955c54a8d3921ebb88116cbab75f7ce43e7c9b0d7891023e7ee2c7f11d8a9e89a63baff9e4ec63332180f3b6b7585da90d1772feb65c263578fef8d8c2c7f4e4f7b797533aefad480dc5eb261db02d55115c8076cebb1226130be331966d309352f5ebe771b0334169dd2848a997b80089106d0b84419d7ce8ddd033827caaafd6d3b63a05023e0cc5aea3e556813155d1e9c488789351d5ae28b26196556b86fdee3c347d9852289d65eb71058e7b4fdbd5430f73bdb86e855273c18b514727385c18017b03a442679086f82f6e590899a420875fb590bf64619d98d69e987b4c178ab709ea650fd2acf2f035218f66b91b830a4a254a53b25eb3ae435b762e642596a14965bd17370b6234dae337e288c17c45ae5fd58d032c690c77555731b71f023d8152fd5d996f273052755bd31ba8471fd2b203f693a504d4ee80f1754b158e9159166a3660a2623c999da35a470ec973abbde17a425de27a35ae251ec5c21d44f61be2389a209c805d1f5ba625cd4aeda04e45c32e52e0438fdce1566bfb9cfcb7bf2a1e0b05560d34daa1ba1b40b25c298d5ecb01a7fc614611920e9fc3d1df0bdff95f81bb4237692d5b39466a8cb1f221024df018f882c41b6e0da070ac4856ee371e8b013854f51e22671aa2f19656a9010d54af4394b35a19e9c309dfe1c4963d674147415a899ed05cfd0f2de169faee8d5eb582e6b53a19923f7fa9592258de0d5fe49036a6d6947950d73d715702a3d8b1569419e8918668c67e639e37e2eb3056b63911b598946df35ea102d71369647fe9ae246b5f6ad1499792b3a408a0b69aee6d33d0be9a4013ca60f11f8362549dc2948815240138b6aba7ad15ba69799baf08a9c9a282538b50cf85e6084a511b5221ba1afba8f1d1c5b73fda037167542219a7abdd85fe7deefa5358ddf4a31d03ee18d539cf9971a293fd4bc6c55c90fcde0a117366b36b203a909a1df60c6b74fcd8a499c0be3f32420e6225726c2b2861921a7c1be71e1d8c2089e46b1fec5b44bad1afbe093ad0ed069894b5d6ac0884aa15e4bffbc387825875266beb9ff3a8d7afe525ce3b2943ab79bc138be34a2688753079e567828f2d06dac7636fc3a62b87edfdccd568d8a8850b450b69484ec378419a100ce6f5b353d8a24f91e44f1fa04e13e0757e15aaed3c233c1172d9e345eab613fccca1dcd8fe6c53154e8cb09f46ecfe75aa7baa56ccaaa95ffff77f6b4d069a0a22f155fceb477ca5f4bb800f20e449728d9e40e8d355e3c04282742f76ceb4aa18d589e1ee0a151c68f708289d42d1140c704379c31465457f3077b6789416a83b263fbb3d4117ba836703a846822c75787530bc7c56803cf7f559f7f03ff67b7a2fe25ca7f890cf0b6be17efbd287e2bb0a33efb4026625326889957359c949fd3d0683f76fb78e9869dabba7f35fbfa5669e286e75fd96d22b02050b2e6c28c7eb45cc7c0a1394ebcceaa3d34e2a5603dad61b4df95274a828ab39ba55187fd6ff3f418608a9babcdd021d822b6d29ecd8ca59913fe386e33ed8ae709b00ffa35f7fa5dbb981e194699f1d6f7cf593a615c435b70bbc37b585239723c03dc5a32bc2bd0a956bfff409e000f1b5cd086dc13938d81b9e32df066118939ed7a8139075644237c5cd7e66fdd38a48185c3cdc899282a494f3799cd7b6b2dd669b750d8fd6ec17b227ea07559bc7b14ab25fd83bfa24a6dcb6b32d30b63a9a0d8d450e5b38f6dd71e26ea2104590f211cc22a9f9f5ce1f5cc2d8b307cef4fa5066dd0e6301e4571f6a035b4db3651ccb7bedfa88dd5943f0a46ca28b4e226b6e7ffa45f0bc1e7ae16293aadfabd5b95dae6ac64d7b4ed8253c067de766bfca5c37e23454ca766dd5adb962fa4af7b39ff96cdd97d4076cb4a23f56e2f6cd7dfee4bc454de0b57ccfe73fcaeecdc43ed63a334ed93bc957accc182ceecf9744d48812d32caefd2a7b8fedd10d1184f0a5a6ae5ba0de02060ea44eb77221ab01b2b40e212501eb27bd7271fea6bf3c740455bdce7da1978e4948a761bcd899ae34d4fe19b587fed5b9e3703a2c1ea3b15311072f545c818567a21f597292a261bb6da3a5d52731915cc172332c519a841c9b2b95f73e8eea9db464e2d18714559c2a91ac8bd7ffe32bb5c9e0dba511d60e6ce72078262649ac9eaa8b11c6477bb506921da5b61e610e840b705ac1c05ed0d6f52af27d029ea7e967fd92cfdbcc24d7ce5d12f563efa730a7e7ece34947bd0742161418ccec83081632f87da4b10d9d2663618f33beeb4d0c1a129afa2d3d945b4a6dbc66b313a21241cff9ec30679e15891b5545ecfc889902c0b21db1aae852f8ee6a984f9f13b8990ac766ad607ca5edad26d6abb0bb7150d5045d083baf8cd87ab631debe90b15a9d274a4d73b7b53d64596b196fddb2467f1c559f41dafac24f6c93bb1d6f68a3c15feee187063cd9dc6ef1ed856bbc0f5a64486f6a293edceead42cfc42bd7e35bcff0722c202b90fa496654b81c2b62b66bdf3ca1d9072b3f1e7c94d6a55291979e827871736a66f7543dd8618695f026d977822e14eede17ca6cfb27b1b13c26856bdddc25e55063e94a8471068b883333b1fd885781c852e104b0a28fe3afb6e1dda9ae8a15a517f87fdc56966363f65d9a703ceb87bf40bad3345347ff97683506589d27ea5bf68c375815a74ce1eda5b349eed26462f45a2d6b28f3067069808c69e98d1cb7b364c87dfd4876b2e4028b06a6cd5a3db1a4939b4df0126447a2824bfce7e4dac9302301b5ee5b901861561077a6f68e792db117d587fa911616513a1754ae17714c870f4b0b4075b5564084882551dda7de64f091d4233e2105660b23784a53ded9c50042462a8e929843f4c7e9fea94281c7bfad5f7dd84b401a0401afe2bca33df4367856df8ea04b4fd5897892cec378e9a57a80e00892c93b22ffd1bab3f5496bb9cc99f4dd9dc109786907bbdc8ef2d3e838e5e96d0f57894e282a040d9052c420766c60cf44c8b7dc0695ba8ddb4e421c7af111752a3dc94f86cf092d756f1bd1b86eb84a593883d73f9242dcc9092adf318d94efa1c961d811ad3f77586849d4abc0eae353b2c839712b9330c070415b76138b6f3088c38893dd30bbcce5537ee85a1a250f31cfbfe0482252973fe336a3c8302b9a0491cdbe9d3011d3bf0abda06e8acb5323c80c126a5d9c82198c2612f3945b3d2c03b0f12e12ff048e8a25bc0334f8327e0da1aaa050c50a10b883a0f3a0b7a5ecd5b7bc7d1752f2adab378d5f95ece490df5bef0c62321936f901a5d0fa90de9f2cc6dbb6527f2db5667f1136804a6cdb38a54c3eae996148192fe5948d50ad8e3335a89498a625e5478bf45458afc8ee843b272f55432c1ce7aad5c8fe085dc741294f610ca1e21916a3a300e1484e91cff75475ad20f7e25a4393699aeecfb506600d14e2b6c6138dabe5cd05d81353b6fa3f936582686d28ec548f70a1d5216c76c386d0bb39405ca7e1e97771cccb08f0741b8c8176a029b6c6d7e1725a159a6cd7caa428dece8808ddf0aa2dc14d4e709012f0247c011a23b0a6def44bdf8db1893f2200f15a87896e89b6785db822aa7e5b6bc4a39819c825ce778caac4c9fa899f8b1a053d226e720c93b918fbfd4d6ea30b8080a3c570bf87e0ac0345caf6a09d23d38ea036340ce656bff71f13b4fc3d940a4d92b5f8433464b14fd2e65c2d96828d6336486b7600131fe8e182fb1f973ddb37eda4f4eb623c93efe2e295db19dc087110435ff1a547ae43adaccaa1e23fc02acbbe91248319740189c4cfc91f29927a539c16dd984738afd92d7f67b8f171a999fbc691cf2a153f9ca1df2433a105d53c9d9f58b55ec56a8cfd630c7e14abf97b5cc799035ea1bf961a9fcf8d38f1e08281d2158f124abaddfcca0f2a977d32099db98672d05bf73325602dcf9a589cb5d5b5f49b8a32a704190eed2c6ff28142a60d9cf9f8e7011140b677bf0738ba0716f2224ff386ce7a74aa42bbe21249f863d636a2382dcdbac9bbea9ec4df3f8b5165ef3a5343cfcb41ed610e29b5fd1ac", 0x1000}], 0x4, &(0x7f0000002e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002ec0)="d99407f3ac36f10eb591b31312cdee93ff93dbecffb881ece250d4006eb907", 0x1f}, {&(0x7f0000002f00)="362a9167fa76970267b4bbd4779d270797d3a402c52c133817aead22d27419aa66c0cd4066e2e813a45795cf30027bbd", 0x30}, {&(0x7f0000002f40)="c91bf5e0096c0080172f86d0e95bf17d5eae845e0da7cef4785d007676f78abbc4cad91bc03d10b4eadcea6bd41a4bf5d8c5c98268fd3f4d428aa64dfa3dd4a307aa5e6c27fe711cd7bcfd941764a79e47fc8d071992fc024c76e11a67f9660e4f359339f89216809757126c27690d1a69f69555a910daeb3f663764de2c4fd8270ee541775224947a728c1f415fa95631c3fed9d02f4b3aa52149af0ddc083f690cdd483f895e4bee76f531d33764648eb90526a8f3fc3e4ebf", 0xba}, {&(0x7f0000003000)="3f4849cc1f880bc75e28d27b8c22d23695fc914cd5b391504c0643bdffec482c69baa8", 0x23}], 0x4, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000030c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000003140)=[{&(0x7f0000003100)="2e67b3f363c841af08d2b29a463dd9269f7737152be8154f39624ca1d7adc1d2eb285ed3558f1d840e609227fc3880ee8f6ad530440908430ae8c256", 0x3c}], 0x1}}], 0x5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 242.073543ms ago: executing program 0 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x2, 0x8, 0x4f2, 0x9, 0x4, 0xdf5, 0x29, 0x3}}) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x414}, [@IFLA_NET_NS_FD={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x812) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="941622075209e3f983f11613cd00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000040000008500000005000000bf0920000000000035090100000000009500000000000000b7020000230000007b9af8ff00000000b5090000000000807baaf0ff00000000ae8800000000000007080000f8ffffffbf8420000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 235.205308ms ago: executing program 3 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x5}, {0xffff, 0xb}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x5}, {0x0, 0xfff1}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 184.503508ms ago: executing program 4 (id=2562): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20031}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r2, @ANYBLOB="040013001400030017"], 0x68}}, 0x20008804) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ce5b6d0c", @ANYRES32=r7, @ANYBLOB="1c005a801800018014000300810000023e1506000300090006000500"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a00000000000081117d000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3) r11 = accept4$inet6(r8, 0x0, &(0x7f00000000c0), 0x1800) getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x28) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 159.60536ms ago: executing program 2 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff00ce5412397c0000040042800c00018008000300", @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x4}, 0x8}) 90.387651ms ago: executing program 3 (id=2564): syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001c0600fe80000000000000000000000000000afe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020078000008000000000000000000bed8369036651f45ba1c0f116ac19dcdba80"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1000}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x2110, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/81, 0x51}, 0xfffffff9}], 0x1, 0x12141, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 26.209118ms ago: executing program 2 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000000c0)={0x87, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x8, 0x53, "74172494366fbfa7a53e840d56f5ded1b31df1aafdd997ce4e2ceb02f34d8cab73e18f97f632c67f1d7c8e3f5defb90eea96715680340e13acc9132985d276b789553425138503f47232bf2f533f6b3017c54c"}, @pad1, @jumbo={0xc2, 0x4, 0xdd8a}]}, 0x70) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x450080, 0x0) 0s ago: executing program 4 (id=2566): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000002d8d7825476d3fb6092cc28f0c000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000400000000000000008500000020000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000002d8d7825476d3fb6092cc28f0c000000000000"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000400000000000000008500000020000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) kernel console output (not intermixed with test programs): 4.882649][T10117] lo speed is unknown, defaulting to 1000 [ 294.898566][T10117] lo speed is unknown, defaulting to 1000 [ 294.905288][T10131] x_tables: duplicate underflow at hook 1 [ 295.074778][T10063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.085868][T10063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.179429][T10133] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 295.187360][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.258002][T10063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.269612][T10063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.496874][ T3076] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 295.513386][ T3076] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.527545][T10144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.639441][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 295.650079][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.674967][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 295.684045][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.724112][ T3076] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 295.741801][ T3076] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 296.876277][T10222] openvswitch: netlink: Message has 4 unknown bytes. [ 296.909179][T10226] __nla_validate_parse: 16 callbacks suppressed [ 296.909196][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1072'. [ 296.910245][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 296.998333][T10230] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 297.139388][T10236] netlink: 'syz.4.1075': attribute type 3 has an invalid length. [ 297.175353][T10236] siw: device registration error -23 [ 297.306685][T10247] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 297.324329][T10247] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 297.343895][T10247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1079'. [ 297.394605][T10249] bridge5: entered promiscuous mode [ 297.554175][T10258] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 297.595800][T10258] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1083'. [ 297.649098][T10263] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 297.684910][T10263] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1083'. [ 297.898687][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 298.119006][T10292] netem: change failed [ 298.158276][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 298.210661][T10300] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1095'. [ 298.220601][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1095'. [ 298.220676][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'. [ 298.239991][T10303] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 298.254530][T10305] siw: device registration error -23 [ 298.273076][T10300] syzkaller1: entered promiscuous mode [ 298.279178][T10300] syzkaller1: entered allmulticast mode [ 298.334056][T10303] pim6reg1: entered allmulticast mode [ 298.358938][T10303] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 298.395892][T10303] team0: Cannot enslave team device to itself [ 298.643616][T10329] openvswitch: netlink: Invalid VLAN frame [ 298.711204][T10334] tipc: Resetting bearer [ 298.905536][T10332] tipc: Resetting bearer [ 299.243082][ T1013] tipc: Resetting bearer [ 299.305634][T10375] netlink: 'syz.1.1116': attribute type 7 has an invalid length. [ 299.358258][T10377] tipc: Enabled bearer , priority 0 [ 299.365842][T10377] syzkaller0: entered promiscuous mode [ 299.372686][T10377] syzkaller0: entered allmulticast mode [ 299.382728][T10354] lo speed is unknown, defaulting to 1000 [ 299.391199][T10354] lo speed is unknown, defaulting to 1000 [ 299.509631][T10381] tipc: Resetting bearer [ 299.524875][T10376] tipc: Resetting bearer [ 299.560835][T10376] tipc: Disabling bearer [ 299.923075][T10361] lo speed is unknown, defaulting to 1000 [ 299.930631][T10361] lo speed is unknown, defaulting to 1000 [ 300.068073][ T30] audit: type=1804 audit(1767517120.696:3): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1124" name="memory.events" dev="tmpfs" ino=1117 res=1 errno=0 [ 300.127367][ T30] audit: type=1800 audit(1767517120.706:4): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1124" name="memory.events" dev="tmpfs" ino=1117 res=0 errno=0 [ 300.181902][ T30] audit: type=1804 audit(1767517120.706:5): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1124" name="memory.events" dev="tmpfs" ino=1117 res=1 errno=0 [ 303.237203][T10458] __nla_validate_parse: 15 callbacks suppressed [ 303.245056][T10458] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1133'. [ 303.272995][T10456] tipc: Enabled bearer , priority 0 [ 303.282006][T10456] syzkaller0: entered promiscuous mode [ 303.295537][T10456] syzkaller0: entered allmulticast mode [ 303.411064][T10456] tipc: Resetting bearer [ 303.434003][T10468] validate_nla: 1 callbacks suppressed [ 303.434021][T10468] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 303.451343][T10455] tipc: Resetting bearer [ 303.473061][T10455] tipc: Disabling bearer [ 303.530130][T10473] tipc: Enabling of bearer rejected, failed to enable media [ 303.576263][T10470] veth5: entered promiscuous mode [ 303.638718][T10468] veth7: entered promiscuous mode [ 303.737761][T10489] pimreg: entered allmulticast mode [ 