last executing test programs: 2.232562474s ago: executing program 2 (id=4901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0xfffffffffffffdb7, 0x1a, 0x713, 0x0, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x8000, 0x2, 0xfffffffffffffffe, 0x0, 0xffff}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "b1dace2fc5a82cd02beec7d1bf9f5807c1981dc4404ac84eeec0f8a943a182b9ec14db69baf9700f9dd64688996db30615550b91229b81c7c2d29e5b3dc0fad31179333658c4ee0e47a75f7c96e6d44a8f25a13ddc2810dda75e12b635e127b75f1dbfc62e7a7589f7103aee30add5ba9ddc631aa012e70486e5639110ab813256"}}]}, 0x1bc}}, 0x0) 2.056677972s ago: executing program 4 (id=4905): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) (async) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) syz_emit_ethernet(0x83, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x4d, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @opaque="f7a8080887faa66d31fff63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783ca6bb213639ed583dece835a51fa9c5a076757d783"}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb023}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async) poll(&(0x7f0000000340)=[{r0, 0xa5}], 0x20000000000000ca, 0x4) 1.952612535s ago: executing program 2 (id=4907): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ebff00000871d88df4896ce8d3357ffc3bfef7a85d140000009500008e2528677ca20134ef4dac0370163be7882a9de231766edf57f24ca7278da57cb91f21a266844eb228374c33a1e98b157c747dda306c9f45e8620b4a09f3055e96c92b09"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ebff00000871d88df4896ce8d3357ffc3bfef7a85d140000009500008e2528677ca20134ef4dac0370163be7882a9de231766edf57f24ca7278da57cb91f21a266844eb228374c33a1e98b157c747dda306c9f45e8620b4a09f3055e96c92b09"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x35, 0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x51, 0x30, 0x0, 0x30]}}, &(0x7f0000000b80)=""/53, 0x33, 0x35, 0x0, 0x1ff, 0x10000}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xbe3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x40000002}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x4041) (async) sendmmsg$unix(r4, 0x0, 0x0, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x7, 0xe, 0x20000, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x68, &(0x7f0000000480)=""/104, 0x41000, 0xd, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x0, 0x14, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000840)=[r6, r8, r9, r10], &(0x7f0000000880)=[{0x4, 0x1, 0x0, 0xb}, {0x4, 0x1, 0x7, 0x1}, {0x2, 0x5, 0xf, 0x9}, {0x3, 0x1, 0x6}, {0x4, 0x5, 0xb}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b0400000000000000000200ffff5c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000001608000240000000100900010073797a30000000000900020073797a32"], 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b0400000000000000000200ffff5c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000001608000240000000100900010073797a30000000000900020073797a32"], 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.950507638s ago: executing program 4 (id=4909): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x47b4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000000)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16], 0x5c}, 0x1, 0x620b}, 0x0) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e21, 0x0, @local}, 0x0, {[0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000180)) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000001c0)="1b68e31dbb3181cc8e6bb900fa27a6d7", 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="94", 0x1}], 0x1}}], 0x1, 0x4000800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) 1.65192522s ago: executing program 4 (id=4912): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x192c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18fc, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_ACT={0x18c8, 0x9, 0x0, 0x1, [@m_police={0x11b8, 0x1, 0x0, 0x0, {{0xb}, {0x112c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x27}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x1, 0x1000, 0x9, 0x0, {0x2, 0x2, 0x7, 0x5, 0x4, 0x1}, {0x5c, 0x0, 0x9, 0x3, 0xf3, 0x1f6a}, 0x6, 0x1, 0xffffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x10, 0xe0000, 0x7, 0x4, 0x6, 0x8, 0xfffffff8, 0x7, 0x788, 0x5, 0xc, 0x800, 0x10, 0x7ff, 0x8001, 0x315, 0x1, 0x3b9bc5f0, 0x0, 0x2, 0x934f, 0x2, 0x5, 0x81, 0x8, 0x0, 0x10, 0x4, 0x4, 0xb, 0x9, 0x10001, 0xffff40d5, 0xf0000000, 0x6, 0x5, 0x7fff, 0x71, 0x51, 0x70000, 0x9, 0x0, 0x200, 0x1ad, 0x8, 0x7, 0x8, 0x5, 0x69b, 0x1ff, 0x1, 0x3, 0x3, 0x280000, 0x9, 0x9, 0x0, 0x0, 0x9, 0xf12, 0x1ff, 0x8, 0x7fff, 0x5, 0x1, 0x24, 0xffffffff, 0x1000, 0x5544, 0x3, 0x2, 0x5, 0x8, 0x7ff, 0x8001, 0x2, 0x10, 0x0, 0x9, 0x7, 0xf1d, 0x101, 0x4cd, 0x2, 0x6, 0x6, 0xeb06, 0x2, 0x2, 0x1, 0x7fff, 0xfff, 0xffffffff, 0xd54, 0x10001, 0xb1, 0x1, 0x200, 0x1000, 0x3, 0x5, 0x4, 0x7, 0x6, 0xffffffff, 0x1255e272, 0x8, 0x6, 0x5, 0x0, 0x9, 0x563, 0xa5, 0xae89, 0x3, 0x3ff, 0x3a, 0x5, 0x3, 0x7fff, 0x10000, 0x1, 0x7, 0x3, 0x6, 0x10001, 0x2, 0x9, 0x4, 0x9, 0x7, 0x0, 0xfffff000, 0x2b, 0x7, 0x5, 0x1, 0x2, 0x9, 0x5, 0x0, 0xb12, 0x6, 0x7, 0x40, 0x1, 0x1, 0x2615a174, 0x7, 0x2, 0x9, 0x80, 0x8000, 0x2, 0x7ff, 0x5, 0x8, 0x6, 0x4, 0x9f, 0x2, 0x2, 0x8, 0x3, 0x7, 0x2, 0x4, 0x0, 0xabde, 0x5, 0x8, 0x4b, 0x7, 0x4, 0x8, 0x8001, 0xa02, 0x4, 0x9, 0xffffffff, 0x5, 0xb4, 0x4, 0xdc8, 0xe, 0xf, 0x80000000, 0x6, 0x9, 0x68, 0x80000001, 0xe, 0x0, 0xfffffff8, 0x7ff, 0x2, 0x2, 0x8, 0x7fffffff, 0x7, 0x4, 0x8, 0x6, 0x3cf, 0x2, 0x7, 0x9, 0x7ff, 0x1, 0x3, 0x5, 0x9, 0x1, 0xb47, 0xfff, 0x2, 0x5, 0x4, 0x7, 0x7, 0x3ff, 0x100, 0xf027, 0x3, 0x6, 0x4, 0x7, 0x8, 0x26, 0x5, 0x401, 0x1, 0xa6, 0x0, 0xb34, 0xffff, 0x4, 0x3, 0xa, 0x7fff, 0xc27, 0x5, 0xfffffff7, 0x9, 0x9, 0x8, 0x7, 0xd6, 0x7, 0x6, 0x2, 0x4, 0x1, 0x7fff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xda06e244b4245425, 0xe0, 0xc0000000, 0x9, {0xe2, 0x1, 0x100, 0x9, 0x1ff, 0x3}, {0xe, 0x0, 0x1, 0x8, 0xf000}, 0xa579, 0x7, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa6}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0xfea5, 0x1, 0x0, 0x10, 0xe, 0x401, 0x4, 0x4cd1, 0x0, 0x3f6caea0, 0x7, 0x0, 0x9d, 0x8, 0x2, 0x808, 0x6, 0x800000, 0xff, 0x7, 0x80, 0x81, 0x3, 0xfd7d, 0x6, 0x9, 0x7, 0x9, 0x3, 0x8, 0x0, 0x5, 0x7, 0x5, 0xa, 0x6, 0xc, 0x20000000, 0xa7d6, 0x126, 0x3, 0x7, 0x3, 0x0, 0x6, 0xf1cd, 0x4014, 0x8b79, 0x5d6f, 0x6, 0x93e1, 0x9, 0x6, 0x7fff, 0x6, 0x7, 0xcc, 0x10001, 0x6, 0x0, 0xffff, 0x3800000, 0x10001, 0x9, 0x3, 0x6, 0x3, 0xa69, 0x8, 0x1, 0xfeb, 0x32, 0x0, 0x8, 0x40, 0xd91, 0x5, 0xd23, 0x7fff, 0x80, 0x9c, 0x9000, 0x1e48, 0x5, 0x0, 0x4, 0x80000000, 0x98da, 0x3ff, 0x4, 0x2, 0x9, 0x3, 0xef2, 0xfff, 0x8, 0x1, 0xffffffc0, 0x6, 0xc, 0x8, 0x1, 0x338, 0x2, 0x1, 0x8, 0x8001, 0x7, 0x0, 0xd, 0x5, 0x6, 0x5, 0x8, 0x7ff, 0x10001, 0xabcb, 0x62b, 0x53, 0x2, 0x4, 0xfffff95a, 0x8, 0xffff7fff, 0x7ff, 0x1, 0x1, 0x3, 0x3, 0xfffffffc, 0xd4, 0xff, 0x1, 0x1ff, 0x3, 0x4, 0x5, 0xf, 0x8000, 0x7, 0x8, 0x3, 0x9, 0x0, 0x8, 0x9, 0x9, 0x12, 0xfffffffd, 0x3, 0x10, 0x7b0, 0x1, 0x8, 0x8, 0x3, 0x80, 0xbe9, 0xfffffc01, 0xffff6cd8, 0x7, 0x0, 0xe4f, 0xfffffff9, 0x4, 0x3, 0x1ff, 0xbd2f, 0x5, 0x4, 0x8, 0x1, 0x1e, 0x8, 0x31, 0x41, 0x401, 0xe4c, 0x40, 0x5, 0x80000fd, 0xb10, 0x0, 0x9, 0x8001, 0xa863, 0xffff, 0x80, 0x80000000, 0x2, 0x1, 0x9, 0x4, 0x7f, 0x3, 0x7ff, 0x9, 0x2, 0x7, 0x2, 0xc9d8, 0x125, 0xfffffff9, 0x80000000, 0x73, 0x3, 0xb7a, 0x7fffffff, 0x7, 0x544, 0x5, 0x5, 0x3, 0xfff, 0x6, 0xff, 0x1e, 0x3d8, 0x9, 0x437, 0x0, 0x3, 0xfffffff7, 0x8, 0x8, 0x4a118915, 0x0, 0x7, 0x7fffffff, 0x280000, 0xfffff00a, 0x6, 0x1, 0x4, 0xffffffff, 0x81, 0x2, 0x81, 0x3, 0x187, 0x9, 0x6, 0xfff, 0xd, 0xfffffffd, 0x5, 0xfffffff7, 0xc, 0x6, 0x0, 0xfffffffa, 0x101, 0xde, 0xee8, 0x6]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfac}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7b3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x10, 0x4, 0xd89, 0x0, 0x0, 0xd, 0x0, 0xdb, 0x0, 0x3, 0x4, 0x2, 0x0, 0xffffdffd, 0x5, 0x3, 0x4, 0x101, 0x0, 0x4, 0x5, 0x7, 0x8d36, 0x7f, 0xfff, 0xbe19, 0x1, 0x2, 0x8, 0xf, 0x800, 0x2, 0x6, 0xd, 0x8, 0x2, 0x7, 0x1, 0x5, 0x4, 0x9, 0x9, 0xff, 0x80000000, 0x4, 0x9, 0xe, 0x41, 0x3, 0xf1b, 0x6, 0x9, 0x4, 0x3, 0x10001, 0x5, 0x9, 0x7, 0x706, 0x4, 0x3, 0xfffff6ff, 0x6, 0xe79, 0x2, 0xd, 0x81, 0x7, 0x0, 0xe00, 0x40, 0x9, 0x0, 0x3, 0x5, 0x5, 0xe, 0x7, 0x3ff, 0x101, 0x8, 0x1ff, 0x7, 0x10001, 0x5, 0xd01, 0x0, 0x5, 0x6, 0x7, 0xfa8, 0x1ff, 0x0, 0x3, 0xb76ffb0e, 0x3ff, 0x0, 0x3, 0x0, 0xb, 0x8, 0x8, 0x3f5a, 0xa, 0x7fff, 0xffff0001, 0x4, 0x80000001, 0x3ff, 0x8, 0x9, 0x8, 0x8, 0x260f, 0x9, 0x1, 0x1, 0x9, 0x80000000, 0x6, 0xffff, 0x3, 0x4, 0xd, 0x3, 0xa9, 0x2, 0x7, 0x7fffffff, 0x2, 0x1, 0x1e, 0xffff, 0x4460, 0x5, 0x7f, 0x1, 0x1, 0xd, 0xffff, 0x7, 0x2, 0x5, 0x2, 0x3, 0x43, 0x5, 0x4, 0x8, 0x5, 0x6f05, 0x5, 0x5, 0x1, 0x6, 0x5, 0xa, 0x9, 0x9, 0xf, 0xa, 0x81, 0x4, 0x7, 0x1d, 0x0, 0x46a08937, 0xb, 0x9fb, 0xb, 0x3, 0x3, 0xfffffff7, 0x0, 0x10001, 0xfffff000, 0x2, 0x3, 0x8000, 0x81, 0x9, 0x8000, 0x80, 0x9, 0x78, 0x0, 0x7, 0x61, 0x4, 0x7, 0x8, 0xffffff59, 0x7, 0x40, 0x9, 0x2, 0x2, 0x6, 0xffff, 0x6, 0x5, 0x8, 0x7f, 0x0, 0x800, 0x5, 0x9, 0x0, 0x3, 0xaec, 0x10000, 0x3, 0x9, 0xff, 0x8, 0x7fffffff, 0x3, 0x7, 0x3, 0x7, 0x10000, 0x9, 0x1583, 0x196, 0x5, 0x51, 0x5a800000, 0x9, 0x2, 0x40, 0x200, 0x80000001, 0x9, 0x7, 0x8001, 0x7, 0x0, 0x7, 0xffffffff, 0x5, 0x6, 0x97c4, 0x4, 0x1, 0x2, 0x401, 0x80000000, 0x646, 0x2, 0x5cb8, 0x1, 0xa1c, 0x7, 0x7f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x69b}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4428ad4f}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xcf, 0x96, 0x17, 0x7ff, 0x5, 0xffffffff, 0xffffffff, 0x4, 0x8, 0x6, 0x9, 0x0, 0xac17, 0x426, 0xea2, 0x4, 0x5, 0x6, 0xb, 0xe4, 0xf, 0x9, 0x2, 0x7, 0x3, 0x2, 0x62, 0x2, 0x6, 0xfffffff8, 0x0, 0x7a6, 0x7fff, 0x9, 0x0, 0x2, 0x2, 0x3, 0xb, 0x2, 0x6, 0x4, 0x6, 0x0, 0xfffffff7, 0xc9ae, 0x0, 0x2, 0xa8c, 0x7, 0x7, 0x81, 0x1, 0x4, 0x4, 0xfff, 0x29b, 0x7, 0x0, 0xfffffffd, 0x6, 0x101, 0x5d05, 0x100, 0xf872, 0x0, 0x6a, 0xfffffffd, 0x0, 0x10000, 0x4, 0x200, 0x53, 0x401, 0xffffffb9, 0x17, 0x5, 0xffffffff, 0x7ff, 0xa9c, 0xffffffff, 0x401, 0x1, 0x3ff, 0x7fff, 0xffffffff, 0x8, 0x9, 0x2779, 0x5, 0x5, 0x80, 0xff, 0x0, 0x4607, 0x3f12, 0x0, 0x78, 0x8, 0x5, 0x96, 0xe, 0x7ff, 0x9b, 0x8, 0x4, 0x0, 0xb0, 0xf3c1, 0x6, 0x2, 0x40006, 0x7ff, 0x3, 0x6491, 0x20, 0x0, 0x4f, 0x1, 0x3, 0xfff, 0x8, 0x4, 0x1, 0xf, 0x7, 0x10000, 0x5, 0x1, 0x8, 0xa, 0x1, 0x6, 0x4a, 0x6, 0x1, 0x7fff, 0xff5, 0x3, 0x2, 0x1, 0xffffffff, 0x659, 0x7, 0x3, 0x7, 0x6f, 0x4, 0x8, 0xfffffffd, 0x6, 0x6, 0x4000000, 0x4, 0x0, 0x7, 0x8001, 0x8, 0x5, 0x9, 0x5, 0x6, 0x4, 0xa32, 0x10, 0x8060, 0x4, 0x643, 0x475, 0x2, 0x80, 0xf, 0x8, 0xff, 0xfffffff8, 0x1, 0x6, 0xd5a, 0xfffffffe, 0x4, 0x2, 0xfffffff9, 0x100, 0x4c, 0x4, 0x7f, 0xfffffffe, 0x3, 0xfffffffb, 0x0, 0x4, 0x1, 0x4, 0x9, 0x6, 0x4, 0x80a6, 0x5, 0x5, 0x7fff, 0x6, 0x8, 0xc9, 0x2, 0x7, 0x9, 0x1, 0x80, 0x1ff, 0x2, 0x100, 0x8, 0x6c12, 0x1, 0x6, 0x6, 0x101, 0x3ff, 0x2, 0x5, 0xe12, 0xb, 0xfe000000, 0x5, 0x52bb302d, 0xfffffffc, 0x3ff, 0x3, 0xa9, 0x3, 0x2, 0x6d3, 0x6, 0x5, 0x3, 0x7, 0x0, 0x3, 0x5, 0x7f, 0x8, 0x9, 0xffffffe5, 0x1, 0x2, 0x400, 0x3, 0x7, 0x0, 0x0, 0x80, 0x1, 0x5, 0x0, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa727}]]}, {0x64, 0x6, "b64d5c7797f3c8c278d083efd27c8f4fd2d364b6f17ca059274e2be35f88b17f76fc506438e6bacb0aa480ae1a0daa1164bd54c9e03f436e149760f218ae512f8ae7f77976fe96ab0687f1e4edba006067ea4c6ed1269e5da08aba3998760fb8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_nat={0x25c, 0x7, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffff80, 0x9, 0x4, 0x1, 0x800}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x5, 0x8, 0x5, 0x100}, @remote, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x5, 0x7, 0xa}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8001, 0x10000000, 0xbcb6}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x6, 0xf, 0x6}, @broadcast, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x2, 0x9, 0x80}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x4, 0x5, 0x8}, @multicast2, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x0, 0x4, 0x1b6, 0x1}, @multicast1, @broadcast, 0xffffffff, 0x1}}]}, {0xf3, 0x6, "0360c570037ec9547a2b001ce4e475adc587d8a31a5f4d9add86cf0b02fc0d8a1f2a7587f5237e62b804c3a30db0a2bffd37fe5fe763a0b12e99fa764d185b54cc57d1f51cf04e877791ef969efbaa8de6327fc8389d5a8059eae43c5f07fa9294358bfb3f5beab3bdb560d1ff7b02b0d389260a3ac059b5049d48ff96e63da4d13b186c1dc3a62b4ff045779be4698cc45fcfbf5911b68dfc24320543c3ac89e16aae5a2a3f84b09de1c0084d860b954492cbd8b70c0f2959fffeeba3ca6d995b04ce9a8fafe400b741ac546baffdef58f53d78823f9ba25200bb296bbc93ee8b97e9b099cb648b5f3e337283433f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xc4, 0x1f, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd5e6, 0x3, 0x0, 0xe, 0xf}, 0xd}}]}, {0x71, 0x6, "5f9506c1dcece2a4f4bcff2e0f30e832a6578f22275927c7fe877ab93774f963a9ce50cfc7f33dda897aa0523c5e3e974c6d3ce6ad1adfa0eeec0261da45c5707cf622ee764c34c95d49ff65f805d46fcfb2edb3bf481ba77164e310a38c4faf36ed3e5958edc1766b44c742a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1a8, 0x3, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x39b6, 0x800, 0x3, 0x29, 0x9}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x0, 0x3, 0x8}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0xc, 0x2}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x1, 0x6, 0x80000001}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfba, 0x5, 0x8, 0x9, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x4, 0x8, 0x6}, 0x3, r2}}]}, {0xbb, 0x6, "73cf81edf44b1a71fc78a5a29a8b18b645a656be2b8caa4484ef5e4d735059b38c5a22a025c59879110d8bbd28fe8762b21bccd44609bdd01734fcf7f61b2bb8397f9220ea0c4ff8d73f97d8ef2d4c7266942ba8a5e55725d150bc634c00bb9426b2fa9b8c4c3f5b24c005132ffea2ce01572c4cb7024c8c8711025cff0122ec269748700df6cefee78c7cb2ce3d8ac65d8582d2c4e64aaa89d0d31dd1a2b3f34404d58bcc759802e3063ce82a0732ec0b9ac4635fc4d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x80, 0xe, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x40, 0x6, "67333780f2daa7f2854e667650996207a6e60fef159af5991a9d536202c985d39c8aadafe9f17019b69939d5896f0717c5321da791016957de53dbba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x108, 0x9, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x980a2ce9c0fca27e, 0x9, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x994}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x72b}]}, {0xa7, 0x6, "4538631b84abbe68ac2bb11d2521f167750d566e80d396449355636a0f8880f5146d04bf2e4a37b24521aa1e445f2c7ab5881d08658c8147db7054dde93e94684429a5db9824c6a30a2ee1840c9c77098cefba0e779a60babc015d3394775786320fda8510c6285ff3f52f834126ebdc46d9528ccf6c87b9345bfa4adae21d7dbcc50e4d2e51db13d9200d67d0a216bd4c3cdebf9ec07a4aff1689cbb348d09ed1a880"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0xbc, 0x16, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x100000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x96bf, 0x7, 0x5, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffff}]}, {0x40, 0x6, "5485b6b842d943fb8c917ff64ddead5052c93600db0fa059be86649d8941aa8363ad86efb426a7de126171a9a3d47b5518d4655060ef95cc5e88aa8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x192c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000209000a0000000400000000000000271db64e6cdc79e61f7b5fa7152bb5b5080900010073797a30000000000800054000000003"], 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a874582e700010073797a31000000002c0004802800018007000100637400001c0002800500030800000000080001400000001708000240000000140900020073797a3200000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000340), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.372788696s ago: executing program 3 (id=4917): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x7}, @void}}}, 0x1c}, 0x1, 0x6c00, 0x0, 0x4040000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000000)="8134", &(0x7f0000000080)=""/66, &(0x7f0000000100)="88ed1938395cfe82430177090ecedbf9533f3f68718e1cb32681456281207787ad169ec3e6dc52a7bd55c6f520f13b77793dd0f617f1e510a7c2c36f5fc9d9967ed2c1063131752f2ba0538440523d5964cd3107b25a483b4213e8a025d719f781b38905cf0b9cd7058a5f122f0fe65f6f3b4a5a445b3881038b85032d1481359c48d6eaa9c26be9bebae8a2449f8876197088c2a1faca8072aaf447d0910992bf3127a114d4bf4090c120a1ef5aa5986b173aaa6bf3dcd425d5ddf61439c9d4a08fc523e11cc70c0ea6409b45c7621c3a4c9ed3ebc3bd0e1843dec2ff79f7f6d0acfbad1b661ce9e9f3f0590e34e93c894a4d3863", &(0x7f0000000240)="40ca2a5821", 0x50, 0x1}, 0x38) 1.37016619s ago: executing program 1 (id=4918): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'none\x00', 0x3, 0x81, 0x1}, {@private=0xa010100, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x67}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a8f08e70d7b1659b4c55333be7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a3c09b459d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x90) r7 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{}, [@remote, @null, @bcast, @rose, @rose, @default, @netrom, @bcast]}, &(0x7f0000000080)=0x80, 0x40000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000007c0)=0x1, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe8, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0xfffffd1c, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.362490183s ago: executing program 4 (id=4919): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0x0, @private2, 0x6}}, [0x8, 0x8, 0x10, 0x5, 0x0, 0x0, 0x200, 0x7, 0x2, 0x3, 0x0, 0x0, 0xde, 0x10001, 0x2]}, &(0x7f0000000180)=0x100) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x1da}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x1da}, &(0x7f0000000240)=0x8) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@private, @dev, @empty}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@private, @dev, @empty}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)={0x73, 0x10, 0x0, 0x0, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x88) r4 = socket$inet(0x2, 0x800, 0x8000) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000003c0)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000003c0)={0x80}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r2, 0x4) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r2, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000004c0)=0x2b51, 0x4) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000004c0)=0x2b51, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r1}, &(0x7f0000000540)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r1}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000580)={0x3, 0x0, 0x5, 0x57c8}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={0x0, 0x3865}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000640)={r2, 0x3}, 0x8) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000680)=""/229, &(0x7f0000000780)=0xe5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000007c0)={r1, 0x9}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000800)={0x1f, 0x1, @none, 0x7ee2}, 0xe) (async) connect$bt_l2cap(r5, &(0x7f0000000800)={0x1f, 0x1, @none, 0x7ee2}, 0xe) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000008c0)={0x7, 'bridge0\x00', {0x7fd2}, 0x4}) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000900)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000940)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000980)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b40)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0x5, 0x7, 0x3, 0xffffffffffffffff, 0xa6, 0x937000, 0x5beed83c, 0x3, 0x8, 0x9, 0x1, 0x569, 0xcf, 0xaf]}, &(0x7f0000000c40)=0x100) 1.350596206s ago: executing program 0 (id=4920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x7, 0x2, 0x3, 0x0, 0x2}, @ldst={0x0, 0x3, 0x4, 0x6, 0x8, 0xfffffffffffffff0, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000014008f4e04a1900975f500000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff02000000000000000000000000000108000800020700"], 0x34}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@private2, 0x1b, r4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e}, 0x1c) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'macvlan1\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x36, 0x4) 1.176662544s ago: executing program 3 (id=4921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020f90000000000000000000000000000acfe13aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x40, 0x40, 0x4, 0x5, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x66, 0x0, 0xa8, 0x4, 0x0, @private=0xa010102, @multicast2, {[@noop, @timestamp={0x44, 0x14, 0xe0, 0x0, 0x4, [0x2326027f, 0x80000001, 0xfff, 0x0]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000004440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004400)={&(0x7f0000001f80)={0x2480, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x45, 0x3, "2ac27122053bb5f110318235c70f70ec0f2290e0db74c51c2ea949a9dbda92e1e29ffd8e58c3aeb071727876cb638a15c36d6ed4582335f7c419e4d29caf2a5a32"}, @ETHTOOL_A_WOL_SOPASS={0xd1, 