last executing test programs: 2.167380891s ago: executing program 1 (id=8316): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x8, 0xfffffffd, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_IFNAME={0x14}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e7ff0000000000bef10000000000000000000000e8193220cd245e"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000060a0104000000007a3100000000140000001100ccb2c7010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f4620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000445b06000000000000000600000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000280)={{0x33, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x6, 0x7d}, {@remote, 0x4e23, 0x3, 0x200, 0xf1, 0x533b}}, 0x44) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.970115098s ago: executing program 0 (id=8320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x21098, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x7b, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x21098, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x7b, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) (async) 1.881920876s ago: executing program 4 (id=8322): syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x3}]}], @echo_reply}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) 1.870120463s ago: executing program 1 (id=8323): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x21, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c5a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x81, &(0x7f0000000400)=""/129, 0x40f00, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0xfffffff8, 0xe}, 0x10, 0xad1, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[r1, r0, r1, r1, r1, r1, r1, r0, r0], &(0x7f0000000600)=[{0x4, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = accept4(0xffffffffffffffff, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000780)=0x80, 0x81000) bind$xdp(r6, &(0x7f00000007c0)={0x2c, 0x8, r4, 0x16, r7}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000800)='htcp', 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc000) recvmmsg(r6, &(0x7f0000001d40)=[{{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/70, 0x46}, {&(0x7f0000001a80)=""/52, 0x34}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b00)=""/51, 0x33}], 0x1, &(0x7f0000001b80)=""/29, 0x1d}, 0xc}, {{&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/35, 0x23}, {&(0x7f0000001c80)=""/64, 0x40}], 0x2, &(0x7f0000001d00)=""/5, 0x5}, 0xde000000}], 0x3, 0x2040, &(0x7f0000001e00)) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r7) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x5c, r12, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044881}, 0x40000) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000002040), r7) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x48, r13, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x24040890) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x8c, r12, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffff8, 0x80}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x80}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4854}, 0x40020) accept4(r10, &(0x7f0000002300)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000002380)=0x80, 0x80000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r14, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x44, r9, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 1.580936034s ago: executing program 1 (id=8327): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf, 0x5ae9}, {0x6, 0x3, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close(r1) 1.523765328s ago: executing program 0 (id=8329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140c, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.520484715s ago: executing program 4 (id=8330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r1, 0x0, 0x0, 0x80800) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) socket(0x2000000015, 0x80005, 0x0) (async) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fffffffffffffff, 0x2, 0x4}) (async) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fffffffffffffff, 0x2, 0x4}) recvmsg$unix(r2, 0x0, 0x40002141) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) 1.384130433s ago: executing program 0 (id=8332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000000100000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000000000000000cf0c473e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.362300082s ago: executing program 4 (id=8333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400007fffffffffffffff00000900020073797a32000000000900010073797a300000000028000480240001800b000100657874686472000014160280080003400000004a0800064000000001140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) 1.308203035s ago: executing program 1 (id=8334): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0xa11c}, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'virt_wifi0\x00', @random="0600"}) 1.307528141s ago: executing program 3 (id=8335): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x11}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6cc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1000, 0x9c, 0x0, 0x55fa, 0x49d, 0xd351, 0x2, 0x796, 0x2]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x2, 0x45, 0x4, 0x4, 0x7f, 0x9, 0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x30f}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd5}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x200, 0x4]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2c884616}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x1000000000000000, 0x81, 0x200, 0x4, 0x8}, {0x80000001, 0x2, 0x13c5, 0x3, 0x8}, {0x100, 0x4, 0x80, 0x7, 0x9}], 0x3, 0x28, 0x8, 0x4}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x3e9, 0x20, 0x70bd26, 0x25dfdbfc, {0x41, 0x1, 0x1, r5, 0xa, 0x0, 0xfff00, 0x0, 0x0, 0x9, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x9c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)) (async) close(r2) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000580)={0x7fffffff, 0x11b, 0x5, 0x40, 0xfffffff8}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000007c0)=0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) (async) r10 = getgid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x1e8, 0x308, 0x450, 0x1e8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, &(0x7f0000000600), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xff0000ff], 'lo\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x5f, 0x2, 0xc}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xd2}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x36}, [0x7fffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffff00], 'tunl0\x00', 'team0\x00', {0xff}, {0xff}, 0x2f, 0xfb, 0x4, 0x62}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@loopback, 0x29, 0x17, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x80000001, 0xd}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@empty, 0xd, 0x37, 0x4}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r7, r8, r9, r10, 0x0, 0x7}}, @common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x7ff, 0x3, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@rand_addr=0x64010100, 0x21, 0x31, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x2001089c) (async) r11 = openat$cgroup_procs(r0, &(0x7f0000001080)='cgroup.procs\x00', 0x2, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0}, &(0x7f0000001100)=0xc) write$cgroup_pid(r11, &(0x7f0000001140)=r12, 0x12) (async) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000001180), &(0x7f00000011c0)=0x4) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r13, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "f1ae13d5664398c41e22d27e86018d98"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1a}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20008080) r15 = accept4$packet(r0, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14, 0x80000) getsockopt$PNPIPE_IFINDEX(r15, 0x113, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x4) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000014c0)=0xfe, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x24, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001640)='GPL\x00', 0x0, 0x78, &(0x7f0000001680)=""/120, 0x40f00, 0x0, '\x00', r6, 0x0, r0, 0x8, &(0x7f0000001700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0xe, 0x100, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001900)=[r0, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001940)=[{0x4, 0x5, 0x9, 0x5}], 0x10, 0xffff}, 0x94) 1.263775947s ago: executing program 0 (id=8336): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x10c, 0x36, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@nested={0x4, 0x162}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf65, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xa, 0x9, 0x1, 0xc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x17, &(0x7f00000003c0)=""/23, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x3d864218}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000480)=[r1], &(0x7f0000000580)=[{0x2, 0x4, 0xa, 0xb}, {0x3, 0x1, 0xe, 0xa}, {0x3, 0x1, 0xa, 0xa}, {0x1, 0x3, 0x3, 0x8}, {0x2, 0x5, 0xf, 0xb}, {0x2, 0x2, 0x8, 0xb}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) bind$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @any, 0x88}, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000006c0)={0x1, [0x0]}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}]}, 0x30}}, 0x10) 1.22672501s ago: executing program 4 (id=8337): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c, 0x80c00) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x19, r1}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00], 'batadv_slave_1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x62, 0x0, 0x5, 0x68}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xa, 0x91}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x62, 0x8, 0x5, 0x3, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0x6b747ad459f1b964], [0xff, 0xff, 0x0, 0xffffffff], [0xff, 0xffffffff], 0x10, 0x2040}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x8, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x388f, 0x1}}, @common=@mh={{0x28}, {"d7ed", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xa}, {0x0, 0x1}, {0xffe0, 0x6}}, [{0x8}]}, 0x2c}}, 0x4000010) r5 = socket$kcm(0x10, 0x400000002, 0x0) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4000, r2}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@bridge_getlink={0x74, 0x12, 0x2, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x18246, 0x1}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3137}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008814}, 0x20000000) (async) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1, &(0x7f0000000140)=""/22, 0x16}, 0x40000000) 1.157075638s ago: executing program 2 (id=8338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800900010068617368000000002400028008000640000000000800074000230001080002400000000008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 1.127005978s ago: executing program 0 (id=8339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000000880)={0x1248, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e26573a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5be8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd73cf21}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9910}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}]}]}]}, 0x1248}}, 0x80) 1.084465712s ago: executing program 3 (id=8340): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x30, "ab78f3949528282d74c64adf7414060187180cd8094ac5ed62810202d60222f70a2f4a17950ffa6d3bc4779fca1ec843"}, &(0x7f0000000080)=0x38) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r1, 0x2, 0x30}, &(0x7f0000000140)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0x1f, r3}]}, 0x44}}, 0x4) 1.020136126s ago: executing program 1 (id=8341): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, &(0x7f0000002280)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e22, 0x7, @private2, 0x5}, {0xa, 0x4e21, 0xbf5, @remote, 0x3e3b506f}, 0x0, {[0xfffffff7, 0xffffffff, 0xfffffffa, 0x7, 0x299, 0x1, 0x7, 0x4]}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c00000008030000000000"], 0x0, 0x27}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000001340)=ANY=[@ANYRESHEX=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x1f}, 0x94) 1.018658963s ago: executing program 2 (id=8342): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x20, 0x1, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r0, &(0x7f0000000200)='\x00', 0x414001, &(0x7f0000000280)={@_ha_fsid={[0xffffffff, 0x10]}, {0x58a, 0x6bf, 0x41}}, 0x9, &(0x7f00000002c0), &(0x7f0000000300)=0x9}, 0x1, &(0x7f00000003c0)=[{0x3, 0x6, &(0x7f0000000340)='#,[(&\x00', &(0x7f0000000380)="ba59f529c5eab608d234d588dd4935790eb8bc053bce1522cf3e", 0x1a, 0x20}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, 0xffffffffffffffff, 0x2f, 0x2014, 0x0, @value=r3, @void, @void, @void, r2}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 838.803328ms ago: executing program 3 (id=8343): r0 = socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r2, 0x5, 0x3e7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {0x7ffc}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0xc9}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x78}}, 0x4008000) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 805.501753ms ago: executing program 0 (id=8344): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @empty, "fd0c0000"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xfe, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 803.63066ms ago: executing program 2 (id=8345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) 729.480887ms ago: executing program 2 (id=8346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) 655.908869ms ago: executing program 3 (id=8347): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) (rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000740)={0x0, 0x9c, 0x8, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x81, 0x3, 0x3, 0x851, 0x9}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe, 0x4}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2, 0x2}, 0x28) (async, rerun: 64) accept(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0xd31eacd33fa6716b) 556.497879ms ago: executing program 3 (id=8348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) recvmsg$unix(r1, &(0x7f0000000c00)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/214, 0xd6}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20}, 0x40000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000880)={r3, 0xa0, &(0x7f00000007c0)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, @in6={0xa, 0x7f, 0x8, @mcast2}, @in6={0xa, 0x4e24, 0xffffc90b, @local, 0x1}, @in6={0xa, 0x4e20, 0x7, @local}]}, &(0x7f00000008c0)=0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x48001) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002b40)=@newtfilter={0x1b0c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xfff2}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1adc, 0x2, [@TCA_CGROUP_POLICE={0x46c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7ff, 0x6, 0x5, 0x80000001, 0x10, 0x7, 0x0, 0xdcd8, 0x7, 0x40, 0x6a61f4da, 0x55, 0x5, 0x40, 0x7f, 0x0, 0xffffffff, 0xc1, 0x9, 0x101, 0x80000001, 0x44776e2d, 0x2, 0x0, 0x2, 0x7, 0xd14e, 0x1000, 0x9, 0x0, 0x9, 0x9, 0x7, 0x7, 0x9, 0x2, 0xffffffff, 0xffff, 0xa, 0x4, 0x2, 0xbf, 0x0, 0xffffffff, 0x8361, 0xe2f2, 0x46, 0x1, 0x6c2, 0x4, 0x8, 0x7ff, 0x200, 0x6, 0x9, 0x5, 0x0, 0x0, 0x286, 0x80, 0x5, 0x4a85, 0xa8fd, 0x6e1, 0x2, 0x9, 0x800, 0x1f05, 0x1, 0x7fffffff, 0x5, 0x9, 0x5, 0x1, 0x3, 0xfffff302, 0x0, 0x7, 0x5, 0x3, 0x9, 0x5, 0x7fff, 0x3, 0x0, 0x6, 0xfffffff8, 0x2, 0x6, 0x0, 0xfffffffa, 0xca7, 0xb358, 0x10, 0x5, 0x1ff, 0x8, 0xc, 0x8, 0x1ff, 0x0, 0x8001, 0x8000, 0x0, 0x22000000, 0x3, 0xb921, 0xfffffc01, 0x1ff, 0x7, 0x4, 0x9, 0x9, 0x8, 0xfffffffb, 0x6, 0x6, 0x8, 0x7, 0xfffffc00, 0x3, 0xfffffff4, 0x485604ec, 0x1, 0x0, 0x7, 0x6, 0x3c8, 0x2, 0x5, 0x54c, 0x6, 0x7, 0x401, 0x6, 0xffffff91, 0xffffffff, 0x2, 0x401, 0x85, 0x2, 0x9, 0x7, 0x4, 0xfffffff8, 0x7, 0x2, 0x3, 0xfffffe00, 0xae2b, 0x3, 0xb77e, 0x4, 0x80, 0x3, 0x4, 0x4, 0x3ff, 0x4, 0x200, 0xe82, 0x3ff, 0x7, 0xd, 0x30, 0x1, 0x81, 0x7, 0x4, 0x9, 0x6, 0x81, 0x8, 0x6da7, 0x81, 0x7, 0x2, 0x7, 0x4, 0x80000000, 0x1, 0x10000, 0x9, 0x2, 0x800, 0x3, 0x8, 0x4, 0x0, 0x9, 0x3, 0x8000, 0x7, 0x3ff, 0x9, 0x6, 0xffffffff, 0x7f, 0x6e52, 0x51, 0x8, 0x5, 0x5, 0x6, 0x0, 0x400, 0x5, 0xff, 0xaed4, 0x7c50, 0x6, 0xf, 0x9, 0xfffffff2, 0x3, 0x6, 0x0, 0x9, 0x97, 0x3, 0x4, 0x7, 0x2, 0x1, 0x9, 0x48ec, 0x7f, 0x5, 0x6, 0x7, 0x19f, 0x6, 0x2, 0x80000001, 0x8, 0x7, 0x5, 0x9, 0x2, 0xf, 0x8, 0x2, 0x10000, 0x9c, 0x7, 0x5, 0xffff8001, 0x0, 0x80000001, 0x4130000, 0x800, 0x7, 0x4, 0x882]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0xc, 0xd162b9c, 0xfff, {0x10, 0x2, 0x12, 0x400, 0x9, 0x6a7}, {0x39, 0x0, 0x23, 0x8, 0x95, 0x10000}, 0x1, 0xec19, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_CGROUP_ACT={0x1244, 0x1, [@m_vlan={0x104, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff7, 0x1, 0x20000000, 0x217a}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xb3, 0x6, "88fb880bc463c059345173c23c557998b25c9bad1b7f54dcd8830639779b7fcc40d6ffb7d6ec180f553b02727c362a8c78e674df81f9313a35927e79a9a766e25a1421eaaed70031082475fa944577f857ba4898c5e680402d187f9b784f650543e5299e5a9758a09b5b868b34401b413792a9f6fd5e46e52d17dc00b62211a73ea1b7db862a8d7a843de061b8cbbd565f4926e6be695a968fbe48e09da79fd44e1d546968f06eced78199d64fa879"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x1, 0x7, 0x5, 0x7}}]}, {0x9b, 0x6, "24b3f684a051731b6a6d43fee46077e60af6db7281fe18bb3f72846998b418bd38c6df67fcf945029ab21d3bb88bc29e75cd99e453b2faf66ead6e6be955ff2a996f138a29acab9c6154360b30c03b2e7a1a456060d6651714758d7c6a35c1fc110c53cb9fd7e034038b641b788b1158ff0d870c6f918f6c1edf7d47e452633024c72b5c909dca56ab2b99ccb6ae5dd42148cea9b64d8b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1050, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x0, 0x8, 0x2, 0x7}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x314, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x6, 0x0, 0x0, {{0x96, 0x2, 0x8}, {0x9, 0x8, 0x2, "bd86fb3d02e1f268"}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="e14ae8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7, 0x2}, {0x741, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xfd, 0x2}, {0x40, 0x3e, 