303.836655][T10499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1145'. [ 303.876128][T10503] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 303.922515][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 303.944330][T10499] syzkaller1: entered promiscuous mode [ 303.950130][T10499] syzkaller1: entered allmulticast mode [ 304.277962][T10516] bond2: entered allmulticast mode [ 304.302418][T10516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.323046][T10495] lo speed is unknown, defaulting to 1000 [ 304.364315][T10536] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1151'. [ 304.407460][T10495] lo speed is unknown, defaulting to 1000 [ 304.480622][T10540] syzkaller0: entered promiscuous mode [ 304.502648][T10540] syzkaller0: entered allmulticast mode [ 304.558781][T10548] tipc: Resetting bearer [ 304.578167][T10547] tipc: Resetting bearer [ 304.811069][T10555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.834417][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 304.861343][ T3076] tipc: Resetting bearer [ 304.912914][T10566] netlink: 'syz.1.1159': attribute type 6 has an invalid length. [ 304.921651][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 304.974529][T10566] netlink: 'syz.1.1159': attribute type 6 has an invalid length. [ 305.908934][T10593] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.957540][T10594] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 306.123518][T10601] netlink: 'syz.4.1171': attribute type 12 has an invalid length. [ 306.252550][T10571] lo speed is unknown, defaulting to 1000 [ 306.278542][T10571] lo speed is unknown, defaulting to 1000 [ 306.374025][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1175'. [ 306.423555][T10615] netlink: 'syz.0.1175': attribute type 4 has an invalid length. [ 306.446012][T10615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1175'. [ 306.466904][T10613] netlink: 'syz.2.1174': attribute type 10 has an invalid length. [ 306.492068][T10613] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1174'. [ 307.024589][T10632] tipc: Resetting bearer [ 307.188384][T10649] netlink: 'syz.1.1180': attribute type 39 has an invalid length. [ 307.272066][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 308.005456][T10649] hsr_slave_1 (unregistering): left promiscuous mode [ 308.037742][T10651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.047053][T10631] tipc: Resetting bearer [ 308.101925][T10635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.135094][T10426] tipc: Resetting bearer [ 308.265320][T10635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.278903][T10666] __nla_validate_parse: 1 callbacks suppressed [ 308.278921][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1186'. [ 308.332272][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 308.343585][T10670] netlink: 2948 bytes leftover after parsing attributes in process `syz.4.1186'. [ 308.372973][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 308.457548][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.467088][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.523560][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 308.642762][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1191'. [ 308.776598][T10635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.792548][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 308.809681][T10676] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 308.826300][T10685] sctp: [Deprecated]: syz.3.1193 (pid 10685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.826300][T10685] Use struct sctp_sack_info instead [ 308.826482][T10676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1189'. [ 308.854803][T10685] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1193'. [ 308.895211][T10635] bond0: (slave netdevsim0): Releasing backup interface [ 308.909440][T10635] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 308.930907][T10635] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 308.963626][T10635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.997179][T10689] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 309.008456][T10689] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1194'. [ 309.176242][T10702] geneve2: entered promiscuous mode [ 309.204762][T10702] geneve2: entered allmulticast mode [ 309.320515][T10418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.329870][T10418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.386041][T10418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.400486][T10418] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.464040][T10418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.541274][T10418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.645164][T10418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.662609][T10418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.196536][T10769] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 310.234895][T10769] team0: Failed to send options change via netlink (err -105) [ 310.255508][T10769] team0: Port device dummy0 added [ 310.264329][T10771] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 310.302631][T10771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 310.329655][T10771] team0: Failed to send options change via netlink (err -105) [ 310.370377][T10771] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 310.565667][T10771] team0: Port device dummy0 removed [ 310.644123][T10771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.131721][T10797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.187851][T10797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.430131][T10797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.446110][T10797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.553807][T10797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.568134][T10797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.755003][T10797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.787426][T10797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.817887][T10808] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 311.996013][T10419] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.005674][T10419] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.059130][T10419] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.076291][T10419] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.112002][T10419] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.124336][T10419] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.168514][T10419] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.207588][T10419] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.231668][T10824] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 312.315336][T10819] delete_channel: no stack [ 312.327672][T10819] delete_channel: no stack [ 312.333511][T10819] delete_channel: no stack [ 312.348770][T10819] delete_channel: no stack [ 312.353714][T10824] 8021q: adding VLAN 0 to HW filter on device bond19 [ 312.363883][T10819] delete_channel: no stack [ 312.369935][T10819] delete_channel: no stack [ 312.375713][T10819] delete_channel: no stack [ 312.381790][T10819] delete_channel: no stack [ 312.388432][T10819] delete_channel: no stack [ 312.394390][T10819] delete_channel: no stack [ 312.399494][T10819] delete_channel: no stack [ 312.406922][T10819] delete_channel: no stack [ 312.412479][T10819] delete_channel: no stack [ 312.418207][T10819] delete_channel: no stack [ 312.423131][T10819] delete_channel: no stack [ 312.429651][T10819] delete_channel: no stack [ 312.437688][T10819] delete_channel: no stack [ 312.447733][T10819] delete_channel: no stack [ 312.452415][T10819] delete_channel: no stack [ 312.477893][T10819] delete_channel: no stack [ 312.484908][T10819] delete_channel: no stack [ 312.490293][T10819] delete_channel: no stack [ 312.495742][T10819] delete_channel: no stack [ 312.513644][T10819] delete_channel: no stack [ 312.536348][T10819] delete_channel: no stack [ 312.552347][T10819] delete_channel: no stack [ 312.563093][T10819] delete_channel: no stack [ 312.569499][T10819] delete_channel: no stack [ 312.575015][T10819] delete_channel: no stack [ 312.582675][T10819] delete_channel: no stack [ 312.588200][T10819] delete_channel: no stack [ 312.594488][T10819] delete_channel: no stack [ 312.602641][T10819] delete_channel: no stack [ 312.721169][T10842] tipc: Resetting bearer [ 312.736091][T10842] tipc: Enabling of bearer rejected, already enabled [ 312.775384][T10842] tipc: Resetting bearer [ 313.225173][T10855] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 313.919109][T10892] __nla_validate_parse: 18 callbacks suppressed [ 313.919131][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 313.950091][T10898] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 314.064167][T10906] ip6tnl2: entered promiscuous mode [ 314.070933][T10906] ip6tnl2: entered allmulticast mode [ 314.086017][T10898] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 314.174728][T10898] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 314.209341][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1250'. [ 314.245154][T10898] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 314.263103][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 314.372281][T10418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 314.413928][ T3076] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 314.459156][ T3076] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 314.479023][ T3076] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 314.631588][T10926] netlink: 'syz.4.1254': attribute type 2 has an invalid length. [ 314.670127][T10925] netlink: 'syz.4.1254': attribute type 2 has an invalid length. [ 314.680201][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1254'. [ 314.713103][T10925] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1254'. [ 314.814695][T10934] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 314.864088][T10934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'. [ 314.887200][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 314.887434][T10936] tipc: Resetting bearer [ 314.939343][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'. [ 315.081735][T10935] tipc: Resetting bearer [ 315.389556][T10953] syzkaller1: entered promiscuous mode [ 315.402289][T10953] syzkaller1: entered allmulticast mode [ 315.487803][T10953] 8021q: adding VLAN 0 to HW filter on device bond20 [ 315.604830][T10964] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 315.619128][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 315.821495][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 315.926517][T10975] bond2: entered promiscuous mode [ 315.948130][T10975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.999884][T10982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.009703][T10982] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 316.025730][T10982] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 316.045035][T10399] tipc: Resetting bearer [ 316.558291][T10985] lo speed is unknown, defaulting to 1000 [ 316.586810][T10985] lo speed is unknown, defaulting to 1000 [ 317.063116][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.015103][ T5846] block nbd0: Receive control failed (result -32) [ 318.188154][T11073] x_tables: duplicate underflow at hook 1 [ 318.523878][T11089] ip6gretap1: entered allmulticast mode [ 318.604657][T11095] syz_tun: left allmulticast mode [ 318.683589][T11095] syz_tun: left promiscuous mode [ 318.699947][T11095] bridge0: port 3(syz_tun) entered disabled state [ 318.746935][T11102] IPVS: length: 35 != 24 [ 318.780422][T11095] bridge_slave_0: left promiscuous mode [ 318.789611][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.830977][T11095] bridge_slave_1: left allmulticast mode [ 318.850447][T11095] bridge_slave_1: left promiscuous mode [ 318.857264][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.873486][T11095] bond0: (slave bond_slave_0): Releasing backup interface [ 318.885376][T11095] bond0: (slave bond_slave_1): Releasing backup interface [ 318.900946][T11095] team0: Port device team_slave_0 removed [ 318.914722][T11095] team0: Port device team_slave_1 removed [ 318.928012][T11107] __nla_validate_parse: 19 callbacks suppressed [ 318.928033][T11107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1305'. [ 318.949742][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.959529][T11095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.970816][T11095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.993013][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.003881][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.047668][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.085051][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.096541][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.108620][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.120385][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.132455][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.154887][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 319.407426][T11127] netlink: 'syz.3.1310': attribute type 7 has an invalid length. [ 319.482548][T11131] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 320.008775][T11121] lo speed is unknown, defaulting to 1000 [ 320.029150][T11121] lo speed is unknown, defaulting to 1000 [ 320.090287][T11152] tipc: Enabling of bearer rejected, failed to enable media [ 320.289532][T11161] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 320.443491][T11163] bridge0: port 3(bond0) entered blocking state [ 320.451888][T11163] bridge0: port 3(bond0) entered forwarding state [ 320.461400][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.470919][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.492313][T11163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.689651][T11169] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 320.701212][T11157] lo speed is unknown, defaulting to 1000 [ 320.712719][T11157] lo speed is unknown, defaulting to 1000 [ 320.806162][T11175] geneve3: entered promiscuous mode [ 320.818948][T11175] geneve3: entered allmulticast mode [ 320.871150][T10399] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 320.898556][T10399] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 321.037795][T10399] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 321.061756][T10399] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 321.462880][T11198] xt_hashlimit: size too large, truncated to 1048576 [ 322.427101][T11223] netlink: 'syz.1.1336': attribute type 30 has an invalid length. [ 322.550104][T11223] netlink: 'syz.1.1336': attribute type 30 has an invalid length. [ 322.653900][T11229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.765873][T11220] lo speed is unknown, defaulting to 1000 [ 322.793781][T11220] lo speed is unknown, defaulting to 1000 [ 323.035499][T11255] vlan3: entered promiscuous mode [ 323.503437][T11266] block nbd0: NBD_DISCONNECT [ 323.514265][T11266] block nbd0: Send disconnect failed -32 [ 323.547082][T11266] block nbd0: shutting down sockets [ 323.940209][T11268] lo speed is unknown, defaulting to 1000 [ 323.948316][T11268] lo speed is unknown, defaulting to 1000 [ 324.070219][T11283] __nla_validate_parse: 59 callbacks suppressed [ 324.070238][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1354'. [ 324.099270][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1354'. [ 