last executing test programs: 2.000809821s ago: executing program 1 (id=17499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0033dee99c504c05076393975e2e82b30800"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept$netrom(r4, &(0x7f0000000040)={{0x3, @netrom}, [@default, @remote, @null, @bcast, @netrom, @default, @netrom, @bcast]}, &(0x7f0000000380)=0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0x500}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 1.576022024s ago: executing program 1 (id=17503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x800, 0x9, 0x3}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x30000000, 0x80, 0x1, 0x7eb}, 0x10) recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000001}, 0x4005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x28) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) sendmmsg$alg(r8, &(0x7f0000001f40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0xfa}], 0x1, &(0x7f0000000240)=[@iv={0x18, 0x117, 0x2, 0x3, "f95537"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x18}], 0x60, 0x20000000}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="ebc0053273649f3f8b6f9dda07c3b8d0d7369068a43535bb5bf42d323350766af79df5f37a861b853c56a84a317a6c7c39fad3e3d06355903442dede8f6258194d826f68e3e90b792a2536e38c24601333c6adc0fe0feea6b43c3c62c7cfb62686f8c22ba15fa913cb739aed23bd788e0e0810c5696012c307cab6242adcdbc48ace190a6f61202c678162ff2bacb766ca963ed2ee0b0eaa488a75ccb409c5142eeb50436423935ea66e196df67b650086221b541d8df7b5fe3b059b9bf80a62a881c42cc7c594e51cfa7fcdef902ca3188e02bb0c39c78473", 0xd9}, {&(0x7f0000000700)="3653e151f0ce52c7bca8bf4aa17862134ef7d6d1447084579195a8491f8d5abdd5988c6a6ace99e264d3eb560047b0c2fd7fb46cfc798685fdb4f435811b26eb581ce481fc89a2de19783c2a1ffab3c4ee45258371ae98f75f04de47a86454dae66ca00e4fa922cd6c9cb3a63ed5047249b6014f876778d35cf495deff3e5492987ae7d885d1e04715639164e4453086610825c703b88dab13a5b6aea9a2264eb6657ff27b5f8cde7ebae8a520277a39f85ee5732a9bd40326c32745eb2e71fb301d581d745049eb366ed35dc1f77e749deb2acf6460536353757bc538a9fa812072a506f138d929", 0xe8}], 0x2, &(0x7f0000000340)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20008090}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="78035c78ed4944b2c1e9ec0a671e25ff62ca280b1b35deac930ee10b9b6824bb352edc4d054046f734d01f21c94610c7ec4b2333861a80cf5e6c87b14b4ccc9c8b0777f56d690d765f31ab65af836dfe06d607d0e117ffaf064295242e559bf1b43c247175390f48300331bed4c103e945e6cdb7d853fabfad8fed0f8d99eb38fb33214d9c185b56504abf0e153a857d4b1eed58117863d6d8721c64f9ac07322f2bf30551ed58c823e1b9ed4e425d41d34b1de7ff050a9c517833f69903b7ed323c526b22", 0xc5}, {&(0x7f0000000380)="90308be4211147fb2414879afe5946435312b1c7278bf5c3fd894738d3971e3e", 0x20}], 0x2, 0x0, 0x0, 0x1014}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000540)="bbde7a751aaafb17d04105e5b84598ee3aaa34b59ed3234ce7eebafd4e77d517d75baa824893c1709624892c5a1293950426f086b2b3eb2d1852a1dc3f0196", 0x3f}, {&(0x7f0000000900)="f50ed65cd2671eb3530a11fb018515b406580663107a12cc559f6057b02179b7764016be50778032f465f686d78606a985e6309afe5bb1cc320ea8d59b6e0058b626d6d49be714679a507a731a8b66961296a02d31b43d748871783ad24648b0f453fdb9763de70cd666a9fc5ce4cafdf10b0b1076d357592cd3c469313163101caffaf47989f2ec714fc09ea1009a6e6d5fac82103b90bfb5ab770768b65dc56927ab8c89f9cdca85bb4e691a166a54d39f9a7aab32e95e214e83be8b7c139bdf7cfd72b1b0b39477a45c36cd57da8fe2a13842efe746413d350311620c3e83966a237131e5", 0xe6}, {&(0x7f0000000a00)="57e979473a772bbffef8c458fa1a91a6a99fff1885cddd4fea52360271b3ecc71f44f3ed5be8a79f7fde86abb16dd8c0e13b359f6ee7db47ccd109c088685c1108604a43bb8997dd76a2e1e65c93b610a1f90567e2226ecd411c5f764b60f2122a4278", 0x63}, {&(0x7f0000000580)="47697e1322f8cf6e2fe86aafe7faccd6b363ae22a8a52622a682fed0a9e537f6cb1ef359d4c0461eff0b866deb9180131f98e2c04734e7", 0x37}, {&(0x7f0000000a80)="7404c89af005241405f4e1c2316146e730fd508bb18e335aa65bdfa45ed8a91b0bfbc2c677cc974ae672c97ae10b452e5b93c1857f0f165b05cec56db084d6b7ea71657778cb56f92150499099afb99f13f6d56ac3f1de47cfd375945b09593f5dc6349d472d4fcb92", 0x69}, {&(0x7f0000000c00)="cbe49caca6abfb2b0e61032082fb810b91cdb2afe442a0b32786cb20d9f6e2c31cae5fea18797133a83a631cba29da9e7bf273be7927d323d9191c91e69ff555a776225a5f8035611b16341a250964527d811de26ab38d9a6c0912f580f5088c8e9d01ce512bd9f195a32d553fdae58a1683c139f965b16d0f81dd0c69123223b8f37846e35580cb5fef6d0c35b1aa4c41781364010c447297299906c97cbea2e6b47ba012499f379a48bc4aebda8fc8d799fc9762a418dcf248a0cafbd38c94e2d3601a9346cd090f28c0ea48a0e90761eee2acd757f0a64f7c002167154599c40ab0aa7c53a396da89e705f316cad38285210960b197d604", 0xf9}, {&(0x7f0000000b00)="f352e4b1241abe04b6652feafa0c9776761f1831c6966957fb0fc511956234a3bafca7b4f5f0ee0033a3cd1dc7c266481e4ba79276b12503464f46c80e", 0x3d}, {&(0x7f0000000b40)="55fc19c1", 0x4}], 0x8, &(0x7f0000000d80)=[@assoc={0x18, 0x117, 0x4, 0xcf}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x78, 0x117, 0x2, 0x64, "5e9bce052fc35eb2d1269f5e45745109887093970e2dacae5c4646734f5fe181f7fbc99173b08e4f20fc25fede4c6024255771186870f791d34e9455445757ab3b1ace5e872a49e6293ff078a0676e3fb312ee312a097e69a7dc8e36579dd5123bd00e5f"}, @iv={0x108, 0x117, 0x2, 0xf0, "8d0700893a32b3dfca0cb8a8f4db61b90bf558f8b7e8d1cea9734b62473c01f0d8fc09627cc5c513a94f08888178b6a4d46f6e6d3150957efcd8702b972dc3d8768287c333e7530d6012c86bbd043e73dab5ddcf8dfdf26e8c939d625609d0d857fce1e0474895eef17aafb57318f30b0fcdda688207003bb00ca3cc0e51339246fc02ee99f0438bbe9b9bfce1da4c0749d68c30dcf70ff9c5f7fd64a5c134605e5633760f3a382ede47490405b6fc0141d46891cc900bd0483b68ed670f01bbb901ce04443a78047fa86af3a44e4c59cd8d95a7af941e13515d1431dc6a0b6fd6ef34e69ca378c1acb32659cceaced6"}], 0x11b0, 0x20000000}], 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd26, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x186e, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e0e, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1aba, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)=@gettaction={0xa4, 0x32, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xa4}}, 0x4040) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000000), 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.155486738s ago: executing program 2 (id=17510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x307c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r3, 0x400454de, 0x0) (async) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c004000", @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x4, r10, 0x5}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="2c2a903ff34c9f711d59ee3d2d2804f2e3566a05155d38ccec4290eed075a351c7a088c31947ea08cf687bfb0e8ffcca91381e10fc63fa50d3f8866222f5dfbc5204ea", 0x43}, {&(0x7f0000000140)="616c998b72873393c494d7c7def821100a2d42fc18d809a08d58000000", 0x1d}], 0x2, &(0x7f0000000ec0)=ANY=[], 0x13a0}}], 0x3, 0x0) 1.096288699s ago: executing program 0 (id=17511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="e9436d200a16b6ffa2b02bf66eff0dfdb01dcbaf41ae4964ff9ee4d83a7c4f76d78464cbf1bd61e5472a1cc73549d3fe77defba843c992cd9902c2d532b46d4110d12d662810190e0de9763fcb8f3805a648f40795a145a1040a29fc678cef94485cf8b6d4bdfa09d668ca33f55a1920cd0323eedd65e8d5f54525b9fad04422518347474903eadb24ef9da7275737c7cb0af6765ab7c56b5fccef1a32cb49a036e8de24d040a22ea0e4d831b78ec358b31e1d4f38171b688f52733acf8d772a5b09ac8d447400ee4a9b1d86d86e1995a7ca14b8c51afc8534294b9e8710112632556d729c016b4cfa6a59e7049f2880d04cfe", 0xfffffc5d}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f0000003180)="7fbe8940c94d288f0301ac7c80cd8f86343afde267eb12218fb4bc758607e5de319aa19253a3d7860835ce7fdc7f979ffb853df7cb8c7016e1d46ed71b7458c978f424f49fac49dabcfefad069d6a2c10063756f0d35d3ba30aac3ac1a20fb2fa105f335258cfef98b79cf4dd92e070469b2c4c4efdae43d29b15c2aa0af7517d3c83c32d7bf311b194eb35d78e67b35ee1650cbf420a2f9d032f1ac56e779d9cfb10bde80924e4995e2e83da7e0d79015b1b8035d7cf3f50789b941d40d464776656b7f197e1ee00eccf75f8be01b897d204d96ff334635c721188beb1331dd2a7dca0bfd04288c175f5e8d4e83c470fb23e9a403ac0e4ee492cf9df2e7cd4387e147953443cc3eee61f2f7f367fae82114c04bca21a6f116c461b247048d13112ce19050be78dbef51d5991c5dfaae5b27f4e451c762c5500ae524d313c0ef515078ad89534ff04096eb7419efbe0a5e43c884098dfc5f97ec039d1f7eb4c3c0c7514237fd31045e3958187b3c9172183d2904d8799e741daa72ace5382c74b47d2c5e728ddffbc776cdb75eb97dbdb331df7816d94148cda2aa0ee0a956f8209e32cd5cbc670a0c8ccad8be69ca0af205445fed0b67e543dc0791896db6686376b4764e9e8e0ded3fbd9dcb6f544ffaa95fa0d4528d73a4c8a55d7d6b5e6de5e519529aa3b539a1d9f42443462eef7d145849c8101bb68e8e9564a102ae7126278c666b6c3ea61f3cbb6b81e4572f545664d5a7dc7aee171a0affdeb44064a15d7a138125fbcb469266ff20f02427f29a47ef1cbfc090f3670d5948f0e9dd43e9f8fc3ebf32e117aa6162729f69d48c676ed83329748e13e8e1b08a0dda3dc8e88491d1321cff604469836aae04e8fdbdaab82d4a1fc1b81aaedf1f601ac30cbacf7da8b000a7aaeb294f2c7dd828faf175f7eae2a3c1cf354de82cb782f6b2d7257f245fb3fe46c87313e4826b575c950e3f032f7797b5cf39e4f9b9996c10e63b6aecec04f35f1229e0bf9072201b273ba45133dcb7bf496a5e4c4186281737db3760066ea7c257251e44f9a04c8435b00e723d9d866c93854b0bbd1ffea188f3d8db165ab19976cb3d447892c323df2beae25f62452fd87d9078c82bce94bfd67d53c5bc88bb0f7996dff93dbe85eef47a47c75ac2ec5e1e521251ce4fa4bda544f4444cd7ef52f55bdd0c60e5012c8efca94c0e1773e748544a3fe2f1b6d3fda21c006762f006dfd51884f6fb5189334eb3782333c4c2f6b088f7c21615df4efa77a5250e128db4ca3c190f75ea009e20440a7551b28f10fd62ed6c2978729ffe4b3ad2e458baaa66d8ebc2e1397a5b2f0c21bf4aeb4a65929298452c1eadd7453d3533d5d00ee7b4218b2cb2a939ea14e38a61219dd1bf0f18ec05269d4785ad31312ea32e8d01c817cafe3959f7b0f110a24e3c4a6d6505c79bf1c0ebb6030ccada48a912376b43b4d6c71204e5e7e0e442fc9d8da00854abfbe0f63ad8567a88706d4f85ed7649ffcd172677f460aad0e1386050606df7013d6723a39e418e1efc01fc9be182629840414b63fc076e5510fbda6585b6965e8b7e870c8d92f969e7f32d532f52c938a16e37471ba9a47f96ef7f7cfa05bd8958e99759cc9db573ae436ac62bc116a1ac1eb5b15ccf6aba3736197520e7fcba26f7525fe3fddde077eb8dfc13f2829cccc2f891e64bd227bfc8e5cc396b3474b2288ac9bd0c2d612821208f54cdcf40978143e9c96605905cf6ebf07eed06143b4e386c78b792c4e4310b0dc721ec8cf014ff18123f7090d4f2fdd97b752e809ac0b1117e76d451c4a19404bd804a8833f24e56f9f5073b4271fd784b1c64fd4d42d8f83f50d3cce8355bb0b780c8e51d1bfc1d767ca8ad64282c99ef4bc38a86f52f5e522cc1b03e89fbb8767fb1f0a28aeb5853acb3cbbb836d8f212c8e1fb83fe2d356d5e285afc1955131c3fb0ff14fa26738787558cb2d2206d1c0cb91647003f61d98fd693b1faa8ef690e4b7c7166e864d47e47cce7130c8e47ed3686ffcc37257a1c4af060e266c6b7cc4091b0bf87eeddfa62aee8e5f7444673cc17ebe78cc8e8867d38f22b8ebac0f83b86aae7a13fd0cbfa5855ce6e2850555c703ae972337c3ddabb66a0978a5492a2024b139390b99fb9d3a35e49a1dc483daf8198d72b7108aaa63b94ab883e24d19427bfa2b6cad83f6100f8cde6a4f13e3ce5f11fc2e3f333c6e18420c60003def2a00eb12e354345e2e0ad32c70c699b4ea44b843a324addadc0857ba9ab8638d89c04e270e443c64ff7bd3681e7c474de16375a25c60778d146595a4fb65e164e7cb43c8bb37b925814c4f355a866ef6f0e78a7abdb200e5c51bb3107c1abf98a98be7f857c868dea29c700bfced92221eeaba0cc7dc65e17dcb0d124b461714a9bb60c07ac5f6d4aae174ab2301da5088a2188510e7498e1d1ce28fc70ea0dd30b50593763207fec20e9eb2f16998dca2020747b0b2806ee9ef2211a39ca702e5b85ff4f2a27e14e1cfe02960a203511776101c36e87a7289c831f78da060509cf1aa73bd8a384a7249858423b8570041cd45b8389a0fac17309ee1ac3a90aa641249da6233cf8f335a08c1f96614783e626c64c97618189039189a4d5d5289c9ea5cca8214b482ccd9e2d22fc838fd4e3ad1cd9ee3960005947f91e968057a3f30b96f98639cbaff11dde1c060632fa6bfc383188e04a25bdcfd06b6226b8b11ec0500f7665f650ef2b4a25b3fa5458dd8e93a241979a7689e54e68aaedd34ad0a430db97ba82076eb5a2e3eda66cf548c8eb7955c4aa6963f33a66e1e11cba02a0950fd854014bb4022b34f92a0044e34ac232c739c431d6c9d9543d6215ff31088558e952f4edf1ab7078f770416ffa92bb795b6518523073c4ca525ac1e5d0ff4fefcdc126801e93c765ec962df0e15bd38fc255ec76c2b353293a670c1aebce143c4f7409408fd1323e702019358fb35819e3fdf85fa3cd3ae0a24863829779c78fec413534d74d4365ed1374ba3575c13db0dbe173c179265b57de27b7948663e7b21d9a60f9272eae1fc4bd4da502ce7aecb9f0bd2411d3de1fe4f8d2f92d1a7d74ded32ad2e096ecd4fd756cfc92fa924a5403b6e65ad4f5abecd2e05dc00f77f617d78223b067263d1fbbf9823ac9f6e3109bc86f98f5694203e4e9b97544aee4f82cbf3e5758d2cdc1401b32aa5c703fe6b05306e509ece0f2b4a8f352c04ec95523fdf8e789982d6f83f49ad1d5031f376ac19ec2c034da78caed15f69a57c8c8afc6697b35f4e7f7534c1759505e5456b3085e3790484ffa7939414a8336b042320d50bde269c2b8313c4b60392f6446629832a0fb7bf8e05e74cb8f028231c54c055db6533500d759daf3a94d36178379d1b7f6b61d6bf22d43d4dca199e14573160c29cb51d0c7d2448be019ed88acdf1d7ae741f2472a7b0e6232b8f1b7e5bd365db0317a4f6768ef09cf69b1df0657d6cc5c857cb20d9a1412b94b2bdd9270d155038dc1893bc1b69d7a99edb1561830ca2cdefdb684b3aef519244020aeb08cd63db50b6f74fe50d5f1a6dd9f3f2dda8f0ec2caf976825edb82b9c2e62647af8e511acdd7354b9227970511d653dbadd337402475f0ba5498dbbd7cbd914da97741b6bddb477e03a6017ff02c732213b993d227d5f4b165fcbc6938b255a2670a796c9962503f5c74038d5a70747418d72a022fcbd8b76234c0b9127259345433b329f2fc4a50490777085de75a177c891270a58fc2cd2ada33891b074e1388758f5ca2b399e31e9fa86c73ffcdbc35d95f42f5c8ece2ce02901c596181fd5efebd15b22250500ac1ca4c9cffa04550f38890d3c2b2fa0068c15f55f3143b3f141fb2729036b7cf89d3f70bf7bf06424a7b6ed5afa0e3564cf1525bfb5bc71167f8daeec273c268b1c39410fa215bd4aeba1bc4e06847f78df06f1bac6269f0cb15eb97c86ee37ef1d6150416e9ed2e0a5346c6aaba25a952371f0b29bde60f5e3a6d7d3421fa3c8f52c2909d4959ad427cbaf8b1c0212778fab064f84932506b12769fe9160fe410492c992f72b8b95c04565d8c26f932bf444246af94627cf050c22f8f5fcd524419d3d859dd2ad32703f7f46bb727764f91ced126971080f7cf1758ace31ee4842a91ed71ba4661c005c79c9d3cc3246912ef2cb621cb1ce3bbc905bdfa292e2e3bbf80afc42a300fea291ea270c52b89c44c8e623bb5a30746bd91bb1c9dedb9b5f766d97cf5f325da3d2e64bd7a8cac2b7dd8417ad5126c15dd3fad71e57f3656eedaf8da694208a9fb12093d82349b6ac54c06a757a994d0346b2c594741b6f7b24e220439265d4092ad955272f6383d01e29697cb42318824dff26c60c313fc14c05141eeb03c2d382401f7c0ff55b3a2f34f4dd63feaf7881a6db01107192fd84f941613b16f3ded60167b74eb76ca0c02cf6712470a76c23d92d7b920d9c45628aa7b3245b44075382049a4662df1968169a776a224edb1c34be9cadd87bf91eb4458aaca24c9e6ed4d5e490b90ed534443142150db3c9f39fcdc893737e67d6fa13a4aa246f5db84de756c6dfee75e21d9e4286df329ed155902c9dc92922233d879b83ec577fc4d647847682142c0feb4ecf56b82727ce0b857dc0a35189f6d960da0ae71af0b962c803fe80f52b0406ce63967ff1e6c1d62693843fee807c4fc5c084b3225a3f71e2669a013064da5625d335d461fc322e45d120cda3f4909a1acda15cd906dc480e5c2adb47648101c286356b9071bfaa7d45082b2e9d49d24ab2274ea06cc7872b5a79f07884b84a1fe16ded75ac5a5def9ea66c18bde12fcbc951caa513d7ce7c8810b57e8cf8fd6907a907021cdb95a1a7633c8f09223cac354b91edfd673836d0143d838148a3486b915ec9b69d0035d425944cd8672b6fbcd7d55318a1b60e61f488b8a3d1cf413a74af309156ad4abc7b077c2bfb7ff04b75f61eb2e58dc8079097e616358cae90aaffddcd09920736ccb82b32032a90b4eb5614a1f1a1d7b8c352d2435559f611a945a3ab4c99045ae6e23cee3501487263952283d1e8e3784c2183b6669f0a1ff0f91ffb76f13ac0423560a7d172258506927733e37e06ee9be2848078a7486cf362b9ad00b4666650904a34130ea857a6bf0a41915382a08fbed8835db448c54b7552e61e8c1c9f76e86b9c66d88eb24642f6a086af851f022a3c37e74bab7fec6a4df213fe9588b94f77cb920c1c550a6cdb845cfb12b09cbf76be3e171a0f34fb0a6ea4423a4742a63a077b8a048381843ca0b804b7848b92350d045e9d942d7f4177f1cf31a06e90ce1b2e78836595b8b784145a48901e5b20e44296f75a6dc3d13ae7a32975df0c9005cb7a175b32f69e4ca1df7797efdb8e6076356ca5c29e200840bf6a6b2b42baa83d68fda03618a35bf933f0ca3ad4", 0xf0e}], 0x3, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x4, [@var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xd, 0x1}, {0x3, 0x4}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @fwd={0xf}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x9, 0xfffffffe}, {0x2, 0x7}]}, @struct={0x1, 0x7, 0x0, 0x4, 0x1, 0x9, [{0x8, 0x5, 0xc1a}, {0xe, 0x4, 0x9}, {0xe, 0x4, 0xfffffff8}, {0x7, 0x5, 0x593}, {0x9, 0x1, 0x36}, {0xd, 0x5, 0xffffffff}, {0x2, 0x2, 0x7}]}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x10}, {0x2, 0x65c}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000300)=""/223, 0x10c, 0xdf, 0x200, 0x9}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000003c21700100f0ffffff95000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 1.095504736s ago: executing program 4 (id=17512): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000013c0)={0x0, @local, @private}, &(0x7f0000001400)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000040)="3d081927e167a3c064f51d780c65ebb8da1a4172469b90d7a8aa1ed825956143cda7f713feb80d62bd5c3435ec06f5cb3103e31b32bf1d54500f2123d9ccbc0c89389e522c67aa26fb0723cc7ffb8a7d41beb544c72e74f104ea953033ad4911dc5724ae7d1b16", 0x67}, {&(0x7f0000000340)="b824745a100bda79ce0eeaa929f38bb2f1734a4813f6ea607bccfc05e862cfa13644831d1a15c649d1c2ca4f4415973de654cf369169bf8cad77b899", 0x3c}, {&(0x7f0000000380)="f5fb8b814cd9a184d6e30f2d6c551ed3d97ec3e52d4c3b0103f4124e8c9a5a2b8f5d61edc8f9d621c682a27008e93a944f5e37e5af17c62781939f2974050d3053ca09d432a3740a45cc0bb9d84775b4e5a73907ce8a1a61b12af6857a3b01c3085dd6538be8d41303be0e89dc1a5aa37052c3d5c7eee259f26d72a7e4a301d79a4937fdfaba3586a79e12f901ac6c20c46395d7b1fe30d62aef5dd75cbab15ebcf7a24e7be1843eb5be93ff51cfae84c493ba74084b6a7fbc5225861f019de4a51af7f5290d52814baed82af0d84db21544f2f522445e37bc8c51bc65111993d768b0e7f5edc9d0d13a9cddab94234f323eff49ba1d890b67a140ec4605d7b282f7a927b280c0ce13a448a651c0dbbf5f5a47f99f5c4fc970170113425104c590a9b539334bf934284ad8228886cf89e1672a54e4e4636da50c6b0ce3012979977d51a86485efd5dee335974488c8ad43dd616f21026d2151ffa671353605a2c782a2c3cf9430e53f31cb49d1a4f8facb85414ad76dccca7a4d3bbd7cdd51595ffabe5fff71b7de208305650856fbddea6a8c873c38a9c8d4992ba9a57a46ac7caa67f57508659e3baf01da285c4e3fa1ae3e8161e21f8c58dca0faa21133a3a13c9f205fc12585c02f98c117f6a947037e408c576cdafa785eac91385396aae74b30f8ebed75621ad8be10daba6229b5fb427da30177016f23660488d2902a73ffbefad4385f47c1ab686e603809c148b32a5771c45d17f2c22263bc9951187784cfa20aaa36c8977e02ab3d35ddb7b704f4fd4c293559b0f447de0beb5671c026ea486ef9abad3f67d7bb51f9986760ec4c873ace457c83559bce001ad1bda8ce5eae49c3874404612c13c7530ade218a68cf100a9634d9527f58e32bcf87572d720944ad8e934c1cbe44a6b771a1b797df6d76c6993871c0ad796a15864fa7f43fbe2ab143ef95df5203f11a2f2c54b5b23680906917c831357b162920579c7701ca6a36f5224b66667c14fcb5a4f56512670e421a18f232d67c6419ce44903a7b3a468cf382998b58ae3da4735b0d7d22e1f61bc3a05177b01bca8c181e205749bd5e28402cc00223b8d4365755bd2d74c6463eb71b9ae6328870fe1dafdc3fa85464c446a8c6cbec133c0a4c665c697af1e669e1f355e93b68bd57c9b52068ebe9eb16f907944dd2f3722f3a89b0bf70a466f705124e7f541ec028ab1b5e0914ff08fa9c5821ccfced8edcda3018efc8fd0a988cf75b06746e64cb199a88d6c39c1b093fbe7fb27508dfb3b5b1ef828157eea71a349fb829a245d030081e093f44f3659c771ba758f10232c3ca2c096460c098d395ee3c51873af6bdf6aff67881cab075a948947a07200e23ebdcddc2d838370170708723e35a6656159eb4c412d8c5203b9bf797dfd360f7b8af1dc2b873f055c81bc435fd288451f006757398ea5cb9fe505252d87719ccb9cc5fd9ab9f7eb4990960fdc6ca08d9f8925d4ed3876cc3774b33a84a7e1a45202d1ccb00c03fbebe07735c2466d2b433b28c6265df5ccbfccb14f916221f807eb062e68eeb6218682bfb525ac60359ad886eba44ddc53fc6beb7eeb556caeaf4ce896085c465118f1b442fb886dff451b5e891d3a8416124765db1b2a44283d19e7cd410c55063efb3c79081f3352476d8dacaf0519955599c77737a9bdd3790f56b91791238e21fcdb775580cd3f06b998bb7ad2348dcd7f71b4f18db45d5df8118c6888b60e54ffbc7ec5e33f0967b194fe70686c7ca4e8c2fcbc99acb070dac7e213bd872fe92fb497102f559af9eaceedbec69b6e0eaa76dc7261857b1a6a5b8abf3285373823085ce680197706931ce2a44e295a100ff6fdd12c37faccf5ea4c55c15a284b6aa22af0d644c5ed65ba856128cb4c1574a5f219ac9da2ec2b0d46e5881a3fc1d747b2fc4a23b3ea1d6fa2045b62b8fd86b4eb326901d5917dbfc34018394e1daadf13f5fb3737ac63377ddc54a0a0dd85a07576cc3d24650bb2fda783c8a34b70db1c66f096ef7a3398a66bf27bf58f73c85ba03b02dbfd435487f31e756aca4d9f09534a347f8969a096b9973ae9103ebcaa40434e704085b6289c146af3f38de6c8ab4e4f5df5eb545b4e191cb1f640270cfcc11e8a185fd9ba7d6aea1fb6a06b5d1109acbd42616ecc215a174ea1939543b7435b824dca8114e9c853c4ccf27f8f4021dd64e609c1d3976a49efdbb16ab8cef7725834d47f3a6627be40512872353377819954b8323b79e2235de20ae4201836d5b050df31d61ca03e27cdc1c805c4a1e1bca3438236d58b43ba24d70c653a7de6ff50b00b0a6bfc36bc4983968147d2e6a16eb7529d0bc6d470c2c0d563cbe79f994a8e3ff779e0408c9144cb72cbe3f7706f8dd1d95b9d40786ffcb07c7e88e89eda8051f1851223f2883f28edf81070ada4742f08c5cf6271d6b5bc7a6ebfe8e3bc620fb8f2ffe853dac471b822ae42938baf1ec353103a8d4b6958f1e2ff667c67edb89567932f4bad22b92f1c302365f7a5fc88bf86f03fb97e1792f6deed25cc992a765d44d8394b7d1aead48482523bd685fbe71e4611443eb7711d047f3b5d07863a5c5d789eef8820309c0df0da09d9d2ffa2d294632924153eded02802641c9a55e901020c7da6a2045f7dc1df9b2fccf0aca81e4cc2449e3a675a2cfc16fece31796ac27bdd3d23e2f553f4ed826d92af58955646cc408177ad7fddb3974903a86e55ff1fdb64fbd63a00bd8cfef5139120453c66014746d51f6996d3ab6