0x3, "6af920fcc5937b3983f9dbc5a9bc62c744b822d424e84a20c02d1d24bc7c29903d13553128f4cf0d022288e0f6c8d7477d25b935533778d2a221ce5c90b9b7506fe0056acb4195db29180915ff4d9d8d5ff67fb121a9831338230b84572184dea0ea20853740f92e83f3f5cfcb97f685d647396d89f9a7a2acdab711cd9f2a0bed4300e617c5de1d87fe06904c8553b3e75c9f259a152ee95b7fac809d8de72b8e634337e7b4f2ea920b8f0b13184c8ee5ccacc189289ab21be9799a7bfc670bdc1be3f3a04d1cde64a0f6dc36"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "b799853dfb116aba13fe5c3317ab2dea618a21fff5d38fdb0014c551d26ad5ec1a187f2ecceb7b3bbea4994a39e5b130638c680b9de72c36a562788ee524145efea830f072b3a0ee2a4209b3d78515eefaf4aefbc7f4daf528f3fb82f6c8a0548882d4d04c65d12073fa3d11d262545dc8d47cd0552bedefc2a4c7f8c4a18f807b540e5b7466a034200a2f983f060f2d5cb19eb21757387d90173ee88182845afe59d44c12990f02deae501ade91e7d544b309af122fc857d0d7378494f82a722c94c0fbad55b3a7d9184b63a33dbb842810bc5b76916efa00a75eb4900f61fedd9a53a7f170809f7e6348e509e026158019a3532ac3"}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "cfa60a742b6401ca803eacc3b870e30c1104f02f6382ef87ea1c30db26e327"}, @ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "60227f38df8f6016a629d7bae6a0fe3fee71e4e69fe86d4253cb276adaadf35012e591fb3bef92a77ee5b61425a2c0f3344082528f96cd6670bb816e10e965c9017774e022555194c1538ae351d680cc1497854cc1681447151e944b9d60c888703fb2b6e632a249ff33aa8e1203067c28283dc32beefcbc962d3d1336ac3d90cbad61bf183a13cbe39c44a1c78e187f666de120107af36fadaacd42e5aa580934cfd4f4e529a42ca13eac58bb7c8343843facec3d51768d691fb2e484015016bca3bf3089d06457"}]}, @ETHTOOL_A_WOL_MODES={0x1014, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0xa2, 0x3, "759f250b65247ad2196d7663b3c13277c0317f9a2258320e717b7e0434f0d021ae64c4ea0f9f877258e9122d48a0d49dff57d9a306778152ef244fc90bd64ed8cee81f19bf81f8659e8e497aec3fc4c8e6e8dcf9f1d7fc5b6429c763ff160f7cf895b147c78dd443a4466306ef641dae920160b3abca946595230e1fc80ab509a876f90f530bd7b9f4f9d21692d7d8b56ec9dfd1062f082713782fd5e7f0"}]}, 0x2480}}, 0x20000004) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "571182d19e465facdd7a3d725e2a1e64"}) 1.152676979s ago: executing program 0 (id=4922): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, r3, 0xffffffffffffffff}, 0xc) r4 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000380)={{r4, &(0x7f0000000200)='\\%[\\$)%[*&\x00', 0x280, &(0x7f0000000240)={@align=0x200, {0x7, 0x965, 0x8}}, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x1}, {[0x1, 0xf, 0x0, 0x8]}, 0x4, 0x74, &(0x7f0000000300)=""/116}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$x25(r5, &(0x7f0000000580), &(0x7f00000005c0)=0x12, 0x80800) sendmsg$nl_generic(r7, &(0x7f0000001a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000000600)={0x1434, 0x17, 0x0, 0x70bd2b, 0x25dfdbfe, {0x12}, [@nested={0x11a, 0x119, 0x0, 0x1, [@nested={0x4, 0x144}, @generic="4cfd48d81fd1d4a19b83eaed6183ab36725c66f15a479f567400384ae018664b0df011cdbe7a99c062c81182865c8af6051ab5b1370773ed", @generic="8f86e90691c4107a648d1906e861f117b9ecf7fc8b34c9685071db2fae76dfd11fedee8c3341f9dca5a30b6bb73b4acdbf9f396cc85b9549b35e41315a82b81ace184253d02f7531b4719bf7fdfdcff5c46fd230b9131ba10902a413343435aab49247cb832a00d75fb1069a2af1f4097f5fe4a12de51f6e5a796cd0175b09708370908f1006ca3d0a8ed9ee366a288397b902876e4431ea3d03b50bba0070e149f72a45a8a5b889db615e2d2fbb03a4d24479f6c68cb74e32e85cc2e00d12b559f51bb1a2c61afb60e963cba31800f23b4662f50ad4e789d3ab"]}, @nested={0x112b, 0x42, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="7a295bba764446531ce9eb031f11bee8fcf3156c5a3574af3047cf8653dc5ebcd90a5b471ac0dbde079c023ec970fd8dd866a9ea1ac9e76187c102f6cbb3e70d0e794280fbb3d648dba5525aee78dc8a903882a12e59a52f778e6dabe1e13f8fa22b43bceaa0648d34a1c59d25046a16949a6113e5d87a648da39bd9105ede9a5eed89bc2ad015667a5fdd2075bffd3d5acda6405b", @nested={0x4, 0x4d}, @generic="3ad5d444ba5e808d00660910d63e2463897743426d1179bb2152f94c2def0f41170bf611ff0505dc86623b654adcfe6eef8812371b09126d635b4326b0333fa8ae56a59349da9296c2b248125a7207b787431d2e4979a8d0eee17a241bcd772e3b550a8c933febabfbc57e9d1e8f", @nested={0x4, 0x1}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xd1, 0x0, 0x0, @fd=r8}, @generic="568961626542326ac7098b34ea6940f1f2fac4e7c9a081b9e530b4e62c99569cf2367855b3e0f666ba4e01720cbb5e69493ee47b1619e52bac28f6969970fcc3133c61a6197ff5749cbf82ae616ac5485550657c4902f3dbded2406b8ee85f5b678231149b3e4581f3b7aa54fa6d4345702bc1bc7dea40366e6f26b838dc306d5f7f49577a966ebb606eff7f9818025913a0475191ad4f34caf9ab35c5eac53318954ccd6c48833cbcffe1ccecc3e6d2540a2e1b103527c0a0bba7311c9743e272d308bda58bb0d4e9b6edcb8d696b9d84ecfc83a6a98a23643ae3cd4643a8364ccae131108f01270323f2803bd52eb0a4afb9c6a9a22777d3db35f56a3d98b02050c395faee7331d9730e23d9c6c64e94769a204a623647d7223effe41bb00f7746d723a4a3abdc0100f18fc5333558dabba676e28b46a050d417e9d3937d606015f1cc89249328aca8dcccde74164e1e01b43d30a9b77816ca1827ded9f932f33632a50bec2d3798c973a5f8c28924f88d869b2b2fd8a794d98f24b98711de1f80899f57dbd8caf3983f3b1eb33b0e8ed53e4694d46314fbbb0039ceafb9e12298ed4b7577c7b2a205ce807a7f4845c119fb55de4387a79f4576240f5ad45f8e765d28673e253702b7c79e421b9d49bef9364322ef68ae43d93eff03a9727d0be74740aa57ddc9cb129188618f1d3bcc0e7c29446a0109de8a670fae844fd780929133ebc56f9fa50e304082fe7c845c1c154133197e3402f45eb0747cebc8e74c792baa7b8a2ac7af5eadbf9194d0fed06f551de367a499ccc5e8de00a1c4b560246de8709bf72952562cde252b0c21d27a66165e448ff1892e87a841056dd88063198063147f81a1ff03911fcaec2cb81efb468ca613674cb0a03e4e5f7c5b71e2397c229592f6964b9be017f05b1d03fc9fb93c0784f3e92fd9ac1b774f4aef7b57c58a49ffd37e6a62a494f70e328814374d6952a684e3715c68d9dbb0c7f22e969324c47b5e4a997092529f448a4f33da12a87494a6296f007a7389fdc80850b0d991abc91c4258d6170602861d5239d9edf98ca7c27747567226c336d018dce972c7a7bd08c05753d29457a4e1afada26913850f5a4c404dd7c5e0ef5765d9bbcde3ed68ebefc0ec1adf196fb5e4cf20d4349eee65ab7da4f068c7e19ae0017fe41f0b6ac78c4d00be0cb145736f27cd0f10e86ed35e48c06977d64b5ce46774548a901d02ffac084d6e9099e373a1ae7cb6abeca1c0a0e31e412f423204dbc29ef269a81359db76d474a73a3701e7c4c5c2c2e6670e801f2e5d7851700ed085c44c64b32dcfb60e4dc3699650fe2dac017c025fcaeca6493b9dc6eb45642e20237ba1ea6ff888691ff2fed43d4e8e5ac66ccb5954ee6f53f7a331bfc514ef8ab5eb72682de6658eb3b58217d2064ee4853da6a6841d7c2785d1e8251e0b9eae50b5ab2fad91f7c1d6ba6c8450cc6ebb2cf96e46037ee566ada7f4e51a3fd715e08f4b88c722ea8368740e9fe88da8fcaa3592304229eec3968c5d2457fd247977b1fd6a01f633de330ea394f0170a46eae628eaf52e9cfc850de331d805a213927faf8d7d039fcabfe5fb336771269b8ed3be921261b02084383777e65c9e4b2906e1739cff6d6074b3122e12a159f9a605960375d941ba7775385d9b5b6fcf3560baec39bd3a5e455a699923eb74e6e408dc563d5b565f4f53304217b418ae0f15fc8300c9ef37680689f3a3646074adca8f08361f98c6b87f6e5a4520880b7c5cfec1f0a08a4f6ae8fe4ec2c1b4a9c6bd6f65515cbf11a92b05cc074d5d146ece3d7925ef7f20bb7de01aae3342ec17a35b30121eed5f9bb26b34777e6302dff174cd919cee77b94deb7f354d19eabd5523f2b1362265f7f271d6a7383e828e55ffae729a0006ca99137b7790d612730359c0e1484da505f74574adcd007c0d91a430aa4d826f91dcb1c5e086a70c27188f0adabe5176909fd45398412cf37f7b3baa81d24eca009ea8ed5bb67d737fc7f5471e19a35ec93b94ac0e14213e18b2705d90c2da00c628bbacccc2297ee01dcf8d4b817ea3d61ca6c67e8b60c9707426de56e964a4cedfed13b5b8639465ba019d43a1ad0d799849bcf77f27ff661672a36112966c3b60baa55c2ce54dcd3f4266cf70bfb9ade33a6e5d934778f62b719d35086b0dd513c156ca35fa5e91712d0766cb38babe8268267fdc546668b98eca299a880d529a86a88306d82a6eaa4ac9bc00efe61aea0cb09324d8cfd530bd51d817c5d61a790944dcf61dc3bf34fc84ccefc286d7b2be3286153f27c71f330751d80a2460727c95411b882d767cd8a7af90b32f1686c1cc05b79b889b72a0562cc542b9eb9e3ebde1403ed72911ac7dd36f96e4575dc300ea8030f4247d32f73e51f8d76d6cd085c4185a0c25409c668c2cbf5f0daa5993b26fd6bbfe8fab4c91ea4c3d88d24f0e37a426ee9c2f063840070ae8dd0557d37054038c9b472d9d9db10221c18bc65c5e5178ce05fd1ae87ca3cd0de274be5501cbfc1aae882b7b2309cf0513167d5d5ad2792c80d282aef88b67bb610555d80ae3e309748df42ed15503a1c148760c8adf510130f7c1c5eac161408dc0f4ccc90c1155876c6c3b6946505acf1939cf7248ce9e8c45960fae98286e02204610913a0b8c92fdae22734b0f7e04b7cc6c65c80257cb234f45253f38a6d6cca7f414a41d671eeb496a449d076d7d0205f61a1ea258ddbe64528c4e2a39ab5d75e6f620c3cc2d28c01f18d475607d6ad83a91c192a3f87e3e133f8bf7fecfb2e07d52c595689ec97147b30e9b513bbf703919597bfdd48d99850ae261dddc5d25e74f6497a56ad8d9880a8ed20a8785f2b38aedc78354918e4bb74110cb5d5538d4717f909080755baaab56a394359d208a182b4adc387d1577fda1aca521b9dcfbe8ba9beaa0a6b1d9985d30359a4e190b916e7748c4762b38cf7e637d390a046e8bb2dfb717a39a23d8812e9da1476651f9ae59df94c9d33bab29fffd3e09889662bac0c4cafee2cb1719a6fe82c37610458c999cfdbf0414eeac06ce016cde4c49b92e6a1059ee78e0ad4d8a405d752afbeccf8b1269b4056a3484225889b2991bf2ed77899b0f3d69512545b3b5a152dc13e383002aac8c0eda5b4d123c9c5e50d0e85ac22b8590ec4ab058704c472198dbf20be4777020d7673eb2d7fd8c75f1b5e1176f75e3c64b4c9c4c7b1b1b06288d3cc1b61656adf8a07329674a86dc33bae2ec008688cc9daf197d372ddbfcedcb8cb5d11ddce7d76ab5b13f8f30d2faeee6486ce4c9a7614adf357871c714a00fa83819a7def1e0a2450d3bf2228a5f95fa138ff214c9ead1a02409ff6762bf0380e4b5328b16c7a58e10115f9c681cf6c90767c045f6457a2e1313bb66e268dce641974daddb577fd40704d79c81f429960d2af2edd66af14dc8167778682c9aba5f61d21ed93a42eeda4b35293e360c4256f87ea41d4cba8f533b915825e1ea9179bc1faabed692c02765f9c6328ce7a07580af4c1fd71e595f05dfa902265228b37d1271abd024f0862417405cc6b64311f72de1b5beded5bbb4dcf4a694930dbfd6d4c77015758647a9f1011127eb5a6ae976366f816e00f1934085179dc65edb6a3f9ac85894ade83018aa2dc182342a7e42648ff672bbf171b0c94a2c75ecbbd50669d489c227bb939d59177938b51211f32fe980b2accd932da5ac7827184fa41d3dcb0afa9cfd7a41d4d8e25094015910dd366d6b39c4ad32eab59366d202847d374298f22050ccf0b74f9c04c687e74826453887b46f551de32eef6b715a83562abc54cd6e87d21ae6041a0b52d202fcf6f65a69df9021b28623ec90ecd720ccba4f474bb7cd5dc328bbdfa2ae5c789feac2d77c9042ebdb0a0cbf25849d3585c33accdeec5acbe32bf3bb55bc380d6b8b51581daf31e399423b499542557aab334be942012d4566761098810b975ae51231c23abb3afd4a43de240a6e5b949603444adcbb122e309ed6e886202107f0cf861208ec1e34773a4309b48e18a1ef633bf7352492effd26bbff0e8c5c30b9ccb521250ea3d7aea481a5b6f96b2968a02889f4db1417190ad9675b1319d62deadb7b2478d42b563ec2a46e05651e36f8b4a1221d7853de05e4a47aaf3fe64e24998d772798c19405575f443de02ec63a06e77e94ef6178a843c3e97f014c971f148ef4f27787397da6079bef07058e13be9be879f1efbe1aa319b698549765c200ca755fcb88c4a59197c6e345a9257a4141ab84951a885cfe355533ae8f225b2d2c19a603d2444c588d76b41e0b2b44c69447f7fa660dd778488bec3bd41fc97f0678963dbf9e8c58fa2afbc8b605a4e8c482622033c37dd0c6c480ef0ae1b6da62a33bc1f2d832c529113a9e33799b9fab038f113675d401fa4cc5854683a4211accf0d86fe3a3ba4f0dcd6230f829e12ba76db894d8c0cb6dff20e3e25fd722968ae56f549d31a89fc5377d5970f5426f290ca8edd6840044d89983a883c5ee275c148f281d28325a903584455022ad5bb433bb361bab7e8f14574ed45eb0bab9944b271d0624206adc39231f8a632a0f2bf26db95b1260f69c9c4917e2c48029d5ac2724d974ad09ebb81cd1cfa85af2ebc62bbb3f1342965e4dcb8ecf6bb3c8f61adab2fdb64b6aa7afb604badfb0fb9ba1791eb8496763df49b71a01229f2f74d719aced30c40935620c078f6f10cbbe46f300e7596cfaa9867367a1c87b6555c54dfc3dcf3cf54a62b674ce1b82b94ffd07a41ecbed1be64a480abfcbf3bc5a3473aa78b11d973da23f3079cf8e641cf9353fe5f43c3b5aa428484329ec1ce6e26b02d7b7e4d6dc5ab579e5a421ff529d139ff373192fc0e63e6d28f7084b5c474120281a8db4d2f03b730bbfbd234cef038c4ed82840e7ed653d110544d36a570a6ada9c5034888081b6758639af95a8634028df8c7b7df50f500965de4e87ff1dc3f71eb6cffb01bb7f0f9665a3474e000529be1828b82a9e6bf56835d2198388bfc0967386d33e7c92c8d653315de57b525a407a35e9a8fc4e24cf6ea4ed1328b39b5e510253e74e452ec0be87a865c6d8c790497aa189fa71ca8f39862b89ceb8a679f132ddef2f99e1e20926e9eadfd5583c059129f9f2d9d0fb489c5f52cf4cf0765864cf0455734f855f3bb4559b8081f1f9a88378765efaf9d507fb59b9d3cc3def6636225b2dec2bee6f7e06152e7fa77da957cb65962fc007c43b138febd1b89c2a6a5f1ab809c8a20bda6d7eb7f42914d9795736be182dda8a14255fe7300927360e4a1e5d67f330eb4122ece22aa60a4f556b63e08e971dc49404fd0072d07f52b2fb4e7f464cd5085b30edf347f7628e687fa93f45febdc2b8d6761d2e5b18a95d3d70ef8ea3c4e905d5b9a36b3f2687de2213da428390e87c840382777bab566e0dc887b14ede99975bcc84c5fc54ed9f9cfe300aaeea9334cf89a04c759a3532be5aca1a2481244c56450ecce90f4f80a97dff0495ab0041c49ddd8ca4a7ac41e0feacb980f7e33dd871889557d938ad871f5796eeb4d312ce0188b146fa2e0b8f8005cd0bc5934def5aa12d393898ecaa89fcf568914334cc0353febc9dc70c0d4033b2b17956c243b7adb7bfd38274b269d983fc85fd3f4d17f66811c0517bb988b08ea692f684496445dc6c4481da36936187531016ceac25c39a0e7ce6aa0ae54984af976f61a8a4f0738b003f38f16977774e9731509d50150dd4ac357fa4f2b5fe032209b2bb63c5f5569c", @nested={0x4, 0x32}]}, @generic="ae075fd988617c322591dfc52b6203f7284c7e5ed2ed909d6699b41ec4a27bcb4fee5b1c0ec7705131e235d5b35f659d5260d12950334ff69ba8d41606a53f6fe38efc3b46d658c608e5bd16f81e06da90553e2f227b2725e4f6668b0ce6e75a2d1ffccc4d1754765d39d9a6c819fbc09cb80601", @nested={0x32, 0x90, 0x0, 0x1, [@generic="6c15881c446bdfff8e7b2e14a25c90034ec7c1fee7102ffa4ed9a99290a8", @typed={0xc, 0x9c, 0x0, 0x0, @u64=0x844}, @nested={0x4, 0x110}]}, @nested={0x121, 0xa0, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x6, 0x63, 0x0, 0x0, @str='/\x00'}, @generic="9fce54443e22ae258db6630be2d88d362e11a393ce1c8daa49b420e37625beb8512df2693a490bc91a6b40671f7e40c7298ee037fce255aa239afda41ec399f99686a865bc050a34cf989a610c853209085952030f770efa90d0c0b7f3f739fc7062778145cbc64e05a1d77dc96640438de9", @generic="c95c499d1ec6e1715ac1bc3fc3ea50093bd4fac91d2dd6fc01e8aa2cc37af23eb331f35a12d01b6f162cdd47622a73ea2a6decbf051c49008affd03fcbf22e0037b08fa7bfaba09026de8bb11a1a2600fd47d22aa721bca813b64b0854637fdfe290c5d44af8e58e70f7fb7da9de4a6abb63c0", @typed={0x24, 0x36, 0x0, 0x0, @binary="37d96109dfc5e1f24353c683e235163a9e4b367c932b1c082d2d6fc51699bfb7"}, @typed={0x4, 0x97}]}, @nested={0xc, 0x167, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xc7}]}]}, 0x1434}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'gretap0\x00', r9, 0x700, 0x1, 0x2, 0xfffffffe, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x5d, 0x3, 0x7, [{@private=0xa010101, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfff}, {@multicast1, 0x1}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x992}, {@broadcast}, {@multicast2, 0xff}, {@multicast1, 0x3}]}]}}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x58, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) socket$inet6_sctp(0xa, 0x1, 0x84) connect$x25(r5, &(0x7f0000001d40), 0x12) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r6, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) mkdirat$cgroup(r5, &(0x7f0000001f00)='syz0\x00', 0x1ff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f80), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x30, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c815) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000002080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000002300), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x30, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}}, 0x4000001) 1.12300414s ago: executing program 4 (id=4923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x400000000000c2f9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0c000900000074000000080026158009000008009f0dc515f0507fc1057a0004000000fb9565917f06000000000000002e251cad766d02d309b5d391f59afa8fdc65d9b63614a2c6cb32cf5cbfddb06a33c85de3ef23beec9c6fdcc162c64bc5d66d781edbcd04536ebd39a9d35536873829b2206016d8609eab28accfa03dbefcb8154feee4fd25641c19310e21ad68f5b12cb4d246ea870000"], 0x38}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9137, 0x1d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x679}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe16}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x382}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.012541009s ago: executing program 0 (id=4924): syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bc26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x97c979544aced01, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}}, 0x200400c4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r9 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x100000) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000000080)) 1.007859954s ago: executing program 2 (id=4925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async, rerun: 32) r2 = socket(0x28, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (rerun: 64) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x4, 0x2b, 0x5, 0x3, 0xd, 0x13, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x5, 0x2, 0xf]}}) 1.007535638s ago: executing program 3 (id=4926): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2, @empty}}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x2b, 0x1, 0x1) 972.83203ms ago: executing program 1 (id=4927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES16=r0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="13000000", @ANYRES32=r1], 0x90}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) close(r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES16=r0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="13000000", @ANYRES32=r1], 0x90}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) close(r4) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) close(0x3) (async) 923.674967ms ago: executing program 4 (id=4928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2d, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xb4}, 0x1, 0x0, 0x0, 0x850}, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0xff00, 0x14, 0x503, 0x70bd0c, 0x25dfdbfd, {0x2, 0xf, 0x51, 0xff, r7}, [@IFA_ADDRESS={0x0, 0x1, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c04}, 0x4000000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) 544.49147ms ago: executing program 2 (id=4929): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x95) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x95) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)={0x0, 0x0}}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe11, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe11, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r8 = socket(0x10, 0x803, 0x2) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) write(r12, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0xffffff1f, 0x70bd28, 0x1, {}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'vcan0\x00'}]}, @IFLA_PHYS_PORT_ID={0x5, 0x22, "f9"}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_IFALIASn={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r6, @ANYRES16=r4, @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008010) (async) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r6, @ANYRES16=r4, @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008010) 544.147242ms ago: executing program 3 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="5c08e200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="800100001000010000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 451.375867ms ago: executing program 1 (id=4931): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0xffffffffffffff45, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 434.309323ms ago: executing program 0 (id=4932): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 347.48297ms ago: executing program 3 (id=4933): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f000000bac0)) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x4, 0x0, &(0x7f0000000180)) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_delrule={0x24, 0x21, 0x1, 0x6, 0x25dfdbfd, {0x2, 0x10, 0x0, 0xf8, 0x1, 0x0, 0x0, 0x2, 0x15}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24040080) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000100)=0xfff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = socket(0x6, 0x805, 0x103a) ioctl$SIOCGETVIFCNT(r11, 0x89e0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xfffffffe}, 0x10}, 0x94) 342.885712ms ago: executing program 1 (id=4934): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008d0008000000000000000c0090000100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x29, 0x6, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb2632acc53854d5c}}}, 0x24}}, 0x0) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x703, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8000, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48035}, 0x0) connect$can_bcm(r8, &(0x7f0000000380)={0x1d, r13}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800433700b000ac000048019078e000000164010100070bebac14140fac141421832b8cac1414aaffffffffe00000027f000001ac1414aa0a01010264010100ac1414bbac141434e00000020000a4bb3f4c67a987baa4ac16dc9324a4e3e059b9203cb0da130750f1eab34e02dba1e8a3e1a4842d3e7fe7432246f22e54204ddb5b59273ef5bdede21ee1918a6856fb082b235f16124814f06635c243639186c5c12ecee0825303171b635f0235f1fbc33a"], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f00000000c0)={0x6, 'bond_slave_0\x00', {0xfffffffa}, 0xa}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r17 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r17, 0x8955, &(0x7f0000000000)={{0x2, 0x4e25, @multicast1}, {0x306, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r16], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8080) 290.356438ms ago: executing program 2 (id=4935): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x8, 0x4}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 204.698187ms ago: executing program 0 (id=4936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x1, 0x7fffffff, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x64, 0x0, 0x3, 0x8a868ff16e7e6bef, 0x0, @rand_addr=0x64010100, @remote, {[@ssrr={0x89, 0x3, 0x77}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x3, [{@remote, 0x1}, {@remote, 0x1000}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5ce0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x14, r3, 0x210, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044805}, 0x48000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x20004000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000780), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000a40)={0x8, 0x8, 0x209, 0x6, 0x7, 0xc, 0x3, 0x10001, 0x0}, &(0x7f0000000a80)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x81, 0x0, 0x196e, 0x1, 0x6, 0x7, 0x3, {r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0xfffffffc, 0x3, 0x8}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x14002}, 0x20020084) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0x0, 0x9}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) 203.423076ms ago: executing program 1 (id=4937): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={0x0, 0x0, 0x0, &(0x7f00000007c0)=""/231, 0xe7}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) (async) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x3, 0x8000}, 0xc) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x9, 0xfffffffd, 0x100, 0x10, 0x6, 0x7}, &(0x7f0000000340)=0x9c) (rerun: 32) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r4, 0x5}, &(0x7f00000003c0)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3], 0x44}}, 0x40848c0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1b841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0xffffffffffffff97}}, 0xc004) 108.943759ms ago: executing program 1 (id=4938): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) socket$nl_route(0x10, 0x3, 0x0) 77.532094ms ago: executing program 0 (id=4939): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff020000000000000000000000000001030190780000000060d2c4c600002fff00000000000000000000000000000000000032000000680000008700033007000000"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="060100"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="060100"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) 321.692µs ago: executing program 2 (id=4940): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xfffffff8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4002060}, 0x4890) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000a80)={&(0x7f0000000080)=0xf, 0xa823, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a40)}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 0s ago: executing program 3 (id=4941): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x25, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) kernel console output (not intermixed with test programs): e batadv_slave_0 (retrying later): interface not active [ 316.482648][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.491059][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.534814][T16997] netlink: 'syz.1.3104': attribute type 8 has an invalid length. [ 316.551632][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.595511][T16873] hsr_slave_0: entered promiscuous mode [ 316.602182][T16873] hsr_slave_1: entered promiscuous mode [ 316.608501][T16873] debugfs: 'hsr0' already exists in 'hsr' [ 316.616277][T16873] Cannot create hsr debugfs directory [ 316.727685][T17005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.771038][ T5630] Bluetooth: hci1: command tx timeout [ 316.786977][T17007] bond12: Invalid ad_actor_system MAC address. [ 316.795783][T17007] bond12: option ad_actor_system: invalid value (1) [ 316.805125][T17007] bond12 (unregistering): Released all slaves [ 316.907162][T16873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.921632][T16873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.994774][T16873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.041393][T16873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.098717][T17033] netlink: 'syz.3.3117': attribute type 1 has an invalid length. [ 317.125981][T16873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.137828][T16873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.339094][T16873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.357999][T16873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.534021][T16873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.578922][T16873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.598419][T16873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.612777][T16873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.622257][T16873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.634521][T16873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.652644][T16873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.663267][T16873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.695182][T17093] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 317.713622][T17082] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.751041][T17097] netlink: 'syz.3.3129': attribute type 12 has an invalid length. [ 317.874366][T16873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.903699][T16873] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.930631][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.937834][ T9321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.980983][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.988210][ T9321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.095639][T17119] netlink: 'syz.2.3135': attribute type 1 has an invalid length. [ 318.339188][T17139] tc_dump_action: action bad kind [ 318.474028][T17151] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 318.482917][T17151] syzkaller1: linktype set to 823 [ 318.607548][T16873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.697474][T17166] syzkaller0: entered promiscuous mode [ 318.711320][T17166] syzkaller0: entered allmulticast mode [ 318.850994][ T5630] Bluetooth: hci1: command tx timeout [ 318.977435][T17183] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 319.163376][T16873] veth0_vlan: entered promiscuous mode [ 319.203874][T17195] netlink: 'syz.2.3150': attribute type 3 has an invalid length. [ 319.215428][T16873] veth1_vlan: entered promiscuous mode [ 319.285125][T17202] __nla_validate_parse: 17 callbacks suppressed [ 319.285144][T17202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3151'. [ 319.302284][T16873] veth0_macvtap: entered promiscuous mode [ 319.324003][T16873] veth1_macvtap: entered promiscuous mode [ 319.373153][T16873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.411625][T16873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.445947][ T9309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.494055][ T9309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.534570][ T9309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.566935][ T9309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.739599][T17242] netlink: 'syz.2.3157': attribute type 64 has an invalid length. [ 319.756816][T17242] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3157'. [ 319.768663][T17242] SET target dimension over the limit! [ 320.930013][ T5630] Bluetooth: hci1: command tx timeout [ 322.462038][T17216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.527380][ T9300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.560676][ T9300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.623470][T17278] netlink: 'syz.2.3168': attribute type 1 has an invalid length. [ 322.636085][ T9305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.656984][ T9305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.696971][T17278] 8021q: adding VLAN 0 to HW filter on device bond10 [ 322.747718][T17278] bond10: (slave veth0_to_bond): making interface the new active one [ 322.761218][T17278] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 322.778082][T17285] syzkaller0: entered promiscuous mode [ 322.796088][T17285] syzkaller0: entered allmulticast mode [ 322.811991][T17288] rdma_op ffff888062af81f0 conn xmit_rdma 0000000000000000 [ 322.827705][T17292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3171'. [ 322.843048][T17278] syzkaller0: entered promiscuous mode [ 322.852613][T17278] syzkaller0: entered allmulticast mode [ 322.914830][T17294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 322.935700][T17294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 322.998499][T17294] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.010865][ T5630] Bluetooth: hci1: command tx timeout [ 323.106578][T17296] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3172'. [ 323.266187][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.274837][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.282850][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.292682][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.301224][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.569006][T17329] hsr0: entered promiscuous mode [ 323.743570][T17335] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 323.766348][T17335] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 323.777714][T17342] bridge0: port 3(vlan0) entered blocking state [ 323.796688][T17335] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 323.810662][T17342] bridge0: port 3(vlan0) entered disabled state [ 323.828897][T17335] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 323.837373][T17342] vlan0: entered allmulticast mode [ 323.851166][T17342] vlan0: entered promiscuous mode [ 323.874621][T17335] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 323.894103][T17346] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.909595][T17335] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 323.925213][T17346] bridge_slave_1: left allmulticast mode [ 323.932107][T17335] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 323.941862][T17346] bridge_slave_1: left promiscuous mode [ 323.947997][T17346] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.962524][T17346] bond0: (slave bond_slave_0): Releasing backup interface [ 323.981566][T17346] bond0: (slave bond_slave_1): Releasing backup interface [ 324.010484][T17346] team0: Port device team_slave_0 removed [ 324.036495][T17346] team0: Port device team_slave_1 removed [ 324.051625][T17346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.065549][T17346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.075111][T17346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.083087][T17346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.093043][T17346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.257288][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3187'. [ 324.488073][T17368] IPVS: Scheduler module ip_vs_sip not found [ 324.675618][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.683353][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.691389][T17309] bridge_slave_0: entered allmulticast mode [ 324.698712][T17309] bridge_slave_0: entered promiscuous mode [ 324.707342][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.714894][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.723631][T17309] bridge_slave_1: entered allmulticast mode [ 324.732064][T17309] bridge_slave_1: entered promiscuous mode [ 324.761144][T17391] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 324.769422][T17309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.780035][T17391] netlink: 'syz.3.3194': attribute type 3 has an invalid length. [ 324.789161][T17391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3194'. [ 324.816641][T17393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.835782][T17309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.911354][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3197'. [ 324.942343][T17309] team0: Port device team_slave_0 added [ 324.965948][T17309] team0: Port device team_slave_1 added [ 324.982384][T17403] xt_hashlimit: size too large, truncated to 1048576 [ 324.995667][T17404] xt_hashlimit: size too large, truncated to 1048576 [ 325.059870][T17309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.068610][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.097368][T17309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.126747][T17412] gre1: entered promiscuous mode [ 325.147346][T17412] gre1: entered allmulticast mode [ 325.195417][T17309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.204833][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.234190][T17309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.330126][ T5623] Bluetooth: hci4: command tx timeout [ 325.357922][T17309] hsr_slave_0: entered promiscuous mode [ 325.364938][T17309] hsr_slave_1: entered promiscuous mode [ 325.371692][T17309] debugfs: 'hsr0' already exists in 'hsr' [ 325.377492][T17309] Cannot create hsr debugfs directory [ 325.510055][T17443] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3209'. [ 325.526469][T17309] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.565026][T17309] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.606382][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'. [ 325.638695][T17309] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.764668][T17460] netlink: 'syz.3.3212': attribute type 30 has an invalid length. [ 325.816693][T17448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.837703][T17309] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.852539][T17460] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 325.963750][T17309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.012455][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.024537][T17309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.050922][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.070442][T17309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.088976][T17476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.103725][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.113094][T17309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.127226][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.266470][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.296200][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.309556][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.316779][ T9300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.335658][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.342929][T17492] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 326.342945][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.541375][T17502] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 326.574570][T17502] bond1 (unregistering): Released all slaves [ 326.601908][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 326.682613][T17510] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.771726][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 327.005868][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.082185][T17534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.093382][ T5623] Bluetooth: hci3: command tx timeout [ 327.122921][T17309] veth0_vlan: entered promiscuous mode [ 327.163250][T17309] veth1_vlan: entered promiscuous mode [ 327.183242][T17534] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 327.237273][T17309] veth0_macvtap: entered promiscuous mode [ 327.265359][T17309] veth1_macvtap: entered promiscuous mode [ 327.309032][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.329476][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.346482][ T9321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.360858][ T9321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.374064][T17554] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3241'. [ 327.388436][ T9321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.399375][T17554] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3241'. [ 327.410061][ T5623] Bluetooth: hci4: command tx timeout [ 327.419780][ T9321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.550565][ T9321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.575492][ T9321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.638443][T17568] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3247'. [ 327.652918][ T9309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.667746][ T9309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.010017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.221123][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.230399][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.239514][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.247978][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.256708][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.348922][T17605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 328.355512][T17605] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 328.414116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.443553][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 328.456706][T17612] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 328.468126][ T9300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.479846][ T9300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.588884][ T9300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.612206][ T9300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.760776][ T9300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.789377][ T9300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.862167][T17632] gtp0: entered promiscuous mode [ 328.873992][T17632] gtp0: entered allmulticast mode [ 328.902140][ T9300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.912752][ T9300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.024985][T17644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.037191][T17645] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 329.060376][T17644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.106772][ T9300] bridge_slave_1: left allmulticast mode [ 329.118402][ T9300] bridge_slave_1: left promiscuous mode [ 329.147446][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.172573][ T9300] bridge_slave_0: left allmulticast mode [ 329.198284][T17653] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.203094][ T9300] bridge_slave_0: left promiscuous mode [ 329.207359][T17653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.219061][T17653] IPv6: NLM_F_CREATE should be set when creating new route [ 329.226378][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.263067][ T9300] gretap2: left allmulticast mode [ 329.272885][ T9300] gretap2: left promiscuous mode [ 329.278067][ T9300] bridge4: port 2(gretap2) entered disabled state [ 329.288663][ T9300] bond0: left promiscuous mode [ 329.297999][ T9300] bond3: left promiscuous mode [ 329.304680][ T9300] bridge4: port 1(bond0) entered disabled state [ 329.315532][ T9300] pim6reg: left allmulticast mode [ 329.321048][ T9300] bond0: left allmulticast mode [ 329.326072][ T9300] bond3: left allmulticast mode [ 329.350782][T17661] x_tables: duplicate underflow at hook 1 [ 329.424521][ T9300] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 329.437084][ T9300] bond6 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 329.447815][ T9300] bond6 (unregistering): (slave ip6gretap2): Releasing backup interface [ 329.457282][ T9300] bond6 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 9a:8d:b5:f4:fc:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 329.494254][ T5630] Bluetooth: hci4: command tx timeout [ 329.503688][ T9300] xfrm0 (unregistering): left promiscuous mode [ 329.511244][ T9300] xfrm0 (unregistering): left allmulticast mode [ 329.518221][ T9300] team0: Port device xfrm0 removed [ 329.589494][ T9300] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.603953][ T9300] bond_slave_0: left allmulticast mode [ 329.611755][ T9300] .