324.296526][T11287] tipc: Resetting bearer [ 324.331257][T11287] tipc: Resetting bearer [ 324.358782][T11289] netlink: 'syz.1.1356': attribute type 11 has an invalid length. [ 324.368100][T11289] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1356'. [ 324.388950][T11287] delete_channel: no stack [ 324.612215][T11303] dvmrp1: tun_chr_ioctl cmd 35111 [ 324.795214][T10425] tipc: Resetting bearer [ 324.808903][T11317] openvswitch: netlink: IPv4 tunnel dst address is zero [ 325.487642][T11355] xt_hashlimit: size too large, truncated to 1048576 [ 325.862310][T11369] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 325.977163][T11363] tipc: Started in network mode [ 325.996472][T11363] tipc: Node identity 5e2927643a35, cluster identity 4711 [ 326.015022][T11363] tipc: Enabled bearer , priority 0 [ 326.042379][T11369] syzkaller0: entered promiscuous mode [ 326.051426][T11369] syzkaller0: entered allmulticast mode [ 326.122693][T11363] tipc: Resetting bearer [ 326.276661][T11386] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1381'. [ 326.366049][T11389] netlink: 'syz.4.1382': attribute type 21 has an invalid length. [ 326.374498][T11367] lo speed is unknown, defaulting to 1000 [ 326.377693][T11389] netlink: 'syz.4.1382': attribute type 22 has an invalid length. [ 326.383775][T11367] lo speed is unknown, defaulting to 1000 [ 326.390681][T11389] netlink: 'syz.4.1382': attribute type 23 has an invalid length. [ 326.406317][T11389] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1382'. [ 326.470247][T11392] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.553960][T11362] tipc: Resetting bearer [ 326.716916][T11362] tipc: Disabling bearer [ 326.795630][T11408] Bluetooth: MGMT ver 1.23 [ 326.844594][T11402] syzkaller0: entered promiscuous mode [ 326.874988][T11402] syzkaller0: entered allmulticast mode [ 327.077617][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 327.156160][T11338] lo speed is unknown, defaulting to 1000 [ 327.414264][T11338] lo speed is unknown, defaulting to 1000 [ 327.422628][T11404] lo speed is unknown, defaulting to 1000 [ 327.441614][T11404] lo speed is unknown, defaulting to 1000 [ 327.461892][T11377] infiniband !yz!: set down [ 327.484666][T11377] infiniband !yz!: added team_slave_0 [ 327.505720][T11377] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 327.527036][T11377] infiniband !yz!: Couldn't open port 1 [ 327.681737][T11377] RDS/IB: !yz!: added [ 327.691295][T11377] smc: adding ib device !yz! with port count 1 [ 327.705159][T11377] smc: ib device !yz! port 1 has no pnetid [ 328.069790][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1389'. [ 328.088287][T11424] xt_cgroup: path and classid specified [ 328.266465][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1390'. [ 328.438845][T11430] syzkaller0: entered promiscuous mode [ 328.445321][T11430] syzkaller0: entered allmulticast mode [ 328.651306][T11435] netlink: 'syz.4.1394': attribute type 1 has an invalid length. [ 328.654740][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 328.728706][T11435] bond5 (unregistering): Released all slaves [ 328.830465][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1394'. [ 328.924024][T11446] bridge_slave_1 (unregistering): left allmulticast mode [ 328.933779][T11446] bridge_slave_1 (unregistering): left promiscuous mode [ 328.943278][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.393995][T11449] tipc: Resetting bearer [ 329.826750][T11457] __nla_validate_parse: 1 callbacks suppressed [ 329.826771][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 329.848255][T11448] tipc: Resetting bearer [ 329.854499][T11457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.887357][T11457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.913964][T11457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.931321][T11457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.973967][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1402'. [ 329.985389][T11459] netlink: 'syz.0.1402': attribute type 3 has an invalid length. [ 329.998779][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 330.079244][T10408] tipc: Resetting bearer [ 330.283744][T11463] tipc: Enabled bearer , priority 0 [ 330.292570][T11463] syzkaller0: mtu greater than device maximum [ 330.315136][T11462] tipc: Disabling bearer [ 331.000544][T11514] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 331.086997][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 331.107199][T11514] 8021q: adding VLAN 0 to HW filter on device bond17 [ 331.115458][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1420'. [ 331.184936][T11522] bond17: entered allmulticast mode [ 331.233476][T11514] bond17: (slave dummy0): making interface the new active one [ 331.275404][T11514] dummy0: entered allmulticast mode [ 331.282816][T11514] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 331.292187][T11529] tipc: Resetting bearer [ 331.784948][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1428'. [ 331.828209][T11548] lo speed is unknown, defaulting to 1000 [ 331.836581][T11548] lo speed is unknown, defaulting to 1000 [ 332.028809][T11572] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 332.096360][T11528] tipc: Resetting bearer [ 332.170614][T10399] tipc: Resetting bearer [ 332.207198][T11575] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 332.208094][T11576] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 332.410926][T11584] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.497800][T10419] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 332.511386][T11591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1434'. [ 333.299446][T11609] nbd: must specify a device to reconfigure [ 333.446655][T11612] tipc: Resetting bearer [ 333.821610][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1444'. [ 334.298988][T11611] tipc: Resetting bearer [ 334.343248][T11656] lo: entered allmulticast mode [ 334.481643][T10403] tipc: Resetting bearer [ 334.581211][T11656] lo: left allmulticast mode [ 334.703207][T11671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1452'. [ 334.797830][T11674] tipc: Enabled bearer , priority 0 [ 334.829942][T11674] syzkaller0: entered promiscuous mode [ 334.857444][T11674] syzkaller0: entered allmulticast mode [ 335.063102][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 335.080006][T11687] netlink: 'syz.4.1457': attribute type 6 has an invalid length. [ 335.224812][T11674] team0 (unregistering): Port device team_slave_0 removed [ 335.252400][T11674] team0 (unregistering): Port device team_slave_1 removed [ 335.460135][T11685] 8021q: adding VLAN 0 to HW filter on device bond21 [ 335.504603][T11689] 8021q: adding VLAN 0 to HW filter on device bond21 [ 335.513374][T11689] bond21: (slave sit1): The slave device specified does not support setting the MAC address [ 335.547159][T11689] bond21: (slave sit1): Error -95 calling set_mac_address [ 335.601886][T11699] syzkaller1: entered promiscuous mode [ 335.608140][T11699] syzkaller1: entered allmulticast mode [ 335.659392][T11673] tipc: Resetting bearer [ 335.719403][T11673] tipc: Disabling bearer [ 335.766720][T11709] sctp: [Deprecated]: syz.3.1463 (pid 11709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.766720][T11709] Use struct sctp_sack_info instead [ 335.941791][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 335.974143][T11719] tap0: tun_chr_ioctl cmd 2147767521 [ 336.003825][T11724] syzkaller1: entered promiscuous mode [ 336.011010][T11724] syzkaller1: entered allmulticast mode [ 336.326707][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 336.344089][T11727] lo speed is unknown, defaulting to 1000 [ 336.351784][T11727] lo speed is unknown, defaulting to 1000 [ 337.134254][T11729] lo speed is unknown, defaulting to 1000 [ 337.168287][T11729] lo speed is unknown, defaulting to 1000 [ 337.457827][T11776] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 337.506838][T11776] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 337.550664][T11776] syz_tun: entered promiscuous mode [ 337.586419][T11776] syz_tun: entered allmulticast mode [ 337.587640][T11779] netlink: 'syz.2.1478': attribute type 16 has an invalid length. [ 337.600076][T11779] netlink: 'syz.2.1478': attribute type 17 has an invalid length. [ 337.605027][T11776] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 337.647807][T11747] lo speed is unknown, defaulting to 1000 [ 337.956980][T11779] bridge0: port 3(bond0) entered disabled state [ 337.963945][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.646557][T11747] lo speed is unknown, defaulting to 1000 [ 338.670329][T11746] lo speed is unknown, defaulting to 1000 [ 338.676829][T10430] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.687507][T10430] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.696206][T10430] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.706362][T11784] netlink: 'syz.2.1479': attribute type 9 has an invalid length. [ 338.744943][T11784] netlink: 'syz.2.1479': attribute type 11 has an invalid length. [ 338.753462][T11746] lo speed is unknown, defaulting to 1000 [ 338.753503][T10430] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.780877][T11784] netlink: 'syz.2.1479': attribute type 12 has an invalid length. [ 338.789433][T11784] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1479'. [ 339.298124][ T30] audit: type=1800 audit(1767517159.936:6): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1480" name="cgroup.controllers" dev="tmpfs" ino=1567 res=0 errno=0 [ 339.525452][T11804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.567555][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1484'. [ 339.582525][T11803] tipc: Bearer : already 2 bearers with priority 10 [ 339.590744][T11803] tipc: Bearer : trying with adjusted priority [ 339.604946][T11803] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 340.203132][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 340.312674][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'. [ 340.429104][T11832] bond3: entered promiscuous mode [ 340.458506][T11832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.522649][T11841] ip_vti0: entered promiscuous mode [ 340.564820][T11841] ip_vti0: entered allmulticast mode [ 341.172703][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 341.194343][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 341.269514][T11869] gretap0: entered promiscuous mode [ 341.289527][T11869] gretap0: left promiscuous mode [ 341.372720][T11871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1501'. [ 341.487897][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1503'. [ 341.725928][T11886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1505'. [ 342.802941][T11938] syzkaller0: entered promiscuous mode [ 342.809375][T11938] syzkaller0: entered allmulticast mode [ 342.842213][T11938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1518'. [ 342.886578][T11941] nbd: device at index 3 is going down [ 342.914409][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1519'. [ 342.943126][T11945] siw: device registration error -23 [ 343.050822][T11847] udevd[11847]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 343.102176][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 343.283555][T11958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.811680][T11976] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20000 [ 344.256403][T11982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.454951][T10404] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.486534][T10404] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.524939][T10404] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.557329][T10404] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.862893][T11972] lo speed is unknown, defaulting to 1000 [ 344.870956][T11972] lo speed is unknown, defaulting to 1000 [ 345.263838][T12020] __nla_validate_parse: 127 callbacks suppressed [ 345.263857][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 345.535579][T12028] tipc: Resetting bearer [ 345.538617][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 345.631703][T12040] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 345.668193][T12027] tipc: Resetting bearer [ 345.994961][T12032] lo speed is unknown, defaulting to 1000 [ 346.044121][T12032] lo speed is unknown, defaulting to 1000 [ 346.168968][T12061] tipc: Enabling of bearer rejected, already enabled [ 346.203016][T12055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'. [ 346.216896][T12055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'. [ 346.243598][T12061] tipc: Resetting bearer [ 346.313334][T12061] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) ! [ 346.738656][T10404] tipc: Resetting bearer [ 346.746157][T12059] lo speed is unknown, defaulting to 1000 [ 346.855924][T12059] lo speed is unknown, defaulting to 1000 [ 347.027823][T12084] tipc: Resetting bearer [ 347.140297][T12083] tipc: Resetting bearer [ 347.631907][T12100] netlink: 'syz.4.1562': attribute type 33 has an invalid length. [ 347.640243][T12100] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1562'. [ 347.673656][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 347.786986][T10416] tipc: Resetting bearer [ 348.161163][T12090] lo speed is unknown, defaulting to 1000 [ 348.170729][T12086] lo speed is unknown, defaulting to 1000 [ 348.181032][T12090] lo speed is unknown, defaulting to 1000 [ 348.205156][T12086] lo speed is unknown, defaulting to 1000 [ 348.231501][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 348.398350][T12123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1569'. [ 348.588914][T12107] lo speed is unknown, defaulting to 1000 [ 348.615213][T12107] lo speed is unknown, defaulting to 1000 [ 348.642300][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 349.043761][T12134] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 349.060572][T12134] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1572'. [ 349.363936][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1575'. [ 349.767080][T12149] syz_tun: entered allmulticast mode [ 350.206579][T12139] syz_tun: left allmulticast mode [ 350.672988][T12155] netem: change failed [ 350.790014][T12155] xt_CT: No such helper "netbios-ns" [ 350.892714][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 351.249714][T12164] syzkaller0: entered promiscuous mode [ 351.255330][T12164] syzkaller0: entered allmulticast mode [ 353.461954][T12144] lo speed is unknown, defaulting to 1000 [ 353.489391][T12144] lo speed is unknown, defaulting to 1000 [ 353.491246][T12142] lo speed is unknown, defaulting to 1000 [ 353.510982][T12142] lo speed is unknown, defaulting to 1000 [ 353.580896][T12167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.728907][T12172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1583'. [ 353.739148][T12172] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1583'. [ 353.778562][T12172] netlink: 'syz.0.1583': attribute type 6 has an invalid length. [ 353.807819][T12172] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1583'. [ 353.858806][T12175] netlink: 'syz.4.1584': attribute type 3 has an invalid length. [ 353.914431][T12175] dvmrp0: entered allmulticast mode [ 353.963534][T12154] lo speed is unknown, defaulting to 1000 [ 353.992197][T12154] lo speed is unknown, defaulting to 1000 [ 354.713276][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1586'. [ 