last executing test programs: 5.774896056s ago: executing program 2 (id=4448): epoll_create(0x3) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x801) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000fc003c1350ccd4099e0000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008007a310000000008000a40fbfffffc14000066ca3bf445d420b6a41fc281df8e4100001180010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x7f) (async) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000005c0)={r0, &(0x7f00000003c0)='&\x00', 0x202402, &(0x7f0000000500)={@align=0x80000000, {0x1, 0xe440, 0x3, 0xc}}, 0x10000, &(0x7f0000000540), &(0x7f0000000580)=0x4}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@gettaction={0x68, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c0d8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltaction={0x68, 0x31, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x350cd488}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdbd, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10, 0x7f, 0x400}}}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r6) splice(r0, 0x0, r6, 0x0, 0x8202, 0x9) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002dbd7000d91bdf25450000000c009900080000000d000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c891}, 0x54) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.893210064s ago: executing program 0 (id=4458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc02000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000000000000a000a00ac1414bb00000000000000000000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000003c0200000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.430819931s ago: executing program 0 (id=4464): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000002010400000000000000000200002504000280"], 0x18}}, 0x0) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000140)) r7 = socket(0x10, 0x803, 0x0) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000300)="e32794d039f0ed786bf0e2f6619dd831c890728400d799172c40081111c835dae77cbf31f826ef5b25f4d38b3eb5989de17ab69857e0aaed5e61d04d099155717365232c129c80502838558304f4ebeecad7ca1934fc4b2c0a76e0bb1919b9e6c1742c0ddb02da67ae92bbaef9251756ef58a71411015ed77a60483b63393f700aa617ebd434690c98e3ef2a654978a12c038a6dc0c05de43f2991ee41c37c212f26da50ead23cb20f0719d819b073570a5bcf5098732406c9d2f0b6698c94cf28de694fb3e08e2f1579a75bd1fab63c19e62a9ce5c0b4780525d7102a4cc83349cadb2ed712a6669968d6f5ee0ec7e08f6a9a6417b0a88f39", 0xf9}, {&(0x7f0000000440)="1d3cc8caee197782d63c88144ff2ce8176d691d7483396de0fc7066162db67d9bf0d2761f84305518274012a1a65747660583310c633c6243263f039885de4e78742631a79d30b08cd3e13a02a11601d5c5dc1", 0x53}, {&(0x7f00000004c0)="61af7458", 0x4}, {&(0x7f0000000640)="6fba7a4b5cd8edc8596cee5e04b085ec775142cc58991714f3c8b023c52b990d81568dd35bc4952c1c39ddc87a40d1a51a735997e1dfdb3ea717b358b1ba576175c2b739d13c81d6cea1ceff2ed7872a3f0b6bb658b4e3be820cc9a3d33ab6ae74fec50c5a419a683d8fb07f5d1d42084497042996ca41b492d3f52d4b1f61f6134f0a07901ca4c5f0a8c7", 0x8b}, {&(0x7f0000000700)="39f319ab01c5f539db96e517980c521a2a6400ab22310913dfd16e759b9d482754646a38bed85516b8cff110f6bfe9ecb13618c8d99b49480d63b7196f5a56dfe9bb0746b98e98cff6c563f6d43875f936ee05967cd4f8c1c1d762e700571027eeedc40748b597285fc8b2942de9b9f19cdfdaf430f1d657a45d86d49aa061d0387f6e661c18248da07d3bde6cc5f81bddc6f489620b01338094d424c0d71321508ee00c94436bf9a50fe3b490be72689e3376687ceaec53534161d3294fd901e28fb7f9c6ac24bf0759a0e8d5cb4a5ae2fe0afb2484703e7658ea8fe8cb7d3be9", 0xe1}], 0x5, 0x9, 0x5) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) 4.429555591s ago: executing program 2 (id=4465): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="6ffaadb614029f6a098579f3e6748e98411573eb3cb0d693244a92e494f635ea20a440273d07ba46a3b3bff57b25d42f59185e5402d7982830dce1635b775ab9a658f180f6741b94d40c2389c7510b4a470119f96b80701e959abf8fd105f3f0c682fac290ad79e5163d171dd91ede497fa04917d1d1478448429878888c64d26953fc7f029b29d09b8714459b16d507a92cd3eee9f14be9816b8f7ce2f45876c3601d735e078e27b1af5e6296a08f6dacef17d81657b383b521", 0xba}], 0x1}, 0x24840) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x40, 0x7fff, {0x77359400}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2, 0x0, 0x0, "b9b817681d225b37"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x48126b1c2af04b17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x9}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 4.167698668s ago: executing program 2 (id=4467): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}, {0x10, 0xd, 0x9}], 0x38}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.873335528s ago: executing program 2 (id=4470): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe00000000846d40cedc787a581400ab141394af855d359f0900000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002e000f8007ff17ec00000006080002400000000108000340000000ce08000240000000030800034058696a8c08000240000000010800014000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x7}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x840) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000005800038054000380140001007663616e3000000000000000000000001400010076657468315f746f5f626f6e640000001400010076"], 0x124}}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0xd0, 0x6, 0x7fffffff, 0x9, 0x1ff}) unshare(0x8000400) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x2000000, 0x40000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x8001}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 3.791594697s ago: executing program 1 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = accept(r1, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000380)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x101, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40054}, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a05000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30f3000000140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) clock_gettime(0x2, &(0x7f0000000440)) 3.574447733s ago: executing program 2 (id=4473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x20002, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048c00}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x1, 0x1, 0x10000, 0x3, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @broadcast}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_j1939(r4, &(0x7f0000002440)={&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000002380)=[{&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/37, 0x25}, {&(0x7f0000002340)=""/50, 0x32}], 0x9}, 0x40010020) r8 = socket(0x11, 0x80a, 0x0) sendto$x25(r8, 0x0, 0x0, 0x4080, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 3.423747256s ago: executing program 1 (id=4474): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001080)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000a200004000000007020000f8ffffffb703000008000000b7040000000000008500000057000000000000000000d37a50320ea70300"/82], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140a, 0xa5798f57ef7babf6, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 3.409646451s ago: executing program 1 (id=4475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r2, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="198b3726fc0033aa34535d4a4f943c87cfb9c600", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbff250c000000280005801c0002800800020007000000080004003c00000008000200be0d000008000100756470"], 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x5c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044001}, 0x4008090) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) close(r13) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="070000000000000071d5a9e9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4058, 0xfda}, {&(0x7f00000037c0)=""/4107, 0x100b}, {&(0x7f0000004880)=""/4063, 0xfdf}, {&(0x7f00000026c0)=""/4080, 0xff0}, {&(0x7f0000000700)=""/263, 0x107}, {&(0x7f00000000c0)=""/57, 0x39}], 0x6}, 0x12140) ioctl$XFS_IOC_ERROR_INJECTION(r10, 0x40085874, &(0x7f00000001c0)={r1, 0x62d37508}) 3.315573341s ago: executing program 0 (id=4477): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3e9b000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) poll(&(0x7f0000000180), 0x0, 0x1ff4) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f000000ed80)={0x0, 0x0, &(0x7f000000ed40)={&(0x7f000000ec00)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\xff\xff'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) listen(r0, 0xda90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) listen(r6, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0xfffc, @broadcast}, 0x10) syz_emit_ethernet(0x57, &(0x7f0000001940)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="843200001957555e9825d1e9743bb36f4fc45c5d7f974ab8b6000000000000000b0000000000000000"], 0x0) accept4(r6, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 3.094881235s ago: executing program 2 (id=4480): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd97) (async) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd97) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x34, r2, 0x1, 0x2, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x34, r2, 0x1, 0x2, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x18, 0x0, 0x1, 0x0, 0x0, @random="8b5242ef3c0f"}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) (async) socket(0x1, 0x6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) recvmmsg(r8, 0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x800004}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.298605445s ago: executing program 3 (id=4483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x4000800) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r6, 0x0, 0x2120) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x8}, 0x94) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) (async) r11 = socket(0x2b, 0x1, 0x1) getsockname$netlink(r7, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000080)={0x5c, 0x2, 0x2, 0x3, 0x0, [@local]}, 0x18) 2.297761744s ago: executing program 0 (id=4484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000009000040020000002400028014000180080001007f0000010800020453d4c3000c0002801500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) pipe(&(0x7f0000001fc0)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000002100)={&(0x7f0000002000)=""/250, 0x208000, 0x1000, 0x3, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000001bc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x2, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) sendmsg$inet6(r0, &(0x7f0000001f00)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x40}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000040)="e71763dd0b19fa4cb64182c7c01d101815e7d123f0aaa194b5d25084ed36979a596e29165b26a31254485cdc694e4076c959b26c0852bffebbdb4186e11983ff886b704315d3f0b8871e7e45416e7c4e3ad459387c7629ed60", 0x59}, {&(0x7f0000000780)="5f9852911b153081e2f2718972eef9e817a921d7a229b0720c65006e326311608b94a0f30ce1794d9011c9c01edd7255be9b877c8786cafcf639ae6065008ae0c830915d154349a41889b11f", 0x4c}, {&(0x7f0000000800)="859692eb005e067c24164965f5f596aaa7a6b66005f7a01538a7e337436a35700ce4ac3463e835203a200a61875f7f6de988383aa98e55dd776b88a3267412fecea5c787a769c7543a7fda8a924a06a4a0db982155a672a19b195ad6cbd9bd2fed479f5d9640fb13", 0x68}, {&(0x7f0000000880)="3e4c9a487af16509945a80cad79f0f4731c80c41363c79d229", 0x19}, {&(0x7f00000008c0)="bd01c0a7355cf8793969e6f4feb28ac6a30663ff0d9f019cac7c4b54245c923241cd8c95027b05275122359d8306e801c9af77ae9c7208a260ea761d5d5a67023c35ac30d2e5bffebfc6d7f8a72cac1eaec764c669c34be53bfbb6c6df85431f269056e3dcb7b6a6d3d260bffc411c2bfbd2a64e627021d85b283e26466a0153641200050d0f0f2a4a4e34", 0x8b}, {&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="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", 0x1000}], 0x7, &(0x7f0000001e00)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2b, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x10, {0x2, 0x2, 0x34, 0x7, [0x6bcc]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7f, 0x0, [0x1, 0x6, 0x2, 0x587, 0xfffffffffffffff7, 0x3, 0x9]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x5e, 0x4, 0x2, 0xae, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}], 0xd8}, 0x3e7505658689f0b0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001f40), 0x10000, 0x0) ioctl$PPPIOCGIDLE32(r7, 0x8008743f, &(0x7f0000001f80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) 1.968929218s ago: executing program 3 (id=4485): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000040)={0x7, 0x3, 0x2, 0x18f4}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.686892952s ago: executing program 3 (id=4487): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r0, &(0x7f00000002c0)=@l2tp6, &(0x7f0000000340)=0x80) r1 = epoll_create1(0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) (async) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000001c0)={@private=0xa010100, @loopback}, 0x8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb1a3c2c8b822dbbbbbbbbbbbb88a848088100300088cac82bfb8f5713876856022cd264abbe4b98"], 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000200)={0x2, @long}, 0x8) (async) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) (async) listen(r8, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r9, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99df", 0x2}], 0x1}}], 0x1, 0x40) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x404) 1.686446306s ago: executing program 0 (id=4488): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.588465583s ago: executing program 1 (id=4489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcb}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x78}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x2, 0x0, &(0x7f00000003c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0xff6e}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_buf(r7, 0x107, 0x5, &(0x7f0000000480)="02a515362b29a0b6fce7a0ca09d058a563b4a830b40715532fa9a6b8d403b78a356ad32e05929906ccf22a38a9c0463ff4b27864db49208fb0faf35891ed47deb4160c", 0x43) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.513105068s ago: executing program 4 (id=4490): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xef, 0xa30, 0x63, @remote, @empty, 0x80, 0x7800, 0x4, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MAP={0x24, 0xe, {0x7, 0x9, 0x2, 0x6d4, 0x0, 0x7f}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x4a}, 0x1, 0x0, 0x0, 0x4004000}, 0x440088c4) 1.417263476s ago: executing program 0 (id=4491): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000070000000020002095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f00000000c0)=0x2dd, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) 1.416707019s ago: executing program 3 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ec41a6"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0xb, {0x2, 0x8, 0xf, 0x2, 0x6}}) 1.314472129s ago: executing program 4 (id=4493): socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.193169299s ago: executing program 3 (id=4494): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000000000000a004e2100000004fc000000000000000000000000000001060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e24000000020000000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000082001000000000000000000000000000203000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000a004e21000000080000000000000000000000000000000100008002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000081fc0200"/784], 0x310) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="02000000400000000100eeff00000100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000e001000000020000c0020100005ce6ac30d6595166"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x80c4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000000000000040000000400000002000000", @ANYRES32=r7, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8}, &(0x7f0000000d00), &(0x7f00000006c0)=r5}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fff, 0xed, 0x6, 0x1, 0x8, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a01040b000000000000000a0000040900010073797a310000000028000480240001800b0001007470726f787900001400028008000340d96ae5d1080001400000000a0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r13, @ANYBLOB="28052bbd7000ffdbdf255500000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008884) 726.337121ms ago: executing program 4 (id=4495): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0xdc, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8}}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x79, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1"}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYRES8=r3], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0604010082"], 0x9) (async) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fbdbdf250200000014000c002001000000000000000000000000000208000100", @ANYRES32=r2, @ANYBLOB="060006000000000008000700", @ANYRES32=r3, @ANYBLOB="6d30e9b9ae2e3ed76166e43f947c660ca81495322c78cba4230ec5147e68bf1fef951f3cccefeeafe813ed57380ee11f02f96f3a66ee5c8cbf26a28f8c06000000000000000be83ec7d8c4e0ec01a2000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 664.417182ms ago: executing program 4 (id=4496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10000, 0x2, 0xad, 0x24c, 0x4, 0x1, 0x5}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0xe}}, [0x3, 0xc, 0x6, 0x1ff, 0x5, 0xffffffff, 0xc, 0x0, 0xfffffffffffffeff, 0x4, 0x6, 0x4, 0x100000000, 0x7fffffffffffffff, 0x1]}, &(0x7f0000000200)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0xe}}, [0x3, 0xc, 0x6, 0x1ff, 0x5, 0xffffffff, 0xc, 0x0, 0xfffffffffffffeff, 0x4, 0x6, 0x4, 0x100000000, 0x7fffffffffffffff, 0x1]}, &(0x7f0000000200)=0x100) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'pim6reg\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x2, 0x80}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'pim6reg\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x2, 0x80}}) socket$nl_crypto(0x10, 0x3, 0x15) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000003c0)={&(0x7f00000002c0)=""/211, 0xd3, 0x6, 0xfffffff9}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1, 0x81}, &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1, 0x81}, &(0x7f0000000440)=0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000480)) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000c00)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x80, 0x9, 0x3}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)="44efa1a068426efd576f78dbba1e34a2aca1f8e9d35c71e6d446cf7f01", 0x1d}, {&(0x7f0000000580)="d95cc256a2ed27869a411340a05c841a9c6d84e609fa36d6224697480c96c84956d337312e81686dfc31495b24fe62777a6be8ec7196495c80d9c6ed57286e1d1ba9289fc22e57607fea9081e67f9832a3e9bd2b2c1c7d97e34a9d393a0ae2821d4dd1ce9db4c140d57aa59c5d16585e7c30760f0300d274bab595f3ba2ebaa92c1c712fb2f0ccfb35fc9bcc9cf2c6060c5df4", 