cd4b76165dd125fb7bfbcc6a23cd2ac3a32564cf7cb11893d2a6b56f9e6021b64377f10ff0d801cb5c9b26595f79556e3efec0d93a0c5e98b49f8746fd2b79f4e9cb6472bb385fe2675bfe279dee0b000841497d398aecf757e696a2f0c10b95c2def9734f1ca7d48777add3b4e769f7d3fd41d983de87808175b3e22f4c2e7f20f12105212499f2af752bf5c526526a152c443690f6eef06952cf1ba881929e384405a9ce24b03847126487b9d7a63d2d8bba0004fa3a012ea5947aaf01faa2c34a6b8f07cdb3f41c3ee6c44bf1305e8d265abb34a9e3d47e5f2ea77ac29c1f1a808d716d5b76f4e75b4ef3f09226bd9747d9a81b3e12abf95040d1fb11e6c30db20415e6cfa27c94d1b86f1164a172da3ba32a51ff1e95c2cfa2aad919d92b7449e5283b414952fce624e3dab54b96df13345f56fc050e21995aa052f321386eb59cc5e20321aa4fe15ec7bd032456117e84397942382bea2f448db08a96111f21926bbd610ede8537679daccb084d854f3af09b6d87039c2e63ac61efae89f2622d405fc18acf9c04a0980b68061f6c552324adf6da2f82cda4225d8ba52df46ca6772b4bc81a835b15d15108fcf167c33c75acc9bc92b2767f525916a038e49360088399b20bb0dceedca0d3be620182bb50f11c119e6b2d0f2db801c1a8c132ec314523a266d8881f0eb41a5f394f14adb6b7a0edb847d449517317d4f063f6d7e9c8e3187ccb3e471ceef5c3e292177d85fab3f3ec603b465a3fd3d48d56f2d150520fd2f1d4f125e1f9b23fb35569d33b8da805526977be22be132adbd165f9945154b354cb8539667922e3727180baf08b43189518a1d7f734f7baf1a28795e10a9f3db326b699685bdb4e393684f10f1cd6f5e0853ba606fdce814cc5775f2ac99c38e49fc387c225b65eec87b33c684cbd593f6e244a9ec3855df0ead1c7df5d0cd8428b80f54110688bae6e3deadf011742200019fd06925c9dbed061378c91549e44096049343ac20d7336266de3e60b1a348163be1e29ce52df542387dd758a0ec0149723d4540a6bd7d505697d2734130bb9a7a3c89047b9987d54be7bdb68d934caac5b03281954027b1ef6dce402e4472260b8f71de997862cfea78452ada7102b46ff924b6f3161b4b0ae05fa36e3515002999fa495d25a33e2da4197039cedadb86aafb4e5d1c122aa0e15d26300aca50c5635775fe5f0247596a0bf2ec0ac66d011e95bd569952c46b2e7e12834ff83c86173813406c2831cad2c506628f1c7a91e80bc48656160fad7b627ceab5a7df963dab647eecca224791f6c6d68a920cdeb08a1e7dc6f6f6f0a41219537c371d00ea5cca679abcf01a8a74110f6c85768b6aad29baa230e0a51d2f919583a726d0dab23e84cffd66366cca571dab63921fbc98730eebe34774734d350ba908eb8b98060f93760437b7c95c8f04e9666ce79f5d08c39205cbaca6b4597fa8cab4affb519c9523895dc267a75960e9423103c59cbdc4c9908e84f98a0634c133e3a74b8930d18f294a0e1f4299c9cbbd970104dba03ce216fe19992e185bbe4c1f709ddc689d534b8f994d7f9ebdfccebed28452b3a427808a2fb9053b31b21e7ad2b50bc3063bf87fe9605f6b31908f1a8a95a25c1e85c2c56583ad456b8926886cbdd94e62336c75a8e280adb2377dfb65fdcfd99b9604c5c1404628403804af7c51f005cd97ef7045114e05f485d790b3869811adfb030c110c47e36f17c03fe6eb37854e7709a6d351b6f32fdf7fdfa2f326182d4d3b312cbb28affb049da84c0bf4ee420d98ffc57a541ab92461183fac9e9eca8a69e2d5b7ead0b104eaf64d50c526d4b098193465bbfe3dc04ecf57e3977263c885f03c00d858fcb8ff8e12f65271dbba0bc90c5c423af2460aa610fc8c2ffe4edf8fd1d09283ca755637d39a195739c4c752d5d75fababa86901dfa32f71a8b5152afd678dade32012ca3e5462ec2c16f77af264d3efbc44668e73f77c0ee9117703504903bda056a0a8a474deff71b1b3f0797f03e7144664ad33580c266a746e1d56f618c0a87c88336ecd63ce389ded6e2fcd433233069505be121f56af106c4a9eb323d155ecb26db7fba9e87dc63cdddee612aa628b825227e2afbddb5486a72235de91b8c7af161d4e57a4f4e76f82c323820f3a8d016c58d61a62b538f499a3e793a786e04162029c670629778a846d59d8fa3d367b7650ea7a8fc905914d3663f74171d4e71f9a0a221c32612ecc5d0657e5f4504b1f4abb69616dcf01804c49815dd3fb21963e270c2fa6028697493e6fa76d20e24dd730a2dce93f8063f98a20df54666d190d214fb4a53212d782a4b0fe873561268fcb0237a5cca57c647c7b18a0e0281dc9fd284d8e025b852292d2cd796dfdb1bd80251be188afdd9997875fa55055d53b0fb09989a604075ad694c6bd672b6ac7b17117e5b9180d17350884e4417167cac9e51582a79045bafe2e6571d5074cf35a57b86e409b92617c3b8e339913ff1ff13101f147da2f99a2d380c926c31503ed27f33b09bd20d3094bc2473f3c8dbe58dbe7fa94a949aaf1fd883d6e8104f8aaae05012c839b80b53d3801fd766261886fb8f6d2bc649eed571720f1b48a12c0224f597d925b8785b642fa8208971b3fa9bb6f06ced6fa90544a7245135132dcb5c6aa1fe55c5f340f10ac58272f9e9c57878d7148b4d9b5786e9f9335b50c94a3a38d2b224ee86afdbda786c3841ce24cedf1b185a1d8b6a77d5ebb96491a462d269c6d823d65b5269d42dfa5d14bc6d76ed0a8eb85a4e93333080e6235886a81695e9ed1016ed87487f6d02169bf3a9dad2edd340a71fb14c4d94acfe56f36d8ce2709aae08eceabcebc228dabc1d259d97a2231050165634fc4983647472c279b865f553115a2738c0d516a21d277bb50812867ecfe264b8ec8dc44fa9fcdaf7af856ef480cced34374ffcc390092832bdb3e0a6271a36fafc3845f9e5511463b1d8d8", 0x1000}], 0x3, &(0x7f0000001440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @multicast1, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}, @end]}}}], 0xe8}, 0x20000004) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000040)="3d081927e167a3c064f51d780c65ebb8da1a4172469b90d7a8aa1ed825956143cda7f713feb80d62bd5c3435ec06f5cb3103e31b32bf1d54500f2123d9ccbc0c89389e522c67aa26fb0723cc7ffb8a7d41beb544c72e74f104ea953033ad4911dc5724ae7d1b16", 0x67}, {&(0x7f0000000340)="b824745a100bda79ce0eeaa929f38bb2f1734a4813f6ea607bccfc05e862cfa13644831d1a15c649d1c2ca4f4415973de654cf369169bf8cad77b899", 0x3c}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f0000001440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @multicast1, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}, @end]}}}], 0xe8}, 0x20000004) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000000c0)=@deltaction={0x23c, 0x31, 0x2a8, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x12}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff66b3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x23c}}, 0x0) 1.012405348s ago: executing program 3 (id=17513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r1, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 1.003726529s ago: executing program 1 (id=17514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0xe, r7}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100004008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240fdff00120800064000000004040004800900010073797a30"], 0x10c}}, 0x0) 935.069175ms ago: executing program 2 (id=17515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='l'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="0f25170f147b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="97a9d64412df"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}]}, 0x78}, 0x1, 0x0, 0x0, 0x200048c2}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 872.283595ms ago: executing program 4 (id=17516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0xd, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @remote, @remote}, {{0x4e23, 0x4e24, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x3, '~YV', 0x0, "b8bb19"}}}}}}}, 0x36) 871.702221ms ago: executing program 3 (id=17517): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c002a0a000008000b00040000000500140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 862.739198ms ago: executing program 0 (id=17518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r1 = gettid() (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x403, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x10d39, 0x55223}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c406}, 0x0) 726.287961ms ago: executing program 3 (id=17519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x5, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 708.209393ms ago: executing program 4 (id=17520): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x10, 0x1, 0x41}}], 0x10}}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x44, 0x18, 0x200, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 652.463595ms ago: executing program 2 (id=17521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'ip6erspan0\x00', 0x81}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 652.284918ms ago: executing program 0 (id=17522): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001d72008a53ef47200000000000000004"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 558.850669ms ago: executing program 4 (id=17523): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xad58}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x53c3, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x1, 0xd, 0x1, 0x0, 0x100, 0x10}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x4, 0x8, 0xb1c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x26, 0x1, 0x9c70, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r0, r1, 0x10, 0x2010, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = accept(r4, &(0x7f00000004c0)=@rc={0x1f, @none}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000580)=0x10000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f00000005c0)=0x101, 0x4) close(r5) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettaction={0x3c, 0x32, 0x8, 0x7f, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x20008044) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000700)) connect$caif(r6, &(0x7f0000000740)=@dbg={0x25, 0xd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x7, 0x1, 0x173d, 0x8, {{0x18, 0x4, 0x1, 0x34, 0x60, 0x64, 0x0, 0x58, 0x4, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0x2b, 0xee, [@empty, @multicast2, @remote, @multicast2, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @multicast1, @loopback]}, @noop, @generic={0x83, 0xa, "ff47683ac3712071"}, @ssrr={0x89, 0x13, 0x26, [@remote, @private=0xa010101, @multicast2, @private=0xa010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x1000, 0x7, {{0x31, 0x4, 0x1, 0x2d, 0xc4, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@loopback, 0x5}, {@broadcast, 0x2}]}, @end, @cipso={0x86, 0x67, 0x0, [{0x7, 0xa, "9c7d8485f2ed3243"}, {0x6, 0x12, "8b4885750d57d56e5050b5c589c070ea"}, {0x7, 0x6, "a5dd83d7"}, {0x0, 0xf, "153b882a26c205ece31f351eed"}, {0x2, 0x10, "73b7cfdb716033b485c6e1bf8c28"}, {0x2, 0xb, "b5971a17b37c68529f"}, {0x1, 0x10, "13133cdca3cd7249652b9fb53e76"}, {0x1, 0x5, ' }u'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xf4, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0x7, [0x8]}, @generic={0x83, 0xc, "275f447b3077f70bbdbe"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x2f, 0x28, 0x81, 0x9, 0x8, @local, @local, 0x10, 0x7, 0xe, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c00)={'tunl0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x5, 0x7fff, {{0x1b, 0x4, 0x3, 0x31, 0x6c, 0x65, 0x0, 0x73, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @noop, @timestamp={0x44, 0x10, 0x22, 0x0, 0x9, [0x2, 0xdd32, 0xc1]}, @timestamp_prespec={0x44, 0x34, 0x86, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x30}, 0xffff8b66}, {@local, 0x6}, {@local, 0xe}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@empty, 0xf}]}, @generic={0x83, 0x10, "56f13bf7fb36d35869f83fb00dc9"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x9451, 0x7, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x23, 0xbc, [@broadcast, @rand_addr=0x64010102, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x2, 0x7, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x10, 0x8c, 0x0, 0x8, [0x6, 0x0, 0x81]}, @generic={0xc3, 0x3, 'o'}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xe, 0x7, 0x48, @empty, @mcast1, 0x40, 0x7, 0x14, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001380)={0x6a0, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4330}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e7}}}]}}, {{0x8, 0x1, r18}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe97}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28bba15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x5, 0xd6, 0x26}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 505.654258ms ago: executing program 3 (id=17524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x5, 0x1b2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xc8, 0x3, 0x13, @mcast2, @local, 0x10, 0x7, 0xffffff5a}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x30, 0x48, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r2, 0xf3}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 504.305195ms ago: executing program 0 (id=17525): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000099c23d91a2434cf90000bf030000000000008500e3187d8a04ec66c33a9c1c000083000000bf090000000000005509070000000000950000000000000005000008000000001805006df9000000000000ffffffffffffff7f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000099c23d91a2434cf90000bf030000000000008500e3187d8a04ec66c33a9c1c000083000000bf090000000000005509070000000000950000000000000005000008000000001805006df9000000000000ffffffffffffff7f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 444.460185ms ago: executing program 1 (id=17526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) (async) socketpair(0x2c, 0x5, 0x6, &(0x7f0000000080)) (async) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt(r2, 0x1, 0x2, &(0x7f00000000c0)=""/165, &(0x7f0000000480)=0xa5) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0xfffffff8, 0x7, 0xe606, 0xc6}) 422.555616ms ago: executing program 2 (id=17527): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x140f, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40002) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000001408002abd7000fddbdf25114e1800a176"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0xba01, 0x0, 0x4000040}, 0x4000080) 393.75354ms ago: executing program 3 (id=17528): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = getuid() sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="a3bd746567b61dc609b896f330cfff681387474c2c484c9d1541d1698f7ce38616e2c1a2de75000008000900", @ANYRES32=r8, @ANYBLOB="08003900ac1e0001000000"], 0x428}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040054) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c1e0100000000000000000008000001a7ca2e6e2a8d5cf9065de5ba8ea5938002a3412232cc1ff82b071022867dcc490aed037e24af8e6704cc2bcc815b62ca6629d1c6dfe02165d38509cc425a2b962eaa570a41a5177c8d822616b4c89a1d54d8193fd7ea5f9c91ec7c70c6527dfe8fc512dbe719960f64b3b13ea3a4f02e151b3ee1cfb5d46de835a7420537d650c16b358addc869fa47844f4de33d98bca209d9e99be35574", @ANYRES32=r7, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x4, 0x6}, @timestamp, @window, @mss={0x2, 0xfff}, @mss={0x2, 0x140}, @mss={0x2, 0x80}, @sack_perm, @window={0x3, 0x2000, 0x1}], 0x8) 340.452213ms ago: executing program 4 (id=17529): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0) 337.919973ms ago: executing program 0 (id=17530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) write$rfkill(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 281.203763ms ago: executing program 1 (id=17531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0xfffffffc, 0x2, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) 234.164804ms ago: executing program 2 (id=17532): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8901, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'erspan0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 179.789082ms ago: executing program 0 (id=17533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r14, 0x117, 0x5, 0x0, 0x8) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa007b46c1c1f0189}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r15 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r15, 0x65, 0x3, &(0x7f0000000200), 0x4) 179.295642ms ago: executing program 4 (id=17534): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000980), &(0x7f00000008c0)=0x8) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x20) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x65}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="ffffff7f", @ANYRES16=r5, @ANYBLOB="2503000000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={r8}) bind$xdp(r9, &(0x7f0000000240)={0x2d, 0x0, 0x0, 0x3b}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @local, @empty}, 0xc) 172.481332ms ago: executing program 3 (id=17535): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa, 0x41}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11c}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x809}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x3, 0x4]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80000}, 0x1000) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 107.446794ms ago: executing program 1 (id=17536): socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000580)='syzkaller\x00'}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000230001000000000000000000010100800c000100020000000000000014000b002001000000000000000000000000000050f7f241391946bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r5, &(0x7f0000001840)={&(0x7f0000000740)=@xdp, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000001800)=""/21, 0x15}, 0x40000000) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000200)={r10}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r10, 0xff, 0x40, 0x5, 0x3}, &(0x7f0000000540)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r10, 0xff, 0x40, 0x5, 0x3}, &(0x7f0000000540)=0x18) 0s ago: executing program 2 (id=17537): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x40}}, 0x4000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) listen(r3, 0xa) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid=r4}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401d801}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002cbd7000ffdbdf250800000040000680080006000200000005000200800000000800060008000000060001000200000006000100050000001400040004000000000000000000ffffac1414130800040000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c00038008000200410ccc7c080003000000000008000200070000000800020007203bcf000000080003248fbff8006fd9340efeb80748745249005e3fbfe03afca58999d8219d1ccc291fa5b2110afd916ffa2ab0fe251cd56c6e6187bb12234ca236f21ba11236c1cdebbdc3eb93291f1e90409ff611acd8243d1e40a5f649af500f61dfa9837d98914b936c685e43106612493edc55f8d9099536bd61834e247abe1b3afb67b8a5d0304b0468705f35d3c9be003807e5fcbe281c987425d8b414503817b3ec06a32cee5676510269b7a0f01af7f7a480507523f44731ceb0ea21fd89378c7463407328481d27e59a863ab90ca71ba0e062d638bec66c646c8ab3b4ceac9d82e755e6b6ff57e1fdce510ef6d9f4f5ff703992900d5cf4ae8a52937a0931ed796c394e2fdbe485b4542b1d17a2394d3da57c"], 0x40}}, 0x4000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) (async) listen(r3, 0xa) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid=r4}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401d801}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002cbd7000ffdbdf250800000040000680080006000200000005000200800000000800060008000000060001000200000006000100050000001400040004000000000000000000ffffac1414130800040000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) kernel console output (not intermixed with test programs): ct sctp_assoc_value in delayed_ack socket option. [ 1395.991720][T30362] Use struct sctp_sack_info instead [ 1396.011634][T30360] sctp: [Deprecated]: syz.2.15358 (pid 30360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1396.011634][T30360] Use struct sctp_sack_info instead [ 1396.072165][T30045] veth0_vlan: entered promiscuous mode [ 1396.118395][T30045] veth1_vlan: entered promiscuous mode [ 1396.183684][T30366] gretap1: entered promiscuous mode [ 1396.197351][T30366] gretap1: entered allmulticast mode [ 1396.225243][T30045] veth0_macvtap: entered promiscuous mode [ 1396.251543][T30045] veth1_macvtap: entered promiscuous mode [ 1396.312651][T30374] netlink: 'syz.4.15364': attribute type 1 has an invalid length. [ 1396.320061][T30045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.414133][T30380] bond5: (slave geneve2): making interface the new active one [ 1396.431100][T30380] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1396.448336][T18645] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1396.457581][T18645] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1396.488152][T30045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.495486][T18645] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1396.509538][T18645] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1396.553158][T12692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.562827][T12692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.575705][T12692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.594992][T12692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.845051][T18645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.874825][T18645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.913127][T30401] openvswitch: netlink: Flow actions attr not present in new flow. [ 1396.971577][T30398] netlink: 'syz.1.15372': attribute type 1 has an invalid length. [ 