354.843062][ T6797] hid-generic 0005:15C2:FFF9.0001: item fetching failed at offset 0/1 [ 354.863661][ T6797] hid-generic 0005:15C2:FFF9.0001: probe with driver hid-generic failed with error -22 [ 355.240370][T12203] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 355.280369][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1589'. [ 355.476310][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 355.538710][T12212] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 355.577574][T12212] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 355.610526][T12212] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.978881][T12226] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 356.335872][T12245] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 356.361165][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.4.1600 Not tainted syzkaller #0 PREEMPT(full) [ 356.361193][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.361211][T12245] Call Trace: [ 356.361218][T12245] [ 356.361227][T12245] dump_stack_lvl+0xe8/0x150 [ 356.361268][T12245] sysfs_warn_dup+0x8e/0xa0 [ 356.361291][T12245] sysfs_do_create_link_sd+0xc0/0x110 [ 356.361313][T12245] device_add_class_symlinks+0x1cf/0x240 [ 356.361334][T12245] device_add+0x475/0xb80 [ 356.361354][T12245] wiphy_register+0x1d2e/0x2d20 [ 356.361396][T12245] ? __pfx_wiphy_register+0x10/0x10 [ 356.361420][T12245] ? __pfx_netdev_run_todo+0x10/0x10 [ 356.361447][T12245] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 356.361478][T12245] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 356.361501][T12245] ieee80211_register_hw+0x34a7/0x4110 [ 356.361537][T12245] ? ieee80211_register_hw+0x1411/0x4110 [ 356.361567][T12245] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 356.361605][T12245] ? __hrtimer_setup+0x181/0x200 [ 356.361626][T12245] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 356.361651][T12245] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 356.361694][T12245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 356.361711][T12245] ? kstrndup+0xbf/0x160 [ 356.361788][T12245] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 356.361811][T12245] ? __pfx___nla_validate_parse+0x10/0x10 [ 356.361845][T12245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.361870][T12245] ? rcu_is_watching+0x15/0xb0 [ 356.361896][T12245] ? __nla_parse+0x40/0x60 [ 356.361918][T12245] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 356.361944][T12245] genl_family_rcv_msg_doit+0x215/0x300 [ 356.361971][T12245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.362019][T12245] ? bpf_lsm_capable+0x9/0x20 [ 356.362039][T12245] ? security_capable+0x7e/0x2e0 [ 356.362068][T12245] genl_rcv_msg+0x60e/0x790 [ 356.362091][T12245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.362108][T12245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.362146][T12245] netlink_rcv_skb+0x208/0x470 [ 356.362173][T12245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.362193][T12245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.362214][T12245] ? genl_rcv+0x19/0x40 [ 356.362258][T12245] ? down_read+0x274/0x2e0 [ 356.362277][T12245] ? genl_rcv+0xd/0x40 [ 356.362307][T12245] genl_rcv+0x28/0x40 [ 356.362343][T12245] netlink_unicast+0x82f/0x9e0 [ 356.362375][T12245] ? __pfx_netlink_unicast+0x10/0x10 [ 356.362395][T12245] ? __alloc_skb+0x198/0x3a0 [ 356.362416][T12245] ? netlink_sendmsg+0x642/0xb30 [ 356.362439][T12245] ? skb_put+0x11b/0x210 [ 356.362465][T12245] netlink_sendmsg+0x805/0xb30 [ 356.362497][T12245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.362524][T12245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 356.362550][T12245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.362567][T12245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.362591][T12245] __sock_sendmsg+0x21c/0x270 [ 356.362622][T12245] ____sys_sendmsg+0x505/0x820 [ 356.362653][T12245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.362687][T12245] ? import_iovec+0x74/0xa0 [ 356.362715][T12245] ___sys_sendmsg+0x21f/0x2a0 [ 356.362750][T12245] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.362782][T12245] ? futex_wait+0x285/0x360 [ 356.362835][T12245] ? __fget_files+0x2a/0x420 [ 356.362859][T12245] ? __fget_files+0x3a0/0x420 [ 356.362896][T12245] __x64_sys_sendmsg+0x19b/0x260 [ 356.362924][T12245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.362957][T12245] ? rcu_is_watching+0x15/0xb0 [ 356.362990][T12245] do_syscall_64+0xec/0xf80 [ 356.363009][T12245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.363027][T12245] ? trace_irq_disable+0x37/0x100 [ 356.363052][T12245] ? clear_bhb_loop+0x60/0xb0 [ 356.363076][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.363096][T12245] RIP: 0033:0x7fadf858f749 [ 356.363127][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.363145][T12245] RSP: 002b:00007fadf94e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.363170][T12245] RAX: ffffffffffffffda RBX: 00007fadf87e6090 RCX: 00007fadf858f749 [ 356.363186][T12245] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 356.363199][T12245] RBP: 00007fadf8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.363212][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.363223][T12245] R13: 00007fadf87e6128 R14: 00007fadf87e6090 R15: 00007fff3decceb8 [ 356.363257][T12245] [ 357.147016][T12253] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 357.156583][T12253] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1603'. [ 357.166789][T12253] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 357.175074][T12253] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1603'. [ 357.303488][T12257] tipc: Enabled bearer , priority 0 [ 357.322144][T12257] syzkaller0: entered promiscuous mode [ 357.327755][T12257] syzkaller0: entered allmulticast mode [ 357.370382][T12257] tipc: Resetting bearer [ 357.458753][T12258] tipc: Resetting bearer [ 357.493249][T12258] tipc: Disabling bearer [ 357.573909][T12271] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1609'. [ 357.609293][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1610'. [ 357.922230][T12289] tipc: Resetting bearer [ 358.030006][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 358.049938][T12285] tipc: Resetting bearer [ 358.084109][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 358.168275][T12312] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 358.182533][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1619'. [ 358.236426][T12312] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 358.285969][T12312] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1619'. [ 358.518585][ T3076] tipc: Resetting bearer [ 358.532737][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 358.542995][T12330] netlink: 'syz.0.1622': attribute type 9 has an invalid length. [ 358.602590][ T3076] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.619054][ T3076] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.638250][ T3076] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.652249][ T3076] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.954569][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1627'. [ 358.998470][T12345] tipc: Bearer : already 2 bearers with priority 10 [ 359.030383][T12345] tipc: Bearer : trying with adjusted priority [ 359.073417][T12345] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 359.660579][T12380] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 359.799327][T12388] tipc: Resetting bearer [ 359.980502][T12386] tipc: Resetting bearer [ 360.618832][T10427] tipc: Resetting bearer [ 360.905324][T12423] lo speed is unknown, defaulting to 1000 [ 360.913912][T12423] lo speed is unknown, defaulting to 1000 [ 360.995738][T12437] netlink: 'syz.0.1649': attribute type 6 has an invalid length. [ 361.486925][T12421] lo speed is unknown, defaulting to 1000 [ 361.496229][T12421] lo speed is unknown, defaulting to 1000 [ 361.640262][T12456] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 362.159597][T12474] netlink: 'syz.0.1661': attribute type 29 has an invalid length. [ 362.229040][T12477] netlink: 'syz.0.1661': attribute type 29 has an invalid length. [ 362.250066][T12474] __nla_validate_parse: 4 callbacks suppressed [ 362.250091][T12474] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1661'. [ 362.425024][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 362.436048][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1663'. [ 362.551612][T12485] tipc: Resetting bearer [ 362.564798][T12485] tipc: Resetting bearer [ 362.588561][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 362.713430][T12485] veth11: entered promiscuous mode [ 362.738662][T12484] tipc: Resetting bearer [ 363.821018][T10430] tipc: Resetting bearer [ 364.323429][T12542] tipc: Resetting bearer [ 364.340779][T12542] sch_tbf: peakrate 786 is lower than or equals to rate 4779562731741488037 ! [ 364.407815][T12541] tipc: Resetting bearer [ 364.577589][T12536] lo speed is unknown, defaulting to 1000 [ 364.585687][T12536] lo speed is unknown, defaulting to 1000 [ 364.818938][T10427] tipc: Resetting bearer [ 365.566022][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 365.579749][T12557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1686'. [ 365.959784][T12571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1691'. [ 366.377056][T12590] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 366.391840][T12590] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1696'. [ 366.408300][T12591] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1694'. [ 366.510432][T12590] vxcan0: entered allmulticast mode [ 366.632710][T12600] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1698'. [ 366.843207][T12583] lo speed is unknown, defaulting to 1000 [ 366.851888][T12583] lo speed is unknown, defaulting to 1000 [ 367.061625][T12608] tipc: Enabled bearer , priority 0 [ 367.069764][T12608] syzkaller0: entered promiscuous mode [ 367.075625][T12608] syzkaller0: entered allmulticast mode [ 367.095334][T12608] tipc: Resetting bearer [ 367.887636][T12607] tipc: Resetting bearer [ 367.921905][T12607] tipc: Disabling bearer [ 368.016885][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1708'. [ 368.030649][T12615] lo speed is unknown, defaulting to 1000 [ 368.049561][T12619] lo speed is unknown, defaulting to 1000 [ 368.073400][T12615] lo speed is unknown, defaulting to 1000 [ 368.087519][T12619] lo speed is unknown, defaulting to 1000 [ 368.314582][T12650] tipc: Enabled bearer , priority 0 [ 368.324353][T12650] syzkaller0: entered promiscuous mode [ 368.330619][T12650] syzkaller0: entered allmulticast mode [ 368.702972][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 368.744404][T12650] sit0: mtu less than device minimum [ 368.756378][T12649] tipc: Resetting bearer [ 368.768482][T12635] siw: device registration error -23 [ 368.789415][T12649] tipc: Disabling bearer [ 369.074605][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 369.117024][T12637] lo speed is unknown, defaulting to 1000 [ 369.156136][T12637] lo speed is unknown, defaulting to 1000 [ 370.256736][T12666] lo speed is unknown, defaulting to 1000 [ 370.256733][T12695] netlink: 'syz.2.1722': attribute type 18 has an invalid length. [ 370.256758][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 370.296740][T12695] netlink: 'syz.2.1722': attribute type 18 has an invalid length. [ 370.308935][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 370.382009][T12666] lo speed is unknown, defaulting to 1000 [ 370.405582][T12699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1723'. [ 370.655242][T12705] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1723'. [ 370.683679][T12702] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1723'. [ 370.884369][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 370.900866][T10404] nci: nci_rx_work: unknown MT 0x6 [ 370.943943][T12712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.573157][T12734] vlan3: entered promiscuous mode [ 371.580623][T12734] ip6gretap0: entered promiscuous mode [ 371.858427][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 372.179848][T12761] sctp: [Deprecated]: syz.3.1738 (pid 12761) Use of int in maxseg socket option. [ 372.179848][T12761] Use struct sctp_assoc_value instead [ 372.320761][T12764] team0: Mode "loadbala" not found [ 372.331242][T12761] sctp: [Deprecated]: syz.3.1738 (pid 12761) Use of int in max_burst socket option. [ 372.331242][T12761] Use struct sctp_assoc_value instead [ 372.485626][T12774] netlink: 'syz.3.1741': attribute type 4 has an invalid length. [ 372.604086][T12784] netlink: 'syz.3.1744': attribute type 6 has an invalid length. [ 372.740642][T12792] geneve0: entered promiscuous mode [ 372.749215][T12792] hsr1: entered promiscuous mode [ 372.855192][T12791] bond23: entered promiscuous mode [ 372.861863][T12791] 8021q: adding VLAN 0 to HW filter on device bond23 [ 373.121737][T12809] syzkaller0: entered promiscuous mode [ 373.127734][T12809] syzkaller0: entered allmulticast mode [ 373.148911][T12818] openvswitch: netlink: Missing key (keys=40, expected=80) [ 373.536588][T12844] __nla_validate_parse: 5 callbacks suppressed [ 373.536609][T12844] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1762'. [ 373.582663][T12848] netlink: 'syz.0.1761': attribute type 3 has an invalid length. [ 373.603286][T12844] nbd: couldn't find device at index 536870912 [ 373.611908][T12848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 373.672460][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 373.700517][T12859] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1763'. [ 373.843340][T12866] xt_CT: No such helper "snmp_trap" [ 373.861842][T12866] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 373.869268][T12866] syzkaller1: linktype set to 260 [ 373.981822][T12879] tipc: Resetting bearer [ 374.048293][T12879] tipc: Resetting bearer [ 374.076671][T12885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1772'. [ 374.128961][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1774'. [ 374.197775][T12885] block nbd0: server does not support multiple connections per device. [ 374.208983][T12885] block nbd0: shutting down sockets [ 374.420555][T12907] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 374.456851][T12907] !: entered promiscuous mode [ 374.503863][T12907] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 374.522834][T12907] !: left promiscuous mode [ 375.183783][T12915] bond18: option lp_interval: invalid value (0) [ 375.197767][T12915] bond18: option lp_interval: allowed values 1 - 2147483647 [ 375.254945][T12915] bond18 (unregistering): Released all slaves [ 375.282722][T12894] lo speed is unknown, defaulting to 1000 [ 375.304603][T10430] tipc: Resetting bearer [ 375.348884][T12894] lo speed is unknown, defaulting to 1000 [ 375.398748][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 375.744198][T12934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 375.778260][T12932] syzkaller0: entered promiscuous mode [ 375.784860][T12932] syzkaller0: entered allmulticast mode [ 375.975011][T12943] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1791'. [ 376.544529][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 376.856436][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1802'. [ 377.177154][T12997] Bluetooth: MGMT ver 1.23 [ 377.202728][T12999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.673829][T13021] netlink: 'syz.3.1816': attribute