0x93}, {&(0x7f0000000640)="79d4a0fa5f16040272727055e254a2487a63a00d67882d560c64b03af50693632afab2be29a515b5af10e63e6f9c4390f4f0726e97daac047ff4e882b53e8ff707ee3cf3482d47fe8c84228c0a1191226d897dcd519f3bbe2f34d2960d004af860ca84e835a63c9ae479e25284b774dbd65ee4628011f1328831720096704d", 0x7f}, {&(0x7f00000006c0)="f5d5c1c41b68925a318cf05f46813df03d55fc15752d1760d147e695dc866d1b30fe9d937704a62ade6a6b84eee4c82194dd777d30c00af539cd08d74d387485f9818466b1b394b48b7d8fd1bba75d7e62ad46b52636dd33d1f72ae822eb1ec53bcb595e9f50788110909d270b73eb9fe35acf16f47a847af3c1cfe63df69bbe695b995944913627a6ce13b2a395835f066a8731dbf4bc06d2af451cc75ea47f73177915d923a8a267b199716ba12d407a47204aafaf2f8322f6d90b8a4bdad5b6074d70352aa13650947eb0f5ca0dc06749b548423a02f3387c695da7bd3bd363b1742960b16beece209ef19ca31b68cd39f68bb5a58d", 0xf7}, {&(0x7f00000007c0)="55c86f187f22d13997f72e44601ce7e5439458ca2bd01ba1e3d6d6c7e9f51b542db0e1f7766a621ca970e81f4a5b4f73e84ed84b84c48aa9da57b1aca653cbd6543ee060cb9d67645d7922c154e352fc24abc575be0ec70dc225c235ce30220f6399cbf27e80c4f9f5524cef7f34070929596a8a581af685267e5d01c7f3edf87d0fbd55d06c78a947273e6397a0241c60911494571aa9fadd80d9ddc4d91163fa40ce202c67aaa4a3c23cbd77da54a37de2d0899f79f918b3d62b318124d3ddc19d723e15e7", 0xc6}], 0x5, &(0x7f0000000940)=[{0xe8, 0x110, 0x1e39, "52d3e963fb31ae9445feed306e9eadbac75fb94ab4ad73481ad10ca52220dbe0ca39a17f6d161c28c3273154c79ece27f6de0b4065b5744f6d6398586308f191691443fbae38499e9d23d28c5fb968c364ce2bd5634b0b812665bed24f81f338b3bbe52f17531cf15d733247381508acc04f16f2952589a6508ec81ab7bfb0ffe8754facaaf3c6e4e86d719ae56cb4e388d2dd8e549000bc126eaa1b08e2bbd6c10e6a7f6450517bed9f06e0d7a6891894189e82032ba65e597c6bf386766549f02678e74959d06e2df3aec9891a509b2e"}, {0xc8, 0x29, 0x1, "e82c9f8e14f05acaf81af149d17e8c9fcdee4eda4553775326a4b391b57005cc115dddf842c4262f54fde54c1e6f7a63829716b06c6bac187b9923d77da8f7a283b3cea51742f83bae07bb7f228d36986a4aa194f359e013c4280f7dcdc13593d28107181547408eba70e8d86b2878eee33338bff9ded9496d9de589dd1c4d199c992021b178ac1165d8568487eb830d7b0d22e4a4acdc1c969a05223d904f0fd663a1e242a24b05bb80a6234ffb19fee199d991e996"}, {0xd8, 0x112, 0x8, "3bc6b58855c75fa9a4774aac54eac350a1917344d77f32f68acabfa0c4643b7751649c3032f2ecca4a2857f77db2975dccbf23dec9a76948393b2dabcd92d8b8238797e15e5e5423c5039db45fba3a00a866ac64880a43a6ba774ef852fad8f72a2608455f6cd1d454ee98a189327fc222e1c955a189ec6593ec9d09687e008ff7d9b2bfab49ec85f63f73343b77e8c6c3b01a7849bb0435f925e10f23a070062109c49baca7300c45464de25b8e5fa7d1e869fc285022b8f813cc886d91b474452b430a12"}], 0x288}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000c40)=0x8, 0x4) r8 = socket(0x2a, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000c80)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x0, @empty, 0x100}], 0x68) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000d00)={0xffffffffffffffff, 0xe, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d40)={0x0, 0xa, 0x9, 0x3, r4}, &(0x7f0000000d80)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d40)={0x0, 0xa, 0x9, 0x3, r4}, &(0x7f0000000d80)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000dc0)=@sack_info={r10, 0x2, 0x648e}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000dc0)=@sack_info={r10, 0x2, 0x648e}, 0xc) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000e00)={0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'fo\x00', 0x2, 0x7, 0x43}, 0x2c) sendto$inet(r8, &(0x7f0000000e40)="1285992a84ef1bf89425de8c471118af69fc534a601e09a177a69aaa8448d346477837553382c5e897a24516e0f19835570c62740ab856c724a3c1072957d5b0fbfb120025414c486ce65149afeb3c86c45f069301f861095d4bee1c58b8a6e38923ba07ae3811003f3953189143c9d9e05ac20257448a1e06e67dd0f902578cff8ecaaa8d2e2169521d6b01e114c542547c307711a891646a326b770fbaaf113c0fdc988a9e0e145152b0f388ac422f9f24913ded841071d6379fc6c639ac4a40739ee3c1ad66a76a64fdb64475bff84f4549996134d2237d51ce058235adb4136353e7c769f877ec10be1b87f96345dc", 0xf1, 0x8010, &(0x7f0000000f40)={0x2, 0x4e22, @remote}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000f80)={r2, 0x8, 0xf1, "d27ee6a2eaa5bd5110108be7c3b0230f8c4370d2e920fef12390fa6957011363b07ff6c08dc4b707a5323aa8b240e68a03f01fe1181b21d09ac8f13654fb24b58cd46b47d659165692813555791f7f7d331a253468cd05b535fde6d0dd8fd511ed21be296b28c88d67b89adc757ba8c5c5a41ab98ab4f2631da4a2c42e2dbf1d244378f5a28e3e4eb0c5046911ed2cc5a181b2e18e2c5eb9e724a7f528eb04bbe9657b625922ec5daf70554a3c68c8b4af1f763b141f90bc7f13d0cfda3f9468d2466c1698e24a4b38816300205e1e2396c390fe3a0c0993d3843865101372226eda7ea37c7b38ce9e1d663174931e654e"}, 0xf9) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x2, &(0x7f0000001080)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}], &(0x7f00000010c0)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, r9, 0x8, &(0x7f0000001100)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001140)=[{0x3, 0x3, 0x6, 0xa}, {0x2, 0x3, 0x6, 0x9}, {0x5, 0x5, 0xe, 0x4}, {0x4, 0x4, 0xe, 0x3}, {0x0, 0x3, 0xf, 0xb}, {0x4, 0x5, 0x1, 0xa}], 0x10, 0x8}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x2, &(0x7f0000001080)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xf}], &(0x7f00000010c0)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, r9, 0x8, &(0x7f0000001100)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001140)=[{0x3, 0x3, 0x6, 0xa}, {0x2, 0x3, 0x6, 0x9}, {0x5, 0x5, 0xe, 0x4}, {0x4, 0x4, 0xe, 0x3}, {0x0, 0x3, 0xf, 0xb}, {0x4, 0x5, 0x1, 0xa}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001380)={@ifindex, 0x36, 0x0, 0x23d, &(0x7f0000001280)=[0x0], 0x1, 0x0, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = openat$cgroup(r9, &(0x7f0000001400)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@cgroup=r13, r9, 0x36, 0x1, r11, @void, @value=r9, @void, @void, r12}, 0x20) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000001440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xe, 0x6, 0x9, 0xdd, 0xa]}, &(0x7f00000014c0)=0x78) ioctl$FIONCLEX(r13, 0x5450) r14 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r0, &(0x7f0000001500)={0x2}) (async) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r0, &(0x7f0000001500)={0x2}) 608.660118ms ago: executing program 1 (id=4497): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async, rerun: 32) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) sendmsg$xdp(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x844) 313.96786ms ago: executing program 1 (id=4498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) socket$inet6(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r1, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x20004040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000000d7000000000000000000000000009b570af9b6d757c3cbaaeab16bf21dc27f3074a87d0f4a9635c9843e361d4262dc1c2fe4e66dcf6124cbe4c22a942a0dcfac792b8dab554afcab9d874bacecd77387ef2741593e876ffc42910387f3add8f0dd7fea485f07da76d213a3b17bc3fbd96d93488f4dd10377a67a2383cf7be218b6f474b3d0d8306c29daa3", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) r11 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffff3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000580)=0x28) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) sendmsg$NFT_BATCH(r0, 0x0, 0x802) 273.895024ms ago: executing program 3 (id=4499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000001c0012800b0001006d616373656300000c000280050009000000000008000500", @ANYRES32=r1, @ANYBLOB="c7db971173b6e054a65879324f337714331b3a4ad365ac6492622e787ee0b284f45fed1760ef2dab85eb77657a6f6d97ca00e11317ada71facc11f0d451221f5936f6ec2ec0b8f385ecabbcb5bd0c5fd552ea67733f5b997f39e58b98e421957"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000001c0012800b0001006d616373656300000c000280050009000000000008000500", @ANYRES32=r1, @ANYBLOB="c7db971173b6e054a65879324f337714331b3a4ad365ac6492622e787ee0b284f45fed1760ef2dab85eb77657a6f6d97ca00e11317ada71facc11f0d451221f5936f6ec2ec0b8f385ecabbcb5bd0c5fd552ea67733f5b997f39e58b98e421957"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)='7\x00\x00\b', 0x4}], 0x10000000000000d7) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)='7\x00\x00\b', 0x4}], 0x10000000000000d7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x12, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x12, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10) 165.748172ms ago: executing program 4 (id=4500): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000937fed)=""/2, &(0x7f0000000080)=0x2) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000180)='syz1\x00', 0x5) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendto$inet6(r0, &(0x7f0000000000)="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", 0x166, 0x20000000, 0x0, 0x0) 0s ago: executing program 4 (id=4501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0x8}, {0x10, 0xa}, {0xd, 0xfff0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf700}, {0x4, 0x5, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): msg='' [ 415.165493][ T30] audit: type=1107 audit(1780925459.357:14): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.177752][ T30] audit: type=1107 audit(1780925459.357:15): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.221876][ T30] audit: type=1107 audit(1780925459.357:16): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.234076][ T30] audit: type=1107 audit(1780925459.357:17): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.247260][T18229] bond3: entered allmulticast mode [ 415.257913][T18230] macvlan2: entered promiscuous mode [ 415.263234][T18230] macvlan2: entered allmulticast mode [ 415.269481][T18230] bond3: entered promiscuous mode [ 415.274825][ T30] audit: type=1107 audit(1780925459.357:18): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.279241][T18230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 415.287006][ T30] audit: type=1107 audit(1780925459.357:19): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.340890][ T30] audit: type=1107 audit(1780925459.357:20): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 415.427801][T18230] bond3: left promiscuous mode [ 415.566997][T18233] tipc: Started in network mode [ 415.582270][T18233] tipc: Node identity 1ec64cd37b37, cluster identity 4711 [ 415.591304][T18233] tipc: Enabled bearer , priority 0 [ 415.600676][T18236] syzkaller0: entered promiscuous mode [ 415.606160][T18236] syzkaller0: entered allmulticast mode [ 415.618558][T18232] tipc: Resetting bearer [ 415.658694][T18232] tipc: Disabling bearer [ 415.674283][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.682700][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.709679][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.717999][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.734353][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 415.796231][T18261] vlan3: entered allmulticast mode [ 415.801424][T18261] veth0_to_bond: entered allmulticast mode [ 416.031938][T18269] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3156'. [ 416.045097][ T8432] IPVS: starting estimator thread 0... [ 416.416564][T18270] IPVS: using max 32 ests per chain, 76800 per kthread [ 416.607448][T17694] IPVS: stop unused estimator thread 0... [ 416.753458][T18298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3164'. [ 416.771331][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.784641][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.792626][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.811124][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.837886][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.120414][T18307] syzkaller0: entered promiscuous mode [ 417.136125][T18307] syzkaller0: entered allmulticast mode [ 417.276923][T18311] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 417.301285][T18307] tipc: Enabled bearer , priority 0 [ 417.330233][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 417.339364][T18311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.351052][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 417.365896][T18306] tipc: Resetting bearer [ 417.423293][T18306] tipc: Disabling bearer [ 417.473687][T18320] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 417.473825][T18311] hsr_slave_1 (unregistering): left promiscuous mode [ 417.481810][T18320] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 417.928363][T18328] block nbd1: server does not support multiple connections per device. [ 417.951084][T18328] block nbd1: shutting down sockets [ 418.007562][T18337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.038558][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.048951][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.058922][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.067788][T18337] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.451272][T18358] syzkaller0: entered promiscuous mode [ 418.456782][T18358] syzkaller0: entered allmulticast mode [ 418.585810][T18358] tipc: Enabled bearer , priority 0 [ 418.594216][T18357] tipc: Resetting bearer [ 418.636415][T18366] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 418.656964][T18357] tipc: Disabling bearer [ 418.697554][T18293] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.716816][T18293] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.736319][T18293] bridge_slave_0: entered allmulticast mode [ 418.762349][T18293] bridge_slave_0: entered promiscuous mode [ 418.789330][T18293] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.799258][T18293] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.806507][T18293] bridge_slave_1: entered allmulticast mode [ 418.814706][T18293] bridge_slave_1: entered promiscuous mode [ 418.859083][T18293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.873311][T18293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.912152][T18293] team0: Port device team_slave_0 added [ 418.921366][T18293] team0: Port device team_slave_1 added [ 418.932594][ T5640] Bluetooth: hci1: command tx timeout [ 418.970689][T18293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.977969][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.004537][T18293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.044860][T18293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.057090][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.084599][T18293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.206752][T18293] hsr_slave_0: entered promiscuous mode [ 419.216061][T18293] hsr_slave_1: entered promiscuous mode [ 419.278710][T18293] debugfs: 'hsr0' already exists in 'hsr' [ 419.284463][T18293] Cannot create hsr debugfs directory [ 420.160640][T18407] syzkaller0: entered promiscuous mode [ 420.166212][T18407] syzkaller0: entered allmulticast mode [ 420.189594][T18407] tipc: Started in network mode [ 420.194561][T18407] tipc: Node identity 36c4099246e4, cluster identity 4711 [ 420.203756][T18407] tipc: Enabled bearer , priority 0 [ 420.265915][T18406] tipc: Resetting bearer [ 420.302347][T18406] tipc: Disabling bearer [ 420.539193][T18417] batadv_slave_0: Caught tx_queue_len zero misconfig [ 420.626455][T18419] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 420.635676][T18420] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 420.674278][T18419] bond1: entered promiscuous mode [ 420.679637][T18419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.704878][T18419] vlan2: entered allmulticast mode [ 420.710095][T18419] bond1: entered allmulticast mode [ 420.723833][T18419] bond1: (slave bridge2): making interface the new active one [ 420.731302][T18419] bridge2: entered promiscuous mode [ 420.736581][T18419] bridge2: entered allmulticast mode [ 420.742942][T18419] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 420.763994][T18420] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 420.892386][ T5640] block nbd1: Receive control failed (result -32) [ 420.902645][T18293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.924229][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.936091][T18293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.973353][T18433] xt_connbytes: Forcing CT accounting to be enabled [ 421.003061][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.008163][ T5640] Bluetooth: hci1: command tx timeout [ 421.025173][T18293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.089599][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.097386][T18293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.121135][T18293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.158114][T18436] __nla_validate_parse: 7 callbacks suppressed [ 421.158127][T18436] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3203'. [ 421.380571][T18293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.423288][T18293] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.456490][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.463682][T17700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.504087][T18453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.533440][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.540686][T17700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.576284][T18456] bridge4: entered allmulticast mode [ 421.729234][T18446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3201'. [ 421.747882][T18446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3201'. [ 422.199183][T18453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.265147][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3212'. [ 422.395645][T18293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.461549][T18453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.737881][T18293] veth0_vlan: entered promiscuous mode [ 422.749727][T18293] veth1_vlan: entered promiscuous mode [ 422.815693][T18293] veth0_macvtap: entered promiscuous mode [ 422.868190][T18293] veth1_macvtap: entered promiscuous mode [ 422.895731][T18293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.910868][T18293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.923847][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.933286][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.944106][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.955787][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.057026][T18453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.092150][ T5640] Bluetooth: hci1: command tx timeout [ 423.268437][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.276359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.334174][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.345721][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.607118][ T1174] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.645009][ T1174] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.677953][ T1174] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.699672][ T1174] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.833040][T18518] bridge_slave_0: left allmulticast mode [ 423.871132][T18518] bridge_slave_0: left promiscuous