` (unregistering): Released all slaves [ 329.633216][ T9300] bond0 (unregistering): (slave bond3): Releasing backup interface [ 329.654841][ T9300] bond0 (unregistering): Released all slaves [ 329.667410][ T9300] bond1 (unregistering): Released all slaves [ 329.678234][ T9300] bond2 (unregistering): Released all slaves [ 329.688961][ T9300] bond3 (unregistering): Released all slaves [ 329.699560][ T9300] bond4 (unregistering): Released all slaves [ 329.712498][ T9300] bond5 (unregistering): Released all slaves [ 329.739422][ T9300] bond6 (unregistering): (slave veth3): Releasing backup interface [ 329.752001][ T9300] bond6 (unregistering): Released all slaves [ 329.766668][ T9300] bond7 (unregistering): Released all slaves [ 329.781900][ T9300] bond8 (unregistering): Released all slaves [ 329.797118][ T9300] bond9 (unregistering): Released all slaves [ 329.808315][ T9300] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 329.818944][ T9300] bond10 (unregistering): Released all slaves [ 329.947787][ T9300] : left promiscuous mode [ 330.053492][ T9300] IPVS: stopping backup sync thread 6739 ... [ 330.239868][T17693] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 330.290262][ T5630] Bluetooth: hci0: command tx timeout [ 330.478081][T17711] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 330.508858][T17709] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 330.601302][T17722] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 330.771229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.853579][T17601] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.891030][T17601] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.913149][T17601] bridge_slave_0: entered allmulticast mode [ 330.948438][T17601] bridge_slave_0: entered promiscuous mode [ 331.000725][T17601] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.019270][T17601] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.035272][T17601] bridge_slave_1: entered allmulticast mode [ 331.044484][T17748] __nla_validate_parse: 6 callbacks suppressed [ 331.044502][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 331.075250][T17748] openvswitch: netlink: Missing key (keys=40, expected=80) [ 331.091471][T17601] bridge_slave_1: entered promiscuous mode [ 331.177350][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.252532][T17601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.285228][T17767] Cannot find map_set index 135 as target [ 331.312213][T17767] x_tables: duplicate underflow at hook 1 [ 331.319977][ T9300] hsr_slave_0: left promiscuous mode [ 331.332651][ T9300] hsr_slave_1: left promiscuous mode [ 331.503176][T17601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.529990][T17767] v: renamed from veth0_to_bridge (while UP) [ 331.543904][T17772] syzkaller1: entered promiscuous mode [ 331.550933][T17772] syzkaller1: entered allmulticast mode [ 331.569791][ T5630] Bluetooth: hci4: command tx timeout [ 331.587269][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.657958][T17601] team0: Port device team_slave_0 added [ 331.668751][T17601] team0: Port device team_slave_1 added [ 331.723433][T17601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.756277][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.849347][T17601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.867507][T17601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.877932][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.905884][T17601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.951140][T17798] syzkaller0: entered promiscuous mode [ 331.973395][T17798] syzkaller0: entered allmulticast mode [ 332.033027][T17601] hsr_slave_0: entered promiscuous mode [ 332.039750][T17601] hsr_slave_1: entered promiscuous mode [ 332.047469][ T9300] IPVS: stop unused estimator thread 0... [ 332.097490][T17805] syzkaller0: entered promiscuous mode [ 332.116127][T17805] syzkaller0: entered allmulticast mode [ 332.370682][ T5630] Bluetooth: hci0: command tx timeout [ 332.427970][T17823] netlink: 'syz.4.3305': attribute type 16 has an invalid length. [ 332.440401][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3305'. [ 332.482805][T17826] syzkaller0: entered promiscuous mode [ 332.491199][T17826] syzkaller0: entered allmulticast mode [ 332.500255][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 333.165476][T17865] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.175514][T10643] IPVS: starting estimator thread 0... [ 333.253839][T17877] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 333.269763][T17870] IPVS: using max 48 ests per chain, 115200 per kthread [ 333.597853][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 333.607951][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 334.459837][ T5630] Bluetooth: hci0: command tx timeout [ 334.831597][T17791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.845209][T17601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.869463][T17601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.893452][T17601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.924706][T17601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.936400][T17601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.955119][T17601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.965842][T17601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.008369][T17601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.016717][T17939] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 335.104733][T17951] IPv6: sit2: Disabled Multicast RS [ 335.113308][T17951] sit2: entered allmulticast mode [ 335.128321][T17949] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 335.215284][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.235783][T17969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3329'. [ 335.417304][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 335.435092][T17981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3334'. [ 335.449457][T17601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.473406][T17601] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.504676][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.511885][ T9325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.545049][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.552257][ T9305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.588549][T17986] netlink: 'syz.1.3336': attribute type 29 has an invalid length. [ 335.605799][T17988] netlink: 'syz.0.3337': attribute type 1 has an invalid length. [ 335.610906][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'. [ 335.617458][T17988] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3337'. [ 335.633203][T17988] netlink: 'syz.0.3337': attribute type 1 has an invalid length. [ 335.642048][T17988] netlink: 'syz.0.3337': attribute type 8 has an invalid length. [ 335.654538][T17988] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3337'. [ 335.686588][T17988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.239065][T18031] veth3: entered allmulticast mode [ 336.515400][T17601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.530920][ T5630] Bluetooth: hci0: command tx timeout [ 336.607495][T17601] veth0_vlan: entered promiscuous mode [ 336.711684][T17601] veth1_vlan: entered promiscuous mode [ 336.758733][T18067] __nla_validate_parse: 1 callbacks suppressed [ 336.758753][T18067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3358'. [ 336.774076][T17601] veth0_macvtap: entered promiscuous mode [ 336.783118][T17601] veth1_macvtap: entered promiscuous mode [ 336.796370][T18065] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 336.807247][T18065] nbd: error processing sock list [ 336.842551][T17601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.874513][T17601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.906371][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.934697][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.963155][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.025694][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.045272][T18077] netlink: 'syz.0.3362': attribute type 2 has an invalid length. [ 337.072873][T18078] netlink: 'syz.0.3362': attribute type 2 has an invalid length. [ 337.103914][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3362'. [ 337.106892][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3362'. [ 337.127653][T18079] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 337.135880][T18079] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 337.206146][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.222568][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.288322][ T9308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.316847][ T9308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.326763][ T24] IPVS: starting estimator thread 0... [ 337.386890][T18102] netlink: 'syz.3.3367': attribute type 3 has an invalid length. [ 337.396307][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 337.412581][T18102] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3367'. [ 337.420539][T18093] IPVS: using max 35 ests per chain, 84000 per kthread [ 337.428697][T18103] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 337.497645][T18103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.546480][T18102] netlink: 'syz.3.3367': attribute type 12 has an invalid length. [ 337.561203][T18102] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3367'. [ 337.620761][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 337.676410][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 337.696871][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 337.707671][T18123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3372'. [ 337.756509][T18121] bridge0: port 3(vlan2) entered blocking state [ 337.764489][T18121] bridge0: port 3(vlan2) entered disabled state [ 337.773432][T18121] vlan2: entered allmulticast mode [ 337.794399][T18121] vlan2: entered promiscuous mode [ 337.859268][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.903302][T18125] bridge_slave_1: left allmulticast mode [ 337.909212][T18125] bridge_slave_1: left promiscuous mode [ 337.915345][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.923284][T18125] vlan2: left promiscuous mode [ 337.928182][T18125] bridge_slave_0: left promiscuous mode [ 337.942009][T18125] bond0: (slave bond_slave_0): Releasing backup interface [ 337.952551][T18125] bond0: (slave bond_slave_1): Releasing backup interface [ 337.966179][T18125] team0: Port device team_slave_0 removed [ 337.977244][T18125] team0: Port device team_slave_1 removed [ 337.984909][T18125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.003426][T18125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.017473][T18125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.025455][T18125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.035373][T18125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.184623][T18150] team0: Port device dummy0 added [ 338.325778][T18161] xt_hashlimit: overflow, try lower: 3/0 [ 338.796546][T18157] team0: Port device team_slave_0 removed [ 338.893436][T18162] syzkaller1: entered promiscuous mode [ 338.905900][T18162] syzkaller1: entered allmulticast mode [ 339.043007][T18192] IPv6: addrconf: prefix option has invalid lifetime [ 339.170907][T18182] bridge_slave_0: invalid flags given to default FDB implementation [ 339.183627][T18181] bridge_slave_0: invalid flags given to default FDB implementation [ 339.213191][T18186] team0: Port device geneve2 added [ 339.264722][T18197] nbd: illegal input index -8454144 [ 339.307266][T18198] nbd: illegal input index -8454144 [ 339.425964][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.452954][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.566090][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.588786][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.617150][T18217] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 339.633602][T18217] bond1 (unregistering): Released all slaves [ 339.703299][T18226] bond2: invalid ARP target 0.0.0.0 specified for addition [ 339.710860][T18226] bond2: option arp_ip_target: invalid value (0) [ 339.718695][T18226] bond2 (unregistering): Released all slaves [ 339.776473][T18218] syzkaller1: entered promiscuous mode [ 339.789349][T18218] syzkaller1: entered allmulticast mode [ 340.700000][T18309] validate_nla: 6 callbacks suppressed [ 340.700019][T18309] netlink: 'syz.1.3427': attribute type 2 has an invalid length. [ 340.886483][T18317] smc: net device team0 applied user defined pnetid SYZ2 [ 340.914787][T18317] smc: net device team0 erased user defined pnetid SYZ2 [ 341.153969][T18335] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 341.327132][T18354] netlink: 'syz.2.3439': attribute type 16 has an invalid length. [ 341.370570][T18353] Bluetooth: MGMT ver 1.23 [ 341.389940][T18358] tipc: Enabling not permitted [ 341.400291][T18358] tipc: Enabling of bearer rejected, failed to enable media [ 341.789183][T18390] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 341.798481][T18390] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 341.807336][T18390] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 341.818314][T18385] __nla_validate_parse: 19 callbacks suppressed [ 341.818358][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 341.834974][T18390] netlink: 'syz.1.3451': attribute type 2 has an invalid length. [ 341.843460][T18390] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3451'. [ 341.945805][T18399] nftables ruleset with unbound chain [ 342.096903][T18415] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 342.594047][T18441] syzkaller0: entered promiscuous mode [ 342.609176][T18441] syzkaller0: entered allmulticast mode [ 342.634524][T18450] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3469'. [ 342.729799][T18457] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3469'. [ 342.930683][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.938011][ C1] bridge0: topology change detected, propagating [ 342.970190][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 343.014309][T18471] netlink: 'syz.3.3477': attribute type 1 has an invalid length. [ 343.179368][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3477'. [ 343.239450][T18485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.281701][T18485] bond2: (slave bond3): making interface the new active one [ 343.296580][T18485] bond2: (slave bond3): Enslaving as an active interface with an up link [ 343.316980][ T6081] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.332947][ T6081] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.422870][T18492] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3482'. [ 343.469336][T18489] bond1 (unregistering): Released all slaves [ 343.508444][T18491] smbdirect: ib_dev[syz0] renamed to [syz2] [ 343.595437][T18503] veth0: entered promiscuous mode [ 343.620434][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'. [ 343.708350][T18501] veth0: left promiscuous mode [ 343.819021][T18517] netlink: 'syz.4.3491': attribute type 11 has an invalid length. [ 343.851079][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 343.877198][T18522] netlink: 'syz.2.3490': attribute type 30 has an invalid length. [ 343.895798][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'. [ 343.920361][T18520] syzkaller0: entered promiscuous mode [ 343.935622][T18520] syzkaller0: entered allmulticast mode [ 344.064383][T18530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 344.077746][T18530] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 344.095360][T18533] veth0_macvtap: left promiscuous mode [ 344.102653][T18533] macvtap0: entered promiscuous mode [ 344.263360][T18555] bridge0: port 3(ipvlan3) entered blocking state [ 344.287255][T18555] bridge0: port 3(ipvlan3) entered disabled state [ 344.303097][T18555] ipvlan3: entered allmulticast mode [ 344.326578][T18555] bridge0: entered allmulticast mode [ 344.344957][T18555] ipvlan3: left allmulticast mode [ 344.365775][T18555] bridge0: left allmulticast mode [ 344.384161][T18554] x9: renamed from bridge_slave_0 (while UP) [ 345.141842][T18636] team0: Port device dummy0 removed [ 345.493516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.676980][T18654] erspan0: entered promiscuous mode [ 345.707518][ T9300] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.728368][ T9300] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.772387][ T9300] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.814101][ T9300] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.906663][T18678] syzkaller0: entered promiscuous mode [ 345.914374][T18678] syzkaller0: entered allmulticast mode [ 346.015530][T18683] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 346.057960][T18683] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 346.107424][T18688] validate_nla: 4 callbacks suppressed [ 346.107448][T18688] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 346.143007][T18688] team0: Port device dummy0 added [ 346.201531][T18690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.347142][T18703] sctp: [Deprecated]: syz.4.3538 (pid 18703) Use of int in max_burst socket option deprecated. [ 346.347142][T18703] Use struct sctp_assoc_value instead [ 346.438461][T18707] syzkaller0: entered promiscuous mode [ 346.453455][T18707] syzkaller0: entered allmulticast mode [ 346.498563][T18712] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 346.590898][T18716] sctp: [Deprecated]: syz.4.3545 (pid 18716) Use of int in max_burst socket option. [ 346.590898][T18716] Use struct sctp_assoc_value instead [ 346.668874][T18722] bridge4: entered promiscuous mode [ 346.674439][T18722] bridge4: entered allmulticast mode [ 346.708541][T18728] openvswitch: netlink: Message has 8 unknown bytes. [ 346.727034][T18728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.834279][T18737] __nla_validate_parse: 15 callbacks suppressed [ 346.834300][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3548'. [ 346.878285][T18737] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.890392][T18737] bridge_slave_1 (unregistering): left allmulticast mode [ 346.897531][T18737] bridge_slave_1 (unregistering): left promiscuous mode [ 346.910150][T18737] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.129423][T18760] pimreg: entered allmulticast mode [ 349.760355][T18732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.771763][T18748] netlink: 'syz.2.3554': attribute type 11 has an invalid length. [ 349.785685][T18748] netlink: 'syz.2.3554': attribute type 4 has an invalid length. [ 349.793936][T18748] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.3554'. [ 349.860341][T18763] netlink: 'syz.4.3557': attribute type 14 has an invalid length. [ 349.914334][T18766] x_tables: duplicate underflow at hook 3 [ 349.985446][T18774] xt_socket: unknown flags 0x8 [ 349.995694][T18770] openvswitch: netlink: EtherType 0 is less than min 600 [ 350.057551][T18776] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3564'. [ 350.079402][T18776] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 350.096495][T18776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3564'. [ 350.153213][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3566'. [ 350.286038][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 350.344660][T18806] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001 [ 350.369065][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 350.440172][T18813] syzkaller0: entered promiscuous mode [ 350.461277][T18816] netlink: 'syz.2.3576': attribute type 5 has an invalid length. [ 350.468107][T18813] syzkaller0: entered allmulticast mode [ 350.469351][T18816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3576'. [ 350.654214][T18823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.697511][T18823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.881557][T18836] block nbd1: Unsupported socket: should be TCP or UNIX. [ 351.213990][T18860] xt_l2tp: v2 doesn't support IP mode [ 351.242183][T18860] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3590'. [ 351.712599][T18901] netlink: 'syz.2.3602': attribute type 8 has an invalid length. [ 351.735990][T18901] sch_fq: defrate 0 ignored. [ 351.758839][T18910] netlink: 'syz.2.3602': attribute type 8 has an invalid length. [ 351.779268][T18910] sch_fq: defrate 0 ignored. [ 351.894708][T18917] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3606'. [ 351.921136][T18917] netlink: Conntrack attr has 4 unknown bytes [ 351.929229][T18920] openvswitch: netlink: EtherType 50a is less than min 600 [ 351.994827][T18914] syzkaller0: entered promiscuous mode [ 352.014929][T18914] syzkaller0: entered allmulticast mode [ 352.108319][T18934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3611'. [ 352.121461][T18933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3610'. [ 352.280834][T18941] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3612'. [ 352.386950][T18954] netlink: 'syz.2.3616': attribute type 1 has an invalid length. [ 352.408017][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 352.431916][T18954] bond1: entered promiscuous mode [ 352.437395][T18954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.677132][T18951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.686058][T18951] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 352.696911][T18951] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 352.715914][T18951] bond1: (slave ip6gre1): making interface the new active one [ 352.727572][T18951] ip6gre1: entered promiscuous mode [ 352.736270][T18951] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 352.823749][T18968] netlink: 'syz.0.3614': attribute