type 5 has an invalid length. [ 377.871211][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.941213][T13034] tc_dump_action: action bad kind [ 377.991958][T13010] lo speed is unknown, defaulting to 1000 [ 378.009004][T13010] lo speed is unknown, defaulting to 1000 [ 378.064694][T13041] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 378.303903][T13018] lo speed is unknown, defaulting to 1000 [ 378.312228][T13018] lo speed is unknown, defaulting to 1000 [ 378.337599][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.346474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.901302][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.148076][ T3507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.157955][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.202761][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.694136][T13077] netlink: 'syz.4.1833': attribute type 63 has an invalid length. [ 379.704503][T13077] netlink: 'syz.4.1833': attribute type 63 has an invalid length. [ 379.856763][T13080] __nla_validate_parse: 5 callbacks suppressed [ 379.856785][T13080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1836'. [ 379.881571][T13081] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 379.937863][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.044715][T13081] 8021q: adding VLAN 0 to HW filter on device bond18 [ 380.076659][T13084] bond18: (slave gretap1): making interface the new active one [ 380.089369][T13084] bond18: (slave gretap1): Enslaving as an active interface with an up link [ 380.304554][T13101] sctp: [Deprecated]: syz.2.1840 (pid 13101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.304554][T13101] Use struct sctp_sack_info instead [ 380.325441][T13103] tipc: Resetting bearer [ 380.343578][T13101] sctp: [Deprecated]: syz.2.1840 (pid 13101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.343578][T13101] Use struct sctp_sack_info instead [ 380.386827][T13103] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 380.418041][T13103] syzkaller0: create flow: hash 461671693 index 1 [ 380.429770][T13101] pim6reg: entered allmulticast mode [ 380.470324][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1844'. [ 380.484901][T13098] syzkaller0: delete flow: hash 461671693 index 1 [ 380.492883][T13098] tipc: Resetting bearer [ 380.508407][T13113] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1845'. [ 380.523406][T13115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1846'. [ 380.533423][T13115] unsupported nlmsg_type 40 [ 380.542963][T10421] tipc: Resetting bearer [ 380.549792][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1845'. [ 380.596367][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 380.979135][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.607589][T13188] tipc: Resetting bearer [ 381.613903][T13188] tipc: Resetting bearer [ 381.650226][T13188] batadv0: entered promiscuous mode [ 381.674794][T13188] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 381.787565][T13210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1865'. [ 381.858679][T13211] netlink: 'syz.4.1862': attribute type 21 has an invalid length. [ 382.026468][T13211] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1862'. [ 382.306772][T13197] lo speed is unknown, defaulting to 1000 [ 382.335299][T13197] lo speed is unknown, defaulting to 1000 [ 382.637722][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 382.787496][T13248] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 382.827423][T13248] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.1876'. [ 383.059033][ T6819] net_ratelimit: 3 callbacks suppressed [ 383.059055][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.217630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.227228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.236774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.245572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.254467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.263919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.272714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.282410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.292233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.460374][T13269] tipc: Enabled bearer , priority 0 [ 383.612649][T13269] syzkaller0: entered promiscuous mode [ 383.627943][T13269] syzkaller0: entered allmulticast mode [ 383.666822][T13268] tipc: Resetting bearer [ 383.764970][T13268] tipc: Disabling bearer [ 384.200951][T13307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 384.482159][T13321] delete_channel: no stack [ 384.746889][T13338] netlink: 'syz.3.1899': attribute type 13 has an invalid length. [ 384.995720][T13340] __nla_validate_parse: 6 callbacks suppressed [ 384.995742][T13340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1900'. [ 385.115993][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 385.397539][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 385.526219][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 385.829281][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 385.961925][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 386.376165][T13425] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 386.397298][T13425] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1918'. [ 386.418349][T13446] --map-set only usable from mangle table [ 386.599313][T13437] lo speed is unknown, defaulting to 1000 [ 386.607385][T13437] lo speed is unknown, defaulting to 1000 [ 386.614107][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 387.192440][T13477] ip6gre1: entered promiscuous mode [ 387.200984][T13477] ip6gre1: entered allmulticast mode [ 387.249631][T10404] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.266707][T10404] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.279501][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.313836][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.429365][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 387.443853][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1941'. [ 388.066353][T13518] netlink: 'syz.0.1948': attribute type 8 has an invalid length. [ 388.076153][T13518] netlink: 'syz.0.1948': attribute type 9 has an invalid length. [ 388.101176][T13486] lo speed is unknown, defaulting to 1000 [ 388.107365][T13518] netlink: 'syz.0.1948': attribute type 10 has an invalid length. [ 388.107389][T13518] netlink: 'syz.0.1948': attribute type 11 has an invalid length. [ 388.125985][T13518] bridge0: port 4(macsec0) entered disabled state [ 388.132951][T13518] bridge0: port 3(vlan2) entered disabled state [ 388.177567][ T6797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.200272][T13486] lo speed is unknown, defaulting to 1000 [ 388.261895][ T57] net_ratelimit: 23 callbacks suppressed [ 388.261916][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.658987][T13549] netlink: 'syz.0.1956': attribute type 15 has an invalid length. [ 388.814976][T13552] pim6reg: entered allmulticast mode [ 388.949990][T13552] pim6reg: left allmulticast mode [ 389.071373][T13563] tipc: Resetting bearer [ 389.236654][T13546] lo speed is unknown, defaulting to 1000 [ 389.279797][T13575] netlink: 'syz.0.1961': attribute type 9 has an invalid length. [ 389.324003][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.334279][T13546] lo speed is unknown, defaulting to 1000 [ 389.711065][T13587] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 389.937514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.946207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.955594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.042269][T13596] __nla_validate_parse: 3 callbacks suppressed [ 390.042292][T13596] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1965'. [ 390.337586][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.346281][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.899161][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 390.965742][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 391.060616][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 391.204744][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 391.226891][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 391.249722][T13626] netlink: 2244 bytes leftover after parsing attributes in process `syz.3.1976'. [ 391.330096][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.356565][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.384934][T13633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1977'. [ 391.458389][T13633] tap0: tun_chr_ioctl cmd 1074025677 [ 391.464602][T13633] tap0: linktype set to 776 [ 391.506127][T13617] lo speed is unknown, defaulting to 1000 [ 391.517390][T13617] lo speed is unknown, defaulting to 1000 [ 391.617441][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.630771][T13640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1979'. [ 391.732609][T13643] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1980'. [ 391.824082][T13645] gretap2: entered promiscuous mode [ 392.154616][T13659] netlink: 'syz.1.1982': attribute type 13 has an invalid length. [ 392.231116][T13654] bond3: option arp_validate: invalid value (18446744073491447809) [ 392.254261][T13654] bond3 (unregistering): Released all slaves [ 392.670676][T10410] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.685936][T10410] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.708233][T10410] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.736809][T10410] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.789040][T13667] syzkaller0: entered promiscuous mode [ 392.794913][T13667] syzkaller0: entered allmulticast mode [ 392.909099][T13679] x_tables: ip_tables: ah match: only valid for protocol 51 [ 392.951484][T13679] x_tables: ip_tables: ah match: only valid for protocol 51 [ 393.107354][T13688] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 393.214994][T13688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.287682][T13695] bond3: (slave veth5): Enslaving as an active interface with a down link [ 393.319891][T13701] vlan4: entered allmulticast mode [ 393.326122][T13701] bond3: (slave vlan4): Opening slave failed [ 393.342843][T13661] lo speed is unknown, defaulting to 1000 [ 393.359072][T13661] lo speed is unknown, defaulting to 1000 [ 393.377660][ T6797] net_ratelimit: 13 callbacks suppressed [ 393.377679][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.525558][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.609232][T13690] lo speed is unknown, defaulting to 1000 [ 393.618098][T13690] lo speed is unknown, defaulting to 1000 [ 393.779241][T10411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.798938][T10411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.047849][T13713] netlink: 'syz.3.2000': attribute type 3 has an invalid length. [ 394.070214][T13713] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 394.235091][T13717] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 394.265341][T13708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.303006][T13703] lo speed is unknown, defaulting to 1000 [ 394.339466][T13703] lo speed is unknown, defaulting to 1000 [ 394.407644][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.607005][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.194934][T13762] No such timeout policy "syz1" [ 395.628550][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.912464][T13784] ip6tnl1: entered allmulticast mode [ 395.947851][T13786] tipc: Enabling of bearer rejected, failed to enable media [ 395.979456][T13786] __nla_validate_parse: 3 callbacks suppressed [ 395.979475][T13786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2018'. [ 396.018056][T13753] lo speed is unknown, defaulting to 1000 [ 396.059314][T13753] lo speed is unknown, defaulting to 1000 [ 396.419801][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.214595][T13798] lo speed is unknown, defaulting to 1000 [ 397.480352][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 397.499798][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 397.509524][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 397.520010][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 397.800786][T13829] lo speed is unknown, defaulting to 1000 [ 397.808990][T13829] lo speed is unknown, defaulting to 1000 [ 397.809097][T13821] lo speed is unknown, defaulting to 1000 [ 397.816321][T13798] lo speed is unknown, defaulting to 1000 [ 397.839278][T13820] lo speed is unknown, defaulting to 1000 [ 397.937995][T13821] lo speed is unknown, defaulting to 1000 [ 397.955664][T13820] lo speed is unknown, defaulting to 1000 [ 397.955776][T13843] lo speed is unknown, defaulting to 1000 [ 397.974212][T13843] lo speed is unknown, defaulting to 1000 [ 398.743041][ T6819] net_ratelimit: 6 callbacks suppressed [ 398.743061][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.458903][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.791537][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.017458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.026711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.035805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.257660][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.542461][T13859] bond0: entered promiscuous mode [ 400.548665][T13859] bond_slave_0: entered promiscuous mode [ 400.555060][T13859] bond_slave_1: entered promiscuous mode [ 400.562112][T13859] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 400.574987][T13859] debugfs: 'hsr1' already exists in 'hsr' [ 400.582693][T13859] Cannot create hsr debugfs directory [ 400.588846][T13859] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 400.599418][T13859] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 400.612189][T13859] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.636880][T13859] bond0: left promiscuous mode [ 400.642371][T13859] bond_slave_0: left promiscuous mode [ 400.677899][T13859] bond_slave_1: left promiscuous mode [ 400.683711][T13859] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 400.815032][T13862] x_tables: duplicate underflow at hook 1 [ 400.826865][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.289729][T13858] lo speed is unknown, defaulting to 1000 [ 401.319595][T13858] lo speed is unknown, defaulting to 1000 [ 401.454154][T13881] netlink: 'syz.2.2039': attribute type 1 has an invalid length. [ 401.531705][T13881] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 401.874971][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.016271][T13901] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2046'. [ 402.044109][T13906] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 402.126337][T13910] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2048'. [ 402.161082][T13901] netlink: 'syz.0.2046': attribute type 3 has an invalid length. [ 402.288313][T13904] bond4 (unregistering): Released all slaves [ 402.301989][T13918] sctp: [Deprecated]: syz.4.2050 (pid 13918) Use of int in max_burst socket option deprecated. [ 402.301989][T13918] Use struct sctp_assoc_value instead [ 402.323750][T13908] syzkaller1: entered promiscuous mode [ 402.330249][T13908] syzkaller1: entered allmulticast mode [ 402.345226][T13914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2049'. [ 402.384387][T13919] tipc: Enabling of bearer rejected, already enabled [ 402.397981][T13919] netlink: 'syz.0.2051': attribute