mode [ 423.876896][T18518] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.002992][T18525] netlink: 'syz.4.3218': attribute type 10 has an invalid length. [ 424.025403][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.038005][T18518] bridge_slave_1: left allmulticast mode [ 424.043686][T18518] bridge_slave_1: left promiscuous mode [ 424.050429][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.081558][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.091715][T18518] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.107721][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.118072][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.118904][T18518] bond0: (slave bond_slave_0): Releasing backup interface [ 424.149319][T18518] bond0: (slave bond_slave_1): Releasing backup interface [ 424.191583][T18518] team0: Port device team_slave_0 removed [ 424.201961][T18518] team0: Port device team_slave_1 removed [ 424.208479][T18518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.215875][T18518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.230492][T18518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.238136][T18518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.260173][T18518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.310183][T18521] netlink: 'syz.2.3219': attribute type 12 has an invalid length. [ 424.318193][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3219'. [ 424.686364][ T1181] bond8 (unregistering): (slave geneve3): Releasing active interface [ 424.768745][T18540] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 424.841659][ T1181] bond0 (unregistering): Released all slaves [ 424.855555][ T1181] bond1 (unregistering): Released all slaves [ 424.872891][ T1181] bond2 (unregistering): Released all slaves [ 424.890149][ T1181] bond3 (unregistering): Released all slaves [ 424.906703][ T1181] bond4 (unregistering): Released all slaves [ 424.922750][ T1181] bond5 (unregistering): Released all slaves [ 424.963089][ T1181] bond6 (unregistering): Released all slaves [ 424.981642][ T1181] bond7 (unregistering): Released all slaves [ 425.002639][ T1181] bond8 (unregistering): Released all slaves [ 425.026995][ T1181] bond9 (unregistering): Released all slaves [ 425.080802][T18536] bond2: option min_links: invalid value (18446744073709551612) [ 425.089813][T18536] bond2: option min_links: allowed values 0 - 2147483647 [ 425.110102][T18536] bond2 (unregistering): Released all slaves [ 425.150803][T18538] syzkaller1: entered promiscuous mode [ 425.156374][T18538] syzkaller1: entered allmulticast mode [ 425.176907][ T5640] Bluetooth: hci1: command tx timeout [ 425.556687][ T1181] tipc: Disabling bearer [ 425.591113][ T1181] tipc: Disabling bearer [ 425.607972][ T1181] tipc: Left network mode [ 425.978888][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 425.999983][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 426.029297][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 426.053608][T18524] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.060898][T18524] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.068267][T18524] bridge_slave_0: entered allmulticast mode [ 426.075318][T18524] bridge_slave_0: entered promiscuous mode [ 426.088634][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 426.088649][T18524] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.104928][T18524] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.112535][T18524] bridge_slave_1: entered allmulticast mode [ 426.120582][T18524] bridge_slave_1: entered promiscuous mode [ 426.130888][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 426.144877][ T145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.153938][ T145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.171307][ T145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.180042][ T145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.190984][T18524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.202359][T18524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.229715][ T5640] Bluetooth: hci4: command tx timeout [ 426.256470][T18524] team0: Port device team_slave_0 added [ 426.264703][T18524] team0: Port device team_slave_1 added [ 426.323731][T18524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.331898][T18524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.358061][T18524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.377542][T18524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.389916][T18524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.415842][T18524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.494396][T18578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.550839][T18580] __nla_validate_parse: 1 callbacks suppressed [ 426.550854][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 426.554845][T18524] hsr_slave_0: entered promiscuous mode [ 426.598555][T18524] hsr_slave_1: entered promiscuous mode [ 426.613992][T18524] debugfs: 'hsr0' already exists in 'hsr' [ 426.620082][T18524] Cannot create hsr debugfs directory [ 426.641549][T18583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.728439][T18578] syzkaller0: entered promiscuous mode [ 426.733909][T18578] syzkaller0: entered allmulticast mode [ 427.599558][T18598] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3235'. [ 427.804258][T18603] Cannot find del_set index 0 as target [ 428.288331][ T5640] Bluetooth: hci4: command tx timeout [ 428.712294][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 428.806977][T18608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.841498][T18609] bond6: (slave batadv1): Opening slave failed [ 429.141442][T18614] syzkaller0: entered promiscuous mode [ 429.147047][T18614] syzkaller0: entered allmulticast mode [ 429.165684][T18614] tipc: Enabled bearer , priority 0 [ 429.174474][T18613] tipc: Resetting bearer [ 429.225315][T18613] tipc: Disabling bearer [ 429.555157][T18623] netlink: 'syz.2.3244': attribute type 6 has an invalid length. [ 430.199317][T18524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.234499][T18524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.257154][T18524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.272371][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3250'. [ 430.293995][T18524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.324295][T18524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.353418][T18649] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 430.370135][T18524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.372930][ T5640] Bluetooth: hci4: command tx timeout [ 430.399752][T18524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.441451][T18654] Bluetooth: MGMT ver 1.23 [ 430.463022][T18524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.561641][T18657] syzkaller0: entered promiscuous mode [ 430.571699][T18657] syzkaller0: entered allmulticast mode [ 430.667386][T18657] tipc: Enabled bearer , priority 0 [ 430.706428][ T1181] IPVS: stop unused estimator thread 0... [ 430.733989][T18655] tipc: Resetting bearer [ 430.763586][T18655] tipc: Disabling bearer [ 430.780295][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 430.922345][T18524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.991915][T18524] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.014418][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.021598][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.074890][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.082083][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.982537][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 432.056073][T18708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3266'. [ 432.143007][T18708] syzkaller0: entered promiscuous mode [ 432.155536][T18708] syzkaller0: entered allmulticast mode [ 432.262113][T18717] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 432.283472][T18717] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.448118][ T5640] Bluetooth: hci4: command tx timeout [ 432.472849][T18524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.569987][T18524] veth0_vlan: entered promiscuous mode [ 432.723153][T18524] veth1_vlan: entered promiscuous mode [ 432.775216][T18734] erspan1: entered allmulticast mode [ 432.806299][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.815879][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.831811][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.866179][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.894812][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.911199][T18737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 432.962022][T18524] veth0_macvtap: entered promiscuous mode [ 432.984601][T18524] veth1_macvtap: entered promiscuous mode [ 433.020518][T18524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.056537][T18524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.084151][T17694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.111477][T17694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.126741][T17694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.156631][T17694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.372006][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.426601][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.531961][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.554020][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.869854][T18770] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 433.890601][T18764] xt_hashlimit: size too large, truncated to 1048576 [ 433.902566][T18770] netlink: 'syz.4.3282': attribute type 2 has an invalid length. [ 433.932051][T18770] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 433.986614][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3220'. [ 434.020043][T18773] xt_hashlimit: size too large, truncated to 1048576 [ 434.025053][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 434.035882][T18773] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 434.110805][T18784] macsec1: entered promiscuous mode [ 434.116573][T18784] bridge0: entered promiscuous mode [ 434.689461][T18798] syzkaller1: entered promiscuous mode [ 434.704272][T18798] syzkaller1: entered allmulticast mode [ 434.737143][T18813] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 434.803670][T18813] team0 (unregistering): Port device team_slave_0 removed [ 434.838821][T18813] team0 (unregistering): Port device team_slave_1 removed [ 435.044222][T18826] syzkaller0: entered promiscuous mode [ 435.063794][T18826] syzkaller0: entered allmulticast mode [ 435.233418][T18839] netlink: 'syz.3.3298': attribute type 3 has an invalid length. [ 435.260790][T18839] netlink: 'syz.3.3298': attribute type 2 has an invalid length. [ 435.269363][T18839] netlink: 'syz.3.3298': attribute type 2 has an invalid length. [ 435.286458][T18844] netlink: 'syz.4.3299': attribute type 6 has an invalid length. [ 435.611908][T18862] syzkaller0: entered promiscuous mode [ 435.625843][T18862] syzkaller0: entered allmulticast mode [ 435.682778][T18862] tipc: Started in network mode [ 435.688299][T18862] tipc: Node identity deed1a5bb22f, cluster identity 4711 [ 435.695621][T18862] tipc: Enabled bearer , priority 10 [ 435.706630][T18860] tipc: Resetting bearer [ 435.733199][T18860] tipc: Disabling bearer [ 435.966345][T18875] vlan2: entered promiscuous mode [ 435.982558][T18875] netlink: 'syz.4.3311': attribute type 4 has an invalid length. [ 436.026866][T18877] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 436.962647][T18894] netlink: 'syz.2.3318': attribute type 7 has an invalid length. [ 436.972650][T18894] netlink: 'syz.2.3318': attribute type 8 has an invalid length. [ 436.998555][T18894] tunl0: Caught tx_queue_len zero misconfig [ 437.011982][T18896] syzkaller0: entered promiscuous mode [ 437.017692][T18896] syzkaller0: entered allmulticast mode [ 437.028378][T18898] syzkaller0: entered promiscuous mode [ 437.035323][T18898] syzkaller0: entered allmulticast mode [ 437.087597][T18896] tipc: Enabled bearer , priority 10 [ 437.100503][T18895] tipc: Resetting bearer [ 437.139235][T18895] tipc: Disabling bearer [ 437.338155][T18910] tun0: tun_chr_ioctl cmd 1074025681 [ 437.487193][T18909] netlink: 'syz.2.3321': attribute type 4 has an invalid length. [ 437.526201][T18909] __nla_validate_parse: 13 callbacks suppressed [ 437.526217][T18909] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3321'. [ 437.646404][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 437.853810][T18911] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 437.869155][T18911] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3323'. [ 437.887766][T18911] netlink: 638 bytes leftover after parsing attributes in process `syz.3.3323'. [ 437.907659][T18911] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3323'. [ 438.760855][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'. [ 439.014373][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 439.795255][T19009] FAULT_INJECTION: forcing a failure. [ 439.795255][T19009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.818150][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.1.3349 Not tainted syzkaller #0 PREEMPT(full) [ 439.818175][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 439.818190][T19009] Call Trace: [ 439.818201][T19009] [ 439.818208][T19009] dump_stack_lvl+0xe8/0x150 [ 439.818327][T19009] should_fail_ex+0x412/0x560 [ 439.818415][T19009] _copy_from_user+0x2d/0xb0 [ 439.818480][T19009] ___sys_recvmsg+0x175/0x590 [ 439.818564][T19009] ? __pfx____sys_recvmsg+0x10/0x10 [ 439.818591][T19009] ? __fget_files+0x2a/0x420 [ 439.818664][T19009] do_recvmmsg+0x334/0x800 [ 439.818695][T19009] ? __pfx_do_recvmmsg+0x10/0x10 [ 439.818729][T19009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.818828][T19009] __x64_sys_recvmmsg+0x198/0x250 [ 439.818856][T19009] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 439.818887][T19009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.818919][T19009] do_syscall_64+0x174/0x580 [ 439.818956][T19009] ? trace_irq_disable+0x3b/0x140 [ 439.819000][T19009] ? clear_bhb_loop+0x40/0x90 [ 439.819023][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.819041][T19009] RIP: 0033:0x7f2c0c19ce59 [ 439.819063][T19009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.819079][T19009] RSP: 002b:00007f2c0cf76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.819099][T19009] RAX: ffffffffffffffda RBX: 00007f2c0c415fa0 RCX: 00007f2c0c19ce59 [ 439.819112][T19009] RDX: 0000000000000002 RSI: 0000200000003540 RDI: 0000000000000004 [ 439.819124][T19009] RBP: 00007f2c0cf76090 R08: 0000000000000000 R09: 0000000000000000 [ 439.819135][T19009] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 439.819146][T19009] R13: 00007f2c0c416038 R14: 00007f2c0c415fa0 R15: 00007ffc02077fe8 [ 439.819177][T19009] [ 439.819859][T19010] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3348'. [ 440.075410][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 440.075425][ T30] audit: type=1804 audit(1780925484.317:44): pid=19013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3350" name="/newroot/72/cgroup.controllers" dev="tmpfs" ino=387 res=1 errno=0 [ 440.079863][T19015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3350'. [ 440.108878][ T30] audit: type=1800 audit(1780925484.317:45): pid=19013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3350" name="cgroup.controllers" dev="tmpfs" ino=387 res=0 errno=0 [ 440.128130][T19010] validate_nla: 3 callbacks suppressed [ 440.128170][T19010] netlink: 'syz.0.3348': attribute type 9 has an invalid length. [ 440.177269][T19010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3348'. [ 440.608953][T19041] openvswitch: netlink: VLAN attribute unexpected. [ 440.633901][T19041] netlink: 'syz.4.3356': attribute type 7 has an invalid length. [ 440.653339][T19041] netlink: 'syz.4.3356': attribute type 8 has an invalid length. [ 440.855595][T19054] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.870537][T19055] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 441.032021][T19064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.049997][T19064] ipvlan2: entered allmulticast mode [ 441.055430][T19064] bond1: entered allmulticast mode [ 441.066772][T19064] bond1: (slave ipip0): refused to change device type [ 441.146940][T19067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.224557][T19069] sctp: [Deprecated]: syz.0.3365 (pid 19069) Use of int in max_burst socket option. [ 441.224557][T19069] Use struct sctp_assoc_value instead [ 441.241621][T19069] dummy0: entered allmulticast mode [ 441.397407][T19079] netlink: 'syz.1.3367': attribute type 4 has an invalid length. [ 441.455111][T19082] IPv6: addrconf: prefix option has invalid lifetime [ 442.131075][T17700] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 442.551849][T19129] __nla_validate_parse: 14 callbacks suppressed [ 442.551867][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 442.667283][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'. [ 443.266093][T19152] xt_policy: neither incoming nor outgoing policy selected [ 443.283297][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3391'. [ 443.304809][T19158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.329564][ T1181] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 443.596073][T19169] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 443.919058][T19182] netlink: 'syz.3.3400': attribute type 1 has an invalid length. [ 444.146271][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 444.179941][T19193] vlan2: entered allmulticast mode [ 444.185196][T19193] bridge2: entered allmulticast mode [ 444.197018][T19193] bridge2: port 1(erspan0) entered blocking state [ 444.204012][T19193] bridge2: port 1(erspan0) entered disabled state [ 444.226948][T19193] erspan0: entered allmulticast mode [ 444.244859][T19193] erspan0: entered promiscuous mode [ 444.257565][T19193] bridge2: port 1(erspan0) entered blocking state [ 444.264203][T19193] bridge2: port 1(erspan0) entered forwarding state [ 444.494934][T19197] syzkaller0: entered promiscuous mode [ 444.508440][T19197] syzkaller0: entered allmulticast mode [ 444.651332][T19201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3408'. [ 444.783309][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 444.803465][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'. [ 444.852984][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 444.864777][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3411'. [ 445.319007][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3418'. [ 445.349926][T19235] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 445.910531][T19271] ip6tnl0: Caught tx_queue_len zero misconfig [ 446.283864][T19286] syzkaller0: entered promiscuous mode [ 446.303730][T19288] netlink: 'syz.2.3432': attribute type 58 has an invalid length. [ 446.317702][T19286] syzkaller0: entered allmulticast mode [ 446.363405][T19288] bridge2: port 1(erspan0) entered disabled state [ 446.385131][T19286] tipc: Started in network mode [ 446.394461][T19286] tipc: Node identity 7af7d052b55f, cluster identity 4711 [ 446.416094][T19286] tipc: Enabled bearer , priority 10 [ 446.442922][T19285] tipc: Resetting bearer [ 446.512340][T19285] tipc: Disabling bearer [ 446.962049][T19327] netlink: 'syz.1.3445': attribute type 1 has an invalid length. [ 447.004848][T19328] gtp0: entered promiscuous mode [ 447.026625][T19329] netlink: 'syz.3.3444': attribute type 10 has an invalid length. [ 447.030962][T19328] gtp0: entered allmulticast mode [ 447.126172][T19329] team0: Port device vlan0 added [ 447.225051][T19333] syzkaller0: entered promiscuous mode [ 447.257910][T19333] syzkaller0: entered allmulticast mode [ 447.642698][T19363] __nla_validate_parse: 37 callbacks suppressed [ 447.642717][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 447.660911][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 447.813739][ T5640] block nbd2: Receive control failed (result -32) [ 448.147964][T19386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3456'. [ 448.189242][T19400] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3460'. [ 448.232316][T19393] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.023013][ T9] IPVS: starting estimator thread 0... [ 449.118712][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 449.130222][T19428] IPVS: using max 30 ests per chain, 72000 per kthread [ 449.217079][T19444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.306733][T19451] IPVS: set_ctl: invalid protocol: 60 172.20.20.20:20001 [ 449.323736][T19448] syzkaller0: entered promiscuous mode [ 449.340881][T19448] syzkaller0: entered allmulticast mode [ 449.391597][T19448] tipc: Enabled bearer , priority 9 [ 449.415944][T19447] tipc: Resetting bearer [ 449.463526][T19447] tipc: Disabling bearer [ 449.661945][T19467] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 450.196014][T19481] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3480'. [ 450.221582][T19481] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3480'. [ 450.404127][T19491] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3482'. [ 450.424465][T19490] netlink: 'syz.1.3483': attribute type 11 has an invalid length. [ 450.512819][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 450.528814][T19493] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 450.680667][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 451.487991][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 452.683551][T19579] __nla_validate_parse: 3 callbacks suppressed [ 452.683569][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3506'. [ 452.794024][T19579] vlan2: entered allmulticast mode [ 452.803589][T19579] bridge2: entered allmulticast mode [ 452.819215][T19579] bridge2: port 1(erspan0) entered blocking state [ 452.838514][T19579] bridge2: port 1(erspan0) entered disabled state [ 452.845123][T19579] erspan0: entered allmulticast mode [ 452.853865][T19579] erspan0: entered promiscuous mode [ 452.859985][T19579] bridge2: port 1(erspan0) entered blocking state [ 452.866511][T19579] bridge2: port 1(erspan0) entered forwarding state [ 453.042328][T19600] syzkaller0: entered promiscuous mode [ 453.056669][T19600] syzkaller0: entered allmulticast mode [ 453.179793][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3517'. [ 453.229958][T19615] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 453.240954][T19615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3518'. [ 453.263701][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 453.276152][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3516'. [ 453.312348][T19617] netlink: 'syz.3.3516': attribute type 6 has an invalid length. [ 453.406520][T17694] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.416122][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 453.430969][T17694] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.452812][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3516'. [ 453.461998][T19617] netlink: 'syz.3.3516': attribute type 6 has an invalid length. [ 453.472453][T17694] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.486357][T17694] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.582768][T19626] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3521'. [ 453.598951][T19626] tc_dump_action: action bad kind [ 453.711057][T19631] tipc: Enabled bearer , priority 0 [ 453.727950][T19634] netlink: 'syz.2.3524': attribute type 27 has an invalid length. [ 453.742304][T19631] syzkaller0: entered promiscuous mode [ 453.750401][T19631] syzkaller0: entered allmulticast mode [ 453.769876][T19631] tipc: Resetting bearer [ 453.826185][T19630] tipc: Resetting bearer [ 453.900869][T19630] tipc: Disabling bearer [ 454.859925][T19684] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3539'. [ 454.916018][T19684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.060826][T19693] IPVS: length: 15 != 8 [ 455.077954][T19693] IPVS: length: 15 != 8 [ 455.202867][T19698] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 455.295227][T19698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.561876][T19717] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 455.587684][T19717] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 455.854828][T19730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3551'. [ 456.152455][T19743] netlink: 'syz.1.3558': attribute type 49 has an invalid length. [ 456.410002][T19751] netlink: 'syz.2.3560': attribute type 61 has an invalid length. [ 456.740571][T19769] sctp: [Deprecated]: syz.2.3566 (pid 19769) Use of int in max_burst socket option deprecated. [ 456.740571][T19769] Use struct sctp_assoc_value instead [ 456.762381][T19770] syzkaller0: entered promiscuous mode [ 456.769845][T19769] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 456.777897][T19770] syzkaller0: entered allmulticast mode [ 457.165816][T19784] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.190546][T19786] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 457.226648][T19784] bond3: (slave lo): Enslaving as an active interface with an up link [ 457.243959][T19784] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 457.434029][T19797] netlink: 'syz.4.3573': attribute type 1 has an invalid length. [ 457.441971][T19801] netlink: 'syz.2.3571': attribute type 3 has an invalid length. [ 457.704928][T19790] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.725688][T19790] bond7: (slave bond8): making interface the new active one [ 457.745534][T19790] bond7: (slave bond8): Enslaving as an active interface with an up link [ 457.883972][T19797] bond4: (slave gretap1): making interface the new active one [ 457.900578][T19797] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 457.923592][T19806] macvlan2: entered promiscuous mode [ 457.939726][T19806] macvlan2: entered allmulticast mode [ 457.953603][T19806] bond4: entered promiscuous mode [ 457.964894][T19806] gretap1: entered promiscuous mode [ 457.981163][T19806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.993670][T19806] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 458.019960][T19806] bond4: left promiscuous mode [ 458.028712][T19806] gretap1: left promiscuous mode [ 458.250233][ T5640] block nbd3: Receive control failed (result -22) [ 458.311083][T19824] nbd3: detected capacity change from 0 to 32 [ 458.345389][T17821] block nbd3: Dead connection, failed to find a fallback [ 458.362720][T17821] block nbd3: shutting down sockets [ 458.370936][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.382335][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.390513][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.401234][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.409250][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.418501][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.427769][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.437251][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.444832][T19838] __nla_validate_parse: 6 callbacks suppressed [ 458.444872][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 458.446385][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.469921][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.477890][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.487283][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.503659][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.537043][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.546995][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 458.574253][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.595604][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.633646][T17821] ldm_validate_partition_table(): Disk read failed. [ 458.658937][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.678659][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.700009][T17821] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.739897][ T3353] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.753331][T17821] Buffer I/O error on dev nbd3, logical block 0, async page read [ 458.762877][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 458.777816][ T3353] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.790245][T17821] Dev nbd3: unable to read RDB block 0 [ 458.802629][ T3353] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.814102][T17821] nbd3: unable to read partition table [ 458.841136][ T3353] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.866565][T17821] ldm_validate_partition_table(): Disk read failed. [ 458.883399][T17821] Dev nbd3: unable to read RDB block 0 [ 458.913221][T17821] nbd3: unable to read partition table [ 458.939738][T19847] syzkaller1: entered promiscuous mode [ 458.955312][T19847] syzkaller1: entered allmulticast mode [ 458.993708][T19850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.032679][T19847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.127780][T19850] v: renamed from ip6tnl0 (while UP) [ 459.151719][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 459.173374][T19858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 459.593203][T19879] macsec2: entered promiscuous mode [ 459.848053][T19903] bond1: entered allmulticast mode [ 459.923927][T19911] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 459.949499][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3602'. [ 459.965004][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 459.981026][T19911] bond5 (unregistering): Released all slaves [ 460.075542][T19903] netlink: 'syz.0.3601': attribute type 21 has an invalid length. [ 460.114387][T19919] xt_CT: No such helper "syz0" [ 460.140058][T19903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3601'. [ 460.283437][T19929] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 460.510856][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3611'. [ 460.573026][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 460.704393][T19960] : renamed from bond0 (while UP) [ 460.758634][T19963] syzkaller1: entered allmulticast mode [ 460.826589][T19969] set match dimension is over the limit! [ 460.992729][T19977] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 461.058150][T19973] vlan2: entered promiscuous mode [ 461.063437][T19973] bridge0: entered promiscuous mode [ 461.154601][T19977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.269856][T19984] bond0: entered promiscuous mode [ 461.275125][T19984] bond0: entered allmulticast mode [ 461.281580][T19984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.289384][T19983] syzkaller1: entered promiscuous mode [ 461.294908][T19983] syzkaller1: entered allmulticast mode [ 461.538916][T20004] syzkaller0: entered promiscuous mode [ 461.569016][T20004] syzkaller0: entered allmulticast mode [ 461.605475][T20014] vlan3: entered promiscuous mode [ 461.614466][T20014] bond_slave_1: entered promiscuous mode [ 461.704513][T20016] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 461.954201][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d67c00: rx timeout, send abort [ 462.050759][T20042] nbd: nbd64 already in use [ 462.452494][T17821] udevd[17821]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 462.454322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d64800: rx timeout, send abort [ 462.470551][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d67c00: abort rx timeout. Force session deactivation [ 462.970426][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d64800: abort rx timeout. Force session deactivation [ 463.465702][T20101] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 463.503275][T20101] netlink: 'syz.3.3642': attribute type 7 has an invalid length. [ 463.596668][T20114] __nla_validate_parse: 10 callbacks suppressed [ 463.596683][T20114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3645'. [ 463.685864][T20121] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 463.832654][T20122] bridge3: entered promiscuous mode [ 463.850190][T20122] bridge3: entered allmulticast mode [ 463.881492][T20122] team0: Port device bridge3 added [ 464.114068][T20146] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3651'. [ 464.596455][T20166] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 464.618232][T20166] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.794932][T20174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3660'. [ 465.011750][T20176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3661'. [ 465.527786][T20192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3665'. [ 465.572117][T20192] netlink: 'syz.0.3665': attribute type 21 has an invalid length. [ 465.613984][T20192] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3665'. [ 465.656541][T20192] netlink: 'syz.0.3665': attribute type 4 has an invalid length. [ 465.681954][T20192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3665'. [ 465.719916][T20198] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 465.757936][T20198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3666'. [ 466.125683][T20225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3670'. [ 466.547220][T20237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.581049][T20237] mac80211_hwsim hwsim51 wlan0: left promiscuous mode [ 466.603439][T20237] macsec1: left promiscuous mode [ 466.622309][T20237] vlan2: left promiscuous mode [ 466.641090][T20237] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 466.668340][T20237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.678962][T20237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.689195][T20237] macsec2: left promiscuous mode [ 466.696702][T20237] bond0: left promiscuous mode [ 466.977168][T20261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3681'. [ 467.332941][T20276] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 467.360696][T20276] netlink: zone id is out of range [ 467.372177][T20276] netlink: del zone limit has 4 unknown bytes [ 467.463948][T20279] openvswitch: netlink: IP tunnel dst address not specified [ 467.927157][T20303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.938264][T20282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.419645][T20328] syzkaller0: entered promiscuous mode [ 468.425372][T20328] syzkaller0: entered allmulticast mode [ 468.784526][T20340] __nla_validate_parse: 9 callbacks suppressed [ 468.784539][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 471.104476][T20309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.210403][T20348] netlink: 'syz.1.3707': attribute type 21 has an invalid length. [ 471.296745][T20354] ip6erspan0: entered allmulticast mode [ 471.311108][T20354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3706'. [ 471.409259][T20357] netlink: 758 bytes leftover after parsing attributes in process `syz.0.3709'. [ 471.470124][T20363] netlink: 'syz.4.3712': attribute type 20 has an invalid length. [ 471.559697][T20363] netlink: 'syz.4.3712': attribute type 20 has an invalid length. [ 471.574390][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 471.906414][T20391] tipc: Enabling of bearer rejected, failed to enable media [ 471.945711][T20387] tipc: Enabling of bearer rejected, failed to enable media [ 472.186691][T20405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 472.271978][ T810] hsr0: entered promiscuous mode [ 472.287128][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 472.585265][T20435] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3735'. [ 472.610807][T20433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3734'. [ 472.738068][T20440] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3736'. [ 472.767805][T20440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3736'. [ 472.787692][T20440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3736'. [ 472.827538][T20440] netlink: 'syz.4.3736': attribute type 1 has an invalid length. [ 472.852587][T20440] netlink: 'syz.4.3736': attribute type 8 has an invalid length. [ 472.874289][T20445] netlink: 'syz.1.3738': attribute type 1 has an invalid length. [ 472.937003][T20445] bond3: entered promiscuous mode [ 472.946957][T20445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.993042][T20449] bond3: (slave bridge5): making interface the new active one [ 473.044428][T20449] bridge5: entered promiscuous mode [ 473.065946][T20449] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 473.091066][T20448] tipc: Enabled bearer , priority 10 [ 473.946906][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 474.088758][T20498] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3751'. [ 474.231861][ T5729] tipc: Node number set to 3483947090 [ 474.536047][T20528] netlink: 'syz.4.3757': attribute type 2 has an invalid length. [ 474.588392][T20528] netlink: 'syz.4.3757': attribute type 2 has an invalid length. [ 474.890969][T20551] batadv_slave_0: entered promiscuous mode [ 474.926862][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 474.972222][T20551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.020414][T20551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.075754][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3769'. [ 475.100412][ T30] audit: type=1800 audit(1780925519.337:46): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3769" name="memory.events" dev="tmpfs" ino=642 res=0 errno=0 [ 475.122144][T20556] pim6reg: entered allmulticast mode [ 475.146233][T20549] batadv_slave_0: left promiscuous mode [ 475.301458][T20563] pim6reg1: entered allmulticast mode [ 475.454251][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 475.463909][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.563591][T20573] bridge_slave_0 (unregistering): left allmulticast mode [ 475.584171][T20579] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 475.596567][T20573] bridge_slave_0 (unregistering): left