1397.013539][T12692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.042755][T12692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.911727][T18940] lec:lec_start_xmit: lec0:No lecd attached [ 1398.004360][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1398.024437][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1398.038333][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1398.046425][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1398.063567][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1398.145116][T30482] x_tables: duplicate underflow at hook 1 [ 1398.246559][T30465] lo speed is unknown, defaulting to 1000 [ 1398.338915][T19690] bond0: (slave syz_tun): Releasing backup interface [ 1398.474523][T30465] ip6_vti0 speed is unknown, defaulting to 1000 [ 1398.763194][T30465] chnl_net:caif_netlink_parms(): no params data found [ 1398.853306][T30465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.860723][T30465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.868264][T30465] bridge_slave_0: entered allmulticast mode [ 1398.875611][T30465] bridge_slave_0: entered promiscuous mode [ 1398.887748][T30465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.894929][T30465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.902518][T30465] bridge_slave_1: entered allmulticast mode [ 1398.910970][T30465] bridge_slave_1: entered promiscuous mode [ 1398.956961][T30465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.970417][T30465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.055919][T30465] team0: Port device team_slave_0 added [ 1399.084877][T30465] team0: Port device team_slave_1 added [ 1399.151637][T30504] __nla_validate_parse: 4 callbacks suppressed [ 1399.151656][T30504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15395'. [ 1399.172216][T30465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.186147][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.289624][T30465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.318238][T30465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.341465][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.430557][T30518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15399'. [ 1399.447305][T30465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.493308][T30518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.500563][T30518] bridge0: port 2(bridge_slave_1) entered listening state [ 1399.508102][T30518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.515294][T30518] bridge0: port 1(bridge_slave_0) entered listening state [ 1399.564407][T30514] netlink: set zone limit has 4 unknown bytes [ 1399.736843][T30465] hsr_slave_0: entered promiscuous mode [ 1399.745529][T30532] Cannot find add_set index 0 as target [ 1399.768122][T30465] hsr_slave_1: entered promiscuous mode [ 1399.818429][T30465] debugfs: 'hsr0' already exists in 'hsr' [ 1399.824508][T30465] Cannot create hsr debugfs directory [ 1400.106911][ T5848] Bluetooth: hci5: command tx timeout [ 1400.284063][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15409'. [ 1400.502627][T30465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.530892][T30565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.538867][T30465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1400.554011][T30566] netlink: 'syz.0.15410': attribute type 1 has an invalid length. [ 1400.583310][T30465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.594104][T30566] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15410'. [ 1400.765758][T30465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.797888][T30465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1400.820327][T30465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.850743][T30573] IPv6: sit1: Disabled Multicast RS [ 1400.898508][T30578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15414'. [ 1400.938775][T30465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.949797][T30465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1400.963108][T30465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.155341][T30465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.180982][T30465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1401.198057][T30465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.272292][T30595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15418'. [ 1401.493722][T30465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1401.578925][T30465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1401.612104][T30600] lo speed is unknown, defaulting to 1000 [ 1401.628777][T30465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1401.656729][T30465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1401.751846][T30619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15424'. [ 1401.784668][T30619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15424'. [ 1401.879443][T30624] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15425'. [ 1401.943655][T30626] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.15427'. [ 1401.962337][T30465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.011676][T30465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.041727][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.048978][T12700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.091777][T22924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.099032][T22924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.177460][ T5848] Bluetooth: hci5: command tx timeout [ 1402.271138][T30600] ip6_vti0 speed is unknown, defaulting to 1000 [ 1402.345743][T30637] netlink: 'syz.2.15430': attribute type 1 has an invalid length. [ 1402.440374][T30640] bond13: (slave gretap1): making interface the new active one [ 1402.505807][T30640] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 1402.719435][T30465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.842517][T30465] veth0_vlan: entered promiscuous mode [ 1402.877068][T30465] veth1_vlan: entered promiscuous mode [ 1402.927237][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1402.935330][ C0] lec:lec_tx_timeout: lec0 [ 1403.449501][T30668] bridge1: port 1(veth5) entered blocking state [ 1403.467912][T30668] bridge1: port 1(veth5) entered disabled state [ 1403.475011][T30668] veth5: entered allmulticast mode [ 1403.488359][T30668] veth5: entered promiscuous mode [ 1403.537947][T30669] bridge1: port 2(veth0_to_bond) entered blocking state [ 1403.545591][T30669] bridge1: port 2(veth0_to_bond) entered disabled state [ 1403.553067][T30669] veth0_to_bond: entered allmulticast mode [ 1403.568957][T30669] veth0_to_bond: entered promiscuous mode [ 1403.593154][T30465] veth0_macvtap: entered promiscuous mode [ 1403.676759][T30677] netlink: 'syz.2.15441': attribute type 15 has an invalid length. [ 1403.676902][T30678] netlink: 'syz.2.15441': attribute type 15 has an invalid length. [ 1403.704199][T30465] veth1_macvtap: entered promiscuous mode [ 1403.770282][T30677] netlink: 'syz.2.15441': attribute type 15 has an invalid length. [ 1403.788986][T30678] netlink: 'syz.2.15441': attribute type 15 has an invalid length. [ 1403.902310][T24822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1403.919888][T24822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1403.974240][T24822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1404.027357][T24822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1404.114404][T30465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.183149][T30465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.258114][ T5848] Bluetooth: hci5: command tx timeout [ 1404.300976][T30700] __nla_validate_parse: 12 callbacks suppressed [ 1404.300999][T30700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15446'. [ 1404.348716][T24829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.370030][T24829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.401855][T24829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.439927][T24829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.492381][T30700] syzkaller0: entered promiscuous mode [ 1404.498436][T30700] syzkaller0: entered allmulticast mode [ 1405.404173][T30732] netlink: 'syz.2.15452': attribute type 29 has an invalid length. [ 1405.436687][T30731] syzkaller0: entered allmulticast mode [ 1405.462436][T22921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.484303][T22921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.573815][T30736] syzkaller0: entered promiscuous mode [ 1405.583660][T30736] syzkaller0: entered allmulticast mode [ 1405.678987][ T7258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.687052][T30732] tipc: Enabled bearer , priority 0 [ 1405.700696][ T7258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.717744][T30732] netlink: 'syz.2.15452': attribute type 29 has an invalid length. [ 1405.766781][T30732] netlink: 500 bytes leftover after parsing attributes in process `syz.2.15452'. [ 1405.817865][T30727] tipc: Resetting bearer [ 1405.887409][T30745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15383'. [ 1405.925296][T30727] tipc: Disabling bearer [ 1405.943956][T30748] xt_bpf: check failed: parse error [ 1406.000252][T30750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15383'. [ 1406.213990][T30759] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1406.285784][T30769] x_tables: duplicate underflow at hook 3 [ 1406.294562][T30759] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1406.337546][ T5848] Bluetooth: hci5: command tx timeout [ 1406.346319][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15461'. [ 1406.425759][T30759] bond1 (unregistering): Released all slaves [ 1406.455001][T30783] netlink: 88 bytes leftover after parsing attributes in process `syz.0.15460'. [ 1406.515983][T30773] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 1406.620402][T30773] syzkaller1: entered promiscuous mode [ 1406.640424][T30773] syzkaller1: entered allmulticast mode [ 1406.843494][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15466'. [ 1406.853370][T30803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15466'. [ 1406.876018][T30801] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1407.334951][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15474'. [ 1407.359560][T30822] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1407.451176][T30839] lo: entered promiscuous mode [ 1407.456370][T30839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1407.573495][T30852] netlink: 'syz.3.15482': attribute type 1 has an invalid length. [ 1407.983645][T30874] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1408.008393][T30873] netlink: 'syz.3.15489': attribute type 6 has an invalid length. [ 1408.138463][T30883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15493'. [ 1408.253863][T30888] xt_bpf: check failed: parse error [ 1408.458611][T30895] netlink: 'syz.4.15496': attribute type 1 has an invalid length. [ 1408.491116][T30898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.543771][T30899] ipt_ECN: cannot use operation on non-tcp rule [ 1408.795467][T30924] netlink: 'syz.3.15504': attribute type 1 has an invalid length. [ 1408.858240][T30924] mac80211_hwsim hwsim150 wlan1: entered allmulticast mode [ 1408.958040][T30926] netlink: 'syz.2.15506': attribute type 21 has an invalid length. [ 1409.050862][T30939] syzkaller0: entered promiscuous mode [ 1409.056575][T30939] syzkaller0: entered allmulticast mode [ 1409.101141][T30946] netlink: 'syz.1.15510': attribute type 3 has an invalid length. [ 1409.111353][T30946] netlink: 'syz.1.15510': attribute type 1 has an invalid length. [ 1409.131106][T30947] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1409.338046][T30957] __nla_validate_parse: 6 callbacks suppressed [ 1409.338081][T30957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15513'. [ 1409.375807][T30959] ipvlan0: entered allmulticast mode [ 1409.389184][T30959] batadv_slave_1: entered allmulticast mode [ 1409.434263][T30962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.450844][T30963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.561354][T30969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15518'. [ 1409.731608][T30976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1409.796373][T30982] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15523'. [ 1409.909532][T30988] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15526'. [ 1409.932911][T30988] 0ªî{X¹¦: renamed from gretap0 [ 1409.944219][T30988] 0ªî{X¹¦: entered allmulticast mode [ 1409.954486][T30990] netlink: 536 bytes leftover after parsing attributes in process `syz.0.15527'. [ 1409.964317][T30988] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1409.986965][T30990] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1410.368766][T26684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1410.380014][T31003] netlink: 388 bytes leftover after parsing attributes in process `syz.0.15532'. [ 1410.389415][T26684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1410.397635][T26684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1410.408530][T26684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1410.416286][T26684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1410.457905][T31009] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1410.466222][T31009] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1410.476155][T31006] netlink: 'syz.4.15533': attribute type 1 has an invalid length. [ 1410.542026][T31006] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15533'. [ 1410.557711][T31005] lo speed is unknown, defaulting to 1000 [ 1410.570067][T31012] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1410.589461][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15535'. [ 1410.848807][T31018] netem: incorrect gi model size [ 1410.869544][T31018] netem: change failed [ 1411.032208][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15541'. [ 1411.072434][T31005] ip6_vti0 speed is unknown, defaulting to 1000 [ 1411.082840][T31028] ipvlan2: entered allmulticast mode [ 1411.114980][T31028] batadv_slave_1: entered allmulticast mode [ 1411.149783][T31028] batman_adv: batadv0: Adding interface: ipvlan2 [ 1411.186665][T31028] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.227587][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.246926][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.258352][T31028] batman_adv: batadv0: Interface activated: ipvlan2 [ 1411.481453][T31042] netlink: 180 bytes leftover after parsing attributes in process `syz.1.15544'. [ 1411.570529][ T6569] IPVS: starting estimator thread 0... [ 1411.707394][T31052] IPVS: using max 26 ests per chain, 62400 per kthread [ 1412.052144][T31005] chnl_net:caif_netlink_parms(): no params data found [ 1412.294207][T31005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.304305][T31005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.313357][T31005] bridge_slave_0: entered allmulticast mode [ 1412.322212][T31005] bridge_slave_0: entered promiscuous mode [ 1412.332014][T31005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.341379][T31005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.349862][T31005] bridge_slave_1: entered allmulticast mode [ 1412.358199][T31005] bridge_slave_1: entered promiscuous mode [ 1412.409762][T31005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.428183][T31005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.498493][T26684] Bluetooth: hci3: command tx timeout [ 1412.553297][T31005] team0: Port device team_slave_0 added [ 1412.597045][T31005] team0: Port device team_slave_1 added [ 1412.721088][T31112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.728995][T31112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.740670][ C1] net_ratelimit: 1 callbacks suppressed [ 1412.740688][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1412.773578][T31005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.787229][T31005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.815817][T31005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.842216][T31005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.850697][T31005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.879991][T31005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.883602][T31121] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1125 [ 1412.964799][T31005] hsr_slave_0: entered promiscuous mode [ 1412.972790][T31005] hsr_slave_1: entered promiscuous mode [ 1412.979777][T31005] debugfs: 'hsr0' already exists in 'hsr' [ 1412.985980][T31005] Cannot create hsr debugfs directory [ 1413.168442][T31005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1413.270497][T31005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1413.348560][T31005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1413.477077][T31005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1413.725386][T31148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1413.802746][T31005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1413.823394][T31005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1413.852704][T31005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1413.901745][T31005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1414.135604][T31005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.163574][T31005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.194150][T22921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.201404][T22921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.223006][T31182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1414.288950][T31187] bond0: Error: Cannot enslave bond to itself. [ 1414.329423][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.336635][T12700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.511948][T31194] __nla_validate_parse: 10 callbacks suppressed [ 1414.511971][T31194] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.15585'. [ 1414.577707][T26684] Bluetooth: hci3: command tx timeout [ 1414.644929][T31201] netlink: 'syz.0.15586': attribute type 10 has an invalid length. [ 1414.665626][T31201] bridge0: port 3(team0) entered blocking state [ 1414.690784][T31201] bridge0: port 3(team0) entered disabled state [ 1414.708529][T31201] team0: entered allmulticast mode [ 1414.748524][T31201] team_slave_0: entered allmulticast mode [ 1414.776860][T31201] team_slave_1: entered allmulticast mode [ 1414.800246][T31201] team0: entered promiscuous mode [ 1414.805343][T31201] team_slave_0: entered promiscuous mode [ 1414.837934][T31201] team_slave_1: entered promiscuous mode [ 1415.039400][T31224] netlink: 'syz.0.15593': attribute type 1 has an invalid length. [ 1415.053668][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15592'. [ 1415.186058][T31224] gretap1: entered promiscuous mode [ 1415.240381][T31230] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1415.249890][T31224] bond1: (slave gretap1): making interface the new active one [ 1415.270843][T31224] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1415.352262][T31224] macvlan2: entered promiscuous mode [ 1415.388951][T31224] macvlan2: entered allmulticast mode [ 1415.395681][T31224] bond1: entered promiscuous mode [ 1415.410299][T31224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1415.419945][T31224] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1415.440468][T31224] bond1: left promiscuous mode [ 1415.454582][T31236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15596'. [ 1415.490347][T31005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.654221][T31238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15597'. [ 1415.688488][T31238] netlink: 'syz.1.15597': attribute type 1 has an invalid length. [ 1415.696383][T31238] netlink: 'syz.1.15597': attribute type 2 has an invalid length. [ 1415.880660][T31240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15598'. [ 1415.890851][T31005] veth0_vlan: entered promiscuous mode [ 1415.942079][T31005] veth1_vlan: entered promiscuous mode [ 1416.064502][T31005] veth0_macvtap: entered promiscuous mode [ 1416.071303][T31257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15603'. [ 1416.191361][T31005] veth1_macvtap: entered promiscuous mode [ 1416.280454][T31260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15604'. [ 1416.292386][T31260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15604'. [ 