type 13 has an invalid length. [ 402.506736][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.604035][T13919] tipc: Resetting bearer [ 402.612170][T13929] xt_CT: No such helper "syz0" [ 402.797516][T13923] tun0: tun_chr_ioctl cmd 1074025675 [ 402.809145][T13923] tun0: persist enabled [ 402.902669][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.914702][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 402.931186][T13939] vlan3: entered promiscuous mode [ 403.024264][T13944] team_slave_1: Caught tx_queue_len zero misconfig [ 403.068020][T13944] wg1: left promiscuous mode [ 403.076066][T13946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2057'. [ 403.124721][T13948] --map-set only usable from mangle table [ 403.135010][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 403.184377][T13948] macvtap1: entered promiscuous mode [ 403.208567][T13948] macvtap1: entered allmulticast mode [ 403.224527][T13948] ip6gretap0: entered allmulticast mode [ 403.293219][T13956] ip6gretap0: left allmulticast mode [ 403.671151][T13968] netlink: 'syz.2.2063': attribute type 3 has an invalid length. [ 403.683364][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 403.807653][T13974] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2062'. [ 403.816939][T13974] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 403.836344][T13971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2062'. [ 403.863874][T13980] tipc: Enabled bearer , priority 0 [ 403.880365][T13982] netlink: 'syz.4.2067': attribute type 39 has an invalid length. [ 403.913559][T13980] syzkaller0: entered promiscuous mode [ 403.926182][T13980] syzkaller0: entered allmulticast mode [ 403.943826][ T57] net_ratelimit: 5 callbacks suppressed [ 403.943847][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.972368][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.981629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.007506][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.017677][T10405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.037534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.087051][T13985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.096272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.240098][T13995] sctp: [Deprecated]: syz.0.2069 (pid 13995) Use of int in maxseg socket option. [ 404.240098][T13995] Use struct sctp_assoc_value instead [ 404.297920][T13979] tipc: Resetting bearer [ 404.346223][T13979] tipc: Disabling bearer [ 404.529316][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2077'. [ 404.540724][T14016] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 404.790025][T13999] lo speed is unknown, defaulting to 1000 [ 404.797656][T13999] lo speed is unknown, defaulting to 1000 [ 404.996197][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.537981][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.603093][T14030] lo speed is unknown, defaulting to 1000 [ 405.612270][T14030] lo speed is unknown, defaulting to 1000 [ 406.123708][T14071] syzkaller1: entered promiscuous mode [ 406.139150][T14071] syzkaller1: entered allmulticast mode [ 406.606075][T14076] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 407.214200][T14106] __nla_validate_parse: 2 callbacks suppressed [ 407.214219][T14106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2099'. [ 407.339683][T14107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2099'. [ 407.421763][T14126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2105'. [ 407.441539][T14124] lo: Caught tx_queue_len zero misconfig [ 407.469800][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2106'. [ 407.628367][T11946] udevd[11946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 407.641266][T14144] netlink: 'syz.2.2108': attribute type 33 has an invalid length. [ 407.662990][T14144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2108'. [ 407.695829][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 407.773270][T14144] bond1: (slave dummy0): Releasing active interface [ 407.814383][T14144] dummy0 (unregistering): left promiscuous mode [ 407.916777][T14164] netlink: 'syz.1.2112': attribute type 13 has an invalid length. [ 407.990629][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 408.178202][T14185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2116'. [ 408.235400][T14187] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 408.253319][T14181] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2114'. [ 408.841050][T14207] tipc: Resetting bearer [ 409.041887][T14204] lo speed is unknown, defaulting to 1000 [ 409.074039][T14208] tipc: Resetting bearer [ 409.088035][T14204] lo speed is unknown, defaulting to 1000 [ 409.143193][ T57] net_ratelimit: 8 callbacks suppressed [ 409.143217][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.225316][T14215] tipc: Enabled bearer , priority 0 [ 409.239398][T14215] syzkaller0: entered promiscuous mode [ 409.255312][T14215] syzkaller0: entered allmulticast mode [ 409.392369][T10425] tipc: Resetting bearer [ 409.501293][T14225] tipc: Resetting bearer [ 409.523456][T14214] tipc: Resetting bearer [ 409.569487][T14214] tipc: Disabling bearer [ 409.648779][T14232] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 409.741470][T14235] xt_TCPMSS: Only works on TCP SYN packets [ 409.915936][T14240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.925363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.986794][T14240] netlink: 'syz.3.2129': attribute type 13 has an invalid length. [ 410.100239][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'. [ 410.110364][T14248] netlink: 'syz.2.2131': attribute type 12 has an invalid length. [ 410.182651][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.249508][T14245] netlink: 'syz.4.2130': attribute type 4 has an invalid length. [ 410.287616][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.309583][T14248] netlink: 'syz.2.2131': attribute type 12 has an invalid length. [ 410.317874][T10404] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.326436][T10404] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.337600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.346220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.355529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.357949][T10404] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.364481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.407736][T10404] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.692236][T14262] netlink: 'syz.0.2134': attribute type 27 has an invalid length. [ 411.742058][T14285] lo speed is unknown, defaulting to 1000 [ 411.750775][T14285] lo speed is unknown, defaulting to 1000 [ 411.962322][T14301] syzkaller1: entered promiscuous mode [ 411.983818][T14301] syzkaller1: entered allmulticast mode [ 412.070854][T14304] netlink: 'syz.3.2143': attribute type 11 has an invalid length. [ 412.443899][T14321] ªªªªª»: renamed from bridge_slave_0 [ 412.465504][T14321] smc: net device geneve0 applied user defined pnetid SYZ0 [ 412.587482][T14332] geneve2: entered promiscuous mode [ 412.596414][T14326] __nla_validate_parse: 2 callbacks suppressed [ 412.596433][T14326] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2151'. [ 412.638974][T14332] geneve2: entered allmulticast mode [ 412.818141][T14326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.090887][T14360] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 413.113913][T14360] netlink: 'syz.0.2160': attribute type 2 has an invalid length. [ 413.124010][T14360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.191921][T14366] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 413.200998][T14366] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 414.005647][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 414.106677][ T6819] IPVS: starting estimator thread 0... [ 414.227511][T14385] IPVS: using max 30 ests per chain, 72000 per kthread [ 414.342767][ T57] net_ratelimit: 37 callbacks suppressed [ 414.342789][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.396808][T14368] lo speed is unknown, defaulting to 1000 [ 414.458310][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 414.489006][T14368] lo speed is unknown, defaulting to 1000 [ 414.657647][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.843186][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 415.384654][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.457115][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 415.606613][T14413] netlink: 'syz.2.2171': attribute type 3 has an invalid length. [ 415.636552][T14413] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2171'. [ 416.428579][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.378969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.387558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.396068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.464394][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.539743][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.706949][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.172901][T14400] lo speed is unknown, defaulting to 1000 [ 418.200149][T14400] lo speed is unknown, defaulting to 1000 [ 418.206592][T14387] lo speed is unknown, defaulting to 1000 [ 418.216472][T14387] lo speed is unknown, defaulting to 1000 [ 418.510926][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.644085][T14440] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2177'. [ 418.654585][T14441] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2177'. [ 418.667251][T14421] lo speed is unknown, defaulting to 1000 [ 418.689906][T14421] lo speed is unknown, defaulting to 1000 [ 418.738513][T14443] netlink: 'syz.4.2178': attribute type 2 has an invalid length. [ 419.403569][T14451] tipc: Resetting bearer [ 419.466228][T14451] syzkaller0: tun_chr_ioctl cmd 1074025698 [ 419.474668][T14452] tipc: Resetting bearer [ 419.547147][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.000682][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2183'. [ 420.072091][T14464] netlink: 'syz.4.2183': attribute type 13 has an invalid length. [ 420.105898][T14467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2184'. [ 420.127699][T14466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2184'. [ 420.380358][T14450] tipc: Resetting bearer [ 420.401975][T10411] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.435040][T10411] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.465350][T14471] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 420.511893][ T12] tipc: Resetting bearer [ 420.530085][T10411] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.539504][T10411] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.569347][T10411] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.584192][T10411] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.593586][T10411] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.594931][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.612052][T10411] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.737547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.746315][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.755044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.764913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.963632][T14495] pim6reg1: entered promiscuous mode [ 420.971839][T14495] pim6reg1: entered allmulticast mode [ 420.979791][T14497] tipc: Resetting bearer [ 421.115164][T14508] netlink: 'syz.4.2196': attribute type 39 has an invalid length. [ 421.174795][T14512] xt_ecn: cannot match TCP bits for non-tcp packets [ 421.432206][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 421.624785][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.723413][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 421.797475][T14496] tipc: Resetting bearer [ 421.813665][T14541] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2204'. [ 421.825847][T14542] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2204'. [ 421.868446][T14538] netlink: 'syz.1.2204': attribute type 12 has an invalid length. [ 421.952010][T14544] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:22 [ 421.962217][T14526] lo speed is unknown, defaulting to 1000 [ 421.970843][T14526] lo speed is unknown, defaulting to 1000 [ 421.980291][T14538] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 422.403713][T14550] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 422.440789][T14548] lo speed is unknown, defaulting to 1000 [ 422.448119][T14548] lo speed is unknown, defaulting to 1000 [ 422.580240][T10410] tipc: Resetting bearer [ 422.666942][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.962108][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 423.498083][T14572] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 423.506126][T14572] netlink: 'syz.1.2212': attribute type 2 has an invalid length. [ 423.708754][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.777606][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.872346][T14559] lo speed is unknown, defaulting to 1000 [ 423.897876][T14559] lo speed is unknown, defaulting to 1000 [ 424.181218][T14600] tipc: Enabled bearer , priority 0 [ 424.299936][T14600] tipc: Disabling bearer [ 424.578184][ C0] net_ratelimit: 48 callbacks suppressed [ 424.578237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.619102][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 424.631195][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 424.745037][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.907839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.090434][T14633] syzkaller0: entered promiscuous mode [ 425.117973][T14633] syzkaller0: entered allmulticast mode [ 425.321943][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2229'. [ 425.356902][T14639] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 425.752316][T14634] lo speed is unknown, defaulting to 1000 [ 425.760748][T14634] lo speed is unknown, defaulting to 1000 [ 425.782902][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.914620][T14662] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2238'. [ 425.940288][T14662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.960114][T14664] x_tables: duplicate underflow at hook 3 [ 425.966095][T14666] x_tables: duplicate underflow at hook 3 [ 426.020158][T14667] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 426.131621][T14672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'. [ 426.390012][T14680] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2245'. [ 426.440653][T14680] bridge0: port 4(macvtap2) entered blocking state [ 426.449223][T14680] bridge0: port 4(macvtap2) entered disabled state [ 426.457495][T14680] macvtap2: entered allmulticast mode [ 426.462946][T14680] bridge0: entered allmulticast mode [ 426.499220][T14680] macvtap2: left allmulticast mode [ 426.504390][T14680] bridge0: left allmulticast mode [ 426.570375][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'. [ 426.734805][T14699] netlink: 584 bytes leftover after parsing attributes in process `syz.0.2249'. [ 426.818049][ T6792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.826929][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.263634][T14715] netlink: 'syz.1.2252': attribute type 30 has an invalid length. [ 427.318499][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2252'. [ 