promiscuous mode [ 475.618695][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.691437][T20584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'. [ 475.736858][T20579] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 475.751507][T20586] gretap2: entered allmulticast mode [ 475.761066][T20586] bond10: (slave gretap2): making interface the new active one [ 475.769633][T20586] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 476.135275][T20612] bridge_slave_0: left allmulticast mode [ 476.153440][T20612] bridge_slave_0: left promiscuous mode [ 476.177145][T20612] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.209099][T20612] bridge_slave_1: left allmulticast mode [ 476.222904][T20612] bridge_slave_1: left promiscuous mode [ 476.238250][T20612] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.263341][T20612] bond0: (slave bond_slave_0): Releasing backup interface [ 476.305578][T20612] bond0: (slave bond_slave_1): Releasing backup interface [ 476.346311][T20612] team0: Port device team_slave_0 removed [ 476.373636][T20612] team0: Port device team_slave_1 removed [ 476.390748][T20612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.410160][T20612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.433918][T20612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.543916][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'. [ 476.565723][T20640] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3789'. [ 476.744196][T20650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3793'. [ 476.763757][T20653] netlink: 632 bytes leftover after parsing attributes in process `syz.0.3794'. [ 476.894743][T20662] netlink: zone id is out of range [ 476.900363][T20661] validate_nla: 31 callbacks suppressed [ 476.900377][T20661] netlink: 'syz.1.3796': attribute type 1 has an invalid length. [ 476.905063][T20659] netlink: set zone limit has 4 unknown bytes [ 476.943977][T20661] netlink: 'syz.1.3796': attribute type 4 has an invalid length. [ 477.003103][T20662] netlink: set zone limit has 4 unknown bytes [ 477.012128][T20669] netlink: 'syz.2.3798': attribute type 2 has an invalid length. [ 477.265218][T20685] netlink: 'syz.1.3803': attribute type 1 has an invalid length. [ 477.682021][T20705] pimreg: entered allmulticast mode [ 477.692118][T20705] pimreg: left allmulticast mode [ 478.136378][T20725] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 478.302709][T20729] tipc: Enabled bearer , priority 0 [ 478.324355][T20729] syzkaller0: entered promiscuous mode [ 478.351152][T20729] syzkaller0: entered allmulticast mode [ 478.426081][T20729] tipc: Resetting bearer [ 478.600749][T20728] tipc: Resetting bearer [ 478.679561][T20728] tipc: Disabling bearer [ 478.835854][T20760] veth1_to_batadv: entered promiscuous mode [ 479.334069][T20797] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.374166][T20797] IPv6: Can't replace route, no match found [ 479.471539][T20805] C: renamed from veth1_to_team (while UP) [ 479.503223][T20805] netlink: 'syz.2.3826': attribute type 4 has an invalid length. [ 479.521393][T20805] __nla_validate_parse: 13 callbacks suppressed [ 479.521409][T20805] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3826'. [ 479.565429][T20805] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 479.604079][T20809] netlink: 'syz.4.3828': attribute type 3 has an invalid length. [ 479.657506][T20809] block nbd4: NBD_DISCONNECT [ 479.658135][T20813] openvswitch: netlink: IP tunnel dst address not specified [ 479.688244][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3828'. [ 479.731189][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3831'. [ 479.741217][T20813] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3829'. [ 479.752197][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3831'. [ 479.764006][T20813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.971907][T20809] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 480.002426][T20809] mac80211_hwsim hwsim51 wlan0: left allmulticast mode [ 480.032696][T20809] ipvlan2: left allmulticast mode [ 480.049418][T20809] bond1: left allmulticast mode [ 480.063586][T20809] bond0: left allmulticast mode [ 480.073507][T20832] netlink: 'syz.2.3834': attribute type 2 has an invalid length. [ 480.243916][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'. [ 480.424579][T20842] bridge_slave_1: left allmulticast mode [ 480.442942][T20842] bridge_slave_1: left promiscuous mode [ 480.455318][T20842] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.500612][T20842] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 481.064821][T20894] bridge0: port 3(bond0) entered blocking state [ 481.096290][T20894] bridge0: port 3(bond0) entered disabled state [ 481.111142][T20894] bond0: entered allmulticast mode [ 481.136046][T20894] bond_slave_0: entered allmulticast mode [ 481.165639][T20894] bond_slave_1: entered allmulticast mode [ 481.207211][T20894] bond0: entered promiscuous mode [ 481.221079][T20894] bond_slave_0: entered promiscuous mode [ 481.237865][T20894] bond_slave_1: entered promiscuous mode [ 481.249671][T20894] bridge0: port 3(bond0) entered blocking state [ 481.256069][T20894] bridge0: port 3(bond0) entered forwarding state [ 481.292920][T20901] geneve3: entered promiscuous mode [ 481.301377][T20901] geneve3: entered allmulticast mode [ 481.349310][T20912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3856'. [ 481.390496][T20904] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 481.579169][T20922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3859'. [ 481.769689][T20929] netlink: 'syz.4.3857': attribute type 11 has an invalid length. [ 481.778347][T20933] netlink: 'syz.1.3863': attribute type 32 has an invalid length. [ 481.814267][T20929] netlink: 'syz.4.3857': attribute type 11 has an invalid length. [ 481.841105][T20929] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3857'. [ 481.979097][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3867'. [ 482.090216][T20957] sctp: [Deprecated]: syz.0.3869 (pid 20957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.090216][T20957] Use struct sctp_sack_info instead [ 482.124776][T20957] sctp: [Deprecated]: syz.0.3869 (pid 20957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.124776][T20957] Use struct sctp_sack_info instead [ 482.234611][T20953] netlink: 'syz.2.3866': attribute type 10 has an invalid length. [ 482.285852][T20953] syz_tun: entered promiscuous mode [ 482.342404][T20953] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 482.654121][T20977] netlink: 'syz.4.3874': attribute type 21 has an invalid length. [ 482.746787][T20963] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 482.763894][T20963] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 482.939972][T20989] veth0: Caught tx_queue_len zero misconfig [ 483.536736][T21020] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 483.603187][T21020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.618600][T21024] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 484.235300][T21055] dummy0: entered allmulticast mode [ 484.426303][T21062] bond5: Removing last ns target with arp_interval on [ 484.660993][T21078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.756378][T21080] __nla_validate_parse: 14 callbacks suppressed [ 484.756394][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 484.800444][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 484.852339][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 484.867709][T21080] vlan3: entered promiscuous mode [ 484.887281][T21080] batadv0: entered promiscuous mode [ 484.896693][T21087] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3903'. [ 484.979454][T21082] vlan3: entered promiscuous mode [ 485.045555][T21086] vlan3: entered promiscuous mode [ 485.092678][T21087] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3903'. [ 485.256047][T21099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3907'. [ 485.322008][T21097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.341766][T21097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.417068][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 485.632730][ T136] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.649210][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.668173][ T136] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.687229][ T136] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.701924][ T136] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.725520][ T136] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.787100][ T136] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.806578][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.138780][T21130] netlink: 'syz.2.3914': attribute type 1 has an invalid length. [ 486.164062][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 486.666561][T21158] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 486.794356][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 486.917525][T21173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3926'. [ 487.214697][T21194] netlink: 'syz.0.3932': attribute type 1 has an invalid length. [ 487.348121][T21199] bond2: (slave veth5): Enslaving as an active interface with a down link [ 487.407148][T21199] netlink: 'syz.0.3932': attribute type 10 has an invalid length. [ 487.467267][T21194] bond2: (slave dummy0): making interface the new active one [ 487.510544][T21194] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 487.543463][T21199] dummy0: entered promiscuous mode [ 487.565806][T21199] bond2: (slave dummy0): Releasing active interface [ 487.627523][T21211] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 487.789850][T21211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 488.347073][T21241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 489.250384][T21270] netlink: 'syz.0.3948': attribute type 1 has an invalid length. [ 489.988890][T21310] ip6erspan1: entered allmulticast mode [ 490.928883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.497895][T21283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.702565][T21343] __nla_validate_parse: 15 callbacks suppressed [ 492.702583][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 492.730973][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 492.741884][T21343] netlink: 'syz.2.3975': attribute type 29 has an invalid length. [ 492.758280][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'. [ 492.840521][T21353] netlink: 'syz.0.3974': attribute type 2 has an invalid length. [ 492.856862][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3976'. [ 492.875796][T21353] netlink: 'syz.0.3974': attribute type 2 has an invalid length. [ 493.028719][T21353] macsec1: entered promiscuous mode [ 493.127329][T21375] netlink: 'syz.3.3980': attribute type 1 has an invalid length. [ 493.242576][T21375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.261145][T21415] syzkaller0: entered promiscuous mode [ 494.283864][T21415] syzkaller0: entered allmulticast mode [ 494.352804][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'. [ 494.477425][T21443] netlink: 'syz.3.3998': attribute type 21 has an invalid length. [ 494.486986][T21443] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.498285][T21443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.505524][T21443] IPv6: NLM_F_CREATE should be set when creating new route [ 494.512806][T21443] IPv6: NLM_F_CREATE should be set when creating new route [ 494.520067][T21443] IPv6: NLM_F_CREATE should be set when creating new route [ 496.255992][T21460] ip6tnl0: entered allmulticast mode [ 496.332843][T21468] gretap0: entered promiscuous mode [ 496.345114][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'. [ 496.380462][T21468] gretap0: left promiscuous mode [ 496.427293][T21473] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4004'. [ 496.456106][T21468] hmac(sha2: entered promiscuous mode [ 496.496378][T21477] bridge_slave_0: Caught tx_queue_len zero misconfig [ 496.702820][T21471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 496.754029][T21493] sctp: [Deprecated]: syz.2.4010 (pid 21493) Use of int in max_burst socket option. [ 496.754029][T21493] Use struct sctp_assoc_value instead [ 496.824728][T21495] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 496.828464][T21491] sctp: [Deprecated]: syz.2.4010 (pid 21491) Use of int in max_burst socket option. [ 496.828464][T21491] Use struct sctp_assoc_value instead [ 496.864320][T21495] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 497.090853][T21510] bond3: option mode: unable to set because the bond device has slaves [ 497.124323][T21510] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 497.264308][T21516] syzkaller0: entered promiscuous mode [ 497.289691][T21516] syzkaller0: entered allmulticast mode [ 497.337236][T21516] tipc: Enabled bearer , priority 0 [ 497.354222][T21514] tipc: Resetting bearer [ 497.406632][T21514] tipc: Disabling bearer [ 497.641248][T21532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4020'. [ 497.797550][T21540] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 497.848860][T21544] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 497.868669][T21540] team0: Port device dummy0 added [ 497.908756][T21544] team0: Port device dummy0 removed [ 497.938460][T21544] : (slave dummy0): Enslaving as an active interface with an up link [ 498.128807][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 498.179521][T21554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4027'. [ 498.182323][T21557] netlink: 'syz.2.4028': attribute type 1 has an invalid length. [ 498.284249][T21557] 8021q: adding VLAN 0 to HW filter on device bond12 [ 498.403131][T21562] bond12: (slave geneve4): making interface the new active one [ 498.419700][T21562] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 498.442867][T21564] netlink: 'syz.2.4028': attribute type 1 has an invalid length. [ 498.516473][T21567] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 498.538755][T21567] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 498.560545][T21567] tipc: Enabled bearer , priority 0 [ 498.708431][T21571] xt_hashlimit: size too large, truncated to 1048576 [ 498.761685][T21574] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 498.799466][T21574] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4032'. [ 498.835627][T21575] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4032'. [ 500.069427][T21598] netlink: 738 bytes leftover after parsing attributes in process `syz.2.4040'. [ 500.097276][T10232] tipc: Node number set to 1824660059 [ 500.342970][T21621] netlink: 'syz.4.4046': attribute type 62 has an invalid length. [ 501.045609][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4057'. [ 501.115943][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4057'. [ 501.145951][T21682] netlink: 'syz.3.4058': attribute type 13 has an invalid length. [ 501.157407][T21682] netlink: 'syz.3.4058': attribute type 17 has an invalid length. [ 501.189182][T21684] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4059'. [ 501.299443][T21690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4058'. [ 501.434002][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'. [ 501.479371][T21697] netlink: 'syz.2.4061': attribute type 1 has an invalid length. [ 501.520420][T21682] lo: entered promiscuous mode [ 501.527717][T21682] lo: entered allmulticast mode [ 501.533005][T21682] tunl0: entered promiscuous mode [ 501.538699][T21682] tunl0: entered allmulticast mode [ 501.544244][T21682] gre0: entered promiscuous mode [ 501.550005][T21682] gre0: entered allmulticast mode [ 501.555397][T21682] gretap0: entered promiscuous mode [ 501.562200][T21682] gretap0: entered allmulticast mode [ 501.576319][T21682] erspan0: entered promiscuous mode [ 501.587783][T21682] erspan0: entered allmulticast mode [ 501.601183][T21682] ip_vti0: entered promiscuous mode [ 501.606474][T21682] ip_vti0: entered allmulticast mode [ 501.612273][T21682] ip6_vti0: entered promiscuous mode [ 501.617607][T21682] ip6_vti0: entered allmulticast mode [ 501.623238][T21682] sit0: entered promiscuous mode [ 501.628585][T21682] sit0: entered allmulticast mode [ 501.633933][T21682] ip6tnl0: entered promiscuous mode [ 501.639306][T21682] ip6tnl0: entered allmulticast mode [ 501.644887][T21682] ip6gre0: entered promiscuous mode [ 501.650568][T21682] ip6gre0: entered allmulticast mode [ 501.659327][T21682] ip6gretap0: entered promiscuous mode [ 501.664863][T21682] ip6gretap0: entered allmulticast mode [ 501.678841][T21682] bridge0: entered allmulticast mode [ 501.684500][T21682] vcan0: entered promiscuous mode [ 501.690010][T21682] vcan0: entered allmulticast mode [ 501.695968][T21682] bond0: entered promiscuous mode [ 501.701133][T21682] bond0: entered allmulticast mode [ 501.706503][T21682] team0: entered promiscuous mode [ 501.711808][T21682] vlan0: entered promiscuous mode [ 501.717130][T21682] team0: entered allmulticast mode [ 501.722463][T21682] vlan0: entered allmulticast mode [ 501.727764][T21682] veth0_vlan: entered allmulticast mode [ 501.733643][T21682] dummy0: entered promiscuous mode [ 501.739150][T21682] nlmon0: entered promiscuous mode [ 501.744332][T21682] nlmon0: entered allmulticast mode [ 501.750160][T21682] batadv0: entered allmulticast mode [ 501.755789][T21682] vxcan0: entered promiscuous mode [ 501.761029][T21682] vxcan0: entered allmulticast mode [ 501.766567][T21682] vxcan1: entered promiscuous mode [ 501.771925][T21682] vxcan1: entered allmulticast mode [ 501.777446][T21682] veth0: entered promiscuous mode [ 501.782714][T21682] veth0: entered allmulticast mode [ 501.788583][T21682] veth1: entered promiscuous mode [ 501.793633][T21682] veth1: entered allmulticast mode [ 501.800070][T21682] wg0: entered promiscuous mode [ 501.804942][T21682] wg0: entered allmulticast mode [ 501.811914][T21682] wg1: entered promiscuous mode [ 501.816809][T21682] wg1: entered allmulticast mode [ 501.822227][T21682] wg2: entered promiscuous mode [ 501.827103][T21682] wg2: entered allmulticast mode [ 501.832618][T21682] veth0_to_bridge: entered promiscuous mode [ 501.838623][T21682] veth0_to_bridge: entered allmulticast mode [ 501.844888][T21682] bridge_slave_0: entered promiscuous mode [ 501.851248][T21682] bridge_slave_0: entered allmulticast mode [ 501.857457][T21682] veth1_to_bridge: entered promiscuous mode [ 501.863442][T21682] veth1_to_bridge: entered allmulticast mode [ 501.869874][T21682] bridge_slave_1: entered promiscuous mode [ 501.875707][T21682] bridge_slave_1: entered allmulticast mode [ 501.882086][T21682] veth0_to_bond: entered promiscuous mode [ 501.888375][T21682] veth0_to_bond: entered allmulticast mode [ 501.894491][T21682] bond_slave_0: entered promiscuous mode [ 501.900259][T21682] bond_slave_0: entered allmulticast mode [ 501.906335][T21682] veth1_to_bond: entered promiscuous mode [ 501.912332][T21682] veth1_to_bond: entered allmulticast mode [ 