1416.318756][T31005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.380621][T31005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.427590][T24822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.451811][T24822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.478312][T24822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.494993][T31273] netlink: 7 bytes leftover after parsing attributes in process `syz.4.15609'. [ 1416.512627][T22921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.645295][T31279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15611'. [ 1416.659631][T26684] Bluetooth: hci3: command tx timeout [ 1416.710709][T31277] lo speed is unknown, defaulting to 1000 [ 1416.716652][ T7258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.744715][ T7258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.945761][T31282] syzkaller0: entered promiscuous mode [ 1416.951853][T31282] syzkaller0: entered allmulticast mode [ 1418.748796][T26684] Bluetooth: hci3: command tx timeout [ 1418.880762][T31277] ip6_vti0 speed is unknown, defaulting to 1000 [ 1418.888459][T31293] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1418.941848][T24830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.990674][T24830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.267000][T31313] netlink: 'syz.0.15618': attribute type 63 has an invalid length. [ 1419.299270][T31300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1419.348542][T31304] netlink: 'syz.0.15618': attribute type 63 has an invalid length. [ 1419.464095][T31310] mac80211_hwsim hwsim155 ÿ: renamed from wlan1 (while UP) [ 1420.191874][T31337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15622'. [ 1420.214370][T31337] bridge_slave_1: left allmulticast mode [ 1420.236896][T31337] bridge_slave_1: left promiscuous mode [ 1420.269074][T31337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.337035][T31344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15625'. [ 1420.355843][T31337] bridge_slave_0: left allmulticast mode [ 1420.378382][T31337] bridge_slave_0: left promiscuous mode [ 1420.407653][T31337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.507767][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15627'. [ 1420.580044][T31346] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1420.597980][T31346] bond2: entered promiscuous mode [ 1420.603293][T31346] bond2: entered allmulticast mode [ 1420.612806][T31346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1420.635898][T31349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15627'. [ 1420.738303][T31360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15629'. [ 1420.978382][T31373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15633'. [ 1420.993211][T31373] tipc: Invalid UDP bearer configuration [ 1420.993274][T31373] tipc: Enabling of bearer rejected, failed to enable media [ 1421.122371][T31386] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15637'. [ 1421.292315][T31396] Bluetooth: MGMT ver 1.23 [ 1421.473480][T31406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15644'. [ 1421.668021][T31420] tls_set_device_offload: netdev not found [ 1421.676372][T31418] netlink: 'syz.3.15647': attribute type 1 has an invalid length. [ 1421.726429][T31418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15647'. [ 1421.819478][T31426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.849601][T31427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15651'. [ 1421.999714][T31437] syzkaller0: entered promiscuous mode [ 1422.025094][T31437] syzkaller0: entered allmulticast mode [ 1422.310230][T31452] bond3 (unregistering): Released all slaves [ 1422.511990][T31461] syzkaller0: entered promiscuous mode [ 1422.524181][T31461] syzkaller0: entered allmulticast mode [ 1422.838684][T31476] geneve3: entered promiscuous mode [ 1422.845333][T31476] geneve3: entered allmulticast mode [ 1423.602308][T31529] netlink: 'syz.2.15676': attribute type 4 has an invalid length. [ 1423.680701][T31529] `: renamed from bond0 (while UP) [ 1423.872938][T31495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1423.879509][T31495] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1423.962992][T31547] netlink: 'syz.1.15681': attribute type 1 has an invalid length. [ 1424.009650][T31495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1424.032966][T31495] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1424.167046][T31495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1424.189686][T31495] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1424.233935][T31556] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1424.401848][T31495] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1424.416005][T31576] ip6_vti0: entered promiscuous mode [ 1424.440508][T31495] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1424.582750][T31569] netlink: 'syz.2.15684': attribute type 61 has an invalid length. [ 1424.696741][T31495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1424.713439][T31495] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1425.439584][T31632] sctp: [Deprecated]: syz.1.15696 (pid 31632) Use of int in maxseg socket option. [ 1425.439584][T31632] Use struct sctp_assoc_value instead [ 1425.754062][T31639] __nla_validate_parse: 17 callbacks suppressed [ 1425.754162][T31639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15700'. [ 1425.771973][T31632] lo speed is unknown, defaulting to 1000 [ 1425.840495][T31646] netlink: 'syz.0.15702': attribute type 83 has an invalid length. [ 1426.009630][T31650] netlink: 'syz.2.15703': attribute type 11 has an invalid length. [ 1426.107492][T31650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15703'. [ 1426.414839][T31632] ip6_vti0 speed is unknown, defaulting to 1000 [ 1426.427061][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15707'. [ 1426.469532][T31668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15707'. [ 1427.157811][T31700] netlink: 'syz.4.15717': attribute type 21 has an invalid length. [ 1428.105463][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1428.132830][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1428.139731][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1428.895755][T31685] syzkaller0: entered promiscuous mode [ 1428.901894][T31685] syzkaller0: entered allmulticast mode [ 1429.084013][T31700] netlink: 'syz.4.15717': attribute type 6 has an invalid length. [ 1429.092149][T31700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15717'. [ 1429.122720][T31723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15720'. [ 1429.252645][T31728] netlink: 'syz.4.15722': attribute type 21 has an invalid length. [ 1429.585622][T31744] netlink: zone id is out of range [ 1429.606176][T31744] netlink: zone id is out of range [ 1429.625265][T31744] netlink: zone id is out of range [ 1429.657916][T31744] netlink: zone id is out of range [ 1429.663189][T31744] netlink: zone id is out of range [ 1429.687061][T31744] netlink: get zone limit has 4 unknown bytes [ 1429.933769][T31759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15734'. [ 1429.959517][T31757] netlink: 'syz.2.15733': attribute type 1 has an invalid length. [ 1430.021842][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1430.029200][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1430.045062][T22924] tipc: Subscription rejected, illegal request [ 1430.176968][T31763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15733'. [ 1430.486215][T31790] sctp: [Deprecated]: syz.4.15743 (pid 31790) Use of int in max_burst socket option. [ 1430.486215][T31790] Use struct sctp_assoc_value instead [ 1430.809656][T31805] lo speed is unknown, defaulting to 1000 [ 1430.843273][T31807] batman_adv: batadv0: Adding interface: geneve2 [ 1430.865750][T31807] batman_adv: batadv0: Interface activated: geneve2 [ 1430.912303][T31815] netlink: 'syz.4.15749': attribute type 1 has an invalid length. [ 1430.991825][T31815] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1431.119377][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15752'. [ 1431.133107][T31822] bond9: (slave veth3): Enslaving as an active interface with a down link [ 1431.147955][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15752'. [ 1431.254968][T31815] bond9: (slave veth0_to_bond): making interface the new active one [ 1431.279723][T31833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15753'. [ 1431.294341][T31815] veth0_to_bond: entered promiscuous mode [ 1431.317425][T31815] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1431.399959][T31823] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1431.416639][T31823] netlink: 'syz.4.15749': attribute type 1 has an invalid length. [ 1431.432597][T31805] ip6_vti0 speed is unknown, defaulting to 1000 [ 1431.442725][T31823] netlink: 'syz.4.15749': attribute type 2 has an invalid length. [ 1431.813485][T31855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15761'. [ 1431.861307][T31857] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 1432.203251][T31884] netlink: 'syz.1.15769': attribute type 33 has an invalid length. [ 1432.272162][T31884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15769'. [ 1432.400643][T31894] netlink: 'syz.0.15768': attribute type 7 has an invalid length. [ 1432.711898][T31902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15773'. [ 1432.970208][T31907] syzkaller0: entered promiscuous mode [ 1432.987357][T31907] syzkaller0: entered allmulticast mode [ 1433.233981][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15777'. [ 1433.604449][T31939] netlink: 'syz.3.15784': attribute type 1 has an invalid length. [ 1433.610792][T31931] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1433.615898][T31939] netlink: 'syz.3.15784': attribute type 11 has an invalid length. [ 1433.630630][T31939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15784'. [ 1433.656143][T31931] dvmrp6: entered allmulticast mode [ 1433.695791][T31939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15784'. [ 1433.729187][T31939] xt_TCPMSS: Only works on TCP SYN packets [ 1433.777199][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 1433.785584][ C0] lec:lec_tx_timeout: lec0 [ 1434.028283][T31957] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15789'. [ 1434.119138][T31959] syzkaller0: entered promiscuous mode [ 1434.130359][T31959] syzkaller0: entered allmulticast mode [ 1434.359948][T26684] block nbd7: Receive control failed (result -32) [ 1434.586574][T31984] netlink: 'syz.2.15795': attribute type 1 has an invalid length. [ 1434.702514][T31982] bond2: Removing last ns target with arp_interval on [ 1434.786306][T31998] netlink: 'syz.2.15795': attribute type 19 has an invalid length. [ 1435.236790][T32020] gre1: entered promiscuous mode [ 1435.253662][T32020] gre1: entered allmulticast mode [ 1435.471045][T32035] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1435.629011][T32049] netlink: 'syz.0.15815': attribute type 10 has an invalid length. [ 1435.684502][T32038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.716733][T32038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.742356][T32038] bond0 (unregistering): Released all slaves [ 1435.764693][T32049] team0: Device ipvlan1 failed to register rx_handler [ 1435.991479][T32071] openvswitch: netlink: Flow actions attr not present in new flow. [ 1436.154458][T32076] : entered promiscuous mode [ 1436.255878][T32088] netlink: 'syz.4.15825': attribute type 1 has an invalid length. [ 1436.273473][T32088] __nla_validate_parse: 1 callbacks suppressed [ 1436.273494][T32088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15825'. [ 1437.005159][T32135] xt_hashlimit: max too large, truncated to 1048576 [ 1437.012402][T32137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15843'. [ 1437.023806][T32137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15843'. [ 1437.147497][T32137] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1437.182742][T32137] bond0 (unregistering): Released all slaves [ 1437.270486][T32150] dvmrp0: entered allmulticast mode [ 1437.328786][T32157] netlink: 'syz.4.15849': attribute type 1 has an invalid length. [ 1437.753585][T32191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15859'. [ 1437.825357][T32194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15861'. [ 1437.933504][T32204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15864'. [ 1437.944277][T32204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1438.041322][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15865'. [ 1438.053335][T32211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15865'. [ 1438.136697][T32214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15865'. [ 1438.288728][T32222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15869'. [ 1438.391153][T32228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1438.429751][T24829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.456504][T24829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.640486][T24829] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.679452][T24829] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.832264][T32271] xt_addrtype: ipv6 does not support BROADCAST matching [ 1439.886488][T32280] vlan2: entered allmulticast mode [ 1439.907451][T32280] geneve1: entered allmulticast mode [ 1439.966924][T32287] gretap1: entered promiscuous mode [ 1439.973132][T32289] netlink: zone id is out of range [ 1439.973153][T32289] netlink: del zone limit has 4 unknown bytes [ 1439.992535][T32287] gretap1: entered allmulticast mode [ 1440.652609][T32326] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1441.044218][T32355] 8021q: VLANs not supported on ip6_vti0 [ 1441.053863][T32352] netlink: 'syz.4.15909': attribute type 1 has an invalid length. [ 1441.143529][T32352] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1441.681607][T32395] __nla_validate_parse: 17 callbacks suppressed [ 1441.681644][T32395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15919'. [ 1441.729132][T32392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15918'. [ 1441.756714][T32398] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1442.114220][T32417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15926'. [ 1442.199245][T32420] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15926'. [ 1442.301295][T32423] netlink: 'syz.0.15927': attribute type 13 has an invalid length. [ 1442.434420][T32429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.608494][ T7261] veth0_to_bond: left promiscuous mode [ 1442.754376][T32444] xt_TCPMSS: Only works on TCP SYN packets [ 1443.038189][T32460] sctp: [Deprecated]: syz.0.15939 (pid 32460) Use of int in max_burst socket option. [ 1443.038189][T32460] Use struct sctp_assoc_value instead [ 1443.086770][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15940'. [ 1443.105888][T32460] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15939'. [ 1443.154327][T32460] vlan2: entered allmulticast mode [ 1443.160781][T32460] erspan0: entered allmulticast mode [ 1443.180123][T32470] netlink: 'syz.3.15942': attribute type 4 has an invalid length. [ 1443.307933][T32475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15947'. [ 1443.356419][T32480] netlink: 204 bytes leftover after parsing attributes in process `syz.3.15944'. [ 1443.383075][T32480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15944'. [ 1443.463063][T32483] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1443.595323][T32491] netlink: 'syz.1.15950': attribute type 10 has an invalid length. [ 1443.634649][T32491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15950'. [ 1443.832321][T32508] netlink: 'syz.4.15956': attribute type 10 has an invalid length. [ 1444.027949][T32504] hsr_slave_1 (unregistering): left promiscuous mode [ 1444.059400][T32508] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1444.475422][T32535] syzkaller0: entered promiscuous mode [ 1444.481150][T32535] syzkaller0: entered allmulticast mode [ 1445.713818][T32598] netlink: 'syz.3.15985': attribute type 58 has an invalid length. [ 1445.733696][T32599] syzkaller0: entered promiscuous mode [ 1445.739655][T32599] syzkaller0: entered allmulticast mode [ 1445.868684][T32608] netlink: 'syz.0.15986': attribute type 7 has an invalid length. [ 1445.898097][T32608] netlink: 'syz.0.15986': attribute type 8 has an invalid length. [ 1445.936180][T32608] erspan0: entered promiscuous mode [ 1445.964334][T32608] batadv_slave_1: entered promiscuous mode [ 1445.987101][T32608] batadv_slave_1: left promiscuous mode [ 1445.998478][T32610] x_tables: duplicate underflow at hook 2 [ 1446.028692][T32608] erspan0: left promiscuous mode [ 1446.142196][T32617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.270365][T32627] netlink: 'syz.2.15993': attribute type 16 has an invalid length. [ 1446.353914][T32619] bond0 (unregistering): Released all slaves [ 1446.690258][T32655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.927318][T32667] __nla_validate_parse: 18 callbacks suppressed [ 1446.927347][T32667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16005'. [ 1446.976926][T32667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16005'. [ 1447.015573][T32673] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16007'. [ 1447.082799][T32678] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16007'. [ 1447.123556][T32681] netlink: 'syz.2.16009': attribute type 1 has an invalid length. [ 1447.305190][T32681] bond0: option min_links: invalid value (18446744073709551614) [ 1447.315114][T32696] Bluetooth: MGMT ver 1.23 [ 1447.320173][T32681] bond0: option min_links: allowed values 0 - 2147483647 [ 1447.359070][T32681] bond0 (unregistering): Released all slaves [ 1447.471435][T32700] netlink: 'syz.4.16010': attribute type 2 has an invalid length. [ 1447.540054][T32693] lo speed is unknown, defaulting to 1000 [ 1447.605190][T32706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16012'. [ 1447.809518][T32714] vcan0: tx drop: invalid sa for name 0x0000000000008001 [ 1447.913967][T32726] geneve2: entered promiscuous mode [ 1448.138280][T32735] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1448.151201][T32733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16021'. [ 1448.160897][T32733] netlink: 35 bytes leftover after parsing attributes in process `syz.2.16021'. [ 1448.172141][T32733] netlink: 'syz.2.16021': attribute type 5 has an invalid length. [ 1448.180280][T32733] netlink: 35 bytes leftover after parsing attributes in process `syz.2.16021'. [ 1448.194623][T32693] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.261057][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16022'. [ 1448.421543][T32735] bond0: Unable to set down delay as MII monitoring is disabled [ 1448.451973][T32735] bond0 (unregistering): Released all slaves [ 1449.204558][ T324] validate_nla: 1 callbacks suppressed [ 1449.204581][ T324] netlink: 'syz.0.16034': attribute type 2 has an invalid length. [ 1449.263176][ T324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16034'. [ 1449.364817][ T324] bond3 (unregistering): Released all slaves [ 1450.049197][ T364] tipc: Enabling of bearer rejected, failed to enable media [ 1450.312543][ T381] lo speed is unknown, defaulting to 1000 [ 1450.336479][ T386] netlink: 'syz.4.16050': attribute type 1 has an invalid length. [ 1450.369346][ T386] netlink: 'syz.4.16050': attribute type 3 has an invalid length. [ 1450.386715][ T386] NCSI netlink: No device for ifindex 813332851 [ 1450.407991][ T388] netlink: 'syz.2.16049': attribute type 1 has an invalid length. [ 1450.528770][ T388] netlink: 'syz.2.16049': attribute type 2 has an invalid length. [ 1450.547546][ T388] netlink: 'syz.2.16049': attribute type 2 has an invalid length. [ 1450.786819][ T395] netlink: 'syz.2.16052': attribute type 10 has an invalid length. [ 1451.058463][ T400] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1451.074510][ T395] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1451.088061][ T381] ip6_vti0 speed is unknown, defaulting to 1000 [ 1451.443637][ T414] bridge_slave_0: default FDB implementation only supports local addresses [ 1451.543742][ T417] tipc: Invalid UDP bearer configuration [ 1451.543801][ T417] tipc: Enabling of bearer rejected, failed to enable media [ 1451.760181][ T425] syzkaller0: entered promiscuous mode [ 1451.765785][ T425] syzkaller0: entered allmulticast mode [ 1451.973522][ T444] __nla_validate_parse: 13 callbacks suppressed [ 1451.973545][ T444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16066'. [ 1453.683028][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16069'. [ 1453.734025][ T455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16070'. [ 1453.747355][ T456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16069'. [ 1453.770417][ T457] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1453.817032][ T455] netlink: 'syz.4.16070': attribute type 1 has an invalid length. [ 1453.854507][ T467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16072'. [ 1453.902204][ T468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16070'. [ 1454.023676][ T455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1454.259427][ T485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16079'. [ 1454.565239][ T477] delete_channel: no stack [ 1454.784570][ T518] netlink: 'syz.0.16085': attribute type 11 has an invalid length. [ 1454.793908][ T518] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16085'. [ 1455.010667][ T528] openvswitch: netlink: Message has -2 unknown bytes. [ 1455.022258][ T528] netlink: 'syz.2.16088': attribute type 25 has an invalid length. [ 1455.202249][ T534] delete_channel: no stack [ 1455.433965][ T551] bridge2: entered promiscuous mode [ 1455.439866][ T551] bridge2: entered allmulticast mode [ 1455.547595][ T558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16096'. [ 1455.549906][ T557] ipvlan3: entered allmulticast mode [ 1455.565488][ T557] batman_adv: batadv0: Adding interface: ipvlan3 [ 1455.573135][ T557] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.608234][ T557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.648476][ T557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.662467][ T557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1455.675459][ T557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.686951][ T557] batman_adv: batadv0: Interface activated: ipvlan3 [ 1455.986987][ T584] netlink: 'syz.4.16099': attribute type 2 has an invalid length. [ 1456.053039][ T584] netlink: 119 bytes leftover after parsing attributes in process `syz.4.16099'. [ 1456.245259][ T595] x_tables: duplicate underflow at hook 2 [ 1456.256465][ T593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.333489][ T598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1456.364055][ T593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.380506][ T602] netlink: 'syz.4.16108': attribute type 10 has an invalid length. [ 1456.443092][ T602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.481937][ T602] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1456.516403][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.554566][ T604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.576296][ T604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.602679][ T604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.645311][ T604] bond0: (slave batadv0): Releasing backup interface [ 1456.913476][ T628] syzkaller1: entered promiscuous mode [ 1456.941244][ T628] syzkaller1: entered allmulticast mode [ 1456.968530][ T634] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 1457.017361][ T635] __nla_validate_parse: 4 callbacks suppressed [ 1457.017386][ T635] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16113'. [ 1457.041339][ T632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16116'. [ 1457.055685][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16117'. [ 1457.087819][ T627] netlink: 'syz.1.16113': attribute type 83 has an invalid length. [ 1457.102750][ T630] bridge0: port 4(batadv1) entered blocking state [ 1457.116533][ T630] bridge0: port 4(batadv1) entered disabled state [ 1457.124137][ T630] batadv1: entered allmulticast mode [ 1457.140302][ T630] batadv1: entered promiscuous mode [ 1457.160960][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.267982][ T628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16114'. [ 1457.340101][ T647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16118'. [ 1457.374523][ T647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16118'. [ 1457.411181][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16118'. [ 1457.424743][ T628] bond14 (unregistering): Released all slaves [ 1457.577934][ T7258] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1457.588523][ T7258] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1457.853620][ T677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16125'. [ 1460.097478][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.104775][ C0] bridge0: topology change detected, propagating [ 1460.111511][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.119239][ C0] bridge0: topology change detected, propagating [ 1462.649133][T18940] lec:lec_start_xmit: lec0:No lecd attached [ 1467.778446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 1467.786501][ C0] lec:lec_tx_timeout: lec0 [ 1481.095656][ T694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16130'. [ 1481.123405][ T694] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1481.261389][ T700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16132'. [ 1481.362481][ T713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16134'. [ 1481.391503][ T714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16135'. [ 1481.421392][ T716] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16136'. [ 1481.434453][ T716] nbd: socks must be embedded in a SOCK_ITEM attr [ 1481.573853][ T721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1481.620335][ T723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1481.784814][ T739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16143'. [ 1482.105428][ T758] xt_hashlimit: size too large, truncated to 1048576 [ 1483.246005][ T825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.501260][ T843] netlink: 'syz.0.16170': attribute type 1 has an invalid length. [ 1483.559392][ T853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16172'. [ 1483.754010][ T863] netlink: 'syz.4.16173': attribute type 3 has an invalid length. [ 1483.942701][ T874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16178'. [ 1484.097719][ T887] syzkaller0: entered promiscuous mode [ 1484.103256][ T887] syzkaller0: entered allmulticast mode [ 1484.202829][ T893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16182'. [ 1484.443130][ T903] netlink: 'syz.0.16184': attribute type 1 has an invalid length. [ 1484.454773][ T903] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16184'. [ 1484.544663][ T908] netlink: 'syz.3.16186': attribute type 1 has an invalid length. [ 1484.560617][ T910] openvswitch: netlink: IP tunnel TTL not specified. [ 1484.919683][ T938] netlink: 'syz.2.16193': attribute type 1 has an invalid length. [ 1484.928009][ T938] netlink: 'syz.2.16193': attribute type 2 has an invalid length. [ 1484.941008][ T938] netlink: 'syz.2.16193': attribute type 2 has an invalid length. [ 1484.949381][ T938] netlink: 'syz.2.16193': attribute type 2 has an invalid length. [ 1485.031663][T24822] smc: removing ib device syz2 [ 1485.038767][ T941] nbd: must specify at least one socket [ 1485.268525][T12700] bond13 (unregistering): (slave gretap1): Releasing active interface [ 1485.282734][ T953] x_tables: unsorted underflow at hook 4 [ 1485.522561][T12700] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1486.212278][T12700] bond0 (unregistering): Released all slaves [ 1486.388323][T12700] bond1 (unregistering): Released all slaves [ 1486.422497][T12700] bond2 (unregistering): Released all slaves [ 1486.635613][T12700] bond3 (unregistering): Released all slaves [ 1486.685755][T12700] bond4 (unregistering): Released all slaves [ 1486.714939][T12700] bond5 (unregistering): Released all slaves [ 1486.925186][T12700] bond6 (unregistering): Released all slaves [ 1487.146325][T12700] bond7 (unregistering): (slave veth5): Releasing active interface [ 1487.160576][T12700] bond7 (unregistering): Released all slaves [ 1487.234654][T12700] bond8 (unregistering): Released all slaves [ 1487.380169][T12700] bond9 (unregistering): (slave veth7): Releasing active interface [ 1487.389671][T12700] bond9 (unregistering): Released all slaves [ 1487.403957][T12700] bond10 (unregistering): Released all slaves [ 1487.418049][T12700] bond11 (unregistering): Released all slaves [ 1487.535554][T12700] bond12 (unregistering): Released all slaves [ 1487.551144][T12700] bond13 (unregistering): Released all slaves [ 1487.569264][ T916] tc_dump_action: action bad kind [ 1487.794997][T12700] tipc: Left network mode [ 1487.979464][T12700] IPVS: stopping backup sync thread 23963 ... [ 1488.043453][T17706] IPVS: starting estimator thread 0... [ 1488.055008][ T977] __nla_validate_parse: 6 callbacks suppressed [ 1488.055031][ T977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16203'. [ 1488.097958][ T985] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1488.160204][ T978] IPVS: using max 33 ests per chain, 79200 per kthread [ 1488.946584][T12700] hsr_slave_0: left promiscuous mode [ 1488.968426][T12700] hsr_slave_1: left promiscuous mode [ 1488.985900][ T1044] vcan0: tx address claim with dest, not broadcast [ 1489.089406][ T1052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16223'. [ 1489.285988][ T1070] xt_hashlimit: size too large, truncated to 1048576 [ 1489.296539][ T1070] netlink: 'syz.1.16227': attribute type 16 has an invalid length. [ 1489.304856][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16227'. [ 1489.550596][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1489.563280][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1489.570253][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1490.479542][ T1073] syzkaller0: entered promiscuous mode [ 1490.485217][ T1073] syzkaller0: entered allmulticast mode [ 1491.045614][ T1119] netlink: 576 bytes leftover after parsing attributes in process `syz.4.16233'. [ 1492.265529][ T1111] tipc: Enabling of bearer rejected, failed to enable media [ 1492.585183][ T1134] bridge0: port 5(ipvlan2) entered blocking state [ 1492.602651][ T1134] bridge0: port 5(ipvlan2) entered disabled state [ 1492.611074][ T1134] ipvlan2: entered allmulticast mode [ 1492.616522][ T1134] bridge0: entered allmulticast mode [ 1492.624924][ T1134] ipvlan2: left allmulticast mode [ 1492.655641][ T1134] bridge0: left allmulticast mode [ 1492.685823][ T1140] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.16241'. [ 1492.703275][ T1141] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.16241'. [ 1492.773784][T12700] IPVS: stop unused estimator thread 0... [ 1492.786634][ T1149] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16244'. [ 1492.881804][ T1155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16246'. [ 1493.003877][ T1163] syzkaller0: entered promiscuous mode [ 1493.009554][ T1163] syzkaller0: entered allmulticast mode [ 1493.259693][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16255'. [ 1493.433204][ T1186] netlink: 'syz.1.16259': attribute type 1 has an invalid length. [ 1493.442873][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16259'. [ 1493.631870][ T1201] netlink: 272 bytes leftover after parsing attributes in process `syz.4.16263'. [ 1493.880123][ T1206] openvswitch: netlink: Message has 250 unknown bytes. [ 1494.532832][ T1235] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16270'. [ 1494.619623][ T1237] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 1494.817286][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1494.825439][ C0] lec:lec_tx_timeout: lec0 [ 1496.171384][ T1248] policy can only be matched on NF_INET_PRE_ROUTING [ 1496.171414][ T1248] unable to load match [ 1496.199177][ T1249] block nbd4: NBD_DISCONNECT [ 1496.214240][ T1249] block nbd4: Send disconnect failed -32 [ 1496.247501][ T1249] block nbd4: shutting down sockets [ 1496.508853][ T1272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16282'. [ 1497.851402][T24823] team0: Port device geneve0 removed [ 1498.021576][T24823] team0: Port device bond0 removed [ 1498.031166][T24823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.042052][T24823] bond_slave_0: left promiscuous mode [ 1498.050590][T24823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.061226][T24823] bond_slave_1: left promiscuous mode [ 1498.068575][T24823] bond0 (unregistering): Released all slaves [ 1498.184186][T24823] bond1 (unregistering): Released all slaves [ 1498.198946][T24823] bond2 (unregistering): Released all slaves [ 1498.317005][T24823] bond3 (unregistering): Released all slaves [ 1498.330943][T24823] bond4 (unregistering): Released all slaves [ 1498.443843][T24823] bond5 (unregistering): Released all slaves [ 1498.458277][T24823] bond6 (unregistering): Released all slaves [ 1498.568046][T24823] bond7 (unregistering): Released all slaves [ 1498.682880][T24823] bond8 (unregistering): Released all slaves [ 1498.696824][T24823] bond9 (unregistering): Released all slaves [ 1498.744969][ T1305] pimreg: entered allmulticast mode [ 1498.770569][ T1319] bridge0: port 3(batadv2) entered blocking state [ 1498.777480][ T1319] bridge0: port 3(batadv2) entered disabled state [ 1498.784082][ T1319] batadv2: entered allmulticast mode [ 1498.822989][ T1319] batadv2: entered promiscuous mode [ 1498.972496][ T1337] netlink: 'syz.3.16292': attribute type 1 has an invalid length. [ 1498.997202][ T1337] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16292'. [ 1499.022640][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16292'. [ 1499.079871][ T1337] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.16292'. [ 1499.122701][ T1343] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1499.136404][ T1343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1499.272852][ T7261] batman_adv: batadv2: IGMP Querier appeared [ 1499.279113][ T7261] batman_adv: batadv2: MLD Querier appeared [ 1499.603183][ T1375] syzkaller1: entered promiscuous mode [ 1499.610908][ T1375] syzkaller1: entered allmulticast mode [ 1499.746016][ T1388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16306'. [ 1499.826620][ T1393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16308'. [ 1500.045686][ T1404] sctp: [Deprecated]: syz.3.16310 (pid 1404) Use of int in max_burst socket option. [ 1500.045686][ T1404] Use struct sctp_assoc_value instead [ 1500.140124][ T1410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16312'. [ 1500.200583][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16314'. [ 1500.261232][ T1415] netlink: 'syz.2.16315': attribute type 1 has an invalid length. [ 1500.280366][ T1415] netlink: 212 bytes leftover after parsing attributes in process `syz.2.16315'. [ 1500.422853][T24823] tipc: Disabling bearer [ 1500.439398][T24823] tipc: Left network mode [ 1500.455484][ T1424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16318'. [ 1500.478775][ T1424] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16318'. [ 1500.785161][ T1433] syzkaller0: entered promiscuous mode [ 1500.790921][ T1433] syzkaller0: entered allmulticast mode [ 1502.521732][ T1549] netlink: 'syz.4.16350': attribute type 39 has an invalid length. [ 1502.716697][ T1558] netlink: 'syz.3.16352': attribute type 12 has an invalid length. [ 1502.749219][ T1558] netlink: 'syz.3.16352': attribute type 11 has an invalid length. [ 1502.802610][ T1563] netlink: 'syz.2.16355': attribute type 4 has an invalid length. [ 1502.812372][T24823] hsr_slave_0: left promiscuous mode [ 1502.830141][T24823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.845500][T24823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.900845][T24823] veth1_vlan: left allmulticast mode [ 1502.910598][T24823] veth1_macvtap: left promiscuous mode [ 1502.916926][T24823] veth0_macvtap: left promiscuous mode [ 1502.924751][T24823] veth1_vlan: left promiscuous mode [ 1502.930471][T24823] veth0_vlan: left promiscuous mode [ 1502.955181][ T1570] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1502.962892][ T1569] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1503.626948][T24823] team0 (unregistering): Port device team_slave_1 removed [ 1503.975556][T22921] smc: removing ib device syz0 [ 1504.484224][ T1617] __nla_validate_parse: 17 callbacks suppressed [ 1504.484244][ T1617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16366'. [ 1504.807603][ T1627] netlink: 'syz.3.16373': attribute type 29 has an invalid length. [ 1504.841085][ T1627] netlink: 596 bytes leftover after parsing attributes in process `syz.3.16373'. [ 1504.867333][ T1630] netlink: 'syz.0.16370': attribute type 21 has an invalid length. [ 1505.069637][ T1641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16375'. [ 1505.323510][ T1652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16380'. [ 1505.644506][ T1666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16384'. [ 1505.736146][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16385'. [ 1505.750465][ T1666] netlink: 148 bytes leftover after parsing attributes in process `syz.4.16384'. [ 1505.809569][ T1675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16386'. [ 1505.819531][ T1675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16386'. [ 1505.835889][ T1675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.180257][ T1684] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1506.219371][ T1684] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16388'. [ 1506.925836][ T1702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1507.350781][ T1730] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1507.475651][ T1738] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1507.485917][ T1738] batadv2: entered promiscuous mode [ 1507.492094][ T1738] batadv2: entered allmulticast mode [ 1507.498979][ T1738] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 1507.510760][ T1738] team0: Failed to send options change via netlink (err -105) [ 1507.519495][ T1738] team0: Port device batadv2 added [ 1507.524814][ T1742] ip6tnl0: Caught tx_queue_len zero misconfig [ 1507.702004][T24823] IPVS: stop unused estimator thread 0... [ 1507.820463][ T1749] netlink: 'syz.0.16410': attribute type 11 has an invalid length. [ 1507.879919][ T1749] netlink: 'syz.0.16410': attribute type 11 has an invalid length. [ 1507.957859][T24822] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1507.967212][T24822] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1508.117571][ T1765] lo: Caught tx_queue_len zero misconfig [ 1508.542112][ T1796] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1508.560060][ T1793] syzkaller0: entered promiscuous mode [ 1508.565585][ T1793] syzkaller0: entered allmulticast mode [ 1508.775192][ T1809] vcan2: entered promiscuous mode [ 1508.780816][ T1809] vcan2: entered allmulticast mode [ 1508.979959][ T1822] ipvlan2: entered promiscuous mode [ 1509.205375][ T1831] syzkaller0: entered promiscuous mode [ 1509.211345][ T1831] syzkaller0: entered allmulticast mode [ 1509.605205][ T1846] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 1509.721428][ T1851] __nla_validate_parse: 11 callbacks suppressed [ 1509.721452][ T1851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16441'. [ 1509.742024][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16441'. [ 1509.794582][ T1856] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.16443'. [ 1509.804282][ T6569] IPVS: starting estimator thread 0... [ 1509.860566][ T1862] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1509.905925][ T1858] IPVS: using max 29 ests per chain, 69600 per kthread [ 1510.042416][ T1877] netlink: 'syz.3.16449': attribute type 1 has an invalid length. [ 1510.080521][ T1882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16450'. [ 1510.091673][ T1877] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1510.118030][ T1879] netlink: 'syz.0.16448': attribute type 1 has an invalid length. [ 1510.159828][ T1889] netlink: 'syz.2.16451': attribute type 10 has an invalid length. [ 1510.180398][ T1885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16448'. [ 1510.207565][ T1879] netlink: 'syz.0.16448': attribute type 2 has an invalid length. [ 1510.228336][ T1879] netlink: 'syz.0.16448': attribute type 1 has an invalid length. [ 1510.340953][ T1900] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 1510.908659][ T1937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16467'. [ 1510.950468][ T1941] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16469'. [ 1511.006500][ T1944] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1511.037379][ T1942] can: request_module (can-proto-4) failed. [ 1511.112382][ T1951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16470'. [ 1511.311413][ T1964] netlink: 'syz.2.16475': attribute type 11 has an invalid length. [ 1511.358358][ T1964] netlink: 'syz.2.16475': attribute type 11 has an invalid length. [ 1511.391528][ T1972] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.16475'. [ 1511.396592][ T1964] netlink: 204 bytes leftover after parsing attributes in process `syz.2.16475'. [ 1511.475286][ T1976] netlink: 'syz.0.16477': attribute type 10 has an invalid length. [ 1511.499380][ T1976] team0: Device veth1_macvtap failed to register rx_handler [ 1511.595263][ T1979] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1512.122479][ T2009] x_tables: duplicate underflow at hook 2 [ 1512.179303][ T2012] netlink: 'syz.4.16490': attribute type 1 has an invalid length. [ 1512.833068][ T2051] netlink: 'syz.3.16500': attribute type 13 has an invalid length. [ 1513.231411][ T2070] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1513.315436][ T2078] netlink: 'syz.0.16506': attribute type 1 has an invalid length. [ 1513.469511][ T2091] netlink: 'syz.3.16510': attribute type 83 has an invalid length. [ 1514.034874][ T2119] tipc: Enabled bearer , priority 10 [ 1514.260928][ T2125] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1514.764774][ T2143] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1514.863116][ T2162] __nla_validate_parse: 11 callbacks suppressed [ 1514.863138][ T2162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16532'. [ 1514.925307][ T2164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16533'. [ 1514.954082][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16533'. [ 1514.974527][ T2168] xt_hashlimit: max too large, truncated to 1048576 [ 1515.147909][ T1084] tipc: Node number set to 935076542 [ 1515.176142][ T2179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16538'. [ 1515.352099][ T2181] syzkaller0: entered promiscuous mode [ 1515.367418][ T2181] syzkaller0: entered allmulticast mode [ 1515.385579][ T2200] validate_nla: 2 callbacks suppressed [ 1515.385597][ T2200] netlink: 'syz.0.16544': attribute type 24 has an invalid length. [ 1515.404903][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16543'. [ 1515.513954][ T2208] IPVS: length: 8 != 1152 [ 1515.540739][ T2207] IPVS: length: 8 != 1152 [ 1515.677573][ T2219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16547'. [ 1515.721532][ T2223] IPv6: Can't replace route, no match found [ 1516.708039][T18637] batman_adv: batadv1: IGMP Querier appeared [ 1516.714095][T18637] batman_adv: batadv1: MLD Querier appeared [ 1517.702756][ T2249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16553'. [ 1517.876009][ T2261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16557'. [ 1520.096846][ T2298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.16566'. [ 1520.106473][ T2298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.16566'. [ 1520.302562][ T2317] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1520.502385][ T2334] x_tables: duplicate underflow at hook 3 [ 1520.517174][ T2337] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1520.560524][ T2337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16577'. [ 1520.612641][ T2343] tipc: Failed to remove unknown binding: 66,0,0/0:400841589/400841590 [ 1520.641133][ T2343] tipc: Failed to remove unknown binding: 66,0,0/0:400841589/400841590 [ 1520.769368][ T2351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16581'. [ 1520.794717][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16582'. [ 1520.858354][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16582'. [ 1520.959597][ T2371] x_tables: duplicate underflow at hook 1 [ 1520.964237][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16582'. [ 1520.978625][ T2361] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1520.990880][ T2361] bond3 (unregistering): Released all slaves [ 1521.055162][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16582'. [ 1521.306345][ T2389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16590'. [ 1521.385214][ T2403] netlink: 'syz.0.16591': attribute type 10 has an invalid length. [ 1521.406359][ T2403] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1521.424074][ T2403] IPv6: NLM_F_CREATE should be specified when creating new route [ 1521.553608][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16595'. [ 1522.243958][ T2447] netlink: 'syz.0.16607': attribute type 1 has an invalid length. [ 1522.297242][ T2447] bond6: entered promiscuous mode [ 1522.302855][ T2447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1522.322694][ T2454] bond6: (slave bridge4): making interface the new active one [ 1522.379084][ T2454] bridge4: entered promiscuous mode [ 1522.405765][ T2454] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1522.972188][ T2491] netlink: 'syz.2.16615': attribute type 11 has an invalid length. [ 1523.051315][ T2501] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1523.804012][ T2556] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1523.965424][ T2571] openvswitch: netlink: Flow key attr not present in new flow. [ 1524.231948][ T2584] team0 (unregistering): Port device team_slave_0 removed [ 1524.249148][ T2584] team0 (unregistering): Port device team_slave_1 removed [ 1524.842730][ T2623] bond14: entered promiscuous mode [ 1524.868158][ T2623] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1525.136265][ T2638] __nla_validate_parse: 10 callbacks suppressed [ 1525.136285][ T2638] netlink: 100 bytes leftover after parsing attributes in process `syz.3.16655'. [ 1525.267704][ T2646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16659'. [ 1525.307468][ T2646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16659'. [ 1525.695133][T23204] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.705449][ T2677] netlink: 'syz.2.16667': attribute type 33 has an invalid length. [ 1525.757801][ T2677] netlink: 'syz.2.16667': attribute type 3 has an invalid length. [ 1525.782024][ T2677] netlink: 666 bytes leftover after parsing attributes in process `syz.2.16667'. [ 1525.805059][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16666'. [ 1525.847653][ T2679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.994790][ T2679] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1526.002466][ T2679] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1526.082734][ T2679] batman_adv: batadv0: Removing interface: ipvlan2 [ 1526.115893][ T2679] batman_adv: batadv0: Removing interface: ipvlan3 [ 1526.133878][ T2679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.376154][ T2718] openvswitch: netlink: Multiple metadata blocks provided [ 1526.403994][ T2718] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1526.429794][ T2718] syzkaller0: entered promiscuous mode [ 1526.435449][ T2718] syzkaller0: entered allmulticast mode [ 1526.448340][ T2718] netlink: 'syz.1.16678': attribute type 1 has an invalid length. [ 1526.828199][ T2750] syzkaller1: entered promiscuous mode [ 1526.833860][ T2750] syzkaller1: entered allmulticast mode [ 1526.843781][ T2750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16683'. [ 1527.125473][ T2765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16687'. [ 1527.363896][ T2784] syzkaller0: entered promiscuous mode [ 1527.373251][ T2784] syzkaller0: entered allmulticast mode [ 1527.382794][ T2784] 0: reclassify loop, rule prio 0, protocol 800 [ 1527.518306][ T2795] syzkaller0: entered promiscuous mode [ 1527.532431][T18940] lec:lec_start_xmit: lec0:No lecd attached [ 1527.552643][ T2795] syzkaller0: entered allmulticast mode [ 1527.671426][ T2795] : entered promiscuous mode [ 1527.813478][ T2822] gretap1: left allmulticast mode [ 1528.397500][ T2864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16710'. [ 1528.442547][ T2864] "syz.1.16710" (2864) uses obsolete ecb(arc4) skcipher [ 1528.684566][ T2884] netlink: 'syz.3.16716': attribute type 1 has an invalid length. [ 1528.695279][ T2884] netlink: 'syz.3.16716': attribute type 3 has an invalid length. [ 1528.727386][ T2884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16716'. [ 1528.808687][ T2893] sctp: [Deprecated]: syz.2.16717 (pid 2893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1528.808687][ T2893] Use struct sctp_sack_info instead [ 1528.894122][ T2897] bridge5: entered promiscuous mode [ 1528.927193][ T2897] bridge5: entered allmulticast mode [ 1528.984319][ T2897] netlink: 124 bytes leftover after parsing attributes in process `syz.0.16715'. [ 1529.385629][ T2935] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1529.460103][ T2944] ip6tnl0: Caught tx_queue_len zero misconfig [ 1529.652638][ T2953] netlink: 'syz.2.16732': attribute type 5 has an invalid length. [ 1530.075253][ T2983] netlink: 'syz.2.16742': attribute type 28 has an invalid length. [ 1530.091142][ T2984] netlink: 'syz.3.16740': attribute type 3 has an invalid length. [ 1530.109441][ T2983] netlink: 'syz.2.16742': attribute type 3 has an invalid length. [ 1530.148123][ T2977] lo: Caught tx_queue_len zero misconfig [ 1530.166713][ T2977] netlink: 'syz.3.16740': attribute type 30 has an invalid length. [ 1530.245316][ T2989] netlink: 'syz.2.16744': attribute type 63 has an invalid length. [ 1530.306071][ T2989] netlink: 'syz.2.16744': attribute type 63 has an invalid length. [ 1530.454873][ T2998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1530.499292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.510042][ T1084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.561611][ T3013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.572291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.030172][ T3041] __nla_validate_parse: 13 callbacks suppressed [ 1531.030197][ T3041] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16756'. [ 1531.060059][ T3041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16756'. [ 1531.078963][ T3041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16756'. [ 1531.149328][ T3046] sctp: [Deprecated]: syz.3.16757 (pid 3046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.149328][ T3046] Use struct sctp_sack_info instead [ 1531.454097][ T3067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16765'. [ 1531.540082][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.781267][ T1084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.836452][ T3093] tipc: Started in network mode [ 1531.852060][ T3093] tipc: Node identity 968ad5211e8a, cluster identity 4711 [ 1531.893151][ T3093] tipc: Enabled bearer , priority 0 [ 1531.993385][ T3102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16774'. [ 1532.058005][ T3097] syzkaller0: entered promiscuous mode [ 1532.064193][ T3097] syzkaller0: entered allmulticast mode [ 1532.071441][ T3097] tipc: Resetting bearer [ 1532.115994][ T3091] tipc: Resetting bearer [ 1532.267764][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.424049][T18641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.582562][ T1084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.818065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 1532.826177][ C0] lec:lec_tx_timeout: lec0 [ 1532.826351][ T3121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16778'. [ 1534.202319][ T3091] tipc: Disabling bearer [ 1534.234489][ T3115] netlink: 7 bytes leftover after parsing attributes in process `syz.4.16777'. [ 1534.287934][ T3117] bond15: option min_links: invalid value (18446744073709551614) [ 1534.304683][ T3117] bond15: option min_links: allowed values 0 - 2147483647 [ 1534.323771][ T3117] bond15 (unregistering): Released all slaves [ 1534.359460][T17706] tipc: Node number set to 2281755937 [ 1534.538387][ T3133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16782'. [ 1534.652853][ T3139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16785'. [ 1534.835155][ T3148] tunl0: entered promiscuous mode [ 1534.860196][ T3148] validate_nla: 3 callbacks suppressed [ 1534.860214][ T3148] netlink: 'syz.0.16787': attribute type 3 has an invalid length. [ 1534.880081][ T3150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16789'. [ 1535.016887][ T3158] netlink: 'syz.3.16790': attribute type 1 has an invalid length. [ 1535.094374][ T3168] ipt_ECN: cannot use operation on non-tcp rule [ 1535.122050][ T3167] bond4: (slave geneve2): making interface the new active one [ 1535.131038][ T3167] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1535.144726][ T7261] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1535.156902][ T7261] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1535.169648][ T7261] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1535.179211][ T7261] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1535.269262][ T3172] veth0_to_hsr: entered promiscuous mode [ 1535.622823][T17706] net_ratelimit: 3 callbacks suppressed [ 1535.622844][T17706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.643307][ T3183] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1535.664262][ T3183] bond7 (unregistering): Released all slaves [ 1535.698133][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.796175][ T3192] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1535.809354][ T3192] bond7 (unregistering): Released all slaves [ 1536.737441][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.379598][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.778837][ T1084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.182213][ T7265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.819324][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.468795][T18642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.857748][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.897656][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.938449][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.497942][T17706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.977578][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.939916][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.017729][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.058990][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.218341][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.226623][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.861318][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.097699][T28874] net_ratelimit: 4 callbacks suppressed [ 1546.097720][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.137718][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.177670][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.257610][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.217639][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.698197][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.257873][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.983040][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1550.984191][T18647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.001540][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1551.007781][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.012980][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1551.298732][T28874] net_ratelimit: 2 callbacks suppressed [ 1551.298748][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.337628][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.377624][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.019000][T17707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.417917][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.458892][T18642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.467386][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.498773][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.740433][T18642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.817341][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 1556.825391][ C0] lec:lec_tx_timeout: lec0 [ 1557.537629][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.577815][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.617854][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.777997][T17707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.938640][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.498441][T12698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.577633][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.659989][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.697718][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.778416][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.738763][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.779085][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.817931][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.828599][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.698287][T18641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.859087][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.897777][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.988463][T18641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.937539][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.978946][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.763141][ T3217] netlink: 'syz.4.16804': attribute type 3 has an invalid length. [ 1569.772412][ T3213] netlink: 'syz.0.16800': attribute type 2 has an invalid length. [ 1569.993472][ T3232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.002430][ T3234] __nla_validate_parse: 7 callbacks suppressed [ 1570.002448][ T3234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16808'. [ 1570.018227][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.027148][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.047500][ T3232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.070274][ T3232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.111986][ T3232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.703408][ T3258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16817'. [ 1571.179268][ T3291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16827'. [ 1571.608927][ T3311] syzkaller0: entered promiscuous mode [ 1571.616810][ T3311] syzkaller0: entered allmulticast mode [ 1572.026707][ T3316] batadv3: entered allmulticast mode [ 1572.103419][T28874] net_ratelimit: 4 callbacks suppressed [ 1572.103456][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.266895][ T3334] IPVS: length: 8 != 1152 [ 1572.377047][ T3334] netlink: 'syz.4.16838': attribute type 1 has an invalid length. [ 1572.378649][ T3348] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 4100, id = 0 [ 1572.571955][ T3356] openvswitch: netlink: IP tunnel dst address not specified [ 1572.709531][ T3365] tipc: Trying to set illegal importance in message [ 1572.717237][ T3366] tipc: Trying to set illegal importance in message [ 1572.738701][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.802418][ T3370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16846'. [ 1572.882470][ T3378] xt_limit: Overflow, try lower: 271964/0 [ 1572.986970][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16850'. [ 1572.986970][ T3380] netlink: 'syz.0.16849': attribute type 1 has an invalid length. [ 1572.986998][ T3380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16849'. [ 1573.047345][ T3382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16850'. [ 1573.126882][ T3390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16853'. [ 1573.145279][ T3390] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16853'. [ 1573.155549][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.172803][ T3390] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16853'. [ 1573.252463][ T3390] syzkaller0: entered promiscuous mode [ 1573.261434][ T3390] syzkaller0: entered allmulticast mode [ 1573.357591][ T3396] bond7: option xmit_hash_policy: invalid value (64) [ 1573.369017][ T3396] bond7 (unregistering): Released all slaves [ 1573.480497][ T3416] tls_set_device_offload_rx: netdev not found [ 1574.019433][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.184688][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.222550][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.513114][ T3442] __nla_validate_parse: 3 callbacks suppressed [ 1575.513134][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16866'. [ 1575.578590][ T3443] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1575.611611][ T3446] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16867'. [ 1575.778210][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.862788][ T3455] gre0: entered promiscuous mode [ 1575.870001][ T3455] gre0: entered allmulticast mode [ 1575.963473][ T3462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16874'. [ 1576.020721][ T3468] netlink: 88 bytes leftover after parsing attributes in process `syz.4.16876'. [ 1576.257670][ T3588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.393140][ T3494] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.16884'. [ 1576.505952][ T3500] netlink: 304 bytes leftover after parsing attributes in process `syz.4.16886'. [ 1576.662076][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16891'. [ 1576.842435][ T3527] 8021q: VLANs not supported on sit0 [ 1577.035763][ T3536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.069669][ T3535] netlink: 27 bytes leftover after parsing attributes in process `syz.3.16895'. [ 1577.218981][T18642] net_ratelimit: 1 callbacks suppressed [ 1577.219006][T18642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.297870][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.373724][ T3556] netlink: 'syz.4.16900': attribute type 5 has an invalid length. [ 1577.382797][ T3556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16900'. [ 1577.459851][ T3561] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1577.771999][ T3583] sock: sock_set_timeout: `syz.1.16907' (pid 3583) tries to set negative timeout [ 1578.040936][ T3593] syzkaller0: entered promiscuous mode [ 1578.046558][ T3593] syzkaller0: entered allmulticast mode [ 1578.142485][ T3600] batman_adv: batadv0: Adding interface: dummy0 [ 1578.149693][ T3600] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.176177][ T3600] batman_adv: batadv0: Interface activated: dummy0 [ 1578.234547][ T3601] batadv0: mtu less than device minimum [ 1578.251831][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1578.264174][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1578.276060][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1578.288182][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1578.300044][ T3601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1578.348171][ T3610] netlink: 260 bytes leftover after parsing attributes in process `syz.2.16914'. [ 1578.362496][ T3610] netlink: 'syz.2.16914': attribute type 8 has an invalid length. [ 1578.613789][ T3621] geneve4: entered promiscuous mode [ 1579.477380][ T3669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.511215][ T3672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.623949][ T3647] lec:lec_atm_close: lec0: Shut down! [ 1580.060980][ T3565] IPVS: starting estimator thread 0... [ 1580.120988][ T3707] netlink: 'syz.1.16942': attribute type 1 has an invalid length. [ 1580.130923][ T3707] netlink: 'syz.1.16942': attribute type 2 has an invalid length. [ 1580.148949][ T3704] IPVS: using max 24 ests per chain, 57600 per kthread [ 1580.599425][ T3734] ipt_REJECT: ECHOREPLY no longer supported. [ 1581.083231][ T3761] º: renamed from veth1_vlan (while UP) [ 1581.112071][ T3766] set match dimension is over the limit! [ 1581.394016][ T3778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1581.418939][ T3776] __nla_validate_parse: 50 callbacks suppressed [ 1581.418961][ T3776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16963'. [ 1581.488870][ T3783] bond_slave_0: entered promiscuous mode [ 1581.495093][ T3783] bond_slave_1: entered promiscuous mode [ 1581.521050][ T3783] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1581.553987][ T3783] bond3: (slave macvlan3): making interface the new active one [ 1581.612786][ T3783] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 1581.650381][ T3778] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:78db:e6ff:fe34:872c error=-28 [ 1581.978897][ T3809] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16969'. [ 1582.017942][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16969'. [ 1582.054954][ T3778] infiniband syz0: set active [ 1582.061282][ T3778] infiniband syz0: added bond0 [ 1582.077436][ T3791] syzkaller1: entered promiscuous mode [ 1582.137260][ T3791] syzkaller1: entered allmulticast mode [ 1582.179300][ T3778] RDS/IB: syz0: added [ 1582.183492][ T3778] smc: adding ib device syz0 with port count 1 [ 1582.247474][ T3778] smc: ib device syz0 port 1 has no pnetid [ 1582.338098][T12697] net_ratelimit: 21 callbacks suppressed [ 1582.338123][T12697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.497774][T12697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.544830][ T3827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16975'. [ 1582.760290][ T3836] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16978'. [ 1583.023628][ T3850] IPVS: stopping master sync thread 3348 ... [ 1583.317611][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16987'. [ 1583.524159][ T3883] syzkaller0: entered promiscuous mode [ 1583.530379][ T3883] syzkaller0: entered allmulticast mode [ 1583.553495][ T3883] netlink: 'syz.3.16991': attribute type 1 has an invalid length. [ 1583.564025][ T3883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16991'. [ 1583.586544][ T3885] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1583.763009][ T3896] netlink: 'syz.0.16994': attribute type 4 has an invalid length. [ 1583.878217][ T3902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16996'. [ 1583.902422][ T3903] !: renamed from dummy0 (while UP) [ 1583.930737][ T3903] netlink: 'syz.2.16995': attribute type 1 has an invalid length. [ 1583.967198][ T3903] netlink: 'syz.2.16995': attribute type 2 has an invalid length. [ 1584.048075][ T3905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1584.079925][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16998'. [ 1584.089308][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16998'. [ 1584.268807][T23204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.607147][ T3925] Cannot find add_set index 65532 as target [ 1584.817154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1584.825258][ C0] lec:lec_tx_timeout: lec0 [ 1585.902324][ T3955] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1586.108964][ T3989] syzkaller0: entered promiscuous mode [ 1586.114595][ T3989] syzkaller0: entered allmulticast mode [ 1586.149638][ T3994] netlink: 'syz.0.17021': attribute type 10 has an invalid length. [ 1586.149638][ T3996] netlink: 'syz.0.17021': attribute type 10 has an invalid length. [ 1586.513483][ T4009] netlink: 'syz.2.17025': attribute type 8 has an invalid length. [ 1586.561311][ T4016] __nla_validate_parse: 2 callbacks suppressed [ 1586.561420][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17027'. [ 1586.929320][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1586.950500][ T4034] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1586.975299][ T4034] netlink: 148 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1587.099177][ T4044] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17034'. [ 1587.244190][ T4049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17035'. [ 1587.282200][ T4049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17035'. [ 1587.284903][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17038'. [ 1587.310140][T17707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.339621][ T4060] netlink: 'syz.4.17039': attribute type 1 has an invalid length. [ 1587.367294][ T4060] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17039'. [ 1587.389688][ T4060] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17039'. [ 1587.418848][ T4060] netlink: 'syz.4.17039': attribute type 1 has an invalid length. [ 1587.440051][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17040'. [ 1587.452388][ T4060] netlink: 'syz.4.17039': attribute type 8 has an invalid length. [ 1587.466487][T12697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.105999][T28874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.124578][T18647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.180987][ T4100] pim6reg1: left allmulticast mode [ 1588.186524][ T4100] ip6tnl1: left allmulticast mode [ 1588.196550][ T4100] bond1: left allmulticast mode [ 1588.222701][ T4100] bond2: left allmulticast mode [ 1588.243420][ T4100] geneve3: left allmulticast mode [ 1588.307560][ T4111] : renamed from bond_slave_0 [ 1588.406641][ T4113] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 1588.418697][ T4113] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 1588.764786][ T4140] validate_nla: 3 callbacks suppressed [ 1588.764803][ T4140] netlink: 'syz.1.17064': attribute type 3 has an invalid length. [ 1588.827818][ T4144] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1588.874235][ T4144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1588.920958][ T4146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1588.963951][ T4152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.230352][ T4167] tipc: Enabling of bearer rejected, failed to enable media [ 1589.315907][ T4167] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1589.378965][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.418607][T12697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.441156][T12697] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.461661][T12697] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.481003][T12697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.589357][ T4186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.599100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.785721][ T4195] syzkaller0: entered promiscuous mode [ 1589.791855][ T4195] syzkaller0: entered allmulticast mode [ 1589.893379][ T4200] netlink: 'syz.1.17084': attribute type 12 has an invalid length. [ 1589.904456][ T4200] netlink: 'syz.1.17084': attribute type 29 has an invalid length. [ 1589.913064][ T4200] netlink: 'syz.1.17084': attribute type 2 has an invalid length. [ 1590.186405][ T4210] syzkaller0: entered promiscuous mode [ 1590.198556][ T4210] syzkaller0: entered allmulticast mode [ 1590.346701][ T4217] .: renamed from bridge_slave_1 (while UP) [ 1590.524264][ T4234] veth0: entered promiscuous mode [ 1590.891520][ T4259] tipc: Started in network mode [ 1590.896482][ T4259] tipc: Node identity 5e3b20d7d39, cluster identity 4711 [ 1590.927550][ T4259] tipc: Enabled bearer , priority 0 [ 1590.958405][ T4259] tipc: Disabling bearer [ 1591.309800][T18940] lec:lec_start_xmit: lec0:No lecd attached [ 1591.337832][ T4231] veth0: left promiscuous mode [ 1591.519443][ T4303] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1591.613351][ T4313] __nla_validate_parse: 20 callbacks suppressed [ 1591.613372][ T4313] netlink: 88 bytes leftover after parsing attributes in process `syz.3.17118'. [ 1591.661027][ T4313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17118'. [ 1591.706347][ T4313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17118'. [ 1591.945369][ T4340] netlink: 244 bytes leftover after parsing attributes in process `syz.3.17126'. [ 1591.960029][ T4340] mac80211_hwsim hwsim150 wlan1: Caught tx_queue_len zero misconfig [ 1592.036802][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17128'. [ 1592.066632][ T4345] ipt_rpfilter: unknown options [ 1592.451658][ T30] audit: type=1107 audit(1769636311.875:24): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1592.554230][ T4376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17136'. [ 1592.599977][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17135'. [ 1592.916247][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17141'. [ 1592.940077][ T4394] x_tables: duplicate underflow at hook 2 [ 1592.975610][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17141'. [ 1593.222169][ T4407] netlink: 284 bytes leftover after parsing attributes in process `syz.2.17145'. [ 1593.682752][ T4430] netlink: 'syz.0.17151': attribute type 10 has an invalid length. [ 1593.722714][ T4430] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1593.855932][ T4435] bond5: entered promiscuous mode [ 1593.902018][ T4435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1594.001630][ T4446] bond5: (slave xfrm1): refused to change device type [ 1594.025278][ T4447] syzkaller1: entered promiscuous mode [ 1594.046024][ T4447] syzkaller1: entered allmulticast mode [ 1594.085447][ T4445] net_ratelimit: 9 callbacks suppressed [ 1594.085468][ T4445] A link change request failed with some changes committed already. Interface º may have been left with an inconsistent configuration, please check. [ 1594.237612][ T4457] netlink: 'syz.3.17159': attribute type 9 has an invalid length. [ 1594.285131][ T4457] netlink: 'syz.3.17159': attribute type 6 has an invalid length. [ 1594.327910][ T4464] netlink: 'syz.2.17161': attribute type 10 has an invalid length. [ 1594.459492][ T4464] team0: Device veth0_vlan failed to register rx_handler [ 1595.213972][ T4519] sctp: [Deprecated]: syz.0.17174 (pid 4519) Use of int in maxseg socket option. [ 1595.213972][ T4519] Use struct sctp_assoc_value instead [ 1595.286893][ T4523] netlink: 'syz.3.17178': attribute type 1 has an invalid length. [ 1595.305406][ T4523] netlink: 'syz.3.17178': attribute type 5 has an invalid length. [ 1595.317979][ T4523] netlink: 'syz.3.17178': attribute type 1 has an invalid length. [ 1595.334227][ T4523] netlink: 'syz.3.17178': attribute type 5 has an invalid length. [ 1595.840353][ T4545] netlink: 'syz.2.17185': attribute type 1 has an invalid length. [ 1595.936325][ T4550] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1595.944681][ T4550] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1596.280125][ T4569] netlink: 'syz.1.17193': attribute type 5 has an invalid length. [ 1596.709373][ T4587] __nla_validate_parse: 19 callbacks suppressed [ 1596.709396][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17199'. [ 1596.728026][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17197'. [ 1596.817154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 1596.825269][ C0] lec:lec_tx_timeout: lec0 [ 1596.985950][ T4587] team0: Port device team_slave_0 removed [ 1597.095009][ T4609] ip6gre1: entered allmulticast mode [ 1597.212943][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17207'. [ 1597.231327][ T4618] netlink: 'syz.3.17207': attribute type 1 has an invalid length. [ 1597.343959][ T4618] bond6: entered promiscuous mode [ 1597.393738][ T4618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1597.492079][ T4638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1597.852733][ T4661] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17216'. [ 1597.948557][ T4671] veth0: entered promiscuous mode [ 1597.954798][ T4670] veth0: left promiscuous mode [ 1598.043167][ T4676] : entered promiscuous mode [ 1598.049658][ T4680] netlink: 'syz.0.17221': attribute type 11 has an invalid length. [ 1598.068815][ T4680] netlink: 'syz.0.17221': attribute type 11 has an invalid length. [ 1598.089568][ T4680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17221'. [ 1598.342468][ T4703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17226'. [ 1598.553978][ T4716] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17228'. [ 1598.570938][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17228'. [ 1598.722321][ T4721] bond15 (unregistering): Released all slaves [ 1599.239397][ T4748] 0: reclassify loop, rule prio 0, protocol 700 [ 1599.320614][ T4750] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17236'. [ 1599.727258][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17240'. [ 1600.700177][ T4821] validate_nla: 4 callbacks suppressed [ 1600.700199][ T4821] netlink: 'syz.3.17257': attribute type 23 has an invalid length. [ 1600.894755][ T4837] netlink: 'syz.0.17262': attribute type 6 has an invalid length. [ 1601.087508][ T4848] netlink: 'syz.4.17263': attribute type 1 has an invalid length. [ 1601.115804][ T4848] netlink: 'syz.4.17263': attribute type 4 has an invalid length. [ 1601.780222][ T4892] __nla_validate_parse: 4 callbacks suppressed [ 1601.780243][ T4892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1601.800430][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17278'. [ 1601.819948][ T4896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17279'. [ 1601.833077][ T4890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17278'. [ 1601.836262][ T4892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1601.851484][ T4892] netlink: 'syz.2.17277': attribute type 7 has an invalid length. [ 1601.862984][ T4892] netlink: 'syz.2.17277': attribute type 8 has an invalid length. [ 1601.879864][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1601.914726][ T4892] team0: entered promiscuous mode [ 1601.931936][ T4892] team_slave_1: entered promiscuous mode [ 1601.949994][ T4892] `: entered promiscuous mode [ 1601.964836][ T4892] bond_slave_0: entered promiscuous mode [ 1601.971566][ T4892] bond_slave_1: entered promiscuous mode [ 1601.986657][ T4892] gretap0: entered promiscuous mode [ 1601.993569][ T4892] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1602.003758][ T4892] hsr1: Slave B (`) is not up; please bring it up to get a fully working HSR network [ 1602.015661][ T4892] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1602.072047][ T4904] macvtap1: entered allmulticast mode [ 1602.077794][ T4904] veth0_macvtap: entered allmulticast mode [ 1602.488083][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17285'. [ 1602.644831][ T4936] geneve2: entered promiscuous mode [ 1602.667854][ T4936] geneve2: entered allmulticast mode [ 1602.823249][ T4950] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17294'. [ 1602.848021][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17294'. [ 1602.878216][ T4953] netlink: 'syz.0.17294': attribute type 1 has an invalid length. [ 1603.738339][ T5006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17305'. [ 1603.809156][ T5012] netlink: 'syz.2.17306': attribute type 21 has an invalid length. [ 1603.840935][ T5012] netlink: 'syz.2.17306': attribute type 6 has an invalid length. [ 1604.345018][ T5030] netlink: 'syz.1.17311': attribute type 7 has an invalid length. [ 1604.533031][T24826] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.668270][T24826] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.706695][T24826] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.735485][T24826] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1604.828112][ T5052] dvmrp6: entered allmulticast mode [ 1612.430328][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1612.442197][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1612.448375][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1617.777133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1617.785256][ C0] lec:lec_tx_timeout: lec0 [ 1628.946041][T23204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.970753][T23204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.072642][ T5146] __nla_validate_parse: 9 callbacks suppressed [ 1629.072662][ T5146] netlink: 45 bytes leftover after parsing attributes in process `syz.3.17335'. [ 1629.626376][ T5178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17346'. [ 1629.689927][ T5184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17348'. [ 1629.783371][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17347'. [ 1629.798592][ T5184] block nbd2: server does not support multiple connections per device. [ 1629.815836][ T5184] block nbd2: shutting down sockets [ 1629.921475][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17349'. [ 1630.126262][ T5198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1630.314961][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17353'. [ 1630.702716][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17360'. [ 1630.750852][ T5241] openvswitch: netlink: Flow key attr not present in new flow. [ 1630.824920][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1631.072565][ T5257] tunl0: entered promiscuous mode [ 1631.098708][ T5257] validate_nla: 3 callbacks suppressed [ 1631.098728][ T5257] netlink: 'syz.3.17364': attribute type 3 has an invalid length. [ 1631.147032][ T5257] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17364'. [ 1631.180513][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17367'. [ 1631.201390][ T5263] openvswitch: netlink: Flow key attr not present in new flow. [ 1631.461997][ T5282] netlink: 'syz.1.17372': attribute type 1 has an invalid length. [ 1631.545858][ T5286] netlink: 'syz.1.17372': attribute type 1 has an invalid length. [ 1631.554906][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17373'. [ 1631.608446][ T5284] netlink: 'syz.4.17373': attribute type 1 has an invalid length. [ 1631.616351][ T5284] netlink: 'syz.4.17373': attribute type 1 has an invalid length. [ 1631.637480][ T5284] netlink: 'syz.4.17373': attribute type 8 has an invalid length. [ 1631.649050][ T5282] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1631.709611][ T5282] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1631.745069][ T5282] bond5: (slave xfrm1): making interface the new active one [ 1631.755895][ T5282] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 1632.109116][ T5311] netlink: 'syz.4.17383': attribute type 11 has an invalid length. [ 1632.118244][ T5311] netlink: 'syz.4.17383': attribute type 11 has an invalid length. [ 1632.443150][ T5329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1633.090316][ T5369] netlink: 'syz.1.17396': attribute type 10 has an invalid length. [ 1633.152423][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.187563][ T5369] bridge_slave_1: left allmulticast mode [ 1633.197423][ T5369] bridge_slave_1: left promiscuous mode [ 1633.213854][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.253931][ T5369] bridge_slave_1: entered promiscuous mode [ 1633.267011][ T5369] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1633.816604][ T5398] syzkaller1: entered promiscuous mode [ 1633.826296][ T5397] netlink: 'syz.1.17405': attribute type 3 has an invalid length. [ 1633.835064][ T5398] syzkaller1: entered allmulticast mode [ 1633.844544][ T5397] netlink: 'syz.1.17405': attribute type 2 has an invalid length. [ 1633.996070][ T5404] syzkaller0: entered promiscuous mode [ 1634.001967][ T5404] syzkaller0: entered allmulticast mode [ 1634.111638][ T5414] ipvlan3: entered allmulticast mode [ 1634.117557][ T5414] batadv_slave_1: entered allmulticast mode [ 1634.139578][ T5414] batman_adv: batadv0: Adding interface: ipvlan3 [ 1634.165248][ T5414] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.228127][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.239872][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.250210][ T5414] batman_adv: batadv0: Interface activated: ipvlan3 [ 1634.267396][ T5418] __nla_validate_parse: 15 callbacks suppressed [ 1634.267415][ T5418] netlink: 5432 bytes leftover after parsing attributes in process `syz.3.17411'. [ 1634.500921][ T5427] netlink: 'syz.1.17414': attribute type 1 has an invalid length. [ 1634.527153][ T5427] netlink: 208 bytes leftover after parsing attributes in process `syz.1.17414'. [ 1634.564925][ T5427] NCSI netlink: No device for ifindex 65584 [ 1634.700793][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17416'. [ 1634.928149][ T5443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1634.950114][ T5443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1635.021935][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17419'. [ 1635.081029][ T5447] No such timeout policy "syz0" [ 1635.247877][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17424'. [ 1635.259605][ T5459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17424'. [ 1635.312888][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17424'. [ 1635.637855][ T5487] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1635.683337][ T5488] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1635.692996][ T5483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17428'. [ 1635.786880][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.809113][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.835696][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.861117][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.891273][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.925413][ T5491] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1635.954955][ T5503] IPv6: NLM_F_CREATE should be specified when creating new route [ 1636.079986][ T5503] veth13: entered promiscuous mode [ 1637.376885][ T5573] syzkaller0: entered promiscuous mode [ 1637.386402][ T5573] syzkaller0: entered allmulticast mode [ 1637.842673][ T5600] syzkaller0: entered promiscuous mode [ 1637.848712][ T5600] syzkaller0: entered allmulticast mode [ 1637.871444][ T5607] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 1637.912012][ T5604] bond6: Unable to set down delay as MII monitoring is disabled [ 1637.922471][ T5604] bond6 (unregistering): Released all slaves [ 1639.990424][ T5621] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1640.142280][ T5636] __nla_validate_parse: 23 callbacks suppressed [ 1640.142307][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17469'. [ 1640.223575][ T5636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1640.352110][ T5657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17470'. [ 1640.352869][ T5655] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17471'. [ 1640.378132][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17474'. [ 1641.106554][ T5697] syzkaller0: entered promiscuous mode [ 1641.125118][ T5697] syzkaller0: entered allmulticast mode [ 1641.144089][ T5693] tipc: Enabled bearer , priority 0 [ 1641.196061][ T5692] tipc: Resetting bearer [ 1641.262418][ T5692] tipc: Disabling bearer [ 1641.290607][ T5704] tunl0: Caught tx_queue_len zero misconfig [ 1641.346369][ T5711] syzkaller0: entered promiscuous mode [ 1641.355748][ T5711] syzkaller0: entered allmulticast mode [ 1641.560419][ T5716] bond15: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1641.580258][ T5716] bond15 (unregistering): Released all slaves [ 1641.772759][ T5735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17496'. [ 1641.782954][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17496'. [ 1641.792814][ T5735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17496'. [ 1641.802523][ T5735] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.17496'. [ 1641.874879][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17497'. [ 1642.091908][ T5746] validate_nla: 4 callbacks suppressed [ 1642.091928][ T5746] netlink: 'syz.0.17500': attribute type 1 has an invalid length. [ 1642.194289][ T5746] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1642.258297][ T5755] dvmrp6: left allmulticast mode [ 1642.310574][ T5758] netlink: 'syz.1.17503': attribute type 1 has an invalid length. [ 1642.353993][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17505'. [ 1642.374335][ T5760] vlan3: entered allmulticast mode [ 1642.379868][ T5760] mac80211_hwsim hwsim143 wlan0: entered allmulticast mode [ 1642.520763][ T5758] lo: entered promiscuous mode [ 1642.549711][ T5758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1642.758775][ T5778] sctp: [Deprecated]: syz.0.17511 (pid 5778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1642.758775][ T5778] Use struct sctp_sack_info instead [ 1642.814307][ T5778] nft_compat: unsupported protocol 0 [ 1642.943931][ T5796] Bluetooth: MGMT ver 1.23 [ 1643.392810][ T5820] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1643.622373][ T5837] syzkaller0: entered promiscuous mode [ 1643.637953][ T5837] syzkaller0: entered allmulticast mode [ 1643.677434][ T5840] netlink: 'syz.4.17534': attribute type 4 has an invalid length. [ 1643.730797][ T5849] netlink: 'syz.4.17534': attribute type 4 has an invalid length. [ 1643.762371][ T5851] openvswitch: netlink: Flow key attr not present in new flow. [ 1643.773668][ T5846] ================================================================== [ 1643.781764][ T5846] BUG: KASAN: slab-use-after-free in sk_msg_recvmsg+0x6d9/0xc30 [ 1643.789439][ T5846] Read of size 4 at addr ffff888045bdb028 by task syz.1.17536/5846 [ 1643.797446][ T5846] [ 1643.799819][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.1.17536 Not tainted syzkaller #0 PREEMPT(full) [ 1643.799845][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1643.799860][ T5846] Call Trace: [ 1643.799869][ T5846] [ 1643.799879][ T5846] dump_stack_lvl+0xe8/0x150 [ 1643.799912][ T5846] print_report+0xba/0x230 [ 1643.799936][ T5846] ? sk_msg_recvmsg+0x6d9/0xc30 [ 1643.799959][ T5846] kasan_report+0x117/0x150 [ 1643.799986][ T5846] ? sk_msg_recvmsg+0x6d9/0xc30 [ 1643.800013][ T5846] sk_msg_recvmsg+0x6d9/0xc30 [ 1643.800048][ T5846] udp_bpf_recvmsg+0x4bd/0xe00 [ 1643.800078][ T5846] ? udp_bpf_recvmsg+0xe8/0xe00 [ 1643.800116][ T5846] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1643.800144][ T5846] ? aa_sk_perm+0x15a/0x960 [ 1643.800169][ T5846] ? aa_sk_perm+0x82d/0x960 [ 1643.800190][ T5846] ? finish_task_switch+0x23c/0x920 [ 1643.800222][ T5846] ? sock_rps_record_flow+0x19/0x400 [ 1643.800251][ T5846] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1643.800279][ T5846] inet_recvmsg+0x260/0x270 [ 1643.800305][ T5846] ? trace_sched_exit_tp+0x36/0xf0 [ 1643.800335][ T5846] ? __pfx_inet_recvmsg+0x10/0x10 [ 1643.800362][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 1643.800393][ T5846] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1643.800416][ T5846] ? security_socket_recvmsg+0x7e/0x2c0 [ 1643.800449][ T5846] sock_recvmsg+0x1a8/0x270 [ 1643.800472][ T5846] ____sys_recvmsg+0x1e6/0x4a0 [ 1643.800515][ T5846] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1643.800553][ T5846] ? import_iovec+0x73/0xa0 [ 1643.800586][ T5846] ___sys_recvmsg+0x215/0x590 [ 1643.800618][ T5846] ? __pfx____sys_recvmsg+0x10/0x10 [ 1643.800649][ T5846] ? __fget_files+0x2a/0x420 [ 1643.800683][ T5846] ? __fget_files+0x3a0/0x420 [ 1643.800713][ T5846] do_recvmmsg+0x334/0x800 [ 1643.800746][ T5846] ? __pfx_do_recvmmsg+0x10/0x10 [ 1643.800782][ T5846] ? __pfx_do_futex+0x10/0x10 [ 1643.800822][ T5846] __x64_sys_recvmmsg+0x198/0x250 [ 1643.800854][ T5846] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1643.800891][ T5846] do_syscall_64+0xe2/0xf80 [ 1643.800912][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.800934][ T5846] ? trace_irq_disable+0x37/0x100 [ 1643.800955][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 1643.800980][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.801001][ T5846] RIP: 0033:0x7f19f599aeb9 [ 1643.801021][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.801040][ T5846] RSP: 002b:00007f19f6881028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1643.801064][ T5846] RAX: ffffffffffffffda RBX: 00007f19f5c16090 RCX: 00007f19f599aeb9 [ 1643.801081][ T5846] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 1643.801095][ T5846] RBP: 00007f19f5a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1643.801110][ T5846] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 1643.801125][ T5846] R13: 00007f19f5c16128 R14: 00007f19f5c16090 R15: 00007fff3ab69828 [ 1643.801151][ T5846] [ 1643.801160][ T5846] [ 1644.093014][ T5846] Allocated by task 5845: [ 1644.097362][ T5846] kasan_save_track+0x3e/0x80 [ 1644.102059][ T5846] __kasan_kmalloc+0x93/0xb0 [ 1644.106661][ T5846] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1644.112068][ T5846] sk_psock_skb_ingress_self+0x60/0x350 [ 1644.117734][ T5846] sk_psock_verdict_recv+0x7d9/0x8d0 [ 1644.123138][ T5846] udp_read_skb+0x73e/0x7e0 [ 1644.127689][ T5846] sk_psock_verdict_data_ready+0x12d/0x550 [ 1644.133615][ T5846] __udp_enqueue_schedule_skb+0xc54/0x10b0 [ 1644.139971][ T5846] udp_queue_rcv_one_skb+0xac5/0x19c0 [ 1644.145366][ T5846] __udp4_lib_mcast_deliver+0xc06/0xcf0 [ 1644.150941][ T5846] __udp4_lib_rcv+0x10f6/0x2620 [ 1644.155898][ T5846] ip_protocol_deliver_rcu+0x282/0x440 [ 1644.161384][ T5846] ip_local_deliver_finish+0x3bb/0x6f0 [ 1644.166955][ T5846] NF_HOOK+0x336/0x3c0 [ 1644.171044][ T5846] ip_sublist_rcv_finish+0x221/0x2a0 [ 1644.176345][ T5846] ip_sublist_rcv+0x5c6/0xa70 [ 1644.181049][ T5846] ip_list_rcv+0x3f1/0x450 [ 1644.185498][ T5846] __netif_receive_skb_list_core+0x7e5/0x810 [ 1644.191494][ T5846] netif_receive_skb_list_internal+0x995/0xcf0 [ 1644.197674][ T5846] netif_receive_skb_list+0x54/0x410 [ 1644.202987][ T5846] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 1644.208461][ T5846] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1644.213862][ T5846] bpf_prog_test_run+0x2c7/0x340 [ 1644.218817][ T5846] __sys_bpf+0x5cb/0x920 [ 1644.223096][ T5846] __x64_sys_bpf+0x7c/0x90 [ 1644.227538][ T5846] do_syscall_64+0xe2/0xf80 [ 1644.232067][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.237976][ T5846] [ 1644.240311][ T5846] Freed by task 5847: [ 1644.244301][ T5846] kasan_save_track+0x3e/0x80 [ 1644.248988][ T5846] kasan_save_free_info+0x46/0x50 [ 1644.254027][ T5846] __kasan_slab_free+0x5c/0x80 [ 1644.258803][ T5846] kfree+0x1be/0x650 [ 1644.262715][ T5846] sk_msg_recvmsg+0xaa8/0xc30 [ 1644.267403][ T5846] udp_bpf_recvmsg+0x4bd/0xe00 [ 1644.272187][ T5846] inet_recvmsg+0x260/0x270 [ 1644.276709][ T5846] sock_recvmsg+0x1a8/0x270 [ 1644.281226][ T5846] ____sys_recvmsg+0x1e6/0x4a0 [ 1644.286011][ T5846] ___sys_recvmsg+0x215/0x590 [ 1644.290706][ T5846] do_recvmmsg+0x334/0x800 [ 1644.295146][ T5846] __x64_sys_recvmmsg+0x198/0x250 [ 1644.300185][ T5846] do_syscall_64+0xe2/0xf80 [ 1644.304708][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.310615][ T5846] [ 1644.312951][ T5846] The buggy address belongs to the object at ffff888045bdb000 [ 1644.312951][ T5846] which belongs to the cache kmalloc-1k of size 1024 [ 1644.327012][ T5846] The buggy address is located 40 bytes inside of [ 1644.327012][ T5846] freed 1024-byte region [ffff888045bdb000, ffff888045bdb400) [ 1644.340822][ T5846] [ 1644.343168][ T5846] The buggy address belongs to the physical page: [ 1644.349599][ T5846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45bd8 [ 1644.358369][ T5846] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1644.366880][ T5846] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1644.374721][ T5846] page_type: f5(slab) [ 1644.378734][ T5846] raw: 00fff00000000040 ffff88813fe26dc0 ffffea000199b800 dead000000000002 [ 1644.387337][ T5846] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1644.395940][ T5846] head: 00fff00000000040 ffff88813fe26dc0 ffffea000199b800 dead000000000002 [ 1644.404618][ T5846] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1644.413299][ T5846] head: 00fff00000000003 ffffea000116f601 00000000ffffffff 00000000ffffffff [ 1644.421982][ T5846] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1644.430674][ T5846] page dumped because: kasan: bad access detected [ 1644.437103][ T5846] page_owner tracks the page as allocated [ 1644.442824][ T5846] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17882, tgid 17882 (syz-executor), ts 350541556905, free_ts 350300415266 [ 1644.464548][ T5846] post_alloc_hook+0x228/0x280 [ 1644.469330][ T5846] get_page_from_freelist+0x24dc/0x2580 [ 1644.474894][ T5846] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1644.480721][ T5846] alloc_pages_mpol+0x232/0x4a0 [ 1644.485595][ T5846] allocate_slab+0x86/0x3a0 [ 1644.490122][ T5846] ___slab_alloc+0xd82/0x1760 [ 1644.494816][ T5846] __slab_alloc+0x65/0x100 [ 1644.499248][ T5846] __kvmalloc_node_noprof+0x673/0x8d0 [ 1644.504634][ T5846] rhashtable_init_noprof+0x52e/0xa70 [ 1644.510022][ T5846] ipc_init_ids+0x7b/0x1f0 [ 1644.514453][ T5846] copy_ipcs+0x571/0x6c0 [ 1644.518710][ T5846] create_new_namespaces+0x210/0x6a0 [ 1644.524101][ T5846] unshare_nsproxy_namespaces+0x11a/0x160 [ 1644.529842][ T5846] ksys_unshare+0x4f4/0x900 [ 1644.534373][ T5846] __x64_sys_unshare+0x38/0x50 [ 1644.539162][ T5846] do_syscall_64+0xe2/0xf80 [ 1644.543693][ T5846] page last free pid 17166 tgid 17166 stack trace: [ 1644.550207][ T5846] __free_frozen_pages+0xbf8/0xd70 [ 1644.555334][ T5846] __put_partials+0x146/0x170 [ 1644.560033][ T5846] __slab_free+0x294/0x320 [ 1644.564485][ T5846] qlist_free_all+0x97/0x100 [ 1644.569113][ T5846] kasan_quarantine_reduce+0x148/0x160 [ 1644.574599][ T5846] __kasan_slab_alloc+0x22/0x80 [ 1644.579462][ T5846] __kmalloc_cache_noprof+0x36f/0x6e0 [ 1644.584852][ T5846] nsim_fib_event+0xf3c/0xa410 [ 1644.589632][ T5846] nsim_fib_event_work+0x254/0x3d0 [ 1644.594768][ T5846] process_scheduled_works+0xaec/0x17a0 [ 1644.600347][ T5846] worker_thread+0xda6/0x1360 [ 1644.605045][ T5846] kthread+0x726/0x8b0 [ 1644.609135][ T5846] ret_from_fork+0x51b/0xa40 [ 1644.613755][ T5846] ret_from_fork_asm+0x1a/0x30 [ 1644.618548][ T5846] [ 1644.620890][ T5846] Memory state around the buggy address: [ 1644.626628][ T5846] ffff888045bdaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1644.634797][ T5846] ffff888045bdaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1644.642873][ T5846] >ffff888045bdb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.650944][ T5846] ^ [ 1644.656336][ T5846] ffff888045bdb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.664413][ T5846] ffff888045bdb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.673208][ T5846] ================================================================== [ 1644.715800][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1644.723339][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.1.17536 Not tainted syzkaller #0 PREEMPT(full) [ 1644.732739][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1644.742914][ T5846] Call Trace: [ 1644.746218][ T5846] [ 1644.749190][ T5846] vpanic+0x1e0/0x670 [ 1644.753219][ T5846] panic+0xc5/0xd0 [ 1644.756977][ T5846] ? __pfx_panic+0x10/0x10 [ 1644.761427][ T5846] ? preempt_schedule_common+0x82/0xd0 [ 1644.766915][ T5846] ? sk_msg_recvmsg+0x6d9/0xc30 [ 1644.771793][ T5846] check_panic_on_warn+0x89/0xb0 [ 1644.776773][ T5846] ? sk_msg_recvmsg+0x6d9/0xc30 [ 1644.781674][ T5846] end_report+0x6f/0x140 [ 1644.785959][ T5846] kasan_report+0x128/0x150 [ 1644.790503][ T5846] ? sk_msg_recvmsg+0x6d9/0xc30 [ 1644.795396][ T5846] sk_msg_recvmsg+0x6d9/0xc30 [ 1644.800121][ T5846] udp_bpf_recvmsg+0x4bd/0xe00 [ 1644.804923][ T5846] ? udp_bpf_recvmsg+0xe8/0xe00 [ 1644.809817][ T5846] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1644.815136][ T5846] ? aa_sk_perm+0x15a/0x960 [ 1644.819680][ T5846] ? aa_sk_perm+0x82d/0x960 [ 1644.824215][ T5846] ? finish_task_switch+0x23c/0x920 [ 1644.829454][ T5846] ? sock_rps_record_flow+0x19/0x400 [ 1644.834781][ T5846] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 1644.840111][ T5846] inet_recvmsg+0x260/0x270 [ 1644.844660][ T5846] ? trace_sched_exit_tp+0x36/0xf0 [ 1644.849800][ T5846] ? __pfx_inet_recvmsg+0x10/0x10 [ 1644.854849][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 1644.859814][ T5846] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1644.865121][ T5846] ? security_socket_recvmsg+0x7e/0x2c0 [ 1644.870698][ T5846] sock_recvmsg+0x1a8/0x270 [ 1644.875226][ T5846] ____sys_recvmsg+0x1e6/0x4a0 [ 1644.880017][ T5846] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1644.885327][ T5846] ? import_iovec+0x73/0xa0 [ 1644.889858][ T5846] ___sys_recvmsg+0x215/0x590 [ 1644.894560][ T5846] ? __pfx____sys_recvmsg+0x10/0x10 [ 1644.899778][ T5846] ? __fget_files+0x2a/0x420 [ 1644.904391][ T5846] ? __fget_files+0x3a0/0x420 [ 1644.909092][ T5846] do_recvmmsg+0x334/0x800 [ 1644.913641][ T5846] ? __pfx_do_recvmmsg+0x10/0x10 [ 1644.918630][ T5846] ? __pfx_do_futex+0x10/0x10 [ 1644.923351][ T5846] __x64_sys_recvmmsg+0x198/0x250 [ 1644.928412][ T5846] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1644.933990][ T5846] do_syscall_64+0xe2/0xf80 [ 1644.938518][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.944706][ T5846] ? trace_irq_disable+0x37/0x100 [ 1644.949747][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 1644.954529][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.960437][ T5846] RIP: 0033:0x7f19f599aeb9 [ 1644.964882][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.984508][ T5846] RSP: 002b:00007f19f6881028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1644.992950][ T5846] RAX: ffffffffffffffda RBX: 00007f19f5c16090 RCX: 00007f19f599aeb9 [ 1645.000938][ T5846] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 1645.008954][ T5846] RBP: 00007f19f5a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1645.016943][ T5846] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 1645.024929][ T5846] R13: 00007f19f5c16128 R14: 00007f19f5c16090 R15: 00007fff3ab69828 [ 1645.033017][ T5846] [ 1645.036650][ T5846] Kernel Offset: disabled [ 1645.040977][ T5846] Rebooting in 86400 seconds..