type 5 has an invalid length. [ 352.852085][T18972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3620'. [ 352.852431][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 352.879248][T18965] gretap1: entered promiscuous mode [ 352.892309][T18965] batman_adv: batadv0: Adding interface: gretap1 [ 352.898834][T18965] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.924666][T18965] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 353.148868][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3624'. [ 353.238319][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 353.289477][T19000] lo speed is unknown, defaulting to 1000 [ 353.299940][T19000] lo speed is unknown, defaulting to 1000 [ 353.312869][T19000] lo speed is unknown, defaulting to 1000 [ 353.325819][T19000] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 353.345249][T19000] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 353.364692][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3628'. [ 353.375300][T19000] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 353.392556][T19000] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 353.426615][T19000] lo speed is unknown, defaulting to 1000 [ 353.444446][T19000] lo speed is unknown, defaulting to 1000 [ 353.454507][T19000] lo speed is unknown, defaulting to 1000 [ 353.464934][T19000] lo speed is unknown, defaulting to 1000 [ 353.473559][T19000] lo speed is unknown, defaulting to 1000 [ 353.481327][T19000] lo speed is unknown, defaulting to 1000 [ 353.489096][T19000] lo speed is unknown, defaulting to 1000 [ 353.504406][T19000] lo speed is unknown, defaulting to 1000 [ 353.671082][T19022] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 353.868604][T19035] netlink: 'syz.0.3637': attribute type 1 has an invalid length. [ 354.013207][T19041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 354.119266][T19005] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 354.283434][T19056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 354.376366][T19067] sctp: [Deprecated]: syz.3.3647 (pid 19067) Use of int in maxseg socket option. [ 354.376366][T19067] Use struct sctp_assoc_value instead [ 354.574849][T19087] tipc: Failed to remove unknown binding: 66,0,0/0:2597084092/2597084093 [ 354.591519][T19087] tipc: Failed to remove unknown binding: 66,0,0/0:2597084092/2597084093 [ 354.799896][T19099] sctp: [Deprecated]: syz.3.3658 (pid 19099) Use of int in max_burst socket option deprecated. [ 354.799896][T19099] Use struct sctp_assoc_value instead [ 354.913661][T19104] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 354.954402][T19104] netlink: 'syz.1.3659': attribute type 2 has an invalid length. [ 355.075630][T19120] xt_ecn: cannot match TCP bits for non-tcp packets [ 355.164699][T19126] netlink: 'syz.3.3668': attribute type 3 has an invalid length. [ 355.352805][T19136] netlink: 'syz.2.3673': attribute type 5 has an invalid length. [ 355.412155][ T5630] Bluetooth: hci0: command 0x0c20 tx timeout [ 355.508235][T19150] veth0: entered promiscuous mode [ 355.528314][T19150] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.712984][T19172] netlink: 'syz.2.3683': attribute type 2 has an invalid length. [ 355.730653][T19149] veth0: left promiscuous mode [ 355.898164][T19181] sctp: [Deprecated]: syz.3.3685 (pid 19181) Use of int in maxseg socket option. [ 355.898164][T19181] Use struct sctp_assoc_value instead [ 355.940504][T19185] bridge2: entered allmulticast mode [ 356.157162][T19203] geneve2: entered promiscuous mode [ 356.163072][T19203] geneve2: entered allmulticast mode [ 356.175347][ T6081] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.194753][ T6081] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.216292][ T6081] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.238900][ T6081] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.600132][T19238] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 356.614022][T19238] bond2 (unregistering): Released all slaves [ 356.673292][T19240] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.916903][T19261] vlan0: entered allmulticast mode [ 356.923014][T19261] veth1_virt_wifi: entered allmulticast mode [ 357.035579][T19241] lo speed is unknown, defaulting to 1000 [ 357.307038][T19289] __nla_validate_parse: 22 callbacks suppressed [ 357.307059][T19289] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3713'. [ 357.326583][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3713'. [ 357.336269][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3713'. [ 357.348205][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'. [ 357.440733][T19291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.603525][T19308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.615044][T19308] validate_nla: 68 callbacks suppressed [ 357.615098][T19308] netlink: 'syz.4.3718': attribute type 4 has an invalid length. [ 357.698922][T10866] lo speed is unknown, defaulting to 1000 [ 357.719419][T10866] sy2: Port: 1 Link DOWN [ 357.748296][T19317] batadv_slave_1: entered promiscuous mode [ 357.823775][T19315] syzkaller0: entered promiscuous mode [ 357.852216][T19315] syzkaller0: entered allmulticast mode [ 357.879182][T19309] batadv_slave_1: left promiscuous mode [ 357.897549][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3721'. [ 357.907734][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3721'. [ 358.645177][T19333] netlink: 'syz.2.3727': attribute type 12 has an invalid length. [ 358.659023][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3725'. [ 358.701916][T19331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3729'. [ 358.724123][T19331] mac80211_hwsim hwsim39 : renamed from wlan1 (while UP) [ 358.772906][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3731'. [ 358.854513][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 358.924387][T19346] syzkaller0: entered promiscuous mode [ 358.931124][T19356] netlink: 'syz.3.3736': attribute type 21 has an invalid length. [ 358.942710][T19346] syzkaller0: entered allmulticast mode [ 358.961541][T19348] team0: entered promiscuous mode [ 358.967988][T19348] team0: left promiscuous mode [ 359.085138][T19367] openvswitch: netlink: Missing key (keys=40, expected=100) [ 359.207028][T19378] netlink: 'syz.4.3742': attribute type 23 has an invalid length. [ 359.326584][T19388] netlink: 'syz.1.3744': attribute type 6 has an invalid length. [ 359.404661][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.428602][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.474297][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.493840][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.511415][T19400] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 359.682096][T19418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.010983][T19448] gretap0: entered promiscuous mode [ 360.021938][T19448] vlan2: entered promiscuous mode [ 360.166772][T19458] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.196522][T19468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.278653][T19473] veth0: entered promiscuous mode [ 360.515699][T19496] sctp: [Deprecated]: syz.2.3773 (pid 19496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.515699][T19496] Use struct sctp_sack_info instead [ 360.710829][T19507] veth1_to_team: mtu less than device minimum [ 360.737441][T19511] netlink: 'syz.0.3780': attribute type 7 has an invalid length. [ 360.756358][T19511] netlink: 'syz.0.3780': attribute type 8 has an invalid length. [ 360.917218][T19523] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 360.932597][T19523] bond2 (unregistering): Released all slaves [ 360.974072][T19529] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 361.016220][T19529] bond5 (unregistering): Released all slaves [ 361.215062][T19552] gre1: left allmulticast mode [ 361.227049][T19550] syzkaller0: entered promiscuous mode [ 361.240947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.254357][T19550] syzkaller0: entered allmulticast mode [ 361.265845][T19550] tipc: Started in network mode [ 361.271113][T19550] tipc: Node identity 82b00b96e8cb, cluster identity 4711 [ 361.278385][T19550] tipc: Enabled bearer , priority 0 [ 361.293135][T19549] tipc: Resetting bearer [ 361.303439][T19549] tipc: Disabling bearer [ 361.840009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.080560][T19591] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 362.395170][T19612] __nla_validate_parse: 17 callbacks suppressed [ 362.395191][T19612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3804'. [ 362.420049][T19612] unsupported nlmsg_type 40 [ 362.495198][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3802'. [ 362.537106][T19613] team0: entered promiscuous mode [ 362.542501][T19613] team_slave_0: entered promiscuous mode [ 362.549528][T19613] team_slave_1: entered promiscuous mode [ 362.577011][T19613] team0: left promiscuous mode [ 362.588096][T19613] team_slave_0: left promiscuous mode [ 362.600960][T19613] team_slave_1: left promiscuous mode [ 362.762117][T19618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3806'. [ 363.500620][T10875] hid-generic 0005:0006:0003.0001: item fetching failed at offset 0/1 [ 363.509434][T10875] hid-generic 0005:0006:0003.0001: probe with driver hid-generic failed with error -22 [ 363.522910][T19671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3817'. [ 363.542914][T19636] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.703036][T19636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.716069][T19636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.865913][T19636] macvtap0: left promiscuous mode [ 363.900280][T19636] veth3: left allmulticast mode [ 363.910372][T19636] geneve2: left promiscuous mode [ 363.915522][T19636] geneve2: left allmulticast mode [ 364.020390][ T9300] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.033044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.068889][ T9300] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 364.101911][ T9300] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.146259][ T9300] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 364.213483][T19676] bridge_slave_0: left allmulticast mode [ 364.229453][T19676] bridge_slave_0: left promiscuous mode [ 364.240634][T19676] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.261340][T19676] bridge_slave_1: left allmulticast mode [ 364.271501][T19676] bridge_slave_1: left promiscuous mode [ 364.277469][T19676] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.298661][T19676] bond0: (slave bond_slave_0): Releasing backup interface [ 364.320895][T19676] bond0: (slave bond_slave_1): Releasing backup interface [ 364.342717][T19676] team0: Port device team_slave_0 removed [ 364.355576][T19676] team0: Port device team_slave_1 removed [ 364.361997][T19676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.372986][T19676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.394485][T19676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.411976][ T9300] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.429782][ T9300] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 364.460275][ T9300] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.479453][ T9300] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 364.510242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.903834][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 364.928948][T19730] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.936442][T19730] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.192337][T19757] netlink: 'syz.4.3839': attribute type 11 has an invalid length. [ 365.201093][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 365.229136][ T9300] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.238533][T19757] netlink: 'syz.4.3839': attribute type 11 has an invalid length. [ 365.250191][ T9300] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.261224][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 365.271306][ T9300] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.283358][ T9300] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.461536][T19766] netlink: 'syz.0.3842': attribute type 9 has an invalid length. [ 365.471663][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 365.566218][T19777] Can't find ip_set type bitmap:ip,mac [ 365.579266][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'. [ 365.622514][T19783] bond2: entered promiscuous mode [ 365.625878][T19786] sctp: [Deprecated]: syz.3.3848 (pid 19786) Use of int in maxseg socket option. [ 365.625878][T19786] Use struct sctp_assoc_value instead [ 365.628968][T19783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.725623][T19783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.740456][T19783] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 365.752440][T19783] bond2: (slave sit1): Error -95 calling set_mac_address [ 365.770469][T19793] netlink: 'syz.3.3852': attribute type 62 has an invalid length. [ 365.795425][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3853'. [ 366.031124][T19817] xt_cgroup: path and classid specified [ 366.044867][T19821] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 366.134022][T19821] bond3: entered promiscuous mode [ 366.153103][T19821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.173342][T19832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.181674][T19832] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 366.192560][T19832] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 366.204813][T19832] bond3: (slave ip6gre2): making interface the new active one [ 366.213398][T19832] ip6gre2: entered promiscuous mode [ 366.220942][T19832] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 366.283662][T19847] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.290225][T19847] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.514810][T19861] netlink: set zone limit has 4 unknown bytes [ 366.524832][T19861] netlink: zone id is out of range [ 366.539211][T19861] netlink: zone id is out of range [ 367.523952][T19891] __nla_validate_parse: 9 callbacks suppressed [ 367.523973][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3881'. [ 367.524189][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3881'. [ 368.908039][T19817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.052507][T19910] tipc: Enabling of bearer rejected, media not registered [ 369.077022][T19908] gtp0: entered promiscuous mode [ 369.091442][T19908] gtp0: entered allmulticast mode [ 369.138154][T19902] tipc: Started in network mode [ 369.155897][T19902] tipc: Node identity d27f9bcc748a, cluster identity 4711 [ 369.188790][T19902] tipc: Enabled bearer , priority 0 [ 369.240870][T19927] netlink: 'syz.1.3891': attribute type 5 has an invalid length. [ 369.303977][T19910] syzkaller0: entered promiscuous mode [ 369.309950][T19910] syzkaller0: entered allmulticast mode [ 369.318384][T19910] tipc: Resetting bearer [ 369.367940][T19901] tipc: Resetting bearer [ 369.419858][T19901] tipc: Disabling bearer [ 369.534447][T19951] nbd: must specify at least one socket [ 369.595861][T19959] netlink: 'syz.2.3900': attribute type 1 has an invalid length. [ 369.673787][T19966] netlink: 'syz.0.3902': attribute type 10 has an invalid length. [ 369.682911][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 369.692635][T19966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.715248][T19959] bond4: (slave geneve3): making interface the new active one [ 369.734661][T19959] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 369.762154][T19964] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 369.774508][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3900'. [ 369.795574][ T76] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 369.821949][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 369.855413][T19959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.877917][ T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 370.034660][T19997] netlink: 'syz.1.3909': attribute type 1 has an invalid length. [ 370.064394][T20000] veth1_to_bond: entered allmulticast mode [ 370.079177][T20001] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3911'. [ 370.091854][T20000] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 370.143599][T20004] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.157576][T19997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.171959][T20007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3907'. [ 370.203615][T19997] macvlan0: entered promiscuous mode [ 370.212298][T19997] macvlan0: entered allmulticast mode [ 370.219102][T19997] bond3: entered promiscuous mode [ 370.227376][T19997] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 370.262181][T19997] bond3: left promiscuous mode [ 370.321313][T20002] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 370.347629][T20005] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 370.358423][T20000] veth1_to_bond: left allmulticast mode [ 370.474425][T20016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3917'. [ 370.588198][T20027] netlink: 'syz.2.3917': attribute type 1 has an invalid length. [ 370.734699][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 371.138583][T20067] tipc: Started in network mode [ 371.147781][T20067] tipc: Node identity 52681ae3434d, cluster identity 4711 [ 371.156228][T20067] tipc: Enabled bearer , priority 0 [ 371.165054][T20069] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3932'. [ 371.214201][T20067] syzkaller0: entered promiscuous mode [ 371.220169][T20067] syzkaller0: entered allmulticast mode [ 371.226485][T20067] tipc: Resetting bearer [ 371.238287][T20075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3931'. [ 371.248857][T20071] syzkaller0: entered promiscuous mode [ 371.256210][T20071] syzkaller0: entered allmulticast mode [ 371.267389][T20066] tipc: Resetting bearer [ 371.322650][T20066] tipc: Disabling bearer [ 371.545699][T20092] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 371.609303][T20094] IPVS: length: 239 != 24 [ 372.172572][T20139] syzkaller0: entered promiscuous mode [ 372.178249][T20139] syzkaller0: entered allmulticast mode [ 372.203031][T20141] netlink: 'syz.3.3952': attribute type 8 has an invalid length. [ 372.604026][T20175] __nla_validate_parse: 10 callbacks suppressed [ 372.604048][T20175] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3965'. [ 372.620879][T20176] IPVS: ip_vs_add_dest(): server weight less than zero [ 372.636993][T20179] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3964'. [ 372.713706][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 372.734367][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 373.605645][T20257] netlink: 'syz.4.3991': attribute type 10 has an invalid length. [ 373.638537][T20257] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 373.650409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.688669][T20263] netlink: 'syz.1.3993': attribute type 4 has an invalid length. [ 373.715224][T20266] netlink: 'syz.0.3994': attribute type 21 has an invalid length. [ 373.727330][T20257] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3991'. [ 373.793857][T20270] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 373.802618][T20270] veth0: entered promiscuous mode [ 373.993358][T20288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4002'. [ 374.083581][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 374.093054][T20292] block nbd1: Unsupported socket: should be TCP or UNIX. [ 374.305950][T20309] IPv6: addrconf: prefix option has invalid lifetime [ 374.931439][T20318] veth0: entered promiscuous mode [ 374.945628][T20269] veth0: left promiscuous mode [ 374.985364][T20318] veth0: left promiscuous mode [ 375.012326][T20329] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4016'. [ 375.041836][T20331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4015'. [ 375.101334][T20333] 8021q: VLANs not supported on gre0 [ 375.113594][T20333] tipc: Enabling of bearer rejected, failed to enable media [ 375.220583][T20340] rB: renamed from lo (while UP) [ 375.283944][T20349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.638833][T20381] tipc: Started in network mode [ 375.646349][T20381] tipc: Node identity a28f6f2a83b2, cluster identity 4711 [ 375.655077][T20381] tipc: Enabled bearer , priority 0 [ 375.664909][T20379] tipc: Enabling of bearer rejected, already enabled [ 375.673606][T20381] syzkaller0: entered promiscuous mode [ 375.679233][T20381] syzkaller0: entered allmulticast mode [ 375.687824][T20379] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 375.704720][T20383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4032'. [ 375.707427][T20381] tipc: Resetting bearer [ 375.720533][T20379] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 375.728529][T20381] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 375.743559][T20383] geneve4: entered promiscuous mode [ 375.749357][T20377] tipc: Resetting bearer [ 375.760813][T20377] tipc: Disabling bearer [ 375.789319][T20386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.889074][T20393] syzkaller0: entered promiscuous mode [ 375.896251][T20393] syzkaller0: entered allmulticast mode [ 375.980528][T20397] xt_socket: unknown flags 0xe4 [ 376.661209][T20406] netlink: 'syz.1.4039': attribute type 8 has an invalid length. [ 376.818107][T20403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.885026][T20406] macvlan0: entered promiscuous mode [ 376.891310][T20406] macvlan0: entered allmulticast mode [ 376.898790][T20406] bond4: entered promiscuous mode [ 376.904480][T20406] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 376.916737][T20420] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.933216][T20406] bond4: left promiscuous mode [ 377.004029][T20414] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 377.034810][T20414] bond5 (unregistering): Released all slaves [ 377.399305][T20455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.760321][T20484] __nla_validate_parse: 13 callbacks suppressed [ 377.760342][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'. [ 377.881797][T20492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.894157][T20495] netlink: 'syz.4.4065': attribute type 1 has an invalid length. [ 377.940180][T20498] IPVS: set_ctl: invalid protocol: 134 224.0.0.1:20003 [ 377.984625][T20498] ipt_rpfilter: unknown options [ 378.109082][T20506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4068'. [ 378.172832][T20507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4068'. [ 378.268140][T20520] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 378.340659][T20525] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 378.365736][T20525] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 378.382553][T20525] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 378.397134][T20525] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 378.420146][T20526] tunl0: entered promiscuous mode [ 378.428047][T20525] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4077'. [ 378.451338][T20526] netlink: 'syz.3.4074': attribute type 3 has an invalid length. [ 378.482690][T20526] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4074'. [ 378.916409][T20556] syzkaller0: entered promiscuous mode [ 378.922975][T20556] syzkaller0: entered allmulticast mode [ 379.292218][T20577] smc: net device team0 applied user defined pnetid SYZ2 [ 379.303405][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 379.426835][T20591] netlink: 'syz.0.4096': attribute type 1 has an invalid length. [ 379.460336][T20591] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4096'. [ 379.494769][T20591] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4096'. [ 379.530776][T20599] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 379.547245][T20591] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4096'. [ 379.563232][T20599] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 379.741848][T20615] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.783417][T20615] syzkaller0: entered promiscuous mode [ 379.817847][T20619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4103'. [ 380.264342][T20636] No such timeout policy "syz1" [ 380.334955][T20644] tipc: Enabled bearer , priority 0 [ 380.350314][T20642] tipc: Enabling of bearer rejected, already enabled [ 380.394394][T20647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 380.485378][T20642] syzkaller0: entered promiscuous mode [ 380.509680][T20642] syzkaller0: entered allmulticast mode [ 380.528854][T20642] tipc: Resetting bearer [ 380.607278][T20642] tipc: Resetting bearer [ 380.752001][T20642] tipc: Disabling bearer [ 380.763514][ T5630] Bluetooth: hci1: link tx timeout [ 380.769097][ T5630] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 380.777722][ T5630] Bluetooth: hci1: link tx timeout [ 380.783746][ T5630] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 380.867954][T20632] infiniband syz0: set active [ 380.891211][T20632] infiniband syz0: added bond_slave_0 [ 380.950769][T20632] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 380.968124][T20632] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 380.986677][T20632] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 381.040822][T20632] RDS/IB: syz0: added [ 381.044981][T20669] bridge6: entered promiscuous mode [ 381.062103][T20632] smc: adding ib device syz0 with port count 1 [ 381.072336][T20669] bridge6: entered allmulticast mode [ 381.090333][T20632] smc: ib device syz0 port 1 has no pnetid [ 381.578616][T20700] syzkaller0: entered promiscuous mode [ 381.590765][T20700] syzkaller0: entered allmulticast mode [ 381.865163][T20713] tipc: Failed to remove unknown binding: 66,0,0/0:2611844405/2611844407 [ 381.874576][T20713] tipc: Failed to remove unknown binding: 66,0,0/0:2611844405/2611844406 [ 381.885068][T20713] tipc: Failed to remove unknown binding: 66,0,0/0:2611844405/2611844407 [ 381.897409][T20713] tipc: Failed to remove unknown binding: 66,0,0/0:2611844405/2611844406 [ 382.612767][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 382.671488][T20723] Bluetooth: MGMT ver 1.23 [ 382.841621][T20728] syzkaller0: entered promiscuous mode [ 382.850474][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 382.855239][T20728] syzkaller0: entered allmulticast mode [ 383.316912][T20709] lo speed is unknown, defaulting to 1000 [ 383.332370][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 383.353803][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 383.619227][T20756] __nla_validate_parse: 5 callbacks suppressed [ 383.619266][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4140'. [ 383.755565][T20762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4139'. [ 383.826336][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4139'. [ 384.026402][T20762] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 384.077052][T20705] infiniband syz1: set active [ 384.082145][T20705] infiniband syz1: added xfrm0 [ 384.095039][T20705] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 384.110615][T20705] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 384.128273][T20705] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 384.163340][T20762] bond5 (unregistering): Released all slaves [ 384.275208][T20705] RDS/IB: syz1: added [ 384.294992][T20705] smc: adding ib device syz1 with port count 1 [ 384.308701][T20705] smc: ib device syz1 port 1 has no pnetid [ 384.345185][ T5742] xfrm0 speed is unknown, defaulting to 1000 [ 384.363844][T10643] xfrm0 speed is unknown, defaulting to 1000 [ 384.391342][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 384.860249][T20788] bond2 (unregistering): Released all slaves [ 384.869704][T20799] validate_nla: 1 callbacks suppressed [ 384.869722][T20799] netlink: 'syz.2.4146': attribute type 1 has an invalid length. [ 384.913803][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 384.931104][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 385.198336][T20811] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4151'. [ 387.865021][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 388.333382][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 388.560742][T20877] netlink: 'syz.2.4158': attribute type 2 has an invalid length. [ 388.598919][T20877] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4158'. [ 388.644597][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 388.669794][T20877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4158'. [ 388.681783][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 388.699572][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 388.721347][T20886] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4160'. [ 388.740549][T20877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4158'. [ 388.822872][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 389.158929][T20908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4165'. [ 389.182097][T20903] bridge4: entered promiscuous mode [ 389.201268][T20903] bridge4: entered allmulticast mode [ 389.400775][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 389.419097][T20922] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.528497][T20927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4169'. [ 389.663914][T20934] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 389.707638][T20934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.714974][T20934] IPv6: NLM_F_CREATE should be set when creating new route [ 389.758274][T20934] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 389.798330][T20934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.861340][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 390.064016][T20947] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 390.582948][T20705] xfrm0 speed is unknown, defaulting to 1000 [ 390.826538][T20985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4184'. [ 390.908812][T20991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4184'. [ 391.709801][T21034] batadv0: entered promiscuous mode [ 391.739420][T21034] macsec1: entered promiscuous mode [ 391.772494][T21034] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 391.938150][T21050] vcan0: entered allmulticast mode [ 392.011846][T21055] netlink: 'syz.3.4200': attribute type 97 has an invalid length. [ 392.058623][T21059] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 392.754484][T21094] syz_tun: refused to change device tx_queue_len [ 392.813641][T21094] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 392.868506][T21099] x_tables: duplicate underflow at hook 2 [ 393.148382][T21121] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 393.405827][T21121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.415855][T21123] ip_vti0: entered promiscuous mode [ 393.655927][T21143] __nla_validate_parse: 8 callbacks suppressed [ 393.655978][T21143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 393.703254][T21155] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4227'. [ 393.718310][T21143] veth1_to_team: Caught tx_queue_len zero misconfig [ 393.805172][T21162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4227'. [ 393.914013][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 393.931705][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 393.957249][T21168] netlink: 'syz.2.4229': attribute type 1 has an invalid length. [ 393.988636][T21171] ksmbd: Unknown IPC event: 3, ignore. [ 394.119272][T21174] macvlan0: entered promiscuous mode [ 394.139884][T21174] macvlan0: entered allmulticast mode [ 394.148344][T21174] bond5: entered promiscuous mode [ 394.154358][T21174] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 394.164338][T21174] bond5: left promiscuous mode [ 394.173705][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 394.184638][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 394.381317][T21200] netlink: 'syz.3.4235': attribute type 9 has an invalid length. [ 394.682899][T21221] veth1_to_bond: entered allmulticast mode [ 394.786579][T21229] veth1_to_bond: left allmulticast mode [ 394.820506][T21233] netlink: 'syz.3.4235': attribute type 9 has an invalid length. [ 394.911253][T21237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4245'. [ 394.942449][T21241] netlink: 'syz.4.4247': attribute type 1 has an invalid length. [ 394.955829][T21240] netlink: 620 bytes leftover after parsing attributes in process `syz.2.4246'. [ 394.983579][T21240] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 395.070192][T21241] bond2: entered promiscuous mode [ 395.093261][T21241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.123846][T21249] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20000 [ 395.132524][T21250] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20000 [ 395.207441][T21253] netlink: 'syz.3.4248': attribute type 21 has an invalid length. [ 395.308816][T21260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4252'. [ 395.376856][T21245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.386879][T21245] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 395.397554][T21245] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 395.415597][T21245] bond2: (slave ip6gre1): making interface the new active one [ 395.425065][T21245] ip6gre1: entered promiscuous mode [ 395.444320][T21245] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 395.598047][T21272] netlink: 'syz.1.4255': attribute type 1 has an invalid length. [ 395.640009][T21272] netlink: 'syz.1.4255': attribute type 2 has an invalid length. [ 395.746456][T21278] syzkaller0: entered promiscuous mode [ 395.756045][T21278] syzkaller0: entered allmulticast mode [ 395.959063][T21299] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 395.994706][T21299] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 396.076890][T21306] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.158942][T21310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.172549][T21310] bond0: (slave bond5): Enslaving as an active interface with an up link [ 396.536353][T21342] syzkaller0: entered promiscuous mode [ 396.544441][T21342] syzkaller0: entered allmulticast mode [ 396.900551][T21360] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 397.304889][T21380] syzkaller1: entered promiscuous mode [ 397.329311][T21380] syzkaller1: entered allmulticast mode [ 397.578214][T21405] validate_nla: 4 callbacks suppressed [ 397.578237][T21405] netlink: 'syz.4.4294': attribute type 1 has an invalid length. [ 397.718862][T21411] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 397.743675][T21411] bond3 (unregistering): Released all slaves [ 398.237097][T21436] lo: Caught tx_queue_len zero misconfig [ 398.664794][T21467] __nla_validate_parse: 12 callbacks suppressed [ 398.664817][T21467] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4310'. [ 398.845879][T21473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4316'. [ 399.103528][T21494] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4319'. [ 399.124763][T21493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4318'. [ 399.325826][T21504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4320'. [ 399.356197][T21469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.388684][T21482] syzkaller0: entered promiscuous mode [ 399.404748][T21482] syzkaller0: entered allmulticast mode [ 399.431457][ T5742] xfrm0 speed is unknown, defaulting to 1000 [ 399.450419][ T5742] syz1: Port: 1 Link DOWN [ 399.506574][ T5742] xfrm0 speed is unknown, defaulting to 1000 [ 399.608449][T21509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4322'. [ 399.640888][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4321'. [ 399.654496][T21509] xt_TCPMSS: Only works on TCP SYN packets [ 399.714149][T21509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4322'. [ 399.724017][T21517] netlink: 'syz.4.4325': attribute type 23 has an invalid length. [ 399.832447][T21521] netlink: 'syz.3.4327': attribute type 7 has an invalid length. [ 399.847287][T21521] netlink: 'syz.3.4327': attribute type 5 has an invalid length. [ 399.858452][T21521] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4327'. [ 399.942775][T21526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4328'. [ 400.074967][T21532] netlink: 'syz.4.4330': attribute type 21 has an invalid length. [ 400.092282][T21526] netlink: 'syz.3.4328': attribute type 11 has an invalid length. [ 400.100234][T21532] netlink: 'syz.4.4330': attribute type 1 has an invalid length. [ 400.267981][T21537] syzkaller0: entered promiscuous mode [ 400.306187][T21537] syzkaller0: entered allmulticast mode [ 400.376959][T21550] gtp1: entered allmulticast mode [ 400.404223][T21550] team0: Port device gtp1 added [ 400.635016][T21573] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 400.654243][T21572] sctp: [Deprecated]: syz.1.4340 (pid 21572) Use of int in maxseg socket option. [ 400.654243][T21572] Use struct sctp_assoc_value instead [ 400.693296][T21567] netlink: 'syz.0.4338': attribute type 1 has an invalid length. [ 400.774119][T21579] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 400.985708][ T30] audit: type=1107 audit(1782173510.018:11): pid=21592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='S2ݹd#/ {/Uio{ ]ma[BKZdAOMӋMZE,c [ 400.985708][ T30] ɽhOfp~ɉA,qNs]ӏ"Сްڧ]~gW,cc.M~~_/S8, priority 0 [ 401.822147][T21630] syzkaller0: entered promiscuous mode [ 401.859304][T21630] syzkaller0: entered allmulticast mode [ 401.946675][T21655] syzkaller0: entered promiscuous mode [ 401.955441][T21659] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 401.969125][T21655] syzkaller0: entered allmulticast mode [ 402.499798][ T29] tipc: Node number set to 1786448790 [ 402.695256][T21698] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 402.695271][T21697] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 402.833028][T21698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.116584][T21715] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 403.182924][T21723] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004 [ 404.026128][T21759] netlink: 'syz.3.4391': attribute type 1 has an invalid length. [ 404.052872][T21759] bond5: entered promiscuous mode [ 404.059247][T21759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.104595][T21759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.126391][T21759] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 404.184711][T21759] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 404.197788][T21759] bond5: (slave ip6gre1): making interface the new active one [ 404.214827][T21759] ip6gre1: entered promiscuous mode [ 404.221769][T21759] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 404.325015][T21771] __nla_validate_parse: 17 callbacks suppressed [ 404.325041][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4394'. [ 404.342604][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4394'. [ 404.376779][T21773] 0: reclassify loop, rule prio 0, protocol 700 [ 405.169685][ T5623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 405.171433][ T5630] Bluetooth: hci0: command 0x0c20 tx timeout [ 406.420660][T21739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.609474][T21787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4398'. [ 406.631545][T21784] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 406.653179][T21788] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 406.692044][T21789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4397'. [ 406.865047][T21802] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 406.893449][T21806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4403'. [ 406.900771][T21804] syzkaller0: entered promiscuous mode [ 406.908086][T21804] syzkaller0: entered allmulticast mode [ 406.956624][T21810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4407'. [ 407.016303][T21814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4406'. [ 407.042910][T21815] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 407.073579][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4406'. [ 407.120464][T21818] geneve2: entered promiscuous mode [ 407.198441][T21814] veth0_macvtap: left promiscuous mode [ 407.623935][T21842] batadv0: entered promiscuous mode [ 407.652070][T21842] macsec2: entered promiscuous mode [ 407.676958][T21842] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 407.697817][T21842] batadv0: left promiscuous mode [ 407.758085][T21855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4420'. [ 407.788937][T21855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4420'. [ 408.018374][T21870] veth7: entered promiscuous mode [ 408.323842][T21902] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 408.479340][T21891] netlink: 'syz.2.4430': attribute type 8 has an invalid length. [ 408.487368][T21891] sch_fq: defrate 0 ignored. [ 408.684795][T21905] macvtap1: entered allmulticast mode [ 408.780705][T21909] bond6: (slave bridge5): making interface the new active one [ 408.821100][T21909] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 408.877569][T21921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.898583][T21921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.109115][T21935] netlink: 'syz.3.4439': attribute type 18 has an invalid length. [ 409.174225][ T76] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.188429][T21935] netlink: 'syz.3.4439': attribute type 18 has an invalid length. [ 409.210501][ T76] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.245079][T21940] vcan1: entered promiscuous mode [ 409.260077][T21940] vcan1: entered allmulticast mode [ 409.288261][ T76] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.319429][ T76] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.450775][T21951] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 409.547273][T21955] netlink: 'syz.4.4448': attribute type 1 has an invalid length. [ 409.559229][T21956] netlink: 