0x1}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ae", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="eb83a8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x10, 0x2}, {0x30, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xa, 0x1}, {0x1ff, 0x8}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x6}, {0xffffffffffffffff, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x7fff}, {{}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7dd, 0x1, 0x800}, {0x5, 0xfffffffa, 0xb46, 0x7, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x69, 0x3, 0x3}, {0xd21f, 0xa37, 0xd48, 0xf32}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0xff, 0x4, 0xfff9}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="f9dd962dda", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff7, 0x4, 0x1}, {0x4, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="9657b563", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8fbd", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="911a", @TCF_META_TYPE_VAR="93df5b0bc38e3c08ee"]}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x7ff}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x1}, {{0x3}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x800, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x91, 0x7, 0x4}, {{0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0xff, 0x0, 0x7}, "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"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x4, 0x2, 0xf4}, {0x7, 0x7, 0x2, "c0a9b80a2a8d1b"}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x100, 0x9, 0xe4}}}]}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7c58}]}, @TCA_CGROUP_EMATCHES={0xf4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x7}, {{0x1, 0x0, 0x1, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x1}, {0x6, 0x5, 0xdf, 0x5, 0xe, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xdbb1}, "2f8d36a09e791e0c24e679f0450751de76cc2c4148c87c10a090972b7e63d928d6257e8dc51b8586ad2e11dc3c8fffa3e9571ebda26d6e16493ad0beba542610f3b7c8abcbd5263e68fa7f9077eefa99ad7110842ccfdef23eedc05a"}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="76ed47df213f", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0xf, 0x1}, {0x400, 0x81, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x7, 0x2}, {0xc, 0xbd, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x1b0c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000), 0x6) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) (async) r13 = accept(r12, 0x0, 0x0) recvmsg$kcm(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/132, 0x84}], 0x2}, 0x20) (async) sendmmsg$alg(r10, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r1], 0xb0}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="ec6252107d57b546f09ab7afc926cd94940ae0f5dcaf4e9e42c25803d7f08ebb535b7f0a65dc0a092c2951ba6e8d55c70f14431d6d282ba3e21e164ab3bc58f495b253e4b8aec5483136dec8bb308b75f594f86a01cd0053800b908e3f7cc30713e9ad91c1c73f4988dfec6c2d86b08f3f57648dbc18d5e75c93024fcd3152ac475587ab69532d079e3212c34821e69bcfdfc8f36dc4", 0x96}, {&(0x7f0000000500)}], 0x2, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x100}], 0x2, 0x14) (async) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x51) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000001080)={r4, 0x7}, &(0x7f00000010c0)=0x8) ioctl$sock_bt_hci(r11, 0x400448e6, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r10) 516.491213ms ago: executing program 2 (id=8349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0x2, 0x800) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = epoll_create1(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001400)={0xe0000017}) epoll_wait(r3, &(0x7f0000001940)=[{}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f920000001a0000000017f96c47a49ae4a6", @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 171.582356ms ago: executing program 4 (id=8350): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000e00)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xc0, &(0x7f0000000300)={@_ha_fsid={[0x9, 0x186f]}, {0xff3c, 0x2, 0x6, 0x9}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x8}, 0xa, &(0x7f0000000cc0)=[{0x3, 0x5, &(0x7f00000003c0)='ip6tnl0\x00', &(0x7f0000000400)="89f202159d0f92abca0505d1efb15c934fee3776f1908ee20d271ed6", 0x1c, 0x2a}, {0x3, 0x7, &(0x7f0000000440)='GPL\x00', &(0x7f0000000480)="bf6afea9c8bbc418658db53eae695468e9a206d220553bd9bdef1009d41bb1e07aec725ad30ee8a19aab1c42dd9c687494d5766dabb40b7808b58739336736a70904ee472fe437b7aa1eb076f8fa181e9cd5b366bc170b7c0e84e8165c368360c912331d51d71d23cd7dea5b2c0bedda5feed9bc0998bc12596a736396d42ee5b0b35d675f1f309d4a9fabd1a8c7a6e3dc6b0e5313bb26cb195016a420f96b1aecac3266227451473dd6071f1cc54ca8223bcc7b8711520e8d4306634227", 0xbe, 0x38}, {0x2, 0xfffffff7, &(0x7f0000000540)='\x00', &(0x7f0000000580)="56a14d8d66ce6cb0d2d9a0316de11905a669f1066e6937e3238b44d99b914e41ca3f109b6cdf32b379feee3a6544d1713d2bd96a7c3e4155fdd34cd83f733564b34b6ef3d8b11e06db097c49a04bd71b349aed5f43a4e7e4ae888c384ecdd85ea83f5f1b4910c2b539275fba879ad0f43734b1d3c0c4a3e31c2abbd07f71201d4dfdbfa0701497513854bfd622546e958a471f2316ad50cdcde9316a2a0b6b2ba16ac09166bbfcf9d2a466526e542a3a7ee3fbab4092ff515db07f328239d36fe47c743aa9a829d2d1c06d4a5a3cd3675f41e5339f09db4a5d8142cdb55fb9b99c4083251a9da731221e9d736401", 0xee, 0x28}, {0x1, 0x7fff, &(0x7f0000000680)='[,-$]\xf4\x00', &(0x7f00000006c0)="12e595e7a46c3ac77658cab4d9243d582a41d663798e484b4270c209aaffb9341f637ab46361ce5ac8dff067172f835edeefd661764e05e12eb9513fe2890db256ca41f23b31dab9295cb9c49cd9415421ef87069924917b9a61357851ecfba1f4fad9904cab7ad240f6f41bd26a8d5ea834904885be1f8971b5e761a74335ec8d1111afe72b298a476bc20c9571805eb66e84dd866ce8079315ff9607d467b0054bac1bd9a788927026edff9a87c1e388155b9ee3f832ce8803194aed106441dd4ecff23271", 0xc6, 0xa}, {0x1, 0x1000, &(0x7f00000007c0)='\\#[*)(]-\x00', &(0x7f0000000800)="752a907f65930e42fb959e550b345620ddaa58263626ed7036185a236befc38800141e7a068155ac4eab39cf1a6adcd16f828feb84dd7afdf4f9ec7d4d0fa50884fb2d82b7ba29262c75e0402272f03d5b837b46b80e4f39e08cf6fbafd4543680231a62272dd3bd65df65c92398e7665bbbaafca258839f75a0e3353fd41e1cb8fe1a60715a13bf8a32f40ccfbbba22d3d4dfa9bf13c54910f6095bb2fbbf475e2434cb06b07d552fe742a7d2aa5fcb9147f33148a6c989a0d8640634b6a99bbfc622f9adc43d6bdd0e43e5db0f03167fcc47a3895e85629c95", 0xda, 0x10}, {0x2, 0x80000001, &(0x7f0000000900)='\x00', &(0x7f0000000940)="2dfbd079e453", 0x6, 0x8}, {0x2, 0xec, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="8f8bc53f0238ceb75a27d8caa87c2541974495a32887ce6c49ac341cd225ac", 0x1f, 0x8}, {0x1, 0xfe9, &(0x7f0000000a00)='GPL\x00', &(0x7f0000000a40)="1b0f1cadd8eece3c4c6a2ce7a7b6c843b2e033a8cc7db3a6a211b7bfd81a9798a0a379e598ee8178a0dd729d790856821ec09b508c251f8c4820789fda37fc96e3d57970baddf867dff2d2771f6f4940f73cda65f27d6c8235a26b7e9bb2f452df317bdcb5bb3ecb18529c13119e8c6a992f8c8835b3a94bcc9471efaea74c0c1d702b4e8f1317799226164097207671e6b42acf432efd10da94acd5c5916f", 0x9f, 0x20}, {0x2, 0x80000000, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="e8b83a72febe628bf51a21", 0xb}, {0x1, 0x7, &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)="576d239ce009436c4a697403e45192fcb5109d6c277c274e74988ddd6cf8b41b58325346a75b454b28f52e97bd3b32484335dad3bb4297bb76062ea6e98dcd63a30f30cc53f55092f8b9d82076d1331f8350b637b70191219f05b1ab5667a73da82774121ba63ba1c70ae77eba2bc9735b1c1fccd3dd2ddb82000596d6e6d1eb1a569c8b1c05253b9d58b2dce892e1285d979510ee1fc405d4170b61d1f1c971fce979f6162d98dfd7dccf081e6e4825bb036168df73bc1116a467f90a5a48cb65cf4f825b19c8f6e855fd823ef321d0b24572c37477a4da6435843acbc5250929a46a9636bc3743e7", 0xe9, 0x60}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x126, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x0, 0x51, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x40, 0x1, 0xd3, 0x200}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000002c0)={0x0, 0x1, 0x8, r1, 0x7}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) 169.373398ms ago: executing program 3 (id=8351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x101) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r9], 0x38}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20040050) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044884}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r13 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)=' %', 0x2}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x20048090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 99.74632ms ago: executing program 2 (id=8352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) (async) 70.191875ms ago: executing program 1 (id=8353): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0xf45) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x48}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f00000001c0)='\\\x00', 0x200000, &(0x7f0000000200)={@align=0x5, {0x800, 0xfff, 0xf, 0x1}}, 0x81, &(0x7f0000000280), &(0x7f00000002c0)=0xfffff2a9}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x1, 0x6, 0x9, 0x80, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0x18, r3, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x80, 0x2}, 0x10, r5, r6, 0xa, &(0x7f00000004c0)=[r8, 0xffffffffffffffff, r9, r12, r13], &(0x7f0000000500)=[{0x1, 0x2, 0x10, 0xa}, {0x3, 0x4, 0x7, 0x2}, {0x0, 0x3, 0x10, 0x8}, {0x2, 0x4, 0xa, 0x5}, {0x1, 0x5, 0xd, 0xb}, {0x4, 0x4, 0x5, 0x7}, {0x2, 0x1, 0x10, 0xa}, {0x4, 0x4, 0x3, 0x6}, {0x5, 0x4, 0xe, 0x3}, {0x2, 0x4, 0x9, 0x9}], 0x10, 0x71}, 0x94) (async) r14 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) bind$inet(r14, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) 0s ago: executing program 4 (id=8354): socket$igmp(0x2, 0x3, 0x2) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='team0\x00') r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0010090000fd00000000005b11b71e167e7f0cf192562087693620b71d848c3333e6f459e366df27260f3b0d69249db2379e11b0ba3ed9b60a75b91f3f3b7d313f03e9bb18595425208cc1655410b06aa4f02d59c719daa8460dfb2b82e25efdcb399b6adec5c7b9a7e5c59d58fb6c9e4fefd4da8d6932226ec21308de313d994e6ae559b0cc8315fc9f177dfcd93d249ec757cbafdcbf14eef91ed3a74b01bfc41a58f6a47ac6b449747b72aae554313ea2a7a85570a16b4359d8cf0b31dd0a4930a49c87bccaef35afbef30e863b9f09cc285ec7bbe8d39e6dc2ebad8aa3c8fcc7abd66100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x102, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@generic={0x44, 0x11, "49536d2fed4372969db51368ac65ba"}, @end, @cipso={0x86, 0x48, 0x1, [{0x6, 0x5, "40fdd1"}, {0x1, 0xd, "d06e6e6c156f33e00d71b9"}, {0x6, 0xb, "a053bcde81c1bf4a0c"}, {0x2, 0xb, "af2ef1f6ab83331da3"}, {0x2, 0x7, "79cac88145"}, {0x7, 0xd, "13f49744634b025fedbef1"}, {0x5, 0x3, "e3"}, {0x0, 0x3, "cc"}]}, @timestamp_addr={0x44, 0x4, 0x30, 0x1, 0x5}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xe6, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0x3c, 0x5c, 0x3, 0xe, [{@loopback, 0x4}, {@broadcast, 0x5}, {@remote, 0x2}, {@local, 0xfffffa92}, {@multicast1, 0xc935}, {@multicast1, 0x6}, {@broadcast, 0x2}]}, @generic={0x7, 0x10, "053d29aea66bf3a4516dc2f13be8"}]}}, "040000f000e60000"}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000600000000000800174000000000050005000000000005000100dbbdff248ce5060000000d0003006c69"], 0x5c}}, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x58}, 0x81) kernel console output (not intermixed with test programs): 0: left promiscuous mode [ 805.928319][ T978] hsr_slave_1: left promiscuous mode [ 805.943594][T30227] Bluetooth: MGMT ver 1.23 [ 806.077401][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.293312][T28699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.301776][T28699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.735219][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6426'. [ 806.846111][T30234] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 806.990547][T30247] pimreg: entered allmulticast mode [ 807.110785][T29679] veth0_macvtap: entered promiscuous mode [ 807.117713][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.169483][T29679] veth1_macvtap: entered promiscuous mode [ 807.232060][T30251] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6432'. [ 807.252686][T30251] netlink: 'syz.2.6432': attribute type 1 has an invalid length. [ 807.262091][T29679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.375745][T29679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.462793][ T8343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.479210][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.524155][ T8343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.533569][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.580172][ T8343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.640750][T28699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.750925][ T978] IPVS: stop unused estimator thread 0... [ 807.900931][T30268] ksmbd: Unknown IPC event: 3, ignore. [ 808.006538][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 808.164874][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.301322][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.347715][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.708507][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.749014][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.837965][T30315] netlink: 'syz.3.6444': attribute type 1 has an invalid length. [ 809.164398][T30326] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6450'. [ 809.544420][T30349] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6457'. [ 810.086009][T24070] net_ratelimit: 6 callbacks suppressed [ 810.086029][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.161199][T30363] netlink: 'syz.4.6460': attribute type 24 has an invalid length. [ 810.234826][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.584309][T30378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6465'. [ 810.775898][ T5657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.795352][ T5657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.809760][ T5657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.820352][ T5657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.838461][ T5657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 810.901158][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.910403][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.077358][T30398] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6469'. [ 811.108933][T17548] syz_tun (unregistering): left allmulticast mode [ 811.124436][T30400] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6469'. [ 811.124671][T30398] netlink: ct family unspecified [ 811.141942][T30404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6468'. [ 811.177797][T30400] netlink: ct family unspecified [ 811.272727][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.554394][ T35] nci: nci_ntf_packet: unknown ntf opcode 0x305 [ 811.585069][T30420] macvlan0: entered promiscuous mode [ 811.756886][T30430] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 812.024749][T30443] netlink: 'syz.0.6476': attribute type 1 has an invalid length. [ 812.083511][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.116992][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.128684][T30445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6476'. [ 812.162622][T30445] netlink: 'syz.0.6476': attribute type 7 has an invalid length. [ 812.171008][T30445] netlink: 'syz.0.6476': attribute type 8 has an invalid length. [ 812.179563][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6476'. [ 812.215551][T30412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.257024][T30445] ip6gretap0: entered promiscuous mode [ 812.308625][T30445] ip6gretap0: left promiscuous mode [ 812.342370][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.466335][T30387] lo speed is unknown, defaulting to 1000 [ 812.484054][T30451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6478'. [ 812.507843][T30453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6477'. [ 812.726457][T30464] TCP: TCP_TX_DELAY enabled [ 812.872713][T20452] Bluetooth: hci1: command tx timeout [ 813.143576][T30478] xt_cgroup: invalid path, errno=-2 [ 813.239879][T30483] netlink: 'syz.4.6485': attribute type 29 has an invalid length. [ 813.345828][T30483] netlink: 'syz.4.6485': attribute type 29 has an invalid length. [ 813.382585][T28811] IPVS: starting estimator thread 0... [ 813.502561][T30488] IPVS: using max 26 ests per chain, 62400 per kthread [ 813.649210][T30489] bond5: entered promiscuous mode [ 813.682080][T30489] bond5: entered allmulticast mode [ 813.702111][T30489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 814.288275][T30526] pim6reg: entered allmulticast mode [ 814.330043][T30526] pim6reg: left allmulticast mode [ 814.952597][T20452] Bluetooth: hci1: command tx timeout [ 815.051918][T30387] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.074184][T30387] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.085260][T30387] bridge_slave_0: entered allmulticast mode [ 815.098834][T30387] bridge_slave_0: entered promiscuous mode [ 815.129992][T30387] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.139836][T30387] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.148965][T30387] bridge_slave_1: entered allmulticast mode [ 815.160060][T30387] bridge_slave_1: entered promiscuous mode [ 815.172189][T30570] syzkaller0: entered promiscuous mode [ 815.177952][T30570] syzkaller0: entered allmulticast mode [ 815.240918][T30570] netlink: 'syz.2.6502': attribute type 20 has an invalid length. [ 815.271954][T30570] __nla_validate_parse: 5 callbacks suppressed [ 815.271974][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6502'. [ 815.310716][T30387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.348013][T30387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.374481][T30570] netlink: 'syz.2.6502': attribute type 20 has an invalid length. [ 815.391518][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6502'. [ 815.432956][ T6416] net_ratelimit: 9 callbacks suppressed [ 815.432974][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.441626][T30387] team0: Port device team_slave_0 added [ 815.473758][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.482881][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.492754][T30387] team0: Port device team_slave_1 added [ 815.556299][T30387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.575758][T30387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.609285][T30387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.633068][T30387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.641043][T30387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.669718][T30387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.720569][T30387] hsr_slave_0: entered