501.919016][T21682] bond_slave_1: entered promiscuous mode [ 501.924827][T21682] bond_slave_1: entered allmulticast mode [ 501.931323][T21682] veth0_to_team: entered promiscuous mode [ 501.937097][T21682] veth0_to_team: entered allmulticast mode [ 501.943407][T21682] team_slave_0: entered promiscuous mode [ 501.949213][T21682] team_slave_0: entered allmulticast mode [ 501.955309][T21682] veth1_to_team: entered promiscuous mode [ 501.961334][T21682] veth1_to_team: entered allmulticast mode [ 501.967368][T21682] team_slave_1: entered promiscuous mode [ 501.976497][T21682] team_slave_1: entered allmulticast mode [ 501.982741][T21682] veth0_to_batadv: entered promiscuous mode [ 501.988763][T21682] veth0_to_batadv: entered allmulticast mode [ 501.994970][T21682] batadv_slave_0: entered promiscuous mode [ 502.004153][T21682] batadv_slave_0: entered allmulticast mode [ 502.010723][T21682] xfrm0: entered promiscuous mode [ 502.015816][T21682] xfrm0: entered allmulticast mode [ 502.021488][T21682] veth0_to_hsr: entered promiscuous mode [ 502.027175][T21682] veth0_to_hsr: entered allmulticast mode [ 502.034122][T21682] hsr_slave_0: entered allmulticast mode [ 502.040398][T21682] veth1_to_hsr: entered promiscuous mode [ 502.046050][T21682] veth1_to_hsr: entered allmulticast mode [ 502.052226][T21682] hsr_slave_1: entered allmulticast mode [ 502.059941][T21682] hsr0: entered promiscuous mode [ 502.064913][T21682] hsr0: entered allmulticast mode [ 502.070364][T21682] veth1_virt_wifi: entered promiscuous mode [ 502.076292][T21682] veth1_virt_wifi: entered allmulticast mode [ 502.083193][T21682] veth0_virt_wifi: entered promiscuous mode [ 502.089199][T21682] veth0_virt_wifi: entered allmulticast mode [ 502.095467][T21682] virt_wifi0: entered promiscuous mode [ 502.101905][T21682] virt_wifi0: entered allmulticast mode [ 502.107799][T21682] veth1_vlan: entered allmulticast mode [ 502.114001][T21682] vlan1: entered promiscuous mode [ 502.119504][T21682] vlan1: entered allmulticast mode [ 502.124871][T21682] macvlan0: entered promiscuous mode [ 502.130261][T21682] macvlan0: entered allmulticast mode [ 502.135889][T21682] macvlan1: entered promiscuous mode [ 502.141432][T21682] macvlan1: entered allmulticast mode [ 502.147167][T21682] ipvlan0: entered promiscuous mode [ 502.152542][T21682] ipvlan0: entered allmulticast mode [ 502.158314][T21682] ipvlan1: entered promiscuous mode [ 502.163525][T21682] ipvlan1: entered allmulticast mode [ 502.169235][T21682] veth1_macvtap: entered allmulticast mode [ 502.175271][T21682] veth0_macvtap: entered allmulticast mode [ 502.181663][T21682] macvtap0: entered promiscuous mode [ 502.187074][T21682] macvtap0: entered allmulticast mode [ 502.200746][T21682] macsec0: entered promiscuous mode [ 502.205955][T21682] macsec0: entered allmulticast mode [ 502.211927][T21682] geneve0: entered promiscuous mode [ 502.217172][T21682] geneve0: entered allmulticast mode [ 502.223481][T21682] geneve1: entered promiscuous mode [ 502.229115][T21682] geneve1: entered allmulticast mode [ 502.234755][T21682] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 502.242399][T21682] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 502.254668][T21682] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 502.262273][T21682] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 502.273876][T21682] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 502.281296][T21682] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 502.293896][T21682] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 502.301284][T21682] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 502.312867][T21682] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 502.319957][T21682] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 502.327349][T21682] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 502.334542][T21682] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 502.342118][T21682] mac80211_hwsim hwsim57 wlan2: entered promiscuous mode [ 502.349192][T21682] mac80211_hwsim hwsim57 wlan2: entered allmulticast mode [ 502.356806][T21682] vxlan0: entered promiscuous mode [ 502.362017][T21682] vxlan0: entered allmulticast mode [ 502.367408][T21682] bond1: entered promiscuous mode [ 502.372655][T21682] bond1: entered allmulticast mode [ 502.378262][T21682] mac80211_hwsim hwsim60 wlan3: entered promiscuous mode [ 502.385301][T21682] mac80211_hwsim hwsim60 wlan3: entered allmulticast mode [ 502.393026][T21682] vlan2: entered allmulticast mode [ 502.398489][T21682] bond2: entered promiscuous mode [ 502.403509][T21682] bond2: entered allmulticast mode [ 502.408949][T21682] bond3: entered promiscuous mode [ 502.413972][T21682] bond3: entered allmulticast mode [ 502.419394][T21682] macsec1: entered promiscuous mode [ 502.424598][T21682] macsec1: entered allmulticast mode [ 502.430212][T21682] bond4: entered promiscuous mode [ 502.435236][T21682] bond4: entered allmulticast mode [ 502.440682][T21682] hmac(sha2: entered allmulticast mode [ 502.452924][T21681] vlan3: entered allmulticast mode [ 502.458325][T21681] bridge5: entered allmulticast mode [ 502.502939][T21687] erspan0: left allmulticast mode [ 502.508117][T21687] erspan0: left promiscuous mode [ 502.513772][T21687] bridge2: port 1(erspan0) entered disabled state [ 502.523612][T21687] bridge5: port 1(erspan0) entered blocking state [ 502.530241][T21687] bridge5: port 1(erspan0) entered disabled state [ 502.536776][T21687] erspan0: entered allmulticast mode [ 502.546181][T21687] erspan0: entered promiscuous mode [ 502.553515][T21687] bridge5: port 1(erspan0) entered blocking state [ 502.560091][T21687] bridge5: port 1(erspan0) entered forwarding state [ 502.577513][T21305] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.608383][T21305] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.621576][T21305] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.655593][T21305] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.672453][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'. [ 502.708534][T21305] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.728036][T21305] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.745923][T21305] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.758456][T21305] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.911829][T21714] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 502.943673][T21717] --map-set only usable from mangle table [ 503.324807][T21747] syzkaller1: entered promiscuous mode [ 503.336801][T21747] syzkaller1: entered allmulticast mode [ 503.404989][T21748] ÿÿÿÿÿÿ: renamed from batadv_slave_1 (while UP) [ 503.419592][T21748] __nla_validate_parse: 1 callbacks suppressed [ 503.419607][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 503.829127][T21779] bridge0: port 1(batadv1) entered blocking state [ 503.835865][T21779] bridge0: port 1(batadv1) entered disabled state [ 503.842850][T21779] batadv1: entered allmulticast mode [ 503.850368][T21779] batadv1: entered promiscuous mode [ 504.327953][T17697] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 504.338110][T17697] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 506.377853][T21751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.540056][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4088'. [ 506.587774][T21791] netlink: 15664 bytes leftover after parsing attributes in process `syz.4.4085'. [ 506.613117][T21800] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4089'. [ 506.635110][T21800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4089'. [ 507.980678][T21839] sit1: entered promiscuous mode [ 508.001763][T21843] tipc: Enabled bearer , priority 0 [ 508.010858][T21843] syzkaller0: entered promiscuous mode [ 508.016631][T21843] syzkaller0: entered allmulticast mode [ 508.053884][T21843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4101'. [ 508.083303][T21843] tipc: Resetting bearer [ 508.132962][T21841] tipc: Resetting bearer [ 508.189420][T21841] tipc: Disabling bearer [ 508.231688][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 508.251051][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 508.283103][T21854] netlink: 'syz.1.4103': attribute type 5 has an invalid length. [ 508.305848][T21853] netlink: 'syz.1.4103': attribute type 5 has an invalid length. [ 508.330104][T21854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 508.345249][T21862] netlink: 'syz.4.4105': attribute type 1 has an invalid length. [ 508.356137][T21853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 508.399210][T21854] geneve3: entered promiscuous mode [ 508.418062][T21854] geneve3: entered allmulticast mode [ 508.445319][T17697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 43738 - 0 [ 508.475060][T17697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 43738 - 0 [ 508.510890][T17697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 43738 - 0 [ 508.533716][T17697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 43738 - 0 [ 508.616516][T21868] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 508.632957][T21873] __nla_validate_parse: 1 callbacks suppressed [ 508.632971][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 508.652161][T21877] syzkaller0: entered promiscuous mode [ 508.663488][T21877] syzkaller0: entered allmulticast mode [ 508.671193][T21868] tipc: Enabling of bearer rejected, already enabled [ 508.735794][T21883] lo: left promiscuous mode [ 508.743804][T21883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.979491][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4114'. [ 509.136178][T21898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4117'. [ 509.152478][T21898] netlink: 'syz.0.4117': attribute type 58 has an invalid length. [ 509.175122][T21898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'. [ 509.272648][ T50] Bluetooth: hci4: link tx timeout [ 509.283449][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 509.411022][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4120'. [ 509.493077][T21917] tipc: Enabled bearer , priority 0 [ 509.513856][T21917] syzkaller0: entered promiscuous mode [ 509.526911][T21917] syzkaller0: entered allmulticast mode [ 509.813755][T21921] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 509.821119][T21925] geneve4: entered promiscuous mode [ 509.832301][T21926] tipc: Resetting bearer [ 509.850857][T21921] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 509.874202][T21921] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 509.914952][T21930] macsec2: entered promiscuous mode [ 509.990851][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 510.017769][T21933] openvswitch: netlink: Invalid VLAN frame [ 510.102465][T21927] tipc: Enabling of bearer rejected, failed to enable media [ 510.115689][ T136] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.125862][ T136] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.145926][ T136] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.166446][ T136] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.255770][T21907] tipc: Resetting bearer [ 510.313568][T21907] tipc: Disabling bearer [ 510.482765][T21948] bridge0: port 1(batadv1) entered blocking state [ 510.522918][T21948] bridge0: port 1(batadv1) entered disabled state [ 510.561548][T21948] batadv1: entered allmulticast mode [ 510.577534][T21948] batadv1: entered promiscuous mode [ 510.610637][T21960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 510.949020][ T136] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 510.958321][ T136] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 511.337817][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 511.519789][T21986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 511.639949][T21986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.661269][T21996] netlink: 'syz.3.4141': attribute type 1 has an invalid length. [ 511.701354][T21996] netlink: 'syz.3.4141': attribute type 2 has an invalid length. [ 511.743769][T21996] netlink: 'syz.3.4141': attribute type 2 has an invalid length. [ 511.801900][T21998] netlink: 512 bytes leftover after parsing attributes in process `syz.3.4141'. [ 511.849253][T21996] netlink: 'syz.3.4141': attribute type 2 has an invalid length. [ 511.883950][T21996] netlink: 'syz.3.4141': attribute type 1 has an invalid length. [ 511.915444][T22004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.286156][T22021] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4148'. [ 512.659142][T22033] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 512.712450][T22035] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 512.828357][T22033] xt_TCPMSS: Only works on TCP SYN packets [ 512.879075][T22045] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 512.946383][T22035] xt_cgroup: invalid path, errno=-2 [ 513.493542][T22067] geneve2: entered promiscuous mode [ 513.499863][T22067] geneve2: entered allmulticast mode [ 513.513256][T22069] hsr0: entered promiscuous mode [ 513.774897][T22075] Bluetooth: MGMT ver 1.23 [ 514.093269][T22097] xt_hl: Unknown TTL match mode: 237 [ 514.168658][T22097] syzkaller0: entered promiscuous mode [ 514.189057][T22097] syzkaller0: entered allmulticast mode [ 514.546973][T22114] validate_nla: 2 callbacks suppressed [ 514.546990][T22114] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 514.582664][T22114] veth0_to_bond: left promiscuous mode [ 514.735646][T22128] ipt_ECN: cannot use operation on non-tcp rule [ 514.779095][T22130] __nla_validate_parse: 7 callbacks suppressed [ 514.779111][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4181'. [ 514.838745][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4181'. [ 515.431787][T22158] pimreg: entered allmulticast mode [ 515.545647][T22170] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4191'. [ 515.560465][T22170] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4191'. [ 515.666755][T22177] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 515.681950][T22177] batman_adv: batadv0: Adding interface: gretap2 [ 515.689202][T22177] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.720519][T22177] batman_adv: batadv0: Interface activated: gretap2 [ 515.852500][T22188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4194'. [ 515.865809][T22188] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4194'. [ 515.880760][T22188] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4194'. [ 516.094340][T22205] netlink: 'syz.4.4197': attribute type 1 has an invalid length. [ 516.192875][T22210] gretap3: entered allmulticast mode [ 516.204087][T22210] bond8: (slave gretap3): making interface the new active one [ 516.213131][T22210] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 516.706148][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4203'. [ 516.849340][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4206'. [ 516.938631][T22248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4206'. [ 516.969635][T22247] bond9: entered promiscuous mode [ 516.976119][T22247] 8021q: adding VLAN 0 to HW filter on device bond9 [ 517.027865][T22248] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.052342][T22247] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.061518][T22247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.069583][T22247] IPv6: NLM_F_CREATE should be set when creating new route [ 517.079046][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.088653][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.096971][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.105791][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.114381][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.123064][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.131909][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.141575][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.197945][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.218223][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.234165][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.247486][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.264247][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.277445][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.289098][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.298411][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.306050][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.314938][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.322641][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.333834][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.350310][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.362436][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.378253][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.386909][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.396087][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.404708][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.413379][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.428337][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.457803][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.465487][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.473686][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.481591][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.489458][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.497334][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.506457][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.514248][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.530266][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.546633][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.559649][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.567336][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.579196][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.587524][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.596238][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.605907][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.613944][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.622807][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.630903][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.639995][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.650934][T22248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.756958][T22275] sctp: [Deprecated]: syz.4.4215 (pid 22275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.756958][T22275] Use struct sctp_sack_info instead [ 517.774203][T22275] sctp: [Deprecated]: syz.4.4215 (pid 22275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.774203][T22275] Use struct sctp_sack_info instead [ 517.855932][T22277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.980850][T22281] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 518.116701][T22286] v: renamed from ip6_vti0 [ 518.608248][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 