'syz.3.4447': attribute type 1 has an invalid length. [ 409.605383][T21955] __nla_validate_parse: 8 callbacks suppressed [ 409.605403][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4448'. [ 409.636765][T21956] bond6: entered promiscuous mode [ 409.642106][T21955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4448'. [ 409.653736][T21956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.660462][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a25e000: rx timeout, send abort [ 409.705860][T21956] bond6: (slave bridge5): making interface the new active one [ 409.721432][T21956] bridge5: entered promiscuous mode [ 409.742289][T21956] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 409.869215][T21969] syzkaller0: entered promiscuous mode [ 409.876672][T21969] syzkaller0: entered allmulticast mode [ 410.086891][T21973] netlink: 'syz.3.4452': attribute type 1 has an invalid length. [ 410.130708][T21973] bond7: entered promiscuous mode [ 410.136304][T21973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.159106][T21973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.167483][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a25d800: rx timeout, send abort [ 410.167512][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a25e000: abort rx timeout. Force session deactivation [ 410.187553][T21973] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 410.198685][T21977] netlink: 'syz.3.4452': attribute type 1 has an invalid length. [ 410.207998][T21973] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 410.221116][T21973] bond7: (slave ip6gre2): making interface the new active one [ 410.228825][T21973] ip6gre2: entered promiscuous mode [ 410.236091][T21973] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 410.420788][T21990] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4457'. [ 410.431145][T21990] openvswitch: netlink: Missing key (keys=40, expected=100) [ 410.523414][T21996] netlink: 'syz.3.4458': attribute type 1 has an invalid length. [ 410.533010][T21996] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4458'. [ 410.662763][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036d62800: rx timeout, send abort [ 410.671316][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a25d800: abort rx timeout. Force session deactivation [ 411.062793][T22033] gtp1: entered allmulticast mode [ 411.070648][T22033] team0: Port device gtp1 added [ 411.171069][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036d62800: abort rx timeout. Force session deactivation [ 411.293401][T22038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4471'. [ 411.309324][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 411.317832][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 411.330882][T18658] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 411.339775][ T29] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 412.290587][T18658] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 412.529838][T19056] IPVS: ip_vs_send_async error -101 [ 412.777971][T21961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.980278][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4478'. [ 413.005672][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4478'. [ 413.026857][T22050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.134102][T22061] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4481'. [ 413.178691][T22060] netlink: 'syz.1.4481': attribute type 16 has an invalid length. [ 413.208271][T22061] netlink: 275 bytes leftover after parsing attributes in process `syz.1.4481'. [ 413.228414][T22060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4481'. [ 413.248435][T22060] veth0_macvtap: entered allmulticast mode [ 413.337965][T22066] tipc: Enabled bearer , priority 0 [ 413.384995][T22063] tipc: Disabling bearer [ 413.414144][ T30] audit: type=1107 audit(1782173522.448:14): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠ 6򊨊' [ 413.819046][T22106] netlink: 'syz.3.4495': attribute type 1 has an invalid length. [ 413.846090][T22102] team1: entered promiscuous mode [ 413.856227][T22102] team1: entered allmulticast mode [ 414.437574][T22146] netlink: 'syz.2.4507': attribute type 2 has an invalid length. [ 414.458800][T22146] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 414.508760][T22146] bond6: entered promiscuous mode [ 414.524746][T22146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.665728][T22159] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 414.684342][T22159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.848499][T22172] block nbd1: Unsupported socket: should be TCP or UNIX. [ 414.938382][T22172] __nla_validate_parse: 10 callbacks suppressed [ 414.938414][T22172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4513'. [ 415.007112][T22188] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 415.041319][T22187] netlink: 'syz.2.4516': attribute type 1 has an invalid length. [ 415.081972][T22187] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4516'. [ 415.137098][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4518'. [ 415.161811][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4519'. [ 415.447832][T22213] tipc: Enabled bearer , priority 0 [ 415.460975][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4523'. [ 415.476746][T22213] syzkaller0: entered promiscuous mode [ 415.483205][T22213] syzkaller0: entered allmulticast mode [ 415.557706][T22213] syzkaller0: left promiscuous mode [ 415.578873][T22213] syzkaller0: left allmulticast mode [ 415.608977][T22213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.649897][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 415.665688][T22212] tipc: Resetting bearer [ 415.704389][T22212] tipc: Disabling bearer [ 415.752869][T22233] ip6t_REJECT: ECHOREPLY is not supported [ 415.862618][T22240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4532'. [ 415.915604][T22241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4532'. [ 416.008852][T22247] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4534'. [ 416.127220][T22257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4537'. [ 416.166471][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4537'. [ 416.185450][T22259] bond0: (slave bond_slave_1): Releasing backup interface [ 416.213691][T22261] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20002 [ 416.851601][ T5623] Bluetooth: hci0: command 0x0c20 tx timeout [ 417.062729][T22312] veth7: entered promiscuous mode [ 417.078895][T22320] vcan0: tx address claim with dlc 0 [ 417.144347][T22322] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 417.147234][T22320] syzkaller0: entered promiscuous mode [ 417.164125][T22320] syzkaller0: entered allmulticast mode [ 417.185720][T22318] tipc: Enabled bearer , priority 0 [ 417.222860][T22318] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 417.277078][T22329] syzkaller0: entered promiscuous mode [ 417.290642][T22329] syzkaller0: entered allmulticast mode [ 417.339393][T22318] tipc: Resetting bearer [ 417.353356][T22318] tipc: Disabling bearer [ 417.386733][T22329] ip6tnl0: Caught tx_queue_len zero misconfig [ 417.475853][T22355] netlink: 'syz.3.4569': attribute type 11 has an invalid length. [ 417.501881][T22349] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.512515][T22357] netlink: 'syz.3.4569': attribute type 11 has an invalid length. [ 417.534002][T22349] syzkaller0: entered promiscuous mode [ 417.546054][T22349] syzkaller0: entered allmulticast mode [ 417.571129][T22360] x_tables: unsorted underflow at hook 4 [ 417.963906][ T29] hid-generic 0005:0458:0440.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 418.211170][T22408] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 418.553132][T22428] bond5: option min_links: invalid value (18446744073709551614) [ 418.561827][T22428] bond5: option min_links: allowed values 0 - 2147483647 [ 418.571629][T22428] bond5 (unregistering): Released all slaves [ 418.596500][T22431] syzkaller1: entered promiscuous mode [ 418.602177][T22431] syzkaller1: entered allmulticast mode [ 420.726024][T22369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.745326][T22424] __nla_validate_parse: 18 callbacks suppressed [ 420.745377][T22424] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4585'. [ 420.795131][T22442] netlink: 'syz.1.4590': attribute type 1 has an invalid length. [ 420.917210][T22444] netlink: 'syz.3.4591': attribute type 39 has an invalid length. [ 420.961581][T22453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4594'. [ 421.173162][T22467] netlink: 'syz.3.4597': attribute type 10 has an invalid length. [ 421.212087][T22467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4597'. [ 421.233201][T22475] syzkaller0: entered promiscuous mode [ 421.240320][T22475] syzkaller0: entered allmulticast mode [ 421.256626][T22467] team0: Device geneve1 is of different type [ 421.276202][T22467] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 421.634763][T22495] bond2: entered allmulticast mode [ 421.645441][T22495] ip6gre1: entered allmulticast mode [ 421.681440][T22494] bond2: left allmulticast mode [ 421.692277][T22494] ip6gre1: left allmulticast mode [ 421.713328][T22497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4608'. [ 421.853005][T22507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4610'. [ 421.866352][T22504] syzkaller0: entered promiscuous mode [ 421.874340][T22504] syzkaller0: entered allmulticast mode [ 421.913566][T22511] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 422.087674][T22519] Unknown options in mask b7f2 [ 422.133004][T22524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4615'. [ 422.143690][T22524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4615'. [ 422.695398][T22562] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4626'. [ 422.764522][T22561] veth9: entered allmulticast mode [ 422.787600][T22571] netlink: 'syz.1.4629': attribute type 1 has an invalid length. [ 422.885358][T22571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.924427][T22575] bond7: entered promiscuous mode [ 422.934685][T22575] bond7: entered allmulticast mode [ 422.941897][T22577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.986521][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4632'. [ 423.298983][T22599] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 423.323823][T22601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4640'. [ 423.901520][T22638] vlan1: entered allmulticast mode [ 423.914246][T22638] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 423.984078][T22646] x_tables: duplicate underflow at hook 1 [ 423.992198][T22645] x_tables: duplicate underflow at hook 1 [ 424.209819][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 424.616236][T22686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 424.636241][T22686] bond9 (unregistering): Released all slaves [ 424.932240][T22718] sctp: [Deprecated]: syz.3.4670 (pid 22718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.932240][T22718] Use struct sctp_sack_info instead [ 425.843682][T22781] netlink: 'syz.0.4690': attribute type 1 has an invalid length. [ 425.901069][T22783] netlink: 'syz.2.4691': attribute type 1 has an invalid length. [ 425.948894][T22783] 8021q: adding VLAN 0 to HW filter on device bond9 [ 425.966973][T22789] bond9: (slave gretap1): making interface the new active one [ 425.977703][T22789] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 426.017261][T22794] __nla_validate_parse: 9 callbacks suppressed [ 426.017282][T22794] netlink: 496 bytes leftover after parsing attributes in process `syz.1.4695'. [ 426.140972][T22803] sctp: [Deprecated]: syz.1.4695 (pid 22803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.140972][T22803] Use struct sctp_sack_info instead [ 426.144394][T22805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4697'. [ 426.312709][T22814] x_tables: unsorted entry at hook 3 [ 426.345324][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4698'. [ 426.377429][T22815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4698'. [ 426.416829][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 426.464553][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4701'. [ 426.996849][T22866] netlink: 'syz.1.4712': attribute type 1 has an invalid length. [ 427.023119][T22866] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.253676][T22879] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4715'. [ 429.533402][T22835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.710547][T22900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4722'. [ 429.840246][T22907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4723'. [ 429.858634][T22907] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4723'. [ 429.942655][T22916] netlink: 'syz.0.4729': attribute type 17 has an invalid length. [ 429.970632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.042085][ T1166] pim6reg: left allmulticast mode [ 430.060424][ T1166] pimreg: left allmulticast mode [ 430.121765][ T1166] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 430.136343][ T1166] bond11 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 430.146302][ T1166] bond11 (unregistering): (slave ip6gretap2): Releasing backup interface [ 430.228359][T22938] sctp: [Deprecated]: syz.3.4732 (pid 22938) Use of int in max_burst socket option deprecated. [ 430.228359][T22938] Use struct sctp_assoc_value instead [ 430.256630][ T1166] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 430.270927][ T1166] bond8 (unregistering): (slave gretap2): Releasing active interface [ 430.385571][ T1166] bond0 (unregistering): (slave team0): Releasing backup interface [ 430.396404][ T1166] bond0 (unregistering): Released all slaves [ 430.408868][ T1166] bond1 (unregistering): Released all slaves [ 430.421652][ T1166] bond2 (unregistering): Released all slaves [ 430.436883][ T1166] bond3 (unregistering): Released all slaves [ 430.451995][ T1166] bond4 (unregistering): Released all slaves [ 430.464066][ T1166] bond5 (unregistering): Released all slaves [ 430.476930][ T1166] bond6 (unregistering): Released all slaves [ 430.491250][ T1166] bond7 (unregistering): Released all slaves [ 430.504130][ T1166] bond8 (unregistering): Released all slaves [ 430.516405][ T1166] bond9 (unregistering): Released all slaves [ 430.538476][ T1166] bond10 (unregistering): Released all slaves [ 430.551015][ T1166] bond11 (unregistering): Released all slaves [ 430.700280][ T1166] tipc: Disabling bearer [ 430.751594][ T1166] tipc: Left network mode [ 430.824938][T22961] netlink: 'syz.3.4738': attribute type 7 has an invalid length. [ 430.859175][T22962] netlink: 'syz.4.4739': attribute type 3 has an invalid length. [ 430.878635][T22961] netlink: 'syz.3.4738': attribute type 8 has an invalid length. [ 430.945754][T22962] netlink: 'syz.4.4739': attribute type 1 has an invalid length. [ 430.955915][T22962] netlink: 'syz.4.4739': attribute type 2 has an invalid length. [ 430.986709][T22972] netlink: 'syz.2.4740': attribute type 1 has an invalid length. [ 431.027843][T22972] syzkaller0: entered promiscuous mode [ 431.035431][T22972] syzkaller0: entered allmulticast mode [ 431.167342][T22982] netlink: 'syz.1.4743': attribute type 4 has an invalid length. [ 431.293051][T22989] __nla_validate_parse: 4 callbacks suppressed [ 431.293070][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4745'. [ 431.321944][T22993] netlink: 'syz.2.4746': attribute type 15 has an invalid length. [ 431.346422][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 431.413360][T22998] xt_l2tp: v2 doesn't support IP mode [ 431.433015][T23000] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.4749'. [ 431.444202][ T9300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 431.457351][T22997] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4748'. [ 431.485766][ T9300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 431.532579][ T9300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 431.911266][T23024] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4753'. [ 432.053070][T22918] Bluetooth: hci5: command 0x0406 tx timeout [ 432.059867][T22918] Bluetooth: hci3: command 0x0406 tx timeout [ 432.454199][ T12] smc: removing ib device syz2 [ 432.575382][ T1166] team0 (unregistering): Port device dummy0 removed [ 432.728846][T23051] netlink: 'syz.0.4762': attribute type 1 has an invalid length. [ 432.748363][T23051] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4762'. [ 432.771870][T23051] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4762'. [ 432.781341][T23051] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4762'. [ 432.810708][ T12] smbdirect: ib_dev[syz2] removed [ 433.094602][T23076] netlink: 'syz.1.4769': attribute type 1 has an invalid length. [ 433.139278][T23062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4766'. [ 433.456910][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4772'. [ 434.508735][T23119] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 434.623086][T23125] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 434.703598][T23128] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 434.741782][T23124] syzkaller0: entered promiscuous mode [ 434.766471][T23124] syzkaller0: entered allmulticast mode [ 434.867383][ T1166] IPVS: stop unused estimator thread 0... [ 435.128032][T23157] netlink: 'syz.2.4794': attribute type 1 has an invalid length. [ 435.468139][T23183] xt_HMARK: proto mask must be zero with L3 mode [ 435.602157][T23189] 8021q: adding VLAN 0 to HW filter on device bond9 [ 435.679366][T23189] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 435.703445][T23194] tipc: Enabled bearer , priority 0 [ 435.715122][T23194] syzkaller0: entered promiscuous mode [ 435.723172][T23194] syzkaller0: entered allmulticast mode [ 435.786522][T23189] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.799380][T23189] bond9: (slave bond10): Enslaving as an active interface with a down link [ 435.814978][T23194] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 435.834556][T23206] tipc: Resetting bearer [ 435.863585][T23193] tipc: Resetting bearer [ 435.912556][T23193] tipc: Disabling bearer [ 436.337506][T23241] __nla_validate_parse: 16 callbacks suppressed [ 436.337550][T23241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4820'. [ 436.524862][T23261] validate_nla: 1 callbacks suppressed [ 436.524883][T23261] netlink: 'syz.3.4827': attribute type 1 has an invalid length. [ 436.560962][T23261] 8021q: adding VLAN 0 to HW filter on device bond11 [ 436.601477][T23261] bond11: (slave geneve3): making interface the new active one [ 436.626489][T23261] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 436.665538][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.710601][T23257] tipc: Enabled bearer , priority 0 [ 436.833537][T23257] syzkaller0: entered promiscuous mode [ 436.839223][T23257] syzkaller0: entered allmulticast mode [ 436.846741][T23257] tipc: Resetting bearer [ 436.853864][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.905421][T23274] 8021q: adding VLAN 0 to HW filter on device bond12 [ 436.914187][T23274] bond0: (slave bond12): Enslaving as an active interface with an up link [ 436.924709][T23253] tipc: Resetting bearer [ 436.946619][T23282] ipt_REJECT: TCP_RESET invalid for non-tcp [ 437.079486][T23253] tipc: Disabling bearer [ 437.094332][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.104584][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.118007][T23282] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 437.188894][T23291] netlink: 41 bytes leftover after parsing attributes in process `syz.3.4834'. [ 437.224281][T23291] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4834'. [ 437.253053][T23291] netlink: 41 bytes leftover after parsing attributes in process `syz.3.4834'. [ 437.392443][T23299] syzkaller0: entered promiscuous mode [ 437.411660][T23299] syzkaller0: entered allmulticast mode [ 437.504712][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4842'. [ 437.636423][T23324] sctp: [Deprecated]: syz.3.4844 (pid 23324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.636423][T23324] Use struct sctp_sack_info instead [ 438.020806][T23344] netlink: 'syz.0.4851': attribute type 1 has an invalid length. [ 438.023860][T23343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4853'. [ 438.091088][T23348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4854'. [ 438.180727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.255329][T23349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.370929][T23349] batman_adv: batadv0: Interface activated: gretap1 [ 438.404409][T23349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.414189][T23349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.425635][T23349] 8021q: adding VLAN 0 to HW filter on device team1 [ 438.438511][ T2174] lo speed is unknown, defaulting to 1000 [ 438.444952][ T2174] sy2: Port: 1 Link ACTIVE [ 