promiscuous mode [ 815.728197][T30387] hsr_slave_1: entered promiscuous mode [ 815.734961][T30387] debugfs: 'hsr0' already exists in 'hsr' [ 815.740746][T30387] Cannot create hsr debugfs directory [ 815.838978][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.167813][T30387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.187737][T30387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.200919][T30387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36725 - 0 [ 816.211771][T30387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 816.361319][T30387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.371809][T30387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.396684][T30387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36725 - 0 [ 816.425576][T30387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 816.481442][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.614023][T28699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.628430][T28699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.032708][T20452] Bluetooth: hci1: command tx timeout [ 817.513197][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.615421][T30544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.657778][T30387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 817.776941][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.832113][T30387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.841769][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.879211][T30387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 817.937027][T30387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.970049][T30387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.000083][T30387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.025867][T30594] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6505'. [ 818.043055][T30594] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6505'. [ 818.070027][T30387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.116125][T30387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.361023][T30610] netlink: 'syz.2.6509': attribute type 1 has an invalid length. [ 818.391982][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6509'. [ 818.459406][T30610] syzkaller0: entered promiscuous mode [ 818.478548][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6512'. [ 818.482135][T30610] syzkaller0: entered allmulticast mode [ 818.520333][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6513'. [ 818.529640][T30387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.577759][T30619] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 818.586910][T30619] bond2: option packets_per_slave: allowed values 0 - 65535 [ 818.596086][T30619] bond2 (unregistering): Released all slaves [ 818.905680][T30387] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.938525][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.945807][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.065269][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.072616][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.114154][T20452] Bluetooth: hci1: command tx timeout [ 819.277028][T30649] netlink: 'syz.4.6520': attribute type 11 has an invalid length. [ 819.328784][T30649] netlink: 'syz.4.6520': attribute type 11 has an invalid length. [ 819.363368][T30649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6520'. [ 819.424585][T30655] IPv6: NLM_F_CREATE should be specified when creating new route [ 819.476322][T30655] netlink: 'syz.4.6520': attribute type 1 has an invalid length. [ 819.480551][T30657] x_tables: unsorted underflow at hook 2 [ 819.491348][T30653] netlink: 'syz.0.6523': attribute type 1 has an invalid length. [ 819.520277][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'. [ 819.538470][T30658] x_tables: unsorted underflow at hook 2 [ 819.567067][T30654] netlink: 'syz.0.6523': attribute type 1 has an invalid length. [ 819.652998][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'. [ 819.904980][T30666] netlink: 'syz.1.6525': attribute type 1 has an invalid length. [ 819.957916][T30668] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 820.008252][T30668] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 820.109616][T30680] netem: incorrect ge model size [ 820.125496][T30680] netem: change failed [ 820.311234][T30690] __nla_validate_parse: 1 callbacks suppressed [ 820.311258][T30690] netlink: 67 bytes leftover after parsing attributes in process `syz.4.6530'. [ 820.634645][ T6416] net_ratelimit: 9 callbacks suppressed [ 820.634666][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.942374][T30709] bond2: option mode: invalid value (133) [ 820.964106][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.985171][T30709] bond2 (unregistering): Released all slaves [ 821.245425][T21997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.281251][T21997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.384691][T30387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.581920][T30387] veth0_vlan: entered promiscuous mode [ 821.646861][T30387] veth1_vlan: entered promiscuous mode [ 821.674747][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.868601][T30387] veth0_macvtap: entered promiscuous mode [ 821.928806][T30387] veth1_macvtap: entered promiscuous mode [ 821.980044][T30744] syzkaller0: entered promiscuous mode [ 822.006797][T30744] syzkaller0: entered allmulticast mode [ 822.078283][T30744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6544'. [ 822.090732][T30387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.109775][T30751] xt_cgroup: xt_cgroup: no path or classid specified [ 822.296675][T30387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.361759][T24072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.400663][T24072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.452078][T24072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.464882][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.489105][T24072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.499767][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.536949][T30766] netlink: 'syz.1.6551': attribute type 75 has an invalid length. [ 822.577400][T30760] macvtap1: entered promiscuous mode [ 822.585334][T30760] macvtap1: entered allmulticast mode [ 822.590977][T30760] veth1_vlan: entered allmulticast mode [ 822.713543][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.865934][T30766] bond2: entered promiscuous mode [ 822.970045][T30784] netlink: 'syz.0.6553': attribute type 12 has an invalid length. [ 822.998180][T30784] netlink: 'syz.0.6553': attribute type 29 has an invalid length. [ 823.065043][T30784] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6553'. [ 823.096395][T30784] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 823.148883][T30784] netlink: 'syz.0.6553': attribute type 2 has an invalid length. [ 823.169309][T30791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6555'. [ 823.196328][T30784] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6553'. [ 823.492797][T21997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.536797][T21997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.676501][T24072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.700635][T24072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.773304][T30815] xt_hashlimit: size too large, truncated to 1048576 [ 825.832923][ T6390] net_ratelimit: 5 callbacks suppressed [ 825.832946][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.963018][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.998392][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.641185][ T8342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.709836][ T8342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.836469][T30834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6565'. [ 826.880809][T30836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6563'. [ 826.881073][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.137083][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.185660][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.468249][T30861] RDS: rds_bind could not find a transport for 800:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 827.718096][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6575'. [ 827.913081][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.037691][T30884] veth0_to_bond: entered allmulticast mode [ 828.333007][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.370780][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.705219][T30907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6585'. [ 828.906853][T30912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 828.953343][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.965697][T30920] validate_nla: 2 callbacks suppressed [ 828.965717][T30920] netlink: 'syz.0.6585': attribute type 2 has an invalid length. [ 829.334237][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6591'. [ 829.621628][T20452] block nbd1: Receive control failed (result -32) [ 829.630149][T24551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 829.647770][T24551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 829.659103][T24551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 829.669922][T30935] netlink: 'syz.0.6593': attribute type 29 has an invalid length. [ 829.680975][T24551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 829.690597][T24551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 829.914811][T30935] netlink: 'syz.0.6593': attribute type 29 has an invalid length. [ 829.996089][T30950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6596'. [ 830.829083][T30939] lo speed is unknown, defaulting to 1000 [ 830.863565][T30985] netlink: 'syz.0.6607': attribute type 21 has an invalid length. [ 830.928190][T30985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6607'. [ 831.033551][ T6390] net_ratelimit: 8 callbacks suppressed [ 831.033573][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.194093][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.215250][T31004] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6611'. [ 831.672666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.742952][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.755894][T24551] Bluetooth: hci2: command tx timeout [ 831.775431][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.825090][T31022] nft_compat: unsupported protocol 0 [ 832.074498][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.242123][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.325366][T28811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.380674][T31040] sock: sock_set_timeout: `syz.0.6622' (pid 31040) tries to set negative timeout [ 832.447673][T31038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'. [ 832.564657][T31037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.617353][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'. [ 832.692090][T31052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6625'. [ 832.713089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.319566][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6629'. [ 833.339815][T31079] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20004 [ 833.411212][T30939] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.442126][T30939] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.483987][T30939] bridge_slave_0: entered allmulticast mode [ 833.521950][T30939] bridge_slave_0: entered promiscuous mode [ 833.550152][T30939] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.564860][T31087] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 833.569575][T30939] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.609275][T30939] bridge_slave_1: entered allmulticast mode [ 833.624221][T30939] bridge_slave_1: entered promiscuous mode [ 833.720467][T30939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.764922][T30939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.819969][T31096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6635'. [ 833.837496][T24551] Bluetooth: hci2: command tx timeout [ 833.900580][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6635'. [ 833.926026][T31100] netlink: 'syz.1.6636': attribute type 11 has an invalid length. [ 833.935158][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6635'. [ 833.957175][T31102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6635'. [ 834.010612][T31096] ipvlan2: entered allmulticast mode [ 834.041913][T31096] syz_tun: entered allmulticast mode [ 834.096868][T30939] team0: Port device team_slave_0 added [ 834.116667][T30939] team0: Port device team_slave_1 added [ 834.167845][T31107] xt_TCPMSS: Only works on TCP SYN packets [ 834.254353][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.283176][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.317553][T30939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.337977][T30939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.366199][T31116] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6639'. [ 834.384337][T31117] x_tables: unsorted entry at hook 1 [ 834.435812][T30939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.455421][T30939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.479625][T30939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.557297][T30939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.585414][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.613797][T31123] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 834.694411][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.884741][T30939] hsr_slave_0: entered promiscuous mode [ 834.895308][T30939] hsr_slave_1: entered promiscuous mode [ 834.906482][T31133] sctp: [Deprecated]: syz.3.6642 (pid 31133) Use of int in maxseg socket option. [ 834.906482][T31133] Use struct sctp_assoc_value instead [ 834.912078][T30939] debugfs: 'hsr0' already exists in 'hsr' [ 834.948295][T30939] Cannot create hsr debugfs directory [ 835.050262][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6644'. [ 835.180078][T31144] netlink: 'syz.3.6646': attribute type 1 has an invalid length. [ 835.204655][T31144] nbd: error processing sock list [ 835.269438][T31144] macvlan2: entered promiscuous mode [ 835.281904][T31144] macvlan2: entered allmulticast mode [ 835.289046][T31144] team0: Device macvlan2 is already an upper device of the team interface [ 835.342834][T31145] macvlan2: entered promiscuous mode [ 835.351376][T31145] macvlan2: entered allmulticast mode [ 835.377409][T31145] team0: Device macvlan2 is already an upper device of the team interface [ 835.828551][T30939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.847766][T30939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.860675][T30939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53552 - 0 [ 835.922805][T24551] Bluetooth: hci2: command tx timeout [ 836.135797][T30939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.177076][T30939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.222179][T30939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53552 - 0 [ 836.242658][T28812] net_ratelimit: 18 callbacks suppressed [ 836.242681][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.283400][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.319061][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.405836][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.699826][T30939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.722194][T30939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.733000][T30939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53552 - 0 [ 836.872586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.999913][T30939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.050891][T30939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.074238][T30939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53552 - 0 [ 837.273518][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.452663][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.463078][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.485086][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.663796][T31227] __nla_validate_parse: 1 callbacks suppressed [ 837.663817][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 837.726331][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 837.890797][T31230] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 837.912659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.992698][T24551] Bluetooth: hci2: command tx timeout [ 838.028594][T31228] vlan2: entered allmulticast mode [ 838.055831][T31228] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 838.212048][T31248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6674'. [ 838.222982][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6674'. [ 838.277010][T31240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.818136][T31262] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 838.848207][T31262] bond3: (slave lo): Enslaving as an active interface with an up link [ 838.965265][T30939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 839.021002][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.088443][T30939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 839.112383][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.147599][T30939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 839.147887][T31278] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6681'. [ 839.208594][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 839.248994][T30939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 839.318960][T30939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 839.779681][T30939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.899958][T30939] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.001462][T31315] netlink: 'syz.3.6690': attribute type 13 has an invalid length. [ 840.036730][T28699] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.044055][T28699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.407075][T31332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6693'. [ 840.496686][T28699] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.504020][T28699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.164736][T31353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6697'. [ 841.438068][ T6390] net_ratelimit: 21 callbacks suppressed [ 841.438091][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.864621][T31361] pimreg: entered allmulticast mode [ 842.053847][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.097972][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.473266][T31387] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 