427.514020][T14715] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 427.537640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.547121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.556686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.582165][T14715] bond4 (unregistering): Released all slaves [ 427.608880][T14731] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2259'. [ 427.642724][T14729] tipc: Resetting bearer [ 427.920265][T14741] netlink: 'syz.1.2260': attribute type 8 has an invalid length. [ 428.181086][T14728] tipc: Resetting bearer [ 428.339368][T14746] tipc: Resetting bearer [ 428.460430][T14744] tipc: Resetting bearer [ 428.560782][T14761] xt_connbytes: Forcing CT accounting to be enabled [ 428.602525][T14761] netlink: 'syz.3.2267': attribute type 4 has an invalid length. [ 428.653511][T10415] tipc: Resetting bearer [ 428.762018][T14768] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 428.764628][T14767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.886460][T14748] lo speed is unknown, defaulting to 1000 [ 428.913571][T14782] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 428.982849][T14748] lo speed is unknown, defaulting to 1000 [ 429.274377][T14793] tipc: Resetting bearer [ 429.314279][T14793] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 429.515642][T14793] tipc: Resetting bearer [ 429.720384][T10417] tipc: Resetting bearer [ 429.729886][T14781] lo speed is unknown, defaulting to 1000 [ 429.782662][T14781] lo speed is unknown, defaulting to 1000 [ 429.857672][ T6797] net_ratelimit: 3 callbacks suppressed [ 429.857692][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.943368][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.027845][T14814] netlink: 'syz.2.2281': attribute type 10 has an invalid length. [ 430.058428][T14814] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.083190][T14814] team0: entered promiscuous mode [ 430.088697][T14814] team_slave_0: entered promiscuous mode [ 430.094560][T14814] team_slave_1: entered promiscuous mode [ 430.101579][T14814] team0: entered allmulticast mode [ 430.106916][T14814] team_slave_0: entered allmulticast mode [ 430.115589][T14814] team_slave_1: entered allmulticast mode [ 430.122672][T14814] bond0: (slave team0): Enslaving as an active interface with an up link [ 430.628456][T14806] lo speed is unknown, defaulting to 1000 [ 430.663747][T14806] lo speed is unknown, defaulting to 1000 [ 430.817542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.827241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.836070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.940296][T14829] syzkaller1: entered promiscuous mode [ 430.949103][T14829] syzkaller1: entered allmulticast mode [ 431.012723][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.022351][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.715118][T14866] openvswitch: netlink: Flow actions attr not present in new flow. [ 432.855604][T14871] __nla_validate_parse: 53 callbacks suppressed [ 432.855746][T14871] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2290'. [ 432.898026][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.915226][T14874] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 433.036271][T14880] tipc: Resetting bearer [ 433.053086][T14879] tipc: Resetting bearer [ 433.063449][ T6819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.346663][T14862] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 433.487357][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 433.545545][T14899] netlink: 'syz.4.2298': attribute type 4 has an invalid length. [ 433.668998][T14902] syzkaller0: entered promiscuous mode [ 433.674838][T14902] syzkaller0: entered allmulticast mode [ 433.795136][T14907] syzkaller0: entered promiscuous mode [ 433.803228][T14907] syzkaller0: entered allmulticast mode [ 433.840848][T14907] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 433.898930][T10415] tipc: Resetting bearer [ 434.384127][T14931] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 435.955637][ T6797] net_ratelimit: 5 callbacks suppressed [ 435.955657][ T6797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.842353][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 436.890807][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 436.917059][T14979] tipc: Resetting bearer [ 436.992716][T14986] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 436.992896][T14970] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2317'. [ 437.058729][T14979] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 437.067515][T14979] syzkaller0: Linktype set failed because interface is up [ 437.619755][T14986] lo speed is unknown, defaulting to 1000 [ 437.671302][T14986] lo speed is unknown, defaulting to 1000 [ 437.697548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.706210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.714746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.723412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.736709][T14961] tipc: Resetting bearer [ 437.767891][T15021] netlink: 'syz.3.2327': attribute type 39 has an invalid length. [ 438.124666][T15046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 438.425584][T15051] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 438.746339][T10399] tipc: Resetting bearer [ 438.782190][T15053] lo speed is unknown, defaulting to 1000 [ 438.915481][T15053] lo speed is unknown, defaulting to 1000 [ 438.952457][T15079] syzkaller0: entered promiscuous mode [ 438.989208][T15079] syzkaller0: entered allmulticast mode [ 439.018309][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 440.028533][T15112] netlink: 'syz.1.2343': attribute type 3 has an invalid length. [ 440.071619][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.100093][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2344'. [ 440.111670][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.124280][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.133514][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.152448][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.161842][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.174502][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 440.296290][T15130] openvswitch: netlink: Message has 4 unknown bytes. [ 440.551501][T14784] udevd[14784]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 441.057401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.066312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.075429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.378091][T15177] sctp: [Deprecated]: syz.3.2356 (pid 15177) Use of int in max_burst socket option. [ 441.378091][T15177] Use struct sctp_assoc_value instead [ 441.381834][T15155] lo speed is unknown, defaulting to 1000 [ 441.464971][T15155] lo speed is unknown, defaulting to 1000 [ 441.810939][T15187] syzkaller0: entered promiscuous mode [ 441.831941][T15187] syzkaller0: entered allmulticast mode [ 443.142410][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.150762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.824660][T15197] veth13: entered promiscuous mode [ 444.020634][T15213] x_tables: duplicate underflow at hook 2 [ 444.417582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.426138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.434642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.570621][T15241] __nla_validate_parse: 5 callbacks suppressed [ 444.570642][T15241] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2374'. [ 444.633529][T15246] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2375'. [ 444.764162][T15214] lo speed is unknown, defaulting to 1000 [ 444.777322][T15214] lo speed is unknown, defaulting to 1000 [ 444.942535][T15256] tipc: Enabling of bearer rejected, already enabled [ 444.974270][T15256] tipc: New replicast peer: 172.30.1.4 [ 445.094363][T15264] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 445.195504][T15264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.250476][T15267] bond4: (slave gretap2): making interface the new active one [ 445.278842][T15267] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 445.331372][T15254] lo speed is unknown, defaulting to 1000 [ 445.386553][T15254] lo speed is unknown, defaulting to 1000 [ 445.494292][T15214] tipc: can't start tipc receive workqueue [ 446.209399][T15271] lo speed is unknown, defaulting to 1000 [ 446.226167][T15277] lo speed is unknown, defaulting to 1000 [ 446.243488][T15271] lo speed is unknown, defaulting to 1000 [ 446.243585][T15273] lo speed is unknown, defaulting to 1000 [ 446.251599][T15277] lo speed is unknown, defaulting to 1000 [ 446.311678][T15273] lo speed is unknown, defaulting to 1000 [ 446.940870][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2387'. [ 447.473684][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 447.777487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.785849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.794316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.842421][T15303] sctp: [Deprecated]: syz.2.2389 (pid 15303) Use of int in max_burst socket option deprecated. [ 447.842421][T15303] Use struct sctp_assoc_value instead [ 448.219353][T15316] xt_NFQUEUE: number of total queues is 0 [ 448.436240][T15329] netlink: 'syz.1.2397': attribute type 8 has an invalid length. [ 448.445010][T15329] sch_fq: defrate 0 ignored. [ 448.471298][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2395'. [ 448.697062][T15329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2397'. [ 448.870606][T15309] lo speed is unknown, defaulting to 1000 [ 448.878240][T15309] lo speed is unknown, defaulting to 1000 [ 449.389359][T15368] sctp: [Deprecated]: syz.0.2404 (pid 15368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.389359][T15368] Use struct sctp_sack_info instead [ 449.415983][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 449.448690][T15370] veth5: left promiscuous mode [ 449.453850][T15370] veth6: left promiscuous mode [ 449.461177][T15370] geneve2: left promiscuous mode [ 449.472306][T15370] geneve3: left promiscuous mode [ 449.484406][T15370] ip6gre1: left promiscuous mode [ 449.498524][T15370] veth13: left promiscuous mode [ 450.041156][T15379] syzkaller0: entered promiscuous mode [ 450.047063][T15379] syzkaller0: entered allmulticast mode [ 450.198263][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.206679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.275447][T15377] lo speed is unknown, defaulting to 1000 [ 450.282837][T15377] lo speed is unknown, defaulting to 1000 [ 450.527915][T15372] rdma_rxe: rxe_newlink: failed to add lo [ 451.307458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.316396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.327314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.454694][T15415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2415'. [ 451.465649][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 451.474694][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2415'. [ 452.837300][T15392] lo speed is unknown, defaulting to 1000 [ 452.861783][T15392] lo speed is unknown, defaulting to 1000 [ 453.286160][T15431] tipc: Enabled bearer , priority 0 [ 453.300546][T15431] syzkaller0: entered promiscuous mode [ 453.306353][T15431] syzkaller0: entered allmulticast mode [ 453.316273][T15431] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 453.345002][T15431] tipc: Resetting bearer [ 454.032442][T15430] tipc: Resetting bearer [ 454.065846][T15430] tipc: Disabling bearer [ 454.575104][T15451] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 454.641151][T15451] bond19: entered promiscuous mode [ 454.647559][T15451] 8021q: adding VLAN 0 to HW filter on device bond19 [ 454.655843][T15459] syzkaller0: left promiscuous mode [ 454.662117][T15459] syzkaller0: left allmulticast mode [ 454.668004][T15459] tipc: Resetting bearer [ 454.694154][T15460] 8021q: adding VLAN 0 to HW filter on device bond19 [ 454.704281][T15460] bond19: (slave wireguard0): The slave device specified does not support setting the MAC address [ 454.704388][T15451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.714954][T15460] bond19: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 454.731721][T15451] IPv6: NLM_F_CREATE should be set when creating new route [ 454.738964][T15451] IPv6: NLM_F_CREATE should be set when creating new route [ 454.746951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.747293][T15451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.755514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.770902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.797393][T15460] bond19: (slave wireguard0): making interface the new active one [ 454.805504][T15460] wireguard0: entered promiscuous mode [ 454.813368][T15460] bond19: (slave wireguard0): Enslaving as an active interface with an up link [ 454.874871][T15451] bond19: (slave wireguard1): The slave device specified does not support setting the MAC address [ 454.902738][T15451] bond19: (slave wireguard1): Enslaving as a backup interface with an up link [ 454.911539][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 454.931279][T15470] ip6tnl0: Caught tx_queue_len zero misconfig [ 455.075574][T15478] IPVS: sh: FWM 3 0x00000003 - no destination available [ 455.076015][T15476] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 455.120881][T15479] IPVS: sh: FWM 3 0x00000003 - no destination available [ 455.125722][T15483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 455.430469][T15495] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 455.520482][T15499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.112642][T15509] lo speed is unknown, defaulting to 1000 [ 456.132677][T15509] lo speed is unknown, defaulting to 1000 [ 456.397261][T15506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 456.673156][T15530] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2445'. [ 456.710122][T15530] nbd: illegal input index 65508 [ 456.960041][T15542] netlink: 'syz.1.2449': attribute type 1 has an invalid length. [ 456.980172][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 457.069902][T15547] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2450'. [ 457.079726][T15547] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 457.162715][T15542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.220524][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.228971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.389713][T15559] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 457.503978][T15559] 8021q: adding VLAN 0 to HW filter on device bond20 [ 457.516087][T15540] lo speed is unknown, defaulting to 1000 [ 457.523965][T15540] lo speed is unknown, defaulting to 1000 [ 457.576782][T15569] netlink: 'syz.3.2456': attribute type 3 has an invalid length. [ 457.584831][T15569] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 457.607257][T15569] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2456'. [ 457.728611][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 457.753371][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 457.850876][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'. [ 457.918862][T15584] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 457.936653][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.4.2459 Not tainted syzkaller #0 PREEMPT(full) [ 457.936683][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.936699][T15584] Call