438.490314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.556768][T23357] bond7: entered allmulticast mode [ 438.570263][T23357] ip6gre2: entered allmulticast mode [ 438.637542][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4858'. [ 438.668947][T23376] netlink: 'syz.2.4858': attribute type 1 has an invalid length. [ 438.686167][T23341] bond7: left allmulticast mode [ 438.693582][T23376] netlink: 'syz.2.4858': attribute type 1 has an invalid length. [ 438.704844][T23341] ip6gre2: left allmulticast mode [ 438.717374][T23376] netlink: 'syz.2.4858': attribute type 2 has an invalid length. [ 438.738075][T23384] netlink: 'syz.1.4860': attribute type 11 has an invalid length. [ 438.747363][T23376] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4858'. [ 438.757285][T23384] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.4860'. [ 438.818301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.156987][T23402] netlink: 'syz.1.4866': attribute type 2 has an invalid length. [ 439.181005][T23402] netlink: 'syz.1.4866': attribute type 1 has an invalid length. [ 439.477955][T23416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.801784][T23407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.811228][T23407] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.826036][T23407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.873757][T23407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.888806][T23407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.905208][T23434] netlink: 'syz.4.4874': attribute type 1 has an invalid length. [ 439.917530][T23434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.926607][T23407] veth1_vlan: left promiscuous mode [ 439.933763][T23407] veth0_vlan: left promiscuous mode [ 439.942402][T23407] veth0_vlan: entered promiscuous mode [ 439.955172][T23407] veth1_vlan: entered promiscuous mode [ 439.972034][T23407] veth1_macvtap: left promiscuous mode [ 439.982608][T23407] veth0_macvtap: entered promiscuous mode [ 439.994274][T23407] veth1_macvtap: entered promiscuous mode [ 440.009931][T23407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.024401][T23407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.034981][T23407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.044766][T23407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.056411][T23407] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 440.211211][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 440.221863][ T1166] bond9: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 440.252305][ T1166] bond9: (slave veth0_to_bond): making interface the new active one [ 440.273704][ T1166] bond9: active interface up! [ 440.330539][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.401486][T23452] netlink: 'syz.0.4881': attribute type 1 has an invalid length. [ 440.426293][T23452] bond5: entered promiscuous mode [ 440.432329][T23452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.460732][T23452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.474582][T23452] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 440.485305][T23452] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 440.498547][T23452] bond5: (slave ip6gre2): making interface the new active one [ 440.508769][T23452] ip6gre2: entered promiscuous mode [ 440.516192][T23452] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 440.583944][T23459] syzkaller1: entered promiscuous mode [ 440.599800][T23459] syzkaller1: entered allmulticast mode [ 440.674774][T23465] netlink: 'syz.0.4885': attribute type 1 has an invalid length. [ 440.700143][ T5742] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.807582][T23470] 8021q: adding VLAN 0 to HW filter on device bond13 [ 440.834090][T23471] syzkaller1: entered promiscuous mode [ 440.840069][T23471] syzkaller1: entered allmulticast mode [ 440.968601][ T9300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.993454][T23481] can: request_module (can-proto-0) failed. [ 441.208985][T23496] syzkaller0: entered promiscuous mode [ 441.227240][T23496] syzkaller0: entered allmulticast mode [ 441.581185][T23521] __nla_validate_parse: 5 callbacks suppressed [ 441.581219][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4902'. [ 441.683975][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'. [ 441.738828][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4910'. [ 441.754565][T23542] Cannot find set identified by id 65534 to match [ 441.766751][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4910'. [ 441.955217][T23552] validate_nla: 3 callbacks suppressed [ 441.955272][T23552] netlink: 'syz.0.4913': attribute type 1 has an invalid length. [ 441.968775][T23554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.981100][ T9300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.997304][ T9300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.013378][T23556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'. [ 442.022940][T23552] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4913'. [ 442.061216][T23555] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4912'. [ 442.261652][ T7834] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.288274][T23567] vlan1: entered allmulticast mode [ 442.303383][T23567] veth1_virt_wifi: entered allmulticast mode [ 442.377278][T23567] ipt_REJECT: TCP_RESET invalid for non-tcp [ 442.484620][T23584] netlink: 'syz.4.4923': attribute type 9 has an invalid length. [ 442.527188][T23584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4923'. [ 442.627474][T23594] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4927'. [ 442.640385][T23586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.765178][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 442.806254][T23606] vlan0: entered promiscuous mode [ 442.846536][T23601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.902714][T23601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.023825][T23601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.046484][T23601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.149083][T23601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.171334][T23601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.222496][T23623] netlink: 'syz.0.4932': attribute type 12 has an invalid length. [ 443.281628][T23601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.313200][T23601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.458000][ T6081] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.487054][ T6081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.519953][ T6081] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.540801][ T6081] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.557700][T23601] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.569050][T23601] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.584350][ T6081] ================================================================== [ 443.592580][ T6081] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 443.600380][ T6081] Read of size 8 at addr ffff888031af30a8 by task kworker/u8:12/6081 [ 443.608583][ T6081] [ 443.611010][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 443.611077][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.611093][ T6081] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 443.611212][ T6081] Call Trace: [ 443.611253][ T6081] [ 443.611311][ T6081] dump_stack_lvl+0xe8/0x150 [ 443.611425][ T6081] print_address_description+0x55/0x1e0 [ 443.611454][ T6081] ? __mutex_lock+0x154/0x1550 [ 443.611482][ T6081] print_report+0x58/0x70 [ 443.611501][ T6081] kasan_report+0x117/0x150 [ 443.611568][ T6081] ? rcu_is_watching+0x15/0xb0 [ 443.611612][ T6081] ? __mutex_lock+0x154/0x1550 [ 443.611644][ T6081] __mutex_lock+0x154/0x1550 [ 443.611673][ T6081] ? __mutex_lock+0x5d4/0x1550 [ 443.611702][ T6081] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 443.611731][ T6081] ? __pfx___mutex_lock+0x10/0x10 [ 443.611758][ T6081] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.611796][ T6081] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.611819][ T6081] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 443.611862][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 443.611886][ T6081] ? rcu_is_watching+0x15/0xb0 [ 443.611907][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 443.611932][ T6081] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 443.611964][ T6081] ? rcu_is_watching+0x15/0xb0 [ 443.611986][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 443.612011][ T6081] process_scheduled_works+0xa8e/0x14e0 [ 443.612052][ T6081] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.612077][ T6081] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.612109][ T6081] ? assign_work+0x3cf/0x5d0 [ 443.612134][ T6081] worker_thread+0xa47/0xfb0 [ 443.612176][ T6081] kthread+0x388/0x470 [ 443.612195][ T6081] ? __pfx_worker_thread+0x10/0x10 [ 443.612220][ T6081] ? __pfx_kthread+0x10/0x10 [ 443.612240][ T6081] ret_from_fork+0x514/0xb70 [ 443.612273][ T6081] ? __pfx_ret_from_fork+0x10/0x10 [ 443.612294][ T6081] ? __switch_to+0xc89/0x1420 [ 443.612324][ T6081] ? __pfx_kthread+0x10/0x10 [ 443.612343][ T6081] ret_from_fork_asm+0x1a/0x30 [ 443.612375][ T6081] [ 443.612392][ T6081] [ 443.816854][ T6081] Allocated by task 23601: [ 443.821478][ T6081] kasan_save_track+0x3e/0x80 [ 443.826204][ T6081] __kasan_kmalloc+0x93/0xb0 [ 443.830850][ T6081] __kmalloc_noprof+0x358/0x750 [ 443.835803][ T6081] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 443.842008][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 443.847171][ T6081] register_netdevice+0x18a4/0x1eb0 [ 443.852937][ T6081] nsim_create+0xbd7/0x1140 [ 443.857623][ T6081] __nsim_dev_port_add+0x7f8/0xcd0 [ 443.862780][ T6081] nsim_dev_port_add_all+0x37/0xf0 [ 443.867934][ T6081] nsim_dev_reload_up+0x4dd/0x880 [ 443.873004][ T6081] devlink_reload+0x4b2/0x890 [ 443.877893][ T6081] devlink_nl_reload_doit+0xa9c/0xc80 [ 443.883314][ T6081] genl_family_rcv_msg_doit+0x233/0x340 [ 443.888990][ T6081] genl_rcv_msg+0x614/0x7a0 [ 443.893527][ T6081] netlink_rcv_skb+0x226/0x4a0 [ 443.898408][ T6081] genl_rcv+0x28/0x40 [ 443.902427][ T6081] netlink_unicast+0x7bb/0x940 [ 443.907249][ T6081] netlink_sendmsg+0x813/0xb40 [ 443.912063][ T6081] ____sys_sendmsg+0x9b9/0xa20 [ 443.916990][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 443.921717][ T6081] __x64_sys_sendmsg+0x1b1/0x290 [ 443.926729][ T6081] do_syscall_64+0x174/0x580 [ 443.931500][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.937457][ T6081] [ 443.939807][ T6081] Freed by task 23601: [ 443.943985][ T6081] kasan_save_track+0x3e/0x80 [ 443.948699][ T6081] kasan_save_free_info+0x40/0x50 [ 443.953766][ T6081] __kasan_slab_free+0x5c/0x80 [ 443.958576][ T6081] kfree+0x1c5/0x640 [ 443.962602][ T6081] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 443.968890][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 443.974059][ T6081] unregister_netdevice_many_notify+0x17de/0x2150 [ 443.980563][ T6081] unregister_netdevice_queue+0x2f5/0x340 [ 443.986320][ T6081] nsim_destroy+0x26d/0x800 [ 443.990871][ T6081] __nsim_dev_port_del+0x14e/0x200 [ 443.996113][ T6081] nsim_dev_port_add_all+0xae/0xf0 [ 444.001273][ T6081] nsim_dev_reload_up+0x4dd/0x880 [ 444.006415][ T6081] devlink_reload+0x4b2/0x890 [ 444.011126][ T6081] devlink_nl_reload_doit+0xa9c/0xc80 [ 444.016539][ T6081] genl_family_rcv_msg_doit+0x233/0x340 [ 444.022132][ T6081] genl_rcv_msg+0x614/0x7a0 [ 444.026667][ T6081] netlink_rcv_skb+0x226/0x4a0 [ 444.031475][ T6081] genl_rcv+0x28/0x40 [ 444.035494][ T6081] netlink_unicast+0x7bb/0x940 [ 444.040301][ T6081] netlink_sendmsg+0x813/0xb40 [ 444.045124][ T6081] ____sys_sendmsg+0x9b9/0xa20 [ 444.049926][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 444.054650][ T6081] __x64_sys_sendmsg+0x1b1/0x290 [ 444.059632][ T6081] do_syscall_64+0x174/0x580 [ 444.064260][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.070185][ T6081] [ 444.072530][ T6081] Last potentially related work creation: [ 444.078303][ T6081] kasan_save_stack+0x3e/0x60 [ 444.083029][ T6081] kasan_record_aux_stack+0xbd/0xd0 [ 444.088267][ T6081] insert_work+0x3d/0x330 [ 444.092643][ T6081] __queue_work+0xb7c/0xff0 [ 444.097185][ T6081] queue_work_on+0x106/0x1d0 [ 444.101816][ T6081] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 444.107489][ T6081] udp_tunnel_push_rx_port+0x169/0x1f0 [ 444.112981][ T6081] geneve_offload_rx_ports+0xc7/0x150 [ 444.118510][ T6081] geneve_netdevice_event+0x6a/0x80 [ 444.123739][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 444.128895][ T6081] call_netdevice_notifiers+0x90/0xd0 [ 444.134388][ T6081] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 444.140607][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 444.145803][ T6081] register_netdevice+0x18a4/0x1eb0 [ 444.151036][ T6081] nsim_create+0xbd7/0x1140 [ 444.155578][ T6081] __nsim_dev_port_add+0x7f8/0xcd0 [ 444.160730][ T6081] nsim_dev_port_add_all+0x37/0xf0 [ 444.165879][ T6081] nsim_dev_reload_up+0x4dd/0x880 [ 444.170943][ T6081] devlink_reload+0x4b2/0x890 [ 444.175656][ T6081] devlink_nl_reload_doit+0xa9c/0xc80 [ 444.181059][ T6081] genl_family_rcv_msg_doit+0x233/0x340 [ 444.186637][ T6081] genl_rcv_msg+0x614/0x7a0 [ 444.191173][ T6081] netlink_rcv_skb+0x226/0x4a0 [ 444.196015][ T6081] genl_rcv+0x28/0x40 [ 444.200031][ T6081] netlink_unicast+0x7bb/0x940 [ 444.204843][ T6081] netlink_sendmsg+0x813/0xb40 [ 444.209651][ T6081] ____sys_sendmsg+0x9b9/0xa20 [ 444.214494][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 444.219212][ T6081] __x64_sys_sendmsg+0x1b1/0x290 [ 444.224209][ T6081] do_syscall_64+0x174/0x580 [ 444.228835][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.234764][ T6081] [ 444.237110][ T6081] Second to last potentially related work creation: [ 444.243792][ T6081] kasan_save_stack+0x3e/0x60 [ 444.248511][ T6081] kasan_record_aux_stack+0xbd/0xd0 [ 444.253760][ T6081] insert_work+0x3d/0x330 [ 444.258124][ T6081] __queue_work+0xcb6/0xff0 [ 444.262668][ T6081] queue_work_on+0x106/0x1d0 [ 444.267303][ T6081] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 444.272981][ T6081] udp_tunnel_push_rx_port+0x169/0x1f0 [ 444.278493][ T6081] vxlan_offload_rx_ports+0x129/0x1f0 [ 444.283987][ T6081] vxlan_netdevice_event+0x111/0x490 [ 444.289302][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 444.294453][ T6081] call_netdevice_notifiers+0x90/0xd0 [ 444.299859][ T6081] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 444.306044][ T6081] notifier_call_chain+0x1a5/0x3d0 [ 444.311187][ T6081] register_netdevice+0x18a4/0x1eb0 [ 444.316402][ T6081] nsim_create+0xbd7/0x1140 [ 444.320933][ T6081] __nsim_dev_port_add+0x7f8/0xcd0 [ 444.326077][ T6081] nsim_dev_port_add_all+0x37/0xf0 [ 444.331236][ T6081] nsim_dev_reload_up+0x4dd/0x880 [ 444.336301][ T6081] devlink_reload+0x4b2/0x890 [ 444.341015][ T6081] devlink_nl_reload_doit+0xa9c/0xc80 [ 444.346418][ T6081] genl_family_rcv_msg_doit+0x233/0x340 [ 444.351997][ T6081] genl_rcv_msg+0x614/0x7a0 [ 444.356543][ T6081] netlink_rcv_skb+0x226/0x4a0 [ 444.361342][ T6081] genl_rcv+0x28/0x40 [ 444.365355][ T6081] netlink_unicast+0x7bb/0x940 [ 444.370145][ T6081] netlink_sendmsg+0x813/0xb40 [ 444.375127][ T6081] ____sys_sendmsg+0x9b9/0xa20 [ 444.379933][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 444.384644][ T6081] __x64_sys_sendmsg+0x1b1/0x290 [ 444.389618][ T6081] do_syscall_64+0x174/0x580 [ 444.394247][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.400166][ T6081] [ 444.402504][ T6081] The buggy address belongs to the object at ffff888031af3000 [ 444.402504][ T6081] which belongs to the cache kmalloc-256 of size 256 [ 444.416669][ T6081] The buggy address is located 168 bytes inside of [ 444.416669][ T6081] freed 256-byte region [ffff888031af3000, ffff888031af3100) [ 444.430519][ T6081] [ 444.432864][ T6081] The buggy address belongs to the physical page: [ 444.439309][ T6081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31af2 [ 444.448189][ T6081] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 444.456719][ T6081] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 444.464324][ T6081] page_type: f5(slab) [ 444.468329][ T6081] raw: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 444.476937][ T6081] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 444.485544][ T6081] head: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 444.494239][ T6081] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 444.502939][ T6081] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 444.511647][ T6081] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 444.520336][ T6081] page dumped because: kasan: bad access detected [ 444.526798][ T6081] page_owner tracks the page as allocated [ 444.532530][ T6081] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19175957029, free_ts 0 [ 444.552273][ T6081] post_alloc_hook+0x22d/0x280 [ 444.557076][ T6081] get_page_from_freelist+0x24ae/0x2530 [ 444.562658][ T6081] __alloc_frozen_pages_noprof+0x18d/0x380 [ 444.568500][ T6081] allocate_slab+0x74/0x5d0 [ 444.573039][ T6081] refill_objects+0x328/0x3c0 [ 444.577734][ T6081] __pcs_replace_empty_main+0x2e0/0x6b0 [ 444.583323][ T6081] __kvmalloc_node_noprof+0x642/0x890 [ 444.588722][ T6081] v4l2_ctrl_new+0xa5a/0x1820 [ 444.593628][ T6081] v4l2_ctrl_new_std+0x24e/0x300 [ 444.598591][ T6081] vivid_create_controls+0x2729/0x3c50 [ 444.604194][ T6081] vivid_probe+0x410f/0x70e0 [ 444.608813][ T6081] platform_probe+0xf9/0x190 [ 444.613505][ T6081] really_probe+0x254/0xae0 [ 444.618089][ T6081] __driver_probe_device+0x1e8/0x360 [ 444.623411][ T6081] driver_probe_device+0x4f/0x240 [ 444.628477][ T6081] __driver_attach+0x339/0x600 [ 444.633272][ T6081] page_owner free stack trace missing [ 444.638659][ T6081] [ 444.641003][ T6081] Memory state around the buggy address: [ 444.646721][ T6081] ffff888031af2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 444.654844][ T6081] ffff888031af3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.662921][ T6081] >ffff888031af3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.671001][ T6081] ^ [ 444.676391][ T6081] ffff888031af3100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 444.684471][ T6081] ffff888031af3180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 444.692550][ T6081] ================================================================== [ 444.709376][ T6081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 444.716748][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 444.726326][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.736407][ T6081] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 444.743726][ T6081] Call Trace: [ 444.747024][ T6081] [ 444.749976][ T6081] vpanic+0x56c/0xa60 [ 444.753987][ T6081] ? __pfx_vpanic+0x10/0x10 [ 444.758508][ T6081] ? rcu_is_watching+0x15/0xb0 [ 444.763336][ T6081] panic+0xc5/0xd0 [ 444.767075][ T6081] ? __pfx_panic+0x10/0x10 [ 444.771598][ T6081] ? __mutex_lock+0x154/0x1550 [ 444.776459][ T6081] ? __mutex_lock+0x154/0x1550 [ 444.781261][ T6081] check_panic_on_warn+0x89/0xb0 [ 444.786243][ T6081] ? __mutex_lock+0x154/0x1550 [ 444.791029][ T6081] end_report+0x73/0x170 [ 444.795293][ T6081] ? __mutex_lock+0x154/0x1550 [ 444.800083][ T6081] kasan_report+0x128/0x150 [ 444.804625][ T6081] ? rcu_is_watching+0x15/0xb0 [ 444.809411][ T6081] ? __mutex_lock+0x154/0x1550 [ 444.814202][ T6081] __mutex_lock+0x154/0x1550 [ 444.818820][ T6081] ? __mutex_lock+0x5d4/0x1550 [ 444.823602][ T6081] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 444.829882][ T6081] ? __pfx___mutex_lock+0x10/0x10 [ 444.834950][ T6081] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.840003][ T6081] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 444.845407][ T6081] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 444.850805][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 444.856562][ T6081] ? rcu_is_watching+0x15/0xb0 [ 444.861351][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 444.867093][ T6081] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 444.873186][ T6081] ? rcu_is_watching+0x15/0xb0 [ 444.877965][ T6081] ? process_scheduled_works+0xa20/0x14e0 [ 444.883706][ T6081] process_scheduled_works+0xa8e/0x14e0 [ 444.889289][ T6081] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.895289][ T6081] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.900342][ T6081] ? assign_work+0x3cf/0x5d0 [ 444.904973][ T6081] worker_thread+0xa47/0xfb0 [ 444.909713][ T6081] kthread+0x388/0x470 [ 444.913808][ T6081] ? __pfx_worker_thread+0x10/0x10 [ 444.918941][ T6081] ? __pfx_kthread+0x10/0x10 [ 444.923547][ T6081] ret_from_fork+0x514/0xb70 [ 444.928156][ T6081] ? __pfx_ret_from_fork+0x10/0x10 [ 444.933292][ T6081] ? __switch_to+0xc89/0x1420 [ 444.938008][ T6081] ? __pfx_kthread+0x10/0x10 [ 444.942631][ T6081] ret_from_fork_asm+0x1a/0x30 [ 444.947435][ T6081] [ 444.951093][ T6081] Kernel Offset: disabled [ 444.955424][ T6081] Rebooting in 86400 seconds..