842.479221][ T6390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.694754][T31393] block nbd2: Unsupported socket: should be TCP or UNIX. [ 843.017638][T31407] openvswitch: netlink: IP tunnel dst address not specified [ 843.223122][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.250367][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.327008][T30939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.354078][T24070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.366666][ T6409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.383037][T28811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.542026][T30939] veth0_vlan: entered promiscuous mode [ 844.166060][T30939] veth1_vlan: entered promiscuous mode [ 844.226590][T30939] veth0_macvtap: entered promiscuous mode [ 844.242928][T30939] veth1_macvtap: entered promiscuous mode [ 844.429880][T31438] xt_hl: Unknown Hop Limit match mode: 206 [ 844.509613][T31441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6711'. [ 844.625140][T30939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.660903][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 844.670145][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 844.694642][T30939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.731505][T31444] IPVS: length: 8 != 1152 [ 844.790666][ T8342] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.816346][ T8342] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.840316][ T8342] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.147275][T31462] vcan0: entered allmulticast mode [ 845.232080][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.308322][ T8340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.352492][ T8340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.401926][ T8340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.450381][ T8340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.505417][T31473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6721'. [ 845.515465][T31475] ipt_ECN: cannot use operation on non-tcp rule [ 845.758267][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.808402][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.926467][T31488] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6726'. [ 845.939595][ T8344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.967950][ T8344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.263249][T31499] tipc: Started in network mode [ 846.295957][T31499] tipc: Node identity 1eef0c80f32d, cluster identity 4711 [ 846.316084][ T6391] IPVS: starting estimator thread 0... [ 846.346127][T31499] tipc: Enabled bearer , priority 0 [ 846.442622][T31504] IPVS: using max 28 ests per chain, 67200 per kthread [ 846.522992][T31508] syzkaller0: entered promiscuous mode [ 846.528745][T31508] syzkaller0: entered allmulticast mode [ 846.549402][T31508] tipc: Resetting bearer [ 846.555844][ T1033] net_ratelimit: 8 callbacks suppressed [ 846.555864][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.633898][ T6391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.673605][T31497] tipc: Resetting bearer [ 846.681177][T31517] xt_limit: Overflow, try lower: 604147548/4200216962 [ 846.902778][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.911664][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.927400][T31525] netlink: 'syz.2.6733': attribute type 1 has an invalid length. [ 847.683466][T28812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.052663][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.061345][ T8340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.718568][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.115353][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.125697][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.637500][T31497] tipc: Disabling bearer [ 850.648338][T31521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6732'. [ 850.659645][T31521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6732'. [ 850.671776][T31525] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 850.743665][ T6391] tipc: Node number set to 3988917376 [ 850.864746][T31531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6734'. [ 850.898870][T31536] netlink: 'syz.2.6736': attribute type 1 has an invalid length. [ 850.907058][T31531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6734'. [ 851.050784][T31549] netlink: 'syz.1.6735': attribute type 1 has an invalid length. [ 851.090003][T31549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6735'. [ 851.512245][T31563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6744'. [ 851.673714][ T1033] net_ratelimit: 10 callbacks suppressed [ 851.673736][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.698843][T31576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6748'. [ 851.812707][T31585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6750'. [ 851.833123][ T5657] Bluetooth: hci0: command 0x0406 tx timeout [ 851.846165][ T6391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.189482][ T29] audit: type=1804 audit(1780823940.769:21): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6755" name="/newroot/66/cgroup.controllers" dev="tmpfs" ino=353 res=1 errno=0 [ 852.286645][ T29] audit: type=1800 audit(1780823940.769:22): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6755" name="cgroup.controllers" dev="tmpfs" ino=353 res=0 errno=0 [ 852.508348][T31615] syzkaller0: entered promiscuous mode [ 852.516818][T31615] syzkaller0: entered allmulticast mode [ 852.541399][T31619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6762'. [ 852.649257][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.692020][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.873741][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.939974][T31630] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6766'. [ 853.137451][T31637] openvswitch: netlink: Unknown nsh attribute 0 [ 853.214972][T31641] openvswitch: netlink: Multiple metadata blocks provided [ 853.442494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.543227][T31656] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 853.699559][T31669] netlink: 'syz.0.6777': attribute type 11 has an invalid length. [ 853.789133][T31676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.836959][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.866417][T31710] sctp: [Deprecated]: syz.1.6786 (pid 31710) Use of int in maxseg socket option. [ 854.866417][T31710] Use struct sctp_assoc_value instead [ 856.540767][T31658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 856.857245][T31715] netlink: 'syz.2.6788': attribute type 83 has an invalid length. [ 856.870680][T31725] __nla_validate_parse: 5 callbacks suppressed [ 856.870706][T31725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6790'. [ 857.034532][ T6416] net_ratelimit: 12 callbacks suppressed [ 857.034555][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.079245][T31733] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 857.143607][T31732] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6792'. [ 857.168782][T31735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6795'. [ 857.196264][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.208093][T31732] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 857.238975][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.266099][T31732] netlink: 51 bytes leftover after parsing attributes in process `syz.0.6792'. [ 857.343259][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6797'. [ 857.436928][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.473424][T31751] veth0: entered promiscuous mode [ 857.507427][T31748] veth0: left promiscuous mode [ 857.634909][T31763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6802'. [ 857.970924][T31783] lo: Caught tx_queue_len zero misconfig [ 858.076753][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.126263][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6807'. [ 858.150468][T31787] xt_hashlimit: size too large, truncated to 1048576 [ 858.362860][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.391988][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.713970][T28811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.804446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.994914][T31779] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.758885][T31831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6822'. [ 859.837912][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6823'. [ 859.889300][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6823'. [ 860.503048][T31833] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.510738][T31833] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.325217][T31882] netlink: 'syz.0.6835': attribute type 1 has an invalid length. [ 861.598640][T31886] nbd: couldn't find a device at index 0 [ 861.922909][T31897] netlink: 'syz.3.6840': attribute type 1 has an invalid length. [ 862.013440][T31902] __nla_validate_parse: 5 callbacks suppressed [ 862.013463][T31902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6842'. [ 862.102651][T31908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6843'. [ 862.140716][T31897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 862.151844][T31910] xt_TCPMSS: Only works on TCP SYN packets [ 862.236846][ T5645] net_ratelimit: 12 callbacks suppressed [ 862.236867][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.370751][T31905] bond1: (slave gretap1): making interface the new active one [ 862.404710][T31905] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 862.444429][T31902] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.452223][T31902] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.780158][T31936] xt_ecn: cannot match TCP bits for non-tcp packets [ 862.874969][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.889002][T31941] netlink: 'syz.4.6851': attribute type 1 has an invalid length. [ 862.901193][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.071415][T31949] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.6852'. [ 863.128656][T31923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.204594][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.228623][T31923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.278559][ T5645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.698360][T31923] macvlan0: left promiscuous mode [ 864.022894][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.042551][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.281558][T31923] bond2: left promiscuous mode [ 864.307372][ T8340] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.361745][ T8340] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.374466][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.495305][ T8340] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.548175][ T8340] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.758403][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6859'. [ 865.101134][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6865'. [ 865.130733][T31989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6864'. [ 865.172977][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.196162][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.409589][T32000] syzkaller0: entered promiscuous mode [ 865.419028][T32000] syzkaller0: entered allmulticast mode [ 865.444889][T31997] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6867'. [ 866.291506][T32042] netlink: 'syz.0.6882': attribute type 75 has an invalid length. [ 866.488503][T32056] netlink: 'syz.2.6886': attribute type 4 has an invalid length. [ 866.508050][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6883'. [ 866.519400][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6886'. [ 866.590328][T21997] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 866.702455][T32057] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6883'. [ 867.109168][T32082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6892'. [ 867.119204][T32082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6892'. [ 867.189800][T32086] tipc: Failed to remove unknown binding: 66,0,0/0:909013650/909013651 [ 867.201018][T32086] tipc: Failed to remove unknown binding: 66,0,0/0:909013650/909013651 [ 867.436849][T24072] net_ratelimit: 8 callbacks suppressed [ 867.436878][T24072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.458491][T24072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.514227][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.038369][T32110] xt_hashlimit: size too large, truncated to 1048576 [ 868.554306][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.582715][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.591281][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.954519][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.445055][T32052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.593298][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.733735][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.743457][T32125] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6902'. [ 869.750765][T32116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 869.772048][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.171024][T32151] netlink: 'syz.1.6910': attribute type 83 has an invalid length. [ 870.185302][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6908'. [ 870.196757][T32154] netlink: 'syz.1.6910': attribute type 83 has an invalid length. [ 870.253854][T32151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6910'. [ 870.305761][T21997] team0: left promiscuous mode [ 870.324706][T21997] team_slave_0: left promiscuous mode [ 870.337362][T21997] team_slave_1: left promiscuous mode [ 870.358984][T32161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6912'. [ 870.361366][T21997] bridge0: port 3(team0) entered disabled state [ 870.404823][T21997] bridge_slave_1: left allmulticast mode [ 870.410690][T21997] bridge_slave_1: left promiscuous mode [ 870.420175][T21997] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.446692][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6912'. [ 870.465747][T21997] bridge_slave_0: left allmulticast mode [ 870.479003][T21997] bridge_slave_0: left promiscuous mode [ 870.485249][T21997] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.534375][T21997] pimreg: left allmulticast mode [ 870.780818][T21997] ip6gretap0 (unregistering): left promiscuous mode [ 870.989073][T21997] gretap0 (unregistering): left promiscuous mode [ 871.039043][T21997] bond3 (unregistering): (slave gretap2): Releasing active interface [ 871.459612][T21997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.474521][T21997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.485812][T21997] bond0 (unregistering): Released all slaves [ 871.499427][T21997] bond1 (unregistering): Released all slaves [ 871.518061][T21997] bond2 (unregistering): Released all slaves [ 871.542059][T21997] bond3 (unregistering): Released all slaves [ 871.566031][T21997] bond4 (unregistering): Released all slaves [ 871.585849][T21997] bond5 (unregistering): Released all slaves [ 871.603399][T21997] bond6 (unregistering): Released all slaves [ 871.623909][T21997] bond7 (unregistering): Released all slaves [ 871.641058][T21997] bond8 (unregistering): (slave bond9): Releasing backup interface [ 871.650297][T21997] bond8 (unregistering): Released all slaves [ 871.671673][T21997] bond9 (unregistering): Released all slaves [ 871.691858][T21997] bond10 (unregistering): Released all slaves [ 871.709234][T21997] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 871.720202][T21997] bond11 (unregistering): Released all slaves [ 871.742211][T21997] bond12 (unregistering): Released all slaves [ 872.017714][T21997] tipc: Disabling bearer [ 872.040837][T21997] tipc: Disabling bearer [ 872.059785][T32187] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 872.078889][T32187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6919'. [ 872.089066][T21997] tipc: Left network mode [ 872.283318][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6919'. [ 872.371334][T32204] netlink: 'syz.4.6922': attribute type 1 has an invalid length. [ 872.601077][T32204] ip6gretap1: entered promiscuous mode [ 872.630428][T32204] ip6gretap1: entered allmulticast mode [ 872.647545][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6926'. [ 872.833430][T32210] syzkaller1: entered promiscuous mode [ 872.868369][T32210] syzkaller1: entered allmulticast mode [ 873.139670][T32237] Cannot find add_set index 0 as target [ 873.318834][T32242] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6935'. [ 873.774848][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6940'. [ 874.101916][T32266] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 874.548426][T21997] veth1_to_team: left promiscuous mode [ 874.626059][T21997] hsr_slave_0: left promiscuous mode [ 874.656990][T32294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.674201][T21997] hsr_slave_1: left promiscuous mode [ 874.695569][T21997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.714662][T21997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.932019][T21997] vlan0: left allmulticast mode [ 874.937861][T21997] veth0_vlan: left allmulticast mode [ 874.943967][T21997] vlan0: left promiscuous mode [ 874.949605][T21997] veth1_vlan: left promiscuous mode [ 874.957076][T21997] veth0_vlan: left promiscuous mode [ 876.734034][T21997] team_slave_1 (unregistering): left allmulticast mode [ 876.742093][T21997] team0 (unregistering): Port device team_slave_1 removed [ 876.760404][T21997] team_slave_0 (unregistering): left allmulticast mode [ 876.769649][T21997] team0 (unregistering): Port device team_slave_0 removed [ 877.249286][T32329] geneve2: entered promiscuous mode [ 877.288944][T32329] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6958'. [ 877.322935][T32329] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6958'. [ 877.354012][T32334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6961'. [ 877.383280][T32336] syzkaller0: entered promiscuous mode [ 877.391838][T32337] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6961'. [ 877.416896][T32336] syzkaller0: entered allmulticast mode [ 877.429070][T32329] net_ratelimit: 19 callbacks suppressed [ 877.429090][T32329] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 877.526848][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6962'. [ 877.607164][T32345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 