Trace: [ 457.936708][T15584] [ 457.936718][T15584] dump_stack_lvl+0xe8/0x150 [ 457.936751][T15584] sysfs_warn_dup+0x8e/0xa0 [ 457.936772][T15584] sysfs_do_create_link_sd+0xc0/0x110 [ 457.936797][T15584] device_add_class_symlinks+0x1cf/0x240 [ 457.936823][T15584] device_add+0x475/0xb80 [ 457.936848][T15584] wiphy_register+0x1d2e/0x2d20 [ 457.936896][T15584] ? __pfx_wiphy_register+0x10/0x10 [ 457.936924][T15584] ? __pfx_netdev_run_todo+0x10/0x10 [ 457.936950][T15584] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 457.936982][T15584] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 457.937009][T15584] ieee80211_register_hw+0x34a7/0x4110 [ 457.937037][T15584] ? __lock_acquire+0x6b6/0x2cf0 [ 457.937072][T15584] ? ieee80211_register_hw+0x1411/0x4110 [ 457.937106][T15584] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 457.937149][T15584] ? __hrtimer_setup+0x181/0x200 [ 457.937169][T15584] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 457.937193][T15584] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 457.937294][T15584] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 457.937312][T15584] ? kstrndup+0xbf/0x160 [ 457.937344][T15584] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 457.937372][T15584] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.937410][T15584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 457.937436][T15584] ? rcu_is_watching+0x15/0xb0 [ 457.937461][T15584] ? __nla_parse+0x40/0x60 [ 457.937593][T15584] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 457.937622][T15584] genl_family_rcv_msg_doit+0x215/0x300 [ 457.937651][T15584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 457.937685][T15584] ? bpf_lsm_capable+0x9/0x20 [ 457.937708][T15584] ? security_capable+0x7e/0x2e0 [ 457.937738][T15584] genl_rcv_msg+0x60e/0x790 [ 457.937765][T15584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.937782][T15584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 457.937820][T15584] netlink_rcv_skb+0x208/0x470 [ 457.937848][T15584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.937869][T15584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.937891][T15584] ? genl_rcv+0x19/0x40 [ 457.937940][T15584] ? down_read+0x274/0x2e0 [ 457.937962][T15584] ? genl_rcv+0xd/0x40 [ 457.937994][T15584] genl_rcv+0x28/0x40 [ 457.938024][T15584] netlink_unicast+0x82f/0x9e0 [ 457.938057][T15584] ? __pfx_netlink_unicast+0x10/0x10 [ 457.938078][T15584] ? __alloc_skb+0x198/0x3a0 [ 457.938099][T15584] ? netlink_sendmsg+0x642/0xb30 [ 457.938123][T15584] ? skb_put+0x11b/0x210 [ 457.938151][T15584] netlink_sendmsg+0x805/0xb30 [ 457.938188][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.938219][T15584] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.938244][T15584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.938262][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.938289][T15584] __sock_sendmsg+0x21c/0x270 [ 457.938324][T15584] ____sys_sendmsg+0x505/0x820 [ 457.938357][T15584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.938394][T15584] ? import_iovec+0x74/0xa0 [ 457.938424][T15584] ___sys_sendmsg+0x21f/0x2a0 [ 457.938452][T15584] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.938495][T15584] ? futex_wait+0x285/0x360 [ 457.938553][T15584] ? __fget_files+0x2a/0x420 [ 457.938580][T15584] ? __fget_files+0x3a0/0x420 [ 457.938618][T15584] __x64_sys_sendmsg+0x19b/0x260 [ 457.938648][T15584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.938684][T15584] ? rcu_is_watching+0x15/0xb0 [ 457.938724][T15584] do_syscall_64+0xec/0xf80 [ 457.938747][T15584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.938766][T15584] ? trace_irq_disable+0x37/0x100 [ 457.938792][T15584] ? clear_bhb_loop+0x60/0xb0 [ 457.938817][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.938849][T15584] RIP: 0033:0x7fadf858f749 [ 457.938872][T15584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.938891][T15584] RSP: 002b:00007fadf9509038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.938914][T15584] RAX: ffffffffffffffda RBX: 00007fadf87e5fa0 RCX: 00007fadf858f749 [ 457.938930][T15584] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 457.938943][T15584] RBP: 00007fadf8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.938956][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.938967][T15584] R13: 00007fadf87e6038 R14: 00007fadf87e5fa0 R15: 00007fff3decceb8 [ 457.939003][T15584] [ 458.505248][T15587] dummy0: entered promiscuous mode [ 458.519188][T15591] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 458.537460][T15587] vlan2: entered promiscuous mode [ 458.670316][T15591] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 458.833125][T15600] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 459.198432][T15607] bond21: option arp_validate: invalid value (18446744073491447809) [ 459.214717][T15607] bond21 (unregistering): Released all slaves [ 459.508586][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'. [ 459.533108][T15632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'. [ 459.569027][T15632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'. [ 459.607215][T15632] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 459.741624][T15648] netlink: 'syz.1.2477': attribute type 6 has an invalid length. [ 459.896003][T15657] xt_hashlimit: max too large, truncated to 1048576 [ 459.903178][T15636] lo speed is unknown, defaulting to 1000 [ 459.926176][T15636] lo speed is unknown, defaulting to 1000 [ 459.935745][T15657] netlink: 'syz.1.2480': attribute type 11 has an invalid length. [ 459.953709][T15657] netlink: 'syz.1.2480': attribute type 11 has an invalid length. [ 459.953806][T10411] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.987402][T10411] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.992287][T15660] x_tables: duplicate underflow at hook 1 [ 460.007834][T10411] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.016223][T10411] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.263408][T15650] lo speed is unknown, defaulting to 1000 [ 460.279159][T15650] lo speed is unknown, defaulting to 1000 [ 460.578248][T15677] net_ratelimit: 4 callbacks suppressed [ 460.578268][T15677] openvswitch: netlink: Multiple metadata blocks provided [ 460.700390][T15679] tipc: Enabled bearer , priority 0 [ 460.727126][T15679] syzkaller0: entered promiscuous mode [ 460.733659][T15679] syzkaller0: entered allmulticast mode [ 460.794504][T15679] tipc: Resetting bearer [ 460.807646][T15678] tipc: Resetting bearer [ 460.839980][T15678] tipc: Disabling bearer [ 460.851767][T15656] lo speed is unknown, defaulting to 1000 [ 460.960238][T15656] lo speed is unknown, defaulting to 1000 [ 461.079031][T15692] sctp: [Deprecated]: syz.1.2492 (pid 15692) Use of int in max_burst socket option. [ 461.079031][T15692] Use struct sctp_assoc_value instead [ 461.106829][T15694] netlink: 'syz.4.2493': attribute type 6 has an invalid length. [ 461.182012][ T57] IPVS: starting estimator thread 0... [ 461.288307][T15698] IPVS: using max 33 ests per chain, 79200 per kthread [ 461.698898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.097552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.106063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.115183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.185260][T15718] lo speed is unknown, defaulting to 1000 [ 462.194101][T15718] lo speed is unknown, defaulting to 1000 [ 462.371462][T15741] __nla_validate_parse: 8 callbacks suppressed [ 462.371485][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 462.571959][T15750] tipc: Enabling of bearer rejected, already enabled [ 462.585403][T15750] syzkaller0: entered promiscuous mode [ 462.598983][T15750] syzkaller0: entered allmulticast mode [ 462.615330][T15750] tipc: Resetting bearer [ 462.841516][T15762] netlink: 'syz.2.2511': attribute type 8 has an invalid length. [ 463.353368][T15781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.370945][T15763] lo speed is unknown, defaulting to 1000 [ 463.385802][T15763] lo speed is unknown, defaulting to 1000 [ 463.849755][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.869403][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.878651][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.887878][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.236593][T15804] netlink: 'syz.0.2524': attribute type 15 has an invalid length. [ 464.245347][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 464.303904][T15804] netlink: 'syz.0.2524': attribute type 15 has an invalid length. [ 464.314432][T10407] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 464.324176][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 464.337283][T10407] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 464.358278][T10407] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 464.375627][T10407] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 464.650388][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 464.763710][T15830] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2532'. [ 464.787056][T15830] netlink: 'syz.4.2532': attribute type 4 has an invalid length. [ 464.831812][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 464.880537][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2530'. [ 464.895150][T15825] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2530'. [ 465.142183][T15848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2537'. [ 465.157971][T15848] netlink: 245 bytes leftover after parsing attributes in process `syz.3.2537'. [ 465.272303][ T5846] Bluetooth: hci4: link tx timeout [ 465.278191][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 465.741059][T15879] syzkaller0: entered promiscuous mode [ 465.746948][T15879] syzkaller0: entered allmulticast mode [ 465.895168][T15880] tipc: Resetting bearer [ 465.903243][T15857] lo speed is unknown, defaulting to 1000 [ 465.942201][T15857] lo speed is unknown, defaulting to 1000 [ 465.986101][T15867] tipc: Resetting bearer [ 466.120746][T15888] syzkaller1: entered promiscuous mode [ 466.156148][T15888] syzkaller1: entered allmulticast mode [ 466.238221][T15899] hsr0: entered allmulticast mode [ 466.243475][T15899] hsr_slave_0: entered allmulticast mode [ 466.249779][T15899] hsr_slave_1: entered allmulticast mode [ 466.260163][T15900] tipc: Enabling of bearer rejected, already enabled [ 466.685346][T10425] tipc: Resetting bearer [ 466.795591][T15920] netlink: 'syz.3.2556': attribute type 1 has an invalid length. [ 466.916334][T15922] 8021q: adding VLAN 0 to HW filter on device bond21 [ 466.960515][T15920] 8021q: adding VLAN 0 to HW filter on device bond21 [ 466.975218][T15920] bond21: (slave geneve2): making interface the new active one [ 466.986912][T15920] net_ratelimit: 32 callbacks suppressed [ 466.986932][T15920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.002679][T15920] bond21: (slave geneve2): Enslaving as an active interface with an up link [ 467.029153][T10425] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.043625][T15928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.055707][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.080069][T10425] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.088981][T10425] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.106223][T10425] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 467.301778][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 467.363349][T15944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.372268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.396857][T10466] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 467.408883][T10466] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 467.417313][T10466] CPU: 0 UID: 0 PID: 10466 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 467.426855][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.436991][T10466] RIP: 0010:klist_del+0x49/0x110 [ 467.441931][T10466] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 467.461538][T10466] RSP: 0000:ffffc90002f277a8 EFLAGS: 00010202 [ 467.467605][T10466] RAX: 000000000000000b RBX: ffff888029cee460 RCX: ffff888053f21e80 [ 467.475568][T10466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 467.483536][T10466] RBP: ffffc90002f278d0 R08: ffff8880776d74b3 R09: 1ffff1100eedae96 [ 467.491509][T10466] R10: dffffc0000000000 R11: ffffed100eedae97 R12: dffffc0000000000 [ 467.499560][T10466] R13: 1ffff1100539dc8c R14: 0000000000000000 R15: ffff8880343f8758 [ 467.507534][T10466] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 467.516458][T10466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.523035][T10466] CR2: 0000555563996808 CR3: 000000007bd36000 CR4: 00000000003526f0 [ 467.531087][T10466] Call Trace: [ 467.534395][T10466] [ 467.537409][T10466] device_del+0x280/0x8e0 [ 467.541734][T10466] ? _raw_spin_unlock_irq+0x2e/0x50 [ 467.546930][T10466] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 467.553077][T10466] ? __pfx_device_del+0x10/0x10 [ 467.557919][T10466] ? netdev_unregister_kobject+0x344/0x450 [ 467.563726][T10466] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 467.570146][T10466] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 467.576910][T10466] ? rtnl_net_dev_lock+0x36/0x2f0 [ 467.581952][T10466] ? rtnl_net_dev_lock+0x36/0x2f0 [ 467.586986][T10466] unregister_netdev+0x157/0x1f0 [ 467.591922][T10466] ? __pfx_unregister_netdev+0x10/0x10 [ 467.597383][T10466] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 467.603197][T10466] bnep_session+0x29a5/0x2bd0 [ 467.607961][T10466] ? __lock_acquire+0x6b6/0x2cf0 [ 467.612901][T10466] ? __pfx_bnep_session+0x10/0x10 [ 467.617930][T10466] ? __pfx_woken_wake_function+0x10/0x10 [ 467.623583][T10466] ? __kthread_parkme+0x7b/0x200 [ 467.628533][T10466] ? __kthread_parkme+0x1a1/0x200 [ 467.633555][T10466] kthread+0x711/0x8a0 [ 467.637620][T10466] ? __pfx_bnep_session+0x10/0x10 [ 467.642638][T10466] ? __pfx_kthread+0x10/0x10 [ 467.647224][T10466] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.652428][T10466] ? __pfx_kthread+0x10/0x10 [ 467.657014][T10466] ret_from_fork+0x510/0xa50 [ 467.661615][T10466] ? __pfx_ret_from_fork+0x10/0x10 [ 467.666718][T10466] ? __switch_to+0xc9e/0x1480 [ 467.671399][T10466] ? __pfx_kthread+0x10/0x10 [ 467.675996][T10466] ret_from_fork_asm+0x1a/0x30 [ 467.680974][T10466] [ 467.683997][T10466] Modules linked in: [ 467.689124][T10466] ---[ end trace 0000000000000000 ]--- [ 467.696520][T10466] RIP: 0010:klist_del+0x49/0x110 [ 467.701961][T10466] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 467.722977][T10466] RSP: 0000:ffffc90002f277a8 EFLAGS: 00010202 [ 467.729110][T10466] RAX: 000000000000000b RBX: ffff888029cee460 RCX: ffff888053f21e80 [ 467.737097][T10466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 467.745254][T10466] RBP: ffffc90002f278d0 R08: ffff8880776d74b3 R09: 1ffff1100eedae96 [ 467.753330][T10466] R10: dffffc0000000000 R11: ffffed100eedae97 R12: dffffc0000000000 [ 467.761392][T10466] R13: 1ffff1100539dc8c R14: 0000000000000000 R15: ffff8880343f8758 [ 467.769441][T10466] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 467.778861][T10466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.785476][T10466] CR2: 0000555563996808 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 467.793531][T10466] Kernel panic - not syncing: Fatal exception [ 467.800123][T10466] Kernel Offset: disabled [ 467.804441][T10466] Rebooting in 86400 seconds..