519.072217][T22322] netlink: 'syz.4.4232': attribute type 1 has an invalid length. [ 519.090308][T22322] netlink: 'syz.4.4232': attribute type 1 has an invalid length. [ 519.662647][T22347] IPVS: Scheduler module ip_vs_sip not found [ 519.676840][T22347] netlink: 'syz.2.4237': attribute type 1 has an invalid length. [ 519.686975][T22347] netlink: 'syz.2.4237': attribute type 1 has an invalid length. [ 519.695989][T22347] netlink: 'syz.2.4237': attribute type 8 has an invalid length. [ 519.856142][T22351] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 519.870752][T22351] bond14 (unregistering): Released all slaves [ 520.259380][T22370] __nla_validate_parse: 22 callbacks suppressed [ 520.259397][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4242'. [ 520.340567][T22358] bond3 (unregistering): Released all slaves [ 520.439378][T22374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4244'. [ 520.796879][T22387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4247'. [ 520.865321][T22389] netlink: 'syz.2.4249': attribute type 5 has an invalid length. [ 521.014582][T22396] xt_hashlimit: size too large, truncated to 1048576 [ 521.040014][T22400] netlink: 'syz.3.4251': attribute type 6 has an invalid length. [ 521.072221][T22401] syzkaller1: entered promiscuous mode [ 521.091144][T22401] syzkaller1: entered allmulticast mode [ 521.115430][T22395] syzkaller1: entered promiscuous mode [ 521.146943][T22395] syzkaller1: entered allmulticast mode [ 521.569924][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4258'. [ 521.611537][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4258'. [ 521.692702][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 521.703927][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 522.005414][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4261'. [ 522.035252][T22439] bridge0: port 3(bond0) entered disabled state [ 522.042425][T22439] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.083665][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 522.104107][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 523.107048][T22491] netlink: 'syz.0.4275': attribute type 3 has an invalid length. [ 523.595427][T22507] tipc: Enabled bearer , priority 0 [ 523.691766][T22507] syzkaller0: entered promiscuous mode [ 523.718730][T22507] syzkaller0: entered allmulticast mode [ 523.784639][T22507] tipc: Enabling of bearer rejected, already enabled [ 523.856217][T22522] tipc: Resetting bearer [ 523.975702][T22506] tipc: Resetting bearer [ 524.175338][T22506] tipc: Disabling bearer [ 524.743705][T22555] netlink: 'syz.4.4286': attribute type 11 has an invalid length. [ 524.795290][T22562] netlink: 'syz.4.4286': attribute type 11 has an invalid length. [ 524.948595][T22567] IPVS: Unknown mcast interface: veth1_to_hsr [ 524.998306][T22570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.006395][T22570] IPv6: NLM_F_CREATE should be set when creating new route [ 525.088081][T22570] netlink: 'syz.4.4289': attribute type 39 has an invalid length. [ 525.588198][T22595] xt_HMARK: spi-set and port-set can't be combined [ 525.809868][T22606] __nla_validate_parse: 8 callbacks suppressed [ 525.809886][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4299'. [ 525.839247][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4299'. [ 525.862004][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 525.882555][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 525.905447][T22604] netlink: 'syz.4.4298': attribute type 1 has an invalid length. [ 525.917989][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 526.040474][T22615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4301'. [ 526.085205][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4301'. [ 526.172484][T22619] tipc: Enabling of bearer rejected, already enabled [ 526.363434][T22632] syzkaller0: entered promiscuous mode [ 526.378492][T22632] syzkaller0: entered allmulticast mode [ 526.422902][T22632] tipc: Enabled bearer , priority 0 [ 526.734200][T22645] : entered promiscuous mode [ 526.802819][T22630] tipc: Resetting bearer [ 526.902562][T22630] tipc: Disabling bearer [ 526.914573][T22665] netlink: 'syz.4.4314': attribute type 5 has an invalid length. [ 526.948654][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'. [ 527.237432][T22665] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 527.244892][T22682] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4318'. [ 527.254074][T22681] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.4318'. [ 527.293757][T22684] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 527.685433][T22665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.715604][T22665] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 527.724364][T22665] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 527.752550][T22684] netlink: 'syz.0.4319': attribute type 13 has an invalid length. [ 527.795750][T17700] ip6_tunnel:  xmit: Local address not yet configured! [ 528.226758][T22695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.270149][T22688] ip6gre1: entered promiscuous mode [ 528.308875][T22688] ip6gre1: entered allmulticast mode [ 528.566278][T22692] block nbd4: Unsupported socket: should be TCP or UNIX. [ 528.739820][T22703] sctp: [Deprecated]: syz.4.4324 (pid 22703) Use of int in maxseg socket option. [ 528.739820][T22703] Use struct sctp_assoc_value instead [ 529.140046][T22716] netlink: 'syz.2.4328': attribute type 13 has an invalid length. [ 530.037087][T22716] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.044743][T22716] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.563581][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.578790][T22716] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 530.882258][ T136] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.933096][ T136] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.983756][ T136] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.051416][ T136] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.206537][T22756] syzkaller1: entered promiscuous mode [ 531.232482][T22756] syzkaller1: entered allmulticast mode [ 531.443625][T22774] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 531.456022][T22774] __nla_validate_parse: 6 callbacks suppressed [ 531.456037][T22774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4339'. [ 531.477365][ T5736] IPVS: starting estimator thread 0... [ 531.483714][T22774] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 531.492884][T22774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4339'. [ 531.503329][T22774] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 531.568092][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 531.577683][T22775] IPVS: using max 29 ests per chain, 69600 per kthread [ 531.596464][T22774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4339'. [ 531.709588][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 531.826191][T22789] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4341'. [ 532.078720][T22793] openvswitch: netlink: Flow actions attr not present in new flow. [ 532.384752][T22804] x_tables: duplicate underflow at hook 1 [ 532.405917][T22806] x_tables: duplicate underflow at hook 1 [ 532.839494][T22824] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4348'. [ 533.047922][T22837] veth0_to_bond: left promiscuous mode [ 533.080594][T22837] veth0_to_bond: left allmulticast mode [ 533.673445][T22861] bridge0: entered allmulticast mode [ 533.968674][ T5640] Bluetooth: hci3: command 0x041b tx timeout [ 534.807406][T22881] netlink: 'syz.3.4362': attribute type 58 has an invalid length. [ 534.845860][T22881] gretap0: left promiscuous mode [ 535.076427][T22886] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4364'. [ 535.129755][T22887] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4364'. [ 535.232367][T22889] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4365'. [ 535.901769][T22924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 536.562332][T22944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.672908][T22947] __nla_validate_parse: 1 callbacks suppressed [ 536.672925][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 536.744669][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4378'. [ 536.790478][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4378'. [ 536.830887][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4378'. [ 537.373794][T22965] netlink: 'syz.3.4380': attribute type 22 has an invalid length. [ 537.478815][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4381'. [ 537.758286][T22976] netlink: 'syz.1.4382': attribute type 4 has an invalid length. [ 537.783281][T22976] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4382'. [ 537.819268][T22976] .`: renamed from bond0 [ 538.363699][T22988] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4386'. [ 538.400967][T22988] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4386'. [ 538.444069][T22988] bond0 (unregistering): Released all slaves [ 538.503584][T22990] netlink: 'syz.4.4387': attribute type 5 has an invalid length. [ 538.546208][T22990] netlink: 'syz.4.4387': attribute type 11 has an invalid length. [ 538.927840][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 538.985065][T22993] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 539.088951][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 539.112719][T22995] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 539.145817][T22995] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 539.156218][T23006] tipc: Enabled bearer , priority 0 [ 539.322186][T22997] syzkaller0: entered promiscuous mode [ 539.340879][T22997] syzkaller0: entered allmulticast mode [ 539.365863][T23013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4392'. [ 539.386802][T22991] tipc: Resetting bearer [ 539.473539][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4393'. [ 539.484514][T22991] tipc: Disabling bearer [ 539.719970][T22999] syz_tun: left promiscuous mode [ 539.770753][T22999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.823312][T22999] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.875524][T22999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.095755][T22999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.121408][T22999] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 540.143089][T22999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.166036][T22999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.201310][T22999] veth1_vlan: left promiscuous mode [ 540.216359][T22999] veth0_vlan: left promiscuous mode [ 540.236516][T22999] veth0_vlan: entered promiscuous mode [ 540.246724][T22999] veth1_vlan: entered promiscuous mode [ 540.262531][T22999] veth1_macvtap: left promiscuous mode [ 540.273843][T22999] veth0_macvtap: left promiscuous mode [ 540.281530][T22999] veth0_macvtap: entered promiscuous mode [ 540.303297][T22999] veth1_macvtap: entered promiscuous mode [ 540.343721][T22999] bond1: left promiscuous mode [ 540.348803][T22999] bridge1: left promiscuous mode [ 540.355190][T22999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.364500][T22999] bond2: left promiscuous mode [ 540.369910][T22999] bond2: left allmulticast mode [ 540.376339][T22999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.384051][T22999] geneve3: left promiscuous mode [ 540.391751][T22999] bond3: left allmulticast mode [ 540.399827][T22999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.409657][T22999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.420112][T22999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.423628][T23048] netlink: 'syz.0.4401': attribute type 4 has an invalid length. [ 540.447494][T22999] 8021q: adding VLAN 0 to HW filter on device eth0 [ 540.464173][T22999] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.492858][T22999] 8021q: adding VLAN 0 to HW filter on device eth2 [ 540.503173][T23049] netlink: 'syz.0.4401': attribute type 4 has an invalid length. [ 540.517410][T22999] 8021q: adding VLAN 0 to HW filter on device eth3 [ 540.527208][T22999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.535666][T22999] bridge2: port 1(erspan0) entered blocking state [ 540.542253][T22999] bridge2: port 1(erspan0) entered forwarding state [ 540.551834][T22999] vlan2: left allmulticast mode [ 540.558678][T22999] bridge2: left allmulticast mode [ 540.575040][T22999] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.585649][T22999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 540.593450][T22999] vlan3: left promiscuous mode [ 540.598372][T22999] bond_slave_1: left promiscuous mode [ 540.607242][T22999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.617828][T22999] 8021q: adding VLAN 0 to HW filter on device bond10 [ 540.625606][T22999] gretap2: left allmulticast mode [ 540.634661][T22999] 8021q: adding VLAN 0 to HW filter on device bond11 [ 540.648492][T22999] ip6erspan1: left allmulticast mode [ 540.659531][T22999] 8021q: adding VLAN 0 to HW filter on device bond12 [ 540.672282][T22999] 8021q: adding VLAN 0 to HW filter on device bond13 [ 540.684877][T22999] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 540.712444][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.720403][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.733896][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.742021][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.932164][T23030] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 540.965414][T17702] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.085302][T17702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.130763][T17702] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.150711][T17702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.225360][T17702] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.267666][T17702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.310329][T17702] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.342322][T17702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.702711][T23083] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 541.738471][T23083] __nla_validate_parse: 5 callbacks suppressed [ 541.738487][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 541.868260][ T8451] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 541.908908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.987023][T23094] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.036529][T23094] tipc: Enabled bearer , priority 10 [ 542.177811][ T5736] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 542.289119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.437483][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4417'. [ 542.530214][T23119] Bluetooth: MGMT ver 1.23 [ 542.621379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.656333][ T6407] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 542.742400][T23123] tipc: Enabled bearer , priority 0 [ 542.787498][T23128] syzkaller1: entered promiscuous mode [ 542.812441][T23128] syzkaller1: entered allmulticast mode [ 542.835758][T23123] syzkaller0: entered promiscuous mode [ 542.845404][T23123] syzkaller0: entered allmulticast mode [ 542.885804][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4421'. [ 542.897744][T23133] netlink: 'syz.2.4421': attribute type 4 has an invalid length. [ 542.974279][T23125] tipc: Enabling of bearer rejected, already enabled [ 542.989654][T23148] openvswitch: netlink: nsh attr 14384 is out of range max 3 [ 542.998368][T23148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.017009][T23148] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 543.149075][T23120] tipc: Resetting bearer [ 543.303095][T23158] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4426'. [ 543.396617][T23120] tipc: Disabling bearer [ 543.648320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.661685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.725334][T23164] pim6reg1: entered allmulticast mode [ 543.762411][T21305] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 543.779873][T21305] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 543.838040][T23175] netlink: 'syz.3.4429': attribute type 23 has an invalid length. [ 543.857807][T23175] netlink: 'syz.3.4429': attribute type 21 has an invalid length. [ 543.875787][T23175] IPv6: NLM_F_CREATE should be specified when creating new route [ 544.041361][T23170] bridge2: port 1(erspan0) entered disabled state [ 544.057430][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 544.100129][T23170] erspan0: left allmulticast mode [ 544.127417][T23170] erspan0: left promiscuous mode [ 544.144522][T23170] bridge2: port 1(erspan0) entered disabled state [ 544.433334][ T8455] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 544.460910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.499990][T23170] bond0: (slave syz_tun): Releasing backup interface [ 544.521843][T23170] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.529354][T23170] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.015555][T23206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4437'. [ 545.060120][T23170] bridge_slave_0: left allmulticast mode [ 545.065995][T23170] bridge_slave_0: left promiscuous mode [ 545.072184][T23170] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.100138][T23170] bridge_slave_1: left allmulticast mode [ 545.106427][T23170] bridge_slave_1: left promiscuous mode [ 545.113144][T23170] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.139367][T23170] bond0: (slave bond_slave_0): Releasing backup interface [ 545.162874][T23170] bond0: (slave bond_slave_1): Releasing backup interface [ 545.209910][T23170] team0: Port device team_slave_0 removed [ 545.226532][T23170] team0: Port device team_slave_1 removed [ 545.237875][T23170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.256282][T23170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.274296][T23170] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 545.285524][T23170] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 545.301307][T23170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.451264][ T5736] tipc: Node number set to 1881147794 [ 545.816433][T23215] tipc: Enabled bearer , priority 0 [ 545.927398][T23227] xt_hashlimit: size too large, truncated to 1048576 [ 545.975492][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 546.107275][T23215] syzkaller0: entered promiscuous mode [ 546.128153][T23215] syzkaller0: entered allmulticast mode [ 546.148137][T23215] tipc: Resetting bearer [ 546.162181][T23219] tipc: Enabled bearer , priority 0 [ 546.225597][T23214] tipc: Resetting bearer [ 546.309961][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4444'. [ 546.711026][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4445'. [ 548.050939][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 548.748800][T23214] tipc: Disabling bearer [ 548.761476][T23243] syzkaller0: entered promiscuous mode [ 548.767461][T23243] syzkaller0: entered allmulticast mode [ 548.778795][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 548.788525][T23228] tipc: Enabling of bearer rejected, already enabled [ 548.804106][T23217] tipc: Resetting bearer [ 548.849892][T23217] tipc: Disabling bearer [ 548.912525][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4445'. [ 548.924402][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4445'. [ 549.069413][T23275] Cannot find add_set index 2 as target [ 549.148932][ T8448] tipc: Node number set to 831330848 [ 549.405357][T23287] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 549.560598][T23287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.627008][T23290] bond0: entered allmulticast mode [ 550.013091][T23314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'. [ 550.110492][T23318] tipc: Enabled bearer , priority 0 [ 550.122081][T23320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4461'. [ 550.134961][T23318] syzkaller0: entered promiscuous mode [ 550.143511][T23314] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4458'. [ 550.145893][T23320] openvswitch: netlink: Key type 12292 is out of range max 32 [ 550.164523][T23318] syzkaller0: entered allmulticast mode [ 550.189605][T23318] tipc: Enabling of bearer rejected, already enabled [ 550.228484][T23317] tipc: Resetting bearer [ 550.353594][T23317] tipc: Disabling bearer [ 550.446093][T23324] netlink: 'syz.3.4462': attribute type 10 has an invalid length. [ 550.569569][T23324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4462'. [ 550.634509][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 550.696166][T23338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4468'. [ 550.783459][T23338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4468'. [ 551.188423][T23361] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 551.211783][T23361] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 551.252017][T23361] tipc: Enabled bearer , priority 0 [ 551.476305][T23370] netlink: 'syz.3.4476': attribute type 30 has an invalid length. [ 551.522455][T23367] tipc: MTU too low for tipc bearer [ 551.869133][T23386] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.883488][T23386] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.908017][T23374] tipc: Resetting bearer [ 552.144254][T23386] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.163838][T23386] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.364473][T23386] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.392947][T23386] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.512545][T23415] netlink: 'syz.3.4483': attribute type 21 has an invalid length. [ 552.830464][T23386] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.872584][T23386] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.005558][T23433] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 553.009334][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 553.049357][T23433] tipc: Enabling of bearer rejected, already enabled [ 553.329966][T17700] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.372790][T17700] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.454067][T23451] netlink: 'syz.0.4491': attribute type 1 has an invalid length. [ 553.696074][T23451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.822881][T23456] vlan4: entered allmulticast mode [ 553.828940][T23456] bond3: entered allmulticast mode [ 553.838380][T17700] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.849226][T17700] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.858908][T23461] __nla_validate_parse: 9 callbacks suppressed [ 553.858920][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4493'. [ 553.876265][T23461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4493'. [ 553.898557][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4493'. [ 553.927174][T23461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4493'. [ 554.277878][T23460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.340901][T17700] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.362561][T17700] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.500091][T17697] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.526138][T17697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.564044][T23388] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.604720][T23388] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.804838][T23460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.826560][T17697] ================================================================== [ 554.834643][T17697] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15a/0x1550 [ 554.842197][T17697] Read of size 8 at addr ffff88807bbca2a8 by task kworker/u8:19/17697 [ 554.850343][T17697] [ 554.852671][T17697] CPU: 0 UID: 0 PID: 17697 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 554.852688][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.852702][T17697] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 554.852885][T17697] Call Trace: [ 554.852892][T17697] [ 554.852900][T17697] dump_stack_lvl+0xe8/0x150 [ 554.852924][T17697] print_address_description+0x55/0x1e0 [ 554.852950][T17697] ? __mutex_lock+0x15a/0x1550 [ 554.852969][T17697] print_report+0x58/0x70 [ 554.852984][T17697] kasan_report+0x117/0x150 [ 554.853016][T17697] ? __mutex_lock+0x15a/0x1550 [ 554.853039][T17697] __mutex_lock+0x15a/0x1550 [ 554.853059][T17697] ? look_up_lock_class+0x57/0x110 [ 554.853081][T17697] ? __mutex_lock+0x608/0x1550 [ 554.853101][T17697] ? udp_tunnel_nic_device_sync_work+0x39/0xa10 [ 554.853122][T17697] ? __pfx___mutex_lock+0x10/0x10 [ 554.853142][T17697] ? irqentry_exit+0x218/0x8b0 [ 554.853166][T17697] ? process_scheduled_works+0xa70/0x1860 [ 554.853202][T17697] udp_tunnel_nic_device_sync_work+0x39/0xa10 [ 554.853221][T17697] ? preempt_schedule_thunk+0x18/0x30 [ 554.853248][T17697] ? process_scheduled_works+0xa70/0x1860 [ 554.853265][T17697] ? process_scheduled_works+0xa70/0x1860 [ 554.853283][T17697] process_scheduled_works+0xb5d/0x1860 [ 554.853315][T17697] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.853336][T17697] ? assign_work+0x3d5/0x5e0 [ 554.853354][T17697] worker_thread+0xa53/0xfc0 [ 554.853385][T17697] kthread+0x389/0x470 [ 554.853414][T17697] ? __pfx_worker_thread+0x10/0x10 [ 554.853431][T17697] ? __pfx_kthread+0x10/0x10 [ 554.853453][T17697] ret_from_fork+0x514/0xb70 [ 554.853482][T17697] ? __pfx_ret_from_fork+0x10/0x10 [ 554.853499][T17697] ? __switch_to+0xc79/0x1410 [ 554.853525][T17697] ? __pfx_kthread+0x10/0x10 [ 554.853548][T17697] ret_from_fork_asm+0x1a/0x30 [ 554.853577][T17697] [ 554.853583][T17697] [ 555.037261][T17697] Allocated by task 23386: [ 555.041671][T17697] kasan_save_track+0x3e/0x80 [ 555.046354][T17697] __kasan_kmalloc+0x93/0xb0 [ 555.050955][T17697] __kmalloc_noprof+0x35c/0x760 [ 555.055827][T17697] udp_tunnel_nic_netdevice_event+0x4c3/0x17d0 [ 555.061980][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.067089][T17697] register_netdevice+0x18c9/0x1ec0 [ 555.072341][T17697] nsim_create+0xbed/0x1160 [ 555.076914][T17697] __nsim_dev_port_add+0x857/0xd30 [ 555.082041][T17697] nsim_dev_port_add_all+0x37/0xf0 [ 555.087151][T17697] nsim_dev_reload_up+0x45f/0x7c0 [ 555.092172][T17697] devlink_reload+0x4f8/0x8c0 [ 555.096909][T17697] devlink_nl_reload_doit+0xaaa/0xc80 [ 555.102292][T17697] genl_family_rcv_msg_doit+0x22a/0x330 [ 555.107883][T17697] genl_rcv_msg+0x61c/0x7a0 [ 555.112391][T17697] netlink_rcv_skb+0x232/0x4b0 [ 555.117152][T17697] genl_rcv+0x28/0x40 [ 555.121139][T17697] netlink_unicast+0x75c/0x8e0 [ 555.125901][T17697] netlink_sendmsg+0x813/0xb40 [ 555.130672][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.135443][T17697] ___sys_sendmsg+0x2a5/0x360 [ 555.140116][T17697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.145052][T17697] do_syscall_64+0x174/0x580 [ 555.149645][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.155539][T17697] [ 555.157861][T17697] Freed by task 23388: [ 555.161924][T17697] kasan_save_track+0x3e/0x80 [ 555.166607][T17697] kasan_save_free_info+0x46/0x50 [ 555.171630][T17697] __kasan_slab_free+0x5c/0x80 [ 555.176401][T17697] kfree+0x1c5/0x640 [ 555.180300][T17697] udp_tunnel_nic_netdevice_event+0x11ed/0x17d0 [ 555.186553][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.191671][T17697] unregister_netdevice_many_notify+0x177f/0x20c0 [ 555.198087][T17697] unregister_netdevice_queue+0x31f/0x360 [ 555.203804][T17697] nsim_destroy+0x26d/0x7f0 [ 555.208312][T17697] __nsim_dev_port_del+0x14f/0x200 [ 555.213430][T17697] nsim_dev_reload_destroy+0x288/0x490 [ 555.218886][T17697] nsim_dev_reload_down+0x8a/0xc0 [ 555.223913][T17697] devlink_reload+0x1eb/0x8c0 [ 555.228597][T17697] devlink_nl_reload_doit+0xaaa/0xc80 [ 555.233971][T17697] genl_family_rcv_msg_doit+0x22a/0x330 [ 555.239527][T17697] genl_rcv_msg+0x61c/0x7a0 [ 555.244031][T17697] netlink_rcv_skb+0x232/0x4b0 [ 555.248791][T17697] genl_rcv+0x28/0x40 [ 555.252778][T17697] netlink_unicast+0x75c/0x8e0 [ 555.257543][T17697] netlink_sendmsg+0x813/0xb40 [ 555.262310][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.267073][T17697] ___sys_sendmsg+0x2a5/0x360 [ 555.271750][T17697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.276690][T17697] do_syscall_64+0x174/0x580 [ 555.281278][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.287172][T17697] [ 555.289502][T17697] Last potentially related work creation: [ 555.295206][T17697] kasan_save_stack+0x3e/0x60 [ 555.299884][T17697] kasan_record_aux_stack+0xbd/0xd0 [ 555.305084][T17697] insert_work+0x3d/0x330 [ 555.309409][T17697] __queue_work+0xbba/0x1040 [ 555.314004][T17697] queue_work_on+0x106/0x1d0 [ 555.318593][T17697] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 555.324223][T17697] udp_tunnel_push_rx_port+0x169/0x1f0 [ 555.329692][T17697] geneve_offload_rx_ports+0xc7/0x150 [ 555.335137][T17697] geneve_netdevice_event+0x6a/0x80 [ 555.340333][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.345449][T17697] call_netdevice_notifiers+0x90/0xd0 [ 555.350865][T17697] udp_tunnel_nic_netdevice_event+0xdef/0x17d0 [ 555.357016][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.362124][T17697] register_netdevice+0x18c9/0x1ec0 [ 555.367323][T17697] nsim_create+0xbed/0x1160 [ 555.371832][T17697] __nsim_dev_port_add+0x857/0xd30 [ 555.376952][T17697] nsim_dev_port_add_all+0x37/0xf0 [ 555.382064][T17697] nsim_dev_reload_up+0x45f/0x7c0 [ 555.387085][T17697] devlink_reload+0x4f8/0x8c0 [ 555.391769][T17697] devlink_nl_reload_doit+0xaaa/0xc80 [ 555.397141][T17697] genl_family_rcv_msg_doit+0x22a/0x330 [ 555.402690][T17697] genl_rcv_msg+0x61c/0x7a0 [ 555.407195][T17697] netlink_rcv_skb+0x232/0x4b0 [ 555.411963][T17697] genl_rcv+0x28/0x40 [ 555.415945][T17697] netlink_unicast+0x75c/0x8e0 [ 555.420704][T17697] netlink_sendmsg+0x813/0xb40 [ 555.425465][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.430228][T17697] ___sys_sendmsg+0x2a5/0x360 [ 555.434903][T17697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.439841][T17697] do_syscall_64+0x174/0x580 [ 555.444435][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.450325][T17697] [ 555.452653][T17697] Second to last potentially related work creation: [ 555.459229][T17697] kasan_save_stack+0x3e/0x60 [ 555.463911][T17697] kasan_record_aux_stack+0xbd/0xd0 [ 555.469107][T17697] insert_work+0x3d/0x330 [ 555.473430][T17697] __queue_work+0xcef/0x1040 [ 555.478022][T17697] queue_work_on+0x106/0x1d0 [ 555.482613][T17697] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 555.488246][T17697] udp_tunnel_push_rx_port+0x169/0x1f0 [ 555.493720][T17697] vxlan_offload_rx_ports+0x129/0x1f0 [ 555.499182][T17697] vxlan_netdevice_event+0x111/0x480 [ 555.504475][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.509592][T17697] call_netdevice_notifiers+0x90/0xd0 [ 555.514968][T17697] udp_tunnel_nic_netdevice_event+0xdef/0x17d0 [ 555.521121][T17697] notifier_call_chain+0x1ad/0x3d0 [ 555.526231][T17697] register_netdevice+0x18c9/0x1ec0 [ 555.531432][T17697] nsim_create+0xbed/0x1160 [ 555.535941][T17697] __nsim_dev_port_add+0x857/0xd30 [ 555.541050][T17697] nsim_dev_port_add_all+0x37/0xf0 [ 555.546165][T17697] nsim_dev_reload_up+0x45f/0x7c0 [ 555.551194][T17697] devlink_reload+0x4f8/0x8c0 [ 555.555877][T17697] devlink_nl_reload_doit+0xaaa/0xc80 [ 555.561262][T17697] genl_family_rcv_msg_doit+0x22a/0x330 [ 555.566824][T17697] genl_rcv_msg+0x61c/0x7a0 [ 555.571336][T17697] netlink_rcv_skb+0x232/0x4b0 [ 555.576113][T17697] genl_rcv+0x28/0x40 [ 555.580104][T17697] netlink_unicast+0x75c/0x8e0 [ 555.584880][T17697] netlink_sendmsg+0x813/0xb40 [ 555.589647][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.594430][T17697] ___sys_sendmsg+0x2a5/0x360 [ 555.599119][T17697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.604058][T17697] do_syscall_64+0x174/0x580 [ 555.608656][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.614557][T17697] [ 555.616881][T17697] The buggy address belongs to the object at ffff88807bbca200 [ 555.616881][T17697] which belongs to the cache kmalloc-256 of size 256 [ 555.630928][T17697] The buggy address is located 168 bytes inside of [ 555.630928][T17697] freed 256-byte region [ffff88807bbca200, ffff88807bbca300) [ 555.644722][T17697] [ 555.647046][T17697] The buggy address belongs to the physical page: [ 555.653462][T17697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbca [ 555.662220][T17697] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 555.670733][T17697] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 555.678282][T17697] page_type: f5(slab) [ 555.682261][T17697] raw: 00fff00000000040 ffff88813fe19b40 dead000000000100 dead000000000122 [ 555.690839][T17697] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 555.699425][T17697] head: 00fff00000000040 ffff88813fe19b40 dead000000000100 dead000000000122 [ 555.708092][T17697] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 555.716763][T17697] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 555.725428][T17697] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 555.734092][T17697] page dumped because: kasan: bad access detected [ 555.740503][T17697] page_owner tracks the page as allocated [ 555.746214][T17697] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7911, tgid 7903 (syz.2.509), ts 127144560311, free_ts 127129941299 [ 555.766874][T17697] post_alloc_hook+0x22d/0x280 [ 555.771648][T17697] get_page_from_freelist+0x2593/0x2610 [ 555.777188][T17697] __alloc_frozen_pages_noprof+0x18d/0x380 [ 555.782992][T17697] allocate_slab+0x77/0x660 [ 555.787504][T17697] refill_objects+0x339/0x3d0 [ 555.792181][T17697] __pcs_replace_empty_main+0x321/0x720 [ 555.797731][T17697] __kmalloc_noprof+0x474/0x760 [ 555.802585][T17697] hash_ipportip6_resize+0xcab/0x1d20 [ 555.808025][T17697] call_ad+0x463/0xb60 [ 555.812122][T17697] ip_set_ad+0x824/0x9d0 [ 555.816365][T17697] nfnetlink_rcv_msg+0xc03/0x12c0 [ 555.821413][T17697] netlink_rcv_skb+0x232/0x4b0 [ 555.826183][T17697] nfnetlink_rcv+0x2c0/0x27b0 [ 555.830859][T17697] netlink_unicast+0x75c/0x8e0 [ 555.835620][T17697] netlink_sendmsg+0x813/0xb40 [ 555.840384][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.845146][T17697] page last free pid 7957 tgid 7951 stack trace: [ 555.851464][T17697] __free_frozen_pages+0xc1c/0xd30 [ 555.856579][T17697] __slab_free+0x274/0x2c0 [ 555.861001][T17697] qlist_free_all+0x99/0x100 [ 555.865596][T17697] kasan_quarantine_reduce+0x148/0x160 [ 555.871059][T17697] __kasan_slab_alloc+0x22/0x80 [ 555.875915][T17697] __kmalloc_noprof+0x316/0x760 [ 555.880770][T17697] sock_kmalloc+0xd6/0x160 [ 555.885249][T17697] af_alg_sendmsg+0x1177/0x2650 [ 555.890144][T17697] ____sys_sendmsg+0x972/0x9f0 [ 555.894925][T17697] ___sys_sendmsg+0x2a5/0x360 [ 555.899622][T17697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.904580][T17697] do_syscall_64+0x174/0x580 [ 555.909182][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.915083][T17697] [ 555.917420][T17697] Memory state around the buggy address: [ 555.923081][T17697] ffff88807bbca180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 555.931148][T17697] ffff88807bbca200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 555.939217][T17697] >ffff88807bbca280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 555.947280][T17697] ^ [ 555.952651][T17697] ffff88807bbca300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 555.960721][T17697] ffff88807bbca380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 555.968789][T17697] ================================================================== [ 556.084760][T17697] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 556.091994][T17697] CPU: 0 UID: 0 PID: 17697 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 556.101631][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.111690][T17697] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 556.118981][T17697] Call Trace: [ 556.122257][T17697] [ 556.125191][T17697] vpanic+0x56c/0xa60 [ 556.129176][T17697] ? __pfx_vpanic+0x10/0x10 [ 556.133689][T17697] panic+0xc5/0xd0 [ 556.137421][T17697] ? __pfx_panic+0x10/0x10 [ 556.141853][T17697] ? preempt_schedule_thunk+0x16/0x30 [ 556.147235][T17697] ? __mutex_lock+0x15a/0x1550 [ 556.152000][T17697] ? preempt_schedule_thunk+0x16/0x30 [ 556.157375][T17697] ? __mutex_lock+0x15a/0x1550 [ 556.162143][T17697] check_panic_on_warn+0x89/0xb0 [ 556.167091][T17697] ? __mutex_lock+0x15a/0x1550 [ 556.171854][T17697] end_report+0x73/0x170 [ 556.176099][T17697] ? __mutex_lock+0x15a/0x1550 [ 556.180862][T17697] kasan_report+0x128/0x150 [ 556.185367][T17697] ? __mutex_lock+0x15a/0x1550 [ 556.190135][T17697] __mutex_lock+0x15a/0x1550 [ 556.194729][T17697] ? look_up_lock_class+0x57/0x110 [ 556.199864][T17697] ? __mutex_lock+0x608/0x1550 [ 556.204636][T17697] ? udp_tunnel_nic_device_sync_work+0x39/0xa10 [ 556.210877][T17697] ? __pfx___mutex_lock+0x10/0x10 [ 556.215901][T17697] ? irqentry_exit+0x218/0x8b0 [ 556.220670][T17697] ? process_scheduled_works+0xa70/0x1860 [ 556.226391][T17697] udp_tunnel_nic_device_sync_work+0x39/0xa10 [ 556.232470][T17697] ? preempt_schedule_thunk+0x18/0x30 [ 556.237857][T17697] ? process_scheduled_works+0xa70/0x1860 [ 556.243573][T17697] ? process_scheduled_works+0xa70/0x1860 [ 556.249298][T17697] process_scheduled_works+0xb5d/0x1860 [ 556.254871][T17697] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.260855][T17697] ? assign_work+0x3d5/0x5e0 [ 556.265443][T17697] worker_thread+0xa53/0xfc0 [ 556.270042][T17697] kthread+0x389/0x470 [ 556.274113][T17697] ? __pfx_worker_thread+0x10/0x10 [ 556.279222][T17697] ? __pfx_kthread+0x10/0x10 [ 556.283816][T17697] ret_from_fork+0x514/0xb70 [ 556.288412][T17697] ? __pfx_ret_from_fork+0x10/0x10 [ 556.293520][T17697] ? __switch_to+0xc79/0x1410 [ 556.298206][T17697] ? __pfx_kthread+0x10/0x10 [ 556.302802][T17697] ret_from_fork_asm+0x1a/0x30 [ 556.307575][T17697] [ 556.311234][T17697] Kernel Offset: disabled [ 556.315557][T17697] Rebooting in 86400 seconds..