877.621177][T32345] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 877.629248][T32345] gretap2: entered promiscuous mode [ 877.635873][T32345] gretap2: entered allmulticast mode [ 877.648130][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6965'. [ 877.775428][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d0b800: rx timeout, send abort [ 877.788916][T21997] IPVS: stop unused estimator thread 0... [ 877.988093][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6972'. [ 878.028887][T32367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6970'. [ 878.039580][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6972'. [ 878.079731][T32378] netlink: 'syz.4.6972': attribute type 11 has an invalid length. [ 878.104120][T32373] netlink: 'syz.4.6972': attribute type 11 has an invalid length. [ 878.185862][ T29] audit: type=1800 audit(1780823966.769:23): pid=32367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6970" name="memory.events" dev="tmpfs" ino=1073 res=0 errno=0 [ 878.275620][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d08800: rx timeout, send abort [ 878.285400][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d0b800: abort rx timeout. Force session deactivation [ 878.343964][T32389] netlink: 'syz.0.6974': attribute type 10 has an invalid length. [ 878.367332][T32394] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6975'. [ 878.381906][T32393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6974'. [ 878.410351][T32389] team0: Port device dummy0 added [ 878.570286][T32393] team0: Port device dummy0 removed [ 878.619518][T32400] netlink: 'syz.1.6978': attribute type 3 has an invalid length. [ 878.784279][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029d08800: abort rx timeout. Force session deactivation [ 878.923881][T32409] netlink: 'syz.2.6980': attribute type 9 has an invalid length. [ 879.282264][T32416] syzkaller0: entered promiscuous mode [ 879.296285][T32416] syzkaller0: entered allmulticast mode [ 879.383617][T32419] netlink: 'syz.1.6983': attribute type 3 has an invalid length. [ 879.492119][T32427] netlink: 'syz.3.6987': attribute type 2 has an invalid length. [ 879.866030][T32452] syzkaller0: entered promiscuous mode [ 879.904373][T32452] syzkaller0: entered allmulticast mode [ 880.054045][T32466] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 880.456023][T32494] IPv6: NLM_F_REPLACE set, but no existing node found! [ 880.489192][T32497] netlink: 'syz.1.7005': attribute type 1 has an invalid length. [ 880.613410][T32497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.642330][T32499] vlan2: entered allmulticast mode [ 880.647832][T32499] bond4: entered allmulticast mode [ 880.666107][T32500] bond4: (slave geneve3): making interface the new active one [ 880.675292][T32500] geneve3: entered allmulticast mode [ 880.685899][T32500] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 880.699999][T24070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.711153][T24070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.776235][T25487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.823694][T25487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.959851][T32519] veth0_to_bond: Caught tx_queue_len zero misconfig [ 881.368427][T32551] netlink: 'syz.1.7017': attribute type 1 has an invalid length. [ 881.650535][T32564] netlink: 'syz.1.7022': attribute type 3 has an invalid length. [ 881.869352][T32575] pimreg3: entered allmulticast mode [ 882.055667][T32584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.099242][T32588] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.108289][T32588] bridge0: port 2(bridge_slave_1) entered listening state [ 882.115819][T32588] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.123184][T32588] bridge0: port 1(bridge_slave_0) entered listening state [ 882.170661][ T5645] IPVS: starting estimator thread 0... [ 882.262642][T32600] IPVS: using max 26 ests per chain, 62400 per kthread [ 882.300056][T32588] ip6gretap1: left promiscuous mode [ 882.333868][T32588] ip6gretap1: left allmulticast mode [ 882.340463][T32610] Unsupported ieee802154 address type: 0 [ 882.354035][T32588] geneve2: left promiscuous mode [ 882.404546][T32610] bridge0: Caught tx_queue_len zero misconfig [ 882.458286][T13490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.524953][T32614] __nla_validate_parse: 75 callbacks suppressed [ 882.524976][T32614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7035'. [ 882.716994][T32623] syzkaller0: entered promiscuous mode [ 882.736408][T32623] syzkaller0: entered allmulticast mode [ 882.756588][T32626] veth0: entered promiscuous mode [ 882.794881][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7038'. [ 883.013021][T13490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.477572][ T8344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.592315][T32650] openvswitch: netlink: Message has 4 unknown bytes. [ 883.761964][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7045'. [ 883.837009][T32661] validate_nla: 3 callbacks suppressed [ 883.837033][T32661] netlink: 'syz.0.7047': attribute type 1 has an invalid length. [ 883.979528][T32661] bond2: (slave geneve2): Opening slave failed [ 884.020503][T32670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7047'. [ 884.031477][T32670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.158670][T32672] syzkaller0: entered promiscuous mode [ 884.181467][T32672] syzkaller0: entered allmulticast mode [ 884.557228][T25487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.562077][T32690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7057'. [ 884.585498][T25487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.840086][T32708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7062'. [ 884.849521][T32708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7062'. [ 885.436446][T28812] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 888.596486][T32721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.607305][T32721] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.626511][T32721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.695568][T32721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.708669][T32721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.724641][T32721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.737152][T32721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.756840][T32721] veth1_vlan: left promiscuous mode [ 888.772276][T32721] veth0_vlan: left promiscuous mode [ 888.788749][T32721] veth0_vlan: entered promiscuous mode [ 888.794408][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 888.810181][T32721] veth1_vlan: entered promiscuous mode [ 888.838035][T32721] veth1_macvtap: left promiscuous mode [ 888.850872][T32721] veth0_macvtap: left promiscuous mode [ 888.859234][T32721] veth0_macvtap: entered promiscuous mode [ 888.866587][T32721] veth1_macvtap: entered promiscuous mode [ 888.886254][T32721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.897530][T32721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.906878][T32721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.918121][T32721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.934347][T32721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.958380][T32721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.970467][T32721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 889.014321][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.021588][ T8342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.034963][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.042223][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.111627][T21997] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.150498][T21997] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.185094][T21997] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.211153][T21997] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.269744][ T1033] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 889.279613][ T1033] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 889.293082][T28812] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 889.339994][ T1033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.628385][ T325] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 889.892348][ T346] netlink: 'syz.2.7086': attribute type 1 has an invalid length. [ 889.996578][ T5645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.003705][ T352] netlink: 'syz.4.7088': attribute type 2 has an invalid length. [ 890.036602][ T352] netlink: 'syz.4.7088': attribute type 1 has an invalid length. [ 890.076803][ T5645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.339909][ T377] netlink: 'syz.3.7094': attribute type 9 has an invalid length. [ 890.416684][ T381] syzkaller0: entered promiscuous mode [ 890.422989][ T381] syzkaller0: entered allmulticast mode [ 890.445131][ T381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7096'. [ 890.762302][ T397] veth0: entered promiscuous mode [ 890.829855][ T398] veth0: left promiscuous mode [ 890.858858][ T408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7101'. [ 890.954738][ T413] macsec0: entered promiscuous mode [ 891.015210][ T412] macsec0: left promiscuous mode [ 891.149942][ T375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.185782][ T420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7106'. [ 891.405157][ T426] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7108'. [ 891.790431][ T448] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7114'. [ 891.805395][ T448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7114'. [ 891.841232][ T448] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7114'. [ 891.947088][ T459] lo: entered allmulticast mode [ 892.245101][ T474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7123'. [ 892.275803][ T475] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7122'. [ 892.541866][ T484] gre1: entered promiscuous mode [ 892.758834][ T497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7130'. [ 893.166100][ T511] netlink: 'syz.1.7133': attribute type 83 has an invalid length. [ 893.352788][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 893.592937][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 893.903913][ T550] tunl0: entered promiscuous mode [ 893.918048][ T550] netlink: 'syz.1.7145': attribute type 4 has an invalid length. [ 894.688610][ T588] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 2, id = 0 [ 895.273928][ T620] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 895.473091][ T624] __nla_validate_parse: 10 callbacks suppressed [ 895.473117][ T624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7164'. [ 895.529143][ T626] Bluetooth: MGMT ver 1.23 [ 895.549656][ T626] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 895.605543][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7166'. [ 896.081096][ T653] xt_hashlimit: size too large, truncated to 1048576 [ 896.596930][ T667] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 896.916086][ T685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.112579][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.144559][ T691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7179'. [ 897.664629][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591cec00: rx timeout, send abort [ 897.755229][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 897.764807][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 897.819881][ T716] syzkaller0: entered promiscuous mode [ 897.828258][ T716] syzkaller0: entered allmulticast mode [ 897.919468][ T5657] Bluetooth: hci5: command 0x0406 tx timeout [ 898.180821][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591cec00: abort rx timeout. Force session deactivation [ 901.210064][ T736] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 901.250085][ T736] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 901.262640][ T736] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 901.423677][ T757] syzkaller0: entered promiscuous mode [ 901.441074][ T757] syzkaller0: entered allmulticast mode [ 901.464262][ T757] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7191'. [ 901.484626][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7194'. [ 901.555344][ T763] vlan2: entered allmulticast mode [ 901.592599][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 902.178304][ T797] xt_hashlimit: size too large, truncated to 1048576 [ 902.233498][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 902.427985][ T805] netlink: 'syz.2.7204': attribute type 13 has an invalid length. [ 902.510757][ T805] veth1_macvtap: left promiscuous mode [ 902.526248][ T805] macsec0: entered allmulticast mode [ 902.739853][ T815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7206'. [ 902.962577][ T828] netlink: 'syz.0.7206': attribute type 2 has an invalid length. [ 903.083462][ T828] netlink: 'syz.0.7206': attribute type 8 has an invalid length. [ 903.144858][ T828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7206'. [ 903.186655][ T815] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7206'. [ 903.599214][ T839] erspan0: entered allmulticast mode [ 903.752082][ T849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7214'. [ 903.794033][ T849] netlink: 'syz.2.7214': attribute type 1 has an invalid length. [ 903.818525][ T849] netlink: 'syz.2.7214': attribute type 62 has an invalid length. [ 903.847661][ T852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7213'. [ 903.904550][ T852] vcan0 (unregistering): left allmulticast mode [ 904.078659][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7218'. [ 904.556371][ T883] netlink: zone id is out of range [ 904.592782][ T883] netlink: del zone limit has 4 unknown bytes [ 904.623039][ T883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7222'. [ 904.671266][ T883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7222'. [ 904.705152][ T883] netlink: 'syz.1.7222': attribute type 2 has an invalid length. [ 905.088155][ T911] netlink: 'syz.1.7229': attribute type 1 has an invalid length. [ 905.112027][ T903] "syz.4.7227" (903) uses obsolete ecb(arc4) skcipher [ 905.655786][ T914] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 905.717790][ T927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 905.760306][T24070] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 905.893343][ T931] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 905.918088][ T931] bond3 (unregistering): Released all slaves [ 905.926914][T24065] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 906.548062][ T975] __nla_validate_parse: 7 callbacks suppressed [ 906.548099][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7236'. [ 907.781418][ T1027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7247'. [ 907.912579][ T5657] Bluetooth: hci2: command 0x0405 tx timeout [ 908.557106][ T1055] bond3 (unregistering): Released all slaves [ 908.795030][ T1079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.867252][ T1087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7256'. [ 909.009268][ T1089] : entered promiscuous mode [ 909.051515][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 909.307331][ T29] audit: type=1107 audit(1780823997.889:24): pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='é'IñâCSn™ÀåãÅ ' [ 909.386997][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7263'. [ 909.631115][ T1117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7265'. [ 909.668956][ T1117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7265'. [ 909.787728][ T1123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7266'. [ 910.919221][ T1168] veth1_macvtap: left promiscuous mode [ 910.939881][ T1168] macsec0: entered promiscuous mode [ 910.979028][ T1168] macsec0: entered allmulticast mode [ 911.063878][ T1174] veth1_macvtap: entered promiscuous mode [ 911.108636][ T1174] veth1_macvtap: entered allmulticast mode [ 911.166530][ T1174] macsec0: left promiscuous mode [ 911.186504][ T1174] macsec0: left allmulticast mode [ 911.214655][ T1174] veth1_macvtap: left allmulticast mode [ 911.394305][ T1181] x_tables: unsorted entry at hook 3 [ 911.590243][ T1179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 911.599265][ T1189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.898809][ T1201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7285'. [ 912.232723][T24551] Bluetooth: hci2: command 0x0405 tx timeout [ 912.246058][ T1215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7288'. [ 912.622186][ T1237] xt_hashlimit: size too large, truncated to 1048576 [ 912.757819][ T1234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7293'. [ 913.114342][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.121693][ C0] bridge0: topology change detected, propagating [ 913.128586][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.135880][ C0] bridge0: topology change detected, propagating [ 913.277872][T24551] Bluetooth: hci3: command 0x0406 tx timeout [ 913.485251][ T1252] vlan3: entered allmulticast mode [ 913.749560][ T1257] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 913.757151][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 914.806521][ T1299] netlink: 'syz.3.7310': attribute type 4 has an invalid length. [ 914.868819][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.634505][ T1332] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 915.662133][ T1327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7317'. [ 916.040097][ T1342] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 916.126923][ T29] audit: type=1107 audit(1780824004.709:25): pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='KÎ’}7Ôwý[ms¦Dþ55z<Õ9O¶ßILÖ6¸¢Hîãó;¼ð´ƒä#¿nìü/q (¢Ï6YG¬£!ªïÖ7Pí°5¦gþ [ 916.126923][ T29] ØþŸÝ¸©6 VBÕ§Þ§§h)µÌ;øíwºDnuƒEþ ;ž:R™ãÒ½]2Z½Ä¥miÂzÛÃÒÞM˜5,¿S, priority 0 [ 923.891684][ T1630] syzkaller0: entered promiscuous mode [ 923.898575][ T1630] syzkaller0: entered allmulticast mode [ 923.941277][ T1638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7399'. [ 924.006095][ T1630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7396'. [ 924.035706][ T1630] tipc: Resetting bearer [ 924.067964][ T1638] xt_l2tp: invalid flags combination: 0 [ 924.099148][ T1629] tipc: Resetting bearer [ 924.179417][ T1629] tipc: Disabling bearer [ 924.420588][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7403'. [ 924.600077][ T1669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7406'. [ 924.625813][ T1669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7406'. [ 924.728297][ T1675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.898972][ T1680] syzkaller0: entered promiscuous mode [ 924.907279][ T1680] syzkaller0: entered allmulticast mode [ 925.347013][ T1702] netlink: 'syz.2.7414': attribute type 1 has an invalid length. [ 925.467772][ T1702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.551620][ T1699] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 925.653413][ T1715] netlink: 'syz.0.7417': attribute type 13 has an invalid length. [ 925.663568][ T1708] macvlan2: entered promiscuous mode [ 925.682823][ T1708] macvlan2: entered allmulticast mode [ 925.694588][ T1708] bond3: entered promiscuous mode [ 925.708565][ T1708] veth0_to_bond: entered promiscuous mode [ 925.724896][ T1708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 925.748684][ T1708] bond3: left promiscuous mode [ 925.757964][ T1708] veth0_to_bond: left promiscuous mode [ 925.809796][ T1715] gretap0: refused to change device tx_queue_len [ 925.826501][ T1715] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 926.216413][ T1732] ip6tnl0: Caught tx_queue_len zero misconfig [ 926.386105][ T1736] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 926.630376][ T1749] netlink: 'syz.2.7425': attribute type 1 has an invalid length. [ 926.697658][ T1749] netlink: 'syz.2.7425': attribute type 4 has an invalid length. [ 926.730902][ T1748] netlink: 'syz.3.7426': attribute type 1 has an invalid length. [ 926.749960][ T1749] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.7425'. [ 926.766150][ T1748] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7426'. [ 926.993755][ T1751] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 927.019056][ T1751] bond2 (unregistering): Released all slaves [ 927.142819][ T1762] netlink: 'syz.2.7430': attribute type 10 has an invalid length. [ 927.339754][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 927.357036][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7429'. [ 927.420068][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 927.502280][ T1767] tc_dump_action: action bad kind [ 928.779847][ T1833] __nla_validate_parse: 4 callbacks suppressed [ 928.779873][ T1833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7446'. [ 928.881138][ T1833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7446'. [ 929.315321][ T1848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.897029][ T1866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7454'. [ 930.373931][ T1879] bond3: entered promiscuous mode [ 930.379126][ T1879] bond3: entered allmulticast mode [ 930.385765][ T1879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.211575][ T1851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.241622][ T1864] netlink: 'syz.2.7449': attribute type 1 has an invalid length. [ 932.251280][ T1864] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7449'. [ 932.681555][ T1903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7461'. [ 933.020765][ T1898] syzkaller1: entered promiscuous mode [ 933.044909][ T1898] syzkaller1: entered allmulticast mode [ 933.056691][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.287042][ T1912] xt_TCPMSS: Only works on TCP SYN packets [ 933.510097][ T1919] netlink: 'syz.3.7468': attribute type 39 has an invalid length. [ 933.756977][ T5657] Bluetooth: hci1: command 0x0406 tx timeout [ 934.367461][ T1947] veth5: entered allmulticast mode [ 934.391774][ T1950] netem: unknown loss type 8 [ 934.401956][ T1950] netem: change failed [ 934.480737][ T1962] netlink: 'syz.1.7482': attribute type 13 has an invalid length. [ 934.519004][ T1962] netlink: 'syz.1.7482': attribute type 58 has an invalid length. [ 934.575363][ T1962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7482'. [ 934.631367][ T8340] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.684601][ T8340] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.731519][ T8340] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.750477][ T1975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7484'. [ 934.839678][ T8340] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.041913][ T1981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7486'. [ 935.173552][ T1988] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 935.330703][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7490'. [ 935.344096][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7490'. [ 935.355193][ T1997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7490'. [ 935.533085][ T2003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7494'. [ 935.791302][ T2020] netlink: 'syz.1.7498': attribute type 1 has an invalid length. [ 935.858221][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7498'. [ 935.887963][ T2020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 935.926054][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7496'. [ 936.299243][ T2040] netlink: 'syz.1.7502': attribute type 11 has an invalid length. [ 938.567692][ T2006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.848640][ T2047] netlink: 'syz.3.7503': attribute type 1 has an invalid length. [ 938.857574][ T2047] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7503'. [ 938.867054][ T2047] netlink: 'syz.3.7503': attribute type 1 has an invalid length. [ 938.882773][ T2047] netlink: 'syz.3.7503': attribute type 8 has an invalid length. [ 938.917539][ T2049] netlink: 'syz.4.7504': attribute type 83 has an invalid length. [ 939.756206][ T2082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.046602][ T2090] xt_ecn: cannot match TCP bits for non-tcp packets [ 940.138755][ T2090] __nla_validate_parse: 3 callbacks suppressed [ 940.138778][ T2090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7515'. [ 940.848289][ T2116] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 941.382308][ T2134] netlink: 'syz.1.7525': attribute type 11 has an invalid length. [ 941.408631][ T2135] netlink: 'syz.2.7526': attribute type 2 has an invalid length. [ 941.419804][ T2134] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.7525'. [ 943.794571][ T2216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7538'. [ 943.808124][ T2217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7538'. [ 943.904019][ T2220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7539'. [ 944.461510][ T2236] tcf_pedit_act: 7 callbacks suppressed [ 944.461550][ T2236] tc action pedit offset must be on 32 bit boundaries [ 944.932117][ T2158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.261835][ T2254] bridge0: port 3(batadv1) entered blocking state [ 945.280477][ T2254] bridge0: port 3(batadv1) entered disabled state [ 945.296647][ T2254] batadv1: entered allmulticast mode [ 945.317142][ T2254] batadv1: entered promiscuous mode [ 945.401690][ T2261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7544'. [ 945.427839][ T2261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7544'. [ 945.483935][ T2265] tipc: Started in network mode [ 945.513467][ T2265] tipc: Node identity 06faedda56a4, cluster identity 4711 [ 945.552659][ T2265] tipc: Enabled bearer , priority 0 [ 945.565922][ T2257] syzkaller0: entered promiscuous mode [ 945.573634][ T2257] syzkaller0: entered allmulticast mode [ 945.740171][ T2257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7543'. [ 945.746750][T24070] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 945.759278][T24070] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 945.913346][ T2263] tipc: Resetting bearer [ 945.971815][ T2256] tipc: Resetting bearer [ 946.084402][ T2256] tipc: Disabling bearer [ 946.219543][ T29] audit: type=1800 audit(1780824034.799:26): pid=2297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7551" name="memory.events" dev="tmpfs" ino=1034 res=0 errno=0 [ 946.279202][ T2291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7550'. [ 946.315708][ T2291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7550'. [ 946.349982][ T2291] netlink: 'syz.0.7550': attribute type 10 has an invalid length. [ 946.401793][ T2291] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.481390][ T2291] bond0: (slave team0): Enslaving as an active interface with an up link [ 946.563197][ T2315] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7556'. [ 946.625951][ T2317] sctp: [Deprecated]: syz.0.7557 (pid 2317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.625951][ T2317] Use struct sctp_sack_info instead [ 946.649366][ T2318] netlink: 'syz.0.7557': attribute type 21 has an invalid length. [ 946.670965][ T2318] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7557'. [ 946.686809][ T2315] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7556'. [ 946.698921][ T2318] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7557'. [ 946.776235][ T2325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7558'. [ 947.037568][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 948.266274][ T2378] netlink: 'syz.0.7568': attribute type 4 has an invalid length. [ 948.312897][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 948.540513][ T2389] netlink: 'syz.0.7572': attribute type 24 has an invalid length. [ 948.550143][ T2392] netlink: 'syz.2.7574': attribute type 1 has an invalid length. [ 948.777115][ T2399] bridge0: port 3(veth1_to_bridge) entered blocking state [ 948.801903][ T2399] bridge0: port 3(veth1_to_bridge) entered disabled state [ 948.839866][ T2399] veth1_to_bridge: entered allmulticast mode [ 948.871742][ T2399] veth1_to_bridge: entered promiscuous mode [ 948.902828][ T2399] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.935896][ T2399] bridge0: port 3(veth1_to_bridge) entered blocking state [ 948.943281][ T2399] bridge0: port 3(veth1_to_bridge) entered listening state [ 948.970210][ T2409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 949.017475][ T2411] netlink: 'syz.1.7578': attribute type 1 has an invalid length. [ 949.607180][ T2434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.993354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 950.007583][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 950.521243][ T2461] netlink: 'syz.4.7585': attribute type 9 has an invalid length. [ 950.640647][ T2468] __nla_validate_parse: 5 callbacks suppressed [ 950.640670][ T2468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7584'. [ 950.708717][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7586'. [ 950.718712][ T2463] netlink: 'syz.1.7584': attribute type 2 has an invalid length. [ 950.737431][ T2476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7586'. [ 950.776112][ T2480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7587'. [ 950.840464][ T2478] bond7: entered promiscuous mode [ 950.846823][ T2478] bond7: entered allmulticast mode [ 950.872978][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 950.956879][ T2491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7590'. [ 950.966267][ T2491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7590'. [ 950.982497][ T2491] gretap0: entered promiscuous mode [ 950.997298][ T2491] gretap0: left promiscuous mode [ 951.077015][ T2489] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 951.225254][ T2508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7592'. [ 951.229369][ T2510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7593'. [ 951.485791][ T2522] netlink: 'syz.1.7596': attribute type 1 has an invalid length. [ 951.495789][ T2522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7596'. [ 951.518634][ T2522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7596'. [ 951.776617][ T2542] xt_bpf: check failed: parse error [ 952.330379][ T2578] vlan0: entered allmulticast mode [ 952.335707][ T2578] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 952.383063][ T2571] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 952.401062][ T2571] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 952.509675][ T2586] bridge0: port 3(veth1_to_bridge) entered disabled state [ 952.518100][ T2586] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.526397][ T2586] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.557543][ T2590] bridge0: port 3(veth1_to_bridge) entered blocking state [ 952.564932][ T2590] bridge0: port 3(veth1_to_bridge) entered listening state [ 952.574344][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.581558][ T2590] bridge0: port 2(bridge_slave_1) entered listening state [ 952.589039][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.596285][ T2590] bridge0: port 1(bridge_slave_0) entered listening state [ 952.616900][ T2590] bridge0: entered promiscuous mode [ 952.622688][ T2590] bridge0: entered allmulticast mode [ 953.076127][ T2628] netlink: 'syz.1.7623': attribute type 1 has an invalid length. [ 953.202195][ T29] audit: type=1800 audit(1780824041.779:27): pid=2633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7623" name="memory.events" dev="tmpfs" ino=1840 res=0 errno=0 [ 953.251803][ T2638] netlink: 'syz.2.7626': attribute type 10 has an invalid length. [ 953.261198][ T2628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 953.307934][ T2633] bond8: (slave gretap0): making interface the new active one [ 953.317130][ T2633] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 953.876195][ T2664] syzkaller0: entered promiscuous mode [ 953.892147][ T2664] syzkaller0: entered allmulticast mode [ 953.914514][ T2669] netlink: 'syz.4.7630': attribute type 4 has an invalid length. [ 953.926636][ T2675] netlink: 'syz.2.7633': attribute type 1 has an invalid length. [ 954.634148][ C1] bridge0: port 3(veth1_to_bridge) entered blocking state [ 957.069927][ T2686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.575172][ T2735] __nla_validate_parse: 12 callbacks suppressed [ 957.575195][ T2735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7640'. [ 958.091781][ T2788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7653'. [ 958.116558][ T2788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7653'. [ 958.177012][ T2794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7654'. [ 958.271818][ T2798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7654'. [ 958.342505][ T2798] nbd: device at index 64 is going down [ 958.366368][ T2803] bond0: option ad_select: unable to set because the bond device is up [ 958.858347][ T2801] udevd[2801]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 958.904387][ T2505] udevd[2505]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 959.088260][ T2830] bond9: entered promiscuous mode [ 959.100467][ T2830] bond9: entered allmulticast mode [ 959.115430][ T2870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7664'. [ 959.351679][ T2883] syzkaller0: entered promiscuous mode [ 959.373145][ T2883] syzkaller0: entered allmulticast mode [ 959.405072][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7668'. [ 959.579316][ T2902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7670'. [ 959.611869][ T2902] Bluetooth: MGMT ver 1.23 [ 959.632203][ T2902] netlink: 'syz.0.7670': attribute type 1 has an invalid length. [ 959.658154][ T2902] netlink: 'syz.0.7670': attribute type 4 has an invalid length. [ 959.688474][ T2902] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7670'. [ 959.797246][ T2908] netlink: 'syz.2.7673': attribute type 12 has an invalid length. [ 959.805755][ T2908] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7673'. [ 959.819261][ T2914] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20002 [ 960.436514][ T2956] xt_hashlimit: size too large, truncated to 1048576 [ 960.628163][ T2956] netlink: 'syz.0.7686': attribute type 9 has an invalid length. [ 961.274930][ T2998] x_tables: unsorted underflow at hook 2 [ 961.432823][ T5657] Bluetooth: hci2: command 0x0405 tx timeout [ 961.650744][ T3023] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 961.776778][ T3028] : renamed from gretap0 (while UP) [ 962.287434][ T3059] netlink: 'syz.3.7719': attribute type 21 has an invalid length. [ 962.339326][ T3067] netlink: 'syz.3.7719': attribute type 39 has an invalid length. [ 962.538135][ T3078] netlink: 'syz.0.7723': attribute type 12 has an invalid length. [ 962.619307][ T3078] bond4 (unregistering): Released all slaves [ 962.630920][ T3085] netlink: 'syz.1.7726': attribute type 10 has an invalid length. [ 962.702033][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.757957][ T3094] __nla_validate_parse: 7 callbacks suppressed [ 962.757979][ T3094] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7726'. [ 962.758498][ T3085] bond0: (slave team0): Enslaving as an active interface with an up link [ 962.888711][ T3086] openvswitch: netlink: Flow actions attr not present in new flow. [ 962.973409][ T3105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7730'. [ 963.107383][ T3113] syzkaller0: entered promiscuous mode [ 963.115872][ T3113] syzkaller0: entered allmulticast mode [ 963.130238][ T3113] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7732'. [ 963.160860][ T3113] vlan1: entered allmulticast mode [ 963.169985][ T3113] : entered allmulticast mode [ 963.181154][ T3119] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.7735'. [ 963.208159][ T3122] IPv6: sit1: Disabled Multicast RS [ 963.335399][ T3124] 0ªX¹¦Dö»: left allmulticast mode [ 963.411399][ T3134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7740'. [ 963.563918][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7743'. [ 963.576573][ T3141] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7742'. [ 963.650733][ T3154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7745'. [ 963.657673][ T3142] tipc: New replicast peer: 0.0.0.0 [ 963.683999][ T3142] tipc: Enabled bearer , priority 10 [ 963.697064][ T3156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7745'. [ 963.731121][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7746'. [ 963.799804][ T3158] hsr_slave_1 (unregistering): left promiscuous mode [ 964.267788][ T3196] openvswitch: netlink: Missing valid actions attribute. [ 964.299805][ T3196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.907798][ T3247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.218452][ T3312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 967.109994][ T3362] netlink: 'syz.4.7800': attribute type 1 has an invalid length. [ 967.130842][ T3356] syzkaller0: entered promiscuous mode [ 967.139107][ T3356] syzkaller0: entered allmulticast mode [ 967.200682][ T3362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.241681][ T3358] ipvlan2: entered promiscuous mode [ 968.160199][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 968.167832][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 970.407834][ T3396] IPv6: sit3: Disabled Multicast RS [ 970.415148][ T3396] sit3: entered allmulticast mode [ 970.706650][ T3416] __nla_validate_parse: 10 callbacks suppressed [ 970.706674][ T3416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7814'. [ 970.844733][ T3427] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7816'. [ 971.004344][ T3436] blkio.reset_stats is deprecated [ 971.191704][ T3447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7821'. [ 971.296370][ T3446] bond4: Removing last arp target with arp_interval on [ 971.341815][ T3450] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 971.566366][ T3465] tipc: Started in network mode [ 971.586693][ T3465] tipc: Node identity ac14142f, cluster identity 4711 [ 971.598062][ T3465] tipc: New replicast peer: 0.0.0.0 [ 971.605517][ T3465] tipc: Enabled bearer , priority 10 [ 971.929058][ T3480] netlink: 'syz.0.7832': attribute type 1 has an invalid length. [ 971.991882][ T3487] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7834'. [ 972.155786][ T3485] bridge3: entered promiscuous mode [ 972.181552][ T3485] bridge3: entered allmulticast mode [ 972.257562][ T3504] netlink: 'syz.3.7837': attribute type 12 has an invalid length. [ 972.482054][ T3515] netlink: 'syz.1.7840': attribute type 1 has an invalid length. [ 972.507461][ T3515] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7840'. [ 972.559526][ T3520] bond0: entered promiscuous mode [ 972.566767][ T3515] netlink: 'syz.1.7840': attribute type 1 has an invalid length. [ 972.583384][ T3520] bond_slave_0: entered promiscuous mode [ 972.598629][ T3520] bond_slave_1: entered promiscuous mode [ 972.601696][ T3515] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7840'. [ 972.652899][ T3533] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.7841'. [ 972.666993][ T3532] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7843'. [ 972.777725][T13490] tipc: Node number set to 2886997039 [ 972.986982][ T3545] netlink: 'syz.1.7844': attribute type 7 has an invalid length. [ 973.076245][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7846'. [ 973.242037][T25486] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 973.395154][ T3573] set match dimension is over the limit! [ 973.401042][ T3572] set match dimension is over the limit! [ 973.619185][ T3595] netlink: 'syz.4.7848': attribute type 1 has an invalid length. [ 973.669445][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7854'. [ 976.035409][ T3549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.515405][ T29] audit: type=1804 audit(1780824065.079:28): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7860" name="/newroot/233/cgroup.controllers" dev="tmpfs" ino=1206 res=1 errno=0 [ 976.599018][ T3624] netlink: 'syz.3.7862': attribute type 2 has an invalid length. [ 976.618277][ T29] audit: type=1800 audit(1780824065.079:29): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7860" name="cgroup.controllers" dev="tmpfs" ino=1206 res=0 errno=0 [ 976.667130][ T3618] netlink: 'syz.0.7857': attribute type 10 has an invalid length. [ 976.709358][ T29] audit: type=1804 audit(1780824065.149:30): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7860" name="/newroot/233/cgroup.controllers" dev="tmpfs" ino=1206 res=1 errno=0 [ 976.802978][ T3618] bond0: (slave team0): Releasing backup interface [ 976.833420][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 976.838314][ T3632] x_tables: duplicate underflow at hook 1 [ 976.877586][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 976.908192][ T3634] __nla_validate_parse: 1 callbacks suppressed [ 976.908215][ T3634] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7865'. [ 977.148330][ T3647] netlink: 'syz.1.7870': attribute type 29 has an invalid length. [ 977.169279][ T3647] netlink: 'syz.1.7870': attribute type 29 has an invalid length. [ 977.287566][ T3653] ip6t_srh: unknown srh match flags 4000 [ 977.480575][ T3664] netlink: 'syz.2.7876': attribute type 1 has an invalid length. [ 977.530731][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7876'. [ 977.892886][ T3691] x_tables: unsorted underflow at hook 4 [ 977.902134][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7882'. [ 978.017975][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7884'. [ 978.056446][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7884'. [ 978.137262][ T3702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7886'. [ 978.240349][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7888'. [ 978.297655][ T3713] veth3: entered promiscuous mode [ 978.303167][ T3713] veth3: entered allmulticast mode [ 978.378228][ T3716] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.409066][ T3716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.679039][ T3741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7896'. [ 978.765192][ T3744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7897'. [ 978.796102][ T3748] openvswitch: netlink: Missing valid actions attribute. [ 978.803658][ T3747] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7899'. [ 978.823927][ T3748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.000803][ T3756] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 979.110915][ T3766] netlink: 'syz.0.7904': attribute type 1 has an invalid length. [ 979.138116][ T3766] netlink: 'syz.0.7904': attribute type 1 has an invalid length. [ 979.313880][ T3774] netlink: 'syz.2.7907': attribute type 1 has an invalid length. [ 979.429159][ T3773] : entered promiscuous mode [ 979.521251][ T3779] bond4 (unregistering): Released all slaves [ 979.768481][ T3785] ip6gre1: entered allmulticast mode [ 979.886261][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.436269][ T3851] netlink: 'syz.3.7923': attribute type 2 has an invalid length. [ 980.835499][ T3872] netlink: 'syz.3.7933': attribute type 1 has an invalid length. [ 980.859043][ T3858] bridge0: port 3(veth1_to_bridge) entered disabled state [ 980.866556][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.873961][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.886018][ T3858] bridge0: left promiscuous mode [ 980.891226][ T3858] bridge0: left allmulticast mode [ 980.975446][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.990721][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.084207][ T3858] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 981.132267][ T3858] bridge3: left promiscuous mode [ 981.137557][ T3858] bridge3: left allmulticast mode [ 981.146848][ T3858] veth3: left promiscuous mode [ 981.151717][ T3858] veth3: left allmulticast mode [ 981.160370][ T3858] ip6gre1: left allmulticast mode [ 981.233735][ T3869] bond10: Unable to set up delay as MII monitoring is disabled [ 981.247085][ T3880] netlink: 'syz.2.7934': attribute type 7 has an invalid length. [ 981.253758][ T3869] bond10 (unregistering): Released all slaves [ 981.438967][ T3872] bond6: entered promiscuous mode [ 981.444717][ T3872] 8021q: adding VLAN 0 to HW filter on device bond6 [ 981.480642][T21997] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.492214][T21997] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.502013][T21997] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.511986][T21997] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.557787][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.572995][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.593192][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.604106][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.644611][T21997] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.666756][T21997] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.696640][T21997] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.734416][T21997] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.828704][ T3905] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 982.119728][ T3924] openvswitch: netlink: Message has -2 unknown bytes. [ 982.141225][ T3928] openvswitch: netlink: Message has -2 unknown bytes. [ 982.155362][ T3929] __nla_validate_parse: 16 callbacks suppressed [ 982.155383][ T3929] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7950'. [ 982.507420][ T3944] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 982.540078][ T3944] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 982.565236][ T3944] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 982.577834][ T3955] ip6gre1: entered allmulticast mode [ 982.625182][ T3944] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 983.266778][ T3987] netlink: 'syz.1.7966': attribute type 12 has an invalid length. [ 983.281944][ T3987] netlink: 'syz.1.7966': attribute type 29 has an invalid length. [ 983.301694][ T3987] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7966'. [ 983.311476][ T3987] netlink: 'syz.1.7966': attribute type 3 has an invalid length. [ 983.324329][ T3987] netlink: 'syz.1.7966': attribute type 2 has an invalid length. [ 983.343981][ T3987] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7966'. [ 983.420606][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 983.459531][ T3997] netlink: 'syz.3.7969': attribute type 4 has an invalid length. [ 983.520963][ T4002] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 983.617481][ T4007] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7971'. [ 983.727138][ T4014] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 983.784355][ T4017] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 983.800677][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7976'. [ 983.818166][ T4021] netlink: 'syz.4.7978': attribute type 1 has an invalid length. [ 983.838152][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7978'. [ 983.991201][ T4028] netlink: 576 bytes leftover after parsing attributes in process `syz.3.7979'. [ 984.005112][ T4033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.165115][ T4037] bridge0: entered promiscuous mode [ 984.188027][ T4037] bridge0: entered allmulticast mode [ 984.755193][ T4074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7996'. [ 984.801762][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7997'. [ 984.856411][ T4075] veth7: entered allmulticast mode [ 984.912523][ T4084] netlink: 'syz.3.7996': attribute type 1 has an invalid length. [ 985.194509][ T4094] netlink: 'syz.3.8000': attribute type 61 has an invalid length. [ 985.242973][ T4091] syzkaller0: entered promiscuous mode [ 985.251609][ T4091] syzkaller0: entered allmulticast mode [ 985.482687][ T4108] netlink: 'syz.4.8006': attribute type 21 has an invalid length. [ 985.522749][ T4108] netlink: 'syz.4.8006': attribute type 5 has an invalid length. [ 985.716617][ T4120] nbd: couldn't find device at index 2958377 [ 985.734678][ T4117] syzkaller0: entered promiscuous mode [ 985.755325][ T4117] syzkaller0: entered allmulticast mode [ 985.841183][ T4122] bond5: entered promiscuous mode [ 985.863729][ T4117] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 985.896525][ T4130] macvlan4: entered promiscuous mode [ 985.901875][ T4130] macvlan4: entered allmulticast mode [ 985.947012][ T4130] bond5: (slave macvlan4): Opening slave failed [ 986.408628][ T4163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 986.526731][ T4176] bridge0: left promiscuous mode [ 986.542974][ T4176] bridge0: left allmulticast mode [ 986.563041][ T4176] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 986.724457][ T4188] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 988.265254][ T4231] __nla_validate_parse: 12 callbacks suppressed [ 988.265278][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8040'. [ 988.351533][ T4282] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 988.477000][ T4287] syzkaller0: entered promiscuous mode [ 988.493970][ T4287] syzkaller0: entered allmulticast mode [ 988.575743][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8053'. [ 988.596343][ T4294] validate_nla: 3 callbacks suppressed [ 988.596366][ T4294] netlink: 'syz.3.8053': attribute type 1 has an invalid length. [ 988.755859][ T4300] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8055'. [ 988.773051][ T4304] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8056'. [ 988.789309][ T4300] xt_cgroup: xt_cgroup: no path or classid specified [ 989.120046][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8059'. [ 989.180839][ T4316] : entered promiscuous mode [ 989.401260][ T4327] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8064'. [ 989.560486][ T4337] syzkaller0: entered promiscuous mode [ 989.585233][ T4337] syzkaller0: entered allmulticast mode [ 989.775990][ T4347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 989.815137][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8071'. [ 989.948453][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8073'. [ 990.251096][ T4376] xt_l2tp: invalid flags combination: 0 [ 990.744363][ T4397] bond6: option resend_igmp: invalid value (32767) [ 990.752604][ T4397] bond6: option resend_igmp: allowed values 0 - 255 [ 990.826706][ T4397] bond6 (unregistering): Released all slaves [ 991.067794][ T4408] netlink: 'syz.3.8085': attribute type 23 has an invalid length. [ 991.925049][ T4422] netlink: 'syz.4.8088': attribute type 153 has an invalid length. [ 992.764708][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8109'. [ 992.797935][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8109'. [ 992.846496][ T4486] 8021q: adding VLAN 0 to HW filter on device bond10 [ 992.856069][ T4487] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 993.168346][ T4515] nbd: couldn't find device at index 0 [ 993.233050][ T4519] netlink: 'syz.4.8118': attribute type 1 has an invalid length. [ 993.243745][ T4514] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 993.253348][ T4519] netlink: 'syz.4.8118': attribute type 4 has an invalid length. [ 993.264290][ T4514] bond11 (unregistering): Released all slaves [ 993.473629][ T4528] IPv6: NLM_F_CREATE should be specified when creating new route [ 993.554978][ T4531] __nla_validate_parse: 2 callbacks suppressed [ 993.555004][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8120'. [ 993.597112][ T4530] netlink: 'syz.2.8123': attribute type 8 has an invalid length. [ 993.622759][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8123'. [ 993.677820][ T4530] veth1_to_team: entered promiscuous mode [ 993.699814][ T4530] gretap0: entered promiscuous mode [ 993.708834][ T4530] ip6gretap0: entered promiscuous mode [ 993.716185][ T4530] hsr1: entered promiscuous mode [ 993.811519][ T4539] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8126'. [ 993.868611][ T4543] tipc: New replicast peer: 172.20.20.187 [ 993.878845][ T4543] tipc: Enabled bearer , priority 10 [ 994.336711][ T4580] netlink: 'syz.1.8138': attribute type 1 has an invalid length. [ 994.370187][ T4580] netlink: 'syz.1.8138': attribute type 7 has an invalid length. [ 994.405499][ T4586] netlink: 'syz.1.8138': attribute type 10 has an invalid length. [ 994.413615][ T4580] netlink: 'syz.1.8138': attribute type 8 has an invalid length. [ 994.413640][ T4580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8138'. [ 994.468757][ T4585] geneve2: entered promiscuous mode [ 994.477642][ T4586] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8138'. [ 994.494694][ T4585] geneve2: entered allmulticast mode [ 994.515452][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8140'. [ 994.529956][T25486] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 994.645150][T25486] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 994.672441][T25486] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 994.708458][T25486] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 994.896048][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8148'. [ 995.003918][ T1461] tipc: Node number set to 1024791547 [ 995.038994][ T4619] syzkaller0: entered promiscuous mode [ 995.047438][ T4625] netlink: 'syz.4.8151': attribute type 15 has an invalid length. [ 995.051557][ T4619] syzkaller0: entered allmulticast mode [ 995.132507][ T4624] syzkaller1: entered promiscuous mode [ 995.154478][ T4634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 995.173867][ T4624] syzkaller1: entered allmulticast mode [ 995.247697][ T4639] netlink: 'syz.2.8156': attribute type 1 has an invalid length. [ 995.263377][ T4639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8156'. [ 995.428702][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8159'. [ 995.772795][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8164'. [ 995.816466][ T4665] team0: Caught tx_queue_len zero misconfig [ 996.417671][ T4693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.455574][ T4692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.516318][ T4695] netlink: 'syz.4.8172': attribute type 12 has an invalid length. [ 996.640804][ T4674] infiniband syz0: set active [ 996.659405][ T4674] infiniband syz0: added bridge_slave_1 [ 996.750843][ T4674] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 996.769294][ T4674] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 996.789828][ T4674] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 996.935665][ T4713] IPv6: sit3: Disabled Multicast RS [ 996.976052][ T4674] RDS/IB: syz0: added [ 996.989674][ T4674] smc: adding ib device syz0 with port count 1 [ 997.013932][ T4674] smc: ib device syz0 port 1 has no pnetid [ 997.358653][ T4737] sctp: [Deprecated]: syz.0.8182 (pid 4737) Use of int in max_burst socket option deprecated. [ 997.358653][ T4737] Use struct sctp_assoc_value instead [ 998.537584][ T4767] syzkaller0: entered promiscuous mode [ 998.553346][ T4767] syzkaller0: entered allmulticast mode [ 998.670439][ T4781] __nla_validate_parse: 5 callbacks suppressed [ 998.670459][ T4781] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8195'. [ 998.825865][ T4785] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 998.866761][ T4785] bond6 (unregistering): Released all slaves [ 998.919120][ T4787] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 999.387282][ T4814] netlink: 'syz.0.8204': attribute type 1 has an invalid length. [ 999.412878][ T4814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8204'. [ 1002.975293][ T4841] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1003.047374][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8209'. [ 1003.113601][ T4846] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1003.345966][ T4862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8214'. [ 1003.464639][ T4867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1003.551482][ T4876] netlink: 'syz.4.8217': attribute type 4 has an invalid length. [ 1003.728015][ T4881] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8219'. [ 1003.824173][ T4885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8222'. [ 1003.869156][ T4881] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8219'. [ 1004.067042][ T4893] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1004.085292][ T4893] netlink: Unknown conntrack attr (type=2304, max=9) [ 1004.248902][ T4902] 8021q: VLANs not supported on ip_vti0 [ 1004.371266][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1004.479616][ T4914] xt_ecn: cannot match TCP bits for non-tcp packets [ 1004.489817][ T4914] IPVS: length: 8 != 1152 [ 1004.714720][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1005.237878][ T4942] syzkaller0: entered promiscuous mode [ 1005.255989][ T4942] syzkaller0: entered allmulticast mode [ 1005.279024][ T4942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1005.422045][ T4969] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1005.431817][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1005.443294][ T4969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1005.534797][ T4972] netlink: 'syz.1.8250': attribute type 12 has an invalid length. [ 1005.542916][ T4972] netlink: 'syz.1.8250': attribute type 1 has an invalid length. [ 1005.550725][ T4972] netlink: 'syz.1.8250': attribute type 2 has an invalid length. [ 1005.559931][ T4972] netlink: 'syz.1.8250': attribute type 3 has an invalid length. [ 1006.392614][T24551] Bluetooth: hci2: command 0x0405 tx timeout [ 1006.417690][ T5022] syzkaller0: entered promiscuous mode [ 1006.432594][ T5022] syzkaller0: entered allmulticast mode [ 1007.452173][T25484] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1007.558396][ T5102] sctp: [Deprecated]: syz.2.8284 (pid 5102) Use of int in maxseg socket option. [ 1007.558396][ T5102] Use struct sctp_assoc_value instead [ 1007.809570][ T5114] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 1007.845829][ T5116] netlink: 'syz.0.8288': attribute type 7 has an invalid length. [ 1007.872471][ T5116] netlink: 'syz.0.8288': attribute type 8 has an invalid length. [ 1007.899492][ T5116] gretap0: entered promiscuous mode [ 1007.926030][ T5116] gretap0: left promiscuous mode [ 1008.643454][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.076570][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.096389][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.528963][T24070] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.549223][T24070] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.560945][T24070] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.580759][T24070] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.590556][T24070] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.605765][T24070] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.615277][T24070] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.637312][T24070] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.738537][ T5130] syzkaller0: entered promiscuous mode [ 1009.744585][ T5130] syzkaller0: entered allmulticast mode [ 1010.129021][ T5077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.348592][ T5134] __nla_validate_parse: 11 callbacks suppressed [ 1010.348618][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8295'. [ 1010.367885][ T5133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1010.389185][ T5133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1010.482259][ T5141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1010.671613][ T5156] Unsupported ieee802154 address type: 0 [ 1010.691775][ T5156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8298'. [ 1010.869032][ T5162] syzkaller1: entered promiscuous mode [ 1010.894077][ T5162] syzkaller1: entered allmulticast mode [ 1011.012799][ T5170] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.8305'. [ 1011.165234][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8306'. [ 1011.397717][ T5186] netlink: 'syz.1.8308': attribute type 1 has an invalid length. [ 1011.434141][ T5186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8308'. [ 1011.563016][ T5193] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1011.605360][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8311'. [ 1011.797193][ T5206] xt_hashlimit: size too large, truncated to 1048576 [ 1011.825251][ T5207] geneve1: entered promiscuous mode [ 1012.007837][ T5218] IPVS: set_ctl: invalid protocol: 51 172.20.20.66:20003 [ 1012.316192][ T5236] bond6: (slave gre0): Device is not bonding slave [ 1012.323991][ T5236] bond6: option active_slave: invalid value (gre0) [ 1012.335645][ T5236] bond6 (unregistering): Released all slaves [ 1013.121570][ T5294] macvtap1: entered promiscuous mode [ 1013.127435][ T5294] vlan0: entered promiscuous mode [ 1013.132814][ T5294] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 1013.143765][ T5294] macvtap1: entered allmulticast mode [ 1013.593312][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1014.066317][ C0] ================================================================== [ 1014.074531][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.082620][ C0] Read of size 2 at addr ffff88817cf82774 by task syz.2.8352/5349 [ 1014.090473][ C0] [ 1014.092839][ C0] CPU: 0 UID: 0 PID: 5349 Comm: syz.2.8352 Not tainted syzkaller #0 PREEMPT(full) [ 1014.092867][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.092882][ C0] Call Trace: [ 1014.092892][ C0] [ 1014.092901][ C0] dump_stack_lvl+0xe8/0x150 [ 1014.092969][ C0] print_address_description+0x55/0x1e0 [ 1014.093013][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.093040][ C0] print_report+0x58/0x70 [ 1014.093061][ C0] kasan_report+0x117/0x150 [ 1014.093103][ C0] ? __netif_receive_skb_list_core+0x24d/0x810 [ 1014.093200][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.093230][ C0] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.093263][ C0] __dev_queue_xmit+0x29a/0x3950 [ 1014.093292][ C0] ? rcu_is_watching+0x15/0xb0 [ 1014.093336][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1014.093372][ C0] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1014.093405][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1014.093427][ C0] ? __asan_memcpy+0x40/0x70 [ 1014.093453][ C0] ? __pskb_copy_fclone+0xb85/0x11e0 [ 1014.093518][ C0] ? __asan_memcpy+0x40/0x70 [ 1014.093546][ C0] ? __pskb_copy_fclone+0xb85/0x11e0 [ 1014.093572][ C0] ? hsr_create_tagged_frame+0x500/0xe10 [ 1014.093639][ C0] ? __asan_memmove+0x40/0x70 [ 1014.093668][ C0] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 1014.093708][ C0] hsr_forward_skb+0x167e/0x2ab0 [ 1014.093775][ C0] ? hsr_forward_skb+0xbb/0x2ab0 [ 1014.093809][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1014.093839][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1014.093884][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.093917][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 1014.093949][ C0] ? hsr_handle_frame+0x6ab/0xa50 [ 1014.093982][ C0] hsr_handle_frame+0x6b8/0xa50 [ 1014.094017][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 1014.094051][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 1014.094086][ C0] ? lock_acquire+0x106/0x350 [ 1014.094112][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1014.094159][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1014.094210][ C0] ? kernel_text_address+0xa5/0xe0 [ 1014.094250][ C0] ? __kernel_text_address+0xd/0x30 [ 1014.094280][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1014.094309][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 1014.094338][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.094368][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1014.094405][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 1014.094432][ C0] ? lock_acquire+0x106/0x350 [ 1014.094457][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1014.094485][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1014.094513][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 1014.094607][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 1014.094638][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 1014.094673][ C0] napi_complete_done+0x299/0x730 [ 1014.094705][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 1014.094734][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 1014.094800][ C0] gro_cell_poll+0x5a9/0x5d0 [ 1014.094836][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 1014.094866][ C0] __napi_poll+0xae/0x340 [ 1014.094891][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1014.094921][ C0] net_rx_action+0x627/0xf70 [ 1014.094988][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1014.095026][ C0] ? sched_clock+0x3f/0x60 [ 1014.095078][ C0] handle_softirqs+0x22a/0x840 [ 1014.095110][ C0] ? do_softirq+0x76/0xd0 [ 1014.095133][ C0] ? tun_rx_batched+0x185/0x790 [ 1014.095220][ C0] do_softirq+0x76/0xd0 [ 1014.095241][ C0] [ 1014.095249][ C0] [ 1014.095256][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1014.095276][ C0] ? tun_rx_batched+0x185/0x790 [ 1014.095296][ C0] tun_rx_batched+0x617/0x790 [ 1014.095321][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 1014.095342][ C0] ? tun_get_user+0x2787/0x43e0 [ 1014.095364][ C0] ? tun_get_user+0x2787/0x43e0 [ 1014.095385][ C0] ? tun_get_user+0x2394/0x43e0 [ 1014.095406][ C0] ? tun_get_user+0x2394/0x43e0 [ 1014.095426][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1014.095451][ C0] tun_get_user+0x2bbc/0x43e0 [ 1014.095474][ C0] ? tun_get_user+0x2787/0x43e0 [ 1014.095500][ C0] ? aa_file_perm+0x192/0x15e0 [ 1014.095558][ C0] ? aa_file_perm+0x50e/0x15e0 [ 1014.095578][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 1014.095601][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.095627][ C0] ? __css_rstat_updated+0x23a/0x530 [ 1014.095669][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 1014.095742][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1014.095768][ C0] ? tun_get+0x1c/0x2f0 [ 1014.095788][ C0] ? tun_get+0x1c/0x2f0 [ 1014.095812][ C0] ? tun_get+0x1c/0x2f0 [ 1014.095831][ C0] ? tun_get+0x1c/0x2f0 [ 1014.095854][ C0] tun_chr_write_iter+0x113/0x200 [ 1014.095916][ C0] vfs_write+0x61d/0xb90 [ 1014.095967][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1014.096003][ C0] ? __fget_files+0x2a/0x420 [ 1014.096037][ C0] ksys_write+0x150/0x270 [ 1014.096069][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1014.096106][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.096143][ C0] do_syscall_64+0x174/0x580 [ 1014.096205][ C0] ? trace_irq_disable+0x3b/0x140 [ 1014.096243][ C0] ? clear_bhb_loop+0x40/0x90 [ 1014.096269][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.096290][ C0] RIP: 0033:0x7f3be299ce59 [ 1014.096313][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.096334][ C0] RSP: 002b:00007f3be3862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.096360][ C0] RAX: ffffffffffffffda RBX: 00007f3be2c16090 RCX: 00007f3be299ce59 [ 1014.096377][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 1014.096393][ C0] RBP: 00007f3be2a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1014.096408][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.096423][ C0] R13: 00007f3be2c16128 R14: 00007f3be2c16090 R15: 00007ffc7a443918 [ 1014.096452][ C0] [ 1014.096461][ C0] [ 1014.678237][ C0] The buggy address belongs to the physical page: [ 1014.684813][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17cf82 [ 1014.693683][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 1014.700907][ C0] raw: 057ff00000000000 ffffea0005f3e088 ffffea0005f3e088 0000000000000000 [ 1014.709505][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1014.718097][ C0] page dumped because: kasan: bad access detected [ 1014.724597][ C0] page_owner info is not present (never set?) [ 1014.730676][ C0] [ 1014.733014][ C0] Memory state around the buggy address: [ 1014.738661][ C0] ffff88817cf82600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1014.746737][ C0] ffff88817cf82680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1014.755259][ C0] >ffff88817cf82700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1014.763330][ C0] ^ [ 1014.771060][ C0] ffff88817cf82780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1014.779132][ C0] ffff88817cf82800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1014.787339][ C0] ================================================================== [ 1014.796139][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1014.803387][ C0] CPU: 0 UID: 0 PID: 5349 Comm: syz.2.8352 Not tainted syzkaller #0 PREEMPT(full) [ 1014.812712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.822807][ C0] Call Trace: [ 1014.826128][ C0] [ 1014.829061][ C0] vpanic+0x56c/0xa60 [ 1014.833085][ C0] ? __pfx_vpanic+0x10/0x10 [ 1014.837633][ C0] panic+0xc5/0xd0 [ 1014.841437][ C0] ? __pfx_panic+0x10/0x10 [ 1014.845944][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.851715][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.857387][ C0] check_panic_on_warn+0x89/0xb0 [ 1014.862379][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.868073][ C0] end_report+0x73/0x170 [ 1014.872375][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.878062][ C0] kasan_report+0x128/0x150 [ 1014.882621][ C0] ? __netif_receive_skb_list_core+0x24d/0x810 [ 1014.888833][ C0] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.894530][ C0] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1014.900063][ C0] __dev_queue_xmit+0x29a/0x3950 [ 1014.905057][ C0] ? rcu_is_watching+0x15/0xb0 [ 1014.909914][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1014.915348][ C0] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1014.921476][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1014.926904][ C0] ? __asan_memcpy+0x40/0x70 [ 1014.931559][ C0] ? __pskb_copy_fclone+0xb85/0x11e0 [ 1014.936905][ C0] ? __asan_memcpy+0x40/0x70 [ 1014.941547][ C0] ? __pskb_copy_fclone+0xb85/0x11e0 [ 1014.946880][ C0] ? hsr_create_tagged_frame+0x500/0xe10 [ 1014.952576][ C0] ? __asan_memmove+0x40/0x70 [ 1014.957309][ C0] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 1014.963010][ C0] hsr_forward_skb+0x167e/0x2ab0 [ 1014.968016][ C0] ? hsr_forward_skb+0xbb/0x2ab0 [ 1014.973019][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1014.978354][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1014.983449][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.988888][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 1014.993876][ C0] ? hsr_handle_frame+0x6ab/0xa50 [ 1014.998952][ C0] hsr_handle_frame+0x6b8/0xa50 [ 1015.003866][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 1015.009299][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 1015.014989][ C0] ? lock_acquire+0x106/0x350 [ 1015.019716][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1015.024878][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1015.031012][ C0] ? kernel_text_address+0xa5/0xe0 [ 1015.036267][ C0] ? __kernel_text_address+0xd/0x30 [ 1015.041649][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1015.047342][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 1015.053379][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.058372][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1015.064935][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 1015.071132][ C0] ? lock_acquire+0x106/0x350 [ 1015.075861][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1015.082241][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1015.088970][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 1015.094323][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 1015.099526][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 1015.104696][ C0] napi_complete_done+0x299/0x730 [ 1015.109774][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 1015.115385][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 1015.120242][ C0] gro_cell_poll+0x5a9/0x5d0 [ 1015.124895][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 1015.129710][ C0] __napi_poll+0xae/0x340 [ 1015.134268][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1015.139722][ C0] net_rx_action+0x627/0xf70 [ 1015.144410][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1015.149613][ C0] ? sched_clock+0x3f/0x60 [ 1015.154114][ C0] handle_softirqs+0x22a/0x840 [ 1015.159022][ C0] ? do_softirq+0x76/0xd0 [ 1015.163413][ C0] ? tun_rx_batched+0x185/0x790 [ 1015.168321][ C0] do_softirq+0x76/0xd0 [ 1015.172532][ C0] [ 1015.175498][ C0] [ 1015.178473][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1015.183643][ C0] ? tun_rx_batched+0x185/0x790 [ 1015.188553][ C0] tun_rx_batched+0x617/0x790 [ 1015.193284][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 1015.198546][ C0] ? tun_get_user+0x2787/0x43e0 [ 1015.203438][ C0] ? tun_get_user+0x2787/0x43e0 [ 1015.208433][ C0] ? tun_get_user+0x2394/0x43e0 [ 1015.213328][ C0] ? tun_get_user+0x2394/0x43e0 [ 1015.218214][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1015.223542][ C0] tun_get_user+0x2bbc/0x43e0 [ 1015.228270][ C0] ? tun_get_user+0x2787/0x43e0 [ 1015.233172][ C0] ? aa_file_perm+0x192/0x15e0 [ 1015.237986][ C0] ? aa_file_perm+0x50e/0x15e0 [ 1015.242829][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 1015.247885][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.252848][ C0] ? __css_rstat_updated+0x23a/0x530 [ 1015.258163][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 1015.263316][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1015.269061][ C0] ? tun_get+0x1c/0x2f0 [ 1015.273245][ C0] ? tun_get+0x1c/0x2f0 [ 1015.277443][ C0] ? tun_get+0x1c/0x2f0 [ 1015.281713][ C0] ? tun_get+0x1c/0x2f0 [ 1015.285900][ C0] tun_chr_write_iter+0x113/0x200 [ 1015.290959][ C0] vfs_write+0x61d/0xb90 [ 1015.295234][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1015.300031][ C0] ? __fget_files+0x2a/0x420 [ 1015.304651][ C0] ksys_write+0x150/0x270 [ 1015.309024][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1015.313910][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.320001][ C0] do_syscall_64+0x174/0x580 [ 1015.324627][ C0] ? trace_irq_disable+0x3b/0x140 [ 1015.329715][ C0] ? clear_bhb_loop+0x40/0x90 [ 1015.334438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.340363][ C0] RIP: 0033:0x7f3be299ce59 [ 1015.344801][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.364517][ C0] RSP: 002b:00007f3be3862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.373044][ C0] RAX: ffffffffffffffda RBX: 00007f3be2c16090 RCX: 00007f3be299ce59 [ 1015.381078][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 1015.389072][ C0] RBP: 00007f3be2a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.397068][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.405059][ C0] R13: 00007f3be2c16128 R14: 00007f3be2c16090 R15: 00007ffc7a443918 [ 1015.413072][ C0] [ 1015.416740][ C0] Kernel Offset: disabled [ 1015.421087][ C0] Rebooting in 86400 seconds..